~/talk

RunD: A Lightweight Secure Container Runtime for High-density Deployment...

on YouTube 19m
Talkat USENIX ATC '22 · 2022-07-11..07-13· [serverless]

speakers

name:Zijun Li
links:none on file
name:Jiagan Cheng
links:none on file
name:Quan Chen
links:none on file
name:Eryu Guan
links:none on file
name:Zizheng Bian
links:none on file
name:Yi Tao
links:none on file
name:Bin Zha
links:none on file
name:Qiang Wang
links:none on file
name:Weidong Han
links:none on file
name:Minyi Guo
links:none on file

resources

video:https://youtu.be/sVULldIyFDg
slides:none on file

summary

RunD is a secure-container runtime that splits rootfs with reflink-backed copy-on-write, ships a pre-patched guest kernel to maximize shareable text segments, and replaces per-sandbox cgroups with a renameable cgroup pool and aggregated lightweight cgroups. It launches a single sandbox in ~88 ms and starts >200 sandboxes within one second, keeps per-sandbox memory overhead under ~20 MB, supports >2,500 sandboxes on a 384 GB node, outperforms Kata variants, and is deployed in Alibaba production.

AI-written summary · about

chapters (6)

  1. 0:00Intro
  2. 0:46Introduction & Background
  3. 5:07Motivation
  4. 10:05Methodology & Design
  5. 15:24Evaluation
  6. 17:26Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.