Live from Las Vegas, it's theCUBE, covering AWS re-invent 2017, presented by AWS, Intel, and our ecosystem of partners. Hey, welcome back to AWS, re-invent 2017. I'm Lisa Martin, very well caffeinated today, so is David Fleuer. We're really excited to be joined by two newcomers to theCUBE. We have Ryan Baxter, the director of cloud and verticals from Micron. Welcome. And Mo Farhat, director of SSD business line management. I'm marketing guy. Welcome guys. Thank you, thank you, thank you. So Micron, a 35 year old business. You must have seen massive changes in the last 35 years. But tell us what you guys are doing with AWS. What's exciting you about the announcements coming out? How are you partnering with them? Well, you know, as you're seeing around you today, the rise of hyper scale is the true story in IT. And we're closely engaged with AWS to support their storage memory and emerging memory technologies as well. And we're tremendously excited by the potential that AWS can bring to the market and is bringing to the market today. Right. So let's unwrap that a little bit more. One of the things that seems to be happening is that the traditional nexus of networking, storage going all the way through the central process where it's breaking up. And you've got some very interesting stuff with the NVIM, NVDIMS. Can you talk a little bit about that and what does it mean to architecture? Sure, so I don't know what line isn't blurring these days when it comes to computing. So yeah, we are certainly developing and pushing a product today called NVDIMEN. It is the first example of persistent memory which we believe will really usher in a completely new model and a really a way of thinking about the way folks do compute. And so it really requires some change on the system side but the advantages are significant with just a little bit of investment in terms of adjustments in software and the way you use hardware. What you can gain from a performance perspective is enormous. So by having large amounts of DRAM and then on behind it, a large amount of NAND storage and that combination of the two together on the same whole piece that goes in the computer suddenly multiplies by how many? 10 times? 100 times? At least an order of magnitude. I mean we're pretty excited about where this can go. Obviously it doesn't come for free. There will be some investment as far as just the application stack and how things need to change from a hardware enablement perspective. But yeah, things are changing very quickly. The traditional model of really memory and storage is very much at risk and very much blurring these days and we're excited about where it's going. So let's talk about the SSDs. I've been following the flash market for a long time and saying what a difference it makes to applications in the amount of data that they can get into them both from the memory side and the storage side. So what's happening on the SSD side? What's new and what are you focusing on? Well what's most exciting about the developments in SSDs today isn't that just that they're accelerating existing workloads but they're enabling all new workloads. Things like real time analytics to drive our AI engines have revolutionary potential for our daily lives and not just in the data center. And so when we take a look at what's happening in the SSD market today the big story is the ramp in adoption in PCIe connected or NVMe SSDs. And we believe that we're at a turning point right now and led by AWS and other hyperscalers in truly driving this adoption and what NVMe allows you to do is really harness the inherent parallelism of the solid memory technology, solid state memory technology and enable better control, enable lower latency, higher throughput and really move away from the legacy IO stack that was built in for the hard drive era. Or as we like to call it at Micron, spinning rust. Yeah. Right. So and that's really amazing isn't it? If you can have real time analytics connecting to systems of record at the same time that rushes in a completely what we call in Wikibon systems of intelligence, a completely new way of being able to provide much, much more data to those systems and drive productivity by an order again really very high levels difference of the type of applications that you can have. So let me ask you this is a lot of changes we've talked about where we're taking out the network side we're taking out the storage side and the memory side. What's one of the most important things about getting this to happen over the next few years? Right. Well, I think I'll start I guess one of the most important things in our minds is paying attention to the customers and really what drives them, what provides the most value for their deployments and in the cloud and so we have the privilege of working with folks like AWS because these customers at the end of the day challenge us to be better. They challenge us to maintain or improve our quality levels. They challenge us to be more flexible from a go-to-market and business model perspective and frankly a lot of the features that they're looking at incorporating into otherwise standard products today actually end up finding their way into the next generation products that we design tomorrow. So it informs a lot of the way we need to think about traditional memory and storage models in the future. What about the standards that are required? The