The relationship between Docker, Kubernetes and CRI

Dec 9, 20203 likes921 views

Docker, Kubernetes, and CRI standards allow different container solutions to work together. Docker contributed to the OCI specifications for container images and runtimes. Kubernetes uses the Container Runtime Interface (CRI) to support multiple container runtimes like Docker, Containerd, and CRI-O. This allows Kubernetes to work with different container solutions while maintaining compatibility through open standards.

Docker
• Docker isn't the only solution for container environment today.

• Avoid Reinventing the wheel

• World needs a speci
fi
cation to de
fi
ne how to create container.

• OCI de
fi
nes two speci
fi
cation (Docker contributed)

• Runtime (Running environment)

• runc,crun,kata, gvisor

• Image (Structure of the container image)

• Follow the OCI speci
fi
cation, you can create your own container solution.

How Docker Works (2020)
docker dockerd containerd runc
Linux Containers
Linux Containers
Linux Containers
Linux Containers
OCI Runtime
docker image
OCI Image
Build Image
Container
 
Registry
Push Image
OCI: Open Container Initiative
OCI Image Compatible

Kubernetes
• The container orchestrator platform, not the docker orchestrator platform.

• Would like to support many container solutions. (Docker is one of them).

• De
fi
ne its standard, called Container Runtime Interface (CRI)

• Docker (2013), Kubernetes (2014)

• Docker doesn't support CRI

• Kubernetes needs an interface to work with Docker

• dockershim

How Kubernetes Works (CRI)
Kubelet dockerd containerd runc
Linux Containers
Linux Containers
Linux Containers
Linux Containers
OCI Runtime
Container
 
Registry
OCI Image Compatible
dockershim
CRI
CRI: Contianer Runtime Interface
Pull Image

Together
Kubelet dockerd containerd runc
Linux Containers
Linux Containers
Linux Containers
Linux Containers
OCI Runtime
Container
 
Registry
OCI Image Compatible
dockershim
CRI
Pull Image
CRI: Contianer Runtime Interface
docker

Kubernetes
• With the help of CRI, Kubernetes supports di
ff
erent container solution.

• Containerd, CRI-O

• With the help of OCI, we can build the image by docker build but docker
push the image to other container registries.

• Harbor, Quay, others provided by cloud providers

• With the help of OCI, Kubernetes can pull and run docker image even it
uses non-docker solution.

Containerd
Kubelet runc
Linux Containers
Linux Containers
Linux Containers
Linux Containers
OCI Runtime
Container

Registry
OCI Image Compatible
CRI
Pull Image
dockerddocker
Push Image
As Developer
containerd
ctr
Kubernetes Worker Node

CRI-O
Kubelet CRI-O runc
Linux Containers
Linux Containers
Linux Containers
Linux Containers
OCI Runtime
Container

Registry
OCI Image Compatible
Pull Image
dockerddocker
Push Image
crictl
As Developer
Kubernetes Worker Node
CRI

The document discusses CRI (Container Runtime Interface), OCI (Open Container Initiative), and CRI-O. CRI allows Kubernetes to support multiple container runtimes beyond just Docker, and defines the API. OCI sets standards for container formats and runtime. CRI-O is an implementation of CRI that uses OCI and is optimized for Kubernetes. It provides an alternative to using Docker directly with Kubernetes.

Integration kubernetes with docker private registryHungWei Chiu

Docker London Meetup: Docker Engine EvolutionPhil Estes

Kubernetes and OpenStack at ScaleStephen Gordon

Kubernetes and OpenStack at Scale at OpenStack Summit Boston 2017 Imagine being able to stand up thousands of tenants with thousands of apps, running thousands of Docker-formatted container images and routes, all on a self-healing cluster and elastic infrastructure. Now, take that one step further - all of those images being updatable through a single upload to the registry, and with zero downtime. In this session, you will see just that. In this presentation, we will walk through a recent benchmarking deployment using Kubernetes and OpenStack on the Cloud Native Computing Foundation’s (CNCF's) 1,000 node cluster with OpenStack and Red Hat’s OpenShift Container Platform, the enterprise-ready Kubernetes for developers. You'll also what's been happening in subsequent rounds of testing in Red Hat's own SCALE lab and the CNCF cluster and how we are working with the relevant open source communities including OpenStack, Kubernetes, and Ansible to continue to raise the bar for horizontal scaling of these platforms via community powered innovation.

