DevOps Indonesia #5 - The Future of Containers
1 like75 views
The document discusses DevOps Indonesia, a DevOps community event happening on March 22, 2018 in Jakarta. It focuses on containers and Docker. It provides information about ticket prices, speakers including Yusuf Hadiwinata Sutandar. The document discusses the Open Container Initiative (OCI) and its role in driving innovation. It also discusses concerns with Docker and the container ecosystem including competing technologies like Kubernetes, rkt, and CRI-O. The conclusion emphasizes developing container-agnostic microservices.
![PAGE31
DEVOPS
INDONESIA
A 'boring' Docker fork could solve some problems - andA 'boring' Docker fork could solve some problems - and
create otherscreate others
Wise was especially dismayed by Docker's recent
move to include its Swarm orchestration functionality,
since it was "a large new system developed in secret
without transparent community involvement." He cited
this as an example of Docker pursuing a strategy of
"[using its] position to impede the progress of [open
source] communities in favor of [Docker's] commercial
interests."](https://image.slidesharecdn.com/devopsindonesia5cartenztechnology-thefuturecontainer20180322-180902134931/85/DevOps-Indonesia-5-The-Future-of-Containers-27-320.jpg)
DevOps Indonesia #5 - The Future of Containers
- 1. PAGE1 DEVOPS INDONESIA DEVOPS INDONESIA Jakarta, 22 Maret 2018 DevOps & The Future of Containers DevOps Community in Indonesia
- 5. PAGE5 DEVOPS INDONESIA • Early Bird Rp. 350.000,- at the end of March 2018 • Regular Rp. 500.000,- www.loket.com
- 6. PAGE7 DEVOPS INDONESIA Let’s get know each other
- 7. PAGE8 DEVOPS INDONESIA Linux Geek | OpenSource Enthusiast | Security Hobbies Yusuf Hadiwinata Sutandar
- 8. PAGE9 DEVOPS INDONESIA How the Open Container Initiative (OCI)How the Open Container Initiative (OCI) is driving innovation.is driving innovation.
- 11. PAGE12 DEVOPS INDONESIA ...has heard of Docker?
- 14. PAGE15 DEVOPS INDONESIA ...uses Docker in production? ...with additional tools?
- 15. PAGE16 DEVOPS INDONESIA Source: Docker all the things http://cdn.meme.am/instances/500x/59600465.jpg
- 16. PAGE17 DEVOPS INDONESIA Source: Docker all the things http://cdn.meme.am/instances/500x/59600465.jpg
- 18. PAGE21 DEVOPS INDONESIA RHTE - WH - Linux Containers Future.pdf What was Docker’s big contribution?What was Docker’s big contribution? ● Daemon, container engine that manages the configuration of Linux kernel namespaces, additional security features, and cgroups ● Introduced a layered packaging format for content that runs inside containers ● Command Line Interface (CLI) that made it easy to use. # docker build/run/push/pull etc. ● Docker drove the industry standardization of LXC
- 19. PAGE22 DEVOPS INDONESIA Early Concern with DockerEarly Concern with Docker ● Since the early days enterprise Docker users had some concerns ● Build requires a daemon ● Build requires a running container (sometimes makes sense) ● Build has secret handling issues ● Root concerns at runtime.
- 20. PAGE23 DEVOPS INDONESIA Most container tools focus on the developerMost container tools focus on the developer Container image developmentContainer image development # docker build, docker commit, docker pull, docker push Standardization of image format and runtime New tools to build and run images can arise
- 21. PAGE24 DEVOPS INDONESIA Several initiatives and discussions are going on these days, including appc (App Container specification), CNI (Container Network Interface), CNCF (Cloud Native Computing Foundation) or OCI (Open Container Initiative. For instance, the OCI tries to standardize container image definitions. Docker, CoreOS, Google, Red Hat, Facebook, Amazon and others work together here.
