Cgroups, namespaces, and beyond: what are containers made from?

Ғылым және технология

with Jérôme Petazzoni, Tinkerer Extraordinaire, Docker
Linux containers are different from Solaris Zones or BSD Jails: they use discrete kernel features like cgroups, namespaces, SELinux, and more. We will describe those mechanisms in depth, as well as demo how to put them together to produce a container. We will also highlight how different container runtimes compare to each other.
Learn more about Docker www.docker.com/what-docker
--
Docker is an open platform for developers and system administrators to build, ship and run distributed applications. With Docker, IT organizations shrink application delivery from months to minutes, frictionlessly move workloads between data centers and the cloud and can achieve up to 20X greater efficiency in their use of computing resources. Inspired by an active community and by transparent, open source innovation, Docker containers have been downloaded more than 700 million times and Docker is used by millions of developers across thousands of the world’s most innovative organizations, including eBay, Baidu, the BBC, Goldman Sachs, Groupon, ING, Yelp, and Spotify. Docker’s rapid adoption has catalyzed an active ecosystem, resulting in more than 180,000 “Dockerized” applications, over 40 Docker-related startups and integration partnerships with AWS, Cloud Foundry, Google, IBM, Microsoft, OpenStack, Rackspace, Red Hat and VMware.

Пікірлер: 60

  • @omerpriel5588
    @omerpriel5588Ай бұрын

    For 8 years since this video came out. And still he is the only one who explained docker really well thank you very much

  • @omerpriel5588

    @omerpriel5588

    Ай бұрын

    And it was fun (in the good way)

  • @nelsonjoppi
    @nelsonjoppi2 жыл бұрын

    - What is a container? 2:40 - Control Groups. 5:12 - Different type of CGroups: 7:05 - Namespaces: 24:43 - Container runtimes (cgroups + namespaces): 35:51

  • @rschmidtzalles
    @rschmidtzalles5 жыл бұрын

    After 4 years, this is one the best talks about docker

  • @24Shredder

    @24Shredder

    4 жыл бұрын

    I'm a Docker noob: after 4 years, does this video still say valid things? Behind the scenes, Docker is still working as this guy say?

  • @anpham871

    @anpham871

    3 жыл бұрын

    @@24Shredder yes, fundamentals never change

  • @alexjswill
    @alexjswill3 жыл бұрын

    Saw this in 2020 unfortunately. This talk is so awesome. Should have saw this before.Thanks Jerome!

  • @mads2k5
    @mads2k55 жыл бұрын

    Great talk. Went far further than most materials on (pure) docker. (and containers in general)

  • @deeptivaidyula
    @deeptivaidyula7 жыл бұрын

    Very well presented. Thank you for uploading!

  • @vladbagbuss
    @vladbagbuss7 жыл бұрын

    Awesome talk! thanks for uploading the vid.

  • @sachinmainkar
    @sachinmainkar3 жыл бұрын

    This has to be the first material any newcomer like me, to cgroups and namespaces encounters. Then read or listen to others to get more details. Merci beaucoup Monsieur !

  • @josephroland4000
    @josephroland40003 ай бұрын

    This is so interesting, simply the best, in this presentation i get to understand how docker works under the hood.

  • @sudarshansargur9253
    @sudarshansargur92534 жыл бұрын

    What a fantastic talk!

  • @bhavesh1877
    @bhavesh18777 жыл бұрын

    Very informative, thanks.

  • @nebulousnomad
    @nebulousnomad10 ай бұрын

    This was such a good presentation

  • @SithembisoKhumalo
    @SithembisoKhumalo8 жыл бұрын

    Great talk! Very informative

  • @MrNathanIL
    @MrNathanIL3 жыл бұрын

    awesome talk. thank you ☺️

  • @balajipattabhiraman
    @balajipattabhiraman3 жыл бұрын

    Awesome one. Loved it

  • @MohamedAnsari_H
    @MohamedAnsari_H3 жыл бұрын

    This is the best place to start for someone coming from Linux

  • @BalvinderRawat
    @BalvinderRawat8 жыл бұрын

    Really informative :)

  • @rezakh
    @rezakh4 жыл бұрын

    Great Talk! I wish the demo steps was documented in the presentation.

  • @ishi92
    @ishi924 жыл бұрын

    Thank you !!!

  • @alitajvidi5610
    @alitajvidi56102 жыл бұрын

    Excellent!!!

  • @sntshkmr60
    @sntshkmr604 жыл бұрын

    Bawandarful! Got to learn a lot about Linux kernel.

  • @spillai6000
    @spillai60004 жыл бұрын

    Notes: - What is a container? 2:40 - Control Groups. 5:12 - Different type of CGroups: 7:05

  • @amir3515

    @amir3515

    2 жыл бұрын

    Go on...

  • @nelsonjoppi

    @nelsonjoppi

    2 жыл бұрын

    - What is a container? 2:40 - Control Groups. 5:12 - Different type of CGroups: 7:05 - Namespaces: 24:43 - Container runtimes (cgroups + namespaces): 35:51

  • @hardikdodiya1741
    @hardikdodiya17413 жыл бұрын

    Great talk, thanks.