Whose Job Is It Anyway? Kubernetes, CRI, & Container RuntimesPhil Estes

Let's Try Every CRI Runtime Available for KubernetesPhil Estes

Docker Engine Evolution: From Monolith to Discrete ComponentsPhil Estes

The Docker Engine evolved from a monolithic binary into discrete components. Initially, the Docker Engine was a single statically-linked binary that provided the client, daemon, build tool, and registry client functionality. It has since been decomposed, with container execution handled by OCI and runc, image management by containerd, and the various components integrated together by Docker CE and Moby. This decomposition allows the components to be reused independently by other systems like Kubernetes, which uses cri-containerd to integrate with containerd and runc for container execution instead of directly integrating with Docker.

HPC in a Box - Docker Workshop at ISC 2015inside-BigData.com

FOSDEM 2019: A containerd Project UpdatePhil Estes

Introduction kubernetes 2017_12_24Sam Zheng

This document provides an introduction to Kubernetes and Container Network Interface (CNI). It begins with an introduction to the presenter and their background. It then discusses the differences between VMs and containers before explaining why Kubernetes is needed for container orchestration. The rest of the document details the architecture of Kubernetes, including the master node, worker nodes, pods, labels, replica sets, deployments, services, and how to build a Kubernetes cluster. It concludes with a brief introduction to CNI and a call for questions.

CI/CD with Openshift and JenkinsAri LiVigni

Kubernetes in DockerDocker, Inc.

1. Docker EE will include an unmodified Kubernetes distribution to provide orchestration capabilities alongside Docker Swarm. 2. When running mixed workloads across orchestrators, resource contention is a risk and it is recommended to separate workloads by orchestrator on each node for now. 3. Docker EE aims to address the shortcomings of running mixed workloads to better support this in the future.

containerd and CRIDocker, Inc.

Container Runtimes: Comparing and Contrasting Today's EnginesPhil Estes

CI/CD Pipeline mit Gitlab CI und Kubernetesinovex GmbH

Embedding Containerd For Fun and ProfitPhil Estes

Containerd is a core container runtime that is used by Kubernetes, Docker, and other projects. It provides a stable runtime for container-related components and services. It has a discrete architecture with decoupled services like containers, images, and tasks that are exposed via gRPC. The document then provides examples of how to code a simple Containerd client to pull an image, create a container, and start the container task.

Kubernetes 架構與虛擬化之差異inwin stack

Kubernetes uses containers managed by container engines like Docker. It separates containers from the host machine using namespaces and cgroups for isolation. Docker containers share the host kernel and use aufs for the union filesystem. Virtual machines (VMs) run a full guest operating system with virtualization provided by hypervisors like KVM/QEMU. Containers are more lightweight than VMs as they share the host kernel and have smaller base images and faster launch times and resource usage.

CRI-containerdMoby Project

This document discusses CRI-Containerd, which is a CRI implementation that allows Kubernetes to use Containerd as its container runtime. It provides an overview of CRI and how it enables Kubernetes to work with different runtimes. It then discusses how Containerd's scope aligns well with CRI's requirements. It introduces CRI-Containerd and its architecture, and notes that it is now feature complete and passing all CRI and Kubernetes tests. Upcoming work includes additional testing, integration with kube-up.sh, and a 1.0.0-beta.0 release by the end of 2017. It concludes with a demo of CRI-Containerd in action.

KubeCon EU 2016: Bringing an open source Containerized Container Platform to ...KubeAcademy

Kurma is a open source container runtime that is based on the container instrumentation built into the Apcera Platform. Kurma, and its accompanied "KurmaOS" is our vision of a lightweight, fully containerized operating system. This presentation will cover Apcera's journey in its container instrumentation. Beginning with the pre-Docker landscape, how it grew over the course of 3+ years, and the "next-gen" adaption of it, where the base container instrumentation has been adapted to stand as its own open source project, and growing it to be used beyond just Apcera's own usage. Kurma incorporates a lot of lessons learned with both development and operations of a container platform, including building modular vs monolith, extensibility being built in vs built on, and managing a cluster of hosts and containers. We'll also cover our experiences with introducing it to Kubernetes as another first class runtime provider. Taking how Kurma works and have it work with Kubernetes, and how we'd like to see Kubernetes grow in some of the areas we see Kurma growing. Sched Link: http://sched.co/6BlW

What's Running My Containers? A review of runtimes and standards.Phil Estes

A talk given at Open Source Leadership Summit (OSLS) on Thursday, March 14th in Half Moon Bay, CA. In this talk the current status of the Open Container Initiative (OCI) standards as well as the Kubernetes Container Runtime Interface (CRI) were presented, with a view towards how these components have provided a level playing field with significant choice when it comes to container runtimes for use in Kubernetes, as well as interoperability per the OCI standards.

