Libcontainer: joining forces under one roof

•

1 gostou•556 visualizações

OpenVZ

Andrew Vagin

Software

Andrey Vagin <avagin@openvz.org>
Libcontainer: joining forces under one roof
Docker Moscow Meetup 2015

2
Agenda
● History
● Linux Container
● Docker and LXC
● Libcontainer
● Libct
● Questions

3
History
● Parallels Virtuozzo Containers
● Linux-VServer
● OpenVZ
● LXC
● Linux-utils (unshare, nsenter)
● SystemD (systemd-nspawn)
● Libcontainer (Docker)
OpenVZ
2005
LXC
2008
Libcontainer
2014
Virtuozzo
2001
systemdLinux-utils
2009
VServer

4
Linux Containers
Namespace
Cgroups
● Cgroups limits resources
– Cpu
– Memory
– Blkio
– Freeze
● Namespaces isolates environment
– MNT, PID, NET, IPC, USER, UTS

6
Libcontainer
● Avoid external dependencies
● Create a library to joining forces
– Docker, Google, Parallels, RedHat, etc
● Support other container technologies (OpenVZ, jails, zones)
● Reuse in other projects (not only in Go)

7
Hierarchy
Docker
LXC
execdriver
Libcontainer
Linux Kernel

8
API
● Factory
– Create(), Load()
● Process
– Env, capabilities, cwd
● Container
– Namespaces, cgroup
– ID(), Start(), Destroy()
– Pause()/Resume()
– Stats(), Processes()

9
Libct
– Libct is a containers management library which provides convenient
API for frontend programs to rule a container during its whole
lifetime
● In C
● Bindings for other languages (Go, Python)

10
Hierarchy
Docker
LXC
execdriver
Libcontainer
Linux Libct
Linux OpenVZ
Linux Kernel OpenVZ Linux Kernel

11
The current state and future plans
● Implement the new API for Libcontainer (DONE)
● Migrate Docker to use the new API
● Integrate Libct into Libcontainer

12
Q&A
● https://github.com/docker/libcontainer
● https://github.com/xemul/libct
● Andrey Vagin <avagin@openvz.org>
Thank you

Mais conteúdo relacionado

Mais procurados

Docker Introduction - DevOps Montreal Meetup

Colin Surprenant

Corwin on containers

Corwin Brown

Docker off the grid

Mirantis IT Russia

OpenNebula LXD Container Support overview

CSUC - Consorci de Serveis Universitaris de Catalunya

Autentia OS - 20180210 - Docker y las películas de chinos

Alejandro Pérez García

Not so brief history of Linux Containers

Kirill Kolyshkin

The world of Linux Containers might be the hottest technology helping businesses to build cloud ready applications and services. In this talk we will provide the current status of OpenStack support for containers and containers support for OpenStack.In the first part we will dive into two container-focused OpenStack projects: Magnum and Kolla and show how Magnum as an API service can help to provide "Containers as a Service" on top of OpenStack leveraging the capabilities of Kubernetes, Docker, Heat and Flannel, and show how Kolla is going to improve OpenStack operations by containerizing OpenStack components into micro services for simplified upgrades and deployment consistency, portability and scaling.In the second part we will see Magnum in action and learn how to get the whole thing running on top of his own, on an existing OpenStack Kilo environment! Speaker: Daniel Bäurer Noch mehr Vorträge von uns: https://www.inovex.de/de/content-pool/vortraege/

OpenStack und Containers

inovex GmbH

What's missing from upstream kernel containers?

Kirill Kolyshkin

Hello, Docker!

Michael Kwesi Essandoh

Docker @haufe lexware tech lunch

HaufeLexwareRomania

Clojure REPL or cluster deployment with Docker

Filippo Vitale

GlusterFS Cinder integration presented at GlusterNight Paris event @ Openstac...

Deepak Shetty

Cncf meetup-rook

Juraj Hantak

Cncf meetup-rook

Juraj Hantak

Server as the core of the information systems in today's business operations playing a pivotal role, data storage on server is becoming the lifeline to maintain the normal operation of the millions of businesses and organizations. Correct choice of independent control of the server or cluster systems and storage devices can improve system performance and operational capabilities. The user request rate and response time of business server data storage system are dependent on the selection of the storage devices. These devices can greatly affect system performance. To effectively protect data and give linear performance for iSCSI initiator, it is required to modify the iSCSI target driver to provide Gluster file system backend storage as distributed block device. This paper aims at discussing ways of modifying iSCSI Target (ISTGT) driver to support Gluster file system.

Integrating GlusterFS with iSCSI Target

ijsrd.com

Mais procurados (15)

Docker Introduction - DevOps Montreal Meetup

Corwin on containers

Docker off the grid

OpenNebula LXD Container Support overview

Autentia OS - 20180210 - Docker y las películas de chinos

Not so brief history of Linux Containers

OpenStack und Containers

What's missing from upstream kernel containers?

Hello, Docker!

Docker @haufe lexware tech lunch

Clojure REPL or cluster deployment with Docker

GlusterFS Cinder integration presented at GlusterNight Paris event @ Openstac...

