~/talk

Containers without Daemons - Podman Internals

on YouTube 53m
Talkat DevConf.CZ 2019 · 2019-01-25..01-27· [security]

speaker

name:Matthew Heon
links:none on file

resources

video:https://youtu.be/rdlD2d7S-Rg
slides:none on file

summary

Daemonless container engine architecture with concrete pieces: a file-based locking container storage replaces in-memory daemon locks so multiple processes can safely share images and layers; the containers/image library enables pulls from registries and daemon-to-storage transfers and yields parallel pulls 50% faster on some workloads; user namespaces require expensive chowning so a user-namespace chown cache cuts setup from ~30s to ~1s; libpod + conmon watcher run containers without a long-lived daemon and support socket activation and rootless workflows.

AI-written summary · about

chapters (6)

  1. 0:00Start
  2. 4:53File Based Locking
  3. 11:59Live Demo
  4. 17:26User Namespaces
  5. 25:02User Name Spaces
  6. 33:36Mount Options

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.