We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Nydus Image Service for Confidential Containers

00:00

Formal Metadata

Title
Nydus Image Service for Confidential Containers
Title of Series
Number of Parts
542
Author
License
CC Attribution 2.0 Belgium:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
In order to ensure the confidentiality and integrity of container images, we need to download all container images from the registry within trusted domains when creating pods. Current solutions have many disadvantages. The pod/container startup time is extremely slow, the pressure on the network and container registry is high, and additional CPU, memory, and disk IO are consumed. The Nydus Image Service project aims to reduce container startup time and resource consumption through techniques such as lazy loading and data deduplication, which may help to solve the problems of container image management for confidential containers.
Computer-generated imageryService (economics)Point cloudStaff (military)Kernel (computing)Projective planeOpen sourcePoint cloudData managementPhysical systemHypermediaMassLattice (order)Service (economics)Operational amplifierAddress spaceFlow separationExecution unitMedical imagingImage organizerKernel (computing)Theory of relativityHacker (term)Process (computing)Computer animation
Data integrityData managementComputer hardwareType theoryRead-only memoryBefehlsprozessorData storage deviceComputer-generated imageryEncryptionTransport Layer SecurityRootComputer fileContent (media)Overhead (computing)Cache (computing)Service (economics)Local ringWindows RegistryFile formatIntegrated development environmentKernel (computing)Asynchronous Transfer ModeBlock (periodic table)Directory serviceData compressionComputer wormMaizeRaw image formatDifferent (Kate Ryan album)MathematicsPressureEncryptionCartesian coordinate systemInstance (computer science)WorkloadControl flowRaw image formatRootVirtual machineImage organizerPeripheralContent (media)Local ringComputer fileData storage deviceNormal (geometry)Library (computing)File formatMedical imagingProjective planeComputer hardwareEndliche ModelltheorieMultilaterationAddress spaceAdditionService (economics)Graphics processing unitInformationData managementINTEGRALInstallable File SystemShared memoryWeb pageVirtualizationRead-only memoryInterface (computing)Internet service providerLevel (video gaming)File systemWindows RegistryModulare ProgrammierungSoftware frameworkComponent-based software engineeringPhysical systemMusical ensembleMultiplication signElectronic mailing listBlogLattice (order)SpacetimeCondition number1 (number)Observational studyPhysical lawMassHypermediaCombinational logicSemiconductor memoryExecution unitOpen sourceRadiusForcing (mathematics)Perfect groupSoftware testingPhase transitionSatellite2 (number)SoftwareUniqueness quantificationMetropolitan area networkCASE <Informatik>Design by contractComputer-assisted translationIntegral domainComputer animation
PixelOverlay-NetzRun time (program lifecycle phase)Overhead (computing)Computer-generated imageryAsynchronous Transfer ModeFile formatComputer fileEncryptionMeta elementLetterpress printingPhysical systemView (database)Data compressionInformationNumbering schemeSpacetimeLibrary (computing)Kernel (computing)Cache (computing)Windows RegistryWorkloadEndliche ModelltheorieProjective planeMedical imagingBlock (periodic table)InformationMetadataComputer fileSpacetimeCausalityView (database)Internet service providerFile formatTask (computing)Core dumpEmailFile systemRun time (program lifecycle phase)Streaming mediaGroup actionLibrary (computing)Interface (computing)Overlay-NetzCartesian coordinate systemType theoryAsynchronous Transfer ModeOpen sourceRevision controlPresentation of a groupData conversionMusical ensembleSineHypermediaLattice (order)Physical systemMereologyMessage passingData storage deviceArithmetic meanNetwork topologyServer (computing)Forcing (mathematics)State of matterPhysical lawRemote procedure callTaylor seriesArchaeological field surveyDevice driverEstimator40 (number)Functional (mathematics)Computer animation
Physical systemFile formatComputer-generated imageryCache (computing)Library (computing)SpacetimeAsynchronous Transfer ModeMeta elementWindows RegistryWorkloadService (economics)Table (information)EncryptionInformationData integrityData storage deviceComputer networkOpen sourceElectronic signatureError messageOverlay-NetzMiniDiscRun time (program lifecycle phase)DisintegrationLink (knot theory)DigitizingMedical imagingINTEGRALMetadataRemote procedure callMechanism designNetwork topologyCache (computing)EncryptionBlock (periodic table)Trigonometric functionsData integrityCartesian coordinate systemCombinational logicWindows RegistryCryptographyService (economics)CASE <Informatik>Multiplication signIntegral domainAttribute grammarPublic domain2 (number)Direction (geometry)Run time (program lifecycle phase)Formal verificationInternet service providerFile formatType theoryImage organizerStructural loadAsynchronous Transfer ModeLevel (video gaming)Software developerInterface (computing)System callDegree (graph theory)Archaeological field surveyState of matterMoment (mathematics)Revision controlBlogAddress spaceForcing (mathematics)HypermediaMetreHazard (2005 film)Information privacyHybrid computerField (computer science)Physical lawProjective planeRow (database)SpacetimeComputer-assisted translationData managementPredictabilitySystem administratorTraffic reportingMilitary baseChannel capacityCasting (performing arts)Computer animation
Program flowchart
Transcript: English(auto-generated)