Looking Under The Hood: containerDDocker, Inc.

As we move to our application units to containers most people are asking themselves the question about orchestrator choice. That is not the only choice that’s important, what about the underlying container runtime? In this talk, we will look at why you would use containerD with runC with both Swarm and Kubernetes, but other uses for ContainerD like container OS’s to ship immutable infrastructure.

State of Builder and Buildkit by Tonis Tiigi (Docker)Docker, Inc.

"Overview of the new advancements added to Docker's builder feature in the newest releases and how to use these features to make your build jobs more powerful and efficient. Going to cover multi-stage builds, new dependency model, new performance features, added Dockerfile features etc. Dive into the new buildkit architecture developed as part of the Moby project and the base for the future of `docker build`. Learn about how to start playing around with buildkit today and what kind of capabilities the new architecture exposes."

Building Containers: How Many Ways Are Too Many?Vietnam Open Infrastructure User Group

This document discusses container build tools and summarizes some of their key features. It notes that while Docker works well, it has some inefficiencies like lack of concurrency support and inefficient caching. Alternatives discussed include BuildKit, Kaniko, img, and Buildah. The document recommends BuildKit as the most promising option as it uses a DAG-style language called LLB for more efficient concurrency and caching support compared to Dockerfiles, and its integration with Docker.

Containers without dockerBen Hall

This document discusses containers without Docker. It introduces alternatives to Docker like Runc, Podman, Buildah and Img for launching and building containers. It also discusses deploying Kubernetes using CRI-O as a container runtime instead of Docker. Key points covered include why consider non-Docker options, what containers and images are, and how to launch containers without Docker on Linux, Windows and in Kubernetes. Alternatives provide valuable choices and the future is seen as Kubernetes with CRI-O rather than Docker.

Extended and embedding: containerd update & project use casesPhil Estes

Bucketbench: Benchmarking Container Runtime PerformancePhil Estes

A talk presented at the Moby Summit, Los Angeles (a co-located event with the Open Source Summit North America) on Thursday, September 14, 2017. In this talk, an open source tool, bucketbench, was presented as a way to benchmark container runtimes to compare performance impacts of changes in the runtime or changes to the configuration of Docker, runC, or containerd, the three runtimes currently supported in the bucketbench project.

Containers and HPCOlli-Pekka Lehto

Kubernetes and Hybrid DeploymentsSandeep Parikh

Dockerize the Worlddamovsky

What is Docker and why is it so hot?Jochen Zehnder

This document provides an overview of Docker, containers, and related tools. It introduces Docker Inc. as the company that started the "hype" around Docker by open sourcing the Docker codebase in 2013. Containers are explained as a collection of kernel features like namespaces and cgroups that isolate processes. Popular container runtimes include Docker Engine, rkt, and App Container. Images are standardized read-only filesystems used to deploy applications in containers. Tools like Docker Machine, Docker Compose, Docker Swarm, and Kitematic help provision and manage containers. A voting application demo is shown to illustrate Docker in action.

More Related Content

What's hot (20)

FOSDEM 2019: A containerd Project UpdatePhil Estes

Introduction kubernetes 2017_12_24Sam Zheng

CI/CD with Openshift and JenkinsAri LiVigni

Kubernetes in DockerDocker, Inc.

containerd and CRIDocker, Inc.

Container Runtimes: Comparing and Contrasting Today's EnginesPhil Estes

CI/CD Pipeline mit Gitlab CI und Kubernetesinovex GmbH

Embedding Containerd For Fun and ProfitPhil Estes

Kubernetes 架構與虛擬化之差異inwin stack

CRI-containerdMoby Project

KubeCon EU 2016: Bringing an open source Containerized Container Platform to ...KubeAcademy

What's Running My Containers? A review of runtimes and standards.Phil Estes

Looking Under The Hood: containerDDocker, Inc.

State of Builder and Buildkit by Tonis Tiigi (Docker)Docker, Inc.

Building Containers: How Many Ways Are Too Many?Vietnam Open Infrastructure User Group

Containers without dockerBen Hall

Extended and embedding: containerd update & project use casesPhil Estes

Bucketbench: Benchmarking Container Runtime PerformancePhil Estes

Containers and HPCOlli-Pekka Lehto

Kubernetes and Hybrid DeploymentsSandeep Parikh

FOSDEM 2019: A containerd Project UpdatePhil Estes

Introduction kubernetes 2017_12_24Sam Zheng

CI/CD with Openshift and JenkinsAri LiVigni

Kubernetes in DockerDocker, Inc.

containerd and CRIDocker, Inc.

