Top Banner
OpenVZ Update Linux Containers Study Group#6 @ Tokyo Kentaro Ebisawa | 海老澤 健太郎 | Twitter: @ebiken
21

OpenVZ Update 2015/02/18 (English)

Jul 16, 2015

Download

Technology

Kentaro Ebisawa
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: OpenVZ Update 2015/02/18 (English)

OpenVZ Update

Linux Containers Study Group#6 @ Tokyo

Kentaro Ebisawa |海老澤健太郎 | Twitter: @ebiken

Page 2: OpenVZ Update 2015/02/18 (English)

Preface

• This Slide was created to share OpenVZ status update in 15min at Linux Containers Study Group#6 @Tokyo.• (Japanese) http://ct-study.connpass.com/event/10566/• (Japanese) https://sites.google.com/site/containerstudy/

•Most information are summary of / pointers to the information source such as announcements, ML discussions, presentations or repository.

• If you are interested in more detail, pls check the information source and share what you found with the community.

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 2

Page 3: OpenVZ Update 2015/02/18 (English)

List of Contents

1. OpenVZ statistics (snapshot as of 2015/02/18)

2. OpenVZ to be real open developmentFrom http://openvz.livejournal.com/49158.html

3. Parallels Cloud Server support in nova/libvirt (OpenStack)

4. Docker and OpenVZ … libCT / libcontainer / Go APIa. Make Docker working inside OpenVZ container.b. Merger of libct (by Parallels) and libcontainer (by Docker)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 3

Page 4: OpenVZ Update 2015/02/18 (English)

1. OpenVZ statistics (snapshot as of 2015/02/18)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 4

Page 5: OpenVZ Update 2015/02/18 (English)

1. OpenVZ statistics (snapshot as of 2015/02/18)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 5

Find more stats @ http://stats.openvz.org/• Top 10 Kernels• CPU Architecture, Memory, Swap Size

• Disk File Systems and Size• Software Counts per version

Page 6: OpenVZ Update 2015/02/18 (English)

2. OpenVZ to be real open development

• Actions planned to make OpenVZ to be real OPEN development.• Merge OpenVZ (Open Source) and Parallels Cloud Server (Proprietary)

• into a single common open source code base.

• Open the git repository of RHEL7-based Virtuozzo kernel. (early 2015)• Kernel development mailing list will also be made public.• Bug tracking, going to open up JIRA.

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 6

Announced on Dec 26th, 2014 : http://openvz.livejournal.com/49158.html

Page 7: OpenVZ Update 2015/02/18 (English)

What is “Parallels Cloud Server” aka PCS ?

• Cloud Server / Storage Solution in a Single Package.• Parallels Containers (Commercial OpenVZ)• Parallels Hypervisor (VMs)• Parallels Cloud Storage (Distributed storage integrated in host servers)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 7

Screenshots from “Introducing Parallels Cloud Storage” on YouTube: https://www.youtube.com/watch?v=6oEzW9w-1rg

Page 8: OpenVZ Update 2015/02/18 (English)

Merger Plan of OpenVZ + Parallels Cloud Server (PCS)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 8

CloudStorage

Containers

OpenVZ

Virtuozzo Core?OpenVZ ?

PCS(Parallels Cloud Server)

Add On (Proprietary)

Open Source

Hypervisor

Page 9: OpenVZ Update 2015/02/18 (English)

3. Parallels Cloud Server support in nova/libvirt (OpenStack)

•Parallels Cloud Server was supported in nova/libvirt driver.• 2015-02-05 : release name “kilo-2”

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 9

http://specs.openstack.org/openstack/nova-specs/specs/kilo/approved/pcs-support.html

Page 10: OpenVZ Update 2015/02/18 (English)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 10

VMs CTs

Launch yes yes

Reboot yes yes

Terminate yes yes

Resize yes yes

Rescue yes yes

Pause yes 1.

Un-pause yes 1.

Suspend yes yes

Resume yes yes

Inject Networking yes yes

Inject File yes yes

Serial Console Output yes no

VNC Console yes yes

SPICE Console no no

RDP Console no no

VMs CTs

Attach Volume yes 2.

Detach Volume yes 2.

Live Migration yes yes

Snapshot yes yes

iSCSI yes yes

iSCSI CHAP yes yes

Fibre Channel yes yes

Set Admin Pass yes yes

Get Guest Info yes yes

Glance Integration yes yes

Service Control no yes

VMs CTs

VLAN Networking yes yes

Flat Networking yes yes

Security Groups yes yes

Firewall Rules yes yes

nova diagnostics no no

Config Drive yes yes

Auto configure disk no yes

Evacuate yes yes

Volume swap yes 3.

