猿でもわかるコンテナ V3 / a-monkeys-guide-to-container-v3

猿でもわかるコンテナ V3

Transcript

1. View Slide

2. 2
   §
   § Sr. DevOps Acceleration Engineer @JFrog
   § DevOps Liquid Software
   §
   @tsuyoshi_miyake
   miyaket@jfrog.com
   

   View Slide

3. 3
   § Webinar
   Ø
   §
   § Q&A
   Ø
   Ø Chat
   

   View Slide

4. Q&A
   4
   

   View Slide

5. View Slide

6. 6
   - https://www.docker.com/resources/what-container
   Photo by Victoire Joncheray on Unsplash
   

   View Slide

7. §
   §
   §
   § VM
   §
   §
   §
   §
   7
   

   View Slide

8. View Slide

9. View Slide

10. §
    § A B
    §
    § CPU
    10
    

    View Slide

11. §
    § VM OS
    11
    

    View Slide

12. vs vs VM
    12
    

    View Slide

13. vs vs VM
    13
    

    View Slide

14. View Slide

15. View Slide

16. View Slide

17. § OS
    § Linux Namespaces
    § Linux Control Groups (cgroups)
    §
    § : runc rkt lmctfy
    17
    

    View Slide

18. Linux Namespaces
    §
    § Namespace
    § cgroups
    18
    source: https://man7.org/linux/man-pages/man7/namespaces.7.html
    

    View Slide

19. -u: UTS (hostname)
    -p: PID
    -f: fork
    Namespace
    19
    

    View Slide

20. Linux Control Groups (cgroups)
    §
    § CPU I/O
    20
    source: https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v1/cgroups.html
    

    View Slide

21. 21
    namespaces cgroups ...
    

    View Slide

22. View Slide

23. View Slide

24. §
    §
    § API
    § : Docker containerd rkt
    24
    

    View Slide

25. Docker
    §
    § dockerd
    § docker
    § dockerd/containerd/runc
    § dockerd (Docker Engine) Dockerfile
    25
    source: https://www.docker.com/blog/docker-engine-1-11-runc/
    

    View Slide

26. §
    § Docker
    §
    § Docker
    § Docker overlay2
    § Dockerfile
    § COPY
    26
    

    View Slide

27. View Slide

28. Union File System
    § FS FS
    § overlay2 Union FS OverlayFS
    28
    

    View Slide

29. § Docker
    §
    29
    

    View Slide

30. 1979
    2000
    chroot
    FreeBSD
    Jails
    IP
    30
    2001
    Linux
    VServer
    2017
    Kubernetes
    to CNCF
    2004
    Solaris
    Containers
    Solaris
    Resource
    Manager +
    Zones
    2008
    Process
    Containers
    Google
    cgroups
    2011
    LXC (LinuX
    Containers)
    Linux
    2013
    Warden
    CloudFoundry
    2013
    LMCTFY
    Let Me Contain
    That For You:
    Google
    OSS
    libcontainer
    2015
    2016
    OCI
    2016
    Container
    Security
    DevSecOps
    Containerd
    to CNCF
    2006
    Docker
    

    View Slide

31. View Slide

32. Q&A
    

    View Slide

33. THANK YOU!
    

    View Slide