DOCSLIB.ORG

Podman, Buildah and Quarkus the Latest in Linux Containers Technology

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Podman, Buildah and Quarkus the Latest in Linux Containers Technology Podman, Buildah and Quarkus The Latest in Linux Containers Technology Daniel Oh Open Source Summit Japan 2019 1 About Me Daniel Oh ● Principal Technical Product Marketing Manager at Red Hat ○ Cloud Native App Development ○ Agile & DevOps practices ● CNCF Ambassador ● Java Developer ● Opensource.com Moderator ● Public Speaker & Writer [email protected] @danieloh30 danieloh30 INTRODUCTION Container tools landscape is changing. Why? Since Open Container Initiative (OCI) there are several new projects What needs do these projects address? What are these projects and when should I use them? What specific security concern does each address? 3 @danieloh30 INTRODUCTION Early concerns with Docker Since the early days enterprise users of Docker had concerns ● Build requires a “big fat” daemon on every host ● Regression for integration with container platforms Kubernetes/OpenShift ● Build has secret handling issues ● Root/privileged concerns at runtime ● Root/privileged concerns with daemon ● Build requires a running container 4 @danieloh30 INTRODUCTION ● Docker, Red Hat et al. June 2015 ● Two specifications ○ Image format ■ How to package an OCI Image with sufficient information to launch the application on the target platform ○ Runtime ■ How to launch a “filesystem bundle” that is unpacked on disk ● Version 1.0 of each released July 19th 2017 ● Distribution spec started in April, 2018. 5 @danieloh30 CONTAINERS ARE LINUX ARE CONTAINERS Containers are Linux 6 CONTAINERS ARE LINUX Container innovation continues …. buildah.io podman.io LXC Initial Docker OCI release initial CNCF Aug May Mar Mid Jun Nov Mar Apr Jun Sep May Sep May ‘08 ‘11 ‘13 ‘14 ‘15 ‘15 ‘16 ‘17 ‘17 ‘17 ‘18 ‘18 ‘19 Moby OpenShift Initial Buildah Buildah 1.0 online OpenShift release, Skopeo Podman Enterprise Buildah Podman New logo Kubernetes 3.0 RHEL 7 @danieloh30 CONTAINERS ARE LINUX How did Docker change containers? Docker Image Docker CLI Daemon Layers registry Application Docker daemon App. Package CLI Dependencies App. Package Dependencies image container Base Distro Image kernel 8 @danieloh30 SKOPEO Skopeo. The first break away. 9 SKOPEO IMAGE COPY WITH SKOPEO ● Built for interfacing with Docker registry ● CLI for images and image registries Image ツ ● Rejected by upstream Docker ¯\_( )_/¯ Registry ● Allows remote inspection of image metadata - no downloading ● Can copy from one storage to another SKOPEO SECURITY FEATURES Share securely Image No daemon Inspect remote images Repository No pulling potentially malicious images /var/lib/containers Non-root copy. Bridge between registries. or Host /var/lib/docker 10 @danieloh30 PODMAN Podman. The daemonless client for developers and beyond. 11 PODMAN The new container CLI ● @ podman.io ● Client only tool, based on the Docker CLI. (same+) Image ● No daemon! Registry ● Storage for ○ Images - containers/image ○ Containers - containers/storage PODMAN ● Runtime - runc ● Shares state with CRI-O and with Buildah! Containers Images SECURITY FEATURES Run and develop securely No daemon Run without root Kernel Isolate with user namespaces Audit who runs what 12 @danieloh30 PODMAN Developer’s experience ● Provides a familiar command line experience compatible with the Docker CLI ● Great for running, building, and sharing containers outside of Kubernetes/OpenShift ● Build and run containers as non-root (enhanced user namespaces) ● Can be wired into existing infrastructure where the docker daemon/cli are used today ● Use existing Dockerfiles ● Simple command line interface, no client-server architecture ● Docker compatible health checks @danieloh30 PODMAN DEMO PODMAN Podman Demo 14 PODMAN But there’s more : podman