SlideShare a Scribd company logo
Derrick J. Wippler
Blog: http://thrawn01.org
Twitter: @thrawn01
CBS
Cloud Block Storage
Android Super NES Emulator
http://www.superretro16.com/
Android Super NES Emulator
http://www.superretro16.com/
Tech Talk Tuesday, April 5th
Containers
What Containers Are NOT
DOCKER != CONTAINERS
Container Technology is
provided by the Linux
Kernel
NOT LXC
Linux Kernel Containers
Everything you need to create and
run containers already exists in the
linux kernel
Everything you need to create and
run containers already exists in the
linux kernel
However…….
CHROOT
CHROOT PROVIDES
Isolate Process & File systems
CHROOT
CHROOT
Kernel Namespaces
CGroups
Namespaces
PID Namespaces
NET Namespaces
PID Namespaces Provide
Process Isolation
PID NameSpace 1
PID NameSpace 1
PID NameSpace 2
PID NameSpace 3
PID NameSpace 4
PID NameSpace 1
PID NameSpace 2
PID NameSpace 3
PID NameSpace 4
CHROOT ?
NET Namespaces
NET Namespaces Provide
Network Isolation
Root NET Namespace
NET Namespace 1
NET Namespace 2
Root NET Namespace
NET Namespace 1
NET Namespace 2
Network your chroots together inside the
kernel
Network your chroots together inside the
kernel
Sounds like - VM Hypervisor
Container is NOT a VM
Container is NOT a VM
VM’s run entire OS
Container is NOT a VM
VM’s run entire OS
Containers run a single process
<demo>
Remember, when you start a container, you are just
starting a process with namespaces
Existing container
workloads on VMs
2X DataCenters
Configuration
Management
Infrastructure is in a known state.
Prevent Infrastructure drift.
Self Healing
Reliability
Overall Goal of a CMS
Container Images treated as
immutable
No more Infrastructure Drift
Prevent Infrastructure drift
Infrastructure is in a known state
Self Healing
Clustering
What is Kubernetes
Kubernetes is an open source orchestration system for Docker
containers. It handles scheduling onto nodes in a compute cluster and
actively manages workloads to ensure that their state matches the
user's declared intentions.
Kubernetes Monitoring
Builtin support for application level health checks
(DB Checks, Socket & Http checks, etc…)
Automatically restart crashed processes (aka containers)
Natively React to Monitor Events
Prevent Infrastructure drift
Infrastructure is in a known state
Self Healing
MANAGED BY KUBERNETES
Self healing
No Infrastructure Drift
Infrastructure is in a known state
Reliability
Why do we need Configuration
Management?
What about Operating System Configuration?
Immutable Operating Systems
Immutable Infrastructure
AKA
Brandon Phillips CTO Alex Polvi CEO
All you need is a OS that can run
Containers
No Package Manager
Immutable Config files
Why configure the OS?
Our containers can contain all OS config
files and daemons necessary for our
application to run
How to configure all the disparate containers?
Consistent Distributed Key Store
Why do we need Configuration
Management?
Brian Redbeard
Principal Architect CoreOS
“If we do our job correctly, future releases
of CoreOS will NOT have SSH server
installed”
“If we do our job correctly, future releases
of CoreOS will NOT have SSH server
installed”
How you would design your
infrastructure/software if you were unable
to SSH into the host OS?
Infrastructure as a service is dying
Typical Operating System
Kernel
Configuration
Storage
Workloads
Typical Operating System
Kernel
Configuration
Storage
Linux Kernel
/etc
FileSystems EXT4
Workloads Processes
Typical Operating System
Kernel
Configuration
Storage
Linux Kernel
/etc
FileSystems EXT4
Kubernetes
etcd
ISCSI Block or
FSAS
Workloads Processes Containers
Cloud Operating System
Infinite CPU Power
Infinite RAM
Infinite DISK
Distributed Scale
Self Healing
Always Available
All I WANT
create my application in a container
make it scale
I don’t want it to go down
Blog: http://thrawn01.org
Twitter: @thrawn01

More Related Content

What's hot

What's hot (20)

Lions, Tigers and Deers: What building zoos can teach us about securing micro...
Lions, Tigers and Deers: What building zoos can teach us about securing micro...Lions, Tigers and Deers: What building zoos can teach us about securing micro...
Lions, Tigers and Deers: What building zoos can teach us about securing micro...
 
