State of Linux Kernel Container Features - Stephane Graber, Canonical Ltd. & Christian Brauner скачать в хорошем качестве

State of Linux Kernel Container Features - Stephane Graber, Canonical Ltd. & Christian Brauner

State of Linux Kernel Container Features - Stephane Graber, Canonical Ltd. & Christian Brauner, Microsoft Corp As we like to say, containers are a userspace fiction, there is no such thing as a container object in the Linux kernel. Instead containers are made of a variety of different technologies with each container manager choosing its exact mix and configuration. New kernel features are constantly added, either specifically for use by containers or as general security features or just a completely unrelated feature which turns out to be of use for containers. Here we're talking about anything from new CGroup logic, eBPF enhancements, namespace extensions, VFS improvements, filesystem changes, ... In this talk, we'll be going over a brief state of things, especially when it comes to safe, unprivileged containers, look at the work that's been done over the past year or so that can significantly improve the container experience and go over what's next to come.