Hey y'all, what's up? My name is Sonali. Welcome to my channel if you guys are new. Today, I'm just vlogging my day. It could turn into a weekend in my life, or if I get enough footage for today, it'll be its own vlog. I honestly haven't vlogged in a really long time because I think it was last weekend, or like the weekend before that. I broke my camera. I don't like to talk about it because every time like I damage something, I just like want to forget that it ever happened.  But I don't want to just like think about it and like harp on it because you can't really change what's happened, I guess. You could just be more cautious in the future. I live in Austin, Texas, so I was on South Congress, which is like a street full of like stores and restaurants and all that. And I went to this place called, I want to say it's called Aviation, or something like that. It was a clothing brand store. And they have a rooftop where you can overlook South Congress.  I was setting that up so me and Ryan could take a photo, like a self timer photo. And I basically had a really small purse that day and I like stuck my vlogging camera in it. So my purse wasn't zipped all the way and my camera pretty much like fell over and made my bag like topple over. And this rooftop has like holes in this deck, like on the sides of it. And my camera literally toppled over and fell through the freaking hole and literally just caused a whole scene.  And I'm honestly so thankful. I didn't even think about this in the moment.  So thank God that did not happen. But yeah, update. I'm like really bad at just like keeping my technology alive for some reason.  And honestly, yeah, it's probably my fault. So I just need to be better. But anyways, so that's a little update. So work is going good. I feel like it's not overwhelming. But the only thing is that I am trying to like adapt to these new hours that I'm working solely for this company. So I have to do all my other work like after or like on the weekends. And so I don't have like all the time in the world to like do YouTube videos and edit them. And then I also have my freelance gigs on top of that. And so first comes work and then those freelance gigs and then my YouTube channel and then I have to have time to breathe. So I hope you guys understand. I'm really trying to like fix my schedule and just like make sure I have time here and there to like like put forth my effort on YouTube because I want to make it happen. Trust me. I like love YouTube. I love making videos. I love vlogging. So it's going to happen. It's just going to take me a little bit of time to just like feel it out and like, you know, stay balanced while I do it. It is 10 a.m. and I actually have to go pick up a check from the event planning company. I'm so excited to be shooting a couple of events for South by Southwest.  I want to do so bad because I haven't ever been to South by Southwest and I thought first of all that would be like a little in which I didn't have to pay for. Second of all, like I would be literally photographing things at South by Southwest. That would be so cool and so good for like my portfolio. So yeah, I'm doing it and I'm so excited. South by Southwest is coming up so soon and I'm so excited because I actually got invited to like a couple of blogger events too. And I don't know, that's really exciting because they're really cool ones. Today I have to clean up this pigsty of a mess. After I get this check, I kind of want to go to Twin Lickers and check it out because they have a dollar sale and apparently they just mark down the alcohol as low as they can go and then add a dollar to it. So I'm just like curious to see how cheap the alcohol actually is and we really need to like restock on our alcohol because I don't know, I think we have like this much of like rum left and like a Tito's handle. But honestly, like I could probably go for another Tito's handle because does alcohol expire? I feel like it doesn't. This might be a dumb question, but I feel like it doesn't. So I feel like it would be smart to restock on staples, especially while they're cheap. So I kind of want to go check it out, but I might wait for Ryan to get out of work and then go with him. So I don't know, we'll see. I just got out of Twin Lickers and I got three bottles of alcohol and then one like pina colada mixer because I've just like been craving going to the beach and drinking a freaking pina colada. So I'm like, I can't go to the beach right now because I literally don't have one for a week and open, but I can drink a pina colada. So that's what I'm going to do tonight. And I bought these pineapples from AGB and they're literally going bad by the second. So hopefully I can like make a pina colada and use them for something. I will show you guys exactly what I got when I get home. I'm going to clean out my car next. I was literally just telling Ryan like it's so nice to have this Friday. Like I feel like I never really appreciated Fridays because I didn't have like a job, which yes, it is part time, but I still like do other stuff after I get done working for my new job. If that makes sense. But anyways, basically I just feel like I appreciate this Friday so much more because I have so many errands that I can do. I'm going to clean out my car next. I'm going to like park right next to my dumpster at my apartment and literally just clean out my car because I don't know if you can tell. But like my seat in the back is down because Ryan used my car to like transport my bike to get fixed and like to ride and stuff. So I haven't put it back up since that and it's been so long since it's just been like a mess back there. So today is the day. I'm going to clean out my freaking car and it's just going to be like a good feeling because it's honestly been on my to-do list for a really long time. So I just got to the dumpster. So it is time to take care of this freaking mess. I can't believe it got this bad honestly. This is my Georgia's license plate. Getting rid of that. Alright, so now it is time to show you guys what I got. So first one. This is floor day Kanya and this is just rum. He said it was like a dry rum. I don't really understand what that means but basically he said it's not like a sweet rum and I was like about to just get Malbu because that's literally all I know. And I asked him what rum goes in a pina colada and he was just like well you don't really need the Malbu rum because it will already have like a coconutty taste like in the mixer. So I didn't get the Malbu but actually that was cheaper than the Malbu so ended up working out. But then I got some pina colada mix. Next I got some tequila. I used to be like a big tequila drinker because well not like I drink it every day but like when I went out in college I would just take like a few tequila shots and it would get me like at my perfect drunk state. And I never really like stuck with one brand. I would just kind of get like whatever is kind of cheap and like whatever they recommend. So this guy recommended this. It is the tequila El Mayor. And he basically kind of described it to be like smooth and like something about like a vanilla taste. So I was like that sounds cool so I'm going to try that one. And then I got vodka and this is my last thing but I actually wanted to try out the deep Eddie's vodka. And I already do have like a handle of Tito's and it's pretty full but I just thought I would like stock up because you can never like have enough. Like I said alcohol doesn't go bad I think. So this will last me for a very long time and like if I want to have people over then I won't be like super stingy about my alcohol because I'll have more of it to share. But I wanted to try deep Eddie's because I've already tried Tito's. Both of these alcohols are actually made here in Austin Texas so I thought that was really cool. And this one was a little bit cheaper than Tito's which the Tito's wasn't even on sale. Like that was like I swear the only freaking bottle in that whole store that was not on sale and I was just like why? I bet they know that they can like easily sell those any day so they probably didn't mark them down. But yeah so I'm going to try this deep Eddie's vodka. I'm probably not even going to open it until I like finish that Tito's but that will be up next. And yeah I'm really excited. I have like pineapples I think I told you guys this but I have pineapples that I bought at HEB and they're literally going bad. So hopefully I can make use of them tonight when I make a pina colada. My next task is to clean this whole house and start a load of laundry. I think I'm going to like do towels and just kind of slowly start to do laundry because we are running out of towels. So I'm going to spare you all and not show a cleaning montage just because I literally just need to focus on cleaning this house. And I don't really want to worry about vlogging it. So I'm going to clean the house. Let's do this. No judging here but this is what it looks like right now. Shoes everywhere. I mean it's pretty much like my mess. Pretty. Oh hi Sophie. Pretty bad. And then obviously I need to make my bed. And yeah it's just a freaking mess and I don't even want to show you the guest room because that's like my beauty room and like where I get dressed. Well you can see a little bit but alright I'm going to go get to work. So I was not expecting Ryan to come home for lunch because usually on Fridays he eats out with his co-workers or I don't know today he got a haircut but I didn't expect you to actually come home. How did you get the haircut that fast that you had time to come home? I have tea sis. Oh. BRB. It's currently 1pm and I had a bowl of cereal for lunch because we haven't gone grocery shopping so we don't really have like that much to eat but I also just popped myself some popcorn because the cereal like wasn't satisfying enough. So I'm going to eat that while I do some content creation for my own Instagram. I'm going to be taking pictures in all my shop moody jewelry. I just got done shooting content and I'm just vlogging on my iPhone because I really don't feel like getting up off the couch. But now I'm going to respond to some emails about collaborations and then also I like reached out to two people on Instagram about collaborations so I need to email them my media kit and I also have like a lot of photos to edit. I also need to finish up my first wedding gallery and another freelance gig. So got a lot of work to do. Got to edit my own pics. I think Ryan's going to come home early not sure yet but I do want to go to this one happy hour. This is like restaurant. By the way these earrings are from shop moody. They're like cute little star dangling earrings. Super cute. So it is 5 p.m. and I actually spent so much time just emailing brands back and I reached out to this one brand so I had to do like this whole proposal thing and then my word literally froze on me so it didn't save. I saved it and like then it said it was like zero bytes and I was like what the heck. So I went back and it was like frozen. I was like great.  