Challenges of File System Isolation in Container Environments

Explore the challenges of file system isolation in a 33-minute conference talk by Santhosh Kumar Shanmugham from Twitter. Delve into Twitter's use of Apache Aurora on Apache Mesos for scalable cluster management and microservices deployment. Learn about the platform's adoption due to Aurora's deploy features and Mesos' resource isolation capabilities. Discover Twitter's approach to isolating CPU, memory, disk, and network bandwidth in containers, and understand the limitations in file system isolation. Examine the company's experiments with Docker containers to enhance isolation between host and container. Gain insights into the challenges of implementing Docker at scale, including container launch delays, image distribution, and network isolation. Compare different levels of file system isolation and their implications for large-scale deployments.

Intro
Problem Statement
What is Filesystem Isolation?
Filesystem Isolation Levels
Isolation - a catch
Full Isolation
Container Launch Delay
Image Distribution
Bittorrent Installation
Port-Mapping isolator
Leecher Network Isolation
Filesystem Isolation Comparison