Loading…
Timezone
NOTE: The event will be held in Central Daylight Time (CDT), UTC -5.

View More Details for Open Source Summit + Embedded Linux Conference North America 2020
Registration Information.
Back To Schedule
Tuesday, June 30 • 2:00pm - 2:50pm
5 Years of Providing Root Shells to Strangers on the Internet - Stephane Graber, Canonical Ltd

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Watch Now
5 years ago, the LXD project decided to provide an online demo of its software.
All that users need is a web browser and heading to https://linuxcontainers.org/lxd/try-it

Through that URL, they get root access inside a LXD container running on a shared server. They can then either follow a step by step guide or just do whatever they want until the session expires 30 minutes later.

Since this page went live, over 400000 sessions were created, meaning over 200 strangers got root access inside a LXD container every single day.


Most users follow our terms of service and just want to discover LXD.
Most, but not all...

This talk will go through how the service is run and configured to avoid most common concerns and attacks while still offering something of value to users.

We'll also cover some other places where properly configured unprivileged LXD containers are similarly used to run untrusted code by random strangers.
Speakers
avatar for Stéphane Graber

Stéphane Graber

Project leader for LXD, LXC and LXCFS, Canonical Ltd.
Stéphane Graber is the engineering manager for the LXD team at Canonical Ltd. He is the upstream project leader for LXC and LXD and a frequent speaker and track leader at events related to containers and Linux. Stéphane is also a longtime contributor to the Ubuntu Linux distribution... Read More →

OSSNA 5 years of root shells pdf
Tuesday June 30, 2020 2:00pm - 2:50pm CDT
Linux Systems Theater
  Linux Systems, System Boot and Security