Overview and update on the OpenStack Cinder and Glance projects, including a discussion of upstream OpenStack development, Cinder third-party backend drivers, and how these impact OpenShift.
Quick update of the OpenStack Cinder project, but mostly a discussion of open source software development opportunities working with the OpenStack Block Storage service. Presented at the OpenInfra Q3 Meetup in China on 26 September 2020.
Putting The PaaS in OpenStack with Diane Mueller @RedHat OpenShift Origin
RedHat has created it's own OpenStack distribution that is now in preview and still a bit rough around the edges, but promises to include what is needed to deploy & evaluate a truly & complete Open Cloud environment. In addition, Red Hat wants there to be a widely used open-source community developed PaaS model for the cloud which includes being open to participation by a community of peers.
To really create a open cloud environment and to make it useful, you need to complete the stack with an PaaS. Just getting a cloud environment up and running is no longer enough. The challenge that OpenStack faces is how to get people, applications and services working on OpenStack out of the box.
One approach to the problem is to combining all the necessary pieces that go into building an OpenStack cloud (compute, storage, networking, management) with a platform as a service (PaaS) into your OpenStack distribution.
OpenShift Origin project is licensed under the Apache License 2.0, a permissive and widely-used open source license, which was selected so that the code would be available for use by the broadest range of
individuals and organizations. This is the same license chosen by the OpenStack project, for much the same reason. This license is already well known and understood by individuals and organizations already involved in cloud computing and in enterprise scale open source development.
In this session, I'll discuss RedHat's efforts with OpenStack, Fedora, & OpenShift Origin to create a more complete OpenStack distribution. Our community initiatives to ensure Origin easily and seamlessly integrates on any OpenStack distribution and how to you can add Origin into your own OpenStack distributions.
http://openstacksummitapril2013.sched.org/event/93a0a84f3623c2e1cdf9563b72f9e351#.UW2YmnAnsUU
Kata Container & gVisor provide approaches to securely isolate containers by keeping them out of the direct kernel space. Kata Container uses virtual machines with lightweight kernels to isolate containers, while gVisor uses a userspace kernel implemented in Go to provide isolation. Both aim to protect the host kernel by preventing containers from accessing kernel resources directly. Kata Container has a larger memory footprint than gVisor due to its use of virtual machines, but provides stronger isolation of containers.
Delivering a bleeding edge community led open stack distribution- rdoChandan Kumar
RDO is a community-led distribution of OpenStack that aims to rapidly deploy OpenStack by maintaining over 300 RPM packages. It utilizes several tools like DLRN, rdopkg, and ARA to continuously test packages against upstream changes to catch issues early. RDO has adopted a "software factory" model using tools like Gerrit, Zuul, Jenkins and Nodepool for code review, testing and continuous integration. These efforts have helped RDO release packages within hours or days of upstream, improving the user experience for deploying OpenStack.
OSDC 2013 | Tutorial and demonstration of failover from EC2 to OpenStack usin...NETWAYS
Sudden Cloud outages seem to happen every few months, with no major Cloud company successfully preventing them.
Each time, well known companies and websites who should know better are caught out. The cost is time, money, reputation, and trust.
This OSDC presentation will show how to stay up when Amazon's EC2 goes down. The setup and deployment of Linux applications to EC2 will be demonstrated using Aeolus, and then you will learn how to fail them over to a public OpenStack cloud when trouble strikes -- quickly and with minimal impact.
This presentation will be of _serious interest_ to everyone who needs their public cloud applications (running on Linux) to be resilient to cloud outages.
1. Current state of rootless dockerd
2. Rootless buildwith BuildKit
3. OCI Image Spec & Distribution
http://www.qnib.org/2019/06/20/isc2019-hpcw/
Red Hat demo of OpenStack and ODL at ODL summit 2016 RedHatTelco
Red Hat demonstrated OpenDaylight (ODL) as an SDN Controller for OpenStack. We showed the integration of the Boron release of OpenDaylight with the Mitaka release of OpenStack. The primary objective of the demo was to show how NetVirt can easily create and manage virtual networks that are flexible, secure and scalable.
[Paris Container Day 2021] nerdctl: yet another Docker & Docker Compose imple...Akihiro Suda
nerdctl is a Docker-compatible CLI for containerd that provides the same UI/UX as Docker and Docker Compose. It supports features like lazy pulling via Stargz and encrypted images via OCIcrypt that are not yet available in Docker. While containerd includes ctr and crictl for debugging, nerdctl aims to be a full-featured CLI for container and image management with Docker-like usability. It can run on Linux, macOS via Lima virtual machines, and is working on native Windows support.
KubeVirt is an add-on for Kubernetes that allows for virtual machines to be scheduled alongside containers. It provides a dedicated API for managing virtual machines as pods. The presentation discusses how KubeVirt could provide a migration path for workloads from VMs to containers and converge infrastructure by allowing OpenStack and other platforms to use KubeVirt and Kubernetes for scheduling. It also covers demoing KubeVirt and potential approaches for integrating it with OpenStack, such as through a Nova virt driver or compatible API.
A Container Stack for Openstack - OpenStack Silicon ValleyStephen Gordon
OpenStack is an Infrastructure as a Service offering that provides a powerful abstraction layer for interacting with your datacenter infrastructure, supported by a wide array of pluggable drivers for existing physical and virtual infrastructure investments. In this session, you’ll learn how OpenStack is evolving to integrate with the Linux, Docker, Kubernetes stack to provide the ideal infrastructure platform for modern containerized applications. You’ll learn how you can modernize application delivery using the Linux, Docker, Kubernetes stack provided by Red Hat while seamlessly using the authentication, network, and storage infrastructure services provided by an underlying OpenStack cloud.
Containers for the Enterprise: Delivering OpenShift on OpenStack for Performa...Stephen Gordon
Imagine being able to stand up thousands of tenants with thousands of apps, running thousands of Docker-formatted container images and routes, all on a self-healing cluster. Now, take that one step further with all of those images being updatable through a single upload to the registry, and with zero downtime. In this session, Steve Gordon of the Red Hat OpenStack Platform team will show you just that. Steve will walk through a recent benchmarking deployment using the Cloud Native Computing Foundation’s (CNCF) new 1,000 node cluster with OpenStack and Red Hat’s OpenShift Container Platform, the enterprise-ready Kubernetes for developers.
OpenStack is an open source cloud computing platform that can be used to build an IaaS cloud. It consists of microservices that can be assembled together. Cloud applications can be defined using orchestration templates. OpenStack provides modular REST APIs for service access and communication. The document discusses architectural considerations and the ecosystem for using OpenStack for telco cloud environments.