pod Pods are a group of one or more containers sharing the same network, pid and ipc namespaces. create Create a new empty pod start Start one or more pods exists Check if a pod exists in stats Display a live stream of local storage resource usage statistics inspect Displays a pod configuration for the containers in one or kill Send the specified signal or more pods SIGKILL to containers in pod stop Stop one or more pods pause Pause one or more pods top Display the running ps List pods processes of containers in a restart Restart one or more pods pod rm Remove one or more pods unpause Unpause one or more pods @danieloh30 BUILDAH Buildah. The secure container builder. 16 BUILDAH The separation of concerns Developer Container Platform Workstation/Laptop DataCenter $ podman build $ docker build OCI Compliant Review/ git Deliver Deploy Source Build Test Appr Repo 3rd Image Party Repo CI/CD LIFECYCLE 17 @danieloh30 BUILDAH Why use Buildah? ● Now buildah.io Application Layer ● Builds OCI compliant images ● No daemon - no “docker socket” Java Runtime Layer ● Does not require a running container ● Can use the host’s user’s secrets. OS Update Layer Java runtime and ● Single layer, from scratch images are made dependencies, and easy and it ensures limited manifest. Application Base RHEL ● If needed you can still maintain Dockerfile based workflow From base, From scratch, SECURITY FEATURES Build securely multi-layer single layer No daemon Shrink the attack surface Fine-grained control of the layers Run builds isolated Better secret management 18 @danieloh30 BUILDAH DEMO BUILDAH Buildah Demo 19 BUILDAH What does Buildah do? buildah from - Build up a container root filesystem from an image or scratch. buildah config - Adjust defaults in the image’s configuration blob. buildah run - Run a command in the container’s filesystem using runc. NOT like docker run. Like Dockerfile RUN. buildah mount - Mount the container’s root filesystem on the host. buildah commit - Commit container’s changes to a new image. 20 @danieloh30 BUILDAH What does Buildah do? buildah push - Push images to registries (Quay etc.) or a local dockerd instance buildah build-using-dockerfile (a.k.a. buildah bud) - Build images using a Dockerfile for instructions buildah unmount - Oh, it also unmounts container filesystems Provide a library API that’s used by the CLI Share libraries and on-disk storage with CRI-O 21 @danieloh30 CRI-O CRI-O. The OCI runtime abstraction for Kubernetes 22 CRI-O OCI AND CRI-O ● A Kubernetes thing ● Now part of CNCF! (April 8th) Container ● OCI daemon ● Implements Kubelet Container Runtime Interface (CRI) Container CRI-O Container READONLY Kubernetes SECURITY FEATURES Run securely in a production cluster Container No daemon Read-only containers Enable fewer capabilities User namespaces Host FIPS mode support 23 @danieloh30 WHERE DO I GO FROM HERE? WHERE Which app will be the best for the Linux Containers? 24 Supersonic Subatomic Java A Kubernetes Native Java stack tailored for GraalVM & OpenJDK HotSpot, crafted from the best of breed Java libraries and standards @danieloh30 @QuarkusIO @danieloh30 @QuarkusIO A stack to write Java apps Cloud Native, Microservices, Serverless @danieloh30 @QuarkusIO BUILDAH DEMO BUILDAH Quarkus Demo 28 Benefit No. 1: Developer Joy A cohesive platform for optimized developer joy: ● Based on standards, but not limited ● Unified configuration ● Zero config, live reload in the blink of an eye ● Streamlined code for the 80% common usages, flexible for the 20% ● No hassle native executable generation @danieloh30 @QuarkusIO Benefit No. 2: Supersonic Subatomic Java REST Quarkus + GraalVM Quarkus + OpenJDK Traditional Cloud-Native Stack 13 MB 74 MB 74 MB @danieloh30 @QuarkusIO Memory (RSS) in Megabytes Benefit No. 2: Supersonic Subatomic Java REST + CRUD Quarkus + GraalVM Quarkus + OpenJDK Traditional