DevConf.cz 2022 has ended
Back To Schedule
Saturday, January 29 • 3:30pm - 3:55pm
Have the Performance Cake and Eat Securely Too

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

It is a well known fact that there exist trade-offs between fully securiting applications and the applications respective performance. But what if it was possible to have optimally performing applications and maintain proper security guards?

Recently, CRI-O has optimized handling of SELinux labeling of volumes. Before, a large volume would be relabeled for the container so it could access it, but other (potentially malicious) containers could not. This labeling delay would happen for every container creation, and caused timeouts and platform delays.

Join Sascha Grunert and Peter Hunt as they walk through the optimizations, performance implications, and trade-offs of these recent improvements. At the end of the talk, audience members should find out it can be possible get the best of boths worlds with high security and optimal performance.

Session chairs: Michal Ruprich and Lucie Vrtelova


Peter Hunt

Senior Software Engineer, Red Hat
Peter Hunt is a Senior Software Engineer working on Openshift at Red Hat. Passionate about free software, Peter focuses on maintaining CRI-O, attending SIG node, and ~writing~ squashing bugs. Outside of the virtual world, Peter likes collecting floral-printed pants, gardening, and... Read More →
avatar for Sascha Grunert

Sascha Grunert

Senior Software Engineer, Red Hat
Sascha is a Senior Software Engineer at Red Hat, where he works on many different container related open-source projects like Kubernetes and CRI-O. He joined the open-source community in November 2018, having gained container experience before. Sascha's passions include contributing... Read More →

Saturday January 29, 2022 3:30pm - 3:55pm CET
Session Room 2