Operations | Monitoring | ITSM | DevOps | Cloud

Kernel-Level Visibility Without Instrumentation: What eBPF Changes for Container Security

Kernel-Level Visibility Without Instrumentation: What eBPF Changes for Container Security

Aug 7, 2026 By OpsMatters In OpsMatters
Containers have changed how applications are built and deployed, but they have also made security visibility more difficult. Workloads are short-lived, services communicate constantly, and application behavior is distributed across containers, nodes, APIs, processes, and open-source dependencies. This is why many security teams are pairing eBPF with application-level runtime security. eBPF observes activity from the Linux kernel without requiring teams to modify every application, while runtime application security explains which code caused that activity.
Read Post
Cloud 66

Ubuntu 26.04 LTS Resolute Raccoon is Now Supported!

Jul 31, 2026 By Vic van Gool In Cloud 66
We are excited to announce support for Ubuntu 26.04 LTS Resolute Raccoon on all Cloud 66 products, including registered servers. From this point onward, new applications are provisioned on Ubuntu 26.04 by default, on both x86_64 and ARM64. Don't forget, you can control your target Ubuntu version via the selection dropdown when scaling up via the UI, or through your manifest!
Read Post
canonical

Ubuntu's virtualization hardware enablement (HWE) stack: a new model for confidential computing enablement

Jul 27, 2026 By Ijlal Loutfi In Canonical
Confidential computing is moving quickly. The foundation is already here: AMD SEV-SNP and Intel TDX have made it possible to run confidential virtual machines (VMs) with stronger protection for data in use. Ubuntu 26.04 Long Term Support (LTS) brings integrated host and guest support for both of these technologies, making confidential computing a native part of the Ubuntu virtualization offering..
Read Post
canonical

Confidential computing and the new regulatory focus on data in use

Jul 24, 2026 By Ijlal Loutfi In Canonical
Most organizations already understand encryption at rest and encryption in transit. These controls are mature, widely deployed, and often explicitly referenced in security frameworks. However, runtime is different: when an application processes sensitive information, that data is typically available in memory.
Read Post
canonical

Canonical announces the Enterprise Store as part of Ubuntu Pro

Jul 21, 2026 By Holly Hall In Canonical
The Enterprise Store makes software distribution manageable and scalable behind firewalls or in air-gapped environments. Available with an Ubuntu Pro subscription, the Enterprise Store respects the security protocols of strict environments, in a way that is controllable, auditable, and predictable.
Read Post
canonical

Tracing a memory leak bug in PID 1 and contributing an upstream fix: a Linux support story

Jul 17, 2026 By Lidia Luna Puerta In Canonical
Some memory leaks are straightforward to detect. A process allocates memory, forgets to free it, and grows until something breaks. This was not that kind of leak. This is the story of how Canonical Support helped a global retail organization trace the cause for an unusual memory leak originating in PID 1, the very first process started by the kernel during the system boot sequence. The memory footprint was 10 times higher than expected.
Read Post
canonical

Managing Ubuntu on bare metal at scale

Jul 9, 2026 By David Beamonte In Canonical
Modern infrastructure teams are expected to deliver cloud-like speed, consistency, and reliability, even when their workloads run on physical servers. Bare metal remains essential for many environments: private clouds, Kubernetes clusters, AI infrastructure, edge sites, regulated platforms, and large Ubuntu estates. But operating physical infrastructure at scale is difficult when provisioning, patching, monitoring, and lifecycle management are handled by disconnected tools and manual processes.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.