cctc2016-才云科技邓德源-谷歌容器集群管理系统实践

《cctc2016-才云科技邓德源-谷歌容器集群管理系统实践》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、CCTC2016-才云科技邓德源-谷歌容器集群管理系统实践谷歌容器集群管理系统实践邓德源才云科技EngineeringinGoogle??Development??<20%timesideproject??workonanyprojectyouwant??dashboardforpostingjobs??youcandomorethanyouthink!??BeSREfor<2or3months(<20%moresalary!)??SRE(SiteReliabilityEngineering)??50%timefordevelopment??toautomateroutinetasks??sc

2、alenicely??SREconsistsoftwocategories:55%SDE,and45%Ops??Saynotodevelopmentteam??errorquota,e.g.99.95%slomonthlymeans4hrsimpact??bothSREandDevelopmentteammangetherisk??Abilitytochangecodebase??Postmortem??Nottoblame,buttofindproblemsandfixitContainer??Reason??primarygoal:savemoney-VMisheavy??high-den

3、sityandperformance??fasttostart??StartContainerJourney??<2004-???Everythingrunsincontainer??usecontainerfordecade??><2BcontaineraweekLimitedIsolationchrootcgroupslxclmctfy<2004<2006<2008<2013usernamespace<2014<2007namespaces?<2015OCIContainerImagefromRedhatLimitedIsolationchrootcgroupslxclmctfy<2

4、004<2006<2008<2013usernamespace<2014<2007namespaces?<2015OCI??cgroup??resourceisolation(cpu,memory,blockio,etc.)ContainerLimitedIsolationchrootcgroupslxclmctfy<2004<2006<2008<2013usernamespace<2014<2007namespaces?<2015OCI??cgroupv1->v<2??multiplehierarchy??subcontainerandasymmetricisolation??v<2:

5、unifiedhierarchyImagefromRedhatsub1sub<2sub3subcontainerCPUMemNetcontainer1container<2container3asymmetricisolationcg1cg10cg11cg100cg101…...ContainerLimitedIsolationchrootcgroupslxclmctfy<2004<2006<2008<2013usernamespace<2014<2007namespaces?<2015OCIImagefromToptal??Namespaces??isolateprocess’s6><#00

6、aa00'>viewoftheoperatingenvironment??Mount,UTS,IPC,PID,Network,User??Supportaddedfairrecently??PrimarilyLinuxcgroups??’namespace’isdoneatuser-spacepoliciesContainer??lxc?lmctfy???internalversionofImctfyexistslongbeforelxc??lxc:nostrongabstraction??namespaceabstraction+~rawcgroup??lxc:noprogrammableA

7、PI??mustbebuilttoworkwithothertools??lmctfy:moreabstractionandenhancement??e.g.subcontainerandasymmetricisolation??e.g.qualityofservice??OCI??Container:runtime+image??BasedonDockerLimitedIsolationchro