Community

Blog Events Webinars Tutorials Forum
  1. Blog
  2. Events
  3. Webinars
  4. Tutorials
  5. Forum
Create Account
×
Community Blog PouchContainer: How OCI Specifications Power Alibaba

PouchContainer: How OCI Specifications Power Alibaba

PouchContainer's vision is to advance container ecosystem and promote container standards in the Open Container Initiative (OCI), so that container te...

By Allen Sun, Alibaba Group

PouchContainer is an open source container project created by Alibaba Group to be enterprise ready and promote OCI container standards. The project is a fundamental piece of software in Alibaba's infrastructure, it helps process transactions smoothly on millions of containers.

To become a general container engine for every scenario in production, PouchContainer seeks ways to support several OCI-compatible container runtimes. This action makes container service totally out of box:

  1. runc: container runtime based on Linux cgroups and namespaces;
  2. katacontainers: container runtime based on hypervisor; and
  3. runlxc: container runtime based on LXC especially on legacy kernels.

Architecture Based on OCI and Open Source Components

1

Three OCI-compatible runtimes are listed in the middle right part of architecture.

Features

PouchContainer's most important features are:

  1. Rich container: Besides the common ways of running container, PouchContainer includes a rich container mode, which integrates more services, hooks, and many others container internals to guarantee containers running like usual.
  2. Strong isolation: PouchContainer is designed to be secure by default. It includes lots of security features, like hypervisor-based container technology, lxcfs, directory disk quota, patched Linux kernel and so on.
  3. P2P distribution: PouchContainer utilizes Dragonfly, a P2P-based distribution system, to achieve lightning-fast container image distribution.
  4. Kernel compatibility: Enables OCI-compatible runtimes to work on old kernel versions, like linux kernel 2.6.32+.
  5. Standard compatibility: PouchContainer keeps embracing container ecosystem to support industry specifications such as CNI, CSI and so on.
  6. Kubernetes Native: PouchContainer has natively implemented Kubernetes Container Runtime Interface (CRI).

Learn More About PouchContainer

PouchContainer brings many additional features to end-users. Want to learn more? Please visit the PouchContainer GitHub, where the PouchContainer community is currently busy preparing the 1.0.0 GA release.

Source: https://www.opencontainers.org/blog/2018/08/29/pouchcontainer

Container Computing Open Source Pouch OCI Resource Monitoring Kubernetes
0 0 0
Share on

Read previous post:

Establishing a Network with PouchContainer

Read next post:

Open Container Initiative Welcomes Alibaba Cloud as Newest Member

Alibaba Cloud Native Community

376 posts | 41 followers

You may also like

Comments

Alibaba Cloud Native Community

376 posts | 41 followers

Related Products

  • Resource Management

    Organize and manage your resources in a hierarchical manner by using resource directories, folders, accounts, and resource groups.

    Learn More

  • ACK One

    Provides a control plane to allow users to manage Kubernetes clusters that run based on different infrastructure resources

    Learn More

  • Container Registry

    A secure image hosting platform providing containerized image lifecycle management

    Learn More

  • Function Compute

    Alibaba Cloud Function Compute is a fully-managed event-driven compute service. It allows you to focus on writing and uploading code without the need to manage infrastructure such as servers.

    Learn More

More Posts by Alibaba Cloud Native Community

See All