Volume rate limiting 4. 4.

From “Parallels Cloud Server support in nova/libvirt driver”http://specs.openstack.org/openstack/nova-specs/specs/kilo/approved/pcs-support.htmlList of features we plan to support:

1. There are no technical problems with pausing containers it’s not implemented by now.2. It’s possible to attach volume to a container either as a block device or as a mount point, giving

both types of access simultaneously has a security problem.3. We can tune swap size in containers with vswap technology [4], not as a conventional swap disk.4. We can tune IO rate only for the whole instance but not for individual volumes.

Page 11: OpenVZ Update 2015/02/18 (English)

OpenVZ part will follow when merged with PCS

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 11

CloudStorage

Containers

OpenVZ

Virtuozzo Core?OpenVZ ?

PCS(Parallels Cloud Server)

Add On (Proprietary)

Open Source

Hypervisor

nova/libvirt support (ready)

nova/libvirt support(after merge)

Page 12: OpenVZ Update 2015/02/18 (English)

4. Docker and OpenVZ … libct / libcontainer / Go API

• Two topics

• a. Make Docker working inside OpenVZ container.

• b. Merger of libct (by Parallels) and libcontainer (by Docker)• Which makes OpenVZ available as a backend for Docker

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 12

Page 13: OpenVZ Update 2015/02/18 (English)

4-a. Running Docker Inside OpenVZ Container

•Beta released on 2015-02-11

•Requires Container tuning (via vzctl)

• Limitations• Only "vfs" Docker graph driver is

currently supported• Checkpointing and live migration of a

container with Docker containers inside is not supported

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 13

https://openvz.org/Docker_inside_CT

Page 14: OpenVZ Update 2015/02/18 (English)

4-b. Merger of libct (by Parallels) and libcontainer (by Docker)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 14

Announced @ DOCKERCON 2014 (June 10th)

Solomon Hykes at Dockercon 14 presenting Docker's philosophy and roadmap, and introducing new components of the platform.

http://www.slideshare.net/shykes/docker-the-road-ahead

Parallels Service Provider BLOG“Libcontainer: The Future Facilitator for Containerized Applications”

http://spblog.parallels.com/serviceprovider/2014/6/10/libcontainer-the-future-facilitator-for-containerized-applications

Page 15: OpenVZ Update 2015/02/18 (English)

4-b. Merger of libct (by Parallels) and libcontainer (by Docker)• libct (by Parallels)

• Objective: expose the granular capabilities of containers.• buildable linkable library with C/C++ and Python bindings. • Original Repo: https://github.com/xemul/libct

• libcontainer (by Docker)• Objective: orchestrate containers natively instead of relying on toolkits like LXC.• GO language based project• Original Repo: https://github.com/dotcloud/docker/tree/master/pkg/libcontainer/

• What’s possible after merger• OpenVZ : ability to deploy Docker on to the OpenVZ kernel• Docker : ability to do checkpoint/restore and live migration via CRIU• Become default library for Linux containers

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 15

Information from announcement from James Bottomley on linux containers MLhttps://lists.linux-foundation.org/pipermail/containers/2014-June/034669.html

Page 16: OpenVZ Update 2015/02/18 (English)

Before and After merger (Docker / LXC)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 16

Docker

libContainer

lxc

libLXC

mainstreamkernel

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

Page 17: OpenVZ Update 2015/02/18 (English)

Before and After merger (OpenVZ)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 17

mainstreamkernel

OpenVZkernel

libvzctl

vzctl

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

Page 18: OpenVZ Update 2015/02/18 (English)

Current and after merger (Docker / LXC / OpenVZ)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 18

Docker

libContainer(merged)

lxc

mainstreamkernel

OpenVZkernel

vzctl

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

C API

Go

AP

I

Page 19: OpenVZ Update 2015/02/18 (English)

libContainer(merged)

Py

AP

I

Current and after merger (Docker / LXC / OpenVZ / NOVA)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 19

Docker lxc

mainstreamkernel

OpenVZkernel

vzctl

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

C API

Go

AP

I

OpenStackNOVA

Page 20: OpenVZ Update 2015/02/18 (English)

Where can I find the repo and the status?

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 20

Actual integration started on 9th Oct 2014https://github.com/docker/libcontainer/pull/217

Page 21: OpenVZ Update 2015/02/18 (English)

Where can I find the repo and the status?

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 21

Repo: https://github.com/docker/libcontainer/Progress: https://github.com/docker/libcontainer/commits/api