►
Description
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Possibility of OCI Container Runtime with Rust - Toru Komatsu, Japan
It goes without saying that the Rust language has received a lot of attention in recent years, including the adoption of Rust as a second language in the Linux kernel. Toru has been exploring the possibility of developing a container runtime using Rust in the vicinity of OCI Runtime and developing youki, the OCI container runtime in Rust that He has worked on for over a year and a half. He thought it would be a good fit for the language since OCI Runtime requires development at a relatively kernel-like layer. Youki is now listed as one of the reference implementations of the OCI Runtime specification and is at a level where it can be used from docker and podman. The next step is to consider using it with Kubernetes. In this session, He will discuss the possibility of using Rust in a container runtime. He will share his experiences with youki. From these experiences, He feels that Rust is a language that should contribute more to the container runtime field. At the beginning of the presentation, I will explain container technology such as cgroups and Linux namespaces for those who have not had much exposure to OCI Runtime.
A
Hi,
hello,
everyone
so
welcome
to
Japan
Yokohama
City
I
will
be
presenting
a
possibility
of
Osha
continent
time
with
rust.
First
of
all,
let
me
introduce
myself.
My
name
is
Thor,
so
our
machine
engineer
at
gitbod,
but
this
presentation
is
not
related
to
my
work
at
all.
I
am
active
on
the
internet
with
this
ID.
A
So
please
have
a
look
if
you
like,
I'm,
also
a
member
of
a
GitHub
organization
called
continence,
which
manages
the
problem
Etc
there
I
am
developing
Yoki
a
continent
them
in
Rust
which
I
will
be
presenting
in
this
talk
by
the
way
it's
helpful,
so
I
live
in
Yokohama
City,
so
the
hall
was
close
by
so
since
you
came
all
the
right
way
to
Yokohama,
so
I'll
just
introduce
introduce
one
hidden
famous
sightseeing
spot.
Do
you
like
beer?
A
A
Thank
you,
okay,
so,
first
of
all,
so
here
is
what
I
want
to
say.
You
too
you
today,
I
would
like
to
let
you
know
about
their
fascinating
aspects
of
implementing
or
share
long
time
in
rust,
from
my
experience
of
developing
Yoki
for
about
two
years,
I'd
also
like
share
with
you
how
far
we
have
come
with
the
implementation
and
what
I
found
to
do
in
the
future.
A
A
A
A
This
means
that
the
low
level
runtimes
are
comparative
with
each
other
in
terms
of
commands,
for
example,
they
always
have
create
sub-commands
that
create
an
actual
container.
This
is
the
main
layer
of
this
presentation.
This
is
where
launchy
and
Yoki,
which
I
will
talk
about
in
this
presentation,
are
located.
A
A
A
The
second
is
namespace.
This
is
different
from
our
namespace
in
the
context
of
kubernetes.
It
allows
our
various
resources
to
be
isolated
by
process
such
as
PID
and
or
network
a
lot.
For
example,
a
container
under
host
may
have
different
visible
processes
and
V
edits.
This
is
because
the
PID
namespace
is
different
in
the
host
and
its
container.
A
A
A
A
The
repository
is
under
containers
where
we
developed
photographer
and
other
things
it
has
more
than
4
000
stats
on
GitHub.
It
is
also
sometimes
used
as
a
container
library
for
rust.
Most
recently,
the
content
run
time
for
Toka
wasm
is
a
library
developed
by
Yoki.
By
the
way,
the
name
means
a
container
in
Japanese.
A
In
this
presentation,
I
would
like
to
talk
in
detail
about
three
advantages.
First,
the
most
straightforward
is
a
good
match
with
the
Linux
color
more
preciously.
It's
need
to
manipulate
process
in
detail,
as
it
is
adapted
as
the
second
languages
of
the
Linux
kernel
plus
has
less
difficulty
in
using
kind
of
features.
At
least
it
will
not
be
difficult
to
handle
system
calls
and
so
on
in
the
future.
A
A
A
A
However,
there
is
a
limitation
to
this
system
goal.
It
cannot
be
used
in
a
much-sled
environment.
Now,
how
is
it
implemented
in
launching
which
is
currently
used?
Currently,
the
most
widely
used
goal,
implementation,
the
go
language
learn
time
itself.
Lands
in
much
selected,
so
Ranchi
is
limited
by
that.
A
Also
launch
is
a
goal.
Implementation,
the
C
language,
is
actually
largely
responsible
for
the
container.
Create
creation
in
launching
first
comes
a
request
to
create
a
container
from
the
high
level
runtime
on
the
left
in
the
in
the
diagram
side
toward
launch
it.
At
this
time,
launches
create
sub
command
is
called.
