containerd was born from community desire for a core, standalone runtime to act as a piece of plumbing that applications like Kubernetes could use. It sits between command line tools like Docker, which it was spun out from, and lower-level runtimes like runC or gVisor, which execute the container’s code. This week’s guest is Derek McGowan, a Software Engineer at Docker and a containerd maintainer-d.

Along with the news of the week, Adam and Craig discuss the many Vancouvers.

Do you have something cool to share? Some questions? Let us know:

  • web: kubernetespodcast.com
  • mail: kubernetespodcast@google.com
  • twitter: @kubernetespod

Chatter of the week * Vancouver, Vancouver, and George Vancouver * South Bend, North Bend, and Bend * Cosmpolis * “50 Year Sensation: the Dave McMacken Retrospective” (album art show in Astoria, Oregon)

News of the week * Istio 1.3 is out * Google’s Anthos now incudes Anthos Service Mesh, Cloud Run for Anthos and more * Cloud Native Application Bundles hit 1.0 + Episode 61 with Ralph Squillace and Jeremy Rickard * Nominations for the annual CNCF Community Awards * Bloomberg hits 90% utilization with Kubernetes * Mistakes that “cost” thousands by Gajus Kuizinas * Kubernetes Edge working group publishes whitepaper * Isopod, by Cruise * Pulumi 1.0 * 5 RBAC mistakes you must avoid (number 4 will shock you) * OpenShift 4.2 disconnected install * Red Hat Quay 3.1 * Microsoft AKS brings Scale Sets and Standard LB to GA + Upstream kernel bugs * Amazom EKS adds cluster tagging and IAM roles for service accounts * Deep dive into AWS Fargate by Abhisheck Ray from Amazon * Kong introduces Kuma, “universal service mesh” * Google introduces Cloud Dataproc for Kubernetes * Apache Flink operator from Google Cloud * Container runtime security bypasses on Falco by Mark “Antitree” Manning * Rafay Systems lands $8m in Series A funding

Links from the interview * containerd * Original announcement * The many meanings of ‘container runtime’ * kubelet and Container Runtime Interfaces * runC, gVisor, Kata Containers, and the Windows Host Compute Service (HCS) * ctr debug tool * containerd’s graduation from the CNCF * containerd shim API + gVisor shim + Firecracker containerd integration + Kata Containers shim + Windows Container shim * rkt announced in 2014 with appC spec * Open Container Initiative + libcontainer, which became runC * Web Assembly (WASM) * BuildKit * 1.3.0 releases are coming * Contribution opportunities: + Reporting issues + Plugin ecosystem * Derek McGowan and containerd on Twitter