It's time like Google docs so it could like auto save and I wouldn't lose it. I usually don't even trust word. I don't know why I pulled word up but it's because I had to like export it but I remembered that you can actually export word doc from Google docs. Anyways Ryan just got home and he actually went to the twin liquor sale right after work. Babe you literally have a twin liquors tag right on your back. Turn your $39.34. I don't even think I've logged and said where we were going before we went to dinner but we were gonna go to this other place and then I found out the happy hour ended. So we went to Anthem on rainy street. We just had happy hour bites and margaritas so that was really good and now we are gonna just chill maybe drink some more. I kind of want a pina colada so I might make that. We'll see. Good morning y'all. It is Saturday. We ended up not going out last night. So like after I filmed that clip I literally just crashed on the couch. But today I'm going to a morning toast meetup at Central Market. So it should be really fun. I'm excited to like meet more girls. And then after that I'm filming something for Katie Texas. I'm actually doing the recruitment video if I didn't mention that before and I'm really excited about it. So I have all my camera equipment and then in case like this podcast meetup like doesn't run all the way till one I have my computer and stuff so I can stop somewhere to work for like 30 minutes or something. Today it's supposed to get up to 75 degrees. So super hyped. I have this sweatshirt on because it's like 66 and it's like really nice out right now. But I feel like I would definitely be like a little chilly in my short sleeve shirt. I haven't eaten anything yet. So I'm hoping that other girls are eating like at the podcast meetup because I think they have like they probably do have like pastries and stuff like that that I can just grab and go. Podcast meetup went well. I think that there was 30 people that said they were going to go and literally only four people included me showed up but it ended up being really nice and I got to meet new people which is always great. And then I went to go film at Capedalta and it was pretty quick. I just had to get a few clips just to you know show the range of like what they do in their recruitment video but now I got a very exciting package basically for my new job. If you guys didn't know I just started my new job as a content creator for a student housing company and basically I'm going to be doing their social media corporate social media and also doing photography and videography for their sites. So I am going to be using majority of my equipment but I did ask for one thing because I think this would be very helpful when I'm creating content for other sites and that is the Mavic 2 Pro. So my dad actually gave me his drone and it was the Phantom 4 but it is like a little bit harder I would say like a lot harder to fly honestly I really don't know because I've never flown a drone on my own but I just thought that this would be perfect because the Phantom 4 is kind of massive it's a very chunky drone and it needs like its own backpack this one is apparently super easy to fly and super tiny this is so exciting So this is what it looks like and this is like my hand just for a size comparison so it's supposed to be like super tiny to fit kind of in your hand My main priority this week is to try to learn how to fly this thing and I'm honestly very nervous because first of all it's not my drone like obviously the company owns it I really just don't want to break it I don't want to be liable for any damages that happen to it but apparently like it has like a ton of sensors all over it so it's really hard to actually like bump into things because it will like stop itself and then this is the little remote it literally reminds me of a GameCube or something so funny but these like pop out and you actually put your phone right here see if there's a screen and you can like see where it's flying and stuff and then yeah look at this look at this look it doesn't look like it last night I was not feeling too good like I went to sleep with a really really dry throat and I woke up literally every hour and drank so much water and like I took a Claritin this morning which definitely made me feel a little bit better but it's not all the way better and it just makes me sad that I'm not feeling the best especially with this weather being so nice so I'm trying to pull it together and get out of my house because I know the weather is not like this all the time so I definitely want to take advantage but I could definitely go for like a nap or something right now I watched a few videos on it already just to know like what I need to do setting up and stuff but overall I still don't really know how to fly it we are out here we're gonna fly this drone please send prayers I'm really nervous we're doing it on Ryan's phone because my phone is low on battery but we're about to fly it it seemed a lot easier than I thought it would be so hopefully fingers crossed everything is good to go calibrate calm fist calm fist now flip it on the side do it again so it was hello Wendy in this clip so I'm gonna spare you guys the wind noise but basically I said that we lived seven minutes away from the airport and actually on the map you can get this app where it tells you where you can and can't fly drones and unfortunately we live in an area that you can't fly drones so we went to Vic Matheus Park and we are gonna fly the drone here alright try it on Alex this is the prettiest place to fly a drone oh what the heck I'm gonna fly the drone last time I like gave it to Ryan oh no last time I landed it because I was so freaking scared oh my god oh my god oh shit this is so cool it's high it's really high I'm gonna record it is so pretty it is so pretty my back is all tense and shit what's low battery this remote aircraft is returning home minimum it's coming wait this is so cool where is it amazing we dropped Sophie off at home and now we are gonna go eat some bow at this place called Bowed Up and I just saw this on my yelp and I actually saved it on my yelp a while ago so we are gonna get some bow and I just saw that BJ's was right across the street and that just makes me think of college those late night Pizookies and I really wanted Pizookies but yeah my friends and I would go get freaking Pizookies and they were so good if you guys don't know what a Pizookie is it is a cookie and a skillet so it's like a giant cookie with ice cream on top and it's warm and gooey are you craving one yet good morning y'all it is Sunday and it's almost 10am I am going to brunch with some of my friends at 11.30 and we are going to Hanks and I've been to Hanks coffee shop and it's so cute but the restaurant itself is so beautiful so I really want to dress cute and take some pictures hopefully I do have some time to spare and I've literally gone like more than a week without posting on my youtube channel and it's not like I don't have videos to put out I've been kind of procrastinating putting out my work week in my life because I wanted to create an intro that would be like consistent throughout that series I guess and obviously I want to put in my effort and time so hopefully I can get that done within like an hour I'm going to look on Pinterest for inspiration of like if I wanted to do like graphic or just like a little title card or something like that and see what we can come up with so I'm in the beginning stages of getting sick this kind of happened on like Friday to Saturday and last night it was like really bad my throat was just so dry and then Ryan was like how about you drink some like honey and lemon water I was like why didn't I think of that earlier because it is so good it like is helping so much so I'm drinking this right now again and I got my little Keep Austin weird mug we literally bought this I swear I think it was like our first day coming to Austin really good gift shop downtown on 6th street I think it's called trading company something like that and we got this mug and I got like a little ornament it was so cute so I'm going to try to make this time efficient work on that intro and get shit done last night I actually ordered something on Amazon and it was a big like investment into my business and I guess I wanted to tell you guys what it is because I've been hearing a lot about them I don't really understand like exactly what the difference is between a hard drive and this thing which is called a solid state drive so if you guys know in the comments down below please let me know but basically what I've heard is that like hard drives corrupt like easier than solid state drives I don't know why I don't know how but I bought this like super mini solid state drive it was definitely a good chunk of my money and it sucked paying for it but honestly I got this computer I think in December it had like the last two terabytes on it but I don't want to always store like all the projects like my past projects on this computer I want to move it over to a hard drive if I can so I've been kind of putting off like buying a new hard drive so I kind of just bit the bullet and did it last night what really inspired me to buy a solid state drive is I saw someone's like real if you are a videographer or something like this you basically like pull like your best clips from each like each you've done and pretty much just like put it all together with like a really cool song I wouldn't be able to do that if I keep deleting my projects which I honestly do and it's so bad especially because I'm trying to get more professional and that is not what professionals do they definitely have like backups of their projects and keep them forever and ever just in case something happens so I need to start doing that so that is why I got a solid state drive so I could you know at the end of the year I could like pull from like projects and it would be so easy so yeah I'm really excited about that I'm not essentially about the price but I know it's going to pay off because I will show you my stack of hard drives that have corrupted they are so stupid and annoying and like holy crap like I've spent too much money on like all those hard drives and they're like all corrupted and like I've definitely tried to send back hard drives like maybe three or four times one time like they didn't even fix that they just sent it back and like I think they like said it was fixed but it was not fixed so yeah I'm over it so hopefully the solid state drive will like save my life and I think it will be a good thing for my business so yeah just wanted to share that really quick I'm getting ready to go to brunch and this is my outfit I have these shoes I got from Plato's Closet or Style Encore this dress is a short sleeve dress and it's from Princess Polly this cardigan is from Layden and then this hat is from Pink Lily Boutique and it's super cute it doesn't really have any embellishments but I kind of like it plain but Ryan said I needed like something on it but whatever this will do for today and we're going to Hanks


