Container Plumbing Days 2024
2024-04-15
Seattle, United States
as the organisers put it
Register Submit to Speak Sponsor View the Schedule Thank you to all who joined us for Container Plumbing Days 2024! We look forward to seeing you at future events. To experience the best of this year’…
who it's for
container runtime developers, security engineers, container image and registry engineers, cloud infrastructure engineers, kubernetes operators, site reliability engineers, systems integrators
topics
crun microvm container isolation; Kata Containers lightweight VM runtime; gVisor user-level TCP stack; Podman and Buildah on FreeBSD; SOCI stargz lazy image loading; rootless Docker multi-node Kubernetes; registry blob de-duplication; systemd-sysext runtime delivery; WASM backend graph compilers; EROFS lazy-pull and deduplication; Copa hot-fix buildkit LLB patching
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | Phil Estes | 06m |
Event traces its heritage to 2016–19 meetups and now runs as an LF-backed microconference with OCI funded the event and a program committee drawn from prior… | ||
| Confidential Containers with the Crun-Krun Container Runtime | Tyler Fanelli | 26m |
crun-krun wraps each container in a microv VM via the C library libkrun, using podman-built images (builda adds a CW/mkcw mode) and an external attestation… | ||
| Kata Containers: Security and Containers Without Compromise | Ildikó Váncsa | 22m |
Kata Containers is an OCI-compatible runtime that puts a lightweight VM around containers to deliver VM-grade isolation with near-container speed, supporting… | ||
| Lightning Talk: Optimizing Security Container Runtime's Network Performance with Modular Plugin TCP/IP Stack | Anqi Shen | 07m |
Presents a concrete patch: gVisor’s Sentry gets a user-level TCP/IP stack (ta-deck, FD.io, DPDK, async I/O) via a glue interface and static link so syscalls… | ||
| Lightning Talk: OCI Containers for FreeBSD | Doug Rabson | 15m |
Ports Podman and Buildah to FreeBSD with a custom OCI runtime and six months of upstream merges, resulting in both tools building and running out of the box on… | ||
| Lightning Talk: How to Get Slim with Soci and Stars: Minifying Containers with Lazy Image Loading in ContainerD | Kyle Quest | 14m |
Explores using ContainerD’s lazy image loading via SOCI index and stargz per-file tars to derive exact files loaded at runtime and feed that telemetry into… | ||
| Usernetes Gen2: Kubernetes in Rootless Docker, with Multiple Nodes | Akihiro Suda | 28m |
Distribution wraps Kubernetes in Rootless Docker and supports kubeadm to form real multi-node clusters with Flannel (VXLAN), running entirely as an… | ||
| Optimizing Container Registry Storage: Introducing Blob De-Duplication for Accurate Sizing and Cost | Brandon Caton | 25m |
Quay implements blob de-duplication to report true storage per namespace and repository by splitting work into a backfill and running total. Database sizes are… | ||
| Lightning Talk: Shipping Container Runtimes as Systemd-Sysext Images | Krish Jain | 09m |
Adds a systemd-sysext build path into the Flatcar Container Linux SDK and migrates runtime delivery from Torcx to a reproducible build_sysext script that… | ||
| Lightning Talk: Accelerate WebAssembly AI with Backend Graph Compliers on a Wide Variety of AI HW Accelerators | Tiejun Chen | 08m |
Prototype WebAssembly runtime injects a transparent backend interposer that intercepts ML framework calls (it hijack load_model/predict) and redirects models… | ||
| Lightning Talk: EROFS: An Image-based Filesystem for Containers | Xiang Gao, Tianyi Tang | 15m |
EROFS is a block-aligned read-only filesystem in mainline since Linux 5.4 that now supports lazy pulling over fscache, external data blobs (tarFS) and… | ||
| Hot Fix: Securing the Vulnerable Images with Copa | Prerit Munjal | 27m |
Vulnerability census claims 2023 Sysdig finds 87% of container images with critical/high issues; Copa (Copa setic) is a CNCF Sandbox CLI that reads scanner… | ||
| CDI: The Future of Specialized Hardware in Containers | Christopher Desiniotis | 34m |
CDI defines a declarative, CNCF‑sponsored spec that maps complex hardware access to OCI runtime spec edits (device nodes, mounts, env and hooks), letting… | ||
| nothing matches | ||