►
Description
Building the Perfect Tools Containers (custom)
OK, we have now toured a bunch of the tools containers from other people. Let's build our own. We need you to help, in the chat, tell us what our "must haves" are!
Learn more at https://red.ht/leveluphour
A
Good
morning,
good
afternoon,
good
evening,
hello,
everyone
welcome
to
open
shift
tv.
I
am
chris
short
principal
technical
marketing
manager
on
the
openshift
team
here
at
red
hat.
I
am
joined
today
by
the
one
and
only
the
illustrious,
as
I
called
him
on
twit
twitter
earlier
langdon
white
here
for
the
level
up
hour
langdon
good
morning.
How
are
you.
B
A
B
B
A
B
A
A
B
B
A
B
C
A
A
B
B
It
wasn't
as
good
as
my
my
normal
pto,
but
it
was
bad
timing,
a
bunch
of
planning
meetings
and
that
kind
of
thing
so
yeah.
So
here's
the
show
notes
from
last
time.
I
spent
a
lot
of
time
and
energy
on
these.
So
please
please
go
read
them.
I
think
they
are
funny.
I
pull
out
some
nice
fun
twitch
clips,
usually
as
well
as
some
real
twitch
clips,
which
you
can
find
on
the
open.
A
B
A
A
B
B
Yeah,
so
excuse
me
so
the
first
thing
I
was
thinking
we
might
flip
through
because
I
had
a
bit
of
a
panic
attack
yesterday
because
I
went
to
go
and
do
something
along
the
lines
of
some
pseudo-yum
install
or
list
or
something.
I
can't
remember
what
exactly
I
was
playing
with,
but
if
we
take
a
look
at
the
app
streams
or
whatever
what
I
got
was
scroll
scroll,
oh,
it
doesn't
actually
listed
the
way.
I
was
thinking.
B
B
A
A
B
Assume
not
too
many
people
have
that
experience.
So
basically,
so
I
just
I
noticed
this
and
was
reassured
that
the
problem
was
just
that
my
subscription
had
expired,
so
I
went
and
clicked
on
the
fun
renew
button,
and
then
I
was
prompted
with
this
guy
which,
if
you
can
see,
has
a
nice
little
text
box
here.
That
is
a
link
that
says,
takes
you
to
red
hat
developer
subscription.
B
B
And
so
I
checked
all
those
boxes.
You
know
I
read
the
developer
program
newsletter,
so
I
kept
that
checkbox
and
then
happily
I
came
back
and
just
did
an
auto
attach
and
now
it's
subscribed
again
so,
like
I
said
I
just
wanted
to
kind
of
show
that
hey
you
know
it's
super
easy
to
register
to
renew
your
registration.
Like
I
said
just
because
I
expect
not.
Many
people
have
had
that
experience.
A
B
And
so
what
I
also
wanted
to
kind
of
just
mention
here
too.
One
of
the
things
that
is
not
well
understood
is
that
the
developer
subscription
actually
can
be
used
in
lots
of
different
ways,
one
of
them
being
on
personal
hardware
or
vms
or
whatever,
but
personal
stuff
for
for
work
stuff.
So
you
don't
it
doesn't
actually
when
it
says
you
can't
use
it
in
production.
It
only
means
it
running
like.
A
B
A
B
Believe
it's
right:
oh
yeah,
there!
It
is
right
there
yeah
yeah,
so
you
can
go
to
a
download
and
and
go
and
get
the
stuff
but
yeah
so,
like
I
said
I
just
wanted
to
kind
of
show
it
just
because
I
hadn't
run
into
that
with
my
developer
description
before
so
somebody
else
might
so
that's
pretty
cool.
I
thought,
but
let's
go
move
on
into
the
meat
of
the
show,
although
I
think
part
of
the
fun
is
the
entertaining
banter.
B
B
B
And
there
is
no
such
thing
as
an
r
in
a
north
shore
accent,
it's
all
so
when
he
would
say
docker
he
would
it
would
be
daka
dakadaka
right
back.
So
a
guy
who
worked
for
red
hat
named
ryan
lurch,
put
up
this
website,
which
was
basically
a
video
clip
of
him
saying
docker
and
it
was
awesome.