- 22. PAGE25 DEVOPS INDONESIA Introduction to Open Container InitiativeIntroduction to Open Container Initiative Two Specifications: ● Runtime - How to run a “filesystem bundle” that is unpacked on disk ● Image Format - How to create an OCI Image that contains sufficient information to launch the application on the target platform
- 23. PAGE26 DEVOPS INDONESIA The industry standards forThe industry standards for container formats and runtimes.container formats and runtimes. OCI as the most important organization in theOCI as the most important organization in the container ecosystem driving vendor neutrality,container ecosystem driving vendor neutrality, standardization and making thisstandardization and making this amazing technology accessible globallyamazing technology accessible globally
- 24. PAGE27 DEVOPS INDONESIA Docker also has huge momentum today. However, there exist some doubts about what the future will bring. Several software vendors are not happy with the power of Docker Inc. as company behind Docker. For example: ● Putting Docker Swarm Mode into the main Docker project made other orchestration vendors like Red Hat or Google unhappy, because they focus on Kubernetes as container orchestration tool ● Docker starts behaving like The Old Microsoft - Docker is trying to defeat Kubernetes, Mesos/Marathon and Nomad by including Swarm into the Docker Core.
- 25. PAGE28 DEVOPS INDONESIA Continue... ● Docker’s architecture is fundamentally flawed - the docker executable is merely a REST client that requests the Docker daemon to do its work. Critics of Docker say this is not very Linux-like. ● The Docker build process is stuck in second gear - Dockerfile syntax has been frozen in Docker’s roadmap for a long time now. This means that the Dockerfile format has not evolved with the insights in the Docker community for at least a year and a half..
- 26. PAGE30 DEVOPS INDONESIA Update (4 September 2017): To be fair, it must be noted that Docker appears to have taken this feedback seriously. They have separated the core of Docker into the Moby Project which can be re- packaged/re-assembled by the community in any way they see fit. https://blog.docker.com/2017/04/introducing-the-moby-project/. Update (20 October 2017): Moreover, Docker now also packages Kubernetes with their product. https://blog.docker.com/2017/10/kubernetes-docker-platform-and-moby-project/ Update (11 May 2017): The above is FIXED with Multi-Stage Builds. See my new blog “Simplify the Smallest Possible Docker Image” https://medium.com/@adriaandejonge/simplify-the-smallest-possible-docker-image- 62c0e0d342ef
- 27. PAGE31 DEVOPS INDONESIA A 'boring' Docker fork could solve some problems - andA 'boring' Docker fork could solve some problems - and create otherscreate others Wise was especially dismayed by Docker's recent move to include its Swarm orchestration functionality, since it was "a large new system developed in secret without transparent community involvement." He cited this as an example of Docker pursuing a strategy of "[using its] position to impede the progress of [open source] communities in favor of [Docker's] commercial interests."
- 28. PAGE32 DEVOPS INDONESIA https://www.infoq.com/articles/container-landscape-2016 The Important Things: Container Wars with Various TechnologiesContainer Wars with Various Technologies Do not focus on developing code for the container under the hood. Care instead about the business logic. Implement your microservices in a vendor agnostic way.
