交通事故認(rèn)定復(fù)議申請(qǐng)書(shū)

1、解決方案基于容器的ContainerOps 目錄00個(gè)人簡(jiǎn)介個(gè)人簡(jiǎn)姓:馬性:工作經(jīng):華年，現(xiàn)任華為開(kāi)源軟件能力中心架構(gòu)師Email: ?目錄 解決方案背景介紹一、ContainerOps CONTENTS 解決方案架構(gòu)設(shè)想二、ContainerOps 三、ContainerOps解決方案技術(shù)實(shí)踐 技術(shù)實(shí)踐下階段計(jì)劃四、 TRPA 1解決方案背景介紹ContainerOps 目錄01解決方案背景介紹ContainerOpsContainerOps初衷?分布式的未來(lái)，容器是軟件分發(fā)標(biāo)準(zhǔn)全面容器化DevOps? 目錄02解決方案背景介紹ContainerOpsDevO

2、psV3.0以容器為核心的V2.5DevOpsDevOps過(guò)渡形態(tài)多語(yǔ)言1.V 2.0DevOps2.工具兼容容器多語(yǔ)言1.3.物理機(jī)工具生態(tài)鏈2./VM/Container/VM物理機(jī)3.V1.0DevOps腳本語(yǔ)言1.無(wú)生態(tài)工具2.物理機(jī)3. 目錄03解決方案背景介紹ContainerOpsContainerOps特點(diǎn)?符合OCI容器規(guī)范?面向分布式，支持集群部署?基于容器的生態(tài)工具鏈基于微服務(wù)架構(gòu)設(shè)計(jì)? TRPA 2解決方案架構(gòu)設(shè)想Containerops 目錄01容器生態(tài)技術(shù)棧Container ecosystem stackAPP & ServiceMicroServicePubli

3、c Cloud ServiceHybrid cloud ServiceSDN/NFVDevOps& ToolscAdvisorDocker MachineContainerOpsOrchestration & ScheduleK8sMesosDocker SwarmDocker ComposeFleetContainer virtual networkLibnetworkFlannelWeavePipeworkOS& ContainerCoreOSAtomicRancherOSLXCLXDDockerRocketHardWareARMX86 目錄02總體架構(gòu)ContainerOpsCLI In

4、terfaceWEB/REST API InterfaceContinuous Continuous Application Version Controller SubsystemDelivery Integration SubsystemSubsystem Distributed Application Distributed Source Version Version Controller ModuleController Module CD Control CI Workflow Engine Engine ModuleModule Source Convert Applicatio

5、n ModuleDistributed Key/Value DBDistributed Object StorageDistributed Resource AllocDeploymentCIDevelopment 目錄03版本控制子系統(tǒng)ContainerOpsApplication Version Controller Subsystem Distributed Source Version Controller ModuleDistributed Application Version Controller ModuleWEB Interface Git Compatible Contai

6、ner Compatible User/Organization Project Management ModuleInterface ModuleInterface Module Source Version ModuleApplication Version Module Source Convert Application ModuleDistributed Object StorageDistributed Key/Value DB 目錄04代碼托管工具分析版本控制子系統(tǒng)ContainerOpsGitContainerOpsDistributed every commit of one

7、repository to different Could not split a single repository to different Distributedserver or regionlocationA distributed key/Value database with high Key/Value A low performance, single-copy fileStorageperformance,multi-copydatabaseApplicationApplication version control functionbuild in.application

8、 version function.NoVersionSupportedBig FileSupportedSupportNo testing functionTestingwith container build.GolangLanguageC50T (Base on Reborndb capacity)30T (Base on Git host service)Capacity 目錄05持續(xù)集成子系統(tǒng)ContainerOpsContinuous Integration SubsystemCLI InterfacWEB InterfacREST API Interfac

9、e Continuous Integration Workflow EngineContainer MechanismsFor DeploymentDistributed Resource AllocDistributed Object StorageDistributed Key/Value DB 目錄06工具分析持續(xù)集成子系統(tǒng)DevOpsContainerOpsJenkinsContainerOpsMulti-pipelinesupported and more complex micro PipelineNonsupportedservice testing supportContain

10、eris the coreCompatiblebase ContainerAllREST APISupporttedSupported SupporttedSupporttedWEB UI 目錄07持續(xù)部署子系統(tǒng)ContainerOpsContinuous Deployment SubsystemCLI InterfacWEB InterfacREST API Interface Distributed Log Collection/Analytics Continuous DepliveryWorkflow Engine Distributed Container PerformanceKu

11、bernetesDistributed Resource AllocDistributed Object StorageDistributed Key/Value DB TRPA 3解決方案技術(shù)實(shí)踐ContainerOps 目01布式應(yīng)用版本控制技術(shù)實(shí)踐分提供存取Docker和Rkt主流容器鏡像的分布式鏡像托管OCI Hub，目前支持DockerV1/V2協(xié)議提供向云端的對(duì)象存儲(chǔ)接口Storage interface，目前支持S3/google云/阿里云/騰訊云/七牛云/又拍云 Distributed Application Version Controller Docker(V1)OCI H

