Runc: The Little (container) Engine That Could - Phil Estes, IBM Cloud Open Technologies

No ratings

Presented at LinuxCon 2016 by

Phil Estes

The Open Container Initiative (OCI) was announced last summer as a Linux Foundation Collaborative Project to specify a standardized container runtime, and to provide a reference implementation of this specification, called "runc". Runc began as a simple wrapper of the pre-existing libcontainer OS-level container library created and used by the Docker engine, donated at the OCI's founding to the OCI umbrella. A year in, maybe you haven't heard all that much about runc or its capabilities, or the fact that both Docker and Cloud Foundry's garden Linux project both rely on runc today. In this talk, Phil will give an overview of runc and explain how to take existing Docker Containers and migrate them to runc bundles. Given runc is a great playground for new OS level container features, we'll look at how seccomp, user namespaces, and other technologies are used and modeled via runc.