Unfortunately,
I
think
the
the
maintenance
and
cost
of
maintaining
that
joke
was
in
excess
of
whatever.
B
B
Right
so
we
should.
We
should
at
least
consider
that
as
a
as
an
option,
but
it
was
absolutely
hilarious
and
it
just
kind
of
miraculously
appeared
on
the
internet
one
day
so
and
he's
a
very
funny
guy.
So
you
should
you
know
if
you
see
anything
else
by
ryan,
he's
very
active
in
the
fedora
community.
So
yes
with
another
slight
digression,
but
today
we
were
trying
to
talk
about
the
perfect
kind
of
tools
container
and
container
exactly
so.
I
just
called
it
conveniently
enough
perfect.
C
B
The
best
so
and
just
kind
of
so
this
is
a
very
simple
version
of
it,
and
so
you
know
what
I
thought
might
be.
A
good
starting
point
was
the
rail8
support
tools,
so
the
vast
majority
of
the
content
then
would
be
supported
right.
So
it's
not
only
coming
from
rail
eight,
which
is
supported,
but
then
kind
of
the
container
itself,
which
is
support
tools,
is
also
supported,
but
I
wanted
to
fix
some
of
the
things
that
annoy
me,
so
I
included
ps,
which
is
in
a
package
called
proc.ps.
B
Right,
so
what
I
so,
then
you
know
basically
I
just
kind
of
build
this,
but
what
this
is
kind
of
what
I
wanted
to
show.
I
am
going
to
use
sudo
to
build
because,
as
we've
talked
about
in
the
prior
episodes,
in
order
to
have
enough
privilege
to
be
able
to
do
a
material
investigation
on
the
machine,
we
need
to
have
root
access.
So
as
a
result,
I'm
going
to
build
it
as
as
pseudo.
B
B
A
Yes,
so
yeah,
if
you
have
suggestions
for
things
that
you
want
to
have
baked
into
your
perfect
tool
kit
for
sysadmin
network
troubleshooting,
whatever
it
may
be
right
like
your
day-to-day
work,
please
let
us
know
like
what
tools
you
use
on
a
regular
basis.
Right,
like
we
love
to
just
throw
them
out
in
the
chat
and
then
toss
them
out
here
and
yeah,
we'll
get
them
installed
in
this
container.
A
So,
let's
work
on
the
run
label:
let's
let
some
more
come
in
here.
You
know
folks,
just
feed
us
or
you
know,
whatever
commands
you
want
whatever
tooling
you
figure
you
need.
You
know,
like
I
mean
if
you
need
oc
in
your
container,
let
us
know
right,
like
you're
we're
building
the
perfect
toolkit
here.
B
B
And
oh,
I
forgot
the
word
run
as
I
usually
do,
and
so
here
we
have
the
run
label.
Actually
this
is
pre-populated,
so
we
probably
don't
want
to
use
that
way
of
looking
at
it.
We
actually
want
to
look
at
it
directly
so
that
we
know
what
the
flags
look
like
and
stuff
right.
So
if
we
say
inspect
and
let's
just
pass
it
to
less
and
then
so
here
we
have
our
full
run
label
with
the
variables
on
resolved.
I
guess
it's
a
good
word.
A
B
A
B
So,
to
give
the
run
label,
basically,
you
have
to
kind
of
give
the
whole
command.
If
you
know,
assuming
I'm
recalling
all
these
steps
correctly.
This
is
gonna
be
the
name
of
our
resultant
container
right
because
it's
a
podman
run
command.
So
this
will
be
the
artic
like
so
versus
the
image.
This
will
be
the
container
name
and
then
the
host,
and
then
what
image
we're
to
use
is
you
know
here
it
basically
pre-populates
from
the
name
of
the
actual
image,
and
then
again
you
see
the
image
name
here.
B
So
that's
pretty
much
all
there
is
to
it
at
this
point.
We
don't
need
to
modify
it.
I
don't
believe
because
it'll
have
the
same,
you
know
we
want
the
same
feature
set
that
we
have
for
support
tools,
so
we
can
just
kind
of
steal
it
from
there.
However,
if
we
you
know,
this
is
also
a
good
way
to
steal
it.
