With the increasing demands for security in IoT devices, including requirements from the U.S. Cyber Trust Mark and the EU’s CRA and Japan Cyber STAR (JC-STAR), enhanced security requirements are becoming essential. Linux, commonly used as the OS for IoT devices, is often based on general-purpose distributions like Ubuntu/Debian or Yocto. What difficulties must be addressed for these systems to meet security requirements? In contrast, our company has developed the "Armadillo Base OS," a Linux-based container architecture OS. This session will highlight the benefits of a container-based system and explain how it meets security requirements, along with SBOM and GPLv3.