Container Runtimes/Managers & Base Images. Podman, Buildah & Skopeo

Container Runtimes/Managers, Base Images and Container Tools. Podman, Buildah & Skopeo

• Introduction
• OCI Project
  • OCI Runtimes
    • runc
    • crun
  • OCI Monitors
• Container Managers / Container Runtimes (CRI runtimes)
  • CRI-O
  • Podman. Pod Manager tool
    • Containers In High Security Environments with Podman
• Container Images
  • Red Hat Universal Base Image
• Container Tools
  • Buildah
  • Skopeo

Introduction

• A Practical Introduction to Container Terminology

OCI Project

• OCI: Open Container Initiative

OCI Runtimes

runc

• runc CLI tool for spawning and running containers according to the OCI specification

crun

• crun A fast and lightweight fully featured OCI runtime and C library for running containers

OCI Monitors

• Conmon An OCI container runtime monitor.

Container Managers / Container Runtimes (CRI runtimes)

• Kubernetes.io: Container runtimes
• Docker
• containerd.io
• Frakti

CRI-O

• cri-o.io Lightweight Container Runtime for Kubernetes
• Why Red Hat is investing in CRI-O and Podman

Podman. Pod Manager tool

• Podman.io
• Libpod: Library and tool for running OCI-based containers in Pods
  • Libpod is a library used to create container pods. Home of Podman.
  • Libpod provides a library for applications looking to use the Container Pod concept, popularized by Kubernetes. Libpod also contains the Pod Manager tool (Podman). Podman manages pods, containers, container images, and container volumes.
• Intro to Podman
• developer.ibm.com: How templating works with Podman, Kubernetes, and Red Hat OpenShift
• redhat.com: Be careful when pulling images by short name
• developers.redhat.com: Podman and Buildah for Docker users 🌟

Containers In High Security Environments with Podman

• Build trusted pipelines/Guards with Podman containers Container technology makes develoment easier/cheaper & much more secure. SELinux,SECCOMP,Namespaces,Dropped Capabilities.

Container Images

Red Hat Universal Base Image

• Introducing the Red Hat Universal Base Image 🌟
• What is Red Hat Universal Base Image?
• RH Universal Base Image FAQ
• Red Hat Ecosystem Catalog

Container Tools

Buildah

• Buildah.io A tool that facilitates building Open Container Initiative (OCI) container images
  • github.com/containers/buildah

Skopeo

• Skopeo is a command line utility that performs various operations on container images and image repositories.
• Promoting container images between registries with skopeo