Container Runtimes: Comparing and Contrasting Today's EnginesPhil Estes

CI/CD Pipeline mit Gitlab CI und Kubernetesinovex GmbH

Embedding Containerd For Fun and ProfitPhil Estes

Kubernetes 架構與虛擬化之差異inwin stack

CRI-containerdMoby Project

KubeCon EU 2016: Bringing an open source Containerized Container Platform to ...KubeAcademy

What's Running My Containers? A review of runtimes and standards.Phil Estes

Looking Under The Hood: containerDDocker, Inc.

State of Builder and Buildkit by Tonis Tiigi (Docker)Docker, Inc.

Building Containers: How Many Ways Are Too Many?Vietnam Open Infrastructure User Group

Containers without dockerBen Hall

Extended and embedding: containerd update & project use casesPhil Estes

Bucketbench: Benchmarking Container Runtime PerformancePhil Estes

Containers and HPCOlli-Pekka Lehto

Kubernetes and Hybrid DeploymentsSandeep Parikh

Similar to The relationship between Docker, Kubernetes and CRI (20)

Dockerize the Worlddamovsky

What is Docker and why is it so hot?Jochen Zehnder

docker technology in INTERNET WORLD.pptxpoojadhanrajani

DockerCon SF 2015: Getting Started w/ DockerDocker, Inc.

This document provides an overview of Docker including why Docker is useful, how the Docker platform works, and common Docker workflows. It discusses Docker's isolation, lightweight virtualization, simplicity, community support, and installation process. Key Docker concepts covered include images, containers, the Docker Engine, Docker Hub, and using volumes. The document demonstrates common Docker commands and workflows like building, running, and sharing images.

Introduction to dockerJohn Willis

This document provides an introduction and overview of Docker. It discusses why Docker is useful for isolation, simplicity, and workflow. It also covers the Docker platform, including the Docker engine, images, containers, and networking. Key components are the Docker daemon, Docker CLI, and Docker Hub registry. Demos are provided on installing Docker and using Docker for building images, running containers with volumes, and configuring Docker networking.

Docker First StepsJulian Camargo

Docker provides a lightweight container platform that allows applications to run isolated on the same host machine. It uses a layered image format and central repository called Docker Hub to distribute container images. Containers are more portable and faster to deploy than virtual machines, though they have some limitations around networking and security compared to VMs. Tools like Kubernetes help manage Docker containers in production environments.

Docker.pptxbalaji257

This document provides an introduction and overview of Docker and containers. It discusses what containers are, how they differ from virtual machines, and how Docker works. Key points covered include common Docker commands, the Docker architecture, building images with Dockerfiles, and using Docker Compose to run multi-container applications. The benefits of containers for streamlining deployment and rapid scaling are also highlighted.

Django and DockerDocker, Inc.

Ken Cochrane gave a presentation on Docker and Docker's suitability for Django projects. He began with an introduction to Docker, explaining how it uses Linux containers to package applications into lightweight portable containers. He then discussed several common use cases for Docker like local development, continuous integration/deployment, and testing. The presentation concluded with a demo of Docker commands and a discussion of upcoming Docker 1.0 features.

Docker at Djangocon 2013 | Talk by Ken CochranedotCloud

Developer workflow with dockerWyn B. Van Devanter

This document discusses Docker and how it can benefit developers. Docker allows developers to build containers from images defined in Dockerfiles. Containers isolate processes and share the host operating system's kernel for a smaller footprint. Using Docker provides consistent environments that can be versioned and shared, improving the development workflow. It also discusses how to build images, run containers, and use Docker Compose to run multiple containers together.

Dockerize the World - presentation from Hradec Kralovedamovsky

This document provides an introduction and overview of Docker delivered in a presentation format. It includes: 1. An agenda that covers Docker introduction, demos, Docker in the cloud, IoT and Docker, and news from DockerCon conferences. 2. Background on the presenter and a poll asking who knows and uses Docker in production. 3. Explanations of what Docker is, how it works using Linux kernel features, and its motto of Build, Ship, Run. 4. Mention of links to the presenter's Docker demos and an open source project called Yowie.

Learning Dockers - Step by StepAdnan Siddiqi

A step by step tutorial about installing and using Docker for your Development(Dev) Environment. After the end of this tutorial, you should be able to use Docker for your day-day development work. The almost same tutorial is available in text format on my blog. Visit: http://bit.ly/2Gijqgk These slides were discussed in a youtube video here:- http://bit.ly/2Gr2Qeb

Docker.pptAjit Mali

- Docker is an open platform for developers and sysadmins to build, ship, and run distributed applications. It allows applications to run securely isolated in user-defined containers across any infrastructure. - Docker uses Linux kernel features like cgroups and namespaces to provide isolation and allocate resources only to the containers that "need" them. This makes containers lightweight and efficient. - Docker images are read-only templates that serve as the basis for containers. Images are built from Dockerfiles containing a series of commands to assemble an image. Containers are run from images and are read-write.