It's I'm Corbin Me I'm always to Ricardo We are reacting to a new song I believe it will new ish it dropped the 25th February But it's a new a Lou Arjun song And this was before a coronavirus. So I'm sure it's not, you know, keeping social distancing Well before the lockdown it wasn't for coronavirus But This is called but a bumma Or is I don't know if the yeah What's that hashtag? I don't know if the hashtag is a song or but a bumma is the song I Don't know what that is Vaikantapuramulu weird. Do you see how many views it has? to dear gasee 132 million views. Well, a Lou Arjun is a huge star obviously. Yeah But yeah, that's a that's a lot just for what a month two months of being up. That's crazy. Anyways, you ready? insane three two one God, hey, that's a bell We're gonna see some original choreography The cinematography is beautiful, holy cow This is fantastic, that's good. Ah, I like that great She looks like the love child of alia bot and de pica. Yes very much so beautiful cinematography beautiful shot That was too fast way too short, huh way too short, huh? That was was that directed by Sanjali Bansali It looks like it was it looked like it was directed by him and choreographed by Prabhu. Yeah Well, yeah, he he also has the unique style to him in terms of Choreography choreography, I think a lot of people say he never he never reuses any choreography Yeah, I gotta I mean I just straight up am a fan now I mean everything we've seen of his It has I have that same level of excitement to watch his music videos now that I do to see a new Prabhu dance because I know What we're gonna get is gonna be original well-executed Creative not settling for what's been gone in the past my goodness and that that I know now I know why it's got a hundred and thirty two million views That's about as good as a music video can get as far as the song and the visuals and the choreography all matching each other and being a That's just a great music video. Yeah the Cinematography in it every single shot. It was it was like a Sanjali beautiful where you when you're not really on Sanjali Bansali films a lot of times you you combo someone's forget that there's acting going on. You're just like whoa Yeah, I paused we've talked about it before I have paused frames when in a in a Sanjay Lila Bansali film Just to rebel and marvel in the in the shot he got Movie is okay, so it's from the movie Allah Do we do we react to that trailer Allah so that so the hashtag is the movie Do we react to that taboo is in it Oh, yeah, we did it. We okay, so we were you did react to the best trailer Yeah, we reacted to this one about three months ago And I think we from what I remember enjoyed the trailer. We reacted to it with Ashley I think we really enjoyed it But it looks fantastic. You so you guys can let us know if it's if it's one of those that's worth a watch But who's the director of it? That's what I want to know I'm looking here or the cinematographer Is PS Vinod, okay? Director is okay, so I don't recognize him, but super deluxe my friend the watch one The cinematographer of this is the same cinematographer from super deluxe Victor better Gotcha. Gotcha. Gotcha. Gotcha. Okay. Yeah. Well, he's good. I'm looking even farther down than that Yeah, anything else we may have seen because he's he's done a lot I'm assuming I said he the initials do not tell me whether or not this is a Man or a woman and so beautiful the main actress pooch pooch. Yeah, I think it's her name She looked like like a love child of Topeka and alia, right? That's what very seem like so Lots of alia right here, man. Uh-huh But so that was that was great. What should be like because we Is how is a Lu Arjun's acting because I don't think we've seen any of it. I believe I don't think right We've only we've only seen his music videos So how is his acting because I think I've heard like Prabhu Obviously, you know if there's dancing, but apparently his acting is not great And so how is a Lu Arjun with his acting? I think he's like The biggest if not one of the biggest movie stars in Tolugu. I believe it's Tolugu cinema if not, absolutely So obviously I think no we have seen a fight scene of his We have yeah, we've just never watched an entire film of his that doesn't really show the acting chops Not at all Let us know how his acting is please Yeah, that's the best thing to watch because he's done. I'm looking at his IMDB credits right here He's he's done like nearly 30 films over it. Yeah, so like what if if he's like a really good actor and he's like somebody we should watch What film should we start with not the most popular one that we would you know how you know how we like movies? You know what stupid babies? and so I feel like people that don't know us like sometimes like if you if you're if you just see these people reacting to movies and then you're like a fan of like the movie San Andreas with Dwayne the Rock Johnson that would not be a film even though it's a fun film everything's blowing up It's not something to really impress us No, and I could say that from seeing that film. It did not impress me But Let us know down below which film of his we should start with if we should watch his stuff


The study presents a new threefold multiplexed alzanafagocytic killing assay, MOPA, that can assess the immunogenicity of group B streptococcus, GBS, vaccines against serotypes IA-3 and V. The MOPA uses baby rabbit complement, BRC, to measure the alzonic index, OI, which is a measure of the ability of antibodies in serum to kill bacteria. The study optimizes the BRC concentration and shows that the MOPA has high specificity and accuracy, with R2 values greater than 0.950 for all three serotypes. The intersay precision of the GBS MOPA is 12.5% of the average coefficient of variation. This article was authored by Minit Jichoi, Ji Yun-no, He Jin Chong and others.


That's good. Someone gets to see my big head staring at the screen. OK, so how many people attended my previous talk on container security? Excellent. So this is the exact opposite. This is totally turning the security off. How many people here have played with Project Atomic, or Atomic Host? OK, if you're following the development of the operating system, what we're trying to do in the Atomic project is sort of build a new way of using operating systems. And the goal here is to make an operating system that the only software you ever install on it is going to be containers. In order to do that, we need to allow containers to have applications in them that might manage the host, or might manage other containers. So in that case, what we need to do is build a container platform, a way to run containers in such a way that the container can break out of its containment. So I've been working in container technology for many, many years. Obviously, I'm the SE Linux guy for 100 years at Red Hat. So I've also been using namespaces all the way back to REL5, so Fedora 5, who started using namespaces. So namespaces, and SE Linux, and other types of confinement, capability, things like that, are all things that we're using to define what this thing is called a container. So for many, many years, we've been using this technology. But most people weren't really didn't understand it until Docker came along. And what the really interesting thing about Docker is not so much the containment. All that Docker is really doing is taking advantage of stuff that the Linux kernel provides. But the really cool thing they did is new packaging format. So what we're looking for is, as we move forward, I believe that people should start packaging software in high-level applications in the form of containers. So your low-double tool should still be built in IPMs and stuff like that. But as you get to higher-level application suites, you're going to package those up in containers. And we want to basically make containers a new way of shipping software system. But in order to do that, we say we're going to do that. We want to build platforms that are really optimized for running that. But again, we need more advanced applications. So the only way I'm going to ship software is inside of a container. And then I have a host system that all it can do is run containers. Then I have to get to handle these advanced system management-type tools. So actually, this is a Unix way of containers. I guess in China, they decided that there they should tell me it. I guess not. They jumped the gun on container technology. So obviously, no one in this room should tell DC Comics that I'm stealing their logos, OK? So we're talking instead of just standard containers, we're talking super containers. So on Atomic Coast, we don't have M install. We want to make the Atomic Coast minimal. So everybody that plays with Atomic Coast, the first time they get on there and they say, this is awesome. Atomic Coast, it's a minimal install. But what I really need is I need this package install. I need S trace. I need Ping. I need man pages. I need everybody gets on there and they get instantaneously frustrated because it's a minimal install. So everybody wants a minimal install with just the additional packages. So our goal is just to keep it as minimal as possible. And if you need extra stuff, you're going to install containers. So how do I administrate? How do I admin a machine without S trace, GDB, trace route? So really, as an admin now, you're going to be starting to look at, you got to start thinking about the world differently. So this container platform. So this machine, Project Atomic, is not your desktop machine. This is a pure server play, a pure cloud image environment. It's not something that you want to run a desktop on. Although I think someone's building a atomic-based desktop platform. Customers want to install their favorite tools on atomic host.  So you have to basically prove that you can't do it inside a container. We put some stuff in atomic host we want to get out, because we made mistakes. For instance, Kubernetes.  