What is containerd ?

Purnima Kurella — Wed, 12 Jul 2023 19:06:53 +0000

containerd is a container runtime that manages the lifecycle of a container that is either hosted on a physical machine or a virtual machine, i.e it manages the process of creating, starting, stopping, and destroying containers. containerd is available as a daemon, meaning it is a computer program that runs as a background process rather than being under the direct control of an interactive user. It is available for both Linux and Windows. It also manages everything from image transfer and storage to container execution and supervision to low-level storage to network attachments and beyond.

When you are building a large platform or distributed system you want an abstraction layer between your management code and the syscalls and duct tape of features to run a container.That is where containerd lives.It provides a client layer of types that platforms can build on top of without ever having to drop down to the kernel level.

As a container runtime, containerd can:

Limit the total memory and CPU shares allocated to containers with cgroups.
Isolate the processes within a container, blocking it from seeing any host process.
Extract the container image into an isolated part of the host system, processing it within the container so it sees those files as its own entire file system. This ensures the container cannot access any other container’s files or the host files. containerd can also attach some parts of the host file system into the container when required.
Create a UID namespace where the UID 0 (root) within the container (root) maps to a different UID on the host system. This feature ensures that, should the container root process be able to access the host system, it’s blocked from running as root on the host.
Set up the environment variables within the container. Some variables may come from the container image as default, while containerd can assign others during the container execution.
Add or remove Linux capabilities when starting a container.
Allow you to create your own network namespace and provide it to containerd to attach it to a container when it starts.

containerd was created by Docker and donated it to the Cloud Native Computing Foundation (CNCF) so that the container community can have the basis for creating new container solutions.Containerd also supports the standards of the Open Container Initiative which is an open governance organization focused on container best practices.

containerd vs Docker :

Docker provides a broad set of technologies used to run and manage containers. One of those technologies is Docker Engine, a full-featured container runtime with advanced developer tools.

containerd is also a container runtime, based on Docker technology. You can use containerd on its own, as a bare-bones container runtime solution. Additionally, newer versions of Docker Engine use containerd behind the scenes.

What is DevOps and compare with SRE and DevSecOps?

Purnima Kurella — Thu, 06 Jul 2023 18:44:50 +0000

What is DevOps ?

Devops is a combination of Development and IT operations. DevOps is a set of technical practices, a culture and a mindset. It helps with close cooperation, automation, integration and communication. These things will happen among all people engaged in maintaining, releasing, deploying, testing, developing and planning a solution.

Why is DevOps Required? What are the benefits of DevOps?

Before the introduction of DevOps, operation and development teams in organizations worked in complete isolation. As all the teams operate separately, there will be further delays. Without DevOps, Teams will spend more time on testing, deploying, designing, also deployment of the software program using manual code can lead to human errors. So, Automation plays a key role in the execution of DevOps successfully.

Teamwork is Key. The DevOps setup suggests that cross-functional teams are the answer. Since everyone with an interest in the delivery of the programme must collaborate, developers, IT, and operations work together.

DevOps will help with improving efficiency. It improves stability and speed with software development and deployment. In turn, it can optimize the entire business. Above all, it will help you focus more on what matters the most and the focus will be on your customers. DevOps can also result in cost savings.

DevOps Lifecycle and List of DevOps Tools?

DevOps lifecycle consists of various automated processes in an iterative flow. Devops also involves various tools for various kinds and purposes, The tools help throughout the software development lifecycle. It is about choosing the right tool that fits an organization’s needs.

Continuous Development - Continuous development is the first phase in a DevOps lifecycle. It’s crucial since it involves planning the project and developing the code.
Tools for Continuous Development :
• For source code management (SCM), you can use Git, GitLab, Mercurial, and BitBucket.
• You can also package the code into executable files using Maven, Garden, Gradle, etc.
• For planning and collaboration, you can use Jira, Trello, etc.
Continuous Integration - Continuous Integration is the second most important part of all DevOps SDLC. Here, the developers work on the updated code or try to integrate the additional functionalities and features into the application.
Tools for CI: You can use Jenkins, TeamCity, GitLab CI, CircleCI, etc., for continuous integration.
Continuous Testing - Once the code is developed, team will test the software for all possible issues or bugs to ensure the software meets the client’s requirements.
Tools for testing: Popular software testing tools are Apache JMeter, Selenium, IBM Rational Performance Tester, Junit, WebLOAD, SoapUI, Acunetix, and Wapiti.
Continuous Deployment - It is the phase where the final code for the software will be deployed onto the main production servers.
Tools for CD: You can use Ansible, Puppet, Vagrant, GoCD, Chef, etc., for continuous deployment and Docker for containerization.
Continuous Feedback - Continuously taking feedback and working on them is an essential component of DevOps. It helps you understand the customer experience with your product after it’s deployed.
Tools for continuous feedback: Jira Service Management, Pendo, Slack, and GetFeedback.
Continuous Monitoring - With continuous monitoring, you can gain real-time, deeper visibility into your software’s overall performance, functionality, and health, from its infrastructure to high-end components.
Tools for monitoring: monitoring tools like New Relic, Nagios, Splunk, ELK Stack, Data Dog, Prometheus, and Grafana.
Continuous Operations - The final phase of the DevOps development life cycle is critical for ensuring high uptime and timely software maintenance.It’s about being able to quickly and securely identify anomalies, apply fixes and modify your infrastructure as quickly as possible.
Tools for continuous operations: You can use container orchestration systems such as Kubernetes, Docker Swarm, etc., for continuous operation.

What does a DevOps engineer do?

DevOps engineers are typically responsible for release engineering, provisioning and maintenance of infrastructure, system administration and security. Managing the CI/CD tooling or developing and maintaining automated test suites.Provisioning and maintaining automated CI/CD pipelines.Build/deploy scripts.Provision and manage virtual instances/physical servers. Deployment and maintenance, storage, and networking resources.Deployment automation, Monitoring and analytics.Containers and container orchestration.

How DevOps and SRE are different?

Site Reliability Engineering (SRE) uses software engineering to automate IT operations tasks. The word ‘Reliability’ signifies an SRE with a particular position in an organization. They focus is on creating and maintaining dependable web services that are up and running 24 hours a day, 7 days a week.

DevOps teams are focused on core development. But SREs are working on the implementation of the core. They are constantly giving feedback back into that core development group.

DevOps guys write code, test it and push it out into production to get an application line to help solve a problem. Whereas, SREs are more investigative. They are willing to do the analysis to find why something has gone wrong. They want to ensure that the same problems don’t keep happening.

DevOps is going to automate deployment. SRE is going to automate redundancy, and they're going to automate manual tasks to keep the stack up and running.

What is DevSecOps?

DevSecOps evolved to address the need to build in security continuously across the SDLC so that DevOps teams could deliver secure applications with speed and quality. DevSecOps involves ongoing, flexible collaboration between development, operations, and security teams. In short, DevOps focuses on speed; DevSecOps helps maintain velocity without compromising security.

Debug School: Purnima Kurella

What is containerd ?

What is DevOps and compare with SRE and DevSecOps?