Containers

Learn how OpenShift and OpenShell combine for dual protection of AI coding agents, reducing attack surface and securing your infrastructure.

Learn about Red Hat build of Agent Sandbox, a Kubernetes-native platform for running isolated workloads with enhanced security using Kata Containers.

Learn how to implement verified boot in AutoSD and Red Hat In-Vehicle Operating System.

This article discusses operator-chaos, an open source chaos engineering framework for Kubernetes operators. It explains why traditional chaos tools miss operator failures, introduces the four injection modes provided by operator-chaos, and demonstrates its use against cert-manager on a live cluster. The article also highlights the importance of testing operator reconciliation logic beyond just pod restarts.

Explore essential architectural considerations for OpenShift hosted control planes (HCP), including etcd storage, load balancing, and infrastructure planning.

A guide to standardizing terminology, architecture, and outlining a decision framework for hosted control planes (HCP) in OpenShift.

Why stock Kubernetes discovery misses KubeVirt VMs, and how to deploy a least-privilege, CA-trusted in-cluster MID Server for ServiceNow CMDB discovery.

Build a LAMP stack application on Red Hat Enterprise Linux 10 using hardened

Learn how to choose between Red Hat UBI and Hardened Images. Evaluate development stability versus upstream CVE reduction for your container workloads.

Explore the Data Governance Copilot architecture, integrating OpenShift AI with PG Airman MCP server for robust, agentic Postgres analytics.

Learn how to diagnose and address application misbehavior after a Red Hat OpenShift upgrade, with a focus on container awareness.

CVEs are accelerating. Exploit windows are collapsing. Traditional patching can

Learn how to onboard a custom evaluation framework into EvalHub using one class, one method, and a container image. This guide covers the contract, data structures, and a complete minimal adapter.

Learn how to deploy Red Hat Enterprise Linux using the bootc command, a deployment option that allows the operating system to be built, deployed, and updated like a container image. This immutable system provides enhanced consistency and reliable, atomic updates and rollbacks. Get started with a minimal kickstart file example.

Discover how NVIDIA confidential computing and OpenShift sandboxed containers work together to secure GPU workloads through hardware-based isolation and attestation.

How to use a split disk configuration to solve disk space management issues, specifically in OpenShift clusters running large AI/ML workloads.

Learn what's new in Red Hat Enterprise Linux 10.2 and 9.8, including Red Hat build of Podman Desktop, advanced AI assistance, and database and toolset updates.

Learn practical troubleshooting steps for common debugging scenarios in OpenShift 4.20's image mode. Understand the three stages of the process, MachineOSConfig creation, MachineOSBuild creation and execution, and application of the new image to nodes. Discover what to watch for in each stage to keep your clusters running smoothly.

Learn how Red Hat AI can help address the security challenges of AI agents in production, from semantic malware to container escapes.

Learn about some of the quirks of running a build command in a distroless image.

Deploy confidential containers and CVMs for AI. Learn how the Red Hat build of Trustee automates attestation to protect patient data on OpenShift and RHEL.

Learn about Red Hat Hardened Images, small containers that incorporate a minimal set of files for delivering purpose-built applications.

Learn how to federate identities in an OpenShift environment to enable access to multiple cloud storage providers without the use of static credentials.

Learn how to use Project Hummingbird and Calunga open source projects to build application containers with Red Hat Hardened Images and trusted libraries.

Learn how to build and push .NET container images in Tekton pipelines without a Dockerfile. See how the dotnet-publish-image task simplifies your CI/CD workflow.