Building Container Images with OpenEmbedded and the Yocto Project

Explore container image building using OpenEmbedded and the Yocto Project in this 51-minute Linux Foundation conference talk. Delve into the advantages of these tools for creating custom container images, focusing on size optimization, reproducibility, security vulnerability management, and license compliance. Learn about available options for container image construction with OpenEmbedded, complete with practical examples. Gain insights into container virtualization for both server environments and embedded systems, addressing concerns about image content security and reproducibility. Discover how to leverage OpenEmbedded's package availability, build processes, and configuration options to create minimal and small images suitable for various use cases. Examine topics such as sandboxing, multiconfig builds, and system spawning techniques. Presented by Scott Murray, a seasoned embedded Linux engineer from Konsulko Group, this talk offers valuable knowledge for developers working with containerization in embedded systems and server environments.

Introduction
Agenda
Disclaimer
Summary
Features
Containers
Use Cases
Drawbacks
License Compliance
OpenEmbedded
Package Availability
Container Mechanics
Token Labs
Why use OpenEmbedded
Example Build Container
Build Process
SystemVN Spawn
V86D
Muscle
Image Manifest
Package Management
Custom District Configuration
minimal app container
build a minimal image
build a small image
a couple notes
Sandboxing example
Other approaches
Example
Multiconfig
Multiconfig Overview
Multiconfig Version
OpenEmbedded Maintainer
Limitations
Questions