21
OpenVZ Update Linux Containers Study Group#6 @ Tokyo Kentaro Ebisawa | 海老澤 健太郎 | Twitter: @ebiken

OpenVZ Update 2015/02/18 (English)

Embed Size (px)

Citation preview

OpenVZ Update

Linux Containers Study Group#6 @ Tokyo

Kentaro Ebisawa |海老澤健太郎 | Twitter: @ebiken

Preface

• This Slide was created to share OpenVZ status update in 15min at Linux Containers Study Group#6 @Tokyo.• (Japanese) http://ct-study.connpass.com/event/10566/• (Japanese) https://sites.google.com/site/containerstudy/

•Most information are summary of / pointers to the information source such as announcements, ML discussions, presentations or repository.

• If you are interested in more detail, pls check the information source and share what you found with the community.

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 2

List of Contents

1. OpenVZ statistics (snapshot as of 2015/02/18)

2. OpenVZ to be real open developmentFrom http://openvz.livejournal.com/49158.html

3. Parallels Cloud Server support in nova/libvirt (OpenStack)

4. Docker and OpenVZ … libCT / libcontainer / Go APIa. Make Docker working inside OpenVZ container.b. Merger of libct (by Parallels) and libcontainer (by Docker)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 3

1. OpenVZ statistics (snapshot as of 2015/02/18)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 4

1. OpenVZ statistics (snapshot as of 2015/02/18)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 5

Find more stats @ http://stats.openvz.org/• Top 10 Kernels• CPU Architecture, Memory, Swap Size

• Disk File Systems and Size• Software Counts per version

2. OpenVZ to be real open development

• Actions planned to make OpenVZ to be real OPEN development.• Merge OpenVZ (Open Source) and Parallels Cloud Server (Proprietary)

• into a single common open source code base.

• Open the git repository of RHEL7-based Virtuozzo kernel. (early 2015)• Kernel development mailing list will also be made public.• Bug tracking, going to open up JIRA.

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 6

Announced on Dec 26th, 2014 : http://openvz.livejournal.com/49158.html

What is “Parallels Cloud Server” aka PCS ?

• Cloud Server / Storage Solution in a Single Package.• Parallels Containers (Commercial OpenVZ)• Parallels Hypervisor (VMs)• Parallels Cloud Storage (Distributed storage integrated in host servers)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 7

Screenshots from “Introducing Parallels Cloud Storage” on YouTube: https://www.youtube.com/watch?v=6oEzW9w-1rg

Merger Plan of OpenVZ + Parallels Cloud Server (PCS)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 8

CloudStorage

Containers

OpenVZ

Virtuozzo Core?OpenVZ ?

PCS(Parallels Cloud Server)

Add On (Proprietary)

Open Source

Hypervisor

3. Parallels Cloud Server support in nova/libvirt (OpenStack)

•Parallels Cloud Server was supported in nova/libvirt driver.• 2015-02-05 : release name “kilo-2”

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 9

http://specs.openstack.org/openstack/nova-specs/specs/kilo/approved/pcs-support.html

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 10

VMs CTs

Launch yes yes

Reboot yes yes

Terminate yes yes

Resize yes yes

Rescue yes yes

Pause yes 1.

Un-pause yes 1.

Suspend yes yes

Resume yes yes

Inject Networking yes yes

Inject File yes yes

Serial Console Output yes no

VNC Console yes yes

SPICE Console no no

RDP Console no no

VMs CTs

Attach Volume yes 2.

Detach Volume yes 2.

Live Migration yes yes

Snapshot yes yes

iSCSI yes yes

iSCSI CHAP yes yes

Fibre Channel yes yes

Set Admin Pass yes yes

Get Guest Info yes yes

Glance Integration yes yes

Service Control no yes

VMs CTs

VLAN Networking yes yes

Flat Networking yes yes

Security Groups yes yes

Firewall Rules yes yes

nova diagnostics no no

Config Drive yes yes

Auto configure disk no yes

Evacuate yes yes

Volume swap yes 3.

Volume rate limiting 4. 4.

