A secure software factory on Incus, not on Kubernetes

If you operate development pipelines, you can now choose a secure software factory alternative to Kubernetes that may offer better isolation and simplify management.

Canonical has introduced a new secure software factory solution built on Incus, its open-source hypervisor. This offering contrasts with existing solutions that primarily rely on Kubernetes. The Incus-based factory aims to provide enhanced security and operational efficiency for software development pipelines. It is designed to address the complexities and security challenges associated with modern software development, offering a more integrated and hardened environment compared to traditional Kubernetes deployments for similar functions. The solution emphasizes a streamlined approach to building, testing, and deploying software in a secure and isolated manner.

This move by Canonical signals a growing divergence in infrastructure choices for software factories, highlighting Incus as a viable, potentially more secure, alternative to Kubernetes. It suggests that for certain use cases, particularly those prioritizing deep isolation and simplified operational overhead, hypervisors like Incus might offer a more appealing platform than container orchestration systems. The emphasis on security implies a response to increasing concerns about the attack surface and complexity of Kubernetes-based environments.

The offering directly affects teams seeking hardened, out-of-the-box solutions for their CI/CD needs, potentially simplifying their infrastructure choices and reducing reliance on extensive Kubernetes expertise. For Canonical, it positions Incus as a serious contender for enterprise workloads beyond its traditional virtualization strengths, aiming to capture market share from companies heavily invested in Kubernetes by offering a distinct, security-focused value proposition.