CRI Runtimes Deep-Dive: Who's Running My Pod!?
2 likes642 views
The document discusses container runtimes in the context of Kubernetes, highlighting the importance of runtime pluggability for performance and stability. It introduces containerd as a core container runtime and outlines its benefits and integration with Kubernetes. The content also mentions various cloud platforms and their use of containerd, along with links to further resources and demonstrations.
CRI Runtimes Deep-Dive: Who's Running My Pod!?
- 1. @estesp CRI Runtimes: Who is running my pod?
- 2. @estesp Hello! I’m Phil Estes Distinguished Engineer & CTO, Linux OS & Container Architecture IBM Watson & Cloud Platform Docker Captain, containerd maintainer @estesp
- 3. @estesp Docker Containers $ docker run redis $ docker ps $ docker stop redis $ docker build -t myapp .
- 4. @estesp (See the CNCF CCoC CoC) You are using Kubernetes aren’t you? ?
- 6. @estesp kubelet dockershim dockerd containerd runc https://github.com/kubernetes/kubernetes/tree/release-1.4/pkg/kubelet/dockershim Kubernetes doesn’t run your containers
- 7. @estesp
- 8. @estesp Kubernetes Container Runtime CRI ▧ K8s API ▧ Storage ▧ Networking (CNI) ▧ Healthchecks ▧ Placement ▧ Custom resources ▧ Pod container lifecycle ○ Start/stop/delete ▧ Image management ○ Push/pull/status ▧ Status ▧ Container interactions ○ attach, exec, ports, log
- 9. @estesp kubelet dockershim dockerd kubelet cri-containerd containerd kubelet cri-o runc kubelet frakti runV dockerd kubelet --container-runtime {string} --container-runtime-endpoint {string} What Runtimes Exist?
- 11. @estesp The benefits of runtime pluggability are mostly focused on operational concerns.
- 12. @estesp runtimes
- 13. @estesp What do I need? ▧ Performance ▧ Stability ▧ (Optional) Hypervisor Isolation ▧ Security Capabilities ▧ Broad Usage ▧ Multi-architecture Support
- 14. @estesp Containerd: A Core Runtime runc containerd
- 15. @estesp Containerd Benefits ● Designed with broad usage as a core container runtime: ○ Docker, LinuxKit, Kubernetes and embedded core runtime use cases (OpenWhisk, Cloud Foundry) ● Stress testing for stability and performance guarantees 24/7 ● Usable Go library (or gRPC) for ease of embedding ● Compatibility guarantees; bug fix backports for stable support
- 17. @estesp Containerd in the Cloud(s) ▧ Kelsey Hightower’s “Kubernetes the Hard Way” deploys containerd as the kubelet runtime ▧ GKE alpha: containerd-based K8s clusters ▧ IBM Cloud: containerd-based clusters in staging ▧ Azure: OSS acs-engine includes containerd; AKS moving to containerd (but CRI-O for OpenShift) ▧ Amazon: still reviewing runtime options for EKS ▧ CloudFoundry: moving to containerd from runc
- 18. @estesp Kubernetes 1.11 + contained 1.1.0
- 20. @estesp Going Further ▧ crictl User’s Guide: https://github.com/containerd/cri/blob/master/docs/crictl.md ▧ Stephen Day’s KubeCon 2018 containerd talk: https://www.youtube.com/watch?v=3AynH3c0F8M ▧ Containerd project: https://github.com/containerd/containerd
- 21. @estesp Thanks! Any questions? You can find me at: @estesp estesp@gmail.com
- 22. @estesp Credits Special thanks to all the people who made and released these awesome resources for free: ▧ Presentation template by SlidesCarnival ▧ Photographs by Unsplash ▧ Backgrounds by Pixeden