猿でもわかるコンテナ V3 / a-monkeys-guide-to-container-v3

Slide 1

Slide 1 text

No content

Slide 2

Slide 2 text

2 § § Sr. DevOps Acceleration Engineer @JFrog § DevOps Liquid Software § @tsuyoshi_miyake [email protected]

Slide 3

Slide 3 text

3 § Webinar Ø § § Q&A Ø Ø Chat

Slide 4

Slide 4 text

Q&A 4

Slide 5

Slide 5 text

Slide 6

Slide 6 text

6 - https://www.docker.com/resources/what-container Photo by Victoire Joncheray on Unsplash

Slide 7

Slide 7 text

§ § § § VM § § § § 7

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

§ § A B § § CPU 10

Slide 11

Slide 11 text

§ § VM OS 11

Slide 12

Slide 12 text

vs vs VM 12

Slide 13

Slide 13 text

vs vs VM 13

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

Slide 17

Slide 17 text

§ OS § Linux Namespaces § Linux Control Groups (cgroups) § § : runc rkt lmctfy 17

Slide 18

Slide 18 text

Linux Namespaces § § Namespace § cgroups 18 source: https://man7.org/linux/man-pages/man7/namespaces.7.html

Slide 19

Slide 19 text

-u: UTS (hostname) -p: PID -f: fork Namespace 19

Slide 20

Slide 20 text

Linux Control Groups (cgroups) § § CPU I/O 20 source: https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v1/cgroups.html

Slide 21

Slide 21 text

21 namespaces cgroups ...

Slide 22

Slide 22 text

Slide 23

Slide 23 text

Slide 24

Slide 24 text

§ § § API § : Docker containerd rkt 24

Slide 25

Slide 25 text

Docker § § dockerd § docker § dockerd/containerd/runc § dockerd (Docker Engine) Dockerfile 25 source: https://www.docker.com/blog/docker-engine-1-11-runc/

Slide 26

Slide 26 text

§ § Docker § § Docker § Docker overlay2 § Dockerfile § COPY 26

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Union File System § FS FS § overlay2 Union FS OverlayFS 28

Slide 29

Slide 29 text

§ Docker § 29

Slide 30

Slide 30 text

1979 2000 chroot FreeBSD Jails IP 30 2001 Linux VServer 2017 Kubernetes to CNCF 2004 Solaris Containers Solaris Resource Manager + Zones 2008 Process Containers Google cgroups 2011 LXC (LinuX Containers) Linux 2013 Warden CloudFoundry 2013 LMCTFY Let Me Contain That For You: Google OSS libcontainer 2015 2016 OCI 2016 Container Security DevSecOps Containerd to CNCF 2006 Docker