#OpenInfraSummit Track: Container Infrastructure

The Open Infrastructure Summit, held virtually for the first time, takes place October 19-23 and includes more than 100 sessions around infrastructure use cases like cloud computing, edge computing, hardware enablement, and security. Thousands of attendees are expected to participate, representing 30+ open source communities and more than 110 countries.

Today, we are featuring one of the seven Summit tracks—Container Infrastructure. Get your Summit tickets for free and don’t forget to add these sessions to your Summit calendar!

Building Containers is Fun. Let’s See how?

Presented by Arun Chaudhary from Oracle.
What can you expect to learn?
- A brief intro to containers
- Container runtime
- Linux Capabilities
  - Adding Capabilities
  - Dropping capabilities
  - Figuring out what’s needed
- Cgroups in brief
  - some test around it
- Namespaces in brief
  - Possible problems
  - Short term solution
  - long term solution
- Explore user namespace
Add this session to your Summit calendar!

Building High Efficient Storage Infrastructure for Secure Container on Top of SPDK

Presented by Changpeng Liu & Xiaodong Liu from Intel.
What can you expect to learn?
- Current typical container storage infrastructure
- How storage devices are virtualized for secure container
- How vhost-user storage devices are recognized by container runtime through OCI runtime spec
- SPDK libraries and modules to consist a userspace container storage infrastructure
Add this session to your Summit calendar!

Building Kubernetes Operators with the Operator Framework and Ansible

Presented by Keith Tenzer from Red Hat.
What can you expect to learn?
- Attendees will leave with an understanding of the value of Operators, how to build their own Operators with the Operator Framework and share them with the community via OperatorHub.
Add this session to your Summit calendar!

Connecting Ecosystems: How Cinder CSI, Ember CSI and Manila CSI Leverage OpenStack bits in Kubernetes

Presented by Christian Schwede, Gorka Eguileor & Tom Barron from Red Hat.
What can you expect to learn?
- Basic concepts of the Container Storage Interface
- Provided services and differences for the different CSI projects:
  - Cinder CSI
  - Ember CSI
  - Manila CSI
- How operators are used to simplify deployments of these drivers
Add this session to your Summit calendar!

Cloud-hypervisor: A New Choice for Virtual Machine Monitor

Presented by Henry Wang & Michael Zhao from Arm.
What can you expect to learn?
- How did Cloud-hypervisor came around. Provides some background regarding Rust and Rust-VMM.
- Use cases analysis, e.x. using Cloud-hypervisor as runtime of Kata-Containers.
- Architecture introduction.
- Demonstration. A live demo on how to run VM’s with different feature/devices configuration.
Add this session to your Summit calendar!

Declarative Chain to Kubernetes Multi Clusters for Automation of HA Workloads.

Presented by Alex Barchiesi from CERN, Matteo Di Fazio & Marco Lorini fromConsortium GARR.
What can you expect to learn?
- From A to Z of the Kubernetes cluster federation on top of a declarative setup of a multi-region OpenStack infrastructure.
- We’ll cover the MAAS and juju layer to achieve OpenStack in a declarative way and then re-cycle juju with a different backend (OpenStack itself) to have a multiple Kubernetes setups that will be federated through KubeFed so to have the possibility to move the workload from a region to another.
Add this session to your Summit calendar!

It’s a Multi-Mesh World

Presented by Lee Calcote from SolarWinds.
What can you expect to learn?
- Many audience members are challenged in their attempts to understand the details of working with different service meshes and the challenges they bring.
- Using Meshery, demonstrations will be done in the context of the Service Mesh Interface, Hamlet, and the Service Mesh Performance Specification, which are projects that most people do not have an understanding about and will benefit from, during this session.
Add this session to your Summit calendar!

Kata * TEE = A Lego-like Two-way Sandbox for Seamless Security and Privacy

Presented by Kailun Qin from Ant Group.
What can you expect to learn?
- What are the container attack vectors at the Cloud and Edge? How about their implications over security and privacy? Where and why a two-way sandbox is needed?
- What is a Trusted Execution Environment (TEE)? How it helps with protecting sensitive code and data in use?
- What Kata Containers is and what it offers to boost security in containers at present?
- How to leverage Kata with TEE technologies to build up your own two-way sandbox in a lego-like way? And what adaptions are needed for the relevant opensource projects like Kata Containers, rust-vmm etc.?
- How the end-to-end ease and seamlessness of usage is achieved on orchestration platforms such as OpenStack and Kubernetes?
- A PoC built on top of Kata, which showcases the seamless two-way isolation user experience and the lego-like developer experience.
- An outline of the current status and next steps for upstream.
- Practice experience within Ant Group.
Add this session to your Summit calendar!

