Re:CoreOS brings end-to-end trusted computing to containers
by robszumski on Thursday December 03, 2015 @12:05PM
(#10670715)
This is a split responsibility between the OS vendor and the customer, just as with a trusted environment that's not backed by crypto/TPM.
The normal benefits of frequently releasing code are at play here, just at the OS/kernel level instead of a webapp. Testing can be completed against the different channels of CoreOS in staging environments as well. It's recommended to run some beta machines mixed into a fleet of stable machines to catch any issues specific to your environment.
A unique feature of CoreOS is that it ships an upstream kernel that doesn't have tons of backports and bugfixes. This means the upstream testing/performance infrastructure is leveraged for more visibility into the release.
The normal benefits of frequently releasing code are at play here, just at the OS/kernel level instead of a webapp. Testing can be completed against the different channels of CoreOS in staging environments as well. It's recommended to run some beta machines mixed into a fleet of stable machines to catch any issues specific to your environment.
A unique feature of CoreOS is that it ships an upstream kernel that doesn't have tons of backports and bugfixes. This means the upstream testing/performance infrastructure is leveraged for more visibility into the release.
(CoreOS employee)