A
It
then
calls
itself
from
the
create
command
by
calling
our
slash
block,
slash,
serve
slash,
exec
init.
This
means
calling
launching
init
command
at
this
point
argument
and
such
a
past
are
through
environment,
variables
or
pipe,
and
she
passes
the
strings
and
such
to
pass
the
argument
now
at
this
time
lunch
is
in
it
does
the
sheet
processing
before
the
goal
language
learn.
Time
starts.
A
A
C
language
part
of
the
program
handles
namespace,
related
processing,
RP,
boatload
and
other
tasks
that
actually
create
the
container.
This
is
how
I
launcher
creates
a
container.
However,
as
you
can
see,
launching
had
an
issue
with
the
with
the
need
to
process
in
it
in
each
part,
which
is
not
necessary.
A
Now,
at
some
lengths,
I
have
explained
the
process
of
creating
a
container
for
roundship.
However,
last
does
not
require
the
slash
surf,
slash
block,
slash,
exact
init
command,
as
mentioned
just
before.
This
is
because
rust
can
be
implemented
in
a
single
single
sledded,
and
the
advantage
of
this
is
what
fewer
chords
to
Cologne
are
required.
A
A
A
B
A
Okay,
now
in
in
the
Json
of
the
continent,
configuration
file
which
is
written
to
execute
the
bottom
file
in
the
normal
container
commands
such
as
echo
or
hard
sleep
or
something
are
leading
in
this
field.
Yogi
supports
version,
so
you
can
directly
specify
a
bathroom
file
and
execute
it.
The
bottom
line
time
will
do
the
list,
in
other
words
interesting.
Instead
of
normal
commands,
5
literally
entry
Etc
can
be
directly
passed
the
rather
long
time
without
any
user
modification,
since
rust
is
widely
used
in
the
modern
world.
The
implementation
in
Yoki
was
quite
easy.
A
Next,
let
me
talk
about
the
lightness
brought
about
by
rust.
This
is
a
quote
from
yoki's
lead
me,
which
summarize
the
time
taken
from
container
creation
to
dilating
using
the
same
container
image.
Please
refer
to
your
keys,
lead
me
for
detail
about
the
version
and
the
other
environment
in
which
it
we
in
which
it
was
run.
The
first
shillong
implemented
in
XI
languages
only
followed
by
Yoki
Allah.
She
takes
almost
twice
as
long
as
the
shillong.
This
is
probably
due
to
limitation
of
the
set
NS
I
mentioned.
A
You
can
see
that
Yoki
is
also
reasonable.
First,
then,
from
a
memory
perspective,
Yogi
can
start
containers
with
tiger
memory
limitations
due
to
its
smaller
memory
footprint.
For
example,
you
can
use
podman
to
start
the
container
with
round
megabyte
of
memory.
In
such
cases,
Yoki
can
still
learn.
I
can
still
start
containers.
A
To
be
honest,
so
I
don't
know
how
this
will
benefit
you
in
the
current
world.
In
the
country
World,
however,
it
may
have
a
future
in
an
area
such
as
iot
or
a
cow
or
something
so
I
have
explained
three
advantages
of
love
using
rust
with
the
ocean
Airline
time,
the
ability
to
be
unlimited
by
namespace
is
a
good
match
with
a
new
player
called
wazoo.
A
A
Of
course,
lunch
is
a
cool
product
and
its
support.
It
supports
the
reward
type.
Today,
it's
not
easy.
It's
very
awesome
and
the
libraries
they
have
created
a
great
being
able
to
use
them
in
a
super
advantage
and
with
that
comes
a
great
history
in
the
content,
World
from
a
historical
perspective
launches
the
spin
out
project
from
Docker
and
I
assume,
and
that's
also
why
the
Google
language
was
used.
However,
there
are
limitations
in
the
area
of
Australian
times
or,
as
mentioned
just
before.
A
A
Let's
talk
about
how
far
Yogi
ocean
time
in
last
has
actually
implemented
this,
you
may
be
wondering
how
well
Yogi
supports
the
various
content
of
Futures
and
Corner
cases
that
are
currently
used
in
the
real
world.
First
of
all,
oci
has
prepared
the
test
to
see
if
your
kids
ayoki
supports
the
standard
future
of
ocean
long
time.
These
tests
are
passed
next,
we
can
also
pass
the
continuity
integration
test
using
Yoki
instead
of
launching
this
means
that
using
Yoki,
instead
of
launching
in
continuity,
should
work.
A
This
was
recently
achieved
by
by
YJ
doctor
next,
let's
talk
about
kubernetes,
which
is
an
area
I
honestly,
so
don't
know
how
to
support.
Yet.