standards? Yeah. So we certainly, the standards bodies are alive and well and are absolutely necessary for what we need to do to push our products into the market on a daily basis. Oftentimes those standards are too rigid or not feature-laden enough to be able to get enough benefit for the particular end customer and so in those cases we're sort of having to bend the model a little bit. So our products are based on a relatively straightforward set of foundational standards but from there we listen to the customer to enable new features, new capability of our otherwise standard products. Absolutely and in fact, Micron today is really working with our customers upfront in helping drive the standards with deep technical engagement on next generation NVMe features as well as next generation form factors. Really our technology leadership in DRAM, NAND, everything in between, really positions Micron very strongly to shape the future here and we can't do it without strong customer engagements and we're really very excited about the potential for our future here. Yeah. Fantastic. How does the standards focus that you guys have? How does that set Micron apart from your competition? Well, it helps us be a good player in the industry. It helps cement a leadership. It allows us to have a playing field that goes to the benefit of our customers, our partners in delivering predictability to the market, delivering overall lower costs to the market and all the other ancillary benefits that agreement on standards provide. I love what you talked about with respect to, working together in partnership with your customers. We hear a lot about that from AWS. They're very customer centric and I love their, there was an article on siliconangle.com this morning, was the third installation of John Furrier's exclusive with Andy Jassy and I love their kind of backwards approach to product development which is really, surprisingly still revolutionary. So the customer is such a driving force into what Amazon has become and it sounds like what you're both saying, that's really very much paralleled at Micron. Yeah, absolutely. You know, leading is hard when you're firmly looking forward and really blazing new trails in technology, in our product set here and really driving the revolution towards the solid state data center. You can't do it looking in the rear view mirror. You've got to go in collaboration and it's really some of the most exciting things that we do here is really enabling our customers to succeed. Absolutely. So and your focus at the moment, I'm putting words in your mouth, I presume that's really with the cloud providers, the hyperscale people like AWS, like Microsoft, like Google, are those your sort of where you're starting the conversations and then that'll come down into the enterprise as well after that. Is that the model? So, you know, we provide solutions to a broad range of customers. There is no doubt that hyperscale is in the driver's seat in terms of demand now and in the future for IT technology of all stripes there. So we're very focused on it. Yeah, there are cloud models that obviously are heavily supported by our OEM customers as well. So maintaining engagement and really being best in class in their eyes is also extremely important for us. So this event, I actually heard this morning 44,000 people here across the entire strip. Last year it was around 30,000 or so. How does this massive momentum that AWS has, how does that inspire Micron? And what can people see, feel, touch and experience at your booth here in the expo? Well, really, again, the growth in a number of attendees is nothing compared to the growth in AWS's business overall. These numbers are truly inspiring. They're changing the landscape of IT today. And so encourage everybody to come by our booth and look at the variety of solutions that we have, both on the SSD side, memory side, as well as the all-popular NVDEMs. And I think what events like this help to do is mobilize 44,000 of the brightest people in the world that come from all different walks of life, not just from a technical perspective, but software, hardware, application-oriented marketing to really have a meeting of the minds, if you will. And it really does. It challenges the traditional way of thinking of how we design our solutions and how we support customers like AWS. So guys, thank you so much for stopping by and chatting with David and me. Thank you very much. Really exciting to hear what you guys are doing and we wish you continued success. Thank you, Lisa. Thank you, David. I appreciate it. Thank you so much. Have you here? Furmo and Ryan and my co-host, David Fleur. I'm Lisa Martin. You're watching theCUBE live on day two at AWS 2017 re-invent. Stick around, we'll be right back.


So the thing that Whiskey did that's different. If they got you as an 18-year-old, then you would stay with them.  I've seen their decks. This is how it works. They have you until you die. And you have a child. How do I get the 18-year-old now? And they created a different brand. Same company, but now it's like a different younger version of that. I'm not drinking my dad's stuff. I'm not drinking my dad's stuff. I'm drinking my own stuff. And so then they create another brand and then there's all these other brands and they do a little infusion of like, this one's got cherry. So their life cycle is a life cycle of a consumer.


