Below Kubernetes: Demystifying container runtimes

by Thierry Carrez
At: FOSDEM 2020
video.fosdem.org/2020/UD2.208...
Today, the task of running containers involves a lot of technologies and levels of abstraction, and it can be difficult to understand, or just to keep up. How do CRI-O and containerd overlap ? Does Kata containers compete with Firecracker ? Is there any relationship between OCI and CRI ? How many different meanings can "container runtime" have ?
In this talk, we will navigate this treacherous sea of overlapping technologies and acronyms that take care of running container workloads, below Kubernetes all the way down to the Linux kernel. We will present at a high-level how these technologies, interfaces and levels of abstraction combine and overlap, and hopefully clarify which are spec vs. implementation, which are complementary, and which are alternative solutions.
This talk will cover the following points:
❮ul❯
❮li❯The world used to be simple: the case of Docker❮/li❯
❮li❯Interfaces: OCI and CRI❮/li❯
❮li❯More puzzle pieces: Podman, Containerd and CRI-O❮/li❯
❮li❯Workload isolation: Kata Containers, GVisor and Firecracker❮/li❯
❮li❯Q&A❮/li❯
❮/ul❯
Room: UD2.208 (Decroly)
Scheduled start: 2020-02-01 12:45:00

[@cheithanya.p.r391]

Awesome explaination!!! that solved a lot of my problems of what these terms means and what stack to pick

[@king0s]

❤ and 🙏 gratitude to Thierry Carrez from Chennai 🇮🇳

[@jmmtechnology4539]

First time understanding this concept and the history behind it. Great work.

[@javiercastanon1552]

Enlightening, I’m recommending to my team.

[@scetamit2555]

excellent video - I learnt so much.

[@ismaelgrahms]

Excellent video

[@robl39]

This is an awesome video!

[@invokesus]

Great talk!

[@paulaenchina]

Great video, thanks!

[@shinebayar]

And then there's crun and whole Redhat family tools. Suse also has another ecosystem. Huge Ego wars.

[@nullp0inter]

i don't know if to laugh or to cry 😂