Usernetes Gen2: Kubernetes in Rootless Docker, with Multiple Nodes
summary
Distribution wraps Kubernetes in Rootless Docker and supports kubeadm to form real multi-node clusters with Flannel (VXLAN), running entirely as an unprivileged user inside containers. It uses Docker/Podman/nc as runtimes, builds node containers via docker-compose and kind images, and requires predeclared hostPath bind mounts in the compose file. Network bypass lifts local throughput from ~1.28 Gbps to ~50 Gbps and cross-node from ~1.47 Gbps to ~9.53 Gbps, making it plausibly production-capable.
AI-written summary · about
chapters (11)
- 0:00Introduction to UserNS v2
- 2:22Rootless container concepts
- 4:23Deep dive into namespaces
- 6:47Networking implementation
- 8:49Evolution of Kubernetes UserNS
- 12:06V1 vs V2 architecture
- 13:48Configuration and files
- 17:21Cluster deployment demo
- 20:39Handling network limitations
- 21:59Network acceleration
- 26:39Q&A session
related talks
44mRootless containers
18mKeynote: Running with Scissors
31mTowards unprivileged container builds
35mThe Reality of Rootless Containers
29mKubernetes Advanced Networking Testing with KIND
14mcontainerd: Rootless Containers 2020
40mUser Namespaces in Kubernetes: Security and Flexibility - Pick Both
30mThe Route To Rootless Containers