High 5 Final Presentation
High 5 Final PresentationHigh 5 Final Presentation
High 5 Final Presentation
 
Bolt on Windows - James Pogran
Bolt on Windows - James PogranBolt on Windows - James Pogran
Bolt on Windows - James Pogran
 
Container Security
Container SecurityContainer Security
Container Security
 
Democratizing Development - Scott Gress
Democratizing Development - Scott GressDemocratizing Development - Scott Gress
Democratizing Development - Scott Gress
 
Ingite Slides for InSpec
Ingite Slides for InSpecIngite Slides for InSpec
Ingite Slides for InSpec
 
JUC Europe 2015: Jenkins-Based Continuous Integration for Heterogeneous Hardw...
JUC Europe 2015: Jenkins-Based Continuous Integration for Heterogeneous Hardw...JUC Europe 2015: Jenkins-Based Continuous Integration for Heterogeneous Hardw...
JUC Europe 2015: Jenkins-Based Continuous Integration for Heterogeneous Hardw...
 
Selenium Grid & Docker - budowa środowiska do testów przeglądarkowych
Selenium Grid & Docker - budowa środowiska do testów przeglądarkowychSelenium Grid & Docker - budowa środowiska do testów przeglądarkowych
Selenium Grid & Docker - budowa środowiska do testów przeglądarkowych
 
Using Docker for Testing
Using Docker for TestingUsing Docker for Testing
Using Docker for Testing
 
Justin Cormack - The 10 Container Security Tricks That Will Help You Sleep At...
Justin Cormack - The 10 Container Security Tricks That Will Help You Sleep At...Justin Cormack - The 10 Container Security Tricks That Will Help You Sleep At...
Justin Cormack - The 10 Container Security Tricks That Will Help You Sleep At...
 
Kali kinux1
Kali kinux1Kali kinux1
Kali kinux1
 
DevSecCon Singapore 2018 - System call auditing made effective with machine l...
DevSecCon Singapore 2018 - System call auditing made effective with machine l...DevSecCon Singapore 2018 - System call auditing made effective with machine l...
DevSecCon Singapore 2018 - System call auditing made effective with machine l...
 
Jenkins.pptx
Jenkins.pptxJenkins.pptx
Jenkins.pptx
 
JUC Europe 2015: Optimizing Your CI: Lessons Learned from a Successful Jenkin...
JUC Europe 2015: Optimizing Your CI: Lessons Learned from a Successful Jenkin...JUC Europe 2015: Optimizing Your CI: Lessons Learned from a Successful Jenkin...
JUC Europe 2015: Optimizing Your CI: Lessons Learned from a Successful Jenkin...
 
Drupal Continuous Integration with Jenkins - The Basics
Drupal Continuous Integration with Jenkins - The BasicsDrupal Continuous Integration with Jenkins - The Basics
Drupal Continuous Integration with Jenkins - The Basics
 
Everyone Matters In Infosec 2014
Everyone Matters In Infosec 2014Everyone Matters In Infosec 2014
Everyone Matters In Infosec 2014
 
Living with Files More Happily
Living with Files More HappilyLiving with Files More Happily
Living with Files More Happily
 
Intro to Docker and clustering with Rancher from scratch
Intro to Docker and clustering with Rancher from scratchIntro to Docker and clustering with Rancher from scratch
Intro to Docker and clustering with Rancher from scratch
 
Adding Security to Your Workflow with InSpec (MAY 2017)
Adding Security to Your Workflow with InSpec (MAY 2017)Adding Security to Your Workflow with InSpec (MAY 2017)
Adding Security to Your Workflow with InSpec (MAY 2017)
 
How to Install and Configure Jenkins on Centos 7
How to Install and Configure Jenkins on Centos 7How to Install and Configure Jenkins on Centos 7
How to Install and Configure Jenkins on Centos 7
 

Viewers also liked

Práctica power point transiciones, animaciones
Práctica power point   transiciones, animacionesPráctica power point   transiciones, animaciones
Práctica power point transiciones, animaciones
Veronica Centeno
 
Announcements, 1/13/13
Announcements, 1/13/13Announcements, 1/13/13
Announcements, 1/13/13
CLADSM
 
musei
museimusei
musei
SFT
 
ամանորյա խնդրագիրք
ամանորյա խնդրագիրքամանորյա խնդրագիրք
ամանորյա խնդրագիրք
ganyan
 
Corporate Your Yocial
Corporate Your Yocial Corporate Your Yocial
Corporate Your Yocial
Patric Kint
 

Viewers also liked (16)

