Container Engines are like wheel bearings, you should be able to replace them when they stop working. Also, you shouldn’t have to care about what brand they are. That’s what the Kubernetes Container Runtime Interface (CRI) aims to solve. CRI defines the API used to talk to container engines and all the major container engines
Background What is sVirt and, why does it matter for your containers? The short answer is, because sVirt is another layer of security and defense in depth is a good approach to security. The longer answer is, sVirt dynamically generates an SELinux label for every single one of your containers, which makes them less likely
Continue Reading “What is sVirt and How Does it Isolate Linux Containers?”
Are you looking at CRI-O vs. contianerd and wondering to yourself, which one should I use? If you are…. DON’T – that’s not actually something you should be thinking about. Here’s why…. When it comes to containers there are a ton of APIs in the ecosystem. Different users, community projects and commercial products have made
Continue Reading “Competition Heats Up Between CRI-O and containerd – Actually, That’s Not a Thing…”
When I answer technical questions, I try to treat people with respect. I assume that people are smart and know how to make good decisions if they have the right information. I try to give them facts, so that the architect part of their brain has the information it needs to make good decisions and
Background I’m here to tell you that somebody on the Internet is wrong! Actually, many people. If you have ever consulted Google for the words “Docker Architecture” you may have found a drawing that implies that Docker is some sort of blue box which sits on top of an operating system and runs containers. That
Background My problem, like most technologists, is that I only have a slice of my time to dedicate toward acquiring and maintaining knowledge about any given technology, product, project, tool, platform, etc. Split that with the fact that almost every CIO is preaching that we, as technologists, need to be closer to the business,
Continue Reading “Hacker’s Guide to Installing OpenShift Container Platform 3.9”
Many times, new technologies seem deceptively simple – but I have never found them to actually be simpler. I have always loved the deep technical underpinnings of computing and that’s why I often write about how things like Containers, Unikernels, and Serverless work under the covers. Recently, I was at DevConf in Brno, CZ and
Continue Reading “On Unikernels – Which is Heavier – VMs or OSes?”
Recently, I read another article that critiqued Kubernetes as having a steep learning curve. At conferences, I also hear a lot of people in the Kubernetes community talk about how we need to make it more easy to onboard people. While I think it’s a noble goal to make Kubernetes more usable, I don’t think
Continue Reading “Kubernetes is a 10 Ton Dump Truck That Handles Pretty Well at 200 MPH”
This is a live blog of this talk by the Azure Containers team. Michelle Noorali, leads SIG-Apps. Matt Butcher wrote the Children’s Guide for Kubernetes. They mention that they are going to talk about long running applications/services and short running batch jobs. Michelle started to talk about Kubernetes primatives for long running processes. She talked
Continue Reading “Open Source Summit Prague: Developer Tools for Kubernetes”
This session is by Igor Dvoretsky, Developer Advocate for the CNCF. I figured people are always interested in what’s new in the hottest project on GitHub, so I decided to attend this session. I decided to give live blogging a try 🙂 Igor first mentioned that he is a member of the release team for
Continue Reading “Open Source Summit Prague: What’s New in Kubernetes 1.8”
