Cloud Native Computing Foundation KubeCon + CloudNativeCon China 2018 (Shanghai), 21 Apr 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Linux Container in Windows 10 or Windows 2016 Deep Dive - Mark Peng, DaoCloud Shanghai

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Linux Container in Windows 10 or Windows 2016 Deep Dive - Mark Peng, DaoCloud Shanghai

This topic describes the internals of running Linux containers with Hyper-V container technology on Windows. For those who have already deployed Windows, they can run both Windows and Linux containers on Windows.

To learn more click here: https://sched.co/FuK9

A

So now we begin left.

A

A

The NEPA of Microsoft, the only one.

B

C

A

Am now working in Dow crowd.

B

A

Based in Shanghai.

B

A

Focusing hard the mixed class teacher quality at The, Container Service.

A

To develop mixed cloud.

B

A

Combining knowledge with actions I know there are foreigners.

A

You might want to take some time to understand it.

B

A

Me, you might know these people.

B

A

Dynasty highly prioritized, I precedence and no mention about combining knowledge with actions and how we apply this idea in container. If we rich.

B

There is a message.

A

A

If you search for reason out of your heart, then the knowledge and the actions can be combined vice. So, in other words, if you search for real ideas,.

D

A

You can combine knowledge with your actions, then how can this be applied.

A

A

A

What you can see will be totally the same, so that is the knowledge combining with actions. So with that, so we.

B

A

Windows itself currently has a saying of container windows also have container. But it's not called dog, because it's.

C

A

So the container of windows, you.

B

A

B

A

Know server 201, 9s merged.

B

A

You see the image address, image space address.

A

What's changed, there's no dog.

A

B

A

Is put as 201 night.

A

There are three.

B

A

That is cervical.

B

A

B

A

The images are being downloaded, so I can show you here. I.

A

Only need to operate all you need to run dog image.

A

It's very interesting.

A

So these three sorry.

A

So these three, that is Windows Server to over nine I, downloaded to the Windows 10.

B

A

You might be familiar with the bottom to image. That is the container.

B

B

A

They are running on my Windows.

D

A

Simultaneously,.

A

We already see the possibility. I would do demo for you, that is to run Windows. These two types of containers on Windows 10.

A

The windows container is a little bit large.

B

A

Course there is around 4 gigabyte in size if you're using now, sir, even around kill, be around 300 megabytes but of course cannot compare them to Linux container latest computers are very small.

A

If you want a function container, then such container will around 10 gigabytes. We.

B

Hope that the container.

A

Of might of windows of Microsoft.

C

B

Further reduce its size.

B

A

Windows container, how we achieve information, isolation.

B

If you watched a.

A

Video John made this a deep understanding of introduce.

B

B

A

I achieve that is the Linux dock. So it's a isolation, Beach done by PRD ICBC, a user and also far system for Windows.

B

A

Has the technology for information? Isolation is very similar to the ICBC.

B

Isolation of linux, the each.

A

Naming space will at silos as the prefix Josiah Silas slash 504 faster as prefix Wow numbers.

B

Might be random.

A

You can search for the container.

A

And a handle being allocated all added with a prefix of silos.

A

So the weather, how many signals are used in the potatoes or.

A

With any other differences, well as long as you add, these prefix.

B

A

B

A

Be able to isolate information then they will be able to communicate using traditional windows weight of communication. There, too, will be forced to use dogs because they cannot see each other.

B

A

Accounts in winners, what are the differences comparing with Linux.

B

A

Windows container, if I'm that it will tell you you are the container administrator, then these container of these.

B

A

But it doesn't have other access rights or it won't be a view. It is not recognized.

A

They say the users ID is unknown, then, on the host, such user won't have any rights as Minister administrator.

B

A

It's quite similar to the user account animation on.

A

Container resources, hellacious.

B

A

Very similar to secret.

B

A

Example, like the progress of.

B

A

Using but windows were using job objects.

