Deploying Unikernels in Production with Kubernetes
Talkat KubeCon + CloudNativeCon North America 2021 · on Thursday, 2021-10-14· at 14:30· Room 408 AB + Online·
summary
KubeKraft implements a runtime and containerd plugin that lets Kubernetes pull OCI-packed unikernel images and launch them via runu as VMs instead of containers. It packages Unikraft images into OCI layers, boots in as little as 3.1 ms, and the demo successfully serves nginx. Measured results show an Unikraft NGINX image <2MB (description: Docker NGINX 42MB) delivering roughly 2x throughput versus the Docker image, with much lower memory and attack surface.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:16Anatomy of a "normal" K8s stack
- 3:21Reducing the os with specialization
- 4:06Could we reduce Linux further?
- 7:20The Unikernel Model
- 10:57Unikernels offer better performance.
- 12:56Unikernels offer better transport.
- 13:49Unikernels offer better security.
- 14:54Our Goal
- 16:11Interfacing VMs with K8s
- 18:50Extending the Container Runtime
- 19:13runu: Run Unikernels!
- 19:31A unikernel in OCI clothing
- 21:28Mixed Container/Unikernel Runtime
- 23:09Future work
related talks
15mLeveraging Unikernels and Kubernetes to (Transparently)...
37mUnik: Unikernel Runtime for Kubernetes
15mStuffing 10K Pods on a Commodity Server - And Starting Them in Milliseconds via Kubernetes
11mLightning Talk: Unikernels Vs Containers Vs VMs
39mDelivering Serverless Experience on Kubernetes: Beyond Web Applications
34mModern Serverless Workloads with KNative and Kubernetes
39mMore Than Secure: Containerd + KataContainers as Kubernetes Runtime
02h 18mDevelop and Deploy to Kubernetes like a Googler