Observability in Kata containers 2.0

Presented by Bin Liu from OneAPM.
What can you expect to learn?
- What’s Observability and why Observability is important
- Observability technical in Kata containers 2.0
- How to use Observability in Kata containers 2.0
Add this session to your Summit calendar!

Run your Kubernetes Cluster on OpenStack in Production

Presented by Anita Tragler, Franck Baudin & Ramon Acedo Rodriguez from Red Hat.
What can you expect to learn?
- Review a production ready deployment reference architecture for Kubernetes on OpenStack.
- Understand the deployment and networking challenges to provide OpenStack stable API, services and still support bare-metal performance for Kubernetes orchestrated container workloads.
- Learn how OpenStack provides a stable and robust convergence platform for bare-metal, VMs and container applications.
Add this session to your Summit calendar!

Own Your YAML: extending Kustomize via Plugins

Presented by Matt McEuen from AT&T.
What can you expect to learn?
- What Kustomize is, and when you might use it
- Different plugin types, and how you can develop them
- A transformer plugin example: Airship’s ReplacementTransformer
- A generator plugin example: Airship’s HostGenerator
- How Airship integrates with Kustomize to manage configuration at scale
- A demo will be incorporated
Add this session to your Summit calendar!

Significance of Hardware Classification Combined with Host Configuration Operator

Presented by Digambar Patil from Calsoft Inc, John Williams from Dell EMC Inc., Sirisha Gopigiri.
What can you expect to learn?
- Attendees will learn how to use hardware classification controller and host configuration operator to classify and configure nodes and clusters. Being an intermediate and technical presentation, this would be good opportunity for devops, day-1 and day-2 operations learning. This also shows how baremetal operators combined with Ironic provide inputs for CRD’s. The host classification part adds labels to BaremetalHost CR’s and host configuration operator will use these labels for configuring selected hosts and extending the operation.
Add this session to your Summit calendar!

The Best of Both Worlds: Running Highly Efficient Containers Inside High Performance VMs

Presented by Erez Cohen & Itay Ozery from Mellanox Technologies.
What can you expect to learn?
- In a virtualized platform, the entity that dispatches packets between the network and the VMs (and between local VMs) is the virtual edge bridge (VEB) such as Open Virtual Switch (OVS), Linux Bridge, etc. Usually theses switches are implemented in software running in a hypervisor. Due to a software datapath, the VEB performance is either limited or consumes significant amount of CPU cores and cycles in order to perform reasonably well.
- With virtualized container deployments, this performance degradation problem gets compounded even further due to an additional switching layer. Thus, although virtualized containers offer great benefits they suffer with severe network performance degradation.
- The presenters propose mechanisms to accelerate packet switching and processing and thus turbo boost networking performance of containers within VMs.
Add this session to your Summit calendar!

The Practice and Landing of Kata Containers in Ant Group and Alibaba Group

Presented by Fupan Li from Ant Group, Wei Yang from Alibaba Cloud.
What can you expect to learn?
- In this presentation, the presenters would show the details and the scale of how Kata Containers were used in Ant and Alibaba Group, what’re the features we had enhanced for Kata Containers and the optimizations that they had done for Kata.
Add this session to your Summit calendar!

Toward Next Generation Container Image

Presented by Yan Song from Alipay.
What can you expect to learn?
- Container image basics, drawbacks and improvements. Kata Containers isolation and multi-tenancy.
Add this session to your Summit calendar!

Don’t miss these Summit sessions and get your Summit ticket for free!

Still on the fence?

View the full Summit schedule and check out some most anticipated Summit sessions that you might love!

Participate:

Follow the #OpenInfraSummit hashtag on Twitter, Facebook, LinkedIn and make sure to subscribe to the OpenStack Foundation (OSF) YouTube channel to get exclusive behind-the-scenes content on how the Summit is being organized!

Participate in the conversation on

Twitter: twitter.com/OpenStack

Facebook: facebook.com/OpenStack

YouTube: youtube.com/user/OpenStackFoundation

WeChat ID: OpenStack

Tags: Kata Containers, Open Infrastructure Summit

Author
Recent Posts

Superuser

Superuser Magazine is the Open Infrastructure Foundation's official online publication. It covers open infrastructure ecosystem news, case studies, event recaps, product updates and announcements, project releases, and more.