Published on Dec 7, 2015 Speaker: Luca Marturana Language: English Containers are revolutionizing the way we deploy and maintain our infrastructures: reducing development overhead, streamlining dev / test / ops, and enabling highly scalable, dynamic infrastructures. But containers still have a key problem: monitoring and troubleshooting them is impractical, painful, and sometimes plain impossible. Even basic things like understanding what is using CPU, memory, or disk bandwidth inside a container are difficult - let alone finding out who a container is talking to on the network or tracking malicious activity. In this presentation, Luca Marturana will cover the current state of the art for container monitoring and visibility, including real use-cases and pros / cons of each. He will then focus on advanced container visibility techniques, such as: * visualizing a container’s network activity * understanding detailed resource usage (CPU, memory and disk I/O) of containers and individual processes running inside containers * following process and user activity inside containers * collecting logs from multiple containers The presentation will include live interaction with container environments and aims to cover two of the potentially most popular subjects for attendees: containerization and performance monitoring. These container monitoring techniques will help DevOps engineers to deploy a containerized infrastructure in production with confidence and peace of mind. Special emphasis will be put on sysdig, an open source container and system troubleshooting tool that the presenter has helped author. Visit our website: http://2015.devopsdays.pl

1. The dark art of container
monitoring
Luca Marturana

2. About me
Luca Marturana
Software Engineer at Sysdig
luca3m

3. Agenda
• Troubleshooting workflow
• Introduction to sysdig
• csysdig
• Sneak peek of Sysdig Cloud
3

4. Troubleshooting
• CPU
• Memory
• Network
• Files
• Errors
4

5. 5
Troubleshooting workflow
Demo

6. Seeing Inside Containers Is Not Easy!
Containers are:
Isolated
Self-Contained
Simple
Lightweight
Can monitoring and troubleshooting
play nice with these properties?

7. 7
Demo

8. sysdig Architecture
Kernel
Container1
Docker
Container2
Docker
Container3
LXCAppApp

9. sysdig Architecture
Kernel
Container1
Docker
Container2
Docker
Container3
LXCAppApp
Instrumentation
through kernel
module

10. sysdig Architecture
Kernel
Container1
Docker
Container2
Docker
Container3
LXCAppApp
sysdig
Docker
Capture and
analysis

11. sysdig
• Capture system events, filter them, run useful
scripts
• strace + tcpdump + lsof + htop + Lua
• Open Source
•Native support for containers!

12. 12
csysdig
Demo

13. csysdig
• Nice curses interface for sysdig
• A full featured control panel
• Click and explore your system
13

14. 14
Sysdig Cloud
Demo

15. Wrap up
15
Sysdig fills the gap between traditional
monitoring tools and the container
ecosystem

16. End
16
luca3m
luca@sysdig.com