Rootless Containers & Unresolved issuesAkihiro Suda
Rootless containers allow users to run containers without root privileges by leveraging user and namespace isolation techniques. While rootless containers mitigate some security risks, there are still unresolved issues around sub-user management, networking, and adoption by runtimes and image builders. Rootless containers also cannot prevent all attacks if a container is broken out of. Container runtimes are working to improve support for rootless containers to further enhance security.
Kubernetes networking allows pods to communicate with each other and services to load balance traffic to pods. The document discusses Kubernetes networking concepts including the network model, pod networking using CNI plugins like Flannel, and different service types such as ClusterIP, NodePort, and Ingress. It provides examples of exposing a Kubernetes service using hostNetwork, hostPort, and NodePort and how network policies are implemented using iptables.
Usernetes: Kubernetes as a non-root userAkihiro Suda
This document discusses Usernetes, which allows running Kubernetes as a non-root user. It provides motivation for running Kubernetes and container runtimes as non-root by discussing past security vulnerabilities. It then describes challenges in networking and other areas for non-root containers, and how Usernetes addresses these challenges using techniques like Slirp4netns for networking and FUSE overlayfs. The document concludes with the current status of Usernetes, which supports Docker and CRI-O and provides pre-built binaries.
This talk gives a brief introduction to OpenStack and Chef, then outlines the current state of deploying OpenStack with Chef. There was a live demo deploying to a Dell rack during the talk.
SCALE 9x, February 25-27 in Los Angeles.
I invite you to come and listen to my presentation about how Openstack and Gluster are integrating together in both Cinder and Swift.
I will give a brief description about Openstack storage components (Cinder, Swift and Glance) , followed by an intro to Gluster, and then present the integration points and some preferred topology and configuration between gluster and openstack.
The document is an agenda for an Upstate DevOps meetup event on March 28, 2019. It includes an introduction, thanks to event sponsors, a request for introductions from attendees, and a presentation on containers. The presentation covers what containers are, how they differ from virtual machines, common container runtimes and engines, Kubernetes basics, and new container tools like Buildah and Skopeo. It concludes with additional resource links.
The document summarizes the agenda for the Q2 MeetUp on May 31st 2017, including check-in, introductions, operational war stories, a discussion on OpenContrail, and information on upcoming events. Stacy Véronneau will provide an intro and recap of the OpenStack Summit. Noura Daadaa will discuss the OpenStack Ottawa User Group. Mohammed Naser will share operational war stories from deploying and running OpenStack.
[DockerCon 2019] Hardening Docker daemon with Rootless modeAkihiro Suda
https://dockercon19.smarteventscloud.com/connect/sessionDetail.ww?SESSION_ID=281879
Docker CE 19.03 is going to support "Rootless mode", which allows running the entire Docker daemon and its dependencies as a non-root user on the host, so as to protect the host from malicious containers in a simple but very strong way. Rootless mode is also attractive for users who cannot get `sudo` permission for installing Docker on shared computing machines. e.g. HPC users. In this talk, Akihiro Suda, the author of the Rootless mode (PR: moby#38050), will explain how users can get started with Rootless mode. He will also explain the implementation details of Rootless mode and planned enhancements such as LDAP integration.
How to manage Kubernetes at scale with just git Weaveworks
n this talk, Stefan will speak about the challenges of managing Kubernetes clusters and how driving operations through git can enable dev teams to collaborate on infrastructure the same way they do for app development.
Stefan will explore the GitOps methodology and talk about the benefits of using Flux for Kubernetes cluster management and Helm Operator for application delivery.
He will demo a GitOps pipeline for promoting applications across environments using GitHub, Kubernetes custom resources and Flux automation features.
[DockerCon 2020] Hardening Docker daemon with Rootless ModeAkihiro Suda
Rootless Docker runs the Docker daemon as a non-root user to protect the host system from potential vulnerabilities and misconfigurations. It uses user namespaces to emulate root privileges within containers without granting actual root access. Recent updates have added support for cgroups, improved snapshotting techniques, and user-mode networking to improve the security and functionality of running Docker without root privileges. Rootless Docker is now considered stable and provides most of the same features and performance as the traditional Docker installation.
The summary of the Q2 MeetUp document is:
1) The meetup agenda included check-in and networking, an introduction, a presentation on OpenContrail, a summit recap, break, and operational war stories.
2) Stuart Mackie from Juniper Networks gave a presentation on OpenContrail.
3) Stacy Véronneau from CloudOps gave a recap of the recent OpenStack summit, including attendee numbers, award winners, and a summary of keynotes.
Comparing Next-Generation Container Image Building ToolsAkihiro Suda
http://sched.co/EaYe
Until recently, running `docker build` against Dockerfile had been the only way to build container images.
However, lots of opensource software are being proposed as successors/alternatives to `docker build`:
- BuildKit (Moby Project / Docker)
- img (Jessica Frazelle / Microsoft)
- Buildah (Project Atomic / Red Hat)
- umoci & Orca (SUSE)
- Bazel (Google)
- OpenShift S2I (Red Hat)
Akihiro Suda compares these new tools' advantages and disadvantages.
His evaluation basis would include but not be limited to:
- Performance (Cache efficiency, Concurrency, Distributed Execution)
- Secret management, e.g. SSH and AWS keys
- Support for non-Dockerfile
- Non-root execution
- UI & UX
- Governance of the community
He also proposes a unified interface for using these tools with Kubernetes in a vendor-neutral way.
Build Your Own PaaS, Just like Red Hat's OpenShift from LinuxCon 2013 New Orl...OpenShift Origin
Learn how to build your platform as a service just like RedHat's OpenShift PaaS - covers all the architecture & internals of OpenShift Origin OpenSource project, how to deploy it & configure it for bare metal, AWS, OpenStack, CloudStack or any IaaS, and the community that's collaborating on the project to deliver the next-generation of secure, scale-able PaaS visit: openshift.com for more information
presented at LinuxCon by Diane Mueller in the CloudOpen track
Introduction and Deep Dive Into ContainerdKohei Tokunaga
Talked at KubeCon + CloudNativeCon Europe 2021 Virtual about containerd (May 5, 2021).
https://kccnceu2021.sched.com/event/iE6v
Rootless containers allow containers to be created and managed without root privileges. This is achieved through kernel technologies like user namespaces that map UIDs/GIDs between the host and guest. Networking is enabled through a usermode network implementation like Slirp. Popular container tools are working on supporting rootless containers, including Docker/Moby, Podman, Kubernetes, CRI-O, BuildKit, and containerd. The presenters demonstrate a proof of concept called "Usernetes" that bundles these tools to run Kubernetes without root on the host. Rootless containers improve security by avoiding privileged code paths and limiting escalation of privileges.
