Containerization

• Discovery

  • yacht to easily deploy stuff on your HomeLab - src
  • watch tower

• What?

  • compared to type 1 hypervisors
    • Can be used in every OS
    • More performant
      • faster to boot (doesn’t need to boot entire OS)
      • less memory needed
      • might provide better CPU
    • Isolate by process & OS level
    • Uses hosts OS kernel - more attack surface

• Docker - CLI

• Docker compose - file to setup multi-container apps

  • docker-compose up - run every container
  • docker-compose down - stops all
  • docker-compose watch - re-run container on changes

• kubernetes - CLI - Orchestration of containers

  • can also manage non-containerized applications through the use of init containers and sidecars

• portainer.io - GUI to manage single docker instances

  • has some of the kubernetes functionality but not every one of them

• Docker desktop

• rancher - GUI to manage multiple kubernetes clusters