Recommended
More Related Content
What's hot
What's hot (20)
Similar to Zun presentation (OpenStack Barcelona summit)
Similar to Zun presentation (OpenStack Barcelona summit) (20)
Recently uploaded
Recently uploaded (20)
Zun presentation (OpenStack Barcelona summit)
- 1. Magnum is not the OpenStack Container Service? How about Zun Hongbin Lu (Huawei) Qiming Teng (IBM) Eli Qiao (Intel) Madhuri Kumari (Intel)
- 2. Agenda ● Containers on OpenStack ● Magnum ● Zun ● Demo
- 3. Containers on OpenStack OpenStack ContainerNova Instance (container) Hypervisor (Container Runtime) Compute Network Storage Nova Instance (container) Nova
- 4. Containers on OpenStack OpenStack Nova Instance (VM) Container Hypervisor Compute Network Storage Nova Instance (VM) Container Container Container Nova
- 5. Containers on OpenStack OpenStack Nova Instance (VM) Container Hypervisor Compute Network Storage VMNova Instance (VM) Container Container Container Container Orchestration Engine (COE) Nova
- 6. Containers on OpenStack COE (Kubernetes, Swarm, etc.) Deployment (Magnum) Authentication (Keystone) Zun Images (Glance?) Fuxi Storage (Cinder) Network (Neutron) Kuryr Monitoring (Telemetry?) OpenStack API Native API
- 7. Agenda ● Containers on OpenStack ● Magnum ● Zun ● Demo
- 8. Introduction to Magnum Nova Magnum Nova Instances Kubernetes Swarm Mesos Containers
- 9. Introduction to Magnum ● Provisioning ○ Kubernetes ○ Docker Swarm ○ Mesos ● Scaling ○ Add instances ○ Remove instances ● Security ○ Serve as Certificate Authority (CA) ○ Generate Keystone users COE (Kubernetes, Swarm, etc.) Magnum Keystone Zun Images (Glance?) Fuxi Cinder Neutron Kuryr Monitoring (Telemetry?) OpenStack API Native API
- 10. Magnum Mission Statement Update Containers service Provide a set of services for management of application containers in a multi-tenant cloud environment. Container Infrastructure Management service Provide a set of services for provisioning, scaling, and managing Container Orchestration Engines (COEs).
- 11. Magnum (M release) Magnum Mission Statement Update Bay Baymodel Container Pod Service Replication Controller Magnum (N release) Bay Baymodel Zun Container
- 12. Agenda ● Containers on OpenStack ● Magnum ● Zun ● Demo
- 13. What is Zun? ● Abstract container life-cycle management ● Simple API across different container technologies ● Deep Integrate with OpenStack ○ Keystone ○ Nova ○ Neutron ○ Glance ○ Horizon COE (Kubernetes, Swarm, etc.) Magnum Keystone Zun Images (Glance?) Fuxi Cinder Neutron Kuryr Monitoring (Telemetry?) OpenStack API Native API
- 15. Why Zun? Baremetal Tenant 1 Virtualization Tenant 2 Tenant 3 COE Baremetal Tenant 1 Virtualization ? Tenant 2 Tenant 3 Containers ZunCOE COE Containers Containers Containers Containers Containers Magnum Zun
- 16. Why Zun? ● OpenStack-native APIs ○ Simple ○ Container-oriented ○ Technology-agnostic ● Common infrastructure for VMs, baremetals, and containers ○ Common access control and roles management ○ Common network abstraction layer ○ Common images management ○ Single CLI / UI ○ Single orchestration template for VMs and containers ● No cluster provisioning & management
- 17. Architecture Zun API Zun Compute Zun Compute Zun Compute Driver Driver Driver Container ContainerContainer COE / Runtime
- 18. Sandbox Concepts ● Container ○ A Linux container (i.e. Docker container) ○ Run inside a sandbox ● Sandbox ○ Contain one or multiple containers ○ A placeholder for containers ○ Create an isolated environment ○ Contain network interface(s) and volume(s) ○ Enforce resource constraints (i.e. cpu, memory) Container Container eth0 Volumn IP
- 19. What Exactly is Sandbox? ● Sandbox can be interpreted differently ○ Could be a set of Linux namespaces ○ Could be a VM (i.e. hypervisor-based runtime) ○ Could be a pod (i.e. Kubernetes) ● Our first implementation ○ A container is a Docker container ○ A sandbox is also a Docker container ○ Create a Docker container will automatically create a Docker sandbox ● Potential improvements ○ Allow multiple containers in a single sandbox
- 20. Create a Docker Container 1. Create a Docker sandbox $ docker run -d --name mybox kubernetes/pause 2. Create a container by using the sandbox $ docker run -d --net container:mybox --ipc container:mybox --pid container:mybox --volumes-from mybox ...
- 21. Why Introduce Sandbox? ● Define a group of containers that are ○ Co-located and Co-scheduled ○ Share network namespace ○ Share volume ○ Share resource limits ● Decouple containers from resources management ○ Containers are managed by Zun ○ Sandbox are managed by Nova (with Docker virt driver)
- 22. Compute Host Create a Docker Container NovaZun Compute Host Sandbox Container Zun Compute Nova Compute Docker Driver 1 2 3 4 5 6 7 1. End-user requests to create a container 2. Zun requests Nova to create a sandbox instance 3. Nova forwards the request to Nova Compute 4. Nova Compute forwards the request to a Zun-provided virt driver 5. The virt driver create the sandbox 6. Zun requests Zun Compute to create a container 7. A container is created inside the sandbox
- 23. Container Image ● Consistent API to manage container images ● Support multiple storage backend ○ Glance (stored as a tar file) ○ Docker Hub ○ Private Docker Registry ● Pluggable design ○ Easy to add support for additional image backend Zun Driver DriverImage Driver Glance Docker Hub
- 24. Agenda ● Containers on OpenStack ● Magnum ● Zun ● Demo