Ecosystem Projects for Data Management Challenges: CinderBrian Rosmaita
Key features and roadmap of Cinder for data management challenges. Cinder integration with SODA along with its use cases.
Presented 11 December 2020 at SODACON2020.
SODA Foundation is an open source project under Linux Foundation that aims to foster an ecosystem of open source data management and storage software for data autonomy. SODA Foundation offers a neutral forum for cross-projects collaboration and integration and provides end users quality end-to-end solutions.
This document discusses OpenStack, an open source cloud computing platform. It provides OpenStack's mission statement to create a simple and scalable cloud platform. OpenStack controls compute, storage, and networking through projects like Nova (compute), Cinder (block storage), Quantum (networking), Glance (image registry), Keystone (identity), Swift (object storage), and Horizon (dashboard). The document outlines OpenStack's architecture, community involvement, code repositories, distributions, and the upcoming Grizzly release.
KubeVirt is an add-on for Kubernetes that allows for virtual machines to be scheduled alongside containers. It provides a dedicated API for managing virtual machines as pods. The presentation discusses how KubeVirt could provide a migration path for workloads from VMs to containers and converge infrastructure by allowing OpenStack and other platforms to use KubeVirt and Kubernetes for scheduling. It also covers demoing KubeVirt and potential approaches for integrating it with OpenStack, such as through a Nova virt driver or compatible API.
A Container Stack for Openstack - OpenStack Silicon ValleyStephen Gordon
OpenStack is an Infrastructure as a Service offering that provides a powerful abstraction layer for interacting with your datacenter infrastructure, supported by a wide array of pluggable drivers for existing physical and virtual infrastructure investments. In this session, you’ll learn how OpenStack is evolving to integrate with the Linux, Docker, Kubernetes stack to provide the ideal infrastructure platform for modern containerized applications. You’ll learn how you can modernize application delivery using the Linux, Docker, Kubernetes stack provided by Red Hat while seamlessly using the authentication, network, and storage infrastructure services provided by an underlying OpenStack cloud.
Containers for the Enterprise: Delivering OpenShift on OpenStack for Performa...Stephen Gordon
Imagine being able to stand up thousands of tenants with thousands of apps, running thousands of Docker-formatted container images and routes, all on a self-healing cluster. Now, take that one step further with all of those images being updatable through a single upload to the registry, and with zero downtime. In this session, Steve Gordon of the Red Hat OpenStack Platform team will show you just that. Steve will walk through a recent benchmarking deployment using the Cloud Native Computing Foundation’s (CNCF) new 1,000 node cluster with OpenStack and Red Hat’s OpenShift Container Platform, the enterprise-ready Kubernetes for developers.
OpenStack is an open source cloud computing platform that can be used to build an IaaS cloud. It consists of microservices that can be assembled together. Cloud applications can be defined using orchestration templates. OpenStack provides modular REST APIs for service access and communication. The document discusses architectural considerations and the ecosystem for using OpenStack for telco cloud environments.
Rootless Containers & Unresolved issuesAkihiro Suda
Rootless containers allow users to run containers without root privileges by leveraging user and namespace isolation techniques. While rootless containers mitigate some security risks, there are still unresolved issues around sub-user management, networking, and adoption by runtimes and image builders. Rootless containers also cannot prevent all attacks if a container is broken out of. Container runtimes are working to improve support for rootless containers to further enhance security.
Kubernetes networking allows pods to communicate with each other and services to load balance traffic to pods. The document discusses Kubernetes networking concepts including the network model, pod networking using CNI plugins like Flannel, and different service types such as ClusterIP, NodePort, and Ingress. It provides examples of exposing a Kubernetes service using hostNetwork, hostPort, and NodePort and how network policies are implemented using iptables.
Usernetes: Kubernetes as a non-root userAkihiro Suda
This document discusses Usernetes, which allows running Kubernetes as a non-root user. It provides motivation for running Kubernetes and container runtimes as non-root by discussing past security vulnerabilities. It then describes challenges in networking and other areas for non-root containers, and how Usernetes addresses these challenges using techniques like Slirp4netns for networking and FUSE overlayfs. The document concludes with the current status of Usernetes, which supports Docker and CRI-O and provides pre-built binaries.
This talk gives a brief introduction to OpenStack and Chef, then outlines the current state of deploying OpenStack with Chef. There was a live demo deploying to a Dell rack during the talk.
SCALE 9x, February 25-27 in Los Angeles.
I invite you to come and listen to my presentation about how Openstack and Gluster are integrating together in both Cinder and Swift.
I will give a brief description about Openstack storage components (Cinder, Swift and Glance) , followed by an intro to Gluster, and then present the integration points and some preferred topology and configuration between gluster and openstack.
The document is an agenda for an Upstate DevOps meetup event on March 28, 2019. It includes an introduction, thanks to event sponsors, a request for introductions from attendees, and a presentation on containers. The presentation covers what containers are, how they differ from virtual machines, common container runtimes and engines, Kubernetes basics, and new container tools like Buildah and Skopeo. It concludes with additional resource links.
The document summarizes the agenda for the Q2 MeetUp on May 31st 2017, including check-in, introductions, operational war stories, a discussion on OpenContrail, and information on upcoming events. Stacy Véronneau will provide an intro and recap of the OpenStack Summit. Noura Daadaa will discuss the OpenStack Ottawa User Group. Mohammed Naser will share operational war stories from deploying and running OpenStack.
[DockerCon 2019] Hardening Docker daemon with Rootless modeAkihiro Suda
https://dockercon19.smarteventscloud.com/connect/sessionDetail.ww?SESSION_ID=281879
Docker CE 19.03 is going to support "Rootless mode", which allows running the entire Docker daemon and its dependencies as a non-root user on the host, so as to protect the host from malicious containers in a simple but very strong way. Rootless mode is also attractive for users who cannot get `sudo` permission for installing Docker on shared computing machines. e.g. HPC users. In this talk, Akihiro Suda, the author of the Rootless mode (PR: moby#38050), will explain how users can get started with Rootless mode. He will also explain the implementation details of Rootless mode and planned enhancements such as LDAP integration.
How to manage Kubernetes at scale with just git Weaveworks
n this talk, Stefan will speak about the challenges of managing Kubernetes clusters and how driving operations through git can enable dev teams to collaborate on infrastructure the same way they do for app development.
