Name: 英特爾 Clear Containers 概述 - 英特爾軟件 (Intel Clear Containers Overview | Intel Software)
Uploaded: 2021-01-14T07:16:27.000Z
Duration: 6 min 47 s
Description: 【看影片學英語】數萬部 YouTube 影片，搭配英漢字典即點即查，輕鬆掌握單字發音與用法，長久累積看電影不必再看字幕。

Hi, I'm Amy Leland, and I
work at Intel's Open Source

I'm the program manager for
Intel's Clear Containers

We're going to talk a little
bit about what Intel Clear

Containers are and how they're
available in the ecosystem

today and how we integrate
with open source partners.

So I'm going to start
with the word container.

The word container is used for,
really, two separate parts.

There's the back end
technology of containers.

So Linux kernel containers
have been around

They're about resource
allocation and isolation.

And the other side of that is
the packaging and deployment

This is what's really
new in the industry

today, which companies
like Docker and Brockett

have made container
technology really easy to use.

This is a basic diagram of
a Linux kernel container.

And all of the containers
are sharing a Linux kernel.

And while there are many
benefits to container

technology-- so they're
fast, they're agile,

there's still a lot of
concerns around security.

This slide just
signifies that if there's

a kernel vulnerability that
seeps into one container,

it can go from one container
to the next container

Again this is due to the fact
that they share a Linux kernel.

And again, this leads to
a lot of security concerns

And as I said, I'm talking today
about Intel Clear Containers.

So when we looked at
the container ecosystem,

we said, OK, so virtual
machines are secure.

Intel Clear Containers is a
lightweight virtual machine.

but it has the security
benefits of a virtual machine.

So each container or
lightweight virtual machine

has its own operating system,
but it's a minimal operating

And again, we utilize Intel
VTX to secure each container

I always refer back to the
first part of this presentation.

So again, there's the back
end technology of containers--

And then there's the
front end application,

And what we're trying to do
is just offer another back end

deploy container technology
in a full-on virtual machine.

So the reality is is
that people are actually

deploying containers in
virtual machines already.

What we're doing is saying,
why wouldn't we just offer

a lightweight virtual machine
that, again, has the benefits,

the security of a
full-on virtual machine,

but then also all of the
benefits that containers

size, speed, logistics, all
the application and deployment

There's this virtual machine--
full-on virtual machine--

And again, we're just offering
another back end solution

And since Intel Clear Containers
is a back end technology

solution, we plug into the
application and deployment

tools that you're used to
within the container ecosystem.

So you can use Intel Clear
Containers with Kubernetes 1.5

and greater through
the CRI specification.

And we just released Intel
Clear Containers 2.1.

We currently package for
multiple Linux operating

So this is a subset of
Linux operating systems.

We definitely don't package for
every single Linux operating

with multiple different
Linux distributions.

are available on our
website for what's required

字幕列表影片播放

英特爾 Clear Containers 概述 - 英特爾軟件 (Intel Clear Containers Overview | Intel Software)

multiple

vulnerability

initiative

integrate