Pod Through a Magnifying Glass
Talkat Open Source Summit Europe 2022 · on Friday, 2022-09-16· at 11:45· Liffey B Part 2 (Level 1), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Explains how a Pod maps to OS primitives by walking containerd + CRI + runc and the shim, showing the runtime creates cgroups, namespaces and per-container overlay filesystems; inspects /proc and cgroup v2 on a node, runs a demo Pod with nginx + Alpine sleep plus a pause container, toggles shared PID namespace, and sets 200 MB limits -> 400 MB pod limit to show hierarchical cgroup enforcement and which namespaces are shared versus per-container.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 2:37Kubernetes Cluster
- 3:13Worker Node
- 7:02Control Groups
- 8:59Container File Systems
- 10:46CHroot
- 12:07Namespace
- 13:44Container ID
- 17:48Demo
- 18:31Creating a Pod
- 22:45C group resources
- 23:36Best effort category
- 26:28Podml changes
- 27:57Nodes
- 28:32PID
- 30:37Memory Limits
- 32:09namespace sharing
- 33:07Conclusion
related talks
25mFrom Terminal to Container: Tracing Podman Run
33mLinux Container Internals
37mCRI-O: Under the Hood
48mUnderstanding Container Engines by Demo™
34mPodman 101 and Beyond!
49mThings I Wish I Had Learned Earlier About Containers: Lessons from a Seasoned Linux...
49mContainers without Docker
23mLife of a Container