containerd, with Derek McGowan

Kubernetes Podcast from Google

containerd was born from community desire for a core, standalone runtime to act as a piece of plumbing that applications like Kubernetes could use. It sits between command line tools like Docker, which it was spun out from, and lower-level runtimes like runC or gVisor, which execute the container’s code. This week’s guest is Derek McGowan, a Software Engineer at Docker and a containerd maintainer-d.

Along with the news of the week, Adam and Craig discuss the many Vancouvers.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [e-mail]
• twitter: @kubernetespod

Chatter of the week

• Vancouver, Vancouver, and George Vancouver
• South Bend, North Bend, and Bend
• Cosmpolis
• “50 Year Sensation: the Dave McMacken Retrospective” (album art show in Astoria, Oregon)

News of the week

• Istio 1.3 is out
• Google’s Anthos now incudes Anthos Service Mesh, Cloud Run for Anthos and more
• Cloud Native Application Bundles hit 1.0
  • Episode 61 with Ralph Squillace and Jeremy Rickard
• Nominations for the annual CNCF Community Awards
• Bloomberg hits 90% utilization with Kubernetes
• Mistakes that “cost” thousands by Gajus Kuizinas
• Kubernetes Edge working group publishes whitepaper
• Isopod, by Cruise
• Pulumi 1.0
• 5 RBAC mistakes you must avoid (number 4 will shock you)
• OpenShift 4.2 disconnected install
• Red Hat Quay 3.1
• Microsoft AKS brings Scale Sets and Standard LB to GA
  • Upstream kernel bugs
• Amazom EKS adds cluster tagging and IAM roles for service accounts
• Deep dive into AWS Fargate by Abhisheck Ray from Amazon
• Kong introduces Kuma, “universal service mesh”
• Google introduces Cloud Dataproc for Kubernetes
• Apache Flink operator from Google Cloud
• Container runtime security bypasses on Falco by Mark “Antitree” Manning
• Rafay Systems lands $8m in Series A funding

Links from the interview

• containerd
• Original announcement
• The many meanings of ‘container runtime’
• kubelet and Container Runtime Interfaces
• runC, gVisor, Kata Containers, and the Windows Host Compute Service (HCS)
• ctr debug tool
• containerd’s graduation from the CNCF
• containerd shim API
  • gVisor shim
  • Firecracker containerd integration
  • Kata Containers shim
  • Windows Container shim
• rkt announced in 2014 with appC spec
• Open Container Initiative
  • libcontainer, which became runC
• Web Assembly (WASM)
• BuildKit
• 1.3.0 releases are coming
• Contribution opportunities:
  • Reporting issues
  • Plugin ecosystem
• Derek McGowan and containerd on Twitter