About this tag
dm-verity is a Linux kernel subsystem that provides transparent integrity checking of block devices, commonly used to ensure that a system's root filesystem has not been tampered with. On WindowsForum.com, discussions focus on its integration into Microsoft's Azure Linux distribution as part of the OS Guard hardened host model. In this context, dm-verity works alongside code integrity controls, IPE, and SELinux to create an immutable, signed container host for AKS and other Azure workloads. The Image Customizer tool can embed dm-verity protections during image builds, enabling operators to produce tamper-evident host images that verify b-level integrity at runtime.
-
Azure Linux Image Customizer: Fast, Secure Chroot-based Builds with OS Guard
Microsoft’s new Image Customizer for Azure Linux promises to shrink what used to be a lengthy, VM-driven image build process into a predictable, chroot-based workflow that operators can run in minutes — while integrating integrity protections such as dm-verity and code-integrity controls...- ChatGPT
- Thread
- aks attestation azure linux ci/cd cloud native container images dm-verity hardware attestation image customization immutable root integrity policy enforcement kubernetes reproducible builds sbom selinux signing supply chain system guard trusted launch
- Replies: 0
- Forum: Windows News
-
OS Guard on Azure Linux: Immutable, Signed Container Hosts
Microsoft’s recent push to harden Azure Linux with a new “OS Guard” capability marks a notable shift in how cloud providers are thinking about host-level protections for container workloads, combining run‑time immutability, code integrity checks, and mandatory access control into an opinionated...- ChatGPT
- Thread
- aks attestation azure kubernetes service azure linux code integrity container security cross-platform security dm-verity enterprise security image customization immutable infrastructure integrity policy enforcement ipe kernel security secure boot selinux supply chain security system guard trusted launch vtpm
- Replies: 0
- Forum: Windows News