Wind River®, a global leader in delivering software for mission-critical intelligent systems, has introduced support for Sigstore’s Cosign for its real-time operating system (RTOS) container engine. With this development, VxWorks®-based devices can enjoy enhanced security when using containers to deploy and manage software. VxWorks is the only RTOS to support Open Container Initiative (OCI)–compliant containers.
The enhancement builds on the Wind River existing, real-time embedded container engine, first released in 2021. This no-overhead real-time container engine for VxWorks was developed from input from customers and the careful use of the OCI specifications (packaging, distribution, runtime, and runc) under the Cloud Native Computing Foundation (CNCF). In 2022, Wind River introduced support for the overlay file system, a key element of application isolation.
Wind River also provides support for Kubernetes with a true embedded kubelet. Teams no longer need to rely on bespoke obscure tools and workflows. They can reduce costs and risks by leveraging open standards, known workflows, known tools, and known infrastructures to deploy, operate, manage, and update real-time safe and certifiable software for an RTOS, just as they could with Linux.
according to a Collins Aerospace white paper,
While the VxWorks container engine already supports secure access to the registry and secure applications, the additional support for Cosign further enables the handling of signed containers. Cosign supports a flexible standard for signing and verifying container images. It can help simplify the process of signing and verification by enabling developers to reuse existing development infrastructure, such as cloud-managed KMS and container registries.
Avijit Sinha, chief product officer, Wind River
As the first and only RTOS to support OCI-compliant containers, VxWorks is simplifying software deployment and management, effectively reducing operational costs, to develop and deploy intelligent edge software better and faster, without compromising determinism and performance. Our latest development in adding support for Cosign is helping teams further strengthen secure application deployment and updates. Containers are creating a major impact across mission-critical industries, such as automotive, aerospace, defense, and industrial, and are helping to further advance a software-defined approach to these markets.
Benjamin Lyon, Senior Vice President and Chief Technology Officer Aptiv
Aptiv is fostering rapid innovation and accelerating our customers’ transition to the software-defined vehicle with groundbreaking containerization solutions like VxWorks from Wind River. By enabling developers to efficiently create new containerized applications and easily modernize existing ones, VxWorks provides incredible value to automotive Tier 1s and OEMs by significantly reducing the burden and cost of software updates and unlocking new business models.
