Decomposing container tools: Swiss Army Knives & containers
summary
Four focused tools replace one monolith: Buildah builds images (supports Dockerfiles, a “bud” shortcut and CPP includes), Skopeo copies and inspects images across transports and is 23 MB vs 210 MB for a comparable Docker client, Podman runs pods and containers rootless, daemonless with systemd generation and checkpoint/restore, and CRI-O implements a Kubernetes runtime with ~100 contributors and ~90 releases; live demos cover build→push→run and show features like checkpoint/restore working end-to-end.
AI-written summary · about
chapters (20)
- 0:00Intro
- 0:42Why are we using containers?
- 5:03The Life Cycle of a Container
- 10:10Red Hat's Containers Philosophy
- 11:45Building Containers
- 11:55Buildah ABC
- 15:27BASH - Buildah's scripting language
- 17:34Decomposing Dockerfiles
- 19:41Why a dedicated building tool?
- 21:00Distributing Containers
- 22:49Skopeo-born by the desire to inspect remote images
- 25:50Running Containers
- 30:31Container Runlabel - Let's get straight to it!
- 32:12Runlabel can execute any command on the host
- 33:14Podman Generate Systemd
- 35:53Systemd in Containers
- 38:58Podman Checkpoint & Restore
- 40:14Google Summer of Code Project 2019
- 40:34Generate Seccomp Profiles with Podman and eBPF
- 41:26Orchestrating Containers
related talks
49mJava Container Mastery: Optimizing Images Across Build Tools
27m50 Ways To Build Containers?
43mContainer images anti-patterns
26mStreamline Your App Development With the Power of Cloud Native Tools
32mDeveloping on Containers with Dev Containers
36mcontainerd Deep Dive
43mBuilding containers without DockerFile
01h 03mContainers for dotnet developers