B

A

Manage to progress and the progress group to isolate the resources. A simple example here is that I set these commands to set the size of the container will not exceed 512 megabytes, and we can use the doctor on hive an m5, 1, 2 megabytes, and you can see.

B

A

Is a container progress it will not see to 512 megabytes.

B

A

Can see the screenshots here we yes to fire ID off the container.

A

Similarly, using the Explorer.

B

A

Open this window switch it to these page.

B

A

Can see the job limits here, written the job memory limits as.

B

A

Directly be translated to the C group of Windows.

B

A

Is size of the container.

D

I will start to do processes to containers.

B

D

C

D

I will use two windows.

D

B

D

Working so on the left is windows emerges.

C

D

And all the windows.

B

D

Want to see how process is going and how server is outgoing, so we can use these combined. Do you know that you know tasks, tasks, alito, /, ICBC,.

D

This is a bags and surveys and it's still very big, and we will do the same thing on linux.

D

See how is doing on Linux?

D

It's just one process, just bash the South. So this is a comparison between Windows honey legs. A very big comparison, I started my career in 2004 and I'm. Now MVB, a Microsoft and I started a Microsoft Windows I feel glad seeing these progress, but I hope they can improve further, and this has a historic accumulation windows. The graphic interface is included in a container like the windows.

D

Okay and as a result of color is huge. So in kernelization containerization, the microsoft starts very early. It just released a container in 2016, but around a decade ago the Microsoft has approved a drug. Great project starts to promote its containerization and until the release of darker on market darker became very popular and then Microsoft to join together with docker and Microsoft has its own container and they mastered the EPI API and Microsoft Server 2016.

D

The duggars Enterprise is installed.

B

D

You want to run Microsoft Windows container, then you will be supported by Microsoft and in the future. The Linux containers.

D

D

Were also benefit from Windows. This is a win win game plus procedure.

D

So how do we see the combination of Windows and Linux and here's what I want to say.

B

D

We run Linux containers on Windows, it's a question. The answer is yes, why?

D

Why can't? We run the next containers on Windows, because, whether it's darker or container or other same lab of virtualization technology, the core is the shelter kernels and lineage containers. That's why Venus continues can't run on Windows in the same way around for windows containers. They can't run on Linux and.

D

If we have a low version, alas, we don't, we can't run a high version Linux container, because the high version Linux container have requirements for the kernel. At the same thing, the leanest cut, the low version OS doesn't have to requires corners.

D

And in these two days we have learned.

C

D

From our coordinators contributors and incriminated, there is, there are some wealth of Tours, and these can also be used to combine.

D

If you have attended the meeting on this on 13th, then you must have known the anchors you take is released in China for its cool community service is private, a cloud service is about to be released, and such an orchestration tour like is container service, can always support our windows capabilities. Just.

D

Like what's right here, you can see right now, I'm Ronnie is couplets note and it's a Windows version.

B

D

Governor to support Windows, officially and here the version 113, it's not a long time to go when for our talk cloud, for that, it's the first or the only system that can run on cloud that is private and also public, to support the windows.

B

D

Here's another.

B

D

Well, to say that Linux containers can run on Windows. It also makes sense the Windows, 10 and also Windows Server 2016, or supports the Linux and also windows containers.

B

D

Their capabilities is to use the hyper-v containers and also darker Salinas kit technologies.

D

So what it's using its hyper-v containers and darker Linux elite technologies? Linney's kit is proportional rated technology of darker, it's streamlines and is super easy and, as a result on Windows we can run Windows Linux containers. On the plus side. We can also treat the hypervisor level isolation, as I said for the common Windows or Linux containers. Its isolation is just a kernel level. So if there's a problem with the kernel like a loophole or a bug, then everything including the container, will be damaged.

D

In addition, if we can have advisor isolation, we add a share for every container. It's just a small VM culture utility so for the table here and I need to change. I'll make it right, so it's utility VM and the utility fee and a.