- 29. PAGE33 DEVOPS INDONESIA https://www.redhat.com/en/blog/faq-red-hat-acquire-coreos ..Also, The container technology market is becoming crowded. Various technologies are competing for share of this emerging market “Red Hat acquires CoreOS for $250 million in Kubernetes expansion” to win Container orchestration in Today Market https://www.redhat.com/en/blog/faq-red-hat-acquire-coreos
- 31. PAGE35 DEVOPS INDONESIA https://blog.docker.com/2017/03/docker-donates-containerd-to-cncf/ https://coreos.com/blog/rkt-container-runtime-to-the-cncf.html Docker ContainerD & CoreOS's rktDocker ContainerD & CoreOS's rkt DonatingDonating to Cloudto Cloud Native Computing FoundationNative Computing Foundation Over the past 4 years, the adoption of containers with Docker has triggered an unprecedented wave of innovation in our industry: docker,inc believe that donating containerd to the CNCF will unlock a whole new phase of innovation and growth across the entire container ecosystem – march 2017
- 32. PAGE36 DEVOPS INDONESIA How does rkt improve the situation?How does rkt improve the situation? The short answer is that rkt now provides a viable alternative to Docker. It has a more Linux-like architecture. And a strong competitor will keep the monopolist sharp. https://medium.com/@adriaandejonge/moving-from-docker-to-rkt-310dc9aec938
- 33. PAGE37 DEVOPS INDONESIA How does rkt improve the situation?How does rkt improve the situation? The long answer: ● rkt can run Docker images ● rkt has a simpler architecture ● rkt follows an open standard for images ● If you want to run Kubernetes without Docker, you may also like to learn about the cri-o project. This project is part of an official Kubernetes incubator and based on runc https://medium.com/@adriaandejonge/moving-from-docker-to-rkt-310dc9aec938
- 34. PAGE38 DEVOPS INDONESIA How does rkt improve the situation?How does rkt improve the situation? The long answer: ● rkt can run Docker images ● rkt has a simpler architecture ● rkt follows an open standard for images ● If you want to run Kubernetes without Docker, you may also like to learn about the cri-o project. This project is part of an official Kubernetes incubator and based on runc https://medium.com/@adriaandejonge/moving-from-docker-to-rkt-310dc9aec938
- 35. PAGE39 DEVOPS INDONESIA Introduction to OCI CRI-OIntroduction to OCI CRI-O A Kubernetes thing ● Lighweight Container to run Kubernetes ● OCI Daemon renamed to CRI-O ● Implements Kubelet Container Runtime Interface ● OpenShift tells Kubernetes to execute pod ● Kubernetes communicates with ocid ● ocid pulls image using skopeo/image ● ocid stores image on disk using storage ● ocid runs container/pod using runc Red Hat Technical Exchange 2017 – Vietnam More detail about CRI-IO: http://cri-o.io/
- 36. PAGE40 DEVOPS INDONESIA Introduction to CrooTIntroduction to CrooT Stand for Container Running on OpensTack The next Generation Container Pricing Model for Croot As a Services 2x CrooT node cluster = Rp 160000 3x CrooT node cluster = Rp 250000 Visit your fav cloud Provider for More information
- 37. PAGE41 DEVOPS INDONESIA Certified ProviderCertified Provider When Croot Become Communidity Product Boleh kk... CrooT nya kk!!
- 38. PAGE43 DEVOPS INDONESIA Conclusion: Develop Container-Agnostic MicroservicesConclusion: Develop Container-Agnostic Microservices There are plenty of different fantastic container technologies, orchestration platforms and cloud services. All of them have their pros and cons. In addition, the market is evolving quickly. The key conclusion for now: Develop the business logic of your microservices in a vendor-agnostic approach to be future-safe and have fun leveraging all the great advantages and features of microservices and container technologies in opposite to monoliths and heavyweight virtual machines.
- 39. PAGE44 DEVOPS INDONESIA To Avoid Vendor Lock-in, please Visit: http://aaronallport.com/2016/03/23/can-we-avoid-cloud-vendor-lock-in.html In summary, no matter if you develop your business logic within a microservice with source code (using technologies such as Java, .Net or Go) or visual coding (such as middleware technologies), you should be able to develop it once and be able to deploy it in different containers, test environments or cloud providers without re-developing it or even having to change the technology you chose before.
- 40. PAGE45 DEVOPS INDONESIA How the Open Container Initiative (OCI)How the Open Container Initiative (OCI) is driving innovation.is driving innovation.
- 42. PAGE47 DEVOPS INDONESIA Are You Awesome?Are You Awesome? We are Hiring !We are Hiring ! • Consultant Security (Middle) • Consultant Open Source (Junior/Middle) • Team Leader-Change Management (Middle) • Full Stack Web Developer (Ruby On Rails-Middle) Please email your resume to [email protected] [email protected]
- 43. PAGE48 DEVOPS INDONESIA Alone We are smart, together We are brilliant THANK YOU ! Quote by Steve Anderson