Cloud Native Computing Foundation KubeCon + CloudNativeCon Europe 2018 (Copenhagen), 14 Nov 2015

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Exploring Container Mechanisms Through the Story of a Syscall - Alban Crequy, Kinvolk

Description

Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018 (http://bit.ly/KCCNCNA18) or in Shanghai, November 14-15 (http://bit.ly/kccncchina18).

Exploring Container Mechanisms Through the Story of a Syscall - Alban Crequy, Kinvolk (Intermediate Skill Level)

Alban will explore different container mechanisms on Linux by following a simple example: what is happening when an application in a Kubernetes pod performs a syscall such as “open()”? In particular, he will go through the following subsystems: SELinux LSM, seccomp-bpf, capabilities, overlayfs and copy-on-write, and path lookups in the container mount namespace. He will see how it interacts with different pod configurations.

About Alban
Originally from France, Alban currently lives in Berlin where he is a CTO & co-founder at Kinvolk, a software engineering team focused on building foundational Linux technologies for the cloud. He is a contributor to rkt, a container runtime for Linux, Weave Scope, a container visualization & monitoring tool, and is actively working on BPF-related projects. Before falling into containers, Alban worked on various projects core to modern Linux; kernel IPC and storage, dbus performance and security, etc. His current technical interests revolve around networking, security, systemd and containers at the lower-levels of the system. Alban previously gave talks at several conferences including FOSDEM, Linux Plumbers, IO Visor Summit, Kubecon and LinuxCons/OSSummit.
Join us for KubeCon + CloudNativeCon in Barcelona May 20 - 23, Shanghai June 24 - 26, and San Diego November 18 - 21! Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.

A

David alaba summer, but the mechanism in controlled true grit is my name, is alba berlin.

A

A

A

A

A

A

A

A

And therefore hello, that's true.

A

A

Diagram so wendlinger already that's a combination pf we execute apps programs and locations at the postbank wants continue to the execution, but this is a children's.

A

A

A

A

A

A

A

A

A

A

A

Of course, fantastic.

A

How can the reflex so roger tv program, tuesday, the trial of hadzic, is with classic pr text to the ps, as well as the growth extra title? Eclipse also had to have context or I like -function can, of course not complete a complete team, and how can the transporter with a lot.

A

A

A

A

A

Unfortunately,.

A

A

A

A

A

The dvb t sugar, because a small truck driver, the subway system, controller on.

A

A fair process is a candidate. The company jerseys process can how very late you, of course, quite well, but that's with the vehicle. Typically, the remote courtney love the following the director, the women couldn't do it for the fans, so in kuwait is ready for discussion with the motto problems director and outfitter. Wants you see him if the container has is the least form of flu? It's nice that mr roth presents the company.

A

The director can continue. You have a route fixed on the container with posters and, of course you want displays in its.

A

Quality that you can continue on the page about horst hartmann in building management at torture and imprisonment. Montana wants the mail.

A

In quality, 'to the wandering he's my dad yesterday: where can the fine adjustment you do here? The regional in münster will be able to want something in the containers. For that you did dhaka. Ask five behind martin salems. Everything is different in the cabinet.

A

A

A

A

A

A

A

A

A

Animation of the conference in kabul said.

A

A

A

A

Case ferstl patience now new classics, phoenix suns way that the xx xx it before the user group that the captain's balance too decorate the user red were the decay of the sun hat or.

A

Twitpic avenue stella growth was the case. His is a favorite because roters of the capacity and give a gravel path, f1 content start up its success.

A

23 degrees in the news section gave drogba torino from the dvb t and dvb t sticks is the ex is with the reality. Does her son into bed from linux can on compatibility policy experts, nature or his best season is from 13 or it's me, but together in relation to the space one? Does it better? The user nespresso.

A

Configuration process creative use of space, also nobody myspace. In the case, you don't think the space marine situation further. Jesus ps over the display system along to t shirt, johannes fest, because how don't qatar, ots managed to initialize expert susanne sps, so johann still not a lot to want something new york up to now in quality and the sun. It happens over the whole discourse in the whole program.

A

As a drive is, of course, easy is criticized in interviews tincture, but because I camera application since the board and can give it to applications.

A

A

A

A

A

A

A

Has passat kombi van der valk, open debian, sun capital economics and peace and security.

A

A

A

A

Which probably wants in case of hesselink swing level system kohl, but when the process should and we can again phases policeman? Yes, the production is darius father of content.

A

That will be the torture process in container.

A

Because no buyer found in minsk process in prison restrictions and from that you can, you follow people and their restrictive. The second station of the configuration new police said today at.

A

A

An in hybrid is nothing we can change in the security context. How can the fans at the sli nix hop dance and call of the building? She is a role model on the continent. Configuring.

A

The policeman have linux distribution, the company clean extreme, can do the company policeman and the whole linux a wave of collectors, and it's when a user to burn in test.

A

A

A

A

A

By herbert sharp the.

A

A

A

A

A

A

Fried on board since years, the tenant has support the baby, the action we have quality. It.

A

's funny the page is daily on.

A

A

A

A

A

A

A

A

A

B

With scope of you, talk is really the first google intuitive journey in statistics, but the google.

A

Tool suite for canada may be, someone has come memory of.

A

It is better one in rome.

A

Or the fans but max.

A

How can the case is, it is a cold. The acceptance of.

A

The figure that lawyers the default jacob on an idea finalist on all systems, accepts so that the.

A

A

A

He sticks a chimney.