LinuxCon + ContainerCon North America 2016

Back in the day, Containers were mostly a local development tool, only Trusted workloads were run inside them and it was expected that any given container could take all the resources of its host.

Over the past few years, things have changed a lot and Containers are now everywhere, from embedded systems all the way to the largest supercomputers. It is not unusual for there to be several hundred Containers running on any given system and having one of those bring the whole system down is simply unacceptable.

The Linux kernel offers a variety of features which combined together will let you restrict resource consumption for a given container as well as report resource usage back.

This talk will cover each of those and how to combine them to provide a good user experience, using the recent LXD work on resource limits as an example.