Unikernels in Practice: A UNICORE Serverless Use Case

•

0 recomendaciones•198 vistas

CSUC - Consorci de Serveis Universitaris de Catalunya

Presentació a càrrec de Xavier Peralta, tècnic líder de Sistemes del CSUC, duta a terme a l'H-CLOUD Technical Community Event celebrat el 23 de març de 2021 en format virtual.

Tecnología

© 2021 UNICORE
Unikernels in Practice: A
UNICORE Serverless Use Case
Xavier Peralta
Systems Tech Leader
CSUC

© 2021 UNICORE
Fast instantiation, destruction and migration
time
Low memory footprint
High density (10k guests on a single node)
High Performance (10-40Gbit/s throughput)
Reduced attack surface
Unikernels

© 2021 UNICORE
Make easier the use and adoption of unikernels
• Develop a toolkit that automates the process of
building unikernels
• Integrate unikernels in different cloud platforms
Make unikernels safe in terms of security
Develop different use-cases to illustrate their
utility
Unicore

© 2021 UNICORE
CSUC has created and maintained more than
20 digital repositories in Catalonia.
Replace media converters virtual machines.
Deploy a serverless solution based on
unikernels to prepare the images.
Use-case is focused on images repositories.
CSUC Use-case

© 2021 UNICORE
www.linkedin.com/groups/
8752067
info@unicore-project.eu
@unicore_project
This project has received funding from the European
Union's Horizon 2020 research and innovation
programme under grant agreement No 825377
https://github.com/unikraft

Más contenido relacionado

Similar a Unikernels in Practice: A UNICORE Serverless Use Case

Tweet Share By leveraging specialization and the use of minimalistic OSes, unikernels are able to yield impressive numbers, including fast instantiation times (tens of milliseconds or less), tiny memory footprints (a few MBs or even KBs), and high consolidation (e.g., being able to run many instances on a single device), not to mention a reduced attack surface and easier certification. The fundamental drawback of unikernels is that they require that applications be manually ported to the underlying minimalistic OS; this requires both expert work and often considerable amount of time. To address this, we present Unikraft, a Xen sub-project aimed at automating the process of building customized unikernels tailored to specific applications and thus significantly reducing development time. We will provide a detailed explanation of the system as well as a demonstration of it.

XPDDS18: Unleashing the Power of Unikernels with Unikraft - Florian Schmidt, ...

The Linux Foundation

Unikernel technology allows to build tiny VMs with memory footprint in the order of hundreds of KBs and boot time in the order of milliseconds. We consider the usage of Unikernels as Virtual Network Functions for NFV, in particular assuming discuss highly dynamic and distributed scenarios in which Unikernels need to be instantiated in few tens of milliseconds in a highly distributed infrastructures. We have patched existing VIMs (Virtual Infrastructure Managers) like OpenStack, OpenVIM and a lightweight orchestrator like Nomad in order to orchestrate ClickOs Unikernels and we measured the achieved performances. Finally we present a complete testbed for the orchestration of ClickOS Unikernels, based on the enhancement of OpenVIM and of XEN. The proposed enhancements are Open Source.

Deploying of Unikernels in the NFV Infrastructure

Stefano Salsano

The H2020 UNICORE project (EC GA no. 825377) is developing tools to enable lightweight VM development to be as easy as compiling an app for an existing OS, thus unleashing the use of next generation of cloud computing services and technologies. With UNICORE toolchains for unikernels, software developers will be able to easily build and quickly deploy lightweight virtual machines starting from existing applications. Know more about the UNICORE project in this short presentation.

UNICORE Project Technical Overview

UNICORE_project

After a short introduction to the goals and approach of the Superfluidity EU research project, we discuss the Unikernels and their orchestration aspects. Unikernel technology allows to build tiny VMs with memory footprint in the order of hundreds of KBs and boot time in the order of milliseconds. We focus on ClickOS Unikernels. We have adapted 3 VIMs (OpenStack, Nomad, OpenVIM) to support ClickOS Unikernels and report a performance evaluation of the VM instantiation time. We have implemented a scenario that can combines Unikernels and regular VMs in the same Network Service or VNF extending OpenVIM.We describe how we have extended the ETSI NFV models and OpenVIM. In particular, we provide the details of the OpenVIM descriptor extensions to support Unikernels.

Extending ETSI VNF descriptors and OpenVIM to support Unikernels

Stefano Salsano

Presentation given at the 2017 LinuxCon China Unikernel is a novel software technology that links an application with OS in the form of a library and packages them into a specialized image that facilitates direct deployment on a hypervisor. Comparing to the traditional VM or the recent containers, Unikernels are smaller, more secure and efficient, making them ideal for cloud environments. There are already lots of open source projects like OSv, Rumprun and so on. But why these existing unikernels have yet to gain large popularity broadly? We think Unikernels are facing three major challenges: 1. Compatibility with existing applications; 2. Lack of production support (e.g. monitoring, debugging, logging); 3. Lack of compelling use case. In this presentation, we will review our investigations and exploration of if-how we can convert Linux as Unikernel to eliminate these significant shortcomings, plus some explorations of coordinating and cooperating with hypervisor.

