BELOW KUBERNETES DEMYSTIFYING CONTAINER RUNTIMES Thierry Carrez, - - PowerPoint PPT Presentation

▶

below kubernetes

BELOW KUBERNETES DEMYSTIFYING CONTAINER RUNTIMES Thierry Carrez, - - PowerPoint PPT Presentation

Mar 13, 2024 834 likes •1.38k views

BELOW KUBERNETES DEMYSTIFYING CONTAINER RUNTIMES Thierry Carrez, OpenStack Foundation (OSF) @tcarrez on Twitter ttx on Freenode WHY AM I HERE? WHY AM I HERE? OpenStack is more than just VMs WHY AM I HERE? OpenStack is more than just

slide-1

SLIDE 1

BELOW KUBERNETES

DEMYSTIFYING CONTAINER RUNTIMES

Thierry Carrez, OpenStack Foundation (OSF) @tcarrez on Twitter ttx on Freenode

slide-2

SLIDE 2

WHY AM I HERE?

slide-3

SLIDE 3

WHY AM I HERE?

▪ OpenStack is more than just VMs

slide-4

SLIDE 4

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack

slide-5

SLIDE 5

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack ▪ Openly developing open infrastructure

slide-6

SLIDE 6

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack ▪ Openly developing open infrastructure

slide-7

SLIDE 7

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack ▪ Openly developing open infrastructure

slide-8

SLIDE 8

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack ▪ Openly developing open infrastructure

slide-9

SLIDE 9

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack ▪ Openly developing open infrastructure

slide-10

SLIDE 10

WHY AM I HERE?

▪ OpenStack is more than just VMs ▪ OSF is more than just OpenStack ▪ Openly developing open infrastructure

slide-11

SLIDE 11

Kubernetes

slide-12

SLIDE 12

Kubernetes

slide-13

SLIDE 13

Kubernetes

?

slide-14

SLIDE 14

Kubernetes

?

Linux Kernel

slide-15

SLIDE 15

15

slide-16

SLIDE 16

1. THE WORLD USED TO BE SIMPLE

slide-17

SLIDE 17

Kubernetes Docker Linux Kernel

slide-18

SLIDE 18

2. INTERFACES

slide-19

SLIDE 19

OCI

▪ Open Containers Initiative, est. June 2015

slide-20

SLIDE 20

OCI

▪ Open Containers Initiative, est. June 2015 ▪ Standardize the wild west of container tech

slide-21

SLIDE 21

OCI

▪ Open Containers Initiative, est. June 2015 ▪ Standardize the wild west of container tech ▪ Runtime spec defining OCI runtimes

slide-22

SLIDE 22

OCI

▪ Open Containers Initiative, est. June 2015 ▪ Standardize the wild west of container tech ▪ Runtime spec defining OCI runtimes ▪ Image spec defining OCI runtime bundles

slide-23

SLIDE 23

Kubernetes Docker Linux Kernel

slide-24

SLIDE 24

OCI Linux Kernel Kubernetes runC Docker

slide-25

SLIDE 25

CRI

▪ Container Runtime Interface, est. Dec 2016

slide-26

SLIDE 26

CRI

▪ Container Runtime Interface, est. Dec 2016 ▪ Primitives to manage pods of containers

slide-27

SLIDE 27

CRI

▪ Container Runtime Interface, est. Dec 2016 ▪ Primitives to manage pods of containers ▪ A single interface for Rkt & Docker

slide-28

SLIDE 28

Docker Linux Kernel Kubernetes runC OCI rkt

slide-29

SLIDE 29

Linux Kernel Kubernetes runC OCI CRI Docker rkt

slide-30

SLIDE 30

Docker CLI Linux Kernel Kubernetes CRI containerd cri-containerd runC OCI rkt

slide-31

SLIDE 31

2. MORE PUZZLE PIECES

slide-32

SLIDE 32

containerd cri-containerd Docker CLI Linux Kernel Kubernetes CRI runC OCI

slide-33

SLIDE 33

containerd cri-containerd Docker CLI Linux Kernel Kubernetes CRI runC OCI

slide-34

SLIDE 34

cri-containerd containerd Docker CLI Linux Kernel Kubernetes CRI runC OCI CRI-O

slide-35

SLIDE 35

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI

slide-36

SLIDE 36

3. WORKLOAD ISOLATION

slide-37

SLIDE 37

THE DIRTY SECRET OF CONTAINERS

slide-38

SLIDE 38

THE DIRTY SECRET OF CONTAINERS

▪ Containers don’t contain

slide-39

SLIDE 39

THE DIRTY SECRET OF CONTAINERS

▪ Containers don’t contain ▪ Real-world containers run in VMs

slide-40

SLIDE 40

THE DIRTY SECRET OF CONTAINERS

▪ Containers don’t contain ▪ Real-world containers run in VMs ▪ In GCP, Azure, AWS or Alicloud

slide-41

SLIDE 41

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU

slide-42

SLIDE 42

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU runV hyper

slide-43

SLIDE 43

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman OCI KVM QEMU Frakti runV Kubernetes hyper

slide-44

SLIDE 44

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman OCI KVM QEMU runV Clear Containers Frakti Kubernetes hyper

slide-45

SLIDE 45

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman OCI KVM QEMU Kata Containers Frakti Kubernetes

slide-46

SLIDE 46

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU Frakti Kata Containers

slide-47

SLIDE 47

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU Frakti Kata Containers gVisor

(ptrace mode)

slide-48

SLIDE 48

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU Frakti Kata Containers gVisor

(ptrace mode)

Firecracker

slide-49

SLIDE 49

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU Frakti Kata Containers gVisor

(ptrace mode)

Firecracker

slide-50

SLIDE 50

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU Frakti Kata Containers gVisor

(ptrace mode)

Firecracker

slide-51

SLIDE 51

Linux Kernel runC CRI cri-containerd CRI-O containerd Docker CLI Podman Kubernetes OCI KVM QEMU Frakti Kata Containers gVisor

(ptrace mode)

Firecracker

CLI tools CRI runtimes OCI runtimes VMMs

slide-52

SLIDE 52

THANKS!

Any questions?

Credits

Slides by slidescarnival.com, CC-BY-4.0 Photograph licensed under Unsplash license

You can reach me at

@tcarrez on Twitter thierry@openstack.org by email