An introduction to the Moby Project and LinuxKit. The demo essentially walked through the LinuxKit examples available on Github at https://github.com/linuxkit/linuxkit paying specific attention to the linuxkit.yml nginx example in the home directory, and the redis-os example in the examples directory.

1. Stephen Walli, @stephenrwalli
Introducing LinuxKit & Moby
May 2017

2. @stephenrwalli

3. Docker

4. The world needs
tools of mass innovation

5. A programmable Internet would be the ultimate
tool of mass innovation

6. A commercial product,
built on
a development platform,
built on
infrastructure,
built on
standards.
Docker is building a stack to program the Internet

7. Docker is building a stack to program the Internet
CE
EE

8. enterprise edition
Ubuntu
Fedora
Mac
Azure
CentOS
Windows 10
AWS
Debian
community edition
Ubuntu
Windows Server
Azure
CentOS
Suse
Red Hat
AWS
Oracle Linux

9. Docker is a platform made of components
Raft Store
Node
Identity
Secrets
Routing
Mesh
Overlay
Networking
Swarm Orchestration
Engine
Application Services

10. 12,000,000,000
11,000,000,000
10,000,000,000
9,000,000,000
8,000,000,000
7,000,000,000
6,000,000,000
5,000,000,000
4,000,000,000
3,000,000,000
2,000,000,000
1,000,000,000
Notary
runC
containerd
HyperKit , VPNKit, DataKit
SwarmKit
libcontainer
libnetwork
InfraKit
2013 2014 2015 2016 2017
1M
2014
PULLS
1B
2015
PULLS
6B
2016
PULLS
12B
2017
PULLS
linuxKit

11. LinuxKit
A toolkit for building secure, portable and
lean operating systems for containers

12. Taking Docker
multi-platform
“I want Docker for X”

13. Desktop Server Cloud
I want Docker for…

14. Not every
platform
provides a Linux
subsystem

15. Not every platform provides a Linux subsystem
Orchestration
Container Runtime
Linux Subsystem
Infrastructure Management
Application Services

16. The container
movement needs
a secure, lean,
portable
subsystem

17. The container movement needs
a secure, lean, portable Linux subsystem.

18. The container movement needs
a secure, lean, portable Linux subsystem.
introducing

19. Introducing LinuxKit
A secure, lean, portable Linux subsystem for the container movement
OrchestrationOrchestration
Container Runtime
Linux Subsystem
Infrastructure Management
Application Services

20. Only works with
containers
- Smaller attack
surface
- Immutable
infrastructure
- Sandboxed system
services
- Specialized patches
and configuration
Incubator for
security innovations
- Wireguard,
Landlock, KSPP
- MirageOS type
safe system
daemons
Community-first
security process
- Linux is too big
for any one
company to
secure it
- Participate in
existing Linux
security efforts
1. LinuxKit: a SECURE Linux subsystem

21. - Minimal size, minimal boot time
- All system services are containers
- Everything can be removed or
replaced
2. LinuxKit: a LEAN Linux subsystem

22. - Desktop, server, IoT, mainframe
- Intel & ARM
- Bare metal & virtualized
3. LinuxKit: a PORTABLE Linux subsystem

23. Docker and Microsoft collaborate to bring
Linux containers to Windows
+ +

24. https://github.com/linuxkit/linuxkit
Get Started with LinuxKit

25. Moby
An open framework to assemble specialized
container systems without reinventing the
wheel.

26. Pioneers 2013 - 2014

27. Production Model: open-source!

28. Use case: cloud native apps on Linux server
Early Adopters 2015 - 2016

29. Production Model: OPEN COMPONENTS

30. Mainstream 2017 - 2018
Containers are spreading to every category of computing:
server, datacenter, cloud, IoT, desktop, mobile…

31. Case study:
Specializing Docker for the mainstream
Desktop Server Cloud

32. The open component model shows its limits…

33. The auto industry has solved this problem:
COMMON ASSEMBLIES.

34. Scaling the Docker production model: share components
AND ASSEMBLIES.

35. It’s time to take our ecosystem to the next level…
By collaborating on components AND COMMON ASSEMBLIES.

37. – Library of 80+ components
– Package your own
components as containers
– Reference assemblies
deployed on millions of
nodes
– Create your own assemblies
or start from an existing one
A framework to assemble
specialized container
systems without
reinventing the wheel.

38. Docker uses Moby for its
open-source
– Thousands of contributors,
hundreds of patches/week
– Component development
– Specialized assembly
development
– Integration tests
– Architecture design
– Integration with other projects
– Experimentation and bleeding
edge features

39. Docker uses Moby for its
open-source...
and so can you!
– Community-run
– Open governance inspired by
the Fedora project
– Plays well with existing
projects - no donation
necessary!

40. What it means for you
Moby helps you
innovate without tying
you to Docker
System BuildersDocker Users
Docker will better
leverage the ecosystem
to innovate faster for you

41. Moby transforms multi-month R&D
projects into weekend projects.

42. locked-down
Linux with
remote
attestation
Weekend
project #1:
Notary

43. custom CI/CD
stack
Weekend
project #2:
Notary Registry Docker Builder
+

44. custom CI/CD
stack
+ Debian
+ Terraform
Weekend
project #3:
Notary Docker Builder
+
Registry

45. “RedisOS”
Weekend
project #4:

46. "RedisOS"
for Windows
"RedisOS"
for Mac
"RedisOS"
for bare metal
HyperKit
bare metal

47. Etcd clustering
on Google
Cloud
Weekend
project #5:

48. SSHD
Kubernetes on
the Mac
Weekend
project #6:
HyperKit

49. Getting Started
- Blog https://mobyproject.org/blog
- Twitter @moby
- Github moby/moby

50. Let’s take containers mainstream!

52. THANK YOU