[jzelinskie]

I totally agree with your points, especially with awesome projects like Cilium[0] solving real problems in the Kubernetes ecosystem and, you know, getting updates to the kernel primitives that actually isolate containers. RH CoreOS is not going have a kernel that is synchronized with the RHEL release cycle. We're working to find out what types of requirements for certifications that we want to support and, using that as a guideline, we'll be shipping the freshest possible kernel. The nice thing about supporting both RHEL and CoreOS as the OS for OpenShift is that customers that require government-tier certifications will be told to use RHEL and everyone else can enjoy CoreOS.

We also now have access to the vast kernel engineering resources at Red Hat, so CoreOS should be able to get emergency fixes like those for Spectre and Meltdown out to customers much more quickly.

[0]: https://github.com/cilium/cilium

[fefefe21]

This is really awesome to hear, thanks a lot jzelinskie! Keep up the good work!