runC: The little engine that could (run Docker containers) - Black Belt Track

With the announcement of the OCI by Solomon Hykes at last summer's DockerCon, a Docker-contributed reference implementation of the OCI spec, called runC, was born. While some of you may have tried runC or have a history of poking at the OS layer integration library to Linux namespaces, cgroups and the like (known as libcontainer), many of you may not know what runC offers. In this talk Phil Estes, Docker engine maintainer who has also contributed to libcontainer and runC, will show what's possible using runC as a lightweight and fast runtime environment to experiment with lower-level features of the container runtime. Phil will introduce a conversion tool called "riddler", which can inspect and convert container configurations from Docker into the proper OCI configuration bundle for easy conversion between the two environments. He'll also demonstrate how to make custom configurations for trying out security features like user namespaces and seccomp profiles.
--
Docker is an open platform for developers and system administrators to build, ship and run distributed applications. With Docker, IT organizations shrink application delivery from months to minutes, frictionlessly move workloads between data centers and the cloud and can achieve up to 20X greater efficiency in their use of computing resources. Inspired by an active community and by transparent, open source innovation, Docker containers have been downloaded more than 700 million times and Docker is used by millions of developers across thousands of the world’s most innovative organizations, including eBay, Baidu, the BBC, Goldman Sachs, Groupon, ING, Yelp, and Spotify. Docker’s rapid adoption has catalyzed an active ecosystem, resulting in more than 180,000 “Dockerized” applications, over 40 Docker-related startups and integration partnerships with AWS, Cloud Foundry, Google, IBM, Microsoft, OpenStack, Rackspace, Red Hat and VMware.

[@lucjuggery1315]

Great presentation / explanations, thanks !

[@BryanChance]

Excellent! making my head spin. !!

[@PavelPodkorytov]

Very good presentation, thank you. But how I can build rootfs without docker?

[@PhilEstes]

It probably depends on your distro of interest, but lots of tools exist from even VM image creation days to create root filesystems. For example, if you find a "cloud image" build of various distros as a tarball, this can probably suffice as a starting point. For specific tools, see "debootstrap" for Debian; search on rkt or appc rootfs bundle creation or look up the "fakeroot" concept. In general, you should find various methods depending again on your base image layer interest (e.g. Fedora, Debian, Ubuntu, Alpine, Busybox, etc.)

[@cjsalda]

if i were a designer for this kind of tools i will make it so easy. Make tools for lazy people that will save a lot of money