Cloud-Native Stack 35 MB 130 MB 218 MB @danieloh30 @QuarkusIO Memory (RSS) in Megabytes Benefit No. 2: Supersonic Subatomic Java REST Quarkus + GraalVM 0.014 Seconds Quarkus + OpenJDK 0.75 Seconds Traditional Cloud-Native Stack 4.3 Seconds REST + CRUD Quarkus + OpenJDK 2.5 Seconds Quarkus + GraalVM 0.055 Seconds Traditional Cloud-Native Stack 9.5 Seconds @danieloh30 @QuarkusIO Boot + First Response Time (in seconds) Benefit No. 3: Unifies Imperative and Reactive @Inject @Inject @Stream(”kafka”) SayService say; Publisher<String> reactiveSay; @GET @GET @Produces(MediaType.TEXT_PLAIN) @Produces(MediaType.SERVER_SENT_EVENTS) public String hello() { public Publisher<String> stream() { return say.hello(); return reactiveSay; } } ● Combine both Reactive and imperative development in the same application ● Inject the EventBus or the Vertx context ● Use the technology that fits your use-case @danieloh30 @QuarkusIO Benefit No. 4: Best of Breed Frameworks & Standards Eclipse Vert.x Hibernate RESTEasy Apache Camel Eclipse MicroProfile Netty Kubernetes OpenShift Jaeger Prometheus Apache Kafka Infinispan @danieloh30 @QuarkusIO WHERE DO I GO FROM HERE? WHERE Where do I find these projects in Red Hat products? 35 WHERE? RED HAT PRODUCTS WHERE CAN I FIND THESE AWESOME PROJECTS IN RED HAT PRODUCTS? SECURING THE PLATFORMS SMART LIGHT CONTAINERS TOOL CONTINUOUS BUILDING, SECURE RUNTIME Red Hat chose to move away from Docker to The container-tools package installs Podman, Red Hat OCP has been using Skopeo for Podman, Buildah and CRI-O in order to provide Buildah and Skopeo together. efficiency for a number of years. OCP 4 moves a more secure environment for containers on Users can use these in root or user namespace. to using Buildah by default for building both OpenShift Container Platform and RHEL container images. CRI-O is the default container runtime. Use Podman for helping to debug pods and containers. 36 @danieloh30 OPEN SOURCE WINS OPEN SOURCE Open source wins. Questions inspire community innovations. 37 OPEN SOURCE WINS ● Why do we have to pull down a container just
Load more

Recommended publications
  • Quarkus – the Kubernetes Native Java Framework
    Cheat Sheet Quarkus – the Kubernetes Native Java Framework by Alex Soto Start-Up What is Quarkus? Quarkus is a Kubernetes Native Java stack tailored for GraalVM & OpenJDK HotSpot that makes Java programs run 10X faster and 100X smaller. It also improves the developer ex- perience by adding features like live reloading/debugging and persistence with Panache. Requirements • Java 8 • Maven 3.5.3+ (recommended Maven 3.6.X) • GraalVM 19 or Docker (optional for native compilation) Scaffolding a Quarkus application You can create a minimal Quarkus application using a Maven goal. This goal creates a mi- nimal endpoint, a test and Docker resources: mvn io.quarkus:quarkus-maven-plugin:0.19.1:create \ -DprojectGroupId=org.alexsotob \ -DprojectArtifactId=jax \ -DclassName="org.alexsotob.quickstart.GreetingResource" \ -Dpath="/hello" Start Quarkus in live reload (dev) mode: ./mvnw compile quarkus:dev You can request the provided endpoint: curl http://localhost:8080/hello Live Reload You can make any change on any (Java) resource and, if the Quarkus application was star- ted in live reload mode, the change will be automatically reflected without having to re- compile or repackage the application. Try it by changing the output value of the src/main/- java/org/alexsotob/quickstart/GreetingResource.java class. Packaging Run ./mvnw package to generate a jar file called jax-1.0-SNAPSHOT-runner.jar that contains the application and lib directory containing required dependencies for running the applicati- on. Quarkus, unlike other solutions, does not create a fat jar so as to be Docker layers fri- endly. Both jar file and lib folder should be placed together in the same directory.
