B1 Intermediate US 39 Folder Collection
After playing the video, you can click or select the word to look it up in the dictionary.
Loading...
Report Subtitle Errors
[MUSIC PLAYING]
Hi, I'm Amy Leland, and I
work at Intel's Open Source

Technology Center.
I'm the program manager for
Intel's Clear Containers

Project.
We're going to talk a little
bit about what Intel Clear

Containers are and how they're
available in the ecosystem

today and how we integrate
with open source partners.

So I'm going to start
with the word container.

The word container is used for,
really, two separate parts.

There's the back end
technology of containers.

So Linux kernel containers
have been around

for a really long time.
They're about resource
allocation and isolation.

And the other side of that is
the packaging and deployment

of containers.
This is what's really
new in the industry

today, which companies
like Docker and Brockett

have made container
technology really easy to use.

This is a basic diagram of
a Linux kernel container.

And as you can
see, the isolation

is within the name-space.
And all of the containers
are sharing a Linux kernel.

And while there are many
benefits to container

technology-- so they're
fast, they're agile,

they're easy to use--
there's still a lot of
concerns around security.

This slide just
signifies that if there's

a kernel vulnerability that
seeps into one container,

it can go from one container
to the next container

to the next container
all on one host.

Again this is due to the fact
that they share a Linux kernel.

And again, this leads to
a lot of security concerns

in the container ecosystem.
And as I said, I'm talking today
about Intel Clear Containers.

So when we looked at
the container ecosystem,

we said, OK, so virtual
machines are secure.

But they're slow,
harder to manage,

and container
technology-- they've

got all this speed, agility.
They're very small in size.
And can we get the
best of both worlds?

Intel Clear Containers is a
lightweight virtual machine.

So it acts as fast
as a container,

but it has the security
benefits of a virtual machine.

And what we've done
is use Intel VTX.

So we use
hardware-based security

to secure each
container on a host.

So each container or
lightweight virtual machine

has its own operating system,
but it's a minimal operating

system.
And again, we utilize Intel
VTX to secure each container

on the system.
I always refer back to the
first part of this presentation.

So again, there's the back
end technology of containers--

Linux kernel containers.
And then there's the
front end application,

logistics, deployment.
And what we're trying to do
is just offer another back end

solution in the market.
The reality today
is that most people

deploy container technology
in a full-on virtual machine.

You can see this
as people deploy

on AWS or many other clouds.
So the reality is is
that people are actually

deploying containers in
virtual machines already.

What we're doing is saying,
why wouldn't we just offer

a lightweight virtual machine
that, again, has the benefits,

the security of a
full-on virtual machine,

but then also all of the
benefits that containers

offer--
size, speed, logistics, all
the application and deployment

frameworks.
Before Intel Clear
Containers, there

was really only two options.
There's this virtual machine--
full-on virtual machine--

or a container
technology solution.

And again, we're just offering
another back end solution

into the ecosystem.
And since Intel Clear Containers
is a back end technology

solution, we plug into the
application and deployment

tools that you're used to
within the container ecosystem.

We plug into Docker
1.12 and greater--

I think up until 1703.
We also plug into
not Kubernetes.

So you can use Intel Clear
Containers with Kubernetes 1.5

and greater through
the CRI specification.

We're available for Rocket 1.0.
And we just released Intel
Clear Containers 2.1.

It's available on Github.
We currently package for
multiple Linux operating

systems.
So this is a subset of
Linux operating systems.

We definitely don't package for
every single Linux operating

system that's out there.
But Intel Clear
Containers does work

with multiple different
Linux distributions.

And we have some
requirements that

are available on our
website for what's required

to run Intel Clear Containers.
But you should be
able to run them

with any Linux
distribution, as long as you

follow those guidelines.
So there's a lot of
container specifications

that are out there today.
And we try to work both
upstream and downstream.

And so I'm going to
talk through that.

The Open Container Initiative--
OCI-- is one specification
that's out there.

And we are compliant
with that specification.

We also are compliant
with APPC, which

is another specification
in the container ecosystem.

We are compliant with CRI--
the Container
Runtime Interface--

that Google and Red Hat started.
And this is the
primary interface

to work with Kubernetes,
which I talked about earlier.

We have also added support
for Intel Clear Containers

in the container
networking space.

So there's two specifications
that are out there today.

There's CNI and CNN.
And we've added the
ability to support

lightweight virtual machines
in those specifications.

So again, we're available
for both CNI and CNN.

And in terms of
downstream proliferation,

we're working with the likes
of Docker, Rocket, Kubernetes

to be integrated within
those communities.

But we also want to
partner with companies--

OSV's, ISV's,
Integrators, and CSP's--

to offer go-to-market solutions.
Intel Clear Containers
is an open source project

that Intel is a part of.
And again, we want to
work with our partners

to offer go-to-market solutions.
I want to thank you for
spending time with me today

to learn about Intel Clear
Containers, what they are,

and who we're working
with, and how they're

available in the market.
And I really
appreciate your time.

Thank you.
[MUSIC PLAYING]
    You must  Log in  to get the function.
Tip: Click on the article or the word in the subtitle to get translation quickly!

Loading…

Intel Clear Containers Overview | Intel Software

39 Folder Collection
alex published on January 31, 2018
More Recommended Videos
  1. 1. Search word

    Select word on the caption to look it up in the dictionary!

  2. 2. Repeat single sentence

    Repeat the same sentence to enhance listening ability

  3. 3. Shortcut

    Shortcut!

  4. 4. Close caption

    Close the English caption

  5. 5. Embed

    Embed the video to your blog

  6. 6. Unfold

    Hide right panel

  1. Listening Quiz

    Listening Quiz!

  1. Click to open your notebook

  1. UrbanDictionary 俚語字典整合查詢。一般字典查詢不到你滿意的解譯,不妨使用「俚語字典」,或許會讓你有滿意的答案喔