Docker 101: Introduction to DockerDocker, Inc.

This document provides an introduction to Docker. It discusses why Docker is useful for isolation, being lightweight, simplicity, workflow, and community. It describes the Docker engine, daemon, and CLI. It explains how Docker Hub provides image storage and automated builds. It outlines the Docker installation process and common workflows like finding images, pulling, running, stopping, and removing containers and images. It promotes Docker for building local images and using host volumes.

Docker and Sitecore : Sci-Fi or match made in heaven?Saber Karmous

DockerCon SF 2015: Maintaining the Official Node.js Docker ImageDocker, Inc.

- Joyent maintains the official Node.js Docker image, taking it over from its original creators. They aim to follow best practices like using an official base image, offering multiple tagged versions, and adding tests to ensure images build properly. - Tags and variants like slim or different base OSes allow users flexibility. Proper documentation is important for understanding the different options. - Automated testing, like with Serverspec, helps validate images before release. User feedback, like via GitHub issues, also helps improve the images. - The Node.js and io.js projects plan to merge, which may impact the Docker images going forward as they are maintained by a working group under the Node.js foundation.

Developer workflow with dockerWyn B. Van Devanter

presentation on DockerVirendra Ruhela

Docker is an open platform for developing, shipping, and running distributed applications. It allows applications to be shipped and run in lightweight containers that can run on any Linux server. Docker uses operating-system-level virtualization and cgroups isolation to deliver lightweight containers quickly. Key features of Docker include portability, lightweight containers that share resources and isolate processes, and automated workflows.

Docker handons-workshop-for-charityYusuf Hadiwinata Sutandar

This document provides an agenda and overview for a hands-on workshop on container and Docker technologies. It begins with a brief introduction to containers and Docker, then covers installing and managing Docker containers using tools like Portainer and OpenShift Origin. It also discusses building simple Docker applications and has sections on container and Docker concepts like images, containers, registries, advantages, and the Docker ecosystem. The document aims to explain containers and Docker for both developers and IT administrators.

Docker interview Questions-1.pdfYogeshwaran R

Docker allows applications to be packaged with all their dependencies and run seamlessly on any infrastructure. It provides lightweight containers that share resources more efficiently than virtual machines. Containers can be created from Docker images which act as templates and contain instructions for creating containers. The Docker architecture consists of clients, hosts, and a registry where images are stored and shared.

Dockerize the Worlddamovsky

What is Docker and why is it so hot?Jochen Zehnder

docker technology in INTERNET WORLD.pptxpoojadhanrajani

DockerCon SF 2015: Getting Started w/ DockerDocker, Inc.

Introduction to dockerJohn Willis

Docker First StepsJulian Camargo

Docker.pptxbalaji257

Django and DockerDocker, Inc.

Docker at Djangocon 2013 | Talk by Ken CochranedotCloud

Developer workflow with dockerWyn B. Van Devanter

Dockerize the World - presentation from Hradec Kralovedamovsky

Learning Dockers - Step by StepAdnan Siddiqi

Docker.pptAjit Mali

Docker 101: Introduction to DockerDocker, Inc.

Docker and Sitecore : Sci-Fi or match made in heaven?Saber Karmous

DockerCon SF 2015: Maintaining the Official Node.js Docker ImageDocker, Inc.

Developer workflow with dockerWyn B. Van Devanter

presentation on DockerVirendra Ruhela

Docker handons-workshop-for-charityYusuf Hadiwinata Sutandar

Docker interview Questions-1.pdfYogeshwaran R

More from HungWei Chiu (20)

Learn O11y from Grafana ecosystem.HungWei Chiu

Learned from KIND HungWei Chiu

Debug Your Kubernetes NetworkHungWei Chiu

以 eBPF 構建一個更為堅韌的 Kubernetes 叢集HungWei Chiu

Learning how AWS implement AWS VPC CNIHungWei Chiu

The document discusses AWS VPC CNI (Container Network Interface) and how it enables networking connectivity for Kubernetes pods running on Amazon EC2 instances within an AWS VPC (Virtual Private Cloud). It aims to provide high throughput and availability, low latency networking while allowing users to express and enforce network policies and isolation comparable to using native EC2 networking and security groups. AWS VPC CNI assigns pods IP addresses from the same subnet as the EC2 instance so traffic can bypass overlay networking for improved performance and visibility within the VPC.

