Linux container technology allows a customer to carve a system out into isolated containers and run applications securely within the confines of the containers. It facilitates multi-tenancy, which allows IT organizations to take better advantage of the large servers available in their datacenters. While multitenancy provides flexibility for server resource management, especially for service providers, it introduces additional complexity, especially related to the security of applications and data that reside on the same server. Daniel will discuss resource management, namespacing, and the use of SELinux to tighten the security of Linux containers.
Red Hat and the open source community have been working on new tools for using OCI containers. The goal of these tools is to break down the concepts of defining, pulling, storing and running containers into their base components. Then we build tools to run these containers with as much security as possible. This talk will explain the process and the tools and how they can be used more securely then current technologies. In this session, we'll demonstrate some of those new tools, including: * CRI-O for supporting Kubernetes workloads. * Buildah for building container images. * Skopeo for moving container images between container registries and stores. * Podman for running traditional command line containers.
HPC systems are so strongly dependent on facility power and cooling that the building essentially becomes part of the computer. This marriage between computer and facility has moments of happiness as well as relationship storms. The first problem in the relationship starts with the requirements and design phase where experienced HPC staff and architects must come together with crystal balls and magic to design a facility to support systems that have yet to be invented. How much power do we really need? How are we going to cool these systems? What about building controls and monitoring? Next comes the happy day of value-engineering. ☹ This presentation will share lessons learned through this phase. Stay tuned next year for the update on construction and commissioning. All of this effort is hopefully leading to a happy marriage between machine and facility.
