Container services allow for isolation of applications and their dependencies through virtualization at the operating system level. Containers leverage features like cgroups for resource management, namespaces for process isolation, and SELinux for security to separate container processes and resources from the underlying host and other containers. Docker is the leading container runtime and orchestration technology, developed as both open source software called Moby and a commercial product from Docker Inc. Docker uses containers to package and run applications without needing a separate operating system.
4. ? VM ¨C Issues
? Own OS, CPU, RAM and Storage
? Patching (Patch Tuesday)
? Monitoring
? License
5. Hello Containers
? Google (Long Time)
? All containers = One OS
? No license
? Less CPU, RAM and storage
? System/360
? BSD Jails
? Solaris zones
7. Cgroups (control group) = resource management
Namespaces = Process Isolation
SELinux = Security (RHEL) Access control security policy
(Seperation between host and container) and also multiple container
16. Docker Open-Source Project (Moby)
? Dockercon 2017 = Moby
? https://github.com/moby
? Golang (system-level programing) from Google
? Latest DockerCon = April 29th - May 2 (2019) San Francisco
18. ? CoreOS = appc (new open standard) and defined image format &
container runtime
? Rkt (rocket)
? ¡°Healthy competition is the mother of invention¡±