containerd, with Derek McGowan - a podcast by Adam Glick and Craig Box

containerd was born from community desire for a core, standalone runtime to act as a piece of plumbing that applications like Kubernetes could use. It sits between command line tools like Docker, which it was spun out from, and lower-level runtimes like runC or gVisor, which execute the container’s code. This week’s guest is Derek McGowan, a Software Engineer at Docker and a containerd maintainer-d.

Along with the news of the week, Adam and Craig discuss the many Vancouvers.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com


• mail: kubernetespodcast@google.com


• twitter: @kubernetespod

Chatter of the week

• Vancouver, Vancouver, and George Vancouver


• South Bend, North Bend, and Bend


• Cosmpolis


• “50 Year Sensation: the Dave McMacken Retrospective” (album art show in Astoria, Oregon)

News of the week

• Istio 1.3 is out


• Google’s Anthos now incudes Anthos Service Mesh, Cloud Run for Anthos and more


• Cloud Native Application Bundles hit 1.0
  
  
  
  • Episode 61 with Ralph Squillace and Jeremy Rickard
  
  
  
  


• Nominations for the annual CNCF Community Awards


• Bloomberg hits 90% utilization with Kubernetes


• Mistakes that “cost” thousands by Gajus Kuizinas


• Kubernetes Edge working group publishes whitepaper


• Isopod, by Cruise


• Pulumi 1.0


• 5 RBAC mistakes you must avoid (number 4 will shock you)


• OpenShift 4.2 disconnected install


• Red Hat Quay 3.1


• Microsoft AKS brings Scale Sets and Standard LB to GA
  
  
  
  • Upstream kernel bugs
  
  
  
  


• Amazom EKS adds cluster tagging and IAM roles for service accounts


• Deep dive into AWS Fargate by Abhisheck Ray from Amazon


• Kong introduces Kuma, “universal service mesh”


• Google introduces Cloud Dataproc for Kubernetes


• Apache Flink operator from Google Cloud


• Container runtime security bypasses on Falco by Mark “Antitree” Manning


• Rafay Systems lands $8m in Series A funding

Links from the interview

• containerd


• Original announcement


• The many meanings of ‘container runtime’


• kubelet and Container Runtime Interfaces


• runC, gVisor, Kata Containers, and the Windows Host Compute Service (HCS)


• ctr debug tool


• containerd’s graduation from the CNCF


• containerd shim API
  
  
  
  • gVisor shim
  
  
  • Firecracker containerd integration
  
  
  • Kata Containers shim
  
  
  • Windows Container shim
  
  
  
  


• rkt announced in 2014 with appC spec


• Open Container Initiative
  
  
  
  • libcontainer, which became runC
  
  
  
  


• Web Assembly (WASM)


• BuildKit


• 1.3.0 releases are coming


• Contribution opportunities:
  
  
  
  • Reporting issues
  
  
  • Plugin ecosystem
  
  
  
  


• Derek McGowan and containerd on Twitter

Further episodes of Kubernetes Podcast from Google

Further podcasts by Adam Glick and Craig Box

Website of Adam Glick and Craig Box