Jenkins & IaCHungWei Chiu

LifeHungWei Chiu

Introduction to CRI and OCIHungWei Chiu

Kubernetes is a container orchestrator platform, not the docker platform. It means we can switch to a different container solutions in the Kubernetes environment and the key point is the CRI, container runtime intface. We will talked about what is the CRI and how to use it in the Kubernetes world, we also introduce what is the OCI, the basic concept of the OCI, inclduing Runtime spec and Image spec.

IP Virtual Server(IPVS) 101HungWei Chiu

Opentracing 101HungWei Chiu

In this slide, we go through the Google Dapper, OpenTracing, Jaeger to OpenTelemetry. By reading and studying the history of Dapper, we could lean the experience and design theory of a large-scale distributed tracing system and then know how it affects other solutions, like OpenTracing and Jaeger. We also discuss the difference between the OpenTracing and Jaeger and also demonstrate how Jaeger works and looks like. After, we talked about the future of OpenTracing, the new organization called OpenTelemetry, what's its goal and how to do that.

iptables and KubernetesHungWei Chiu

IPTABLES IntroductionHungWei Chiu

Open vSwitch IntroductionHungWei Chiu

Introduce the basic concept of Open vSwitch. In this slide, we talked about how Linux kernel and networking stack worked together to forward and process the network packet and also compare those Linux networking stack functionality with Open vSwitch and Openflow. At the end of this slide, we talk about the challenge to integrate the Open vSwitch with Kubernetes, what kind of the networking function we need to resolve and what is the benefit we can get from the Open Vswitch.

Load Balancing 101HungWei Chiu

How Networking works with Data Science HungWei Chiu

Introduction to CircleCIHungWei Chiu

Head First to Container&KubernetesHungWei Chiu

Kubernetes 1001HungWei Chiu

Application-Based RoutingHungWei Chiu

Build Your Own CaaS (Container as a Service)HungWei Chiu

Learn O11y from Grafana ecosystem.HungWei Chiu

Learned from KIND HungWei Chiu

Debug Your Kubernetes NetworkHungWei Chiu

以 eBPF 構建一個更為堅韌的 Kubernetes 叢集HungWei Chiu

Learning how AWS implement AWS VPC CNIHungWei Chiu

Jenkins & IaCHungWei Chiu

LifeHungWei Chiu

Introduction to CRI and OCIHungWei Chiu

IP Virtual Server(IPVS) 101HungWei Chiu

Opentracing 101HungWei Chiu

iptables and KubernetesHungWei Chiu

IPTABLES IntroductionHungWei Chiu

Open vSwitch IntroductionHungWei Chiu

Load Balancing 101HungWei Chiu

How Networking works with Data Science HungWei Chiu

Introduction to CircleCIHungWei Chiu

Head First to Container&KubernetesHungWei Chiu

Kubernetes 1001HungWei Chiu

Application-Based RoutingHungWei Chiu

Build Your Own CaaS (Container as a Service)HungWei Chiu

Recently uploaded (20)

TrustArc Webinar: Consumer Expectations vs Corporate Realities on Data Broker...TrustArc

Most consumers believe they’re making informed decisions about their personal data—adjusting privacy settings, blocking trackers, and opting out where they can. However, our new research reveals that while awareness is high, taking meaningful action is still lacking. On the corporate side, many organizations report strong policies for managing third-party data and consumer consent yet fall short when it comes to consistency, accountability and transparency. This session will explore the research findings from TrustArc’s Privacy Pulse Survey, examining consumer attitudes toward personal data collection and practical suggestions for corporate practices around purchasing third-party data. Attendees will learn: - Consumer awareness around data brokers and what consumers are doing to limit data collection - How businesses assess third-party vendors and their consent management operations - Where business preparedness needs improvement - What these trends mean for the future of privacy governance and public trust This discussion is essential for privacy, risk, and compliance professionals who want to ground their strategies in current data and prepare for what’s next in the privacy landscape.

Transcript: #StandardsGoals for 2025: Standards & certification roundup - Tec...BookNet Canada

Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next. Link to recording, presentation slides, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/ Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.