Stefan will explore the GitOps methodology and talk about the benefits of using Flux for Kubernetes cluster management and Helm Operator for application delivery.
He will demo a GitOps pipeline for promoting applications across environments using GitHub, Kubernetes custom resources and Flux automation features.
[DockerCon 2020] Hardening Docker daemon with Rootless ModeAkihiro Suda
Rootless Docker runs the Docker daemon as a non-root user to protect the host system from potential vulnerabilities and misconfigurations. It uses user namespaces to emulate root privileges within containers without granting actual root access. Recent updates have added support for cgroups, improved snapshotting techniques, and user-mode networking to improve the security and functionality of running Docker without root privileges. Rootless Docker is now considered stable and provides most of the same features and performance as the traditional Docker installation.
The summary of the Q2 MeetUp document is:
1) The meetup agenda included check-in and networking, an introduction, a presentation on OpenContrail, a summit recap, break, and operational war stories.
2) Stuart Mackie from Juniper Networks gave a presentation on OpenContrail.
3) Stacy Véronneau from CloudOps gave a recap of the recent OpenStack summit, including attendee numbers, award winners, and a summary of keynotes.
Comparing Next-Generation Container Image Building ToolsAkihiro Suda
http://sched.co/EaYe
Until recently, running `docker build` against Dockerfile had been the only way to build container images.
However, lots of opensource software are being proposed as successors/alternatives to `docker build`:
- BuildKit (Moby Project / Docker)
- img (Jessica Frazelle / Microsoft)
- Buildah (Project Atomic / Red Hat)
- umoci & Orca (SUSE)
- Bazel (Google)
- OpenShift S2I (Red Hat)
Akihiro Suda compares these new tools' advantages and disadvantages.
His evaluation basis would include but not be limited to:
- Performance (Cache efficiency, Concurrency, Distributed Execution)
- Secret management, e.g. SSH and AWS keys
- Support for non-Dockerfile
- Non-root execution
- UI & UX
- Governance of the community
He also proposes a unified interface for using these tools with Kubernetes in a vendor-neutral way.
Build Your Own PaaS, Just like Red Hat's OpenShift from LinuxCon 2013 New Orl...OpenShift Origin
Learn how to build your platform as a service just like RedHat's OpenShift PaaS - covers all the architecture & internals of OpenShift Origin OpenSource project, how to deploy it & configure it for bare metal, AWS, OpenStack, CloudStack or any IaaS, and the community that's collaborating on the project to deliver the next-generation of secure, scale-able PaaS visit: openshift.com for more information
presented at LinuxCon by Diane Mueller in the CloudOpen track
Introduction and Deep Dive Into ContainerdKohei Tokunaga
Talked at KubeCon + CloudNativeCon Europe 2021 Virtual about containerd (May 5, 2021).
https://kccnceu2021.sched.com/event/iE6v
Rootless containers allow containers to be created and managed without root privileges. This is achieved through kernel technologies like user namespaces that map UIDs/GIDs between the host and guest. Networking is enabled through a usermode network implementation like Slirp. Popular container tools are working on supporting rootless containers, including Docker/Moby, Podman, Kubernetes, CRI-O, BuildKit, and containerd. The presenters demonstrate a proof of concept called "Usernetes" that bundles these tools to run Kubernetes without root on the host. Rootless containers improve security by avoiding privileged code paths and limiting escalation of privileges.
Ecosystem Projects for Data Management Challenges: CinderBrian Rosmaita
Key features and roadmap of Cinder for data management challenges. Cinder integration with SODA along with its use cases.
Presented 11 December 2020 at SODACON2020.
SODA Foundation is an open source project under Linux Foundation that aims to foster an ecosystem of open source data management and storage software for data autonomy. SODA Foundation offers a neutral forum for cross-projects collaboration and integration and provides end users quality end-to-end solutions.
This document discusses OpenStack, an open source cloud computing platform. It provides OpenStack's mission statement to create a simple and scalable cloud platform. OpenStack controls compute, storage, and networking through projects like Nova (compute), Cinder (block storage), Quantum (networking), Glance (image registry), Keystone (identity), Swift (object storage), and Horizon (dashboard). The document outlines OpenStack's architecture, community involvement, code repositories, distributions, and the upcoming Grizzly release.
Red Hat Cloud Infrastructure Conference 2013 - Presentation about OpenStack ...Elos Technologies s.r.o.
Konference Red Hat Cloud Infrastructure 2013 ze dne 20.9. 2013 a prezentace od product managera pro cloud ze společnosti Red Hat. Všechna práva vyhrazena.
Red Hat OpenShift 4 allows for automated and customized deployments. The Full Stack Automation method fully automates installation and updates of both the OpenShift platform and Red Hat Enterprise Linux CoreOS host operating system. The Pre-existing Infrastructure method allows OpenShift to be deployed on user-managed infrastructure, where the customer provisions resources like load balancers and DNS. Both methods use the openshift-install tool to generate ignition configs and monitor the cluster deployment.
The document discusses Android containerization using Linux container (LXC) technology. It describes how LXC can be used to run multiple Android instances within containers on a single device. Key points include using Linux namespaces to isolate containers, virtualizing Android devices and binder IPC using namespaces, and challenges around scheduling and resource management with multiple containerized Androids. The document also summarizes some open source projects from ITRI related to containerization and virtualization technologies.
In this deck from the Docker Workshop at ISC 2015, Andreas Schmidt from Cassini Consulting describes Docker in a Nutshell
"As the newest flavor of Linux Containers, Docker gained a lot of momentum in the last 12 months. With a very convenient and open API-driven architecture Docker is able to help decrease the complexity of operations and increase the productivity of computation. During the last two years Andreas, Christian, and Wolfgang gained a lot of experience with Docker and were thrilled by its possible impact early on. Andreas started working with Docker in mid-2013 and is interested in developing tools for solving Enterprise IT requirements on networking and security. In 2014 he held talks and workshops about these topics. Christian started using Docker in 2013 to virtualize a complete HPC cluster stack and since then held multiple talks about how Docker might impact HPC. Wolfgang and his partner Burak Yenier introduced Docker as a corner-stone of the UberCloud Marketplace to drastically improve and simplify access to HPC cloud resources. UberCloud just announced their new containers for computational fluid dynamics software like Fluent, STAR-CCM+ and OpenFOAM."
Watch the video presentation: http://wp.me/p3RLHQ-enP
Sign up for our insideHPC Newsletter: http://insidehpc.com/newsletter
Container Runtimes: Comparing and Contrasting Today's EnginesPhil Estes
A webinar presented for the {code} Community on August 30, 2017. In this talk, we looked at the sphere of modern container runtimes that start with Docker's emergence in 2013/2014 to today's additions of rkt, OCI's runc, containerd, cri-o, and Cloud Foundry's garden-runc project, many of them consolidating around the OCI standard for container runtime and image specifications.