Due
to
my
lack
of
knowledge,
however,
there
is
an
old
lady
and
installation
option
with
Yoki
in
Kube
Adam
yeah
I
have
not
tried
it
myself,
but
I
have
heard
of
I
have
heard
Leopold
of
being
able
to
install
it
and
start
port.
A
The
next
topic
is
to
keep
up
with
the
latest
Future
in
the
content
world.
These
are
not
are.
These
are
not
always
mentioned
in
their
specification
itself.
First
is
the
volume
support
mentioned
before,
and
Yogi
also
has
support
for
sugar.
Pubutu
and
kubernetes
also
supports
literacy
container,
which
will
be
a
high
profile
feature
in
the
future.
A
A
A
Next,
let's
talk
about
experience.
I
have
heard.
I
have
heard
that
some
of
yoki's
Library
are
being
used
or
are
being
considered
for
use
within
the
company,
but
it
is
still
in
the
zone
where
people
through
an
interesting
in
using
it
as
a
hobby
by
using
it,
so
continents
are
important
software
from
a
security
point
of
view.
So
this
is
an
issue
that
cannot
be
ignored.
A
There
are
a
lot
of
tests
and
the
knowledge
and
many
knowledges
stored
in
the
high
level
runtime
since
the
ocean
Island
time
is
just
a
binary,
so
it
can
pass
those
tests
as
long
as
it
is
named
generally,
if
it's
named
launchi,
so
you
can
learn
the
test
with
your
own
low
level.
Continental
time
currently,
Yogi
is
able
to
pass
the
continuity
content
test
by
using
the
name
plan
sheet.
A
Next
is
the
future
load.
Map
first
is
support
for
volume
Edge.
This
is
coming
soon
with
PR
already
in
the
rocks,
and
we
aim
to
pass
the
launching
test.
I
mentioned
before
we
are
looking
at
the
authorizing
support
for
open
telemetry.
This
will
be
a
feature
that
is
not
available
in
the
other
land
times.
A
Finally,
we
are
always
always
considering
interesting
Futures
using
the
latest
counter
feature.
We
have
actually
implemented
IOU
link
for
a
synchronized
C
group
creation,
but
develop
on
it
because
it
didn't
give
a
it
didn't
give
us
the
performance
we
were.
We
were
looking
for.
This
is
a
love
load
map
plan
for
the
future
of
Yogi.
If
anyone
is
interested,
I
would
be
happy
to
talk
with
you
by
the
way
the
government
support
would
have
taken
the
World
by
surprise
recently.
A
Do
you
know
that
low
level
content
on
time
used
for
the
Cowboys
and
support
it
is
called
lamwaji
in
last,
are
in
Rust
and
is
developed
by
the
Eis
labels
and
Microsoft
groups?
This
containment
time
is
designed
for
learning
volume,
but
it
is
not
yet
it
is
not
able
to
meet
the
ocean.
Sometimes
specification
talk
about
them
is
exciting,
but
this
piece
is
currently
missing
from
the
government.
A
The
reason
is
simple:
it
takes
time
to
implement
without
this
piece.
It
cannot
be
used
safely
in
your
production
with
Basel
or
container.
Do
you
know
this
piece?
It's
called
Yogi
Yogi
and
the
one
language
team
are
looking
to
collaborate
to
meet
this
piece,
I'm
happy
to
announce
this
article
day.
Of
course,
this
would
be
a
great
feature.
A
great
step
forward
for
learning
was
on
kubernetes
or
Toca,
and
so
on.
A
We
are
still
in
the
discussion,
include
discussion,
phase
enclosed
and
have
not
completely
decided
how
we
will
work
together,
but
please
wait
for
announcements
that
will
please
you
all
at
the
end.
Yogi
is
supported
by
a
lot
of
contributors
without
their
support.
Yogi
would
not
be
what
it
is
today,
since
York
is
developed
entirely
on
hobby
time.
A
B
B
A
A
B
A
B
A
A
Yes,
good
thing:
okay,
so
okay,
first
of
all,
so
I
mentioned
in
my
presentation,
so
Yoki.
So
your
kids
are
very
newer
of
this
world,
so
low
level
lifetime
world
and
the
last
is-
is
learning
a
top
player
for
a
long
time.
So
launching
has
a
lot
of
knowledge
of
this
area,
so
so
I
think
this
is
a
big
issues.
A
So
Yogi
does
not
have
experience
on
landing
on
the
Productions
in,
for
example,
so
that
she
has
her
already
learning
so
a
lot
of
words,
so
a
gke
or
AWS
or
Azure
so
but
lanci
does
not.
Lanci
has
never
landed,
so
it
is
I
think
so
many
people
want
to
use
a
safe,
low
level
content
on
time.
I
think
so
we
have
to
got
experience
about
it.
I
think.