Downloaded 50 times
Uploaded byDustin Kirkland
[Container world 2017] The Questions You're Afraid to Ask about Containers
The document discusses the evolution and practicality of container technology, particularly focusing on the use of Docker and Kubernetes within environments like OpenStack and IaaS. It presents various use cases, benchmarking, and the transition from virtual machines to containerized applications, emphasizing infrastructure optimization and secure deployment in enterprise settings. Additionally, it touches upon the importance of implementing cloud-native designs and microservice architecture.
More Related Content
Similar to [Container world 2017] The Questions You're Afraid to Ask about Containers
![[WSO2Con EU 2018] Architecting for a Container Native Environment](https://cdn.slidesharecdn.com/ss_thumbnails/copyofwso2coneu2018presentationtemplate-181114044032-thumbnail.jpg?width=640&height=640&fit=bounds)
[Container world 2017] The Questions You're Afraid to Ask about Containers
- 1. #CONTAINERWORLD Using the rightcontainer tech for the job or, the questions you’re too afraid to ask about containers @DustinKirkland
- 2. @DustinKirkland Canonical is thecompany behind Ubuntu
- 3.
- 4. @DustinKirkland What’s all thehype about? Containers have been around forever… They’re just little VMs, aren’t they? asked no one, ever.
- 5. @DustinKirkland virtual machines process containers applicationcontainers machine containers Taxonomy
- 6. @DustinKirkland let’s see aquick demo
- 7. @DustinKirkland Should I runmy PAAS on top of my IAAS? Or should I run my IAAS on top of my PAAS? asked no one, ever.
- 8. @DustinKirkland Kubernetes on topof OpenStack Docker Kubernetes OpenStack LXD MAAS Bare Metal LXD
- 9. @DustinKirkland OpenStack on topof Kubernetes Docker OpenStack Kubernetes LXD MAAS Bare Metal LXD
- 10. @DustinKirkland Kubernetes along withOpenStack Docker Kubernetes + OpenStack LXD MAAS Bare Metal LXD
- 11. @DustinKirkland $ conjure-up kubernetes Onecommand to deploy a complete Kubernetes on Ubuntu 16.04 LTS
- 12. @DustinKirkland Just how fastare containers, really? asked no one, ever.
- 13. @DustinKirkland let’s run somebenchmarks
- 14. @DustinKirkland If we takea VM running on IaaS, and run it on PaaS in a Docker container, does that mean the app is now “dockerized”? asked no one, ever.
- 15.
- 16.
- 17. @DustinKirkland let’s look ata workload
- 18. @DustinKirkland ● SwissCom’s new workloadsare “dockerized” ● Was 400 VMs running 400 databases ● Now 20 VMs running 400 Databases ● DBaaS through the organization ● Build, Ship, Run mentality within the IT organization Source: https://www.docker.com/use-cases/infrastructure-optimization
- 19. @DustinKirkland ● Digitized transaction workflow,mathematically secured ● Shared, replicated ledger ● IBM Blockchain workloads are “dockerized” ● IBM Mainframe hardware ● Ubuntu Linux ● Docker images ● Hyperledger software ● Cutting edge technology ● Lots of run-to-completion, stateless number crunching Source: http://www.ibm.com/blockchain/hyperledger.html
- 20. @DustinKirkland ● Mature, legacycode base, that generally “just works” ● No desire really to ever touch it again ● Linux, Apache, PHP, Postgres, on AWS -- should dockerize easily, right? ● Those were easy, but what about Cron? Logrotate? Vacuumdb? Backup? Package updates? ● DivItUp.com moved to LXD much more easily
- 21. @DustinKirkland Does your new 12-factorapp implement a cloud-native design with a microservice architecture? asked no one, ever.
- 22.
- 23.
- 24.
- 25. @DustinKirkland Cloud Native Design Source:https://pivotal.io/cloud-native
- 26. @DustinKirkland Can any ofthis container stuff actually be used securely in production in an enterprise environment? asked no one, ever.
- 27. @DustinKirkland Resource Control Discretionary Access MandatoryAccess Fine Grained Access cgroups namespaces apparmor seccomp Container Security
- 28. # Count theCPUs and Memory available lxc exec demo1 -- grep processor /proc/cpuinfo lxc exec demo1 -- free # Limit the container to 1 CPU and 128MB of Mem lxc config set demo1 limits.cpu 1 lxc config set demo1 limits.memory 128MB lxc stop demo1 && lxc start demo1 # Recount the CPUs and Memory available lxc exec demo1 -- grep processor /proc/cpuinfo lxc exec demo1 -- free
- 29.
- 30. @DustinKirkland How do youensure patches get applied everywhere? asked no one, ever.
- 31. @DustinKirkland let’s recreate newstateless containers
- 32. @DustinKirkland let’s update statefulcontainers
- 33.
- 34. @DustinKirkland@DustinKirkland Using the rightcontainer tech for the job or, the questions you’re too afraid to ask about containers Container World Santa Clara, CA February 21, 2017