This document introduces Steeltoe, an open source toolkit for building cloud-native .NET microservices. Steeltoe helps .NET developers build applications that follow cloud-native principles and can leverage Spring Cloud tools for resilient microservices. It includes components for service discovery, configuration, security, and connecting to common services like MySQL and RabbitMQ. The presentation provides an overview of Steeltoe's capabilities, how it helps with challenges of microservices and distributed systems, and information on getting started and the project's roadmap.
Deploying OpenStack with ansible. Made possible by the OS-Ansible-Deployment project https://github.com/stackforge/os-ansible-deployment
Cisco: Cassandra adoption on Cisco UCS & OpenStackDataStax Academy
n this talk we will address how we developed our Cassandra environments utilizing Cisco UCS Open Stack Platform with the DataStax Enterprise Edition software. In addition we are utilizing OpenSource CEPH storage in our Infrastructure to optimize the Performance and reduce the costs.
Delivering a bleeding edge community-led openstack distribution: RDO Chandan Kumar
This talk was presented at FOSS ASIA 2018 summit at Singapore on 25th Mar, 2018. https://2018.fossasia.org/event/schedule.html#
The document discusses Red Hat OpenShift 4 installation methods. It describes the Full Stack Automation method where the installer provisions all infrastructure components including hosts running Red Hat Enterprise Linux CoreOS (RHCOS). It also covers deploying to pre-existing infrastructure where the user provisions infrastructure like VMs, load balancers, and DNS, while the installer configures the OpenShift cluster and RHCOS hosts.
This document provides an agenda and overview of a Docker Meetup on April 20, 2017 about using Openshift for production deployments. The agenda includes introductions to containers, Docker, Kubernetes, and Openshift, as well as demonstrations of Openshift installation, Docker orchestration using Openshift, auto-scaling with Openshift, source-to-image deployments, and CI/CD pipelines. It also includes brief introductions to container and Docker technologies, and how Kubernetes addresses problems with scheduling, lifecycles, discovery, monitoring, authentication, and scaling of containers.
gVisor, Kata Containers, Firecracker, Docker: Who is Who in the Container Space?ArangoDB Database
View the video of this webinar here: https://www.arangodb.com/arangodb-events/gvisor-kata-containers-firecracker-docker/
Containers* have revolutionized the IT landscape and for a long time. Docker seemed to be the default whenever people were talking about containerization technologies**. But traditional container technologies might not be suitable if strong isolation guarantees are required. So recently new technologies such as gVisor, Kata Container, or firecracker have been introduced to close the gap between the strong isolation of virtual machines and the small resource footprint of containers.
In this talk, we will provide an overview of the different containerization technologies, discuss their tradeoffs, and provide guidance for different use cases.
* We will define the term container in more detailed during the talk
** and yes we will also cover some of the pre-docker container space!
Oscon 2017: Build your own container-based system with the Moby projectPatrick Chanezon
Build your own container-based system
with the Moby project
Docker Community Edition—an open source product that lets you build, ship, and run containers—is an assembly of modular components built from an upstream open source project called Moby. Moby provides a “Lego set” of dozens of components, the framework for assembling them into specialized container-based systems, and a place for all container enthusiasts to experiment and exchange ideas.
Patrick Chanezon and Mindy Preston explain how you can leverage the Moby project to assemble your own specialized container-based system, whether for IoT, cloud, or bare-metal scenarios. Patrick and Mindy explore Moby’s framework, components, and tooling, focusing on two components: LinuxKit, a toolkit to build container-based Linux subsystems that are secure, lean, and portable, and InfraKit, a toolkit for creating and managing declarative, self-healing infrastructure. Along the way, they demo how to use Moby, LinuxKit, InfraKit, and other components to quickly assemble full-blown container-based systems for several use cases and deploy them on various infrastructures.
VMware Integrated OpenStack (VIO) provides a tightly-integrated product that combines OpenStack APIs with VMware technologies for a less complex build and operation compared to a loosely-integrated framework. VIO includes common OpenStack projects like Nova, Neutron, Cinder, and Glance that are optimized to run on VMware vSphere and integrate with VMware management and automation tools for a unified experience. VIO addresses the challenges of operating OpenStack at scale through this tight integration with VMware technologies and single support contact.
Christian Kniep has over 10 years of experience in HPC and automotive industries in Germany. He co-founded a container and cloud workshop at an HPC conference when told HPC could not learn from cloud companies. Since then, he has led DevOps and containerization efforts. He joined Docker Inc in 2017 to help push adoption forward. Walid Shaari is passionate about open source, DevOps, and security. He is a Red Hat Certified Architect and Certified Kubernetes Administrator. He organizes Docker and Ansible meetups as a community leader. The workshop aims to get participants up and running with the containers ecosystem through an informal, interactive format.
This document provides an introduction and overview of OpenStack. It discusses what OpenStack is, how it works, its architecture and components. It also describes how innfinision supports OpenStack and the Iranian OpenStack community. Key points covered include that OpenStack is an open source cloud computing platform, it was founded by Rackspace and NASA, has over 1200 developers, and consists of components like Nova, Swift, Cinder, Neutron and Horizon.
OpenStack Cinder - Victoria Release Update - 2020Brian Rosmaita
Cinder Block Storage Service project overview and update. Highlights from the Victoria release, state of the project, and planning for the Wallaby development cycle.
Cinder Block Storage Service project overview and update. Highlights from the Train release, state of the project, and planning for the Ussuri development cycle.
Glance is the OpenStack image service that provides services to store, browse, share, distribute, and manage disk images and metadata. It is deployed by 97% of OpenStack clouds. Contributor numbers grew for the Ocata release but declined after budget cuts impacted the core reviewer team. The presentation outlines features added in recent releases and themes for upcoming releases, and asks for help contributing in various ways.
The Evolution of Glance API: On the Way From v1 to v3Brian Rosmaita
OpenStack Image Service (aka Glance) has been around from the earliest days of OpenStack and has been evolving ever since.
It's been three years since the last major update of its API - the v2 - went live with the Folsom release, and it is time now to move forward. With the recent introduction of new large features, such as Meta Definitions and Artifacts, the time has come to introduce a new version of Glance public API - V3.
In this session, Glance driver Brian Rosmaita and Artifacts driver Alexander Tivelkov will talk about the history of Glance API, the way it made since the initial release and the challenges it now has. The attendees will learn about the new experimental version of Glance API, the plans to deprecate the v1 and the new amazing features which are available for Glance users.