The only thing, my end goal with atomic host is the only thing you're going to get is the kernel, systemd, journald, and Docker, OK? Getting rid of SSH demons a little bit difficult. And then there's some other package. Right now, for instance, Isis log, if you want to run Isis log, that comes in the form of a container. So really what we want to do is just get that thing down as minimal as possible. So another problem is that I want to ship an application that will manage the host. So what happens if I want to manage the host operating system? Why should an application manage containers? But we introduced about, I think, back before Christmas this year, we introduced the concept of super-privileged containers. So there is no such thing as a super-privileged container. I'm going to explain the concept. Anybody in here has played with Docker at some point? So you know about dash-privileged. So dash-privileged just basically says, turn off all security. It basically literally says, root is root on the system. But what it doesn't do is it doesn't get rid of namespaces. The super-privileged container, we're going to get rid of namespaces, or the concept of it. So it's really just a concept. Way to run certain types of containers, SPCs will manipulate the content on the host. SPCs can be used to manipulate other containers. Turn off the security. First step to running super-privileged containers, turn off the security. OK. So we go through that stuff. OK. First time I did this talk, it actually Twitter. Some people did go out and tweet it. So privilege container, you need to turn off the security. So the way you do that in Docker is you run. So I'm going to go through a whole bunch of commands here. But basically, in Docker, you run dash-privileged.  And as I said, if you went to my previous talk, we talked about read-only file system, read-only kernel file system. We talked about SC Linux. We talked about capabilities. We talked in the future about set-comp. All that stuff, use the namespaces. All gets turned off as soon as you do dash-privileged. But we still have a problem that you have namespace separation. So even though I turn off even around Docker privilege, if I do a PS command, I only see my processes. I don't see all the other processes in the system. I'm still in my network namespace. So I still don't have access to the network, the real network, on the host. I don't have access to shared memory from host processes. I don't have other accesses to the host. So what Red Hat's been working with Docker is contributing all sorts of things to turn off namespaces. So you can do a Docker run now, dash-net, host. And that says to share the network namespace with the host operating system. Really, it says don't do the network namespace. Docker run IPC equals host says share the host IPC namespace.  Docker run dash dash PID equals host means don't give me a PID namespace. So as soon as I do this one, I get to see all the processes on the system. Next part, so that gets me to, so what I can do with these commands is I can get to the point that the only thing I'm using inside of my container is the mountain namespace. So I have my own version slash user, which I want because if I'm going to ship my own software into the system, I want to have my own operating system, my own host operating system. But I need to get access to the host operating systems, the host file systems. So we want to mount the host file systems into the container. One of the things we do, you don't have to do all these to do super-posed containers. You can do partial ones, but we're going to get down to the final command. But if I just do a Docker run dash B slash run colon run, that means by mount the host slash run into the container. As soon as I do that, I'm able to interact. If I do that with dash dash privilege, I'd be able to interact with system d. I'd be able to interact with debus. I'd be able to interact with Docker. So I could actually, if I run a container like this, I can actually start and stop Docker containers. If there's anybody that can talk to slash run Docker SOC, I can get access to it. If I run Docker run dash B dev dev, that means share slash dev into my container. So we have one of the first super-privileged containers we built was Libvert. So in Libvert world, we wanted to basically allow Libvert to launch VMs, but we didn't want to ship Libvert. Everybody knows what Libvert is. It's a tool we use to launch virtual machines. We wanted to run Libvert on atomic host, but we didn't want to have to add all Libvert into it. We wanted to run Libvert in a container, but we needed slash dev so that it could go out and create device nodes and things like that. Actually, Libvert also required the dash dash pit equals host and a few other additional features. But now you can run Libvert. And as a matter of fact, if you look at the COLA project, K-O-L-L-A, that's an effort to containerize all of open stack inside of Docker containers. And those require, a few of those require super-privileged containers. Allows a container process to communicate with the device system that already covered that. So the granddaddy of them all is actually down here. Docker run, dash v slash to slash host. So that basically says mount the entire root file system into the container. That's also, any mount points under slash basically is bind-mounting slash into the container. And we've basically said we're going to standardize us being quite the atomic that the way you do this is slash host. Not only that, but we're also setting environment. We say you should set an environment to variable for dollar sign host in the container to point to slash host. And then you could build your scripts to be able to run if the dollar host isn't set, if it run on the native machine, if the dollar host is set, then it'll change. Basically, it'll go into the sub-director. I'm going to show you that in a minute. I'm cutting off the bottom of the screen. And I can't, even standing up here, I can't look down and see what that is. But I'm sure it's real interesting. OK. So it's best right now if I do a demo and I have to walk around and I show you all what happens when you do all this stuff. OK. So here's a standard container, Fedora container. OK. I don't even have a PS command. But basically, one of the interesting things inside containers is we actually lied to SC Linux inside of the container, telling it that SC Linux is disabled even though SC Linux isn't enabled. The reason we do that is to stop applications from trying to do SC Linux activity. It's not for security, it's basically to stop tools from, oh, I'm on an SC Linux enabled system. I should try to do something because it's going to be blocked. So this is actually, obviously, I would never run an SC Linux system disabled if I go over here. You see it's not the same whole system. It's enforcing. It's just lying inside the container. But if I did a CAD of Parac, that shows you the SC Linux label. So yeah, I don't have a PS command, but basically, it shows you the SC Linux label. So this is a fully confined container. So now I'm going to do the same thing. Yep. So I'm going to question that. Do you still use LXC for no one who does? Yes. Do you still use an LXC label? LXC, well, let's use a little history of LXC. So LXC means different things to different people. So LXC, in your definition, means LXC toolset is developed by IBM. We have old LXC containers. LXC is also a shorthand for Linux campaigns. So we're using it as an interpretation of these LXC campaigns. So LXC means that. All right. It also would be Libvert LXC, which is the implementation of Libvert that uses those LXC campaigns. So yeah.  So that name was developed. This policy was developed for Libvert running the old LXC for the same box tools. OK. So now we're going to go into a container, and I'm going to do the same thing. Prox self at our current. And you can see it's now running as SPCT. OK. So SPCT is basically on confined process. But I'm still in a container environment. So even though I'm privileged, of course, I can't show it because I'm on a PS running it, but believe me, there's a lot less. OK, so there's only two processes in the 10 and 1. So I basically still have no access to the host system. So now if I do, so if we start to do some of the pit equals host, equals host, that's just IPC equals host. And if I did that, so I am in LXL, for rock, all of a sudden I start to see lots and lots of processes on the system. I also, I don't think I have anything to do yet, but IP, what's the IP? I don't have any of these commands inside the container, but basically I'm now using the host network.  So I now have full access to the namespaces, but I still don't have access to other parts of the operating system. But I can start going further and dash v of slash run, colon slash run, dash v of dev, colon slash dev, and slash v of slash, slash host. And so here I am inside of the container. That's still no command, but I can do it to root, slash host. And suddenly I got the PSN. Why? Because I'm on the host. So if you read Project Atomic blog, I actually blogged about the security problem of allowing Docker to listen to, to allow global users to use Docker sockets. But basically this just shows I totally broke out of containment. I'm now fully unconfined T on the host and I can do anything I want. So it's kind of interesting. So this is, all this stuff is the idea of a superpillage container. If I went and looked back into the container and I looked at slash dev, I'd see those files. And if I look at slash host slash dev, I'd see the same amount of different command. But basically, I'd also notice that suddenly SELinux started to work. Because basically I turned, because I'm in a superpillage container and I've now started to tell SELinux you are enabled, so you can start to see SELinux stuff. So you can start to do relabeling and fix labels and anything you want. So let's go back to presentation. So who wants to type all that stuff every single time you write an entertainer? I certainly don't. So one of the fundamental problems with Docker is we get to these more advanced environments as you start to get more and more complex command lines. So one of the things we've looked at with, I guess I'll continue the presentation, rather than jumping ahead. So when we looked at it, we wanted to build some new tooling to make this easier. But one of the things we talked about when you go into a container, and I don't know if there's a Fedora tools image out there. Probably should be, especially after what I'm about to say. When you get onto an atomic host, I talked earlier about doing S-trace and things like that. You really need access to these tools, S-trace, GDB, SOT, and relimb versions. We need a SOS report. We don't even have man pages. So you can't even say man Docker to figure out how to run the Docker commands while you're in the container. But what we've added is a tools image. And what a tools image is actually a great big container image that brings all this stuff. Really, it's sort of the admin shell. That's the way I would think about it. So we package up a whole big ton of what you would expect. And we bring it down to the host. And then you could go into the container or in a superprivileged mode. And all of a sudden, you get your man pages. You've got your other content. In order to do this, we wanted to introduce a new command. So we didn't want to just continue working with just the Docker command. We wanted to introduce a brand new command called Atomic. And I'm going to explain some of the goals of Atomic. But basically what you can do with Atomic, you should