Linux Container Technologies and Their Applications

Industrial software development cannot be imagined without the use of container technologies. An example of such a technology is Linux Containers, an effective tool for creating isolated environments to run virtual machines and microservices. Many of the tools used in DevOps, including Docker Compose, Docker Swarm, and Kubernetes, are container-based, and many cloud services that provide virtual machines also rely on container technology. However, many people might not know that containers are based on components of the Linux kernel, such as control groups (cgroups) and namespaces. Control groups allow you to manage resources, including processor cores, memory, I/O, and others, and namespaces isolate containers from each other, creating the illusion of exclusive ownership of the equipment. This lecture will cover how Linux Containers work and how this technology is used in various DevOps tools.

Speaker:
Kirill Krinkin, scientist and software engineer. Holding a Ph.D. in computer science has been doing research and development with international companies and universities in the fields of software engineering, operating systems, computer networks, autonomous mobile robots, and co-evolutionary hybrid intelligence. He actively lectures in universities on the subject of mobile robotics and is an organizer of many STEM schools around the world. Under his guidance, student teams won the AI-DO (AI Driving Olympics) twice. The AI-DO is a benchmark for the state of AI in autonomous driving technologies, with respect to both standardized simulation and hardware environments for tasks related to multi-sensory perception and embodied AI.

Agenda:
00:00 - Before we start
09:15 - Containers ~ Namespaces and control groups
11:20 - Linux processes and threads (htop)
13:20 - Process creation in Linux
15:20 - Structure task_struct
16:31 - Namespaces API
18:45 - /procfs
19:58 - Namespaces and flags
20:52 - Mount namespace
25:28 - Unix Timesharing System (UTS) namespace
26:59 - Creating UTS namespace
27:30 - PID namespace: Process IDs isolation
28:41 - PIDs & TGIDs
30:20 - IPC namespace
31:21 - USER namespace
33:05 - Network namespace
35:53 - Control groups
36:57 - Resource hierarchies
39:02 - Subsystem → controller
40:16 - Cgroup filesystem
41:55 - cgcreate: create group
43:58 - Execute process in the group

Presentation: https://drive.google.com/file/d/1rP2j...

#Linux #LinuxContainers