  • @king0s
    @king0s Жыл бұрын

    ❤ and gratitude

  • @sss19056
    @sss190563 ай бұрын

    Thanks for sharing

  • @youtube_resident
    @youtube_resident Жыл бұрын

    great speach!

  • @patmansf
    @patmansf6 жыл бұрын

    Are there more details on the page overhead accounting (at 13:16)? Specifically what boot time (or kernel config) options disable it?

  • @rakra4551
    @rakra45512 жыл бұрын

    The moment slides are replaced by the speaker, the line of thought/understanding is lost. The slides must be visible all the time. Great talk but bad camera placement.

  • @nebulousnomad

    @nebulousnomad

    10 ай бұрын

    Also too much text in slides. Trying to listen to him talk fast and read at same time. Otherwise great informative presentation

  • @imanebt8617
    @imanebt86173 жыл бұрын

    Thank you for this talk! By curiosity, are there open-source or on-the-market container runtimes that are not based on namespaces and cgroups ?

  • @anywhereroam9698

    @anywhereroam9698

    3 жыл бұрын

    Yes. One example is Kata. It’s uses virtualisation to run containers. It’s open source.

  • @berginv6827
    @berginv6827 Жыл бұрын

    Great

  • @dmytrohuz9323
    @dmytrohuz93239 ай бұрын

    could someone explain or recommend something to read for understanding what and why is going on there with mount/unmount commands in demo project in the end.

  • @ArmenManukyan
    @ArmenManukyan3 жыл бұрын

    Funny that cgroups2 allows now to control percentage as well.

  • @teddyzhai4442
    @teddyzhai44424 жыл бұрын

    great talk. please persistently show the slides rather than full screen only to the presenter. sometimes it is hard to corresponds his explanation to the bullet points.

  • @user-uw7st6vn1z
    @user-uw7st6vn1z11 ай бұрын

    can someone help to explain why there is ubuntu and alpine docker image? how can ubuntu / alpine linux distribution live inside container? I dont understand!!!!

  • @riderblack6401
    @riderblack64014 жыл бұрын

    it is too complex to understand without a specilized backgroun. Anyone knows a refrence to start with understanding what he meant???

  • @tejaszarekar9145

    @tejaszarekar9145

    4 жыл бұрын

    I know right... You gotta be a kernel Hacker to know all of this...

  • @f8881f
    @f8881f2 жыл бұрын

    25:00

  • @devakumarnm987
    @devakumarnm9874 жыл бұрын

    is this video is still relevant in 2020?

  • @KingslayerSrb

    @KingslayerSrb

    4 жыл бұрын

    in my mind - yes. cgroups are still cgroups, namespaces are namespaces, copy-on-write is copy-on-write. Can't see anything major changing there? Could be wrong, if so I hope someone corrects me, but I think the main innovation since this video went into container orchestration and everything that came out of that

  • @arabiccola
    @arabiccola2 жыл бұрын

    I don't mean to be disrespectful but this was 45 minutes of lame ass slides and jokes followed by 8 minutes of pure gold. I would have loved to have 53 minutes of that powerful demonstration. If anyone reads this and knows a place where this man demonstrates slowly and explains how to create the illusion of a container using Linux commands and all the other cgroup layers then please reply to this comment. Very impressive.

  • @AndresMujica

    @AndresMujica

    2 ай бұрын

    first chapter of Containerization with LXC by Konstantin Ivanov has it like that.

  • @ickyickyptangzoopboing
    @ickyickyptangzoopboing5 жыл бұрын

    couldn't fully follow the demo

  • @keokawasaki7833

    @keokawasaki7833

    11 ай бұрын

    skill issue

  • @tejaszarekar9145
    @tejaszarekar91454 жыл бұрын

    This is clearly not for everyone

  • @kir9290

    @kir9290

    4 жыл бұрын

    sure it's not, understanding it requires some essential knowledge of OS concepts and mechanisms (especially Linux in this case)

  • @abdulrahmanalotaibi783
    @abdulrahmanalotaibi7833 жыл бұрын

    d

  • @SoeaOu
    @SoeaOu5 жыл бұрын

    That rude comment about systemd-nspawn maintainers at 37:15 was really childish and unprofessional. Beside that a very good presentation.

  • @kukikukac

    @kukikukac

    5 жыл бұрын

    it was funny

  • @SisypheanRoller

    @SisypheanRoller

    Жыл бұрын

    Funny how podman basically makes systemd a key part of local container management.

  • @GUN2kify
    @GUN2kify4 жыл бұрын

    #2:55 - Container can be like VM ... that's the way how LXC works ... intended is *Docker is not like VM* .

  • @igmarzullowski5605
    @igmarzullowski56052 жыл бұрын

    Nobody has broken out of OpenVZ ... then obviously it's so uninteresting that people even don't bother.

  • @MrMikomi
    @MrMikomi3 жыл бұрын

    Not sure who really needs to know this stuff. If you're planning on creating the next Docker Corp maybe it's useful. If you merely want to use Docker.... I imagine pretty much none of this stuff is needed.

  • @sjraju
    @sjraju7 жыл бұрын

    Great talk! Very informative