Making Glance tasks work for you - OpenStack Summit May 2015 VancouverBrian Rosmaita
It's not widely known that the OpenStack Images API v2 contains an implementation of a "tasks" API that can be customized by operators to enable asynchronous processing of long-running operations. For example, a deployer might want to enable end users to upload their own custom images ... but only after such images have been approved by some thorough, computation-intensive validation process. The Glance tasks API provides a common interface across OpenStack installations, but allows the implementation of tasks to be customizable to a particular cloud environment. Join Brian Rosmaita, Compute Control Plane Product Manager at Rackspace to see how Glance tasks are being used at Rackspace and to learn how you can use Glance tasks in your OpenStack cloud.
AI EngineHost Review: Revolutionary USA Datacenter-Based Hosting with NVIDIA ...SOFTTECHHUB
I started my online journey with several hosting services before stumbling upon Ai EngineHost. At first, the idea of paying one fee and getting lifetime access seemed too good to pass up. The platform is built on reliable US-based servers, ensuring your projects run at high speeds and remain safe. Let me take you step by step through its benefits and features as I explain why this hosting solution is a perfect fit for digital entrepreneurs.
Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell
With expertise in data architecture, performance tracking, and revenue forecasting, Andrew Marnell plays a vital role in aligning business strategies with data insights. Andrew Marnell’s ability to lead cross-functional teams ensures businesses achieve sustainable growth and operational excellence.
This is the keynote of the Into the Box conference, highlighting the release of the BoxLang JVM language, its key enhancements, and its vision for the future.
#StandardsGoals for 2025: Standards & certification roundup - Tech Forum 2025BookNet Canada
Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next.
Link to recording, transcript, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/
Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.
The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john
Analyze the growth of meme coins from mere online jokes to potential assets in the digital economy. Explore the community, culture, and utility as they elevate themselves to a new era in cryptocurrency.
AI and Data Privacy in 2025: Global TrendsInData Labs
In this infographic, we explore how businesses can implement effective governance frameworks to address AI data privacy. Understanding it is crucial for developing effective strategies that ensure compliance, safeguard customer trust, and leverage AI responsibly. Equip yourself with insights that can drive informed decision-making and position your organization for success in the future of data privacy.
This infographic contains:
-AI and data privacy: Key findings
-Statistics on AI data privacy in the today’s world
-Tips on how to overcome data privacy challenges
-Benefits of AI data security investments.
Keep up-to-date on how AI is reshaping privacy standards and what this entails for both individuals and organizations.
Noah Loul Shares 5 Steps to Implement AI Agents for Maximum Business Efficien...Noah Loul
Artificial intelligence is changing how businesses operate. Companies are using AI agents to automate tasks, reduce time spent on repetitive work, and focus more on high-value activities. Noah Loul, an AI strategist and entrepreneur, has helped dozens of companies streamline their operations using smart automation. He believes AI agents aren't just tools—they're workers that take on repeatable tasks so your human team can focus on what matters. If you want to reduce time waste and increase output, AI agents are the next move.
Artificial Intelligence is providing benefits in many areas of work within the heritage sector, from image analysis, to ideas generation, and new research tools. However, it is more critical than ever for people, with analogue intelligence, to ensure the integrity and ethical use of AI. Including real people can improve the use of AI by identifying potential biases, cross-checking results, refining workflows, and providing contextual relevance to AI-driven results.
News about the impact of AI often paints a rosy picture. In practice, there are many potential pitfalls. This presentation discusses these issues and looks at the role of analogue intelligence and analogue interfaces in providing the best results to our audiences. How do we deal with factually incorrect results? How do we get content generated that better reflects the diversity of our communities? What roles are there for physical, in-person experiences in the digital world?
HCL Nomad Web – Best Practices and Managing Multiuser Environmentspanagenda
Webinar Recording: https://www.panagenda.com/webinars/hcl-nomad-web-best-practices-and-managing-multiuser-environments/
HCL Nomad Web is heralded as the next generation of the HCL Notes client, offering numerous advantages such as eliminating the need for packaging, distribution, and installation. Nomad Web client upgrades will be installed “automatically” in the background. This significantly reduces the administrative footprint compared to traditional HCL Notes clients. However, troubleshooting issues in Nomad Web present unique challenges compared to the Notes client.
Join Christoph and Marc as they demonstrate how to simplify the troubleshooting process in HCL Nomad Web, ensuring a smoother and more efficient user experience.
In this webinar, we will explore effective strategies for diagnosing and resolving common problems in HCL Nomad Web, including
- Accessing the console
- Locating and interpreting log files
- Accessing the data folder within the browser’s cache (using OPFS)
- Understand the difference between single- and multi-user scenarios
- Utilizing Client Clocking
Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex
Toradex brings robust Linux support to SMARC (Smart Mobility Architecture), ensuring high performance and long-term reliability for embedded applications. Here’s how:
• Optimized Torizon OS & Yocto Support – Toradex provides Torizon OS, a Debian-based easy-to-use platform, and Yocto BSPs for customized Linux images on SMARC modules.
• Seamless Integration with i.MX 8M Plus and i.MX 95 – Toradex SMARC solutions leverage NXP’s i.MX 8 M Plus and i.MX 95 SoCs, delivering power efficiency and AI-ready performance.
• Secure and Reliable – With Secure Boot, over-the-air (OTA) updates, and LTS kernel support, Toradex ensures industrial-grade security and longevity.
• Containerized Workflows for AI & IoT – Support for Docker, ROS, and real-time Linux enables scalable AI, ML, and IoT applications.
• Strong Ecosystem & Developer Support – Toradex offers comprehensive documentation, developer tools, and dedicated support, accelerating time-to-market.
With Toradex’s Linux support for SMARC, developers get a scalable, secure, and high-performance solution for industrial, medical, and AI-driven applications.
Do you have a specific project or application in mind where you're considering SMARC? We can help with Free Compatibility Check and help you with quick time-to-market
For more information: https://www.toradex.com/computer-on-modules/smarc-arm-family
AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix
Talk at the final event of Data Fusion Dynamics: A Collaborative UK-Saudi Initiative in Cybersecurity and Artificial Intelligence funded by the British Council UK-Saudi Challenge Fund 2024, Cardiff Metropolitan University, 29th April 2025
https://alandix.com/academic/talks/CMet2025-AI-Changes-Everything/
Is AI just another technology, or does it fundamentally change the way we live and think?
