Collaborate with other similar projects

[andrewrynhard]

:wave: Hi there! I am the creator of Talos. I feel that a lot of what is being discussed around this project is something we have been doing for a while now. The README of this repo states:

The main idea behind this repository is to collect ideas and proposals around a new operating system focused on security and with the specific duty of running Kubernetes in the easiest possible way.

This is exactly what we have done with Talos:

• vanilla KSPP compliant kernel
• just enough to run the kubelet
  • containerd
  • Talos services responsible for handling common Linux taks (networking, init system, disk management, etc.)
• security focused
  • enforces CIS benchmarks
  • enforces KSPP requirements
  • no shell
  • no ssh
  • read only file system (squashfs)
  • ephemeral (runs completely in RAM)
  • plans for Linux IMA integration (currently enabled without appraisal)
  • immutable
  • API driven, secured via mutual TLS
  • built in operations intelligence for managing Kubernetes
  • written almost entirely in go
• everything runs as a container

I could probably go on for a while listing some of the things we have done, but the point is that Talos might possibly server as either a great reference, a starting point for this project, or the project in which you all can help with.

I have no problem with having more projects that aim to do something similar to Talos, it validates a lot of the decisions we have made, but I think we can get a lot more done if we work together. This kind of OS is the future, IMHO, but we need enough critical mass to make it happen. In the same way that the industry is coming together to build and standardize container orchestration, I'd love to see a community form around the standardization of these next gen Linux distros.

What that means for this project or Talos, I don't know, but I feel like we should at least throw up a zoom and have a discussion around this all.

[fntlnz]

Hi @andrewrynhard - thanks for dropping a line here! We will be happy to talk about collaborating in this space!