Live data from Hacker News

Launch HN: Nestybox (YC S20) – Containers beyond microservices

news.ycombinator.com

21–30 of 112 posts

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#21
can you run kubernetes in nestybox ? entirely within the container ?

if you can do this (and build a great experience around it), you have a winner.

k3d.io does it somewhat...but not all the way. Updates,rollbacks, etc - everything that a sysadmin need.

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#22

can you run kubernetes in nestybox ? entirely within the container ? if you can do this (and build a great experience around it), you have a winner. k3d.io does it somewhat...but not all the way. Updates,rollbacks, etc - everything that a sysadmin need.

Yes, it's possible already to run K8s entirely inside a system container deployed with Docker + Sysbox. It's as easy as "docker run --runtime=sysbox-runc -it some-image" and running kubeadm inside to setup K8s. We also have images that come preloaded with K8s to make it easier.

Here is a demo video: https://asciinema.org/a/V1UFSxz6JHb3rdHpGrnjefFIt?speed=1.75

Having said this, K8s is very complex and while its most common functionality works inside the container, we've not yet tested it all.

Here is a doc that describes this in more detail, including what is supported and not supported at this time: https://github.com/nestybox/sysbox/blob/master/docs/user-gui...

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#23

can you run kubernetes in nestybox ? entirely within the container ? if you can do this (and build a great experience around it), you have a winner. k3d.io does it somewhat...but not all the way. Updates,rollbacks, etc - everything that a sysadmin need.

Yes, it's possible already to run K8s entirely inside a system container deployed with Docker + Sysbox. It's as easy as "docker run --runtime=sysbox-runc -it some-image" and running kubeadm inside to setup K8s. We also have images that come preloaded with K8s to make it easier. Here is a demo video: https://asciinema.org/a/V1UFSxz6JHb3rdHpGrnjefFIt?speed=1.75 Having said this, K8s is very complex and while its most c…

We also created a simple tool called kindbox that runs K8s inside system containers deployed with Docker + Sysbox. It's a simple bash script around "docker run --runtime=sysbox" commands. It does some of the same things that K8s.io KinD tool does, but using simpler Docker images and without using privileged containers. It's meant as a reference example to show developers how to deploy K8s clusters using Docker + Sysbox.

You can find kindbox here if you are curious: https://github.com/nestybox/kindbox

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#24
post #4

This seems like a feature that, once the need is demonstrated, docker will add to its own product eliminating the niche you hope to fill. Is it wise to go through all the effort and risk of starting a business to prove demand for a feature that an existing established product will then add, removing the need for your company? (Note this question is not a general critique of all startup ideas, it's specific to startup…

Isnt this true for most non-giant-funded non-hard-tech startup out there who are anywhere near a funded competitor?

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#28

can you run kubernetes in nestybox ? entirely within the container ? if you can do this (and build a great experience around it), you have a winner. k3d.io does it somewhat...but not all the way. Updates,rollbacks, etc - everything that a sysadmin need.

Yes.

Having said that, we have certain limitations at the moment (e.g. we don't run all cni's), but we are not relying on priv containers as i believe is the case for existing K8s-in-docker solutions (pls correct me if i'm wrong in k3d's case).

Btw, we haven't tested k3d.io & sysbox interaction yet (part of our roadmap), but i believe we should be able to interoperate after making some minor adjustments. That would allow existing k3d users to operate in a more secure environment.

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#29

Congrats on the launch - looks very interesting! Are there any performance implications using this custom runtime? Have you used this in production systems? Are there any known limitations of using sysbox?

Thanks! Performance wise, we've not noticed any reduction in performance compared to a regular container, mainly because Sysbox sits on some control-path operations (e.g., accesses to /proc/sys, mount syscall, etc) but is really not intercepting anything on the datapath. For example, deploying K8s inside a system container takes As far as using this in production, the software is well tested but has not been used in production to the best of our knowledge. It has room to mature still, both in term of functionality and security, but it's in pretty good shape already. We hope open-sourcing it allows it to mature it faster.

And as far as limitations, there are a few, here is a list: https://github.com/nestybox/sysbox/blob/master/docs/user-gui... . We hope to remove some of these as the product matures too.

Re: Launch HN: Nestybox (YC S20) – Containers beyond microservices

#30

Congrats on the launch - looks very interesting! Are there any performance implications using this custom runtime? Have you used this in production systems? Are there any known limitations of using sysbox?

Thanks!

We are out of the critical path, meaning we only emulate interactions with procfs / sysfs, and we only intercept mount syscalls at the moment, so we don't see any tangible performance hit. Having said that, we haven't done large scaling&perf tests yet.

Post reply on HN