[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [atomic-devel] Docker project: Can you have overlay2 speed and density with devicemapper? Yep.

IMO, this doesn't really need any new knobs in the pod spec. This could be handled under the hood in the container runtime level (by config or default).

On Wed, Oct 26, 2016 at 11:44 AM, Jeremy Eder <jeder redhat com> wrote:
​If a user specifies read-only in their podspec...what does that translate to (it might be a distro-specific question).  IMO the --shared-rootfs should be the default when --read-only is specified, but it's not atm.

Vivek has implemented it for devicemapper first.  But the intent is that it will be added to most or all graph drivers, including overlay/overlay2.  It has the most benefit on devicemapper or btrfs which have unique inodes per container.

On Wed, Oct 26, 2016 at 2:20 PM, Vishnu Kannan <vishnuk google com> wrote:
*What* do you intend to surface to users? IIUC, this discussion is specific to device mapper storage drivers right?

On Tue, Oct 25, 2016 at 5:03 AM, Jeremy Eder <jeder redhat com> wrote:

Vivek Goyal (cc) and I were discussing ways to deliver page cache sharing, POSIX compliance and SELinux support with a single docker graph driver, using existing kernel facilities.  We decided to go with a bind-mount technique, and Vivek has posted a first cut here:  https://github.com/docker/docker/pull/27364

Testing of the prototype looks like a great improvement:

Assuming this type of feature is merged in a container run-time, what preference would Kube folks have for surfacing this to users ... currently it's a daemon runtime flag that says ... if you use --read-only then you get the shared-rootfs as well.  Obviously this requires "12factor-ish" design up front, because you can no longer scribble in the container filesystem in places that are not persistent volumes, but we think read-only container hygiene is well worth the security and performance improvements to be had.

You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-dev+unsubscribe googlegroups.com.
To post to this group, send email to kubernetes-dev googlegroups com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/CABxNGQa-VLzP%3DEFYQucfJtTEtSHmWac4Tv%3Dc%2BQVAFJNcDLSb1g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


-- Jeremy Eder

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]