Laissez le bon TUF rouler

Let the TUF times roll! How do we securely distribute updates from a container package repository to hosts running containers? This talk will give an overview of several trust solutions, and how they fail to provide freshness guarantees or prevent Man-in-the-middle attacks. Then it will discuss how The Update Framework addresses these problems, and explain how CoreOS implements a trust solution using the Updated Framework in the Quay container registry. CoreOS Fest 2017 Evan Cordell