docker testing the waters
play

Docker: Testing the Waters LA-UR 15-25901 1 LA-UR 15-25901 - PowerPoint PPT Presentation

Eric Holm Skyler Manzanares Yuxin (Kelly) Wang http://gerardable.com/wp-content/uploads/2014/12/docker-whale-home-logo.png Docker: Testing the Waters LA-UR 15-25901 1 LA-UR 15-25901 Docker: Theres No Containing this Whale! Free,


  1. Eric Holm Skyler Manzanares Yuxin (Kelly) Wang http://gerardable.com/wp-content/uploads/2014/12/docker-whale-home-logo.png Docker: Testing the Waters LA-UR 15-25901 1 LA-UR 15-25901

  2. Docker: There’s No Containing this Whale! • Free, open-source • Wraps applications into packages • Docker Images • Resource isolation • Independent of LXC • Very popular (buzzword compliant) • Open Container Project (OCP) • RHEL Atomic Project 2 LA-UR 15-25901

  3. Docker: There’s No Containing this Whale! • Free, open-source • Wraps applications into packages • Docker Images • Resource isolation • Independent of LXC • Very popular (buzzword compliant) • Open Container Project (OCP) • RHEL Atomic Project 3 LA-UR 15-25901

  4. Research Objectives • Explore basic features/functionality • Build process • Images • Local registry • Mixed OS/mixed versions • Security + Maintenance • Updating inside containers • Inventory • Workload testing • Comparison to VMs 4 LA-UR 15-25901

  5. Test Environment • 11 HP ProLiant DL380p Gen8 servers • 2 Intel Xeon E5-2620 processors • 24 GB DDR3 ram • CentOS 6.6 • Docker 1.6.0 • Extreme networks 10G ethernet switch • Mellanox QDR InfiniBand switch 5 LA-UR 15-25901

  6. Docker Setup • Docker 1.6.0 • CentOS 6.6 uses kernel 2.6 • Docker 1.7.0 requires kernel 3.10 • Docker 1.7.1 6 LA-UR 15-25901

  7. Docker Images + Registries • Image build process • Docker Hub • Local registry • Source code modification 7 LA-UR 15-25901

  8. Mixed OS Mixed Versions 8 LA-UR 15-25901

  9. Auto Updates • No init.d • No cron • Bash profile NO 9 http://thomason.io/wp-content/uploads/2015/01/docker_monstro.png LA-UR 15-25901

  10. Spacewalk • System management suite • Push updates to clients • Hardware and software inventory • Configuration management http://spacewalk.redhat.com/img/spacewalk-logo.png 10 LA-UR 15-25901

  11. Spacewalk • Solution to updating? • Software inventory • Configuration management 11 LA-UR 15-25901

  12. Docker Security • File permissions / Missing devices • Dev • Proc • Sys • Directory mounting • Kernel module loading/removing • No access to sockets 12 LA-UR 15-25901

  13. Security Testing • Nessus scan • Effect host system • Stonix 13 LA-UR 15-25901

  14. HPL Test • 10 series test • 12 containers, 2 VMs • 4 nodes • 316 data points 14 LA-UR 15-25901

  15. HPL Test Results 15 LA-UR 15-25901

  16. HPL Test Results 16 LA-UR 15-25901

  17. HPL Test Results 17 LA-UR 15-25901

  18. HPL Test Results 18 LA-UR 15-25901

  19. HPL Test Results 19 LA-UR 15-25901

  20. IOR (File IO) Tests • 10 set series • 2 cores per test • 2 containers/VMs • 70 data points • ext4 20 LA-UR 15-25901

  21. IOR Results 21 LA-UR 15-25901

  22. Stream (Memory Access) Test • 50 set series • 2 cores per test • 12 containers • 2 nodes • 158 data points 22 LA-UR 15-25901

  23. Stream (Memory Access) Results 23 LA-UR 15-25901

  24. Containers vs VMs Docker VMs Pros ▪ Free ▪ Established ▪ Open Source Technology ▪ Lightweight ▪ Increased Isolation ▪ Easily Portable ▪ Lots of Potential Cons ▪ Kernel exposure ▪ Software Cost ▪ Overhead 24 LA-UR 15-25901

  25. Conclusion • Performance • Huge potential • Keep an eye on it! 25 LA-UR 15-25901

  26. Future Work • More VM testing (up to 12) • More reliable benchmarks • Security testing 26 LA-UR 15-25901

  27. Acknowledgments • Mentors • David Kennel • Sherry Bachicha • Steven Montano • Instructors • Matthew Broomfield • Jarrett Crews • CSCNSI Administration • Andree Jacobson • Carolyn Connor • Gary Grider • Josephine Olivas 27 LA-UR 15-25901

  28. Questions • Docker overview • Exploring Docker features • Security & maintenance • Benchmarking • CPU • File IO • Memory Access • Docker containers & VMs https://docs.docker.com/images/docker-friends.png 28 LA-UR 15-25901

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend