Hello, hello. Welcome. Welcome to our all-day movie workshop. Nice to see you all. I'm Peter. I'm going to be your host today and Yeah, I can just let anybody new know the how the day will flow So we're going to start with a movie with David and then we'll have a 10-minute break and Then we're going to have our breakout rooms where you can share anything that comes up for you during the movie or any feelings that you have and Then we'll have a longer 45-minute break after that and then I'll be holding the closing session at the end So enjoy the the session today and I'll pass it over to you now David Thank You Pete. Hi everyone Welcome welcome. Oh Wow, we are going to have such a spectacular Amazing day today amazing healing We are going all the way into the heart of God with this Beautiful movie today and and I feel like this whole movie workshop today will just will be like Cascading miracles just like a fountain trickling So many miracles down and just washing on you just washing on you all you have to do is is lay there and bathe in it receive it So We have a we have a movie opportunity again today and And we have some amazing themes. I mean These are like all-time themes. So you could just take one of them and You could ride it like a horse And Write it right into the wind and get lifted up into heaven with just one of these things but we have we have about five spectacular themes today, which really led me to pray on the movie and When Jesus told me the movie I think I had a little tear in my eye because this movie is I think perhaps the greatest Relationship movie in all of history. He has picked The greatest relationship movie in all of history, you know how I like movies How many times have I watched the Matrix? How many times have I watched Truman show? Pocahontas the Lion King all the great movies. I Think actually honestly, I have watched this movie more times than any other movie And when I say I've watched it more than any other movies because it It always brings tears to my eyes. It always brings The tears rolling down the cheeks because I think oh my god, this is like a masterpiece of Reaching the heart This is the kind of movie that wants to crack your heart wide open that wants to Make you feel the love of God and to feel the love of all your brothers and sisters in a way that your heart is bursting bursting It reminds me of one of the first two course of Miracle students in the world Basically Bill Thedford Was there with Helen. They were the first two course of Miracle students and by the end of Bill's life On the 4th of July His declaration of independence. He went out for a walk on the sidewalk in front of Judy's Gutches Whitson's house and his heart literally exploded It the there was a doctor a cardiologist It was cutting shrubs in the neighborhood in the in the house next to where Bill was and he saw it happened So he saw that Bill instantly died He instantly laid his body aside with no pain in one instant and the doctor said he was he died instantly Even before his body hit the ground he died It was the most quick laying aside of the body as you can imagine he his heart literally exploded they literally did an autopsy and and Bill's heart had exploded and That's kind of how I feel about this movie Emotionally, I feel like this movie if you just show up here and you pray to Jesus and you say show me whatever I need to see Because I'm ready to return to God. I'm ready to Return home to heaven This movie can't take you there. I think that's why I've watched it so many times. It's involuntary. I Cannot not watch it I've seen it more than Pocahontas and you know, I watch Pocahontas every year I've probably seen this movie about I don't know 80 or 90 times Sounds like a like a love song that you love that you play over and over on the on the rec recording that you got You love it so much That's when I say I'm gonna show you one of the all-time great classics. I'm not overstating this at all This is it if if you can't feel the love of this movie then wow, I don't know you you you need a Super miracle charge and this movie will do it for you Even if you're stranded You know, I always say what would you if you had one movie to watch before you pass away Why don't you watch this one? I I would This is a movie that's so great So here's the here's the themes that you came up with and voted on this week coming in number one with 98 votes Far and away the top theme is letting go of trying to control the script So that's what you voted for Well, if that was the only theme you had the rest of your life That would be enough to take you beyond this world. Why? Because even some of you know 12-step programs the serenity prayer, you know to to Control the things that you can to release Those things you cannot control and the wisdom to know the difference The course in miracles is just an expanded version of the serenity prayer It's all there in the serenity prayer and and that's why the first theme letting go of trying to control the script is so important because Jesus is teaching us in the course that the script is written Jesus says at one point Right before the rules for decision.  If you really really want to wake up just get a cat and See if you don't get like thousand forgiveness lessons every day Because why because the cat is sent by the Holy Spirit to show you you have no control over the world Just when you think you might have Jason's got two two cats. You're on the fast track Jason That's it. You're just on the fast track. What can I say? Reading books like The Course in Miracles the power of now and having two cats. Wow You're on the fast track. There's a relationship for you. That's that'll take you into a holy relationship in a in a hurry in an accelerated celestial speedup so anyway The whole point is to learn to live in presence, I mean Back in the 1960s when the course was just being scribed We had a group of people in the United States that were we they were called the hippies and The hippies were so cool because they were like they just let their hair grow and wear their beads and and War all kinds of clothes and they like to sing and they like to dance and they basically Lived by the motto go with the flow Well, that's pretty good because that's what A Course in Miracles is teaching trust God Trust your intuition. Go with the flow Live in presence live in joyful happy presence that that is the key to everything is Flowing in that presence Flowing with that internal teacher Flowing with that internal guidance. So the hippies had it right Go with the flow and that's been talked about for many many centuries It's just that but the hippies the ego is quite clever and ingenious It just tried to sidetrack them a little bit so they really wouldn't get into the flow with sex drugs greed possession all kinds of extremes, you know, you see the ego is quite quite the Genius one at distracting you from the flow, but they had their main motto was right go with the flow And that's all we're doing here We're on go with the flow Saturday And that's why we're going to be watching. I think it's the greatest relationship movie of all time Jesus is pulling out all the stops, you know, he's given it to us as if there is no tomorrow Because he knows there is no tomorrow So he's given it to us the full the full joy. He's not going to hold anything back today Okay, your second one is Seeing the falsity of sickness and death 75 votes. Well You know sickness and death seem to be if you surveyed Spiritual seekers around the world in all the traditions if you surveyed all the course of miracles teachers and students They would tell you that probably sickness and death are two of the biggies. The only problem is there are no biggies There's no order of difficulty and miracles so to Jesus if you read lessons workbook lessons 163 and 167 Jesus says death is is is The experience of anything that is not supremely happy and he even gives examples he says even a little Psy of weariness is death. That's right. Even when you go I'm I'm beat. I'm worn out. Jesus is like well, that's death The little sigh of weariness is death. That's right forget murder wars mess Suicide mess killings all the things of history. That's right a sigh of weariness is death to Jesus a sigh of weariness is death Any experience you have that is not supreme happiness is death. So it's in the mind and So sickness is in the mind death is in the mind Pain is in the mind pleasure is in the mind Every emotion that you've ever experienced is in the mind So what is the body and the five senses there to the Holy Spirit? They're completely neutral It's like not even a blip on the radar, you know, it reminds me of heal me of cancer heal me of heart disease take the coven away and and Jesus is saying don't ask the Holy Spirit to heal the body Ask the Holy Spirit to heal your perception of the body because it's the mind that believes in sickness It's the mind that believes in death. It's the mind that believes in achievements. It's the mind that believes in failure The mind is having a hallucination of separation from God and it's the mind that will wake up Don't even worry about avatars. Who's an avatar? Who's awake? Who's asleep? No, no That's that's not a question. That's not a real question Who's awake and who's asleep? That's like saying of these illusions which illusions are still sleeping and which ones woke up And Jesus is like, come on. That's that's not a very good question at all You're not even giving me a decent question.  Who's the saint, you know? So anyway seeing the falsity of sickness and death I can give you a clue that Sickness and death are a decision That's based on a belief and it's always a decision that's Pointed at you right now. There is no such thing as past sickness or death and there is no such thing as future sickness and death you either Choose the atonement in this moment, which is the resurrection in the life. That's what Enlightenment, self-realization, Self-explanation it's right now You either choose it right now or you're choosing death You may not be consciously aware of this, you know, you may think I don't get that at all I don't understand when Jesus says you're afraid of love. I don't get that I don't know what he's talking about and he's saying well, you're afraid of what you believe love is Because you believe love is sacrifice you believe love is going to take something away from you It's going to take your your life in form away from you Yeah in the in the manual for teachers Jesus is asked how is healing accomplished and he basically says All you have to do is recognize that it's the mind and not the body That's the decision-maker in other words.  Oh, it just cost you the whole world you see nothing much Just the whole world you see That's what the decision to accept the atonement it cost you the whole world you see Why because you'll never see it as linear anymore You'll see it's all simultaneous.  It's it's a it's a fade to light Just like the end of the movie is sometimes fade to black This is fade to light you fade back into heaven. Isn't that nice? Don't you like it that he's the holy spirit is gentle No, this isn't about terror. This isn't about like destruction. This is about re-translation Everyone's saying oh, how will the world end? The world will end in left or it will be re translated Oh, that's some kind I like that re translated this movie will take you light years Ahead in the re translation If you just relax and give yourself to this movie, it is so funny.  I have tears of joy Washing down my cheeks You know, they've actually done research on tears and they find out that the chemical Makeup of tears of joy are different than tears of sadness that tears aren't even tears Tears are just reflecting our state of mind So tears of joy have a different chemical makeup than tears of sadness That should help you too when you're so concerned about what you're going to eat Jesus said it's not what you put in your mouth that defiles It's what proceeds forth from your heart If your heart is not aligned with God, that's where the the difficulties come in. It's not about This diet will take you to heaven or that diet will take you to heaven This exercise routine this mantra this meditation, you know, no, no, it's it's about forgiveness Okay, number three experiencing the power of prayer Prayer is the the medium of miracles and You know, there's just I think there's only one time in this movie where the main character Leans his head back and he looks up Because he's in a moment of prayer. He's he needs help In this movie. There's only one time where he leans his head back and he kind of looks up as if saying Help me I need help here And I think a lot of us have done that where we kind of lean back and we look up like help help And so the power of prayer is is everything If you want God There is nothing That can stop you from experiencing God's love if you want God if you want something other than love then Welcome to distractionville you're gonna get bombarded Your mind's so powerful that if you want something other than love, oh, you'll seem to experience it all right That's what happens in distractionville You've you've landed right in the middle of distractionville and the ego is Smiling because it thinks it's got the mind in such a trap That it will never escape The ego's the ego's like, oh, wow, did I make a great trap? I I tried to make it good, but it turned into a super trap Instead of super tramp. It's super trap so ego made up Time linear time the ego made up bodies Yes, the ego made up interpersonal relationships all to glorify itself And the Holy Spirit can use everything that the ego made to unwind you from the ego So you don't have to worry about judging things as sacred or not sacred in the world because The Holy Spirit can use everything that the ego made to wake you up So if we don't have to really make any divisions about what's spiritual and what's not Everything can be used Okay, the next one I am entitled to nothing but miracles That's that's like a Twisting our our little Our our workbook lesson. I am entitled to miracles too. I am entitled to Nothing but miracles meaning I'm not entitled to money. I'm not entitled to Circumstances being a certain way. I'm not entitled to anything in the script Being different than it is if you look at the world and you Judge that something should be different in the world anything informed you think should be different Then that is an attempt to say I am entitled to things to be different than they are And Jesus is saying no You're just entitled to miracles. You're entitled to accept things exactly as they are right now and that's it That's our only entitlement. Do I have any rights? Do I have any human rights? No You're entitled to accept things exactly as they are right now in your mind Doesn't my body have any rights? No, do I have any female rights male rights? Human freedoms. No, no, no Don't I have freedom of the body freedom of motion? No, you have he's saying no, you don't You you can either have freedom of the body or freedom of the mind But both you cannot have and really you can only have freedom of the mind right now. That's it This is like we're funneled back into enlightenment because we start to realize Wow, that was my whole frustration. I I thought I was entitled To fair treatment. I thought I was entitled to Equality I thought I was entitled To justice I thought I was entitled to A good job. I thought I was entitled to a bigger paycheck to a bigger bank account No, no, no, no, not a nada. Not a nada Jesus is saying you're entitled to miracles and that's really all that you're entitled to And that's why Jesus was so happy. He he knew who he was and that was enough Christ is Enough for me Christ Is enough for me Yes, that's right. If I'm in that happy song I know I'm entitled to know who I am My identity is what I'm entitled to my christ identity and the miracles take me there So that's a that's an important one. And then the last one is how to reel back all projections well, I can't think of anything faster for For being put in an opportunity to reel back all projections than relationships You know, this of course in miracles is definitely not a traditional Pathway to God. This is not traditional You know Meditation is traditional Long periods of meditation fighting against sin I mean even when we think of things like Uh doing various rituals mantras breathing a certain way postures When we when we look at all the different ways throughout history that people have Attempted to approach God of course in miracles is Is kind of unique in the sense that it's saying The ego made relationships to trap you And the Holy Spirit will use them to set you free So the very thing that in traditional relation traditional spirituality was don't get distracted by relationships Jesus is saying Well, you will get distracted by relationships because you believe in the ego So that's that's your starting point you to believe you come to this world is to believe in the ego This whole world is distraction bill So you will automatically get distracted by relationships because that's That's the baseline. That's the default position of this linear world is distraction by relationships You will seem to lose your peace in relationships because the ego set it up that way It's by design And it's called projection Trying to get rid of something that you don't like in yourself If you have something that bothers you It's your own decision to be separate from God that bothers you If you have emotions that are upsetting It's your own decision to have these emotions If you feel dependent on the world dependent on other people dependent on your government with lockdowns or vaccinations or food supply chains or Anything for safety and security.   That's an oscar That's an academy award for acting it out once you see that everything and everyone is just mirroring What's in your consciousness? Then how could you feel anything but gratitude? For at all, you know Because it's all for for your mind to wake up. It's all it all has a good purpose underneath it, which is forgiveness To show you what you denied in awareness to show you that you were doing this to yourself And to help you realize you can stop at any instant Wow, this movie is so good for that now This movie is going to use the concept of reincarnation and Some of you know what jesus has to say about reincarnation It's in the manual for teachers. He you know the the question is posed to jesus is reincarnation so And he says in the ultimate sense You know, it is not true that that you can be born into a body one time or many times He's basically saying The light doesn't come into the darkness ever Even incarnation is just a concept And to believe that life eternal life can squeeze itself into a tiny slab of flesh is pretty ridiculous From the from the spirits point of view. It's it's absolutely unthinkable. It's impossible, but From what we're looking at is jesus saying that basically whatever you believe in can be used by the holy spirit And so he does not Actually insist that you renounce a belief in reincarnation. He basically says give it to me Give it to the holy spirit and me and I will use it to help strengthen your awareness of eternity I will help you go in the right direction with it How can you move in the direction of eternity with the belief in reincarnation? Well, I'll tell you how no one is turned away.  You still Can't have a will apart from god's eternal love No matter how many times you try to Believe that you're something other than divine love. It doesn't matter. You're still divine love You you can't mess it up But the construct of reincarnation is actually something that that is is a belief system that can be used In fact with helen shuckman and bill fedford who were research psychologists at columbia university Jesus used the concept of reincarnation for with them lots Because that was something that they could grasp slightly It wasn't easy at the beginning You know research psychologists are not usually very open to reincarnation But when things get so intense and you have no reason to know why you're so intensely angry Then jesus will use some concepts of time To try to give you a clue to point you in the right direction of forgiveness in the mind so in this movie, we're going to see reincarnation played out and Basically when people ask me about that Everyone that's in your your experience in your perception When you see them you're not really seeing them for the first time You're never meeting any any person for the first time You've been with them for many many many times And you keep looping around and facing the same grievances and issues in the mind and the forms change and the faces change but There are many many instances of The form changing and the and it's the same essence It's the same ones that you've been with so we we may think that we have Every time we seem to have an incarnation. We get a bunch of new people But actually they're not new They're the same old thoughts rehashed regurgitated replayed All we're doing is we're watching a a world of repetition Where everything in our mind is repeating Jesus does say that history would not exist if you didn't keep making the same mistake in the present That's a great line because he's showing us that we need to come more into the present and really get clear of our purpose Because it's not what it seems to be so In order to set this movie up. I I thought I would read a few things from the course because the movie is is just unspeakably good, but we have to Come at it from a perception of and having our hearts open We want to be so open to really glean the lesson That jesus is going to give us So here's what jesus has to say Nothing the world believes is true It is a place whose purpose is to be a home Where those who claim They do not know themselves can come to question What it is they are and they will come again until The time atonement is accepted And they learn it is impossible to doubt yourself And not to be aware of what you are Wow, that should have been in our owner's manual that they should teach that in kindergarten They should have sat us down before the play-doh and and the toys and they should have just Told us in simple terms that we could understand at five years old The world is not our home We're simply coming to question Who we are and finally to stop doubting ourselves and remember who we are that would have been good It would have been good in the owner's manual We should have had an owner's manual when entering time and space and you should be aware of the context of But this is a place and that's why I love children.  What's this over?  Oh, no, I was delighted I was sitting there with the biggest smile on my face and I said this is the best movie I've ever seen I saw that that little boy with his questioning mind Was the way we're all intended to be our entire lives We're not supposed to get grow up and start to just assume things are a certain way We're not supposed to just grow up and believe we're adults functioning adults and then then you believe that That Monday precedes tuesday and it's sunday precedes monday Then you believe that night follows day and day follows night Then you believe that when it rains things will things will get wet You we've learned a bunch of lies We actually believe we know something when we know nothing at all We it would be better if we were like that little boy in the theater and we questioned everything In fact, jesus tells us to do that in the course. He says to learn this course requires you to question every Value that you hold not one can be kept hidden or will obscure your learning He's actually telling us to actively question our belief system so Another quote from jesus be not afraid We only start again an ancient journey long ago begun That but seems new but seems new We have begun again upon a road we traveled on before and lost our way a little while and now We try again Our new beginning has the certainty the journey lacked till now look up And see his word among the stars Where he has set your name along with his the christ Look up And find your certain destiny the world would hide but god would have you see Forget not once this journey is begun the end is certain Doubt along the way will come and go and go to come again Yet is the ending sure? No one can fail to do what god appointed him to do When you forget remember that you walk with him And with his word upon your heart so basically This movie is Is showing us The theater of the world It's going to show us In a way that maybe we have never seen so clearly before that the past is just repeating That our closest relationships that we feel we have in this world Provide us the greatest opportunity for releasing the entire world Because our closest relationships often are the ones that that mirror to us our Biggest investments in this world of time and space If we have any expectations They will be acted out by our close friends and family If we have any desires for the world They will be acted out If we're trying to hide anything from the world and be private and secret about it Yes, these dear beloved ones will act that out too They will show us that secrets are impossible All these funny comedies come out because There's a secret and then the movie teases the secret along And everybody laughs the whole movie as the secret comes out And then when the secret comes out everybody has to laugh Or they cry But but one one way or the other that secret is is coming out The the secret is that we're that we're separate the secret is that we believe we're separate And we're not we're the same one But the belief is in private minds and private thoughts So in the end that's what makes this movie so funny is it is so acted out in the extreme Where we have We have love relationships by a very close knit we'll say family And They are so close That when they try to take on the ego roles of the world then tension comes stress comes As soon as you try to play the role And you forget that it's a role Then you fall into the bait of guilt Guilt is what's underneath this world as soon as you free your mind of guilt the world has no point in being there anymore It's like bye. Bye. Sayonara Thank you Thank you for helping me see who I am.  So that's why these relationships are so essential so valuable If you couldn't see what you were doing to yourself and then the spirits said here, I'll give you a bunch of mirrors The the appropriate response will be thank you Thanks. I needed that The ego does not see it that way the ego Is ba humbug I'm going to go live in a cave by myself rather than face These dark spots of guilt But we know we need to we need to see them come to the surface So in this movie Uh We will start out with the movie and we will see that it's a It's it takes place in virginia very close to washington dc and there Are two people that are deciding to get married louis and karin and um They're going to get married And They also have a very dear friend named philip and uh philip is such a close friend that That karin and louis have just told told him where the key to the house is he basically can come over whenever he wants unannounced this is before the days of cell phones and So this is back in like the mid 60s or 60 63 will say 1963 And basically he just comes he gets the key from the secret hiding place and he comes in So these three have a very close connected relationship And even though louis is getting married to karin There is something going on there because um philip also is In love with karin This would normally be described as a triangle And yet deep down There's a deep genuine love between karin and philip and louis They all love each other very dearly And yet when we bring in the filters of the world with romantic relationships and Partner versus best friend all the all the roles and regulations of the ego That's where the complexity starts Jesus is trying to teach us to Love everyone without exception In fact, I want to read you one quote from the course That basically is telling us that This is from chapter 15. This is this is going to be our key in this movie today In chapter 15. Jesus says it is impossible to use one relationship at the expense of another And not to suffer guilt So if you look at relationships And you believe there's a hierarchy of relationships that some are different from others That some are more important than others That some are more worthy of love and attention and dedication than others That is specialness That is the guilt Agape love unconditional love does not make distinctions between brothers and sisters. It sees everyone equally in from that loving gaze one time bill fedford and Helen were questioning jesus on that because They were like that doesn't seem right. That seems absurd. That seems unrealistic That they said of course Jesus, don't you get it? Of course some relationships are more special than others And jesus's reply was all my brothers are special So he took the very word And he applied it to everyone Everyone is equally loved There is no higher. No lower. No more. No less Love does not look on differences Love doesn't know what it means to compare Love doesn't understand jealousy Love doesn't understand envy these are egoic Meanings of love and that's why jesus says you're afraid of love. You're afraid of the real deal Because you believe in something called death That has covered your awareness From the true eternal love So to come to this world is to believe in death It's to believe that love can be fragmented and love can be special Love can be different So here's what jesus had to say Under the holy spirit's teaching all relationships are seen as total commitments Yet they do not conflict with one another in any way Perfect faith in each one for its ability to satisfy you completely arises only from perfect faith in yourself And this you cannot have while guilt remains So basically I remember the first time I read that line I'll read that one line again because when I first read it in the course in chapter 15. I just Oh, wow This is going to be some kind of adventure To try to grasp this under the holy spirit's teachings all relationships are seen as total commitments Yet they do not conflict with one another in any way I think that's what that's why I love this movie is because jesus is is going to show you It is possible to be in love with everyone You may not believe it You may think that's ridiculous You may think that's absurd But jesus is saying if you stay with me and you follow the holy spirit It's a fact That all relationships are total commitment You mean the the postman who delivers my male Is as much of a commitment as a spouse or a marriage partner Or my mother Or my father you're saying You're saying that little child playing down in the next yard in the neighbor's yard Is is a total commitment You're saying that Everyone I think of and everyone that I've ever been in relationship. It's all Based on a total commitment And it's exactly what it is Yeah, jesus is saying yeah exactly If you want to learn what how god loves you have to learn To love without exception you can't make exceptions to love and no love He even has a section in the manual for teachers where he He the question is what are the levels of teaching and he comes right out and says there are no levels of teaching I love it Now Jesus really is getting to the core of things. What are the levels of teaching? There are no levels of teaching Everything is part of god's plan and there are no exceptions There's no higher levels of teaching and no lower levels of teaching. There's no middle levels of teaching There are no levels of teaching And then After he says that he goes on to describe three levels of teaching You gotta love jesus because it's almost like I know i'm preaching to the choir here The angels are all like Yes, yes, there's no levels of teaching. He's like all right Sit down choir now. I'm talking to the humans Okay, there's no levels of teaching Now here's the three levels of teaching Why he's got to throw something he's got to throw a ladder he's got The angels are like We're all one. It's all one It's all love. It's all god and then he's like good good choir choir come down a little bit here I've got the humans on the line Through hella So there are no levels of teaching and here's three and he says One of them he calls a chance encounters like two people meeting in an elevator or Two people just bumping into one another someone you might see on the street or in the grocery store or You know at the shop or the shopping mall It's like a brief encounter And then he has a second one where he calls it two people come together for a very intense teaching learning situation And then appear to separate so what he's talking about most relationships on earth Are level two most significant relationships like with your parents, you know with your Spouse your boyfriend your girlfriend. These are level two and then the third one is Uh people who are given a lifelong learning partner Um in which the teaching learning balance is exactly perfect And he says these are very rare So, you know, a lot of times people see oh, we're excited. Jesus is talking about soulmates. Hurry get in here Get in here. He's talking about soulmates In the book in the course. He's talking about soulmates But they may be hostile to each other Perhaps for life.  He's not He's not talking about soulmates It can't be if that's soulmates. Oh, man Go don't even come in here.  You don't want to hear the first line. There's no levels So what Jesus is saying is that that actually These are just symbols that are the Holy Spirit is using to free your mind of everything you believe about everything I'm now I've been working with the course and teaching the course for over 35 years and I mean, I've been in 44 countries and I go all over the world many times over And one of the biggest things I hear is That a course in miracles breaks up relationships That people will come to me and say There was a perfectly good relationship a perfectly good relationship until One or the other or both started to study the course and then Jesus broke up a perfectly good relationship It was perfectly good and What I would say is I said, well again, these are just symbols. They're just mirrors and Jesus is not so big on the quantity Factor in relationships. He really doesn't care Whether they last for five seconds five years 50 years 75 years He he's into quality He's not into quantity In fact, people would say, well, are we talking? What do you mean by relationship to people? What about three? What about a quad? No, Jesus is not interested into numbers In fact, the only number that he really likes is one That's his favorite number One is the only number that you ever know One is one with God. It's the only number is the number one who you know, it's one It's one. We're one. We're always been one. We're always will be one. There is no other Other idea except oneness because oneness is a reality. It's truth So Some of you were saying, well, David, do you have any practical like realistic examples of what what this could possibly mean? And actually I wrote to my friends today. I wrote to my friends in Hawaii I believe they're both in their 90s They've been married for decades. They are Two of the most devoted Course in Miracles Teachers in the world. They live in Hawaii. I believe they're in their 90s now And I don't even know how many decades they've been married they they are the the walking proof of Dedication and devotion to living in Course in Miracles with a partner In fact, I wrote to them and I invited them to to join us today So if they do start to pop on the screen, I might have to have a little chat with them because they were devotedly practicing the Course in I mean very devotedly practicing the Course in the 1970s and the 1980s and the 1990s and the 2000s and the 2000 teens That's right. And they're still devotedly practicing the Course as a married couple And I don't even know how many years they've been married, but it's way back the years that they've been doing the Course And they are some of the happiest most joyful people on the planet. They're just an example of holy relationships seemingly symbolized over five decades with a Course in Miracles That is amazing And that is natural Jesus is saying Yeah, that's just like that's an example of Of the third level of teaching That's an example of lifelong teaching learning partner That's right. Jack and Yalalia Luckett. They have a teaching learning balance That is actually perfect. They They are so balanced that when every time I've met them over the years they exude joy and happiness and They also have are good examples of freeing their minds I mean, there's a lot of people that make a career out of a Course in Miracles, but actually for them They unlearned their self-concepts. They unlearned their careers they when The early days of the Course when bill fedford first met them, you know Yalalia was working on her phd And jack was retired marine retired military When he was into the Course and married to Yalalia And that was back in the 70s and now here we are in 2000 22 And It goes on that should warm your heart. I think that will help you when you watch this movie because you'll start to see that Death is not something that comes at the end of human life Death is a continuation in terms of time Until you accept the atonement until you accept the perfection that you are Then you just go through a series of Perceptual experiences and they seem to have little demarcation lines between those experiences And some call those demarcation lines birth and death Are they significant? No Do they have any significance none None at all To human beings to the ego. They seem to be very important. Why? Because the ego invented birth And the ego Invented death and it likes to see a lot of emotions around two of its inventions So it can stay hidden in the unconscious mind While the believer in the ego mourns or Or goes through all these different kinds of of emotions In this movie Louie you know, he's he's He's just ready to go through this first year anniversary of his beloved What with his beloved wife and he's going to get hit by a car Is that a significant point of the movie? No, not at all It it looks like He will immediately be taken to a like a holding station in the clouds And uh, I swear the woman that that greets him it looks like maryon williamson. That's what you have to look for When you pass fast from this world maryon williamson greeting you up in the clouds I love this movie because it's just got so many funny things The other thing is the amnesia shot that everyone who seems to go through these seeming lifetimes seems to not Remember the previous lifetimes very well It's called amnesia Amnesia was the problem in the first place amnesia is forgetting god So the ego liked that so much it's decided it would make a giant cosmic trap And it would use amnesia So it would it would sponsor private minds private thoughts even private souls The ego likes the idea of private souls Even though there's only one soul Ego likes the idea of private souls so it can make it can use the amnesia To maintain a separate personality sense of self And then you forget the previous ones So then you really really are stuck between birth and death You see that's what the ego wants you to be is stuck between birth and death. That's why it uses amnesia That's why it uses all these kind of tricks smoke and mirrors To convince you that you're actually living a life in the flesh No Life is eternal and life is this moment You either know life right now or you don't but but it's not a matter of time It's not a matter of of Minutes and seconds and years and and decades Life is not biological Life is not linear Life is now and life is only now and there's nothing else. It's just really really simple But we're going to watch a reincarnation movie to show us the dynamics of healing the dynamics of of forgiveness To show us all the different times that forgiveness opportunities are presented And and a forgiveness opportunity is just an opportunity to remember that that every relationship is a total commitment By the end of this movie you can start to feel it you start to feel that They the love is there the love is real and the commitment to Every relationship the same is is is our salvation. That's our resurrection It's the belief in differences It's the belief in gradations. It's the belief in higher and lower More and less that's the that's the specialness it's just a belief so I've been really enjoying listening to the audiobook of the life of bill fedford and just laughing and crying as I went through it again and it was it's just so beautiful because By the end of bill's life he He was a good example. He was a really good friend of the luckets In fact these luckets that are still going that I told talked about bill loved them so much that in the very end of his life his heart was kind of fluctuating and had palpitations and During the last maybe six or eight months of his life The luckets had to take him into the emergency room or the hospital sometimes But jesus and the holy spirit were so loving that basically at the end of their life that they basically had The luckets and bill move in together So the luckets were more like angels for bill at that point Anytime he would need anything.  They were there with their uh Basically deep practice of the course with huge swaths of people. They did many many groups and garden parties all over the world They took the course all over the world They're probably the least known People who spread the course all over the world Nobody knows about them They did it so much from their heart They they weren't into trying to draw any kind of tension or publicity And then they they were there with bill to just absolutely shower him with love They they didn't see him as dr bill fedford. They They all saw him as billy. He was billy. He regressed to that sparkly little Happy child that all of us are he was just loved among everyone the same In the in that context by the end of his life That's what accepting the atom is about it's about having Love that just is involuntary That you love everything and everyone I mean bill was he was so he was so academic and he was he was just Eminent psychologist, but by the end of his life the luckets took him to See a showing of the rocky horror picture show And when you go from Being a scribe a channel of a course in miracles to sitting there watching a rocky horror picture show with everybody dressing up and acting out Saying all the lines. Oh bill had cut loose I mean he cut loose from the self concept like the luckets Did and that's what this is all about don't have a concept of yourself Don't think of yourself as a man or a woman don't think of yourself In terms of partnership don't think of yourself in terms of being a course student or a course teacher Don't think of yourself of being A creature on time and space on planet earth breathing air Go beyond Go into the love go into the light go into the expansiveness that that you are You'll never be content for anything less And and it's so great that we have someone like bill and we have the luck is his way showers to really show us how it's done That's right they just Were just in the joy and living it they Went into the depth of it. I'm talking about the depth of the practical application I'm not talking about something in form or achieving something or accumulating something Joy can't be accumulated. It's just now Happiness is not something of time. It's it's right now This moment Is the greatest present? It's the present of the presence That's why they call it the present. It's it's everything everything right now And yet we will use this time movie To feel it And the song in this movie is kind of like the forgotten song in the course of miracles, you know it's the song that's deep in our hearts and When I hear the song by Cher and peter satara I just I tear up. I still tear up. I still tear up when I hear that song Here we are again I guess it must be fate We tried it on our own But deep inside we've known we'd be back to set things straight You're gonna hear it You're gonna hear it teased in the movie and you're gonna hear it at the end and the song is all about the present remembrance of god Together you and me I and the father are one god and christ are one self And god is the prime creator and christ is an idea in the mind of god and that love is everything There is nothing else but that love I remember reading once Where it came through. I think it was a some channeled material, but it said you were created above the angels Try that one on for yourself you Were created above the angels The angels are just symbols that the holy spirit uses to help you remember The the you the real you the the pride and joy of The perfect creation and extension of god So this movie takes us into that experience because it it shows us how connected we all are and that The love within us is capable of overcoming or transcending all petty judgments that arise from the ego Love wins Love is unstoppable Love is has no opposite There's nothing that that nothing but that love And that's what I feel when I watch when I watch this movie So sit back enjoy just savor it I will for the 80s something time And enjoy the love feel the love feel the love that comes through Because this is the love in our hearts and we may not be able to fully grasp it But we know how it feels we know how love feels we do know how love feels Maybe we haven't got the full extent of it, but we know how it feels and I think you're going to feel your hard chords Moving because I've every time I watch this movie the hard chords are really swirling very strong


I'm going to talk about using containers for building and testing and covering Docker Kubernetes and misses. That's my tour handle. If you want to tweet about it, only good things please, but things you can tweet them to that guy over there. Well, a little bit about me. I work at CloudBees. I work in what is called the private SAS edition team, where we basically run Jenkins at the scale using everything in Docker containers. I contribute to the Jenkins message plugin. I'm also the author of the Kubernetes plugin. I'll try to tell you when I'm biased for something, but that's where my experience comes from. And also the maintainer of one of the maintainers of the official Docker images for Jenkins and for Maven. I'm a longtime Maven contributor, a member of the Apache Foundation and helping with any other open-source software that I've used. And I'm a Google Cloud platform expert that this comes from the Kubernetes side of things, whatever that means, that title means. Okay, so who is using Docker? Raise your hands. In one way or another. Okay. Who is this Docker in production? Okay. Well, more than usual, the pace of Docker adoption is being like through the roof. So I love this tweet. The solution Docker, the problem, you tell me. And this is a lot of what a lot of people are doing with Docker, basically just using for anything. But it's for building and testing and deployment and all these sort of things. It's actually a pretty good solution. And it helps a lot dealing with, I don't know, like multiple architectures, multiple operating package versions, tool versions, combinations of different things. But it's not trivial. This is actually how they used to ship containers from both into the hardware in some place in the Caribbean. So using containers is not trivial. There was recently a post, I think it was Foler saying, you've got to be installed to write microservices and all the things that you need to do to be able to use it and it's not just, oh yeah, let's reach completely to microservices and Docker containers and everything. And everything is going to be fine, right? So one of the things that you're going to do when you're using Docker containers at a decent scale or, I mean, pretty soon after you do the hello world, it's going to, you're going to need a cluster scheduling system. So something that is going to create a cluster of hosts, service running, Docker, or maybe now other types of container runtimes or in the future. And you're going to, and especially this is what we built at CloudVis, running in public cloud, private cloud, bare metal, and this was our case, our preferred clients and HA and fault tolerant, of course, and with Docker support. And there is three alternatives once you decide to go Docker and more than one host. So you have Apache Mesos, you have Docker swarm, and you have Kubernetes. So these are the three big cluster schedulers that exist. So what is Mesos? Mesos is what they call a distributed systems kernel. This is a way to say you can run a lot of things on top of Mesos, basically they abstract, Mesos abstracts like the operating system and provides you some primitives to deal with multiple hosts from the application player. And you can run Hadoop, you can run Espar, Kafka, and all these other big frameworks, a lot of big data work going on in on to Mesos. And that's what you can do there. So it started before 2011, so it's the first of them. And it can run any sort of tasks, not only Docker containers, but also just pure binaries and rocket containers and app-sea images now. So the container, I mean, the container format from the, what's called the container foundation. And then what you run, so you have Mesos, and Mesos just basically abstracts all this infrastructure for you.  There are the ones that actually do something. So some of the things we saw, Hadoop, they have their frameworks. And then you have marathon, Mesosphere marathon for long running tasks, long running services. So if you want a service that is always running, and if for whatever reason it dies, marathon will restart it for you. Or if a host dies, marathon will notice and will run it in another host. And then you have Apache Aurora that is doing something similar. And Aurora is being, so both of them are being used and Mesos are using Twitter, Airbnb, eBay, Apple, you name it. There's a lot of big companies behind it and also the traction it had over the, all these years. There's another framework that is Kronos that is like a distributed Kron-like system. And I'll talk later about the Jenkins framework that runs on Mesos. For Docker Swarm, this is something built by Docker Inc, the company behind Docker. And the first version of Docker Swarm used the same Docker API. So it would allow you to basically point your Docker client to a Swarm API. And then the Swarm API would run whatever you asked to run across the cluster. So you wouldn't need to modify the system tooling you had. Everything would run. It would be the same command line, the same options in the same Docker client. But I guess they realized that had some limitations. In Docker 112, they came up with this new Docker Swarm, Swarm mode in Docker. And it's included by default in the Docker demo. So you don't need to install anything else. And I guess they play with this ability for them to include these features in the Docker demo. And then everybody was going to get them for free. And so they have like a first step on the door for you to use it. And with this new Docker Swarm mode, they changed the API or they created a new API better where you have a new object that is called the service. And this object is what basically defines how some Docker container runs across multiple hosts and everything. Same reasoning as in Mesos, if it dies or a host dies, then the cluster will notice and will restart it if you configure it to so and in another host. With the big difference from the previous Swarm, that existing tooling needs to be changed because this is creating a new API, a new model to deal with containers in the cluster. The last of the three is Kubernetes. So it's something that came from Google based on what they were running on their Google systems. And it can run on local machine, virtual cloud. And of course, Google is making it so the best place to run it is in Google Cloud. And they offer a service called Google Container Engine, GKE, where you basically go and say I want to start a new Kubernetes cluster and it will create it for you. But then you can install it anywhere. And there's a nice provider, well, like page stack point where you can create clusters in different cloud providers. And then you have commercial software on top also like Chorus Tectonic and you can run it in Azure and you can run it even on your local machine. And for the local machine, actually it's Minicube. It's a VM that has Kubernetes installed just with OneNote, but it's great for testing and playing with it and with the APIs. So when we were building this scaling Jenkins goal that we have, who's using Jenkins here in the room? Okay, I should ask who is not using Jenkins. And who is using MISOs? Anybody using MISOs? One, two persons? Docker swarm? Like two more? And Kubernetes? Like four or five? Okay. All right, so, well, if you are using Jenkins, you know that's how Jenkins works. There's two options we saw to scale it. So you can have either more build agents or slaves per master or more masters. And if you have more build agents, there's plenty of plugins that you can use to create new agents. There's like the old Amazon EC2 ones to create virtual machines or Azure machines or anything, any cloud provider. And dynamically, like when you have a lot of jobs, they get created automatically. And I will talk about the ones that work with Docker containers. And the problem is that the master is still a single point of failure. And if your master dies, then you have a problem, which is not, I guess, nowadays you have a resumable pipelines. If you were in this room before, there were some talks about pipelines and how there's ways where pipelines can reconnect to a master after the master gets restarted and the job continues running. So if you restart the master, your jobs continue running and they don't get killed. And you have a problem having multiple configurations or plugin versions or a restart of the master that basically you get down time. And there's also a limit, although that limit could be pretty high. There's a limit on how many build agents you can attach to one Jenkins master. And then the other option is having more masters which are with the benefit that you can have multiple organizations or multiple departments having their own master. So it's basically more like a federation. Well, it's like a shardling of your builds. You can have multiple masters with their agents into different organizations. The problems you have is single sign-on. I mean, how do you all of them connect to each other? Connect, how do you log in to all of them in the same way? Or how do you configure all of them from a centralized place? But we have at CloudBees, we have this Jenkins operation center and then the private substitution where I work or when I'm working now kind of basically is doing the best of both worlds. It allows you to have multiple masters running on Docker containers and they all get configured from a single place with this operation center. And then all these masters are created in Docker containers. So you can spin new masters whenever you want. And all these masters get configured to use the same cloud. We are using Mesos right now. And so all the masters are sharing this pool of a cluster with Docker hosts running. And then another great quote is to make error is human, to propagate error to all serving an automatic way, that's what DevOps. And when you are automating a lot of things and there's chances that what you are automating is going to break. And I have a different version of this that basically conveys the message is if you haven't automatically destroyed something by mistake, you are not automating enough. And this happened to me several times at least a couple. Nothing really bad like this guy's from this week. But yeah, if you are not breaking something is that you're not trying hard enough, right? So that's my idea. So I always try to automate things. Sometimes you screw it up, but as long as it's not too bad, it's okay. Okay. So how can you run Jenkins in Docker? We have several Docker images available. So you have the official Docker image that is built by Docker themselves. But we provide like the Docker file and all the new releases. And this has the latest LTS, well, all the LTS versions. If you go to just Jenkins, Docker pool Jenkins or Docker run Jenkins, this is what you get the latest LTS. And then you also have the Jenkins community has this Jenkins CI group in the Docker hub. So Jenkins CI slash Jenkins has the weekly builds. And we possibly will have more build also more more than the weekly builds on this week. Because so this is an automated build that we have. And that is publishing continuously every new release, every new weekly build. And this is built by the Jenkins community and pushed to the Docker hub. So it's the same thing. Just this has the weekly bits. The other one is LTS. And then if you're going to run slaves in Docker, then the one you need to be aware of is the Jenkins CI slash GNLP slave. So this is an image that has just the remote in bits. So it's based on the Java Docker image. And it has the Jenkins slave. And when you start this, basically here, it says Docker run Jenkins CI, GNLP slave. And you pass the URL and the secret and the slave name. This will connect to the master. And then that's it. You have a new slave running in Jenkins. Obviously, you probably won't need to do this because there's plugins that will do this for you. And I'll show you later. And the other interesting part about this image is that you have two versions. One is based on the official OpenGDK image, which is Debian. But there's also an Alpine image that is really small. I think it's like 40 or 50 megabytes. It's a lot smaller than the Debian base one. So if you wanted to manually create 100 slaves running in Docker, you could just run Docker run all these times and point into your Jenkins master. And then you will have them. So for cluster scheduling and Jenkins, what do you want? What do we want and when do we want it? So you want isolated build agents and jobs. You want one job to not mess with the workspace or something of another job. And same thing for build agents. You don't want a job using a build agent and then another job having any sort of conflict with that. We wanted to use in Docker so it can start in like seconds. And you can also, we want also to be able to drop capabilities like this in the container world, like be able to not run as root and run as a different user, maybe not have access to network or not have access to something or another. And I'm going to go through the different features that the cluster orchestrators have. And I'll tell you which one of them have what. Feature number one container groups. So in the Jenkins example imagine you can have a Jenkins agent container, a Maven container and then Firefox container or Chrome container, a Safari container. So you would have what it's typically called a pod of containers. And you can have five containers running for one job. And if your cluster scheduler support grouping containers, otherwise you have to build one container image that has all the tools that you need. So this is something that is experimental in Mesos in 110. So you need a pretty recent one. Docker swarm supports grouping through Docker compose. And you can also force the execution of all those containers in the group in the same host. And Kubernetes supports the concept of pods natively. And it warranties that all of them run in the same host. And they can run, let me see, yeah. And they can all refer to the other containers by using local host. So it was, it came, the idea comes mainly from Kubernetes. That was the one, the first one implementing it. And it's the first, yeah, the first one implementing it. And that's the power of it, of being able to use multiple containers just for one job. Because imagine that you want to do a Maven build and something else or Selenium test. If you have to create your own image, then you have extra work to do with all those tools. This way, you just reuse all the images that you have in available in Docker Hub. You don't have to write any new Docker image at all. Memory limits. So the scheduler needs to provide a way for you to limit how much memory the jobs can use and prevent from these containers to go over the memory limits. So imagine you have all these resources in the cluster and you have different jobs trying to fetch, get these resources. You don't want to, maybe you have a build that is going wrong and is using more memory, more CPU or something. You don't want that to happen. So all of them support memory limits. Inmissives is actually required. Instrum is optional. And in Kubernetes, they have some defaults. The ones that are optional. And in Kubernetes, you can even do namespaces. And so you can isolate containers into namespaces and having group limits set at namespace level. So you could say, not just by container, but saying, whatever number of containers you run, just make sure they don't go over this limit. And this memory constraints translates to docker-memory parameter. So I have some questions here for you now. I'm sorry, I know it's late and you are all tired, but I'm going to make you work a little bit. How do you think it happens when a container goes over a memory quota? You have a build that runs the JVM as a sample I have, and you set a memory limit for the container. What would happen? Any takers? Sack fault. Sorry? Sack fault. Sack fault. Okay. Any other options? Memory? Out-of-memory reception. Out-of-memory reception in Java. Okay. Anybody else? Memory skew? Container skew. Container skew. Okay. Let me show you. So I have this this is just a maven application, a maven build. And in the tests, I'm just using memory and whatever the normal Java thing, the garbage collection happens, and it's using this memory without limits. Okay? The container has no limits. This keeps using memory and the JVM is doing this garbage collection thing. And this would run forever.  In this one, I'm going to set it to memory dash m 220 max. So basically I'm limiting how much memory the container has. 220 max. This is a random number. This depends also where you run this. But what you see is, let me show you, put it here at the top. This is doing the same thing until it reaches a point where basically something happens and nothing happens because you get nothing. This just stopped running. So what happened? And the only way you can know what happened here is by looking at the inspecting the container. And when you do a Docker inspect, there's an interesting line here that possibly calls your attention if you know where you're looking. Otherwise, then you have a long JSON to read. That basically tells you how I'm killed through. This is telling you the kernel killed your container because it ran over the memory that was set for that container to run. So whoever said that, last one, he wins. Yeah, people, especially people coming from the Java world with the spec that I got out of memory exception and things like that. Now the problem with Java is when you run Java in a container environment, Java is not aware of the limits of the container. Until Java 1.9, some patch that was merged last week, that supposedly makes it be container C groups aware. So until Java 9, you start using Java 9 properly in months for now or years, this is what's going to happen. So your container, you're running Java in a container, Java sees the host memory. And because I'm running this Docker in my thing, I think the host memory is two gigs of the virtual machine where Docker runs. And typically in 90 something percent of the cases depends on certain rules. The JVM is going to take one fourth of the total host memory as maximum heap size. And this is what you see here. The limit, this is the max memory, 444. And this is the same number that was at the beginning when I was not setting any limits. So Java is not aware of the JVM of the limit. So that's what happened. So how can we fix this? Because especially think that this is running, maybe you're running this in a cluster, so you have multiple hosts, now you're running maybe Jenkins jobs in containers, and they just disappear, get killed, and you don't know what happened. So there's another, another, something we can do is something that is very specific of whatever you are running. So for maven, you can pass JVM options as maven opts. For and, it's, I think it's and opts or and options. And you have to know what you're doing and say, okay, just you pass this parameter to the JVM. And I'm saying, okay, XMX is 210 megabytes. Because I know I'm giving it to the total containers 220 megabytes. So let's make sure Java is aware of how much memory is available. And what happens here, it's a little bit different in the sense that the max memory that Java sees is 187. Okay, so it's keeping it under the limits. And this is going to do more to gather much collection, but it's never going to run out of memory. I mean, it's not never going to get the container crash killed by the kernel.  And I was cheating because I said it to do not fork. There's an option in maven in the POM file where you can say whether to fork or not fork. So in the surefire plugin, exactly. So I told maven not to fork. So all this was running in one JVM. Now, if I run it in the default mode, even with the same parameters 220 megabytes of memory limit on XMX 210, something's going to happen. Guess what? So this is for, this is calling maven. And maven is creating a new JVM for surefire and that JVM is running the tests. So what's happening, this is going to, it can take a little bit longer maybe. The new JVM is seeing 444. So the new JVM is not aware of XMX that it passed to maven. And what I'm getting is fail to execute call. The fork VM terminated with same, without saying properly goodbye, VM crashed or system exit called. So the new JVM is not aware of the XMX memory limits because I said in an environment variable this is for maven. Now, how can we fix this? Well, you have an option which is in maven in the POM file again, you can configure the server file plugin to pass variables or environment variables to the new VM. So you could go in there and set XMX equals whatever. But you could keep doing this over and over and over again. There's a slightly better option which is a somewhat obscure environment variable that is underscore java underscore options. And this will work in open JDK and some JVMs at least. And what this means is any new JVM that gets started will use these parameters. So whenever I start maven, it's going to use XMX 210. When maven starts server, it's going to use XMX 210. So now this is going to solve you a lot of problems.  This would continue working. And this would solve you the problems unless you're running several JVMs and all of them are using the total XMX. Then you have to play with how much you give to each of them. But if you're running one, two, I mean this will be honored by all of them. And you've got to be aware of what's happening when you run out of memory. Well, okay. Oops, what did I do? All right. So that's, I didn't know that key combination. Okay, I talked about that. Then there's the CPU limits. It's just something like the memory limits and you can pass how many, for messes who are on Kubernetes, and this gets related into CPU shares. And what do you think it happens when a container goes over its CPU shares, over the CPU limits that you set? Well, nothing really. What CPU shares, what the memory limits mean in messes, messes memory limits in Docker is CPU shares that makes it a little bit more clear is how much percentage of a CPU you can get. So if you say this is basically a weight and depending on how many containers are you running has how much CPU is going to get. So if you say CPU shares is one and you run one container, it's going to get 100% of the CPU. If you say, if you run two containers and both have CPU one, they each get 50% of the CPU. If you run 10, they only get 10% of the CPU each. So it's just a weight across all the containers that you run. So it's all relative. And the other important thing to handle on a cluster is storage and how you can do distribute the storage. So messes has in versions 1.0 plus Docker volume support and swarm also has the Docker volume plugins. So you can use whatever plugins you use for the normal Docker. And Kubernetes from the very beginning, you have the concept of persistent volumes. And all of them pretty much do the typical thing like EBS volumes in AWS, NFS, and Glass that I think is supporting all. It's just a matter of how you use it. And also some considerations you should not that these schedulers allow you to do is run as a different user, not just root. But you have to be aware that the container user ID is not the host user ID. We have a lot of questions in the Docker image about the Jenkins, because the Jenkins master is running as the Jenkins user, which is always 1,000 inside the container. So if you run it in a host, in an Ubuntu host, user 1,000 is Ubuntu. So if you are mounting host volumes into the container, which is typically a bad idea, because you have to deal with all these things, and it's not very good, it's not great to schedule it across a cluster. But you got to be aware, or if you're using NFS, then all these the names and the users, not the names, but the UIDs of the users have to match how the container is trying to access the data and how the data is, what are the permissions of the data itself. So NFS users. For networking, you need to open, for the Jenkins case, you need to open the HCDB port, the GNLP for connecting agents, and also Jenkins has a sort of SSH server building that you could open if you wanted to. I'm not going to enter into details. And there's support that allows you to get one IP per container in clusters. In Mesos, it's more recent. There's this, you can run with Calico, with Weave, and same thing in Kubernetes and Swarm. Swarm, by default, uses the Docker overlay. But all these options, it's just a matter of, I mean, in Kubernetes, it's pretty straightforward if you run it in Google Container Engine because it gives you everything. If you run Mesos or Swarm, then maybe you have to do a lot more setup and configuration to make it work in a virtual networking. And just lastly, I'm going to talk about the Docker plugins that are available to take advantage of running in containers. So there is several Docker plugins. There's one, I think at least there's two for dynamic agents running on Docker. So basically, whenever you have a job, they will spin a new Docker container and run the job in the Docker container. And there's no support yet for the Docker Swarm mode because it uses a new API. This is not yet supported. The agent image needs to include Java and it will download the slave jar from the master. So it needs to have connection to the master to download it. And then you have multiple plugins for different tasks. This is how it is today. There's the Docker build on Publix plugin to build Docker images. And then there's the Havan registry notification to initiate jobs based on when an upstream image is updated and things like that. And it has great pipeline support. So I'm not going to go through the configuration, but I'll show you like a Docker pipeline. You can run Docker with registry. If you want to use your private Docker registry, you can do docker.image and the name of the image to use it and then .pool to download it from Docker hub. And then you can build Docker images with Docker.build. And the interesting bit is probably this image.inside and then whatever shell commands you put in, they are run into inside the Docker container itself. There's also a plugin that is pretty recent that allows you to, it's called the Docker Slaves plugin. There's a lot of mixed names here and allows you to use any Docker image for containers without the need to have Java. And also, so basically it's a lot easier to reuse images and allows you to define the slave in the pipeline and you can have site containers. So this is called the Jenkins Docker Slaves plugin. Not to confuse with any of the other 10 Docker plugins that are there. So you can do something in maven with Docker node, the name of the image, the maven image and then shell and whatever you want to run inside the Docker image. The Mesos plugin allows you also to have dynamic Jenkins agents, both Docker and isolated processes, so any random program that you want to run in Mesos. And the image has to have Java because that's how it runs the slave jar to connect to the Mesos master. And you could have Docker, you could run Docker commands, but it's basically outside of Mesos, you would, I think I didn't explain it here. So you can use Docker pipelines with some tricks, like you need the Docker client installed inside the Docker image and share the Docker sock. The typical way to run Docker side by side Docker, so Docker container running against your host Docker demo plus you need to mount the most workspace in the host in the same directory as the container that is running. With this, do I have an example? Yes. With this you can run, this would be in a node running on Mesos and I can run a Golang image in the host and then I can do a go build with no problems reusing that Golang image. But the only caveat is that this runs outside of Mesos. This is just running in the host Docker demo. So Mesos does not know anything about it, doesn't know how much memory it's using and what ports it's using or anything like that. So you're basically running outside of the scheduler. And then the Jenkins Kubernetes plugin, same thing, you can have dynamic Jenkins agents and they run as pods. So a group of containers. So you can have multiple containers, just one of them just has to be the JNLP one, the one that runs the Mesos, the Jenkins slave to connect to the master. And if you don't set it up, it will create it by default. And it has pipeline support for both defining what these pods images are and to execute things inside these pods. And in the next version that I can release, I hope to release soon, it's also having persistent workspace. So all your agents can mount the workspace from NFS or EBS or whatever. This is using just what Kubernetes provides.  I mean, you start from zero every time you do a build. But with this, you could have a volume with your workspace or NFS or Mount Share Mount or anything that is supported in Kubernetes. And then you wouldn't need to start from scratch every time. So this is what the pipeline looks like. I'm saying this is a pod template. I have a container maven. I have a Golang container. And in this pod, my pod, what I'm saying is check out some git code and inside the maven container run a maven build. And then inside the Golang container run a go build. So I can reuse the images from the Docker Hub. I don't have to create my custom image or anything with both maven and Gol. And I can run both things in these two containers just with one agent. Yeah. And just the recap, these plugins allow you to then dynamicating creation. They all use JNLP as the protocol to connect to the master. In some environments, you can use Stunnel to connect to the master depending on how you run this. I guess we don't have time to go into more detail. And they use the Cloud API, which is not ideal for container workloads right now, because this was designed in Jenkins for like Amazon images and instances and things like that. So it may take a little bit longer to start the containers. But there's a Jenkins one shot executor plugin that we hope to include into at least the Kubernetes plugin and possibly it's going to be in the Docker plugin too. And this basically is optimized for containers. Because the previous, the Cloud API assumes like when you start an instance, it takes longer. So it keeps the instances around and doesn't start a lot of them at the same time, because it has a cost associated. But this one shot executor, it's going to just create the container, run your thing, and then kill the container at the end. So that's me. Do you have any questions? Yes. So I had a question first with the Jenkins slave in a container, in an image that we can just pull it and have a slave. How do you synchronize dependencies across the containers? Then you went on and said, well, in fact, in the slave, you can run another container, like an inception, like a container in a container. And so how would you then, in that container, how would you then synchronize dependencies? Let's say I need a gradle, right? Or I need gradle of certain versions. Yeah. Okay. So how do we manage versions and run container inside a container? Okay. Yeah. So maybe I didn't explain. We are not running a container inside a container. You can have, so what a pod is, you can start multiple containers, but they are all, I mean, they're not one inside another. No, no, no. I mean, the Jenkins, when the Jenkins is doing the job, when the Jenkins is building my image. Oh, when Jenkins is building an image. Yes. Yes. You never, right now, there's no good way to run Docker inside Docker. So the only, the recommendation is always running Docker side by side. So what you do is you have a container running your slave or whatever. This container has to have the Docker client installed and you mount the Docker socket inside the container. So this container can run Docker commands in the Docker demo in the host. So when this container tells the Docker demo, Docker run something, is the host that is running and is running here. So you are basically talking to the host and the host is creating another container. And so they're all side by side. And then how do I keep track of all the dependencies? How do I keep track of all the dependencies? Let's say that I deploy five slaves, right? And I have loads of builds in a pipeline and it's taking it by one by one. How do I make sure that all of my slaves have the right version? How do I make sure that all my slaves have the right version? Okay. The reason is, the way it is done in all these plugins is the slaves are short-lived. The slaves, ideally, they'd run just one job and die. So whenever you, with the Cloud API, it may not be exactly all the time like that. They may stick around for a little bit, depending on there's some parameters to adjust. But basically you are saying, I want this job to run in Maven 339. And then whenever that job runs, it will download the Maven 339 image and run your job and die. And you have another job that says, I need to run this in Maven 3.1. It will download the Maven 3.1 image, run that and die. If you have, this is the beauty of it. You can have all sorts of combinations and using all these half images. So like the Maven image has versions for Java 7, 8, and 9. There's three different images. So you could run some builds in Java 7, some builds in Java 8, or maybe the same build in 7 in parallel with 8. And they are all in different containers. Yes? If you have had to choose only one between Maven's, Kubernetes, and this farm, what would you choose and why? Okay, if I were to choose one, I would choose Kubernetes, but just because I'm biased, as I said before. It's going to depend if you have it, if your company has it, if your operations people already have something running, then it's more likely that you're going to choose that one. Mises has the advantage of being able to run any process. So it's interesting for maybe some more like high performance things. And there's a lot of scientific things running on Mises because of that reason that you could run in bare metal things. Docker Swarm has the advantage of it's coming by default with Docker, but it doesn't have the support. And Kubernetes has a lot of open source community behind it, multiple companies. Google is Red Hat, is CoroS, is all these people building on top of Kubernetes. And if you are running on Google Cloud, then it's like a no-briner, they already give you that for free. Okay, so I'm getting both. Thank you.


I am part of NFS team in Radax knowledge, but today I am talking about a different topic as Linux support our clusters. Before moving to my talk, I would like to take this opportunity to thank following people for their work towards this project, Brian Foster, Neil Divos and Manikandan. So today I will go through the following sections or following slides. So I will start with what is cluster first, then I will talk about slowness in cluster first, then the challenges or issues which we faced while implementing the slowness support and how the clients can do the stuff and where are we. So what is cluster first, like this slide might be you have this see this slide before, so sorry if it is boring or something like that. So basically cluster first is an open source scale of distributed file system which is POSIX compliant and it is a software defined storage and it works in the user space and it aggregates storage different storage units into a single name space. In cluster times we call it as a volume and one of the important feature or like key highlight of cluster first is it does not have a dedicated metadata server and it provides all the overall cluster first design provides a stackable module architecture and it can run on any commodity hardware like a laptop or source like that sort of matter. And so these are the following components in cluster first, so the basically the disk should support extended attribute like EST for XFS, that is the only requirement for a disk to be part of cluster first storage, then it has following components. So there are servers which we know we say it is name of storage bricks or it is a Gloucester FSD daemon running on these storage bricks and it exports a local file system. And at the client we aggregate different storage units to a single point which we called as a volume and we have different stackable modules inside clients which we call translators and there is a management daemon which in which we can manage volumes or add nodes to the cluster or add peers or increase the volume size and set different options for a volume etc. And this is done with the help of CLA tool client interface tool and this is how the cluster first architecture will look like. So the storage admin can create a cluster first volume using bricks, the physical drives and it will export each physical drives via bricks and admin will create a volume and user can mount or use that volume using different protocols like NFS or strips or fuse or abstracts like that. And if you look into the internal architecture like you can see two diagrams left side is server and right side is client. So each of them we call translators, each of them are plugable modules like in which you can ingot each feature and remove it if you want. So client will request and it will go through like these are different translators will be loaded at the client side, at the right side the blue color all request will go through this translators and it sent to the server and in server also we can see different translators all request will go through this translators and at last it will write just write into the POSIX layer. So before moving to nest topics do you have any doubts or questions regarding Glastrofus or architecture or something like that. Okay, cool. Now I will talk about HCLNX in Glastrofus like so I will just give a brief intro about HCLNX like I am not an expert in HCLNX. So this is just a brief intro which have few things like so it provides a mandate to access control for Linux systems. HCLNX can work on policies like it enforce rules based on policies and each processes and files are labelled with conducts like this you can see ls-hyphen is a defile give the first one is the DAC the directionally access controls the way write permissions user group then you can see the excellence one. So it has four parts first one is user, second one is roles, third one is type and last one is secret level. So user is similar to the Linux user you can map Linux users and HCLNX users using HCLNX policies and then there is object so object roles like it is kind of domain for the users like what all the user can access or something like that and next one percent type of that file or process so each domain can access different types of files or processes based on the HCLNX policies and last one is the security level and what which I matter is what is HCLNX for the back end. So HCLNX is a just an essential attribute named with secure.hclnx and it stores following thing with this attribute. And glass surface and HCLNX so glass surface is an application which works well with HCLNX terms like it has the running all the running glasses process will have following HCLNX context and system user system it means that it is run by system d that is why it gets system u and system r as user and role and cluster d hyphen d is the type for all the processes like it may be brute process or client process or the management demon which I talked about. So by default you only get like you get following context and below I have listed the files which the glass surface process can access. So you can see the roles for a type for each file so each which represents cluster d in which so the glass surface process or the process can access those files and one thing to be noted that like bricks will be a path in a Linux system if you have following context with glass d brick so. And so not all applications which uses cluster of a support HCLNX so following are two applications which have HCLNX context with client side as well so one is fuse client which have fuse underscore t type and other is NFS client which have NFS underscore t type. But today I am not talking about this stuff this is what we have in glass surface with HCLNX I am talking more about the client side presentation of how we can do it applications can set context on client so currently with glass surface architecture clients cannot set different context on files which sets on a glass surface volume and brings HCLNX forward mandatory access control so and glass surface a file system basically like Linux compliant or POSIX compliant file system we need to support HCLNX. So why it is not working for us basically as I mentioned before each files which access cluster process have context so bricks have its own context if application tries to write a context it will overwrite the existing brick context so it would not work with HCLNX it would not work with glass surface process would not work with HCLNX enabled environments so we need to do some kind of facts so as I mentioned before at the back end this HCLNX will be stored as a security dot HCLNX attribute so we just need to map that a security dot sorry HCLNX attribute to some other stuff so this is done with help of an HCLNX translator so it does the following so basically it stores the HCLNX context from client as trusted dot glass surface dot HCLNX and it will do the mapping from client to server like if client set some context it will set as trusted dot glass surface dot HCLNX at the back end and if client request for the context it riddle from this context and give back to the client and we need to interact following course like setata or getata mkdr and mk0 like this call subsystem course in cluster terms or network terms we call it as fops so we need to handle following fops and this translator will be loaded at the server graph by default so by default avd mdry in the volume will get following context which is similar to brick and application can change the context accordingly and one of the things which we need noted like the indian operations related to cluster like cell field or rebalance so they should not denied by HCLNX like we may need to migrate one file from one brick to another or we need to heal a file so those operations are important for cluster we need not deny those operations so we need to bypass those operations and at the server side we do not do anything for the enforcement it should be taken handled by the client set like depending on the client on the Linux system they will handle it accordingly and this is a small picture which I try to draw like this will happen at the server side so client can send request like chcord or restore srimanage to the server so it will be and getata or setata call at the server and protocol server is the first translator which will see the call it will go till HCLNX and HCLNX will convert the call into the value change the value into torsted.glusterfus.hclnx and give to poses and poses will set that standard attribute on that file and so after doing this like the following are the two clients which have current support for SNS one is fuse sign and other one is NFS so there is a bug in fuse client which is not fixed it so that so the users cannot set a SNS contest until fixing this issue and there they have proposed patch as well and case of NFS clients like we have an labeled NFS it is a feature part of NFS 4.2 and using that NFS clients can set the SNS contest directly without any issue but there should be some kind of operation should be implemented at the NFS servers which glossary is using that is NFS Ganesha which is also missing so there are lots of shaft need to do in this project and where are we now so it has planned for 3.10 but it did not make it up so we have two poses two patches poses upstream like one is the implementation of the translator other one is like setting the brick contest where you create or add bricks and two more patches I had to be started or need to be done and one of them is so the inherited contest from the parent directory should be also modified with trusted dot appending stuff so that is missing and maybe for the other applications you need to provide GFAPS for managing the SNS contest the following are the if you have questions you can ask mailers or ask at IRC and these are some useful links and they have any questions


I'm so honored to be receiving the award Women Leading for Change in Technology for Development. I'd really like to thank the Engineering for Change Organization and the American Society for Mechanical Engineers. I remember when we started working with our first true ICT for Development project in 2007, and that was with the Millennium Villages. And we had this idea, what if we brought mobile communication into these villages to look at what would the impact be on education, on healthcare, on livelihoods in general. And at that time people thought it was a totally crazy idea. This year we're celebrating 10 years of engagement in the Millennium Villages project, and it's really become a model for how to work with ICT for Development, not just for Ericsson, but for many of our peers in the industry as well. If we look back in time around the year 2000, there were about 750 million mobile subscriptions. If we look at where we are today, there's more than 7 billion mobile subscriptions. But going forward, we estimate from Ericsson that by 2020 more than 90% of the world's population will be covered by mobile broadband networks. So the scale of the technology in the pace of technological change is unprecedented. And so within Ericsson, one of the initiatives that I've been driving is our company purpose, and to make sure that we actually drive technology to be a force for good in the world. So the possibilities are really endless in terms of what technology can bring for sustainable development. So I want to thank everyone again and look forward to see what the next 10 years will bring on ICT for Development.