New Container Kernel Features
Containers have become ubiquitous. Nowadays, the computing landscape is mostly concerned with a higher-level view on the functionality and features of containers. In this talk we will take a step back …
Talk Title | New Container Kernel Features |
Speakers | Christian Brauner (Senior Software Engineer, Canonical) |
Conference | Open Source Summit + ELC Europe |
Conf Tag | |
Location | Lyon, France |
Date | Oct 27-Nov 1, 2019 |
URL | Talk Page |
Slides | Talk Slides |
Video | |
Containers have become ubiquitous. Nowadays, the computing landscape is mostly concerned with a higher-level view on the functionality and features of containers. In this talk we will take a step back and focus on the low-level aspects that make containers possible. Specifically, we will look at new kernel features that have been implemented. This includes work such as shiftfs, a filesystem to translate between on-disk ids into a user namespace idmapping, a new seccomp interface which allows to defer decisions about whether or not a syscall is considered successful or not to userspace and other features.