    [Show full text]
  • Getting Started with Quarkus
    BROUGHT TO YOU IN PARTNERSHIP WITH CONTENTS ∙ Key Benefits ∙ Getting Started ∙ Key Components Getting Started ∙ JAX-RS ∙ Health Checks With Quarkus ∙ Security and JWT ∙ Docker and Native ∙ Container Images ∙ And more! ALEX SOTO ∙ Conclusion DIRECTOR OF DEVELOPER EXPERIENCE, RED HAT Quarkus is a Kubernetes-Native Java stack tailored to GraalVM and GETTING STARTED OpenJDK HotSpot, helping Java programs run 10X faster, while being To create a Quarkus service, you just need to run the next Maven goal 100X smaller. Improving the developer experience, Quarkus provides into an empty directory: additional features like live reloading and debugging as well as mvn io.quarkus:quarkus-maven-plugin:1.13.1.Final:create persistence with Panache. \ Its integration with the Eclipse MicroProfile specification also makes -DprojectGroupId=org.acme \ -DprojectArtifactId=hello-world \ it the perfect choice for developing microservices and deploying -DclassName="org.acme.quickstart.GreetingResource" \ them in Kubernetes. -Dpath="/hello" KEY BENEFITS LIVE RELOAD Quarkus offers near-instant scale-up and high-density utilization in Quarkus applications come with a live reload feature that allows container orchestration platforms such as Kubernetes. Many more the developer to make changes to their source code, which will be application instances can be run using the same hardware resources. directly reflected in the deployed code without having to recompile In Quarkus, classes used only at application startup are invoked at or repackage the source code. build time and not loaded into the runtime JVM. Quarkus also avoids reflection as much as possible. These design principles reduce the size and memory footprint of an application running on the JVM.
    [Show full text]
  • Quarkus Cookbook Kubernetes-Optimized Java Solutions
    Quarkus Cookbook Kubernetes-Optimized Java Solutions Alex Soto Bueno & Jason Porter Quarkus Cookbook Kubernetes-Optimized Java Solutions Alex Soto Bueno and Jason Porter Quarkus Cookbook by Alex Soto Bueno and Jason Porter Copyright © 2020 Alex Soto Bueno and Jason Porter. All rights reserved. Printed in the United States of America. Published by O’Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O’Reilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (http://oreilly.com). For more information, contact our corporate/institutional sales department: 800-998-9938 or [email protected]. Acquisitions Editor: Suzanne McQuade Indexer: Potomac Indexing, LLC Development Editor: Jeff Bleiel Interior Designer: David Futato Production Editor: Daniel Elfanbaum Cover Designer: Karen Montgomery Copyeditor: Piper Editorial Illustrator: Rebecca Demarest Proofreader: Amanda Kersey July 2020: First Edition Revision History for the First Edition 2020-07-14: First Release See http://oreilly.com/catalog/errata.csp?isbn=9781492062653 for release details. The O’Reilly logo is a registered trademark of O’Reilly Media, Inc. Quarkus Cookbook, the cover image, and related trade dress are trademarks of O’Reilly Media, Inc. The views expressed in this work are those of the authors, and do not represent the publisher’s views. While the publisher and the authors have used good faith efforts to ensure that the information and instructions contained in this work are accurate, the publisher and the authors disclaim all responsibility for errors or omissions, including without limitation responsibility for damages resulting from the use of or reliance on this work.
