containers

Liz Rice live-codes a minimal container runtime in a few lines of Go at GOTO Amsterdam 2018. She explains namespaces, control groups and what a host knows about its containers.

Jérôme Petazzoni explains how Linux containers are built from kernel features like cgroups, namespaces and SELinux. He demonstrates putting the pieces together by hand to make a container and compares runtimes and approaches like jails and zones.

Bryan Cantrill's Velocity NYC 2015 talk argues for running containers directly on bare metal rather than layering them on virtual machines. He covers the history of containers and how SmartOS runs Linux workloads via syscall emulation.

Solomon Hykes shows Docker to the public for the first time in a five-minute lightning talk at PyCon 2013. It demos Linux containers and the simplicity of a Dockerfile.

FOSDEM 2020 talk from Collabora on pressure-vessel, an experimental mechanism that puts Steam games in containers on Linux. It covers using namespaces to give games their own runtime library stack independent of the host.

Bryan Cantrill's illumos Day 2014 talk on running Linux containers on an illumos kernel via LX-branded zones. He covers emulating Linux syscalls on SmartOS and compares Linux and Solaris-derived systems.

Sal Mercogliano of What's Going on With Shipping? discusses a debate between the Center for Maritime Strategy and the Heritage Foundation over whether the Jones Act helps or harms American shipping and national security.

Jessie Frazelle's DockerCon SF 2015 talk on running Docker containers for desktop applications, with fun container hacks and images. It shows how far containers can be pushed beyond servers.

An episode of the BSD Now podcast in which Bryan Cantrill joins the hosts to rant about Linux interfaces, alongside the week's BSD headlines. The conversation also touches on containers and related systems topics.

Liz Rice builds a container from scratch in about 100 lines of Go, showing that a container is not a lightweight VM but a set of Linux kernel features and flags.

A Google I/O 2019 talk explaining the architecture of Linux on Chromebooks (Crostini), a sandboxed Linux development environment built on containers inside a VM, with demos and design rationale.

Bryan Cantrill's Papers We Love talk on FreeBSD Jails and Solaris Zones, tracing how OS-level virtualization grew out of chroot and the limits of the traditional UNIX security model.

A BSD Now episode featuring a long interview with Joyent CTO Bryan Cantrill on dtrace, ZFS, pkgsrc, containers and more. It includes his rant on why Linux epoll is flawed and stories from Sun.

Daniel Azuma's ElixirConf 2018 talk on whether Docker and OTP conflict. He shows they can coexist and uses Horde and DeltaCrdt, with a live tank-game demo, to keep state alive across container kills.

Sean Parent's CppCon 2015 talk on better use of standard containers and the goal of having no incidental data structures. It argues that proper containers can greatly simplify code.

The official Kubernetes documentary, part 1, tells how a handful of Google engineers, inspired by Docker's success, built a container orchestrator. It covers the internal resistance to open source and the competition of the container orchestrator wars.

FreeBSD developer Benno Rice traces the history of init and bootstrap systems at linux.conf.au 2019 to explain why systemd was seen as necessary and why it provokes such strong reactions. He also discusses why change is scary.

Casey Muratori's long talk arguing that modern software has ballooned to tens of millions of lines because of hardware and OS diversity. He proposes a stable ISA for entire system-on-a-chip packages and recalls when games shipped with their own boot disk.

Brian Kernighan interviews Unix co-creator Ken Thompson at VCF East 2019. Thompson recounts how he was hired at Bell Labs, writing the Unix kernel in about three weeks, the origins of B and TMG, pipes, and other anecdotes.

Bryan Cantrill's LISA11 talk on how illumos arose after Oracle closed OpenSolaris. It covers the history of Sun, ZFS, DTrace and Zones, and the diaspora of kernel engineers, with a famous rant about Oracle and Larry Ellison.

Timothy Roscoe of ETH Zurich delivers the joint USENIX ATC/OSDI 2021 keynote arguing that operating systems must reckon with modern hardware, which is a heterogeneous collection of processors, firmware and coprocessors rather than a simple machine. It shows how much runs below and beside Linux.

A 1982 Bell Labs film hosted by Victor Vyssotsky on the origins and design philosophy of the UNIX operating system, with appearances by Kernighan, Thompson and Ritchie. It shows pipes, filters and a shell one-liner spell checker being built.

Fredrik Knudsen's 86-minute documentary on Terry A. Davis, creator of TempleOS, tracing his work, his schizophrenia and his decline. It is a chronological video essay built on his public posts and videos.

A short animated simulation comparing how Multics and Unix were developed, showing why Unix's small composable programs and pipes gave it a efficiency advantage. It frames Unix as a moonshot achievable by a small team.

Paul Turner of Google presents kernel interfaces for user-level scheduling of real threads, aiming at a uniform synchronous programming model across C++, Java, Go and Python. It introduces the switchto-style system calls behind Google's fibers.

Bryan Cantrill of Joyent presents Manta, an internet-facing object store that lets you run compute directly on the data. The talk is peppered with ZFS history and Cantrill's trademark commentary on the industry.

Larry Hastings explains what Python's GIL is, what problems it solves and how it works, and presents his Gilectomy project to remove it, including the performance and C-extension obstacles.

A 1982 AT&T Bell Labs film for students about the Unix system and how it can be used practically. It includes Lorinda Cherry building a talking calculator by piping together Unix commands, and a spell checker made from Unix utilities.

A Computer History Museum oral history with Avie Tevanian covering his math talent, work on the Mach microkernel at CMU, joining NeXT, leading NEXTSTEP development and the 1996 Apple acquisition.

Bryan Cantrill's 2007 Google Tech Talk on DTrace, showing how dynamic tracing improves debugging of both development and live production systems. It includes a vivid war story about tracking down a problem on a Sun Ray server.

X.Org developer Daniel Stone explains the history and technical limits of the X Window System and why Wayland was created, debunking myths from forum comments. He covers topics such as network transparency and blocking calls.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Rob Landley compares Toybox and BusyBox and surveys options for embedded system command-line tools, including GNU. He also tells the story of leaving BusyBox, Toybox becoming Android's command line, and licensing.

Andrew Tanenbaum's FOSDEM 2010 talk on MINIX 3, a microkernel OS built for high reliability and security. It shows how the system detects and recovers from device driver crashes, and addresses microkernel performance concerns.

Benno Rice's BSDCan 2018 talk on why systemd exists and what it got right and wrong. It traces the history of Unix init and why Linux distributions adopted it, while asking what the BSDs should learn.

Benno Rice's linux.conf.au 2020 talk asks whether UNIX was the best design we could have had. He looks at what alternatives existed, what was gained and lost, and what could be re-learned, including the limits of treating everything as a file.

NCommander investigates why Space Cadet Pinball disappeared from Windows Vista, building on Raymond Chen's explanation about 64-bit incompatibility. He tests it on 64-bit Windows including Itanium and walks through the debugging.

A talk by Yuri Iozzelli at a WebAssembly meetup on CheerpX, an x86 virtual machine running in the browser. It uses a JIT compiler that emits WebAssembly at runtime to run real native applications. It covers the architecture and demos such as porting a multiplayer C++ game.

Kirk McKusick gives a narrative history of BSD from its start at UC Berkeley in the late 1970s through the 1980s releases and the lawsuit that led to 4.4BSD-Lite in 1992. It is full of anecdotes from a key developer.

Tony Chen of Microsoft explains at BlueHat Seattle 2019 how the Xbox One was designed to resist physical attacks. He covers the security design and hypervisor-based OS architecture that kept the console uncracked for years.