D

Speed is much quicker than the common themes and it's a hyper-v container or VM, and you will not see it. The VM is me hidden somewhere and the lifecycle is the same as the container as well. There is a container, then there is these p.m. if there's no container that there will be no VM, so I just around the two attacks. Let's look at the hyper-v. Okay, you see the utility fee.

D

I'm here know, if you doubt, if you doubt it and then I will upgrade it to you, for you, then still there's no iterated VM, it's a very, very small virtual machine and when we run dr. Rob.

D

It will automatically run on the machine with.

B

D

Linux is a leanness, the corner is Linux kit and the leanest kids can help us to run the conventional Linux containers automatically. So the speed, as you can see on my windows.

D

It's very decent, although compared with the Linux container, is a bit slower. Still is very good.

D

By doing this, we can run both Windows and Linux containers on my windows, but what are the vintages? What do you think I think there are three points. The first is as technology lover and it's a nice thing to run Linux and windows containers on the same platform. It's a very interesting thing to do, and second, it can save the resources where previously we divided between the Linux and the container, and they they just, they were independent, Linux containers.

D

One only needs and Windows containers are on our windows notes, that's some waste of resources, but if we can change it to the unified Windows code, we can schedule both Windows and Linux containers simultaneously on the same machine and that will save lots of resources and third, what I need to stress here is you know that darks Enterprise version is very stable and it's for the enterprise application. But can you need to pay for this?

D

But if you Enterprise have already purchased other windows, then you can just use these built-in function and because the dark Enterprise was built in the inner windows already for your companies.

B

D

Your base will be window or wealthy. The darkest enterprise level, so, whether you use a Windows or Linux is 12. Okay, and you can also get the official support from Microsoft. Just like the Microsoft of aiiah.

D

Above we can also run Linux virtual machines and the domestically 70 percent of the ayahs are open source or ass.

B

A

The bottom is hypervisor, the green part is to disable.

B

A

Green container.

B

A

The court going through HC s.

A

Computing services.

B

A

The guest operating system and also using rush to run that container due to these orange components, they are a high speed, so they have a very quiet performance.

A

So it's safer than dock.

B

A

Is a kata in tow just similar I talked with John right before, and he says it's very similar to kata also running a very small virtual Miss machine inside it.

A

Let them talk, we just run the demo.

B

A

Exceed exits: the windows, hot potato.

A

B

A

Go through the HDS.

B

A

We can use HCS dye.

B

A

See all the information related to a hypervisor I can see this machine. There is a happy Nana's container and ideas here.

B

A

Use a BB: we can also see the small virtual machine inside it, but you can see here. I rather come out here, so I copied a container ID.

B

A

Run a console or.

B

A

Vm follow this ID and then click enter. You will enter these utility utility VM and I can run a combo to make sure that, like unit got a so it's running it OS here.

B

A

A version is 4.14.

A

And I can run a PS.

A

You can see the host as many progress by the progresses if you use the Microsoft that you might be familiar with that and I can show something that you must be familiar with.

A

So this is inside the it's imagined.

B

A

Is something I mention it before at.

B

A

To the GCS, so you can see here it's connected and also do you know what it is. So this is the progress of a container before we.

B

Said that for container.

A

On my host, it's always a standard syllabus, but there is a next.

C

Layer of isolation and also.

B

A

Is the PID inside a container that is one because it's isolated.

B

A

We can see the namespace in.

B

A

If you watched the video of Johnny, you must be familiar, that is heaven.

B

A

In this catalog just.

B

A

It was three four nine.

A

So there's a catalog for isolation.

B

A

With the standard Linux container, you can see it's totally the same, so the six namespace isolation.

A

More interesting thing gonna be you'll, see in here we can run about.

B

A

It's more interesting where you can see from here.

B

A

T for partition.

B

A

It's real, it's read.

A

Mounted to the memory.

B

So the four partitions.

A

Will be the base? Image will be containers, so they were put.

B

Into four layers.