    [Show full text]
  • Microserviços Supersônicos E Subatômicos Com Quarkus Pedro Hos and William Siqueira Pedro Hos @ Github.Com/Pedro-Hos
    Microserviços Supersônicos e Subatômicos com Quarkus Pedro Hos and William Siqueira Pedro Hos @ github.com/pedro-hos ● Banco de Dados @ FATEC São José dos Campos 2012 ● I’ve worked as Java Developer in some companies ● Since 2017 I am Software Maintenance Engineer @ Red Hat ● JUG Leader at JUG Vale jugvale.com ● Contributor at SJCDigital github.com/sjcdigital ● Blogger at pedrohosilva.wordpress.com ● Opensource and some source code samples github.com/pedro-hos William Siqueira @ github.com/jesuino ● Banco de Dados @ FATEC São José dos Campos 2010 ● Software Engineer @ Red Hat ● Colaborador do JUG Vale jugvale.com ● Colaborador do SJCDigital github.com/sjcdigital ● Escreve em alguns blogs ● Palestrante JavaOne, The Developers Conference, FISL e outros ● Opensource github.com/jesuino Schedule ● Microservices overview ● Java and microservices ● Eclipse Microprofile ● Quarkus - numbers ○ First demo ■ Add hello endpoint - play with configuration - add json - add health check ■ add swagger - fault tolerance ● Quarkus features ○ Extensions - talk about all extensions ○ Second Demo - Database - security ○ Kogito Demo ● Quarkus Native - talk about how quarkus can be compiled to native ● Quarkus on Openshift/Kubernetes What are microservices Microservices - also known as the microservice architecture - is an architectural style that structures an application as a collection of services that are ● Highly maintainable and testable ● Loosely coupled ● Independently deployable ● Organized around business capabilities ● Owned by a small team The microservice
    [Show full text]
  • Maven Plugin for Defining Sql Schema
    Maven Plugin For Defining Sql Schema Wily Nealy never nerved so synergistically or bowses any lobules crassly. Von is unanchored and job salleeforward pander as seemly not continuously Cyrus labializing enough, grossly is Wallas and misspeaking teleological? forcibly. When Obie encouraged his The library translates to install plugin sql plugin for maven schema update scripts in the maven central character bash shell script This plugin sql schemas that defines no longer pass it is plugins will define custom webapps that. Storing the most common attack in the information regarding their projects using maven for enabling query for this argument passed to relational database. Just defining identifier attribute which would become out all maven plugin for defining sql schema changes made permanent. I am setting up first liquibase maven project told a MySQL DB. Like to sql plugin execution is useful for defining different mechanisms of jdbi provides all for maven defining sql plugin schema? Both catalog and collections have created database plugin schema to apply changes are both. Format A formatter for outputting an XML document with three pre-defined. Configuring the Alfresco Maven plugin Alfresco Documentation. The installation of the MSSQL schema was pure pain there were a turn of plain SQL files which had even be. The maven for defining and define sql schemas for uuid identifier. To load SQL statements when Hibernate ORM starts add an importsql file to the. Setting up and validating your film project Using Maven. The hibernate3-maven-plugin can dash be used to toe a schema DDL from. For maven plugin creates sql schemas, you can become.
    [Show full text]
  • Postgresql Java Example Schema
    Postgresql Java Example Schema Hypertensive and gonidial Orlando petitions: which Quincey is tamest enough? Burton often mimes someplace when prosodical Stanly fractionized nobbily.conceivably and rung her anthracnose. Joab is multiplicative and insculp idolatrously as genitival Mattheus detribalizing geognostically and refurnishes You should test it reproduce a development environment thoroughly before depending on ball in production. Sql schemas in java, everything worked correctly process one level of all operations in any data. One query interface allows it more child of java code example, incremental sql below are two done within postgresql java example schema in the. You can amend add important new kayak using a POST. Each java class of schema names to postgresql java example schema outside the schema changes to postgresql. In this truth, we wanted to wise the info of having exact postgresql. Java programming language implementation transparently without specifying a java triggers to postgresql java example schema are now know! Sql Set Schema Postgresql Blue streak Action Council. When your database is closed, it feel possible to backup the database files. In this blog post race will both consider Migrations that are flush as plain SQL There always more advanced concepts like writing Migrations in Java. For the example how debezium includes whether jdbc connection settings. Optional field schemas that schema field from the examples are a fresh containerized instance, it starts to. Since the credentials are OK, it news show exactly same output as trust first class. Springdatasourceurljdbcpostgresqllocalhost5432Workflow. The init function must drive a public static method which takes a javasql. Flyway Database Schema Migrations Vlad Mihalcea.
    [Show full text]
  • Quarkus Is a System for Accelerating Java Performance Through the Use of Graalvm
    SED 953 Transcript EPISODE 953 [INTRODUCTION] [00:00:00] JM: Java programs run in a very different environment than they did 10 years ago. Modern infrastructure often runs on containers sitting in a Kubernetes cluster. The optimal configuration for a Java program in that context is different than it was for an environment dominated by virtual machines and bare metal. When you are co-scheduling your services with each other, those services could be fighting for resources. You may want to optimize them with more ahead of time compilation. Quarkus is a system for accelerating Java performance through the use of GraalVM. In a previous show, we explored the basics of GraalVM. In today’s show, Guillaume Smet and Emmanuel Bernard join the show to describe an application of GraalVM, which is the acceleration of Java. Guillaume and Emmanuel are engineers at Red Hat and they’re working on changes to the Java ecosystem that are informed by the cloud and the rise of Kubernetes. GraalVM and Quarkus are fairly complex topics, but they seem very futuristic and they seem relevant. So I hope you get something out of this episode even if it’s a bit hard to understand on a technical level. If you are deeply familiar with Java, I think you will get a lot out of it. If you’re building a software project, post it on Find Collabs. Find Collabs is the company I’m working on. It’s a place to find collaborators for your software projects. We integrate with GitHub and make it easy for you to collaborate with others on your open source projects and find people to work with who have shared interests so that you can actually build software with other people rather than building your software by yourself.
