Intro + Deep Dive: containerd
summary
containerd is a CNCF‑graduated runtime core used in GKE and IBM IKS that exposes a smart client API (ctr) and CRI plugin, runs full test suites on GKE per PR, and structures functionality as small pluggable services: content, snapshotter, image, task and metadata with lease locking for pulls. Extensions use a plugin registry or external proxy plugins; a new v2 shim and namespaces isolate workloads. Live demos show Firecracker and Kata runtimes launched via containerd plugins and working end‑to‑end.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:44containerd early days (early 2016)
- 3:11Container Runtime Interface late 2016
- 5:16containerd joins CNCF (early 2017)
- 15:20Client-Server Design
- 16:35Backend
- 20:04Kubernetes Runtime Support
- 21:18Summary
- 41:26Pull Image
- 46:32Run Container
- 48:36Client Extensibility
- 50:21Plugin Registration
- 53:13Recompiled with 3th party plugins
- 55:48Support Proxy
- 56:56Remote snapshotter service
- 58:37Why external runtime plugins?
related talks
43mcontainerd
37mProject Update and Deep Dive: Containerd
35mIntroduction to containerd
39mMore Than Secure: Containerd + KataContainers as Kubernetes Runtime
35mWho's Running My Pods? A Deep Dive into the K8s Container Runtime Interface
32mFive things you need to know about your container runtime
42mCRI Runtimes Deep Dive: Who's Running My Kubernetes Pod!?
24mOCI, CRI, ??: Making Sense of the Container Runtime Landscape in Kubernetes