Yeah, so I, everybody in the back hear me? Can't hear me? All right, first of all, I wanna say this is my favorite conference of the year of, I come to each year, I really enjoy it. Lots of stuff I learn while I'm here.  Hopefully that doesn't happen after this talk.  I like to think of myself as the Ursula of containers. Basically, I started out by getting containers into Flora, then into Rel, then into OpenStack, OpenShift, Ansible, and now into a thing called RIVOS. So containers on wheels, we call ourselves the cow team. So it's a part of automotive. Basically nine months ago, I moved out of the container, container leadership, the Podman team, and all the low-level container stuff, and I moved over to Auto, mainly because I thought the container team was ready to go on their own and didn't need me in the way anymore. And now I'm working on Auto, but really just continue to work on containers and all things. So we call it the Red Hat and Vehicle Operating System. Everybody calls it RIVOS. We're still not sure if we're supposed to use that outside of Red Hat, but anyways, we're not supposed to use rel outside of Red Hat either, and that's not worked well. Last year at the Red Hat Summit, there was an announcement of a big agreement between Red Hat and General Motors, basically to look at getting a Red Hat-based operating system into all of their cars going forward. We have a lot of interest from a lot of car manufacturers and OEMs in the car. They're all looking at what we're doing. They're very excited about it, and what we picked, General Motors is our customer number one, mainly to control the amount of requirements and gathering. What we plan to do is over the next year and a half, basically design the operating system with General Motors, and then we'd open it up to other car companies and other OEMs and potentially other moving vehicle type things. This is all part of the Greater Red Hat Edge operating system. This gives you, we're building an operating system here, or basically taking rel as the operating system, and then General Motors is building all sorts of stuff on top. When I talk about this, what's the software they're gonna be running in these vehicles, we're talking things like self-driving cars, all the sensors, all of the infotainment systems, all different types of software, but the bottom line, we're doing things with System D and Podman, and adding new features like Composer Vest that I'll cover in a lot of these other functions in this talk. So basically, RIVOS is a binary distribution based on Red Hat Enterprise Lakes. We're not building a brand new operating system. We're taking all the basis of rel and moving it into automobiles, and really what we're trying to do is move towards justifying that the operating system that runs in your vehicle could be rel. One key difference, or at least the default, is that we're gonna be used in real-time kernel, and as we talk about what it means to run an operating system in a car, you'll find out why we have to use the real-time kernel. We're also planning on using OS images built by customers. So think, we'll keep this quiet, but it's core OS in a car. So it's gonna be an image-based system based on OS tree using atomic updates. We wanna have an immutable operating system. We'll talk about that a little bit later on. We weren't basically the main operating system to be read-only from the processes running inside of it. In the operating, we really are stressing that it has to be container-friendly, so we really want to run a lot of containers. All the applications that we run inside the vehicle, or mostly applications in it, are gonna be containerized. So the biggest hurdle to getting rel into a car is a thing called, a little thing called functional safety. And functional safety, this is the, if you go to Wikipedia and look up what functional safety is, is functional safety is a process of reducing the risk, both simple and complex systems, so they function safely in hardware. So this is fundamentally different, similar to security, but in some ways different. What we're trying to do here was we're trying to build into a moving vehicle, I mean build an operating system in a moving vehicle that is as safe as possible. We don't want the machine to cause injury to someone. So we wanna look at making sure that there's no, there's as little possibility of something going wrong in the software system that could hurt a person. So that's really what we're talking about, functional safety. And traditional functional safety, and this is one of the reasons the car companies have had a big hurdle to get new software into vehicles, was that you would have to design, write your design documents for the entire CPU, the entire operating system. Then you would have to code to produce, to match those requirements. And then you would have to test the code over very, to make sure that the code works as designed. So the thing of that is like the old fashioned waterfall design and everything had to be built from scratch. So what the car companies have had to do is they constantly are redoing building an operating system, redoing it and it just takes forever for them to be able to do it. And so they wanted to move to a new system. So from a Linux point of view, is there any design document for Linux? Anybody got a design document for the kernel? And Linus put out a document 25 years ago, I guess. So it really wasn't designed, right? It just evolved. And so Linux system is already written without any real design document, so it doesn't fit into the traditional functional safety model. But basically what we're doing is we're documenting the functional safety APIs, basically APIs that we tell General Motors to use when they're running the vehicle and they can run it in a safe mode. And guess how we're documenting the APIs? We have a little thing called man pages. So we're basically going through all the man pages, making sure they're accurate for the functional calls and things like G-Lib C. And then we look at the code and then we look at, make sure there's test suites to make sure the code. So basically that's part of our argument for functional safety. We're also looking at arguments like, this stuff is used for many, many years. This is the open sort that the kernel is probably the most examined piece of code on the