be doing Atomic, rel, tools, shell. And all of a sudden, it's going to pull down the rel. It's going to basically do a Docker pull, pull down the rel tools container. And you're going to be in superprivileged mode. We'll show you that in a second. So it allows you to run containers in superprivileged mode. And to run rel tools image, if you do Atomic run dash dash sbc, rel tools, bin shell, it will run that. When we first started out with this, it was nothing more than basically a huge alias to say, hey, if I execute this command, then put all this superprivileged stuff into the container. I think we're doing some other weird stuff, like making sure the local time inside the container matches the local time on the host. We also add some name stuff. We also do something by default on Atomic shell is basically we're going to build a container here, pull it down to the system, and then we leave that container around. So you can do a YAM update inside this container, YAM install inside this container, add content. And every time you run the Atomic command, you're going to enter, re-enter that container. So that container becomes sort of a permanent way that you can continue to do your updates in the system. So we also wanted Atomic. We wanted Atomic to be the only command that you would need to execute to do management of the Atomic host. Obviously, you can do Docker as well, but we wanted to also wrap our IPM OS tree commands. So if you play with project Atomic, you have to do things like move to the next version, reboot the machine, Atomic host reboot, Atomic host, I forget the name, shows how often I use Atomic host. Basically, the tools to manage OS tree, manage your host operating system, move it up and back to version. So, huh, just gone with this. So you can do Atomic host upgrade, Atomic host rollback, and Atomic host status to basically switch back and forth between different versions of the Atomic host. So promise me, my application is nicely rolled into a container. How do I tell you to use it or run it? This is one of the fundamental things we found wrong with Docker images. We want Docker container image, or now it's called open container image format, to be the default way that everybody shifts applications. The problem right now is everybody has to ship an image in a description or a page somewhere that describes how to install the image, how to run the image, what is the command line, what benefits. So you have to go to two different sites to get information about how to run an application. So if I build a big application like IPA or a big application like OpenStack, we have to go out to these random sites and say, oh, you want to download this, this, and this. The developer of the tool cannot build something into the container image that tells, basically instructs how to run his application. Another way to look at it is we play with RPM. Right now, Docker does not have post install scripts for RPM. So we wanted to build the concept, the way to do a post install or install an application. My application runs mostly confined, but needs one additional privilege. Free IPA was building an NTP deeming container, and the only thing he ran totally locked down, but the only thing he needed was this time, because NTPD has to change the system time. It could run with everything else locked down, but he needed to do that. If he just puts out a NTPD container, you just download it and run it, it's going to blow up out of the box. So anytime you do a Docker run in that, it's going to blow up unless you run with the cap added to SysTuck. So as a developer, I wanted to somehow specify in the container that the way you run this application is by specifying. So we worked a long time, this patch was ridiculously long to get in, a way to add image data to the JSON file associated with the open container image. So we added a label patch, we've got Docker to add, finally add a label patch, and developers can add the contents of the image to JSON data. So one of the fields we've added is the label run. So what you can do is you can basically put an image data into your JSON file, it's in the Docker run dash D NTPD container, and then cap add SysApp admin, and then we put keyword image. What we can do with atomic command when it sees image like this, it will substitute the image that you run. So if you say atomic run NTPD, it will change the image word there to say NTPD, we've added a few extra fields since then and actually now it's dollar image, but you get the idea. So now to run, if the NTPD container is built and you run it with the atomic run command, it will go into the JSON file associated, it will pull the image down, it'll go into the JSON file of the image, figure out what the Docker run, the label run command is and then execute the label run for executing the command. This container will work perfectly fine with Docker and you can go in, pull the image, and you can go look at the label and it will tell you how to run it, but you would have to run it manually. All we've done is wrapped the ability to look inside the container for you how it's gonna run. So let's look at containers differently. Container image is a new way of shipping applications. We wanna look at images as software delivery mechanism that talked early. I packaged up my Jboss application in a Docker image, moved to a repository, and then what, at that point, that's where to me everybody stops. It's like, okay, here's my image, go to my website and it'll have 15 pages of description of how to install it. Anybody have a look at the installing OpenStack?  It's like page after page after page of things you have to do. Yeah, well, I mean, there's been like 10 different installation procedures of it, but if you look at the way Packstats get an easier, but if you look at COLA now and what the COLA's gonna become, it's gonna be a single command. I want it to be is atomic install OpenStack. And then it comes up and it's gonna come up to you and say, how many versions of Glance do you need? How many versions of this do you need? And you'll just go out to Kubernetes and configure the whole thing. I want to provide, I don't wanna do that. I just like to come up with ideas. I want someone else to do that. Wouldn't it be great to do that? Yeah, yeah, yes. I'm all about Tom Sawyer in the fence. Okay, how does the customer install it? How do I configure it? I run, where does the config, where did the install script go? So we want to embed the installation procedure within the container image. So we also added a label called label install. So if you do an atomic install, it will read this line and I can do a Docker run privileged a few of the SVC commands and actually run an install script from inside the container that knows about slash host and we'll actually put out the system to unifile to set it up to run the container.  So this is not, when I'm building up any high level tools here, all we're saying is, is the command that I would instruct the user to write and I can embed my installation script right into the end of the container image. And then obviously I need an uninstall for when I remove the application. This does not mean the application has to be an SVC application. It just means when I'm doing the install and uninstall, I require privilege just like when you're running an RPM install, patchy that you run RPM install of a patchy it goes out and does privilege stuff on the system but when you run a patchy it doesn't require privilege or run Firefox or something like that. So the idea is we can put built in super privilege container activity for uninstall and uninstall and you don't necessarily need super privilege container functionality for running the application. So we also came out with the concept of meta container images. So we have an idea of something really complex like free IPA where it has 10 different services running. We want to get to this microservices environment where free IPA is made up of Kerberos, LDAP, CERT manager, I don't know, probably two or three other applications. We really don't want again to go to the page of install or I mean right now free IPA has a full install script. So I pull the end install script so I have to rewrite that to use containers or can I build it directly into the container? So I envision that we will have a atomic install IPA all at our free IPA and all that's in the free IPA image is the install procedure, right? And it comes down and it's going to prompt the user or say, how do I do certain things? How do I install it? And then the IPA can go out and figure the install procedure can figure out is a Kubernetes available? Okay, install, I need a replica server, Kerberos slave server is running on these IPAs, I need all that stuff. And then I've already mentioned OpenStack. So there's been a big effort to make all of OpenStack inside of Kohler have these labels so that we can start to automate the installation. So again, right now Kohler is actually made up of 10 different containers, Glance, Nova, Libret, whatever all those tools are.  And it's going to download the meta container image and that meta container image is going to start to prompt you to install stuff. I'm not going to be covering NulliQL, but NulliQL's goal is to get into a new way of defining these applications inside of the atomic application, inside of the atomic manner, inside of the image. So what might end up being these containers is a NulliQL specification. So imagine that you've got this NulliQL which now my team is trying to rewrite it all and go as a static binary. So now the NulliQL becomes it's not relics, not fedorics, not anything, it's a NulliQL application. It comes down with the definition of how to install an application and then that thing goes out and pulls down additional containers onto the system and tells Kubernetes to go out and pull down containers onto the system. So you start to build it. Again, you're building an application, a distributed application suite here and we're trying to make it as simple as humanly possible for an administrator to do this. Cole, you've pronounced that, OpenStack, product that? Fola, K-O-L-L-A. K-O-L-L-A. Yeah, so in Boston we would say cholera, okay. We would say tonic. We would say, yeah. Only old people in Boston would say tonic. We've been, we've switched to sodar, so. In Boston, people don't understand, in Boston, when a word ends in E-R, you make it sound like A. When it ends in A, you make it sound like E-R. So doca, doca, doca, and sodar. So now I'm gonna demonstrate project with tonic and I don't think I'm prepared for this, but. Yeah, I think that's it. Questions? Let's see if I can do this, I mean. Okay, so hopefully I'm not gonna say it. So here we have, so one of the things I can do here is I can actually create my container with all sorts of labels in it. This is a standard Docker file, it's not, there's no special, there's no special package that we have yet. We also use labels for identifying, there's all, there's no information in a container right now to tell you what to name the applications. Okay, it's not built into anything in JSON file, so now we've added the ability for us to say, it's Apache, it's version 1.0, it's at least that. Hey, the vendor, it's Red Hat, we're gonna license it. Well, we can basically put any string we want in here. We have a document that we're trying to, we're working with that CoreOS and other people to sort of standardize for some of these basic labels, our primary labels that, and, but basically. So what this is gonna theoretically, if this works and I didn't test it beforehand, it's gonna install a Apache server onto the system and it should set it up with a system to Unifile and let's see. So I do a Docker build in the pre-stages. Oh, let's, let's, as this builds, anybody have any questions? We'll jump ahead to the question section. Nothing? You guys all think this is awesome? So yeah, I was talking to you about the issues I went into with Docker build, where in the other case, the issue is, they will set the ID finally in the build phase. Yeah. There's no like, gas hash privilege from the build phase. Right. Yeah. There's no, I don't know. There's a, Docker right now refuses to screw around with Docker build anymore. There is a new tool called Docker RAM that's in the experimental stage right now. This is why you don't do these. Live. All right, you guys are gonna, we're gonna leave this as an example for it. Yeah, it needs to be changed to DNF, I don't know. There's something about it. No, I think DNF, I don't think it's going to work. Because it serves to be for some post. Is it like a third party thing? Yeah, I think this is related to the network. The network's safe. Anyways, trust me, it works. And matter of fact, if you pull, if you go out and do an atomic pull of REL tools, you'll see all this stuff.  It's really kind of cool. And what we're looking to do is add additional commands. The talk about earlier was going to be an atomic scan, which atomic scan will pull down a scanning container and run in the system and actually expand all the container run in the system. So we want to start to build out, but I can actually show you some other. So if I do the atomic. So right now we have the atomic post, which I explained. Info basically shows you the labels. Install, explain that, image list all the images. One of the interesting things here, when we get to scanning, we want to be able to mount a docket container without running the docket container. Right now docket has no way of doing that. So what we've done is we've built tooling to be able to mount up images without actually running containers so that we can examine and look at the images to see what kind of content they have. These are all obvious. We also added upload, now upload. Upload is probably going to get changed to push because it does pretty much what docket push does, except it allows you to push the satellite server. It also allows you to push the pulp servers. But we want to use something other than docket registry and use sort of containers like that. Atomic Verify is kind of an interesting tool in that it's looking at the labels. Imagine you have a container on your system that's MongoDB based on top of REL7 or MongoDB based on top of Fedora. If Fedora starts taking advantage of these labels, I think we have to take advantage of these labels. We want to start incrementing the releases. So we'd have Fedora 23 release one, Fedora 23 release two, Fedora 23 release three. Now I build an application on top of Fedora 23 base two and I have a whole application suite on my machine. What Atomic Verify will do is look at the application I have installed in my post and will say, oh, you're gonna get an application based on Fedora 23.1. I notice that there's a Fedora 23.7 available and I want to rebuild the Docker container. Doesn't necessarily tell you the security vulnerability, but just tells you that Fedora is like five new versions of the same image that you're using that you're at the application based on so you might want to think about rebuilding it. So it'll tell you that. Atomic Scan is the one that's going to come in and actually do a security scan to look at the container to see if you're susceptible to any CBEs or you have that configuration, your Etsy password filers. So those are all the commands that are available for Atomic. So I jumped over the Docker build problem. Yeah, the Docker build right now does not support any type of dash-data privilege activity. So if you're inside of a container and you're trying to do special things on the file system, I don't know if this is a good one, but you can build a container using Docker commit. So you can build SBCs. Well, let me give you a couple of SBCs that right now don't work well. I'm gonna do a work and fix them. So what happens if you have an SBC that's gonna load a kernel module? A lot of the kernel modules, so right now we can do that with an SBC. But what happens is that kernel module is required to configure the network that Docker needs in order to run. But obviously I have to install a container before Docker is run. So all of our containers are in there. Docker basically tried, Docker corporation wants the Docker daemon to be central to the existence of containers. I think it's a colossal mistake. So what we're trying to do is work with Docker to break the path that Docker containers are. Two of the announcements earlier this summer were around open container formats that Docker does no longer controls the container format. That was mainly to get corobats and Docker or anybody else. We don't want to end up with, we don't want to end up with RPM and depth. Two different formats that everybody in the industry has to fight about. We want everybody to consolidate on one container format so that we don't have this distraction with it. If that's going to happen, it can't be under the control of one company. So basically open container format, basically I think it's not limited to the Linux Foundation. I think Red Hat has a couple of people on it, Docker has a couple of people on it, CoreOS has a couple of people on it. So they're specifying what the container image format is. Another thing that Docker spun off is the thing called Run-C. Run-C is a little tool that allows you to run containers. But they didn't split off. It's a thing called Graph-C, which is a graph driver. So if I install a container image, it's going to be based on something like Oval-AFS or on top of it. The better device map or a better FS. When I install the image, it's installed, that's called a graph driver. So where that content gets installed, it's called a graph driver. So right now there's no way to take a container image mounted up so Run-C can do it other than using the Docker name. But we're working real hard right now to get a proof of concept of the graph driver being a separate program. If we can get a graph driver out of Docker, now we could build a system D unifile that would execute the graph driver in the mouth of the container and then use Run-C to run the container and do a superimposed container without ever having to use it with our community. So we could do it really early on in the new process. So that's one of our goals going forward. It's to get Graph-C into the open. And I think we have a good chance of it, whether or not Docker likes my idea as much as I do or not. But then what we slowly want to try to do is get the Docker daemon now to have all these low-level libraries and low-level function costs that you can do in the container, low-level you can do in the Docker daemon but they're separated out of the processes. Now, we're also trying to get lots of system D content. The system D controls into Docker. And one of the big problems of my mind is the Docker doesn't like system D. So I'm actually going to system D content to do a talk called Docker versus system D. I'm going to talk about both sides. I'm in the middle of the two sides trying to know what's happening. So they don't get along very well. Yes. So that's one thing that I ran into. It's like Docker is just like, you know, one process per container. Right. One service per container. Right. I hate when people say one process.  That's true. So the idea of microservices is one service per container. And that should be everybody's goal. Yeah. But the problem is everybody's not going to get there very quickly. Yeah. So everybody that runs multi-service containers right now, the problem is there's not a good tool for doing that. So there's been a tool called SupervisorD that's been out there for many multiple services in container. I hate it. It's Python. There is a great tool for doing that. It's called system D because that's its job. Yeah. It's system D. It's working on its system D version. The problem is that a bunch of did not adopt system D early enough before Docker became Docker. Yeah. So now they have the excuse that system D is everywhere. I'm saying it is going to be everywhere. Well, it isn't everywhere yet. So what I've been trying to do is get Docker to adopt system D. To adopt the functions to make system D work well inside of container. Right. And there's a considerable battle going on there. I think it's a lot of mechanism like trying to real high not to block heavily on this fight. I probably shouldn't say much more. I mean I've worked around with no desktop technologies in Fedora. Yeah. And of course we've been in the BDI. Right. And there's lots of interest in using the BDI with the containers right inside of the community and processes. They're already a commercial company. But they're always required for QBD to use in C. Oh, no. Is anybody using Docker yet for desktop environment systems? Yeah. I know there's an atomic desktop effort going on. Have you looked at what Alex Lawson is doing with SDGF? Yeah. I was just going to ask you about that. But the same, this Sandbox app stuff, you know, that's what I'm going to have on top of you. Right. Well, I mean, this is... He actually, Alex and I worked together originally and he went off to work on that. Yeah. That spec does not use Docker. It does not use over-container format. He's using a different format. But he's actually using it up in OS 3. So it's kind of a strange world. Yeah. The SDG app is a container format that's being developed to run desktop applications and individual containers, Sandbox applications. Take a look at it. It's kind of neat. And sometime in the future you might be running Firefox and Open Office and other tools all inside of containers. In my glorious vision of the world, I've been running Android apps inside of my browser. I don't know if that's really possible, but it's been really cool. You know, very solid, Chrome and Hasselaces are probably the great components in your app. Right. The Firefox, the latest Firefox on the ability, is also really...  When you click Open inside of Firefox, instead of it actually going out and opening files on the disk, he would send a signal to the desktop and say, Hey, I need a file. And if desktop then would open up the file browser, and you go select a file, and then the desktop would hand the file into open-up and use Firefox. And now Firefox would have no access to anything other than content inside its container. And the desktop would be sticking into the container of Firefox. So I want to save content. You go to the file browser, and think about applications like that. I mean, I'm very interested in the SDG app, because it's got a lot of apps, but the other use cases, you know, virtual desktop, you know, so that should carry multiple processes. Right. It's not just multiple processes. So the things about running system D inside of a container, there's about five fundamental things that are broken, like if you look at my hybrid dash-dash-dip cache, so Docker run dash-dash-dip with system D. Yeah. Yeah. So it basically fixes those five fundamental things that a lot of you run system D inside of Docker right now. Oh, okay. The kind of things that are... How do you use them? What is Docker accepting your package? Docker basically wants me to do it totally on the out there. They want to basically have a command line that looks like an SPC command to do it, but there's some fundamental problems we're doing now. So Docker right now is trying to implement everything required to run system D as individual commands. So for instance, to run system D inside of a container, you have to have slash one is the time of sense. You have to have container UUID inside of container, specifying the UUID of the container so system D will create a messy machine ID file. Right. You need to have by log journal UUID mounted into the container because you want to see the container context on the journal outside of it. Yeah, that's right. That's what's good. You want to register machines, so you have to have machine control register machines so that in journal D, you guys should have a command to run. So there's like five things that have to be done. The problem is that the chicken and the eggs and the system needs to assist. If I create a container UUID that's created by Docker, you'll inside the container. So I need that value in order to set everything up. And right now, so Docker is setting everything else up. It's that kind of thing I'm saying. The main question though is like, you know, say Docker isn't going to just product my four-pot company or my company. I feel like you're working with you guys on the Docker system. Right. I mean, in some of our responses, if there's not going to be one, then we're going to work slowly, make Docker less than it's expected. That's one, yeah. One reason for doing that. The funny thing is, LibPotana, which is managed, is an open source project now. Actually, so that's still controlled by Docker, but there are more responses to that. It's a ground stage. Docker needed it. One of the big problems with Docker even two is that it's client-server. So if you man a system D service inside of a container that's running Docker Run, which most people do right now, that Docker Run is not in child, the direct child of the system D is the direct child of the Docker D. So the client program has been a direct child of the system D. It communicates with the Docker. So if you go into the system D unifile and say, I want to have this CD with some problems, why do I need a container? Yeah, it doesn't work. Your client needs the Docker client. It's not client to the Docker D. So the Docker D doesn't pass it down to the container. There's lots of problems with using a client-server application. But we've been working for some of these problems. Lots of year and a half. And I'm showing too much frustration. So Atomic Tool is basically our idea. Right now it's available to Infador, Rahai, Sentos, Rel, where you can use Atomic Tool everywhere. And it's Atomic Tool that's not only on projects with Atomic, just on Atomic Post. You can young install Atomic anywhere. So it'll run very well in the folder. Anything else? That's good. Make sure you go out and stay in the coloring books if you haven't done one. Thanks for coming. Oh, I think I've signed up to do SPC training on Saturday. So if you want to come into play and you can get into that connectivity you can actually play and try to set up some. There you go. If you want to set up some play with Atomic, you can sit here. Do you sign the coloring books? I will sign the coloring books. You need a... I had someone marringed up his kit. So if you want to get a collector's item, that's probably well $0.15. So I'm glad you're giving me this item. It's worth a lot of credit. You need a sharpie to do that. Thanks for coming.


Hi, my name is Tracy Takahama-Spinoza, and this is a video to explain the differences between standard-based education, competency-based learning, and mastery learning. Standard-based education came into play in the 80s, and competency-based came into play more or less at the very end of the 90s and the 2000s. And mastery learning is the oldest, and we're returning to this. It comes in from the 1968 version of Benjamin Bloom's concepts. And so if you think about the comparison here, the main factor differentiating each of these has to do with time. So to explain this, we need to get a little bit of vocabulary under our belts. First of all, backward design. When we talk about understanding by design or backwards design, we think of educational planning or the way we design our classes or each lesson plan in three stages, right? The first is to understand our objectives. What is it that we hope to achieve at the end of the day, right? How will we evaluate that? What are we going to accept as indicators of success? And then what are the activities and resources that we might incorporate in order to get that evidence that will show us how far or how close we are to meeting the objective? So within these three different steps here, we have to also then disaggregate objectives into knowledge, skills, and attitudes. There is nothing that you teach or anybody learns that is not a piece of knowledge, skills, and or an attitude. So if you break that down, this is where the word competencies comes into play. The OACD used this in 1997 to explain that the combination of knowledge, skills, and attitudes are what makes up learning outcomes. So if we return to Benjamin Bloom for just a second, 1968, his main idea here was that there was at least five different things that came into play to reach mastery. So the first thing has to do with an aptitude is basically the amount of time required by the learner to get something under his belt. So maybe he walks into the classroom with a whole lot of natural aptitude for something, right? The second thing has to do with the quality of the instructor. We know that a great teacher can leapfrog student learning maybe one to two years within a single year of instruction just because that teacher is so good, right? The third then has to do with the ability to understand the instructions. So has that student got that prerequisite understanding, that knowledge to be able to scaffold prior knowledge and to reach this new level of understanding that's being offered to him? The fourth point has to do with attitude, perseverance. Can that student stick with the fifth point, the amount of time that it might take to learn? And according to Bloom, this is really the key to mastery is giving each kid enough time to be able to fill in those gaps of prerequisite knowledge that they might not have come into the class with naturally or from prior experience. So we keep all of those definitions in mind. It reminds us of Todd Rose's idea of the end of average, right? This is kind of making fun of the bell curve that we have. And when we think about standard spaced education, we want everybody to reach the average. Well, that means, you know, what 68% of the people naturally do, right? But we've got a lot of people on both ends of the spectrum, some that are a little bit slower or that need a little bit extra help because they don't have the prerequisite knowledge. And on the other end of the scale, those kids who are definitely gifted and higher fliers, they're not being attended to when we only shoot for average. So if we look at it from this perspective of learning difficulties, why did Bloom believe that 90% of the kids in any given classroom would be able to achieve? Well, basically if you look at learning difficulties around the world in the United States, it's 13.7, but that's because in some states you're actually given extra money when you have kids with needs. So these are higher proportion of kids with special needs in some states than in others, which is kind of crazy because it should be standard all across the board, right? In Europe, it's on the other extreme, it's very low. Only about 4.53% of kids have special needs. And so the worldwide average, if you lay this out, Science Daily says it's basically 10% of the world has a problem that would prevent them from learning any specific grade level knowledge within a reasonable amount of time. So this sort of justifies Bloom's concept that at least 90% of the kids in your class should be able to master all of the concepts that are being taught if and when they have the amount of time they need. So what does this mean? Standards-based education is literally based on what you can test on a standardized test, which is only knowledge and skills. Whereas competencies-based learning is a bit better because it's looking at knowledge skills and attitudes. This is wonderful, right? And they use a greater variety of tools than we have since the 80s, right? We use other types of things. Qualitative measures are valued. Rubrics are valued. But when we get to mastery learning, that's stepping back into the past to really launch us into this future thinking of knowledge skills and attitudes which are evaluated with a lot of different types of tools. But the key factor here is that time becomes a variable. It's not a limitation. So the key idea in mastery learning is that each kid has to master at least 90% of the content before he goes on to the next level. This means that you're not just going to keep social promotion and letting that kid go to second grade. If he doesn't master the concepts of no addition, how is he going to learn to do subtraction? So you have to have him master at least 90% of those basic concepts. So we have these two 1990s, right? 90% of the kids can get it if they get at least 90% of the information, the competencies, before they move on to the next level. So hopefully that's a clarification there between standard space learning, competencies based education and mastery learning, which I hope that we're returning to with this new thinking. So if you have any questions about that, please don't hesitate to write me. I would love to continue this conversation. Thanks a lot.


Well, hello, everyone. This is Byron King with Investor Intel. Today, we are going to speak, get an update from Pierre Gauthier from Oxico Resources, a rare earth company, rare earths in the sense of mineral sands. Oxico works in Colombia, Brazil, and the Democratic Republic of Congo. We've spoken with Pierre before. Hello, Pierre. You have several new news releases in the last few weeks, but you've got one very important release, just the last day or two, from Colombia. What's going on down in Colombia besides all the coffee? Good. Thanks, Byron. Well, if you're the mining business, having a mining permit to start mining is a pretty important element. And as we all know, no matter where you are and what mining jurisdiction, there's a long process with that. So Monday this week, we obtained the mining permit from the National Mining Association of Colombia from the government. And that's a major step in the area that we're in, because it's an alluvial area along the Orinoco River, and it's very vast. It stretches out over 15 kilometers. And we found just the various amounts of minerals there, including gold, and plant them in the first meter in this iron cap. And there's a substantial amount of rare earths below that can be concentrated by simple sieving and so on. So we're very excited about this permit. All our investors were waiting for that. We're late. We're five months late, which explained the decrease in the stock price, because I think there was a serious doubt whether we even get the permit. So we have it. And we expect the other permit, the environmental permit to be out within a few weeks, and that allows us to start bringing equipment to the site, doing a reserve study, drilling, whatever we need to do. So we're very pleased about that. That's the first thing. Well, that's exciting news. A lot of people out there might not really understand Columbia. I sort of kitted around a little bit and talked about the coffee thing. That's what it's famous for. I mean, geologically, there's the Andes Mountains of South America. I always talk about the dry Andes and the wet Andes, dry being like Peru and Chile. The wet Andes are up there in Columbia. You've got the Andes Mountains draining down into these rivers with all the decomposition and the sediment flowed that these rivers carry, and they're filled with river sand that has been processed over the years for things like tin and various others. But you have these sands that also have monazite, and why don't you expand on that a little bit about what is the resource that you're looking at? We're looking at, we have 1500 hectares of land under payment, if you will, under purchase payment that'll be finished, concluded next little bit here. So you've got very little vegetation, very little trees there, and if you fly over it, you can actually see these reddish sands over very vast areas. I'm talking 10, 12 kilometers of distance. And when you see these, this surface is being reddish in color. There's your iron cap where you have iron and titanium, et cetera. And it's almost a marker for the rares that are under it. Now, when you don't see that color, it doesn't mean that it's not there. It's just a little deeper. It could be three meters deeper so that you don't see the iron cap right on surface, but it's below. We're finding that out in the pitting we're doing. We're doing pits every 40 meters to create a reserve here. So it's easy access, number one. And that's the knock on Columbia. It's nice to have a great project, but you're in the middle of the Amazon, and you can't fly in. You've got to build an airport. It gets very complicated. In this case, we're right along the river. The property gives on the river. We go there by boat from a little city called Porto Correño, and that has a flight directly to Bogota, one-hour flight. So it's a place where you can actually work. And we looked at five or six different locations in Columbia before we chose this one, and we chose it because of infrastructure. So to get to work on this, it's not like a conventional drilling program where you're going to drill hard rock down to 500 meters. I mean, we're doing our reserve now just with a pick and shovel in the first meter and doing that every 50 meters on a specific grid. So all the work so far has been, we have 22 employees that live at the site that do our work like this. So there's a lot to be accomplished like this. Of course, for mining it now, that's another story. We're going to have to, our objective is to mine 1,000 tons a day, create a concentrate of 30 tons a day of these virus minerals. That would be that concentrate of rare earths. And then take that concentrate and take it to an industrial park that's near Bogota and do our chemistry there and extract the rare earths there in elemental form. Okay, so that's the objective. Now, one thing that people concern themselves with is the environmental impact. You're not using any toxic chemicals in this process. Much of this is gravity separation and such, isn't it? Yeah, there's no chemistry on site at all. All right, it's going to be screening and gravity separation to create a gravity concentrate. That's it. So that makes it a lot easy from, our whole work program is well-defined in environmental study and that's what it says there. So you can pick up a lot of various minerals by gravity that are associated with these rare earths, including tantalum, niobium, tin, zirconium, gold and silver for that matter. So that concentrate gets created locally and shipped to Bogota. And it de-risks the whole issue of social license, ESG being protested at the front gate and things like that. When you start doing chemistry and there's villages and population around there, that's a whole other story. So in our case, we're very green that way. So it's perfect. Right, right, right. And so now even on the best of days, though, sometimes, you know, monazite tends to have a little bit of uranium rathorium in it. And is there a radiation issue? There clearly is a radiation issue in Colombia. You know, when we do that concentrate, there is a radiation issue. So that would not be able to be exported out of the country without taking out that radiation. So that's why we have a whole scoping study done on building a plant that would treat that 30-10-a-day concentrate that would be about 1,000 tons a month and take out that radiation and put it aside and have a clean concentrate to export. So all that work has been done in the lab. We've been working on a technology called ultrasound extraction for many, many years. So it's a cracking system. Acid bake and other technologies can do it. It takes 10 or 12 hours. A lot of pressure, a lot of heat, a lot of acid. In our case, we do it in one hour. And then we can simply precipitate out the thorium based on controlling the acidity of the solution. And that's been done already. So then you can neutralize that, either sell it or simply put cement into it and just bury it as totally neutral. You know, so that issue has been solved. And just a general comment, you know, we're involved in Brazil and monazites as well and we're involved in the Congo. So I view these monazite signs as just a tremendous source of rare earths compared to hard rock mining. And that's where you can build up the volume. But I think this radioactivity that you just brought up is a constraint to that development. And if we didn't have to develop this ultrasound technology, it'd be hard to think of commercializing all these projects. We've had another, you know, one of these investor intel discussions before where we talked about the ultrasonic ultrasound issues. It's just remarkable technology to anybody out there who's not familiar with it, go to the website, you know, go to the presentation, take a look at it. It merits its own, you know, discussion, you know, of itself. Just to give a quick, quick, quick review of somebody's watching this for the first time. What is this ultrasound thing? Here's what the problem is. When you're mining these rares, for instance, you go and try and create a concentrate, you know, by taking stuff that's in the ground at 1% and make it a 50% type concentrate. In that concentrate, all these rares, 15, 16, they're all to glue together. So, you know, the objective is to get these things selectively. So how do you, the word is, crack this. So there's all kinds of literature on what other people are doing. You use an acid bake system, which is 10 or 12 hours of heating the acid up to 800 or 900 degrees and putting pressure. And then you liberate these things and they do go into solution. So, you know, it can be done and it is being done and it will be done. In our case, we do it with ultrasound and it takes one hour to do it. And we, you know, what happened that ultrasound, it creates these cavitation bubbles and solution that collide together and it acts as a super grinder of particles so that that grain of sand becomes a thousand other grains and the acid gobbles it up much quicker, you know. So you get 95% recovery of everything in solution, one hour, as opposed to eight, so it's a big competitive edge as far as we're concerned. You know, we've got patents now issued by the US government, the Canadian government on that process. So it's, yeah, the comparable would be, you know, for people out there, again, who aren't familiar with it would be lithotription, like if you have a kidney stone and you go to the hospital and they put you in the bath and they zap, they zap their body and they literally break the little stones into much, much, much smaller pieces. So that, so that's what you're doing. It is exactly what it is, you know. So we do that with the sand particles and mining as opposed to the kidney stone and your septum, that's exactly what it does, you know. But like I said, we work with McGill University and University of Montreal here and it has a, it's called a sonification chemistry department. It's the only one in America, so it's about 30 PhDs in chemistry working on ultrasound at the University of Montreal. So this is like our research lab where we get all kinds of things done and that's how we've been able to progress the technology for quite a bit.  All right, thank you. Thanks, Brian. Great. Thanks.