Produzeni boravak
Produzeni boravakProduzeni boravak
Produzeni boravak
 
APNIC Foundation
APNIC FoundationAPNIC Foundation
APNIC Foundation
 
Script mouse annotated
Script mouse annotatedScript mouse annotated
Script mouse annotated
 
Práctica power point transiciones, animaciones
Práctica power point   transiciones, animacionesPráctica power point   transiciones, animaciones
Práctica power point transiciones, animaciones
 
Joshua tree np 03 08
Joshua tree np 03 08Joshua tree np 03 08
Joshua tree np 03 08
 
Los sentidos
Los sentidosLos sentidos
Los sentidos
 
Свети сава 2007
Свети сава 2007Свети сава 2007
Свети сава 2007
 
Announcements, 1/13/13
Announcements, 1/13/13Announcements, 1/13/13
Announcements, 1/13/13
 
B2B Social Media Marketing
B2B Social Media MarketingB2B Social Media Marketing
B2B Social Media Marketing
 
musei
museimusei
musei
 
ամանորյա խնդրագիրք
ամանորյա խնդրագիրքամանորյա խնդրագիրք
ամանորյա խնդրագիրք
 
Corporate Your Yocial
Corporate Your Yocial Corporate Your Yocial
Corporate Your Yocial
 
5 Ways Digital Advertising is Growing Up (Finally!)
5 Ways Digital Advertising is Growing Up (Finally!)5 Ways Digital Advertising is Growing Up (Finally!)
5 Ways Digital Advertising is Growing Up (Finally!)
 
งานคอม2
งานคอม2งานคอม2
งานคอม2
 
Broadband Networks, Inc. bbnc mar
Broadband Networks, Inc.   bbnc marBroadband Networks, Inc.   bbnc mar
Broadband Networks, Inc. bbnc mar
 
@CXMeeting CXM - Editorial de Carlos Tercero, Stiga
@CXMeeting CXM - Editorial de Carlos Tercero, Stiga@CXMeeting CXM - Editorial de Carlos Tercero, Stiga
@CXMeeting CXM - Editorial de Carlos Tercero, Stiga
 

Similar to Containers what are they, and why are they important v2.1

Similar to Containers what are they, and why are they important v2.1 (20)

Containers - (Austin Cloud Meetup April 2016)
Containers - (Austin Cloud Meetup April 2016)Containers - (Austin Cloud Meetup April 2016)
Containers - (Austin Cloud Meetup April 2016)
 
Container & kubernetes
Container & kubernetesContainer & kubernetes
Container & kubernetes
 
0x02 - Windows Privilege Esc - A Low Level Explanation of Token Theft
0x02 - Windows Privilege Esc - A Low Level Explanation of Token Theft0x02 - Windows Privilege Esc - A Low Level Explanation of Token Theft
0x02 - Windows Privilege Esc - A Low Level Explanation of Token Theft
 
0x002 - Windows Priv Esc - A Low Level Explanation of Token Theft
0x002 - Windows Priv Esc - A Low Level Explanation of Token Theft0x002 - Windows Priv Esc - A Low Level Explanation of Token Theft
0x002 - Windows Priv Esc - A Low Level Explanation of Token Theft
 
Weave User Group Talk - DockerCon 2017 Recap
Weave User Group Talk - DockerCon 2017 RecapWeave User Group Talk - DockerCon 2017 Recap
Weave User Group Talk - DockerCon 2017 Recap
 
Containers and Nutanix - Acropolis Container Services
Containers and Nutanix - Acropolis Container ServicesContainers and Nutanix - Acropolis Container Services
Containers and Nutanix - Acropolis Container Services
 
Common primitives in Docker environments
Common primitives in Docker environmentsCommon primitives in Docker environments
Common primitives in Docker environments
 
Resinio
ResinioResinio
Resinio
 
The Architecture of Continuous Innovation - OSCON 2015
The Architecture of Continuous Innovation - OSCON 2015The Architecture of Continuous Innovation - OSCON 2015
The Architecture of Continuous Innovation - OSCON 2015
 
DockerCon 16 General Session Day 1
DockerCon 16 General Session Day 1DockerCon 16 General Session Day 1
DockerCon 16 General Session Day 1
 
There and Back Again (My DevOps journey) - DevOps Days Copenhagen 2018
There and Back Again (My DevOps journey) - DevOps Days Copenhagen 2018There and Back Again (My DevOps journey) - DevOps Days Copenhagen 2018
There and Back Again (My DevOps journey) - DevOps Days Copenhagen 2018
 