Cncf meetup-rook

Integrating GlusterFS with iSCSI Target

Semelhante a Libcontainer: joining forces under one roof

Containerization is fast becoming the most efficient way to develop and deploy software solutions in the Cloud. Docker embraced this space by fulfilling the above requirements and attracting the industry within a very short period of time. Google solved container cluster management features by initiating the Kubernetes project over a decade of experience on running container technologies at scale. WSO2 App Cloud enables you to deploy applications using these technologies. In this tutorial we will demonstrate how WSO2 products can be run on Kubernetes. We will also give a preview of the upcoming WSO2 App Cloud which is deeply integrated with Kubernetes for hosting applications. This tutorial will include An introduction to Docker and Kubernetes Deploying WSO2 products on Kubernetes Kubernetes as the runtime provider for WSO2 App Cloud

WSO2Con ASIA 2016: Revolutionizing WSO2 App Cloud with Kubernetes & Docker

WSO2

Traditional virtualization technologies have been used by cloud infrastructure providers for many years in providing isolated environments for hosting applications. These technologies make use of full-blown operating system images for creating virtual machines (VMs). According to this architecture, each VM needs its own guest operating system to run application processes. More recently, with the introduction of the Docker project, the Linux Container (LXC) virtualization technology became popular and attracted the attention. Unlike VMs, containers do not need a dedicated guest operating system for providing OS-level isolation, rather they can provide the same level of isolation on top of a single operating system instance. An enterprise application may need to run a server cluster to handle high request volumes. Running an entire server cluster on Docker containers, on a single Docker host could introduce the risk of single point of failure. Google started a project called Kubernetes to solve this problem. Kubernetes provides a cluster of Docker hosts for managing Docker containers in a clustered environment. It provides an API on top of Docker API for managing docker containers on multiple Docker hosts with many more features.

An Introduction to Kubernetes

Imesh Gunaratne

Linux Containers & Docker

Jumping Bean

Containers - Cloud Phoenix March Meetup

Miguel Zuniga

The OpenVZ/Virtuozzo developers from Odin (ex Parallels) have been working on Linux container technologies since 1999. What was originally a separate patchset is now mostly merged into the upstream Linux kernel, enabling the way for projects like LXC and Docker. In the mean time, the OpenVZ/Virtuozzo Linux kernel is still one step ahead of the vanilla kernel when it comes to containers. The talk will provide details about recent efforts towards Docker and Virtuozzo interoperability. This development is twofold. The first goal is to run Docker inside an OpenVZ container and the second goal is to use the proven OpenVZ kernel as a backend for Docker (via libcontainer).

OpenVZ, Virtuozzo and Docker

Kirill Kolyshkin

Docker Dojo

Hugo González Labrador

Not so brief history of Linux Containers - Kir Kolyshkin

OpenVZ

Containerized Delivery on the Microsoft Stack

Cornell Knulst

Containers in the Cloud

James Darrell Pratt

HLayer / Docker and its ecosystem

Aymen EL Amri

Lightweight Virtualization: LXC Best Practices

Werner Fischer

LXC

Jiang Yan-Ting

Evolution of Linux Containerization

WSO2

Evoluation of Linux Container Virtualization

Imesh Gunaratne

Containerization is now becoming the most efficient way of developing and deploying software solutions in the cloud. It provides means of running applications with less resource usage, fast startup times, portability across machines, lightweight & layered container images, container image registries, multi-tenancy and many more additional advantages. Docker embraced this space by fulfilling the above requirements and attracting the industry within a very short period of time. Google solved container cluster management features by initiating the Kubernetes project over a decade of experience on running container technologies at scale. Now Kubernetes is in the process of adding more advanced PaaS features such as autoscaling, multicloud or region deployments and composite application model with best of breed ideas and practices from the community. WSO2 App Factory and WSO2 App Cloud are application Platform as a Service (aPaaS) that provide application development and hosting deployed through these technologies. In this tutorial we will demonstrate how WSO2 products can be run on Kubernetes and the latest WSO2 App Cloud features.

WSO2Con USA 2015: Revolutionizing WSO2 PaaS with Kubernetes & App Factory

WSO2

In Docker, applications are shipped using a lightweight format, managed with a high-level API, and run within software containers which abstract the host environment. Operating details like distributions, versions, and network setup no longer matter to the application developer. Thanks to this abstraction level, we can use the same container across all steps of the life cycle of an application, from development to production. This eliminates problems stemming from discrepancies between those environments. Even so, these environments will always have different requirements. If our quality assurance (QA) and production systems use different logging systems, how can we still ship the same container to both? How can we satisfy the backup and security requirements of our production stack without bloating our development stack? In this sess, you will learn about the unique features in containers that allow you to cleanly decouple system administrator tasks from the core of your application. We’ll show you how this decoupling results in smaller, simpler containers, and gives you more flexibility when building, managing, and evolving your application stacks.

Containers: from development to production at DevNation 2015

Jérôme Petazzoni

LXC, Docker, and the future of software delivery | LinuxCon 2013

dotCloud

LXC Docker and the Future of Software Delivery

Docker, Inc.

