Docker Engine - Breakout session.pdfVIP

Docker Engine - Breakout session Arnaud Porterie, eng. manager Michael Crosby, chief maintainer Agenda • Engine quick facts • What’s new in Docker Engine 1.7.0 • What’s coming next - Demo! • QA Engine quick facts What’s the Docker Engine? Engine quick facts • Central piece of the Docker platform - Docker daemon + docker CLI • Engine by the numbers - 963 contributors - 71 pull requests on average merged each week • /docker/docker/ What’s new in Engine 1.7.0 A tour of the major new features Experimental binary • A new flavor of the Docker engine - Built and distributed nightly - Bleeding edge features: we want your feedback! • First experimental features - New networking model - Network plugins - Volume plugins • Network stack • Introducing libnetwork - Whole new API (Container Networking Model) • A much needed technical effort - Solid ground for better default batteries - Single extension point for alternative batteries • /docker/libnetwork/ Better network performance • docker -d --userland-proxy=false - Huge performance improvement for port publishing • Not the default - Relies on Hairpinning - Introduced in 2.6.32, still an issue on some distros And many more! • ZFS storage driver • docker build --cpu-quota … • docker build /x/y#branch • docker exec -u|--user • … What’s next Better tooling • Community wants choices - Push/pull without Docker (and vice-versa) - Containers without the daemon - … • Objective: spin-out runtime, builder, trust, … Security • Trusted image distribution • User namespaces • Syscall filtering with seccomp - Already supported by libcontainer • Engine security profiles - Simple way to express security constraints - Single file for capabilities, AppArmor, seccomp, … Networks volumes management • Top-level network concept - Already in exper