Unikernelized Linux

LinuxCon ContainerCon CloudOpen China

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

The Linux Foundation

Unikernels have produced impressive performance, including fast instantiation times, tiny memory footprints, and high consolidation, plus potentially a reduced attack surface and easier certification. Their main drawback is that they require applications to be manually ported to the underlying minimal OS; this means both expert work and considerable amount of time. In this talk we present Unikraft, an incubator project under the auspices of the Xen Project and the Linux Foundation aimed at automating the process of building customized images tailored to specific applications and thus significantly reducing development time. Unikraft decomposes the OS into elementary pieces (e.g., schedulers, memory allocators, drivers, etc.) that users can pick and choose from. It then builds images tailored to the needs of specific applications as well as the target platform (e.g., KVM, Xen) and architecture (e.g., ARM or x86).

OSSEU18: From Handcraft to Unikraft: Simpler Unikernelization of Your Applica...

The Linux Foundation

UniK: Deploy Unikernels with Ease

Scott Weiss

Unikernels are constructed by combining application code with only the operating system components necessary for that code to run. The result is a highly specialized, single-purpose application which can be deployed directly to the cloud or onto IoT-like devices. Unikernels reduce software complexity by only including code that is required, resulting in portable applications with much smaller footprints and fast boot times. By combining the familiar tooling and portability of Docker with the efficiency and specialization of next-generation unikernel technology, organizations have a flexible platform to build, ship and run distributed applications without being restricted to a particular infrastructure. Because workloads that reach the data center today are on a spectrum from physical machine to container to hypervisor, only the Docker platform can further widen the scope and provide more flexibility for orchestrating hybrid applications. Watch the video from Docker Online Meetup #31: https://blog.docker.com/2016/01/docker-online-meetup-unikernels/

Docker Online Meetup #31: Unikernels

Docker, Inc.

Unikernels and Cloud Computing

SKORDEMIR

Unikernel – an executable image that can run natively on a hypervisor without the need for a separate operating system – are rapidly gaining momentum. To integrate unikernels into the echo-system, cloud-computing platforms as a service are required to provide unikernels with the same services they provide for constrainers. Here we present Unik, a open source (goo.gl/iEesqK) orchestration system for unikernels. Unik handles the compilation of libraries and applications for running on verity of cloud providers, manages their scheduling, and ensures their health. To provide the user with a seamless PaaS experience, Unik is integrated as a backend to Docker, Kubernetes & Cloud Foundry runtime.

Unik Slides

Idit Levine

Unikernels,before, now and next

EL MAJJODI Ayoub

Containers have recently grown in interest in the virtualization community because they are a lightweight alternative to full machine virtualization. Containers offer an operating system level virtualization, where the kernel controls the isolation of the different containers. That means less isolation than virtual machines, but also less overhead in the system because they share parts of the kernel. The most important developments in the Open Source community are LXC and Docker. ONEDock is a set of extensions for OpenNebula to use Docker as a hypervisor in ONE, to provide containers as if they were lightweight Virtual Machines (VM). The underlying idea is that when OpenNebula is asked for a VM, a Docker container will be deployed instead. In the context of OpenNebula, it is managed as if it was a VM, and the user will be able to use IP addresses to access to the container. In this session we will learn about the integration of Docker and ONE, wich kind of the available features in ONE have been incorporated to the Docker containers, and how the operations on VMs are translated to the containers in the context of ONE. Moreover we will discuss some technical details and technical decissions taken in ONEDock, and how the other operations (that have not been implemented yet) will be integrated in ONEDock.

OpenNebulaConf 2016 - ONEDock: Docker as a hypervisor in ONE by Carlos de Alf...

OpenNebula Project

UNIT 3 HISTORY OF EMBEDDED LINUXEMBEDDED LINUX.pptx

EEEDept2

Introduction to OpenNebula - Ignacio M. Llorente

OpenNebula Project

Lightning talk unikernels

Michael Bright

Nick Barcet, Open Source tijdens Infosecurity.nl Storage Expo en Tooling Even...