You
know
or
basically
get
the
content.
If
we
didn't
want
to
do
a
from
support
tools,
we
could
also
do
a
like.
A
A
A
B
But
one
of
them
is
using
podman
pods,
so
podman,
so
just
to
give
a
little
bit
of
background.
So
we
have
this
idea
of
containers
and
when
we
want
a
container
to
talk
to
another
container,
the
kind
of
original
way
of
doing
that
was
using
what
was
called
a
docker
link
and
basically
you
could
kind
of
link
the
two
containers
together
in
the
kubernetes
world.
B
The
way
one
of
the
ways
we
do,
that
is
by
putting
the
same
two
containers
in
the
same
pod
and
then
they
can
kind
of
talk
to
each
other
using
a
very
similar
mechanism
to
docker
link.
However,
one
thing
that's
kind
of
cool
about
podman
is
that
it
actually
supports
pods
directly
without
kubernetes,
so
you
can
describe
your
container
setup
as
if
it
was
a
pod
for
kubernetes
but
run
it
in
podman.
B
So
as
a
result,
unlike
docker
compose
or
even
the
podman
compose,
it's
not
a
you
know
a
right
once
and
not
be
able
to
use
that
description
ever
again
right,
because
the
problem
with
docker
compose
is
you
know?
Yes,
there
are
converters
and
that
kind
of
stuff,
but
you
can't
use
that.
Well,
I
mean
you
could
use
it
in
production,
but
most
people
don't
use
docker
compose
in
production
right.
They
use
something
like
kubernetes
or
whatever
or
openshift,
for
example.
A
A
B
B
A
A
B
A
A
B
A
B
A
C
A
B
B
B
B
C
A
C
B
B
B
To
use
there
was
weird
stuff
actually
linked
in
the
show
notes
to
an
lwn
article
about
using
nspawn
from
2013.,
and
it
talked
there
about
the
fact
that
there's
there's
also
another
another
container,
runtime
called
lxc,
which
is
linux,
containers
intuitively
enough,
but
there's
also
it's
either
vert
dash,
lxc
or
lxc
dash.
I
can
remember
which,
which
is
another
container
runtime.
That
also
means
linux
containers,
but
they're
not
the
same,
so
they
work
differently.
A
C
B
Designed
around
kind
of
very,
very
strong
inter-process
security,
and
even
it
used
multiple
vms
to
be
able
to
run
the
different
parts
of
the
system
instead
of
using
containers.
So,
even
though
they
were
down
in
the
depths
of
you,
know
kind
of
writing
an
actual
operating
system,
they
they
even
used
vms.
B
That's
a
security
break
between
those
two
applications
right,
so
long
story
short.
So
when
containers
were
first
getting
popular
people
wanted
to
be
able
to
run
things
as
if
they
were
a
service
in
the
container
and
all
kinds
of
different
mechanisms
became
popular
and
one
of
them,
for
example,
was
zookeeper,
which
is
still
popular
today,
because
all
this
work
we
put
into
system
d
or
even
like
cisv,
init
scripts,
didn't
work
the
same
way
or
at
all
inside
a
container.
B
B
So
you
have
all
these
different
mechanisms
to
basically
say
launch
this
service,
but
don't
actually
go
away
right,
yes,
and
so
it
took
a
few
years
before
systemd
could
be
landed
inside
a
container,
and
this
is
basically
where
the
difference
between
vms
and
containers
really
starts
to
show,
because
the
closer
and
closer
you
get
to
the
kernel,
the
the
more
you're
on
that
boundary
between
the
actual
operating
system
and
the
container
in
a
virtual
machine.
There
is
no
boundary
right
until
you
get
below
the
kernel.
B
C
B
A
B
All
right,
so
that
was
a
that
was
a
long-winded
way
of
saying.
Systemd
works,
weirdly
in
containers,
so
core
utils,
similar
similar
problem
you're,
getting
really
close
to
the
kernel
with
core
utils
right,
and
so
that's
why
you
have
basically
two
different
versions,
so
you
want
core
utils
single
and
what
we
wanted
to
find
out
is.
Do
we
have
dd
and,
let's
find
out,
it
looks
like
we
do
so.