A

There are four layers and will be mounted to the utility.

B

A

On the top is a readable, writable.

A

At the very top.

B

Love layer, it's.

A

Readable and writeable, but when we cure the container, the layer will be dropped.

A

It's not exactly the same stop. It can also be seen as a dog itself.

B

A

This utility VM there's.

B

A

It's only using the dark, Odyssey windows, it's automatically generated.

B

A

A

A

Utility VMs progress.

B

A

It's a normal, happy WP working ability, workload on progress, and we also see here the mounted four layers.

B

A

It's image so it's already mounted.

B

A

On the top level.

B

A

Sidewalks will be.

B

A

B

A

Can see here as daresay th, a virtual gaseous.

A

And you can see it's going through my hyper-v store, yes, baby to load the VHD function, to remove all the HD without computer. Any revision will be dumped, so you might need to set those data put on oil files or a local post.

B

A

B

A

B

A

Hyper view work, we also see a physician.

B

A

The application, when the container is start it started there will be four messages.

A

If we open it, it will tell you that this layer was loaded.

B

A

My memory and it will tell you the specific information. Another information will also tell you the.

B

A

Note another sandbox, readable writable.

A

So this is the content that I wanted to share with. You today have a deep understanding of Linux container or.

B

A

If you want to have a try, it's very simple: you can go on a dog and download that dolphin. We knows the latest version of dark hole windows. Then you can directly choose.

A

A

Click on it and you'll all understand that they said a mirror here. Otherwise, you need to download the containers image I'll be very large.

B

A

I will also recommend you to do step cow.

A

It's the first in China after you switch to.

A

Windows container.

B

A

It is same for windows server to own one eye.

C

A

Quick question for you.

B

A

B

A

You run Linux, container or Windows how many IPV containers can be run in your part? Can you want answer distortion in kubernetes.

B

A

Should write multiple things.

B

A

It is the happy the container how many things can be run inside for me. I, don't think multiple things can be run inside.

B

A

Part will share other namespace. They should be bridged together, but for happy it was isolated by hypervisor.

B

A

Won't be able to be connected unless the container in a small virtual machine, you can run a magical, continuous.

A

Contact container, if we can support this support kubernetes, it will use the same principle. Thank.

D

C

A

Listening, if you have any questions, feel free to ask.

B

A

Audience is not using the microphone interpreters.

B

Cannot hear or.

A

Donate to take framework I'd forget about emotion,.

C

If you want to.

A

Support, maybe you can use the microphone.

B

For your answer to.

A

A question: if you're going to run traditional.

B

A

Going to run such a traditional framework remember to use them. What is several code idea.

C

A

Instead of nano server.

D

A

Can only support this one if you use dark.

B

A

Read both then you will have a large image for that ten gigabytes for that image.

B

B

A

Might remove a cell function for the image after testing, even though we have function.

D

For desktop you.

A

Cannot use the terminal visit to assess those interfaces by.

C

A

Container, don't put any images, as you cannot see them.

B

A

Though it's a completed version, but.

B

It cannot be run in.

B

A

Beta 3 it can support, but the future version does not support that. If you still want to use it, of course you can. There are many other.

B

A

Terminal can be connected to that like a VMC.

B

A

I'm not sure whether it is dom framework 4.5.

B

A

It is the latest version you can support that if we can only support.

B

It won't be able.

A

You need to change the codes.

B

So when I use the windows.

D

Connects how do I deal with the network?

D

This is a very good question. Our windows network and support those.

B

C

D

We have official documents and if you search online, then you'll find to the windows container. You just put in windows the container and.

B

D

First, result coming up will be on the Microsoft.

C

D

We use the coordinators and if you have a 1.2 13 version, then it should contain.

B

D

Also, the brought information.

D

Thank you soon, YouTube.

D

D

Do you have any further questions? If not, then there will be the end of my presentation. Thank you so much for coming. Thank you so much.

C

D

To the Quebec calm.