New Container Kernel Features
Containers have become ubiquitous. Nowadays, the computing landscape is mostly concerned with a higher-level view on the functionality and features of containers. In this talk we will take a step back …
| Talk Title | New Container Kernel Features |
| Speakers | Christian Brauner (Kernel Engineer, Canonical Ltd.) |
| Conference | Open Source Summit + ELC North America |
| Conf Tag | |
| Location | San Diego, CA, USA |
| Date | Aug 19-23, 2019 |
| URL | Talk Page |
| Slides | Talk Slides |
| Video | |
Containers have become ubiquitous. Nowadays, the computing landscape is mostly concerned with a higher-level view on the functionality and features of containers. In this talk we will take a step back and focus on the low-level aspects that make containers possible. Specifically, we will look at new kernel features that have been implemented. This includes work such as shiftfs, a filesystem to translate between on-disk ids into a user namespace idmapping, a new seccomp interface which allows to defer decisions about whether or not a syscall is considered successful or not to userspace and other features.