So,
as
a
result
going
back
to
our
earlier
statement,
I
don't.
C
B
B
B
B
C
B
B
Right
right,
so
what
I
want
to
show
here
is
just
I
have
created
the
container.
It
didn't
go
away
right,
so
I
will
be
able
to
reuse
that
same
one.
That's
why
I
was
able
to
do
an
attach.
Instead
of
you
know,
a
new
run
command.
So
if
so
one
of
the
things
that
happens,
at
least
for
me,
is
it's
basically
impossible
to
always
predict
what
all
I'm
gonna
need.
So
today,
I'm
like
you
know
I
need,
I
don't
know,
rando
library,
let's
say:
oh,
I.
B
B
C
B
A
C
B
So
what
what
happens
is
if
you
so
rail8
is
actually
using
python
3
of
a
particular
version.
I
don't
remember
which,
and
so,
if
you
install
libraries
into
a
system
that
is
our
python
3
libraries,
it
will
actually
share
those
libraries
until
basically,
you
diverge
so
so
you
don't
waste
the
space
of
having
two
copies
of
it,
I'm
still
on
the
fence
of
whether
that's
a
great
idea
or
not,
but
you
know
it
does
save
some
space.
A
A
B
B
So,
giving
a
little
bit
more
background
on
the
on
the
various
repos
that
came
with
rel8,
and
I
actually
wrote
an
article
about
this.
That's
on
the
developer
blog,
if
you
want
kind
of
the
overview
but
base
os
is
all
the
stuff
that
runs
your
operating
system.
App
stream
is
all
of
the
applications
that
are
theoretically
independent
of
your
operating
system
and
that's
where
they
live.
B
Excuse
me
and
then
they're
still
supplemental
for
basically
patent
encumbered
or
you
know,
licensed
encumbered
stuff,
so
supplemental
supplemental's
still
there,
but
we
don't.
We
just
kind
of
ignore
that,
because
that's
where,
like
oracle
java
is
right
and
who
wants
that
so
but
so
code,
ready
builder,
is
where,
if,
if
we
have
v8
develop
at
all,
that's
where
it
is.
B
A
B
B
Think
are
awesome
and
have
had
a
very
mixed
feedback
from
lots
and
lots
of
people
so
with
node.js
you
can
get
a
stream.
So
the
reason
these
are
called
streams
is
because
they're
not
always
strictly
tied
to
a
number
right.
So,
as
you
can
see,
nginx
has
a
main
line,
whereas
you
know
lib
uv.
Has
this
apple?
Eight
build
room
container
tools
has
a
rail.
Eight
container
tools
also
is
interesting
right
because
it's
not
one
thing.
B
It's
a
bunch
of
things
so
that
setup
of
those
bunch
of
things
is
versioned
in
and
of
itself
nice,
because
otherwise,
basically
the
problem
you
have
is
otherwise.
You
have
the
same
problem
with
software
collections,
where
software
collections
tries
to
embed
in
the
rpm
name,
all
of
the
information
about
everything.
That's
in
that
software
collection,
which
is
a
huge
like
misuse
of
metadata
right.
B
A
B
Also
have
this
these
things
called
profiles
and
what
profiles
do
is
the
idea
of
them?
Is
that
the
expert?
So
basically
the
packager
knows
what
you
need
if
you
want
to
run
a
production
node.js,
but
also
knows
what
you
need
if
you
want
to
do
development
on
node.js
and
my
classic
example
of
this
is
apache.
B
Little
to
be
known,
there
is
actually
a
package,
that's
at
least
in
fedora
and
may
still
be
in
rel,
I'm
not
sure,
but
there's
a
package
that
will
actually
turn
on
the
public
html
directory
under
your
home
directory.
So
I
don't
know
if
you've
seen
that
it's
kind
of
really
old
school,
not
a
lot
of
people,
use
it
anymore.
But
if
you've
seen
this
site.
B
B
And
the
reason
is
is
because
an
rpm
only
has
one
way
of
being
installed.
So,
even
though
that
is
a
meta
package
that
installs
a
bunch
of
different
things
that
configures
htpd
the
right
way,
there's
no
discovery
process
so
as
part
of
the
module
architecture
we
built
in
a
discovery
process
by
having
these
things
called
profiles,.
