https://peertube.watch/videos/watch/8b9f70fe-3c30-4106-983a-3cea988676e8 An UKI (Unified Kernel Image) is a single executable which can be booted directly from UEFI firmware, or automatically sourced by boot-loaders with little or no configuration. UKI technology is a main building block for Linux on Confidential Virtual Machines. However, UKIs are immutable, meaning that once created it won't be possible to safely change/extend kernel command line or initrd modules without creating a new UKI. This session will firstly review what an UKI is and why is it useful especially for Confidential Computing, then explain the current immutability challenges that it brings, the various approach that were proposed, and which solution is currently deployed. The topic covered are UKI addons, sysext extensions, and sbat rules. Speaker: Emanuele Giuseppe Esposito, Track: Virtualization and Cloud Infrastructure devroom, Room: UB2.147, When: Saturday 3 February 2024, 11:30–12:00 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Slides, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “UKI addons and extensions: safely extending UKIs kernel command line and initrd” by Emanuele Giuseppe Esposito, FOSDEM 2024. Original recording: 2024/ub2147/fosdem-2024-2024-uki-addons-and-extensions-safely-extending-ukis-kernel-command-line-and-initrd.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Thu, 15 Oct 2026 07:05:15 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/8b9f70fe-3c30-4106-983a-3cea988676e8 All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.