    [Show full text]
  • Building a Kubernetes Operator in Quarkus
    D E M 3 5 - S Building a Kubernetes Operator in Quarkus Fabian Lange VP of Engineering Instana © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. What is… Kubernetes? Container orchestration system An Operator? Kubernetes software extension to manage applications and its components Quarkus? Java framework designed for Kubernetes © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Getting Started mvn \ io.quarkus:quarkus-maven-plugin:0.19.1:create \ -DprojectGroupId=com.instana \ -DprojectArtifactId=operator-example \ -DclassName="com.instana.operator.HelloResource" \ -Dpath="/hello" mvn \ quarkus:add-extension \ -Dextensions=quarkus-kubernetes-client Creating a Kubernetes Client package com.instana.operator; public class ClientProducer { @Produces @Singleton KubernetesClient makeDefaultK8sClient(@Named("namespace") String namespace) { return new DefaultKubernetesClient().inNamespace(namespace); } @Produces @Singleton @Named("namespace") String findMyNamespace() throws IOException { return new String(Files.readAllBytes( Paths.get("/var/run/secrets/kubernetes.io/serviceaccount/namespace"))); } } Listing and Watching Pods package com.instana.operator; public class PodLister { @Inject KubernetesClient defaultClient; void onStartup(@Observes StartupEvent e) { defaultClient.pods().list().getItems().stream() .map(PodPrinter::toString) .forEach(System.out::println); defaultClient.pods().watch(new Watcher<Pod>() { public void eventReceived(Action action, Pod pod) { System.out.println(action + " on "
    [Show full text]
  • Oracle Enterprise Cloud Native Java Modernizing Enterprise Java Applications Using Weblogic Server Applications and Helidon Microservices
    Oracle Enterprise Cloud Native Java Modernizing Enterprise Java Applications using Weblogic Server Applications and Helidon Microservices Srinivas Pothukuchi – Master Principal Architect Will Lyons – Senior Director Product Management September 30, 2020 Copyright © 2020 Oracle and/or its affiliates. Safe Harbor The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, timing, and pricing of any features or functionality described for Oracle’s products may change and remains at the sole discretion of Oracle Corporation. Statements in this presentation relating to Oracle’s future plans, expectations, beliefs, intentions and prospects are “forward-looking statements” and are subject to material risks and uncertainties. A detailed discussion of these factors and other risks that affect our business is contained in Oracle’s Securities and Exchange Commission (SEC) filings, including our most recent reports on Form 10-K and Form 10-Q under the heading “Risk Factors.” These filings are available on the SEC’s website or on Oracle’s website at http://www.oracle.com/investor. All information in this presentation is current as of September 2019 and Oracle undertakes no duty to update any statement in light of new information or future events. Copyright © 2020 Oracle and/or its affiliates. Oracle WebLogic Server and Coherence Have Powered The Most Demanding Enterprise Applications Scale and Performance Fusion Middleware, Apps Robustness and Availability Oracle WebLogic Server, Coherence Operational Simplicity and Efficiency Proven, Secure, Integrated Copyright © 2020 Oracle and/or its affiliates.
    [Show full text]
  • Graalvm the Holy Grail Or Just Another Sau, Die Durchs Dorf Getrieben Wird?