Austin Web Architecture
Austin Web ArchitectureAustin Web Architecture
Austin Web Architecture
 
DevOps with Kubernetes and Helm - Jenkins World Edition
DevOps with Kubernetes and Helm - Jenkins World EditionDevOps with Kubernetes and Helm - Jenkins World Edition
DevOps with Kubernetes and Helm - Jenkins World Edition
 
To Build My Own Cloud with Blackjack…
To Build My Own Cloud with Blackjack…To Build My Own Cloud with Blackjack…
To Build My Own Cloud with Blackjack…
 
Study notes for CompTIA Certified Advanced Security Practitioner (ver2)
Study notes for CompTIA Certified Advanced Security Practitioner  (ver2)Study notes for CompTIA Certified Advanced Security Practitioner  (ver2)
Study notes for CompTIA Certified Advanced Security Practitioner (ver2)
 
A Survey of Container Security in 2016: A Security Update on Container Platforms
A Survey of Container Security in 2016: A Security Update on Container PlatformsA Survey of Container Security in 2016: A Security Update on Container Platforms
A Survey of Container Security in 2016: A Security Update on Container Platforms
 
Windows container security
Windows container securityWindows container security
Windows container security
 
Talk at the Boston Cloud Foundry Meetup June 2015
Talk at the Boston Cloud Foundry Meetup June 2015Talk at the Boston Cloud Foundry Meetup June 2015
Talk at the Boston Cloud Foundry Meetup June 2015
 
Containerize! Between Docker and Jube.
Containerize! Between Docker and Jube.Containerize! Between Docker and Jube.
Containerize! Between Docker and Jube.
 
The Docker "Gauntlet" - Introduction, Ecosystem, Deployment, Orchestration
The Docker "Gauntlet" - Introduction, Ecosystem, Deployment, OrchestrationThe Docker "Gauntlet" - Introduction, Ecosystem, Deployment, Orchestration
The Docker "Gauntlet" - Introduction, Ecosystem, Deployment, Orchestration
 

Recently uploaded

Search and Society: Reimagining Information Access for Radical Futures
Search and Society: Reimagining Information Access for Radical FuturesSearch and Society: Reimagining Information Access for Radical Futures
Search and Society: Reimagining Information Access for Radical Futures
Bhaskar Mitra
 

Recently uploaded (20)

Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
 
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...
 
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptxIOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
Bits & Pixels using AI for Good.........
Bits & Pixels using AI for Good.........Bits & Pixels using AI for Good.........
Bits & Pixels using AI for Good.........
 
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
Exploring UiPath Orchestrator API: updates and limits in 2024 🚀
 
Unpacking Value Delivery - Agile Oxford Meetup - May 2024.pptx
Unpacking Value Delivery - Agile Oxford Meetup - May 2024.pptxUnpacking Value Delivery - Agile Oxford Meetup - May 2024.pptx
Unpacking Value Delivery - Agile Oxford Meetup - May 2024.pptx
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
 
Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
 
The Future of Platform Engineering
The Future of Platform EngineeringThe Future of Platform Engineering
The Future of Platform Engineering
 
PHP Frameworks: I want to break free (IPC Berlin 2024)
PHP Frameworks: I want to break free (IPC Berlin 2024)PHP Frameworks: I want to break free (IPC Berlin 2024)
PHP Frameworks: I want to break free (IPC Berlin 2024)
 
Connector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a buttonConnector Corner: Automate dynamic content and events by pushing a button
Connector Corner: Automate dynamic content and events by pushing a button
 
Speed Wins: From Kafka to APIs in Minutes
Speed Wins: From Kafka to APIs in MinutesSpeed Wins: From Kafka to APIs in Minutes
Speed Wins: From Kafka to APIs in Minutes
 
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...
 
Demystifying gRPC in .Net by John Staveley
Demystifying gRPC in .Net by John StaveleyDemystifying gRPC in .Net by John Staveley
Demystifying gRPC in .Net by John Staveley
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
 
UiPath Test Automation using UiPath Test Suite series, part 2
UiPath Test Automation using UiPath Test Suite series, part 2UiPath Test Automation using UiPath Test Suite series, part 2
UiPath Test Automation using UiPath Test Suite series, part 2
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
 
Search and Society: Reimagining Information Access for Radical Futures
Search and Society: Reimagining Information Access for Radical FuturesSearch and Society: Reimagining Information Access for Radical Futures
Search and Society: Reimagining Information Access for Radical Futures
 

Containers what are they, and why are they important v2.1