Moby Summit (Los Angeles)

The Moby Summit is a small collaborative event taking place on Thursday 9/14/17 alongside the Open Source Summit North America. This summit is for container users who are actively maintaining, contributing or generally involved in the design and development of the Moby Project and it's components: runC/ containerd, LinuxKit, Infrakit, SwarmKit, HyperKit, DataKit, VPNKit, Notary, libnetwork, etc.

All revenue from ticket sales will be donated to a non-profit organization promoting diversity in the tech industry.

8:00am — 9:00am — Registration & Breakfast

9am — 9:10am: Introduction to the Moby Project & collaboration with CNCF (Patrick Chanezon & Manik Taneja)

9:10am — 10:10am — containerd talks

• Latest update on containerd by Stephen Day (Docker)

In this talk, Stephen will cover the progress of containerd, the adjusted scope and open items the team has been working on with the help of the community. Attendees will also be provided information on what containerd means for them and how it has shaped new upstream container initiatives.

• Kubernetes CRI containerd integration by Lantao Liu (Google)

The talk will firstly give a brief review of the runtime portability of Kubernetes, then talk about why containerd is attractive to Kubernetes, and then give a brief introduction and status update of Kubernetes Containerd Integration and a demo.

• Assessing container runtime performance with bucketbench by Phil Estes (IBM)

In this talk, we’ll briefly overview of the OpenWhisk serverless (function-as-a-service) framework that initially used the full Docker container engine as the execution vehicle for invoking user functions via containers. After several performance and stability challenges, this project decided to assess the various layers of the Docker engine (containerd and runC) as potential options for the function invoker. Out of that work came an open source project, bucketbench, that can be used to generate benchmarks of container lifecycle operations (e.g., start, stop, kill, remove, pause, unpause) and compare multithreaded operation throughput and stability of each optional engine.

This talk will provide details on the bucketbench project, explain how it has been used to generate performance data for these container runtimes, and shares lessons learned along the way that greatly impact container runtime performance, including bottlenecks in the Linux kernel.

In this talk you’ll learn how you can use bucketbench for your own performance tuning or assessment of container runtimes and how you can collaborate on improvements to the bucketbench project.

10:10am — 11:40pm — LinuxKit & Security talks

• LinuxKit: the first five months by Justin Cormack & Riyaz Faizullabhoy (Docker)

LinuxKit was launched five months ago, and has received a huge number of contributions from the Moby community. This talk will cover some of the large number of areas the community has contributed to, including: ARM64 support, bare metal support, containerd-cri integration with system containers and Kubernetes running on the same containerd and Wireguard for encrypted networking.

• Security Scanning & Notary & CNCF donation by David Lawrence (Docker)

Get updates on the Notary & TUF donation to CNCF along with information on proposed additions to the TUF specification. TUF is a living specification and there are a number of interesting proposals that have been submitted to meet distributed trust use cases, allowing one to incorporate multiple sources of trust into a process.

We’ll also look at what SIG Scanning has been up to and what the group will be taking on in the future. Find out about some of the standards we’re looking at integrating and the main use cases we believe SIG Scanning can help address.

11:40am — 12:20pm — BuildKit by Tonis Tonis Tiigi, Docker

12:20pm — 1:20pm — Lunch

1:20pm — 3:30pm — Birds of a Feather

1. runC / containerd

2. LinuxKit

3. Container Security

3:30pm — 4:00pm — BOFs recap + AMA / panel

A big thank you to the Cloud Native Computing Foundation (CNCF) for sponsoring the containerd sessions and BOF.