Upgrade to Pro — share decks privately, control downloads, hide ads and more …

CoreOS rkt and Kubernetes

Josh Wood
February 18, 2016

CoreOS rkt and Kubernetes

CoreOS rkt container runtime running Kubernetes; Kubernetes running rkt. (Kubernetes Colorado meetup, Deis, Boulder, CO)

Josh Wood

February 18, 2016
Tweet

More Decks by Josh Wood

Other Decks in Technology

Transcript

  1. CoreOS is running the world’s containers We’re hiring: [email protected] [email protected]

    90+ Projects on GitHub, 1,000+ Contributors coreos.com Support plans, training and more OPEN SOURCE ENTERPRISE
  2. rkt A modern, secure container runtime Simple CLI tool -

    exorcism (no daemon) Composable with systemd, standard init systems
  3. rkt run • Isolates containers with the linux container primitives

    (cgroups, ns), systemd-nspawn • Container apps in a machine slice PID namespace • Manage with standard init tools: systemd • Network isolation
  4. $ rkt run quay.io/josh_wood/caddy rkt: using image from local store

    for image name coreos.com/rkt/stage1-coreos:0.15.0 rkt: using image from local store for image name quay.io/josh_wood/caddy [ 1161.330635] caddy[4]: Activating privacy features... done. [ 1161.333482] caddy[4]: :2015 $ rkt run
  5. rkt fly • Leverages the packaging, discovery, distribution, and validation

    features of rkt/appc • Reduced isolation for privileged components • chroot file system isolation only • Has access to host-level mount, network, PID name spaces • Method for shipping k8s kubelet in CoreOS
  6. $ rkt run \ --stage1-path=/usr/share/rkt/stage1-fly.aci \ quay.io/josh_wood/caddy rkt: using image

    from local store for image name coreos.com/rkt/stage1-fly:0.15.0 rkt: using image from local store for image name quay.io/josh_wood/caddy [ 1161.333482] caddy[4]: :2015 $ rkt run stage1=fly
  7. rkt and Kubernetes on CoreOS rkt fly executes kubelet: packaging

    and distribution of containers, access at host level rkt acts as container execution engine, runs cluster work
  8. $ rkt run --stage1-path=stage1-fly.aci \ /usr/bin/kubelet -- --container-runtime=rkt rkt: using

    image from local store for image name coreos.com/rkt/stage1-fly:1.0.0 [...] $ rkt runs k8s runs rkt
  9. rkt and Kubernetes on CoreOS • rkt fly executes kubelet:

    packaging and distribution of containers, ns at host level • rkt is container execution engine, runs cluster work • Pod :: Pod • CNI networking
  10. May 9 & 10, 2016 | Berlin, Germany • Early

    bird tickets • Sponsorships are still available • Submit a talk before February 29th! coreos.com/fest @coreosfest