How I Met Your Software - An Image's Journey of Consuming and Securing Software in Cloud Native

Explore the journey of an OCI Image in this engaging 24-minute conference talk from CNCF's KubeCon + CloudNativeCon. Delve into the world of software consumption and security in cloud-native environments, following the image's story from creation to deployment as a Kubernetes workload. Examine the tradeoffs between obtaining software through distributions versus direct project sources, and learn about the rise of open-source software repositories. Compare techniques for choosing consumer software across various distributions like Alpine and Wolfi, and discover how they balance rapid updates with robust supply chain security. Gain insights into fine-tuning images for Kubernetes workloads and understand the complexities of securely deploying software in cloud-native ecosystems.