What Container Runtime Do I Need?

on YouTube ↗35m

" summary

Explains why the choice of runtime depends on constraints: containerd + runc handle image lifecycle and low‑level process creation via Linux namespaces, cgroups and chroot; Kubernetes uses the CRI to plug in any OCI runtime; podman (daemonless) is a drop‑in Docker replacement that runs rootless pods; sandbox runtimes like gVisor, Kata and Firecracker provide VM‑level isolation for higher security. Recommends Docker for simple dev use, containerd for cluster lifecycle, sandbox runtimes for regulated workloads.

AI-written summary · about

" chapters (9)

1. 0:00Start
2. 0:51What are Containers?
3. 11:12Under the hood (chroot)
4. 13:55Under the hood (cgroups)
5. 18:11Open Container Initiative (OCI)
6. 19:56Container Runtime/Tools (High Level)
7. 23:52Container Runtimes (Low Level)
8. 25:13Container Runtimes (Sandboxed)
9. 26:50Container Runtime Usecases

" related talks

• 24mOCI, CRI, ??: Making Sense of the Container Runtime Landscape in KubernetesPhil Estes · Kubernetes Forum Seoul 2019
• 34mContainer Runtime Evolving in KubernetesPengfei Ni · KubeCon + CloudNativeCon China 2019
• 34mContainer Runtime Evolving in KubernetesPengfei Ni · KubeCon + CloudNativeCon + Open Source Summit China 2019
• 23mOCI, CRI, ??: Making Sense of the Container Runtime Landscape in Kubernetes - Phil Estes, IBMPhil Estes · Kubernetes Forum Sydney 2019
• 37mLet's Try All the CRI Runtimes: Part 2: Answering the Why Question!Phil Estes · KubeCon + CloudNativeCon North America 2019
• 43mIntro: containerdMike Brown, Derek McGowan · KubeCon + CloudNativeCon China 2018
• 34mLet's Try Every CRI Runtime Available for Kubernetes. No, Really!Phil Estes · KubeCon + CloudNativeCon Europe 2019
• 42mCRI Runtimes Deep Dive: Who's Running My Kubernetes Pod!?Phil Estes · Craft Conference 2019