Infosecurity2010

Docker for Mac

Amazon Web Services

Integration of WORSICA’s thematic service in EOSC, Service QA and Dataverse

vty

Presentation at the OpenStack Summit in Austin, Texas on April 28, 2016. http://bit.ly/os-oci-cncf-ses The technology industry has been abuzz about cloud workload containerization since the open source Docker project became a phenomenon in early 2014. Meanwhile, an OpenStack Containers Team was formed and the Magnum project launched to provide users with a convenient Containers-as-a-Service solution for OpenStack environments. As the potential of both technologies emerged, many wanted to see shared governance over the baseline container specification and runtime technology to ensure an open cloud ecosystem. This past December, two new groups were launched with a goal of creating open, industry standards. The first called the Open Container Initiative (http://www.opencontainers.org), and the second called the Cloud Native Computing Foundation (http://cncf.io) Jeffrey Borek - Program Director, Open Tech, IBM - @JeffBorek Daniel Krook - Senior Software Engineer, IBM - @DanielKrook Val Bercovici - Global Cloud CTO, NetApp/SolidFire - @valb00

Containers, OCI, CNCF, Magnum, Kuryr, and You!

Daniel Krook

Similar a Unikernels in Practice: A UNICORE Serverless Use Case (20)

XPDDS18: Unleashing the Power of Unikernels with Unikraft - Florian Schmidt, ...

Deploying of Unikernels in the NFV Infrastructure

UNICORE Project Technical Overview

Extending ETSI VNF descriptors and OpenVIM to support Unikernels

Unikernelized Linux

CIF16: Unikernels: The Past, the Present, the Future ( Russell Pavlicek, Xen ...

OSSEU18: From Handcraft to Unikraft: Simpler Unikernelization of Your Applica...

UniK: Deploy Unikernels with Ease

Docker Online Meetup #31: Unikernels

Unikernels and Cloud Computing

Unik Slides

Unikernels,before, now and next

OpenNebulaConf 2016 - ONEDock: Docker as a hypervisor in ONE by Carlos de Alf...

UNIT 3 HISTORY OF EMBEDDED LINUXEMBEDDED LINUX.pptx

Introduction to OpenNebula - Ignacio M. Llorente

Lightning talk unikernels

Nick Barcet, Open Source tijdens Infosecurity.nl Storage Expo en Tooling Even...

Docker for Mac

Integration of WORSICA’s thematic service in EOSC, Service QA and Dataverse

Containers, OCI, CNCF, Magnum, Kuryr, and You!

Más de CSUC - Consorci de Serveis Universitaris de Catalunya

Tendencias en herramientas de monitorización de redes y modelo de madurez en ...

CSUC - Consorci de Serveis Universitaris de Catalunya

Quantum Computing Master Class 2024 (Quantum Day)

CSUC - Consorci de Serveis Universitaris de Catalunya

Publicar dades de recerca amb el Repositori de Dades de Recerca

CSUC - Consorci de Serveis Universitaris de Catalunya

In sharing we trust. Taking advantage of a diverse consortium to build a tran...

CSUC - Consorci de Serveis Universitaris de Catalunya

Formació RDM: com fer un pla de gestió de dades amb l’eiNa DMP?

CSUC - Consorci de Serveis Universitaris de Catalunya

Com pot ajudar la gestió de les dades de recerca a posar en pràctica la ciènc...

CSUC - Consorci de Serveis Universitaris de Catalunya

Security Human Factor Sustainable Outputs: The Network eAcademy

CSUC - Consorci de Serveis Universitaris de Catalunya

The Research Portal of Catalonia: Growing more (information) & more (services)

CSUC - Consorci de Serveis Universitaris de Catalunya

Facilitar la gestión, visibilidad y reutilización de los datos de investigaci...

CSUC - Consorci de Serveis Universitaris de Catalunya

La gestión de datos de investigación en las bibliotecas universitarias españolas

CSUC - Consorci de Serveis Universitaris de Catalunya

Disposes de recursos il·limitats? Prioritza estratègicament els teus projecte...

CSUC - Consorci de Serveis Universitaris de Catalunya

Les persones i les seves capacitats en el nucli de la transformació digital. ...

CSUC - Consorci de Serveis Universitaris de Catalunya

Enginyeria Informàtica: una cursa de fons

CSUC - Consorci de Serveis Universitaris de Catalunya

Transformació de rols i habilitats en un món ple d'IA

CSUC - Consorci de Serveis Universitaris de Catalunya

Difusió del coneixement a l'Il·lustre Col·legi de l'Advocacia de Barcelona

CSUC - Consorci de Serveis Universitaris de Catalunya

Fons de discos perforats de cartró

CSUC - Consorci de Serveis Universitaris de Catalunya

Biblioteca Digital Gencat

CSUC - Consorci de Serveis Universitaris de Catalunya

El fons Enrique Tierno Galván: recepció, tractament i difusió

CSUC - Consorci de Serveis Universitaris de Catalunya

El CIDMA: més enllà dels espais físics

CSUC - Consorci de Serveis Universitaris de Catalunya

Els serveis del CSUC per a la comunitat CCUC

CSUC - Consorci de Serveis Universitaris de Catalunya

Más de CSUC - Consorci de Serveis Universitaris de Catalunya (20)