Carolyn Van Slyck
namespaces + cgroups = ISOLATION
Isolation without virtualization
Restrict resource usage: CPU, RAM, IO, Network
The Matrix is everywhere. It is all around us. Even now, in this very room. You can see it when you look out your window or when you turn on your television. You can feel it when you go to work... when you go to church... when you pay your taxes. It is the world that has been pulled over your eyes to blind you from the truth...
That you are a slave, Neo. Like everyone else you were born into bondage. Into a prison that you cannot taste or see or touch. A prison for your mind.
Morpheus in The Matrix
linux container + packaging + tools
Docker took something that previously was only an option for highly motivated sysadmins, and gave it away to the masses. Carolyn Van Slyck
docker run --detach --volume `pwd`:/var/www --publish 80:80 nginx
Moves knowledge on how to run your app out of a readme and into code
VMs | Docker | Chef | |
---|---|---|---|
Isolated | ✅ | ✅ | ❌ |
Repeatable | ✅ | ✅ | ✅ |
Sharable | ✅ | ✅ | ✅ |
Maintainable | ❌ | ❌ | ✅ |
Dockerfile
FROM ubuntu:16.04
COPY bin/Linux/x86_64/magic /
CMD ["/magic"]
docker build -t carolynvs/magic .
docker push carolynvs/magic
docker run --rm carolynvs/magic