Paris Container Day 2017
who it's for
devops engineers, platform engineers, site reliability engineers, infrastructure engineers, container engineers, cloud architects, release engineers
topics
Kubernetes security defaults; Docker multistage builds; ephemeral build pods in CI; rkt on CoreOS; Traefik dynamic reverse proxy; Prometheus Operator and kube-prometheus; Nomad multi-cloud scheduling; LinuxKit immutable OS images; Linkerd traffic shifting for canaries; Amazon ECS scheduling with Blox; container persistent storage strategies; container monitoring and metrics
| title | author | length |
|---|---|---|
| Security in a containerized world | Jessica Frazelle | 23m |
Focus is runtime hardening: concrete changes landing in Kubernetes and Docker rather than abstract best practices. Announces default seccomp whitelist for… | ||
| Docker in 2017: What's New and What's Ahead | Jean-Laurent de Morlhon | 30m |
Docker restructured into Moby, Docker Community and Docker Enterprise and now ships monthly edge builds plus a quarterly stable cadence with five supported… | ||
| Your CI Pipeline is the Platform | Jason Hansen | 24m |
Claim: the CI pipeline is the platform because the repo holds the app, the pipeline and the deployment artifacts so delivery is reproducible. Uses Jenkins… | ||
| OpenShift in Production: 7 Pitfalls to Avoid | A.Ben Aissi, E.Faure | 50m |
Practical guidance for running OpenShift in production, covering architecture (plan etcd quorum across datacenters and avoid splitting nodes between sites… | ||
| Take a BlaBlaCar to the stars with rkt | Simon Lallemand | 44m |
Company moves 300 bare‑metal servers to CoreOS and rkt for production, building about 400 images and running ~4,000 containers with ~80% of production migrated… | ||
| Make load-balancing great again with Træfik | Emile Vauge | 48m |
Træfik is a dynamic Go-based reverse proxy that watches orchestrators (Docker Swarm, Mesos, Kubernetes) and updates routes without restarting to provide live… | ||
| Downtime is not an option | Johannes Unterstein | 27m |
Claims that DC/OS runs containers and Big Data together on Apache Mesos and actually does it at scale with customers like Twitter on 27k-node clusters. Shows… | ||
| Living the Nomadic life | Nic Jackson | 35m |
Nomad is an agent‑based scheduler that ships as one‑binary agent‑based scheduler and integrates with Consul, Terraform, Docker, QEMU, Fabio, Fastly and… | ||
| Bringing containers to production with LinusKit | Justin Cormack | 47m |
LinuxKit claims repeatable, immutable server images built from containers that build in ~30s and boot as VMs on Mac, AWS or GCP. The YAML file treats normal… | ||
| End-to-end monitoring with the Prometheus Operator | Max Leonard Inden | 26m |
Claims a single command install that spins up a Prometheus cluster, Alertmanager cluster, Grafana dashboards and exporters via the Prometheus Operator and the… | ||
| There is no container | Ori Pekelman | 29m |
Claim: “container” is just a userland illusion over Linux kernel features and implementations differ. Details: uses namespaces and cgroups, clone and setns… | ||
| LinkerD and Kubernetes | Romain Meunier | 48m |
A Kubernetes-based setup (Tectonic/CoreOS distro) runs prod, preprod and dev by namespace so a full preprod clone can spin up in about one minute. Helm… | ||
| Nomad, orchestration made in HashiCorp | Bastien Cadiot | 44m |
A live demo shows HashiCorp Nomad used for orchestration: a cluster of 3 servers and 3 clients is provisioned with Terraform on Google Cloud, integrated with… | ||
| Monitoring and metrology for containers | J.Raffre, J-P Thiery | 50m |
Presents a concrete monitoring architecture for containers: use Docker log drivers to send logs via syslog into Kafka and index in Elasticsearch, and collect… | ||
| Advanced container scheduling on Amazon ECS with Blox | Julien Simon | 47m |
Describes Blox extensions to Amazon ECS that add a placement engine (filters on AMI, instance type, availability zone and policies such as spread, binpack… | ||
| Production FS: Adapt or Die | Claudia Beresford, Tiago Scolari | 42m |
Cloud Foundry teams evaluate actual root filesystem implementations: AUFS works but lacks mainline support and quotas; btrfs looks attractive for snapshotting… | ||
| Using containers for Continuous Integration Delivery | C-sanchez | 43m |
Describes running Jenkins on Kubernetes with dynamic Jenkins agents that spawn pods on demand, reusing public images to run Maven and Go side by side, and… | ||
| nothing matches | ||