Every technology has a direct impact with micro-ethical consequences, some good, some bad. However more profound are the ways in which some technologies reshape the very fabric of society with macro-ethical impacts. The invention of the stirrup revolutionised mounted combat, but as a side effect gave rise to the feudal system, which still shapes politics today. The internal combustion engine offers personal freedom and creates pollution, but has also transformed the nature of urban planning and international trade. When we look at AI the micro-ethical issues, such as bias, are most obvious, but the macro-ethical challenges may be greater.
At a micro-ethical level AI has the potential to deepen social, ethnic and gender bias, issues I have warned about since the early 1990s! It is also being used increasingly on the battlefield. However, it also offers amazing opportunities in health and educations, as the recent Nobel prizes for the developers of AlphaFold illustrate. More radically, the need to encode ethics acts as a mirror to surface essential ethical problems and conflicts.
At the macro-ethical level, by the early 2000s digital technology had already begun to undermine sovereignty (e.g. gambling), market economics (through network effects and emergent monopolies), and the very meaning of money. Modern AI is the child of big data, big computation and ultimately big business, intensifying the inherent tendency of digital technology to concentrate power. AI is already unravelling the fundamentals of the social, political and economic world around us, but this is a world that needs radical reimagining to overcome the global environmental and human challenges that confront us. Our challenge is whether to let the threads fall as they may, or to use them to weave a better future.
Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB
Want to learn practical tips for designing systems that can scale efficiently without compromising speed?
Join us for a workshop where we’ll address these challenges head-on and explore how to architect low-latency systems using Rust. During this free interactive workshop oriented for developers, engineers, and architects, we’ll cover how Rust’s unique language features and the Tokio async runtime enable high-performance application development.
As you explore key principles of designing low-latency systems with Rust, you will learn how to:
- Create and compile a real-world app with Rust
- Connect the application to ScyllaDB (NoSQL data store)
- Negotiate tradeoffs related to data modeling and querying
- Manage and monitor the database for consistently low latencies
Complete Guide to Advanced Logistics Management Software in Riyadh.pdfSoftware Company
Explore the benefits and features of advanced logistics management software for businesses in Riyadh. This guide delves into the latest technologies, from real-time tracking and route optimization to warehouse management and inventory control, helping businesses streamline their logistics operations and reduce costs. Learn how implementing the right software solution can enhance efficiency, improve customer satisfaction, and provide a competitive edge in the growing logistics sector of Riyadh.
HCL Nomad Web – Best Practices und Verwaltung von Multiuser-Umgebungenpanagenda
Webinar Recording: https://www.panagenda.com/webinars/hcl-nomad-web-best-practices-und-verwaltung-von-multiuser-umgebungen/
HCL Nomad Web wird als die nächste Generation des HCL Notes-Clients gefeiert und bietet zahlreiche Vorteile, wie die Beseitigung des Bedarfs an Paketierung, Verteilung und Installation. Nomad Web-Client-Updates werden “automatisch” im Hintergrund installiert, was den administrativen Aufwand im Vergleich zu traditionellen HCL Notes-Clients erheblich reduziert. Allerdings stellt die Fehlerbehebung in Nomad Web im Vergleich zum Notes-Client einzigartige Herausforderungen dar.
Begleiten Sie Christoph und Marc, während sie demonstrieren, wie der Fehlerbehebungsprozess in HCL Nomad Web vereinfacht werden kann, um eine reibungslose und effiziente Benutzererfahrung zu gewährleisten.
In diesem Webinar werden wir effektive Strategien zur Diagnose und Lösung häufiger Probleme in HCL Nomad Web untersuchen, einschließlich
- Zugriff auf die Konsole
- Auffinden und Interpretieren von Protokolldateien
- Zugriff auf den Datenordner im Cache des Browsers (unter Verwendung von OPFS)
- Verständnis der Unterschiede zwischen Einzel- und Mehrbenutzerszenarien
- Nutzung der Client Clocking-Funktion
2. What we’ll
discuss today
▸ Cinder
▸ Cinder drivers
▸ OpenShift
▸ cinder-csi
▸ ember-csi
▸ AMA
▸ OpenStack
▸ OpenStack
development
▸ Red Hat OSP
▸ Sausage making
▸ Glance
Agenda
2
3. Why should you care about Cinder and Glance?
Cinder and Glance
… are core components of OpenStack
Openstack
… is the basis of Red Hat OpenStack Platform
Red Hat OpenStack Platform
… can run OpenShift in a "Shift on Stack" configuration
Red Hat OpenShift
… is why there are OpenShift Commons briefings
3
5. 5
OpenStack is an open source project for building a private or public
infrastructure-as-a-service cloud running on standard hardware
▸ Uses virtualized resources to build a cloud
▸ Relies on virtualization software
▸ Relies on a base operating system
▸ more info: openstack . org
6. Five "essential characteristics"
▸ on-demand self-service
▸ broad network access
▸ resource pooling ("multitenancy")
▸ rapid elasticity
▸ measured service
6
NIST special publication 800-145
What is a cloud?
7. 7
The OpenStack architecture is a number of projects that provide
different cloud services via REST APIs.
▸ Compute Service - Nova
▸ Networking Service -
Neutron
▸ Image Service - Glance
▸ Block Storage Service - Cinder
▸ Identity Service - Keystone
▸ Object Store - Swift
8. 8
The OpenStack architecture is a number of projects that provide
different cloud services via REST APIs.
▸ There are more projects than "the dirty six"
▸ duckduckgo: openstack api reference
10. 10
Developers contribute code by posting a gerrit review to the appropriate
project.
▸ review . opendev . org / 730183
How code gets into OpenStack
12. 12
Design work is done the same way.
▸ Features are proposed as "specs" that are ReST documents that are
posted in gerrit and reviewed by the project community
▸ example: review . opendev . org / 733555
・ "Default volume type overrides"
・ Is it bikeshedding? (I don't think so!)
▸ duckduckgo: openstack specs
How code gets into OpenStack
13. 13
Each patch goes through:
▸ an initial "check" by the Zuul CI system
▸ code reviews by other contributors
▸ revisions and approval
▸ the Zuul "gate"
How code gets into OpenStack
14. 14
The gate is different from the check.
▸ takes into account other patches for other
projects that are also being submitted
▸ you don't want to test a patch for Cinder
against Nova and Glance the way they are
right now, because when the Cinder patch is
merged, Nova and Glance may be different
from what was tested against
▸ zuul . openstack . org
How code gets into OpenStack
17. 17
You don't want OpenStack … what you want is OpenStack plus
virtualization plus an operating system, and you would like it in an
easy-to-install package.