Containers are a set of various lightweight methods to isolate filesystems, CPU resources, memory resources, system permissions, etc. Containers are similar to virtual machines in many senses, but they are more efficient and often less secure. This talk roughly consists of the following three parts: 1. Introduction to containers and how they spread in the last decade 2. Internals of container runtimes: namespaces, cgroups, capabilities, seccomp, etc. 3. Latest trends: Non-Docker containers, User Namespaces, Rootless Containers, Kata Containers, gVisor, WebAssembly, etc. http://www.cce.i.kyoto-u.ac.jp/danwa23.html

The internals and the latest trends of container runtimes

Akihiro Suda

Kubernetes

erialc_w

Semelhante a Libcontainer: joining forces under one roof (20)

WSO2Con ASIA 2016: Revolutionizing WSO2 App Cloud with Kubernetes & Docker

An Introduction to Kubernetes

Linux Containers & Docker

Containers - Cloud Phoenix March Meetup

OpenVZ, Virtuozzo and Docker

Docker Dojo

Not so brief history of Linux Containers - Kir Kolyshkin

Containerized Delivery on the Microsoft Stack

Containers in the Cloud

HLayer / Docker and its ecosystem

Lightweight Virtualization: LXC Best Practices

LXC

Evolution of Linux Containerization

Evoluation of Linux Container Virtualization

WSO2Con USA 2015: Revolutionizing WSO2 PaaS with Kubernetes & App Factory

Containers: from development to production at DevNation 2015

LXC, Docker, and the future of software delivery | LinuxCon 2013

LXC Docker and the Future of Software Delivery

The internals and the latest trends of container runtimes

Kubernetes

Mais de OpenVZ

PFcache - LinuxCon 2015

OpenVZ

Speeding up ps and top

OpenVZ

Live migration: pros, cons and gotchas -- Pavel Emelyanov

OpenVZ

Live migrating a container: pros, cons and gotchas Monday, November 16 • 17:20 - 18:05 Pavel Emelyanov Principal Engineer, Odin Principal engineer at Odin Server Virtualization team, creator and maintainer of the CRIU project. Joined Parallels in 2004 as junior Linux kernel developer, later became kernel team leader. Now works on architecture of the Odin Server products. | | Pavel tweets at @xemulp. http://dockerconeu2015.sched.org/event/62e6d2ea7380442a48fafaeee26c9842

Live migrating a container: pros, cons and gotchas -- Pavel Emelyanov

OpenVZ

CRIU: time and space travel for Linux containers -- Kir Kolyshkin

OpenVZ

В своей презентации мы на примере дистрибутива Linux расскажем об опыте организации процесса тестирования продукта, существенная часть (более 90%) кода которого создается независимыми от компании разработчиками. https://www.youtube.com/watch?v=AstgrnE7_dI

Тестирование ПО, основанного на сторонних компонентах - Денис Силаков, SECR 2015

OpenVZ

Живая миграция: плюсы, минусы и подводные камни - Павел Емельянов

OpenVZ

What's missing from upstream kernel containers? - Sergey Bronnikov

OpenVZ

Проблема фрагментации виртуальных дисков и способы её решения -- Дмитрий Монахов

OpenVZ

Развёртывание приложений Docker в контейнерах Virtuozzo -- Павел Тихомиров

OpenVZ

CRIU: ускорение запуска PHP в CloudLinux OS -- Руслан Купреев

OpenVZ

Управление памятью контейнеров в проекте OpenVZ -- Владимир Давыдов

OpenVZ

Живая миграция контейнеров: плюсы, минусы, подводные камни -- Павел Емельянов

OpenVZ

Denser containers with PF cache - Pavel Emelyanov

OpenVZ

CGroups kernel memory controller -- Pavel Emelyanov

OpenVZ

What's missing from upstream kernel containers? - Kir Kolyshkin, Sergey Bronn...

OpenVZ

Openvz booth

OpenVZ

Управление ресурсами в Linux и OpenVZ Кирилл Колышкин kir@openvz.org http://openvz.org/ Отчет - http://yourcmc.ru/wiki/RootConf_2009:_%D0%9E%D1%82%D1%87%D1%91%D1%82_%D0%92%D0%B8%D1%82%D0%B0%D0%BB%D0%B8%D1%8F_%D0%A4%D0%B8%D0%BB%D0%B8%D0%BF%D0%BF%D0%BE%D0%B2%D0%B0#.D0.A3.D0.BF.D1.80.D0.B0.D0.B2.D0.BB.D0.B5.D0.BD.D0.B8.D0.B5_.D1.80.D0.B5.D1.81.D1.83.D1.80.D1.81.D0.B0.D0.BC.D0.B8_.D0.B2_Linux_.D0.B8_OpenVZ_.28.D0.B7.D0.B0.D1.87.D1.91.D1.82.21.29

Управление ресурсами в Linux и OpenVZ

OpenVZ

Containers in a file

OpenVZ

Optimizing FUSE for Cloud Storage

OpenVZ

Mais de OpenVZ (20)