From “Parallels Cloud Server support in nova/libvirt driver”http://specs.openstack.org/openstack/nova-specs/specs/kilo/approved/pcs-support.htmlList of features we plan to support:

1. There are no technical problems with pausing containers it’s not implemented by now.2. It’s possible to attach volume to a container either as a block device or as a mount point, giving

both types of access simultaneously has a security problem.3. We can tune swap size in containers with vswap technology [4], not as a conventional swap disk.4. We can tune IO rate only for the whole instance but not for individual volumes.

OpenVZ part will follow when merged with PCS

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 11

CloudStorage

Containers

OpenVZ

Virtuozzo Core?OpenVZ ?

PCS(Parallels Cloud Server)

Add On (Proprietary)

Open Source

Hypervisor

nova/libvirt support (ready)

nova/libvirt support(after merge)

4. Docker and OpenVZ … libct / libcontainer / Go API

• Two topics

• a. Make Docker working inside OpenVZ container.

• b. Merger of libct (by Parallels) and libcontainer (by Docker)• Which makes OpenVZ available as a backend for Docker

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 12

4-a. Running Docker Inside OpenVZ Container

•Beta released on 2015-02-11

•Requires Container tuning (via vzctl)

• Limitations• Only "vfs" Docker graph driver is

currently supported• Checkpointing and live migration of a

container with Docker containers inside is not supported

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 13

https://openvz.org/Docker_inside_CT

4-b. Merger of libct (by Parallels) and libcontainer (by Docker)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 14

Announced @ DOCKERCON 2014 (June 10th)

Solomon Hykes at Dockercon 14 presenting Docker's philosophy and roadmap, and introducing new components of the platform.

http://www.slideshare.net/shykes/docker-the-road-ahead

Parallels Service Provider BLOG“Libcontainer: The Future Facilitator for Containerized Applications”

http://spblog.parallels.com/serviceprovider/2014/6/10/libcontainer-the-future-facilitator-for-containerized-applications

4-b. Merger of libct (by Parallels) and libcontainer (by Docker)• libct (by Parallels)

• Objective: expose the granular capabilities of containers.• buildable linkable library with C/C++ and Python bindings. • Original Repo: https://github.com/xemul/libct

• libcontainer (by Docker)• Objective: orchestrate containers natively instead of relying on toolkits like LXC.• GO language based project• Original Repo: https://github.com/dotcloud/docker/tree/master/pkg/libcontainer/

• What’s possible after merger• OpenVZ : ability to deploy Docker on to the OpenVZ kernel• Docker : ability to do checkpoint/restore and live migration via CRIU• Become default library for Linux containers

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 15

Information from announcement from James Bottomley on linux containers MLhttps://lists.linux-foundation.org/pipermail/containers/2014-June/034669.html

Before and After merger (Docker / LXC)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 16

Docker

libContainer

lxc

libLXC

mainstreamkernel

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

Before and After merger (OpenVZ)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 17

mainstreamkernel

OpenVZkernel

libvzctl

vzctl

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

Current and after merger (Docker / LXC / OpenVZ)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 18

Docker

libContainer(merged)

lxc

mainstreamkernel

OpenVZkernel

vzctl

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

C API

Go

AP

I

libContainer(merged)

Py

AP

I

Current and after merger (Docker / LXC / OpenVZ / NOVA)

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 19

Docker lxc

mainstreamkernel

OpenVZkernel

vzctl

From Slide 16, 17, 18 : Kонтейнерная виртуализация в продуктах parallels прошлое, настоящее и будущее.http://www.slideshare.net/WG_Talks/k-parallels?qid=bda20668-c00b-446b-8fc4-409b81eebaa3

C API

Go

AP

I

OpenStackNOVA

Where can I find the repo and the status?

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 20

Actual integration started on 9th Oct 2014https://github.com/docker/libcontainer/pull/217

Where can I find the repo and the status?

Linux Containers Study Group#6 @ Tokyo | 2015/02/18 | @ebiken 21

Repo: https://github.com/docker/libcontainer/Progress: https://github.com/docker/libcontainer/commits/api