How Did Our Garden Grow? Advances in the Cloud Foundry App...
summary
Garden becomes the first production runtime to support rootless mode, reducing host‑level risk by running the control plane unprivileged and optionally inside its own container via BPM. It migrates core lifecycle and exec work to containerd incrementally, keeping image snapshotting for later. A new CPU Entitlements metric and plugin ships: a three‑phase rollout (metrics, operator tooling, then throttling) that guarantees minimum entitlement, favors well‑behaved apps for bursting, and is implemented and under test.
AI-written summary · about
chapters (6)
- 0:00Introduction to Garden
- 1:26Garden’s evolution and Docker
- 4:41CPU metrics improvements
- 13:59ContainerD integration
- 16:07Rootless security in Garden
- 18:36Summary and future plans
related talks
22mEmbracing OCI and CNI Open Container Standards Between Garden & Friends
26mKeynote: A Platform for the Enterprise: Where Maturity and Innovation Intersect
11mOpening Remarks - Chip Childers, CTO, Cloud Foundry Foundation
32mThe Route To Rootless Containers
30mThe Route To Rootless Containers
14mcontainerd: Rootless Containers 2020
28mA Journey to the Center of the Cloud Foundry
30mContainers and Security on Planet X