February 2017 Container Newsletter.

Hello from all of us here at Sysdig! Here we are again with this newsletter to share the latest happenings in the container ecosystem across vendors and open source projects like Docker, Kubernetes, DC/OS Mesos, Openshift, etc. We hope you enjoy this! Ping us at @sysdig or on our open source slack group #sysdig to share anything you feel we should include here, we are looking forward your contributions!


cgroups and swap limits

A good read for understanding how cgroups memory limits work together with swap.

How-to debug a running Docker container from a separate container

Can you imagine how hard could be troubleshooting Docker without Sysdig? They tell us here.

Docker attachable networks

Usage and use cases of the new Docker 1.13 attachable networks.

4 Docker misconceptions

This article is a good summary for those still container skeptic.

The smallest possible Docker image

Can we shrink things into a single binary Docker image? Read it here.

Dissecting a Docker image

Taking a Docker image apart into pieces we can explore is a great exercise to understand Docker image internals.

Secrets on Docker Swarm with Docker Compose

A step by step guide on using secrets in docker-compose.yml with Docker Swarm.

Layer Cloning FileSystem, purpose-built Docker storage driver

A new file system to be used for containers making up to 2.5x faster to build an image and up to almost 2x faster to pull an image.

Kubernetes vs Mesosphere vs Swarm

We have covered Kubernetes, Mesosphere and Swarm comparisons before, but this one got really popular this month.


10 most common reasons Kubernetes deployments fail

A great guide into Kubernetes troubleshooting from a high level users perspective just using kubectl get|inspect|logs: part 1 and part 2.

Thoughts on Kubernetes

A mashup of personal views and issues moving from AWS, Terraform, and Ansible into Kubernetes on GCP. We liked how he explains the use of Ingress with Letsencrypt to automate certificate deployment.

Ingress with LE and Helm

Ingress and Helm are both gaining a lot of popularity lately, this explains how to use them both together.

Kubernetes available on Azure

Azure is the first cloud provider in offering the 3 most popular container orchestration tools: Kubernetes, Docker for Azure, and DC/OS Mesos in addition to their own ACS (Azure Container Service).

CoreOS ends Fleet support in favor of Kubernetes

CoreOS has announced they are killing Fleet recommending and supporting Kubernetes running on CoreOS.

AWS’s Kubernetes dilemma: It’s a burden and a pleasure

With Kuberentes being the default community container orchestration tool and Azure offering the 3 of them, what is AWS strategy regarding containers? ECS or K8S or both?


This is a small CLI tool to wait required services to be up, specially interesting when writing Helm packages.


Using StorageClasses in Openshift

StorageClasses allow provisioning and configurable storage available for your containers in Openshift and Kubernetes. This is a great intro to this feature.

Goodbye OpenShift All-In-One VM, Hello Minishift

Virtualbox + Vagrant has been a source of frequent issues, that’s why Openshift team will drop the VM in favour of Minishift, a Minikube based solution.


FOSDEM videos available

We presented Sysdig and Falco at FOSDEM, the biggest european open-source developer event, check out the videos of our 3 talks here!

OpenShift Commons Briefing

The OpenShift commons community invited us to present a webinar on how to monitor microservices on Openshift and Docker.