A
B
B
A
B
A
B
Chris
that
also,
though
I
will
say
just
kind
of
going
back
to
the
commentary
as
well
is
the
the
su
model
is
also
very
morel
centric.
So
if
you
were
another
linux
distro,
if
you
grew
up
on
another
linux,
distro
say
slackware
and
it's
37
floppies
that
I
used
to
install
my
first
linux
sudo
was
much
more
common.
Su
was.
A
A
A
Yeah,
I
remember
windows
98,
like
it
came
out
with
a
floppy
set,
and
it
was
like
two
stacks
of
bricks
or
something
right
like
a
25
25
like
set
of
like
this,
it
was
the
last
version
I
think,
of
like
windows
to
come
out
on
floppy
by
default
and
like
it
just
got
to
the
point
where
it's
just
like
completely
like
okay
cd-rom.
This,
please
everything
needs
a
cd-rom
now
now,
there's
not
even
cd-roms
anymore.
We've
passed,
dvd-roms
and
everything's
usb,
so
yeah
amazing
how
quickly
technology
advances
so
do
you.
C
B
So
what
I
was
going
to
show
is
a
way
to
find
it
right
or
a
way
to
get
to
accomplish
your
goal,
even
without
using
a
particular
profile
which
is
to
do
what's
called
here.
Let
me
I
hate
when
it's
all
the
way
at
the
bottom
of
the
screen,
but
sometimes
I
have
to
make
it
wider,
so
yum
module
enable
node.js,
12.
C
A
B
B
B
But
point
being
is
that
you
can
just
enable
the
module
which
is
from
a
user
experience
perspective,
the
equivalent
of
just
enabling
a
repo,
and
so
now
any
content
in
there
will
be
available
for
search
nice
or
install
or
whatever.
So
you
can
install
the
single
library
you
need
without
having
to
install
all
of
node.js,
like
you
would,
if
you
did
something
like
this.
B
A
C
A
B
Yeah,
so
what
I
was
talking
about
before
is
just
that,
if
it's,
if
it's
not
in
the
app
stream
rpms,
you
know
maybe
living
under
a
node.js
module
and
the
next
place
to
try
is
code
ready
builder,
which
is
basically
where
almost
everything
this
dash
devel
lives.
That's
that's
probably
where
it
would
be.
If
it's
not
there,
then
it
means
it's
probably
an
apple,
and
that's
it's
just
an
unsupported
component.
So
that's
that's
basically
where
it
goes
so.
A
Oh
yeah,
I've
got
I've
got
a
terabyte
in
my
like
pizza
server
that
I
got
over
there
yeah.
So
we're
talking
about
package
managers
like
nvm-
and
you
know
things
like
that
but
like
go,
has
you
know,
depth
and
their
own
package
manager
now
and
yeah
right
right
package
managers
that
you
could
get
that
might
solve
this
problem
for
you,
jp
dave
potentially.
But
if
you
want
to
just
use
the
rel
stuff,
go
ahead
right
like
it's
there
for
you.
B
B
B
A
B
A
B
B
B
It
is
primarily
used
these
days
with
java,
and
the
reason
is
is
because
java
doesn't
have
95
percent
of
the
problems
we're
talking
about
when
we
talk
about
a
distribution,
locking
you
to
a
version,
and
the
reason
is,
is
because,
if
you've
ever
done
any
java,
whenever
you
run
java,
you
actually
declare
every
library
you're
using
and
it
used
to
be.
You
had
to
literally
declare
every
single
one
on
the
command
line.
B
Whenever
you
ran
anything
now,
you
can
do
things
like
use
jars
or
you
can
actually
give
directories
and
that
kind
of
stuff,
but
because
you
do
that,
you
can
be
non-distribution
locked
right
because
you
can
just
have
a
directory
somewhere
with
whatever
the
latest
libraries
is
of
whatever
you
want
in
your
java.
So,
even
though
we
have
lots
of
languages
that
are
not
dependent
on
the
binaries
per
se
installed
in
the
operating
system,
most
of
them
don't
have
a
way
of
feeding
the
entire
run
time
to
the
command
line
execution.
