- All containers on the same host share a single OS kernel, so they use fewer resources than virtual machines
- Containers are stateless — modifications inside them are lost
- Container images are stored in registries, e.g. and
---
# A Pouta VM running a Docker container
```txt
docker run alpine
docker run -it alpine
whoami
du -sh
apk add python3
ctrl+d
```
- Container runtimes: Docker, Podman, CRI-O
---
# Multiple containers on one host / cluster
- Multiple Docker images run on a single machine
- …and across a cluster of machines
---
# One technology to rule them all
- Kubernetes orchestrates containers across many machines
- OpenShift (OKD) extends Kubernetes
- Rahti is CSC's OpenShift OKD platform
---
# Rahti @ Pouta
- Rahti is at best as good as the Pouta environment underneath it
- SLA
- Performance
- The architecture gives better scalability and security
- The biggest overhead comes from the KVM hypervisor
- Bare-metal OpenShift has been under test
📱🔨