Improve container security with automated base image updates - Wietse Venema

This talk focuses on the challenges of managing container base image updates at scale, particularly the difficulty of rebuilding all container images for urgent updates. The speaker discusses the technique of rebasing container images, which enables the replacement of base image layers without complete rebuilds. Wietse Venema shares insights from Google’s automated base image updates for customers using App Engine and Cloud Functions, and demonstrates how to replicate this process using open source tools. As a member of the Cloud Run team at Google, Wietse brings valuable experience in programming and debugging to the session.