Linux Container Primitives: cgroups, namespaces, and more!

Рет қаралды 51,052

4 жыл бұрын

Samuel Karp
Amazon Web Services
In this session, we’ll explore the different Linux primitives that are commonly used in implementing container runtimes. We’ll learn about the Linux primitives that underlie container runtimes like Docker, including cgroups, namespaces, and union filesystems. We’ll see how Docker uses these primitives, and how the OCI standard makes it possible to customize how your containers run. We’ll also discuss alternative container runtimes like CRI-O, rkt, and systemd-nspawn and what makes them different. This will be an interactive session with a live demo and open questions.

Пікірлер: 37

@timlind3129 2 ай бұрын

3 years later; this is still an excellent overview.

@eliyahkaz 4 жыл бұрын

this is the best explanation of cgroups i have seen so far, seeing things makes understanding them so simple 👍

@cvical 4 жыл бұрын

Super! A lot covered in 30+ mins. I needed to stop several times because it gold what’s in there.

@lienecirule4342 2 жыл бұрын

Eye opening video. Advanced and most importantly - understandable.

@kaneding9299 2 жыл бұрын

I cannot explain how useful this is. Thank you sincerely.

@kaidaniel4579 3 жыл бұрын

By far the best (and there are many) explanation I could find on the internet. Detailed yet clear and great precise narration.

@kirillsaltanov4586 2 жыл бұрын

One of the best video i ve seen about cgroups

@blumki 3 жыл бұрын

Very intuitive. Must watch for all the software engineers working in the current virtual software world

@shakhawat41 3 жыл бұрын

Advance level details coupled with demos - great job.

@sanikashah5755 4 жыл бұрын

Awesome! Took long time to watch it, lot of information in 30 minutes. I would have to watch multiple times to understand it, since I am kind of new to this! Thanks for the demos as well. They make it easier to understand : )

@TheNullBox 2 жыл бұрын

the introduction to cgroups were great.

@davidkillmon7242 4 жыл бұрын

This is such an awesome explanation! Thanks Sam!

@shulyakav 4 жыл бұрын

Excellent! Thank you, Sir.

@erickmanuelbazansalinas9705 3 жыл бұрын

thank you sir!, this has been a great explanation!

@thebsv 7 ай бұрын

This was excellent. Thank you!

@carloszavaleta 3 жыл бұрын

this was awesome - thanks!

@icodevpi 3 жыл бұрын

Thank you very much, great content.

@mads7401 3 жыл бұрын

Thanks, great explanation :)

@ArchonLicht Жыл бұрын

Awesome talk, thank you very much!

@vagueanxiety42 2 жыл бұрын

thanks! it is packed with info and I had to pause multiple times to digest it. (I was a little confused by unshare syscall and unshare util....

@tigrangevorgyan3584 2 жыл бұрын

Thanks! This was useful to me!

@TheDiveO 2 ай бұрын

minor correction: the procfs links to namespaces aren't symbolic links, even as they look like them. They're something else because they have a reference counted relation to the nsfs where the namespace inodes (numbers) are allocated and released. By bind mounting these references, you can keep process-less namespaces alive, which you cannot do using symbolic links: the namespaces would be garbage collected.

@friedbrainz7998 4 ай бұрын

Bit late, but I loved your video.

@mohammadmottaghi4369 2 жыл бұрын

Nice Nice ! Good job ! minor improvement would be to highlight the dir-names during your demo so people can spot them faster.

@kaveh6161 Жыл бұрын

That was awesome 🤗

@ankk98 2 жыл бұрын

Need to watch it again with focus

@clee7408 3 жыл бұрын

Excellent!

@marcello4258 2 жыл бұрын

super valuable video! thanks a lot

@fsamobby 2 жыл бұрын

wow that's kinda lit!!

@rohitmishra6402 Жыл бұрын

To execute redis binary on the host, is it necessary to enter mount ns? What about just doing sudo /proc//exe without nsenter, it does the same, because exe is really a symbolic link to the redis-binary on the container file system, amazing video in between, so good to watch with everything explained clearly and crisply.

@kirillsaltanov4586 2 жыл бұрын

If it is possible please provide the same style video about hooks for the container, how play on them. thanks

@tianhepeng9162 2 жыл бұрын

I can only understand some about the cgroup parts. The rest are too unfamiliar for me. You guys can understand all 3 sections?

@khongmunhing6948 3 жыл бұрын

Thanks. I love your explanation. I give me to understand more. Do you have your own youtube channel that I can subscribe it?

@user-bh2rd1dz1z 3 ай бұрын

Reading from a script and no explanations? I can do that too. If I put each of your chapters into chatGPT I get more informative explanations than this mess of a presentation...