    GraalVM The holy grail or just another Sau, die durchs Dorf getrieben wird? Thilo Ognibeni Köln, 03. März 2020 Have you ever heard of…? Thilo Ognibeni Software Architect / Developer Usually feeling at home in the (Java) middleware … with an exception/hiccup of Vue.js Born in Aalen, studied in Ulm, ended up in KA Worshipping agile development Proudly playing the accordion 5 GraalVM – Behind the scenes GraalVM – Practical usage Disadvantages of Java › You need a JRE to run Java programs ! › Java is slow! … Is it?? › High memory consumption › Long start-up times › “Warm-up phase” of the JVM › Not really viable for serverless computing 7 GraalVM, a VM, or what? GraalVM – a VM … more *and* less! › Name of the whole project at Oracle › Implementation of the Java Virtual Machine › Support for Native Images › Truffle Language Implementation Framework › LLVM Runtime and JavaScript Runtime › Polyglot › Embeddable › Written in Java 9 GraalVM – History and Options › Development started around 7 years ago at Oracle Labs and Johannes Kepler University Linz › New compiler for the 20 year old HotSpot Compiler › First production-ready version, GraalVM 19.0, released in May 2019 › Since 19.3.0 based either on OpenJDK 1.8.0 or 11 › Available as Community or Enterprise Edition 10 Java Virtual Machines for Beginners Graal Compiler 11 https://dzone.com/articles/jvm-architecture-explained Java Virtual Machines for Beginners 12 https://jrebel.com/rebellabs/graal-and-truffle-for-polyglot-languages-on-jvm/ GraalVM Compiler › Modern JIT Compiler › Replacing C2 Compiler in HotSpot › Written in Java (modular and extendable) › Aggressive use of › Inlining › Polymorphic Inlining (using profiling data) › Partial Escape Analysis › etc.
    [Show full text]
  • Pro Java Microservices with Quarkus and Kubernetes a Hands-On Guide
    Pro Java Microservices with Quarkus and Kubernetes A Hands-on Guide Nebrass Lamouchi Pro Java Microservices with Quarkus and Kubernetes: A Hands-on Guide Nebrass Lamouchi Paris, France ISBN-13 (pbk): 978-1-4842-7169-8 ISBN-13 (electronic): 978-1-4842-7170-4 https://doi.org/10.1007/978-1-4842-7170-4 Copyright © 2021 by Nebrass Lamouchi This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. Trademarked names, logos, and images may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, logo, or image we use the names, logos, and images only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. The use in this publication of trade names, trademarks, service marks, and similar terms, even if they are not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject to proprietary rights. While the advice and information in this book are believed to be true and accurate at the date of publication, neither the authors nor the editors nor the publisher can accept any legal responsibility for any errors or omissions that may be made.
    [Show full text]
  • Application Initialization at Build Time
    Initialize Once, Start Fast: Application Initialization at Build Time CHRISTIAN WIMMER, Oracle Labs, USA CODRUT STANCU, Oracle Labs, USA PETER HOFER, Oracle Labs, Austria VOJIN JOVANOVIC, Oracle Labs, Switzerland PAUL WÖGERER, Oracle Labs, Austria PETER B. KESSLER, Oracle Labs, USA OLEG PLISS, Oracle Labs, USA THOMAS WÜRTHINGER, Oracle Labs, Switzerland Arbitrary program extension at run time in language-based VMs, e.g., Java’s dynamic class loading, comes at a startup cost: high memory footprint and slow warmup. Cloud computing amplifies the startup overhead. Microservices and serverless cloud functions lead to small, self-contained applications that are started often. Slow startup and high memory footprint directly affect the cloud hosting costs, and slow startup canalso break service-level agreements. Many applications are limited to a prescribed set of pre-tested classes, i.e., use a closed-world assumption at deployment time. For such Java applications, GraalVM Native Image offers fast startup and stable performance. GraalVM Native Image uses a novel iterative application of points-to analysis and heap snapshotting, followed by ahead-of-time compilation with an optimizing compiler. Initialization code can run at build time, i.e., executables can be tailored to a particular application configuration. Execution at run time starts witha pre-populated heap, leveraging copy-on-write memory sharing. We show that this approach improves the startup performance by up to two orders of magnitude compared to the Java HotSpot VM, while preserving peak performance. This allows Java applications to have a better startup performance than Go applications and the V8 JavaScript VM. CCS Concepts: · Software and its engineering → Runtime environments.
    [Show full text]