Vancouver, BC, Canada
August 27 & 28 - Co-Located Events, Tutorials, Labs & Lightning Talks
August 29-31 - Conference
Click Here For Information & Registration
Back To Schedule
Thursday, August 30 • 4:50pm - 5:30pm
Building OCI Images without Privilege - Tycho Andersen, Cisco

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
An age old problem, especially in large enterprises, are piqued sysadmins who rightfully do not trust developers and won't give them root. Another age old problem of containers is: how do we build root filesystems to run? A smooth experience for building rootfses is one of the things that Docker made a great experience, but it uses a privileged daemon. And yet, the developers have to build product binaries on systems that are provided by said sysadmins.

Enter stacker, a tool which can build OCI images without privilege, using user namespaces via LXC, without any extra trickery. In this talk Tycho will give a brief introduction to stacker's declarative yaml format for building container images. He will also give a basic overview of the guts of stacker and how it accomplishes its goals.


Tycho Andersen

Technical Lead, Cisco Systems
Tycho is an engineer at Cisco working Linux platforms. He holds degrees from the University of Wisconsin--Madison and Iowa State University, and has co-authored several peer-reviewed papers. In his spare time he rides bikes and does improv comedy.

Thursday August 30, 2018 4:50pm - 5:30pm PDT
Room 118