mesosandcontainers-151014055421-lva1-app6891.pdfVIP

MESOS CONTAINERS Overview of Mesos containerization and upcoming filesystem isolation support (a.k.a the docker like thing) Yan Xu xujyan WHAT IS A CONTAINER • Loosely defined: a lightweight “VM” / OS-level virtualization / “chroot on steroids”. • To Mesos: a per-task/executor isolated execution environment. DIMENSIONS OF CONTAINERIZATION • Performance isolation: resource quota limiting. e.g. mem isolation. • Isolated visibility from inside the container: stack separation, jailing. e.g., filesystem isolation. • Visibility from the host: inspection, metrics. Credit: /wp-content/uploads/2014/07/Fotolia-Oleksiy-MarkSub_M.jpg CONTAINERIZATION: A CORE PREMISE OF MESOS RESOURCE MANAGEMENT Can’t allocate resources without enforcement! A BRIEF HISTORY OF MESOS CONTAINERIZATION • LXC (2010) • Cgroups (2012) • Linux namespaces (2013) • Docker* (2014) THE TALE OF TWO CONTAINERIZERS • MesosContainerizer (default) Agent Mesos Docker Containerizer Containerizer • DockerContainerizer Isolators Isolators Docker • Dynamically chosen Isolators based on ContainerInfo Custom Docker if both are specified via executor executor --containerizers. CURRENT MESOS CONTAINERIZER LINEUP • Performance isolation • cpu, mem, disk quota, network egress bandwidth • Isolated visibility from inside • pid, network (port mapping) • Visibility