Procurement Insights Cost To Value Guide.pptxJon Hansen

Big Data Analytics Quick Research Guide by Arthur MorganArthur Morgan

This is a Quick Research Guide (QRG). QRGs include the following: - A brief, high-level overview of the QRG topic. - A milestone timeline for the QRG topic. - Links to various free online resource materials to provide a deeper dive into the QRG topic. - Conclusion and a recommendation for at least two books available in the SJPL system on the QRG topic. QRGs planned for the series: - Artificial Intelligence QRG - Quantum Computing QRG - Big Data Analytics QRG - Spacecraft Guidance, Navigation & Control QRG (coming 2026) - UK Home Computing & The Birth of ARM QRG (coming 2027) Any questions or comments? - Please contact Arthur Morgan at [email protected]. 100% human made.

Electronic_Mail_Attacks-1-35.pdf by xploitniftliyevhuseyn

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

Special Meetup Edition - TDX Bengaluru Meetup #52.pptxshyamraj55

#StandardsGoals for 2025: Standards & certification roundup - Tech Forum 2025BookNet Canada

Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next. Link to recording, transcript, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/ Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

How Can I use the AI Hype in my Business Context?Daniel Lehner

𝙄𝙨 𝘼𝙄 𝙟𝙪𝙨𝙩 𝙝𝙮𝙥𝙚? 𝙊𝙧 𝙞𝙨 𝙞𝙩 𝙩𝙝𝙚 𝙜𝙖𝙢𝙚 𝙘𝙝𝙖𝙣𝙜𝙚𝙧 𝙮𝙤𝙪𝙧 𝙗𝙪𝙨𝙞𝙣𝙚𝙨𝙨 𝙣𝙚𝙚𝙙𝙨? Everyone’s talking about AI but is anyone really using it to create real value? Most companies want to leverage AI. Few know 𝗵𝗼𝘄. ✅ What exactly should you ask to find real AI opportunities? ✅ Which AI techniques actually fit your business? ✅ Is your data even ready for AI? If you’re not sure, you’re not alone. This is a condensed version of the slides I presented at a Linkedin webinar for Tecnovy on 28.04.2025.

UiPath Community Berlin: Orchestrator API, Swagger, and Test Manager APIUiPathCommunity

Join this UiPath Community Berlin meetup to explore the Orchestrator API, Swagger interface, and the Test Manager API. Learn how to leverage these tools to streamline automation, enhance testing, and integrate more efficiently with UiPath. Perfect for developers, testers, and automation enthusiasts! 📕 Agenda Welcome & Introductions Orchestrator API Overview Exploring the Swagger Interface Test Manager API Highlights Streamlining Automation & Testing with APIs (Demo) Q&A and Open Discussion Perfect for developers, testers, and automation enthusiasts! 👉 Join our UiPath Community Berlin chapter: https://community.uipath.com/berlin/ This session streamed live on April 29, 2025, 18:00 CET. Check out all our upcoming UiPath Community sessions at https://community.uipath.com/events/.

Greenhouse_Monitoring_Presentation.pptx.hpbmnnxrvb

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Manifest Pre-Seed Update | A Humanoid OEM Deeptech In Francechb3

Cybersecurity Identity and Access Solutions using Azure ADVICTOR MAESTRE RAMIREZ

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Talk at the final event of Data Fusion Dynamics: A Collaborative UK-Saudi Initiative in Cybersecurity and Artificial Intelligence funded by the British Council UK-Saudi Challenge Fund 2024, Cardiff Metropolitan University, 29th April 2025 https://alandix.com/academic/talks/CMet2025-AI-Changes-Everything/ Is AI just another technology, or does it fundamentally change the way we live and think? Every technology has a direct impact with micro-ethical consequences, some good, some bad. However more profound are the ways in which some technologies reshape the very fabric of society with macro-ethical impacts. The invention of the stirrup revolutionised mounted combat, but as a side effect gave rise to the feudal system, which still shapes politics today. The internal combustion engine offers personal freedom and creates pollution, but has also transformed the nature of urban planning and international trade. When we look at AI the micro-ethical issues, such as bias, are most obvious, but the macro-ethical challenges may be greater. At a micro-ethical level AI has the potential to deepen social, ethnic and gender bias, issues I have warned about since the early 1990s! It is also being used increasingly on the battlefield. However, it also offers amazing opportunities in health and educations, as the recent Nobel prizes for the developers of AlphaFold illustrate. More radically, the need to encode ethics acts as a mirror to surface essential ethical problems and conflicts. At the macro-ethical level, by the early 2000s digital technology had already begun to undermine sovereignty (e.g. gambling), market economics (through network effects and emergent monopolies), and the very meaning of money. Modern AI is the child of big data, big computation and ultimately big business, intensifying the inherent tendency of digital technology to concentrate power. AI is already unravelling the fundamentals of the social, political and economic world around us, but this is a world that needs radical reimagining to overcome the global environmental and human challenges that confront us. Our challenge is whether to let the threads fall as they may, or to use them to weave a better future.

Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

2025-05-Q4-2024-Investor-Presentation.pptxSamuele Fogagnolo

Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB

Want to learn practical tips for designing systems that can scale efficiently without compromising speed? Join us for a workshop where we’ll address these challenges head-on and explore how to architect low-latency systems using Rust. During this free interactive workshop oriented for developers, engineers, and architects, we’ll cover how Rust’s unique language features and the Tokio async runtime enable high-performance application development. As you explore key principles of designing low-latency systems with Rust, you will learn how to: - Create and compile a real-world app with Rust - Connect the application to ScyllaDB (NoSQL data store) - Negotiate tradeoffs related to data modeling and querying - Manage and monitor the database for consistently low latencies

TrustArc Webinar: Consumer Expectations vs Corporate Realities on Data Broker...TrustArc

Transcript: #StandardsGoals for 2025: Standards & certification roundup - Tec...BookNet Canada

Procurement Insights Cost To Value Guide.pptxJon Hansen

Big Data Analytics Quick Research Guide by Arthur MorganArthur Morgan

Electronic_Mail_Attacks-1-35.pdf by xploitniftliyevhuseyn

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

Special Meetup Edition - TDX Bengaluru Meetup #52.pptxshyamraj55

#StandardsGoals for 2025: Standards & certification roundup - Tech Forum 2025BookNet Canada

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

How Can I use the AI Hype in my Business Context?Daniel Lehner

UiPath Community Berlin: Orchestrator API, Swagger, and Test Manager APIUiPathCommunity

Greenhouse_Monitoring_Presentation.pptx.hpbmnnxrvb

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Manifest Pre-Seed Update | A Humanoid OEM Deeptech In Francechb3

Cybersecurity Identity and Access Solutions using Azure ADVICTOR MAESTRE RAMIREZ

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

2025-05-Q4-2024-Investor-Presentation.pptxSamuele Fogagnolo

Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB

The relationship between Docker, Kubernetes and CRI

1. Docker, Kubernetes and CRI HungWei Chiu

2. Docker • Docker isn't the only solution for container environment today. • Avoid Reinventing the wheel • World needs a speci fi cation to de fi ne how to create container. • OCI de fi nes two speci fi cation (Docker contributed) • Runtime (Running environment) • runc,crun,kata, gvisor • Image (Structure of the container image) • Follow the OCI speci fi cation, you can create your own container solution.

3. How Docker Works (2020) docker dockerd containerd runc Linux Containers Linux Containers Linux Containers Linux Containers OCI Runtime docker image OCI Image Build Image Container   Registry Push Image OCI: Open Container Initiative OCI Image Compatible

4. Kubernetes • The container orchestrator platform, not the docker orchestrator platform. • Would like to support many container solutions. (Docker is one of them). • De fi ne its standard, called Container Runtime Interface (CRI) • Docker (2013), Kubernetes (2014) • Docker doesn't support CRI • Kubernetes needs an interface to work with Docker • dockershim

5. How Kubernetes Works (CRI) Kubelet dockerd containerd runc Linux Containers Linux Containers Linux Containers Linux Containers OCI Runtime Container   Registry OCI Image Compatible dockershim CRI CRI: Contianer Runtime Interface Pull Image

6. Together Kubelet dockerd containerd runc Linux Containers Linux Containers Linux Containers Linux Containers OCI Runtime Container   Registry OCI Image Compatible dockershim CRI Pull Image CRI: Contianer Runtime Interface docker

7. Kubernetes • With the help of CRI, Kubernetes supports di ff erent container solution. • Containerd, CRI-O • With the help of OCI, we can build the image by docker build but docker push the image to other container registries. • Harbor, Quay, others provided by cloud providers • With the help of OCI, Kubernetes can pull and run docker image even it uses non-docker solution.

8. Containerd Kubelet runc Linux Containers Linux Containers Linux Containers Linux Containers OCI Runtime Container Registry OCI Image Compatible CRI Pull Image dockerddocker Push Image As Developer containerd ctr Kubernetes Worker Node

9. CRI-O Kubelet CRI-O runc Linux Containers Linux Containers Linux Containers Linux Containers OCI Runtime Container Registry OCI Image Compatible Pull Image dockerddocker Push Image crictl As Developer Kubernetes Worker Node CRI

The relationship between Docker, Kubernetes and CRI

Recommended

More Related Content

What's hot (20)

Similar to The relationship between Docker, Kubernetes and CRI (20)

More from HungWei Chiu (20)

Recently uploaded (20)

The relationship between Docker, Kubernetes and CRI