LinuxKit, a toolkit for building custom minimal, immutable Linux distributions. Secure defaults without compromising usability Everything is replaceable and customisable Immutable infrastructure applied to building Linux distributions Completely stateless, but persistent storage can be attached Easy tooling, with easy iteration Built with containers, for running containers Designed for building and running clustered applications, including but not limited to container orchestration such as Docker or Kubernetes Designed from the experience of building Docker Editions, but redesigned as a general-purpose toolkit Designed to be managed by external tooling, such as Infrakit or similar tools Includes a set of longer-term collaborative projects in various stages of development to innovate on kernel and userspace changes, particularly around security

1. @errordeveloper
LinuxKit:
a much better
way to do Linux

2. @errordeveloper
LinuxKit:
a much better
way to do Linux
(for containers)

3. disclaimer:
all I care to
run on Linux
is containers

4. immutable
OS pattern

5. security &
reliability

6. immutability
boundary
is relative

7. weak or
strong

8. runtime
downloads
and config

9. LinuxKit

10. strongly
enforced
boundary

11. no boot-up
config
complexity

12. testability

13. why should
I care?

14. great user
experience

15. local setup
is identical
to production

16. Thanks :)

17. Demo?

18. @errordeveloper
OpenOverlay:
future of container
overlay networks

19. timeline

20. 06/2014 – Docker 1.0
09/2014 – Weave Net born
03/2015 – SocketPlane
06/2015 – Docker 1.7, Weave Net 1.0
Kubernetes 1.0 & CNCF
11/2015 – Docker 1.9
09/2016 – Kubernetes 1.4
06/2017 – Weave Net 2.0
10/2017 – Today

21. CNCF

23. CNI

24. CNI is a
network
plugin API

25. Weave Net
implements
CNI

26. libnetwork
implements
CNI

27. CNI sits below
OpenOverlay

28. OpenOverlay
/weave-net
/libnetwork

29. stay tuned!
thank you :)