A
B
Yes,
and
so
what
happens
is
whenever
so,
what
you
can
do
is
you
can
say,
let
me
do
it
this
way.
First,
I
think
it's
under
help
yeah.
So
what
you
do
is
you
install
a
new
alternative
and
basically
the
important
parts?
Are
this
part
here
just
that
first
line
and
what
it
does
is
it
says:
okay,
here's
where
I
want
it
to
live
so
user
bin
python.
B
Here's
what
I
want
to
call
this
set
of
alternatives
here
is
the
path
to
the
implementation
of
the
one
I
want
to
use
first
or
the
one
I
want
to
set
up
first
right
or
what
I'm
trying
to
set
up
now.
I
guess
a
better
way
to
put
it
and
then
a
priority,
and
so
basically
priority
is
the
higher
the
priority.
B
A
B
B
C
A
A
C
B
B
B
C
B
Also,
giving
all
this
new
functionality
right
right,
so
kind
of
adopting
some
aspects
of
the
yum
groups,
which
are
basically
a
module,
is
kind
of
like
somewhere
in
between
a
yum
group
and
and
a
meta
package
kind
of
more
powerful
than
both
and
more
functional
than
both.
If
not,
you
know,
kind
of
like
both
of
them
put
together
so
adopting
some
of
the
characteristics
of
using
yum
groups,
we
thought
was
a
good
way
for
users
to
help
understand
how
to
work
with
them.
B
B
B
B
B
B
B
B
A
Every
time
he
gives
it
no
matter
how
many
times
I've
seen
it,
it
literally
makes
it.
So
I
always
tell
this
story
anytime.
I
talk
about
this
talk
from
daniel.
Oh,
we
were
at
devops
days
raleigh
last
year,
and
there
was
literally
somebody
behind
me
that
said
wow
when
he
did
something,
and
then
this
is
all
quirky
stuff
and
then
across
the
audience
I
heard
a
whoa
like
that's
cool
whoa,
as
he
was
like.
You
never
hear
that
during
a
talk
right,
like
that's
very,
very
rare,
so
like
this
is
intense
stuff.
A
B
B
B
B
B
B
A
B
A
B
With
400
points,
and
then
we
have
a
new
contender
with
joe
fuzz
and
then
another
400
points
so
and
I
committed
last
week
to
posting
other
ways
to
earn
the
points
I
have
written
it,
but
haven't
posted
it,
because
I
need
somebody
to
review
it.
Real,
quick,
so
hopefully
we'll
have
it
up
later
today
or
tomorrow.
A
B
A
A
B
A
A
B
C
A
B
A
So
yeah
later
today,
we've
got
openshift
commons
briefing
on
clicking
the
thing
nope
today
is
not
the
ninth.
I
don't
there's
an
open
shift.
Commons
briefing
today
it
is
at
noon
eastern
time,
1600
utc
on
modernizing
and
accelerating
enterprise
application
development
with
a
project
called
joget
jaget.
I
don't
know
the
exact
pronunciation,
but
yeah
check
out
the
calendar
and
you'll
see
it,
but
coming
up
tomorrow
on
the
show
is
we're
having
a
special
guest.
One
of
our
partners.
Systig
is
coming
on
at
10
a.m.
A
Eastern
1400
utc
I've
got
dan
pop.
I
can't
say
his
last
name
from
systig
coming
on
we're
gonna,
I'm
gonna
spin
up
a
you
know
bare
open
shift
container,
we're
gonna
slap.
This
dig
on
it,
we're
gonna.
Let
it
rip
see
what
we
can
do
with
it.
It's
gonna
be
pretty
fun,
so
yeah
hop
on
there,
and
then
we
have
devnation
at
noon
tomorrow
and
yeah
that
wraps
up
the
week.
No,
I'm
sorry
there's
one
more
ocb.
A
B
I
I
do
find
it
amusing
with
us
doing.
You
know,
like
these
twitch
shows
and
stuff,
like
that.
It's
like
it's
so
common
to
not
ever
say
the
technologies
out
loud
that
we
use
all
the
time
and
then
you're
like
wait.
I
don't
actually
know
how
to
say
that
you
know
the
quay
key
problem
being
a
great
example,
but
yeah.