▸ It's not enough for the OpenStack code to be solid, it must integrate
well with the all the other OpenStack components and the
virtualization and operating system layers
▸ Red Hat OpenStack Platform is a distribution of OpenStack that is
appropriately packaged and tested to work with RHEL.
That's all very nice, but ...
19. ▸ rdoproject . org
▸ a community distribution of OpenStack
▸ deploys a cloud using Triple-O ("OpenStack on
OpenStack", another OpenStack project)
・ provides an OpenStack undercloud that an
operator uses to deploy an overcloud, which is
the environment that cloud users interact with
▸ packaged in RPMs and tested on CentOS
19
RPM Distribution of OpenStack
RDO
20. ▸ an enterprise-grade distribution of OpenStack
▸ packaged for RHEL
▸ tested - both automated testing and manual testing of
key features
20
Finally!
Red Hat OSP
21. ▸ built on the OpenStack Train release
▸ 16.0 released 6 Feb 2020 (RHEL 8.1)
▸ 16.1.0 beta on 27 May 2020 (RHEL 8.2)
・ GA real soon - probably within a week or so
21
Current Release
Red Hat OSP 16
22. ▸ October 19-23, 2020
▸ will be held virtually … and there is no cost to attend!
▸ to register: openstack . org / summit /2020
22
Open Infrastructure Summit (Berlin 2020)
23. ▸ This is where the design discussions for the Wallaby
release take place
▸ around the week of October 19-23, 2020
▸ will be held virtually
▸ probably no cost to attend?
▸ watch: openstack . org / ptg
23
OpenStack PTG (Berlin 2020)
24. ▸ built on the OpenStack Train release
▸ 16.0 released 6 Feb 2020 (RHEL 8.1)
▸ 16.1.0 beta on 27 May 2020 (RHEL 8.2)
・ GA real soon - probably within a week or so
24
Current Release
Red Hat OSP 16
25. Upstream OpenStack Releases
cadence: release every 6 months
25
The Ussuri River has a reputation for
catastrophic floods.
13 May 2020
VictoriaUssuri
We are not amused.
14 October 2020
Train
Planning was done in Denver at a hotel
with a remarkably loud train outside.
16 October 2019
26. OpenStack is a coordinated release of a set of
deliverables, each of which has its own version number, so
a release is referred to by its name. For Train:
▸ Nova: version 20.0.0
▸ Glance: version 19.0.0
▸ Cinder: version 15.0.0
▸ Red Hat OSP: version 16
26
… is very confusing
OpenStack Versioning
27. ▸ built on the OpenStack Train release
▸ is a Long Life Release
▸ current plan is no more short-term releases
▸ future 16 versions may contain some U or V features
▸ want to keep OSP in closer sync with RHEL
27
Current Release
Red Hat OSP 16
28. ▸ Train is the last OpenStack release to support Python 2.7
▸ RH OSP 16 only supports RHEL 8
▸ The default, fully supported version of Python in RHEL 8
is Python 3.6
▸ So RH OSP only supports running on Python 3.6
▸ Upstream
・ Ussuri: Python 3 only (3.6 and 3.7)
・ Victoria: Python 3.6 and 3.8
28
Python Version
Red Hat OSP 16
30. ▸ Provides services and associated libraries to store,
browse, share, distribute, and manage bootable disk
images, other data closely associated with initializing
compute resources … and metadata definitions.
▸ docs: glance . openstack . org
▸ code: opendev . org / openstack / glance
30
The OpenStack Image Service
OpenStack Glance
31. ▸ Interoperable image import
・ allows plugins to process uploaded image data
▸ multiple stores
▸ enhancements for DCN ("edge") deployments
・ ability to move image data closer to where it will
be used
31
Recent Developments
OpenStack Glance
32. ▸ Project Team Leader is Abhishek Kekane (Red Hat)
▸ 75% of the core team is from Red Hat
▸ To contribute: glance . openstack . org
・ look for "Glance Contribution Guidelines"
32
Community
OpenStack Glance
34. ▸ Implements services and libraries to provide on
demand, self-service access to Block Storage
resources.
▸ Provides Software Defined Block Storage via
abstraction and automation on top of various
traditional backend block storage devices.
▸ docs: cinder . openstack . org
▸ code: opendev . org / openstack / cinder
34
The OpenStack Block Storage Service
OpenStack Cinder
36. ▸ There are over 70 drivers in the cinder code repository
▸ Drivers mediate between the Block Storage API, which
provides a consistent interface to users, and particular
storage backends
▸ 'Supported' drivers have functioning third-party CI
systems that run on every patch proposed to cinder
▸ The 3rd party CI provides additional information when
patches are reviewed
36
About the Drivers
OpenStack Cinder
38. ▸ The 3rd party CI run the OpenStack integration test
suite ("tempest") plus additional cinder-focused API
and scenario tests contained in the
cinder-tempest-plugin
▸ We can add extra integration tests for drivers to focus
on particular areas of functionality for particular
configurations
▸ example: review . opendev . org / 737380
38
About the Drivers
OpenStack Cinder
40. ▸ Specifies an interface to enable a storage vendor to
develop a single plugin that will work across all
container systems supporting the standard
▸ Storage vendors do not have to touch the core code
of the container orchestration system
40
Container Storage Interface
41. ▸ When running OpenShift in a Shift on Stack
configuration, Cinder is available via the
cinder-csi-plugin
▸ Whatever storage backends an operator configures
for Cinder can be used to serve persistent volumes in
OpenShift
41
Cinder and CSI
42. ▸ What about when not running OpenShift on top of
OpenStack?
▸ Cinder can be run in "standalone" mode (OpenSDS
takes this approach)
▸ Gives you a wide choice of backends, but is very
heavyweight
42
Cinder and CSI
43. ▸ a Python library that allows cinder storage drivers to
be used outside of cinder
▸ a deliverable of the OpenStack Cinder project
▸ removes the DBMS, message broker, Block Storage
API, scheduler, and volume manager layers
▸ cinderlib 2.0.0 was released last week
・ code: opendev.org / openstack / cinderlib
43
cinderlib
44. ▸ Allows you to take advantage of all the tested driver
code from cinder
▸ Allows vendors to re-use the driver code they have
developed for cinder
・ Hitachi and Dell/EMC have added new drivers
for the Victoria release
44
cinderlib
45. ▸ Allows you to take advantage of all the tested driver
code from cinder
▸ Allows vendors to re-use the driver code they have
developed for cinder
・ Hitachi and Dell/EMC have added new drivers
for the Victoria release
▸ ember-csi . io
45
Ember CSI