appc + mesos @ MESOSCON 2015

Transcript

1. @coreoslinux @brandonphilips
2. About Me CTO/CO-FOUNDER systems engineer @brandonphilips github.com/philips
3. @brandonphilips
4. CoreOS Linux - Modern Kernels for Containers - Regular rolling update Alpha, Beta, Stable - Container runtimes out of the box - Docker - rkt - systemd-nspawn
5. 100+ repos github.com/coreos
7. container user story
8. you as an sw engineer
9. your with Ada.Text_IO; procedure Hello_World is use Ada.Text_IO; begin Put_Line("Hello, world!"); end; #include <stdio.h> int main() { printf("Hello, world!\n"); } package main import "fmt" func main() { fmt.Println("Hello, world!") }
10. your container image
11. your container image d474e8c57737625c
12. your d474e8c57737625c Signed By: Alice
13. your d474e8
14. your d474e8 d474e8 d474e8 Signed By: Alice Signed By: Alice Signed By: Alice
15. mesos + containers - Containerizers have existed for a long time - Uses Linux primitives to isolate from host system - Images not standardized: naming/finding/building - Marathon & Aurora fork/exec processes well - Tricky to use external init processes (e.g. docker) - What we will discuss - A specification for images (appc) - A runtime that can be fork/execd (rkt)
16. let's build an appc image
17. github.com/coreos/rkt
18. $ rkt
19. $ rkt
20. $ rkt fetch
21. $ rkt run
22. bash rkt application
23. runit rkt application
24. systemd rkt application
25. upstart rkt application
26. $ rkt run coreos.com/etcd:v2.0.11
27. stage0
28. stage1
29. stage2
30. github.com/appc/spec
31. Image Format Application Container Image (.aci) tarball of rootfs + manifest uniquely identified by ImageID (hash)
32. Image Discovery Resolves app name →artefact (.aci) example.com/http-server coreos.com/etcd DNS + HTTPS + HTML meta tags
33. Crypto Verification Take an ACI, public key and signature. Verify()
34. Pods grouping of multiple applications (templated or deterministic) shared execution context (namespaces, volumes)
35. Executor runtime environment isolators, networking, lifecycle metadata service
36. github.com/opencontainers/specs
37. appc and OCI aka https://xkcd.com/927
38. OCI - Open Containers Initiative - Announced June 2015 (as OCP) - Lightweight, open governance project - Linux Foundation - Container runtime format - configuration on disk, execution environment - Runtime implementation (runc)
39. appc vs OCI appc - image format - runtime environment - pods - image discovery OCI - runtime format - runtime environment
40. appc vs OCI appc runtime - environment variables - Linux device files - hooks - etc... - multiple apps OCI runtime - environment variables - Linux device files - hooks - etc... - single app (process)
41. Conclusions
42. github.com/coreos/rkt
43. MESOS-1806 +
44. github.com/appc/spec App Container
45. github.com/opencontainers/specs OCI
46. Thank you @brandonphilips coreos.com tectonic.com