Video and slides synchronized, mp3 and slide download available at URL https://bit.ly/2mV7h6c. Phil Estes talks about CRI implementations, and gives a hands-on demonstration of how Kubernetes, the CRI, and CRI-supporting runtimes work together to handle the container lifecycle within their K8s pods. He digs into the useful capabilities of the CRI and how to understand the inner workings between Kubernetes and the CRI container runtimes that support it. Filmed at qconnewyork.com. Phil Estes is a Distinguished Engineer & CTO, Container and Linux OS Architecture Strategy for the IBM Watson and Cloud Platform division. He is currently an OSS maintainer in the Docker engine project, the CNCF container project, and is a member of both the Open Container Initiative Technical Oversight Board and the Moby Technical Steering Committee.

1. @estesp
CRI Runtimes: Who
is running my pod?

2. InfoQ.com: News & Community Site
• 750,000 unique visitors/month
• Published in 4 languages (English, Chinese, Japanese and Brazilian
Portuguese)
• Post content from our QCon conferences
• News 15-20 / week
• Articles 3-4 / week
• Presentations (videos) 12-15 / week
• Interviews 2-3 / week
• Books 1 / month
Watch the video with slide
synchronization on InfoQ.com!
https://www.infoq.com/presentations/
cri-runtime-kubernetes

3. Presented at QCon New York
www.qconnewyork.com
Purpose of QCon
- to empower software development by facilitating the spread of
knowledge and innovation
Strategy
- practitioner-driven conference designed for YOU: influencers of
change and innovation in your teams
- speakers and topics driving the evolution and innovation
- connecting and catalyzing the influencers and innovators
Highlights
- attended by more than 12,000 delegates since 2007
- held in 9 cities worldwide

4. @estesp
Hello!
I’m Phil Estes
Distinguished Engineer & CTO,
Linux OS & Container Architecture
IBM Watson & Cloud Platform
Docker Captain, containerd maintainer
@estesp

5. @estesp
Docker Containers
$ docker run redis
$ docker ps
$ docker stop redis
$ docker build -t myapp .

6. @estesp
(See the CNCF CCoC CoC)
You are using Kubernetes aren’t you?
?

7. @estesp
orchestrator
Kubernetes is an

8. @estesp
kubelet dockershim dockerd
containerd
runc
https://github.com/kubernetes/kubernetes/tree/release-1.4/pkg/kubelet/dockershim
Kubernetes doesn’t run your containers

9. @estesp

10. @estesp
Kubernetes Container Runtime
CRI
▧ K8s API
▧ Storage
▧ Networking (CNI)
▧ Healthchecks
▧ Placement
▧ Custom resources
▧ Pod container
lifecycle
○ Start/stop/delete
▧ Image management
○ Push/pull/status
▧ Status
▧ Container interactions
○ attach, exec, ports, log

11. @estesp
kubelet
dockershim
dockerd
kubelet
cri-containerd
containerd
kubelet
cri-o
runc
kubelet
frakti
runV dockerd
kubelet --container-runtime {string}
--container-runtime-endpoint {string}
What Runtimes Exist?

12. @estesp
But...
why should I
care?

13. @estesp
The benefits of runtime
pluggability are mostly focused on
operational concerns.

14. @estesp
runtimes

15. @estesp
What do I need?
▧ Performance
▧ Stability
▧ (Optional) Hypervisor Isolation
▧ Security Capabilities
▧ Broad Usage
▧ Multi-architecture Support

16. @estesp
Containerd: A Core Runtime
runc
containerd

17. @estesp
Containerd Benefits
● Designed with broad usage as a
core container runtime:
○ Docker, LinuxKit, Kubernetes
and embedded core runtime
use cases (OpenWhisk, Cloud
Foundry)
● Stress testing for stability and
performance guarantees 24/7
● Usable Go library (or gRPC) for ease
of embedding
● Compatibility guarantees; bug fix
backports for stable support

18. @estesp
Containerd + CRI
https://kubernetes.io/blog/2018/05/24/kubernetes-containerd-integration-goes-ga/

19. @estesp
Containerd in the Cloud(s)
▧ Kelsey Hightower’s “Kubernetes the Hard Way”
deploys containerd as the kubelet runtime
▧ GKE alpha: containerd-based K8s clusters
▧ IBM Cloud: containerd-based clusters in staging
▧ Azure: OSS acs-engine includes containerd; AKS
moving to containerd (but CRI-O for OpenShift)
▧ Amazon: still reviewing runtime options for EKS
▧ CloudFoundry: moving to containerd from runc

20. @estesp
Kubernetes 1.11 + contained 1.1.0

21. @estesp
Demo time

22. @estesp
Going Further
▧ crictl User’s Guide:
https://github.com/containerd/cri/blob/master/docs/crictl.md
▧ Stephen Day’s KubeCon 2018 containerd talk:
https://www.youtube.com/watch?v=3AynH3c0F8M
▧ Containerd project:
https://github.com/containerd/containerd

23. @estesp
Thanks!
Any questions?
You can find me at:
@estesp
estesp@gmail.com

24. @estesp
Credits
Special thanks to all the people who made and
released these awesome resources for free:
▧ Presentation template by SlidesCarnival
▧ Photographs by Unsplash
▧ Backgrounds by Pixeden

25. Watch the video with slide synchronization on
InfoQ.com!
https://www.infoq.com/presentations/cri-
runtime-kubernetes