generation ● SDK generation and licence information and source package extraction ● Reduce image footprint ● Own application integration E.L.B.E. Limitations using Debian & E.L.B.E. ● Only limited number generation ● SDK generation and licence information and source package extraction ● Reduce image footprint ● Own application integration 3) Benefit of a combination ★ Yocto + Debian = ? Yocto + Debian app integration HW-specific SW like kernel / bootloader buildable Use Debian sources Default footprint / reducible? 10MB 300MB / with Yocto methods 300MB / not yet Non-Debian archs buildable use an

ContainerOS Current Implementation Iteration is key ● Move back to eBPF module to reduce our OS footprint ● Smarter rules based on user behavior ● Automatically respond to malicious actions without

event such as a system update. Function Description Snapshot • The snapshot has a smaller footprint as it saves just the differences (partition 3 in Figure 7.1) compared to the out-of-factory rootfs to restore the computer that the snapshot was taken from. Backup • The backup has a larger footprint as it saves the entire system including the out-of-factory rootfs. • The backup can be exported

etcd. There is still some work to be done to optimize the memory footprint of BPF maps even further, as well as reducing the memory footprint of the Cilium agent. We will address those in the next Cilium

etcd. There is still some work to be done to optimize the memory footprint of eBPF maps even further, as well as reducing the memory footprint of the Cilium agent. We will address those in the next Cilium

etcd. There is still some work to be done to optimize the memory footprint of eBPF maps even further, as well as reducing the memory footprint of the Cilium agent. We will address those in the next Cilium

etcd. There is still some work to be done to optimize the memory footprint of eBPF maps even further, as well as reducing the memory footprint of the Cilium agent. We will address those in the next Cilium

(e.g. in IoT devices), or where the cost of using resources is a factor, thanks to their small footprint and overall efficiency. QEMU microVMs QEMU provides additional components that were added to support