SlideShare uses cookies to improve functionality and performance, and to provide you with relevant advertising. If you continue browsing the site, you agree to the use of cookies on this website. See our User Agreement and Privacy Policy.
SlideShare uses cookies to improve functionality and performance, and to provide you with relevant advertising. If you continue browsing the site, you agree to the use of cookies on this website. See our Privacy Policy and User Agreement for details.
Successfully reported this slideshow.
Activate your 14 day free trial to unlock unlimited reading.
1.
Papers We Love:
Jails and Zones
CTO
bryan@joyent.com
Bryan Cantrill
@bcantrill
2.
Papers we love: Jails and Zones
• Discussing two important papers that form the foundation of
thinking about OS-based virtualization and containers:
• Jails: Confining the Omnipotent Root by Poul-Henning Kamp
and Robert Watson, presented at SANE 2000
• Solaris Zones: Operating System Support for Consolidating
Commercial Workloads by Dan Price and Andy Tucker,
presented at LISA 2004
• As much as possible, want to let these papers speak for
themselves — and provoke discussion!
19.
Jails: Epilogue
• Jails became easier to manage with jls/jps/ezjail/iocage
• Jails were allowed to have multiple IPv4 addresses
• Some jail-based resource management was added, including
CPU binding and
• System V IPC was virtualized, but remains out-of-tree
• VIMAGE added exclusive IP stacks to jails, but it remains a build-
time option and “is considered experimental”
42.
Zones: Epilogue
• Crossbow added virtual NICs and exclusive IP stacks — and anti-
spoof allowed exclusive IP stacks to be deployed safely
• Resource management became much more complete, adding
memory capping, CPU capping, I/O throttling
• ZFS revolutionized zone installation/configuration
• With introduction of IPS packaging, Solaris got rid of so-called
“sparse root” zones...
• ...and Joyent added sparse root zones back to SmartOS (thanks
to no IPS and no global zone package management)
43.
Zones: Epilogue, cont.
• Sun added notion of branded zones in 2006, including a nascent
Linux brand (LX) — and then ripped LX out in 2010
• LX brand revived by Joyent in 2014 in SmartOS and completed
(first deployed into production in early 2015)
• Overlay network support added to SmartOS by Joyent, allowing
software-defined VXLAN-based networks in non-global zones
44.
Jails and Zones: Conclusions
• Each of these technologies has served to inspire the other: zones
was explicitly inspired by jails — and the jails networking work
has been explicitly inspired by Crossbow
• These two papers are important because they capture not just the
what, but the why of their respective works
• These technologies were both ahead of their time; it’s invaluable
now to be able to understand their motivations!
• In the words of the late, great Jim Gray: You need to write more!