10 Jun 2015 in Containers, Overview

Isolation with Linux Containers

Note:This is part two of a two part series that starts here.

In part one of this series, we built a simple echo server, and took steps to isolate the privileges, filesystem, allocated resources, and process space. The things we did isolated the echo server process from all the other processes on the host.

In this post, we’ll look at how Linux Containers provide an easier, more powerful alternative. Instead of isolating at the process level, we’ll isolate at the OS level.

Introducing Linux Containers

Docker is the hot new thing, but Linux containers (LXC) have been around since before Docker launched in March of 2013.

The Docker FAQ cites various differences between LXC and Docker. While Docker now utilizes libcontainer, it originally wrapped the LXC user tools. In summary, LXC provided a wrapper around Linux kernel technologies, while Docker essentially provided a wrapper around LXC.

This post look at the following technologies in the context of LXC:

  • Kernel namespaces
  • Chroots (using pivot_root)
  • uidmap and gidmap
  • cgroups
  • Virtual Ethernet
Read More
5 Jun 2015 in Deis v1 PaaS

New Maintainer - Matt Butcher

Please join us in welcoming Matt Butcher as a core maintainer of the Deis project!

Matt Butcher is a software engineer, author, and philosopher. He has worked on cloud services, large-scale websites, and a couple of Internet of Things platforms. He has written dozens of articles and is just finishing his eighth book, Manning Press's "Go in Practice" with Matt Farina. He holds a Ph.D. in philosophy. He really loves coffee. Really. Loves. Coffee.

Matt lives in Colorado, and will be hanging out in Engine Yard's Boulder office. He'll be working full time on Deis.

Follow Matt on Twitter: @technosophos

21 May 2015 in Deis v1 PaaS

The Deis Open Roadmap and Planning Process

Today I'm thrilled to introduce our new Open Roadmap and Planning Process. This ensures every community member can help shape the future of Deis.

As Deis has grown over the last few months, many in the community have looked for ways to influence the roadmap. Until now, this has required submitting GitHub proposals, starting mailing list discussions or chatting with maintainers in IRC. While all of these methods are still valid, we now have a formal planning process that results in a public roadmap.

Starting now, Release Planning Meetings will be held on the first Thursday of every month, aligned with the Release Schedule. Meetings will take place via a public Google Hangout with access coordinated via the #deis channel on Freenode. We look forward to your participation!

12 May 2015 in Containers, Overview

Linux Isolation Basics

Note: This is part one of a two part series. Read part two.

In the complex world of modern app deployment solutions, containers have been gaining traction as a popular distribution method. But what are they, and why are people so excited about them? This two part series will look into some of the benefits offered.

First, we’ll look at how isolation is generally used to solve a whole class of problems. Next we’ll look at how containers, specifically, makes isolation more manageable. An intermediate familiarity with UNIX-like systems is assumed throughout.

Read More