12、ub 1 RktRktStorage Docker(V2)interface OCI Hub 2OCI Hub 3 RktRktRkt 目錄02差異分析OCI Hub技術(shù)實(shí)踐主流容器SpecRktDockerRktDocker半開(kāi)放，Docker擁有實(shí)際控制完全開(kāi)放，通過(guò)討論形成決的每一層存在一個(gè)Image一個(gè)目錄，Image 每個(gè)權(quán)議目錄下有Image Docker目錄，在manifest rootfs目錄和由開(kāi)放性文件保存repositories Layout構(gòu)成只開(kāi)放Registry實(shí)現(xiàn)完全開(kāi)放，不限定服務(wù)，限定用戶服信息Image 務(wù)端實(shí)現(xiàn)端實(shí)現(xiàn)完整性O(shè)CI規(guī)范runtime容器遵循a

13、rchive 目錄每個(gè)Image Image 的每一個(gè)目錄都Image 文件，可以壓.aciarchive 一個(gè)文件，沒(méi)有壓為一個(gè)Archives一致性Docker對(duì)API 實(shí)現(xiàn)存在不一致rkt實(shí)現(xiàn)和協(xié)議是一致xzbzip2 和縮為格式?？s，是tar gzip、傳輸協(xié)等BT HTTPS 協(xié)議，同時(shí)支持HTTP 和HTTPS 議更多協(xié)議Image簽使用pgp簽名和加密使用libtrust簽名，無(wú)加密名和加密簽名，不能第Host 任何的服務(wù)方都可以簽?zāi)壳爸荒芎灻麢C(jī)Docker三方簽名名制對(duì)aci文件進(jìn)行SHA512 對(duì)Image 的每一層tar 文Image ID件進(jìn)行隨機(jī)生成Image IDID

14、校驗(yàn)值作為目前都是推薦在HTTPS 認(rèn)證下使用Basic Authorization 認(rèn)證DockerRegistry API 比較復(fù)雜，比較簡(jiǎn)單，Metdata協(xié)議復(fù)Service運(yùn)行時(shí)通過(guò)外部命Image 運(yùn)行時(shí)需要包含Image 尤其是版本迭代比較快，實(shí)現(xiàn)比Manifest容易實(shí)現(xiàn)雜度令指定的資源參數(shù)較難 目錄03差異分析V1 vs V2技術(shù)實(shí)踐Docker存儲(chǔ)協(xié)議OCI HubDockerV1協(xié)議（docker-registry）DockerV2協(xié)議（distribution）相同相同Image LayoutImage Archives相同相同Image ID相同相同無(wú)manifest

15、，每層Image包含各自的json、使用唯一的manifest記錄描述信息，manifest包Manifest含兼容V1描述信息layer、checksum協(xié)議的描述信息使用libtrustSignature無(wú)簽名layer中校驗(yàn)HEAD，在GET、PUT、POST、HEADGET、PUT、POST協(xié)議方法 目錄04差異分析存儲(chǔ)協(xié)議DockerOCI Hub技術(shù)實(shí)踐V1 vs V2Image Manifest：存儲(chǔ)組織結(jié)構(gòu)相同，差異主要體現(xiàn)在存取Image時(shí)的ManifestDocker V1Docker V2Json A2Layer A2Layer A2TagChecksum A2Manif

16、estRegistryTagDistributionJson A1Layer A1Repository NRepository 1Repository NRepository 1Layer A1Image A2Checksum A1Image A2Image A1Image A1Image A1Image A1Json ALayer ABase Image ABase Image ABase Image ABase Image ALayer AChecksum A 目錄05差異分析OCI Hub技術(shù)實(shí)踐Docker存儲(chǔ)協(xié)議V1 vs V2規(guī)范化改進(jìn)并增加簽名機(jī)制V2Signature：V1Do

17、ckerDockerV24Authorization RegistryServiceRegistryIndexAuthenticated by5JSON Web Token264Authenticated by Token3152361Docker DaemonDockerclientpull samalba/busybox$dockerpull samalba/busybox$docker 目錄06格式鏡像OCI Hub技術(shù)實(shí)踐支持存取DockerV1&V2的鏡像V2Dockyard功能技術(shù)實(shí)踐，分別支持存取Docker V1和目前完成OCI Hub的ContainerOpsSource C

18、I/CDcontrolOCI HubWrenchDockyardCrewPullPullPullPushPushDockerV1 DaemonDockerV2 DaemonRKTV2 clientDockerV1 clientDocker 目錄07格式鏡像存取過(guò)程OCI Hub技術(shù)實(shí)踐支持DockerV1Push Pull 目錄08格式鏡像存取過(guò)程DockerV2OCI Hub技術(shù)實(shí)踐支持Push Pull 目錄09技術(shù)實(shí)踐組織架構(gòu)Storage Interface AmazonS3CloudGoogleCloud Object Storage InterfaceRuntime manifest config AliCloudDriver handler Driver ARegister AccesshandlerhandlerDriver BUpCloudDriver CCustom-made storag