planet, right? So looking at the way open source develops and that it's basically a functionally safe environment. So we have to make all these arguments and document it and then we have to get other companies to basically come in and say, yeah, you've proven that Linux is designed as a functionally safe operating system. So other than functional safety, we also have to do a thing called, we have a need for speed here. When you turn on your car, within two seconds you hear a beep that tells you to put your safety belt on. Well, that's coming from an operating system. That means the operating system, the hydro has to start, get settled, load the kernel and at some point after that we have to emit a sound to the speaker to tell you to put the seat belt on. If you put the car into reverse, within two seconds the backup camera has to be on. So we have to be able to boot an operating system or bring an operating system out of hibernation within two seconds. And that's a fundamental thing. Now, if we're running containers on top of that, we also have to look at how quickly a container starts up. So a lot of our focus has been around speed. And we in the Podman team, we wanted to run things in containers and we did some testing on the base of the lowest possible standard system, Raspberry Pi with very little memory and Podman took two seconds to start a container. So you hit Podman here, return, it takes two seconds. That's way too slow. So we basically went into the code and just looked at every piece of code all the way it was, used all sorts of tools to analyze it and we found all sorts of little speed ups, but we're talking microseconds, right? But we found hundreds of them and then we were able to achieve a six times speed up. So we went down to about 0.3 seconds. So now you can start with Podman and the upstream Podman right now, you can start a container within 0.3 seconds on a very low power system. Now for most human beings, it doesn't matter, right? If you have Podman, it takes a second to start a container, you're not even thinking about it. But when you're talking about the overhead of starting containers in the car, you have to look at speed all the time. So these cars are not gonna have one computer and they're probably gonna have, well right now they have hundreds of computers in them and one of the things the car companies wanna do is they want to consolidate down to a few computers and then have the computers analyze, basically using sensors all over the place. So these cars are gonna have multiple nodes, so how do you wanna manage those services? Oops, don't know what just happened. Is it working now? So what do you think about Kubernetes in a car? Right? So a lot of the car companies came to us and said, what we really want is we want sort of Kubernetes in a car or we want cloud native computing. We wanna be able to put all these cool, cool, whiz things and have the car constantly updating. And we came back and looked at Kubernetes in a car and then we looked at functional safety. So Kubernetes has the concept of eventual consistency. So the system will be eventually in the correct state. So the breaking system will eventually work. Okay, and so that's probably now where we want for it. The other problem is you're taking a huge Go program that's constantly monitoring, constantly working on it and trying to justify that, this multi-threaded behemoth is functionally safe is pretty much not gonna happen. Not gonna happen in a time frame that we want to get this product out the door. So Kubernetes, so we actually wrote an article, PM, myself and Alex Lawson wrote an article back in October because lots of these communities were forming around Kubernetes in a car. And we wrote an article that said that it just ain't gonna happen. We don't believe that that's the correct route for running it. But we have this really cool orchestrator that orchestrates lots of these system, right? The stats and stuff services all the time called System D. So we're really looking at, can I have an application profile? So my application, one profile can run one or more applications. I can have one application, can have one or more System D services as defined for it. And then I have a capability to switch between different profiles or different targets. So think of it when you boot up your system, right?  So it brings up network and you might have to shut down some other services. When you switch this from network mode, it goes to multi-user modes, turns on some services, turns off some services, and finally goes to graphically user mode. It turns on services, turns off services. So that's the way System D works, but how about System D in a car? So all the features that we just talked about, multiple applications run in these system services, but now I start the car. So it's gonna start up certain server, I might click on sensors, do, you know, turn on the cameras, things like that. Then I put the car into reverse. I put the car into reverse. It's gonna start certain services, shut down certain services, turn on the backup camera, turn on the backup sensors. Then I gotta put the car into drive. Again, it's gonna turn off the backup camera. So all these targeted run levels all can be handled just using standard, standard way the System D runs, starting and stopping services. So System D for a single node is the way we're telling General Motors that they should do and then just build services and you can build the relationship between the services that are gonna run the different pieces of software that are gonna be running. But System D runs for a single node, but RIVOS is gonna be multi-node. So how do we get multi-node capabilities into System D or into RIVOS? So we need to extend the System D concepts across multiple nodes. And so we built a brand new project called Herte, or Herta, or however the Germans wanna pronounce it, because it's a German word. And it's a German word for shepherd or a herda. And really there's two major components of it. So the first one is a Herte agent, which is gonna run on each one of the nodes. Eventually you might even be running more than one on each one of the nodes. We'll talk about that in a few minutes. So a Herte agent is just gonna be out there and it just talks System D and it talks back to Herte on the server. So you're gonna have a main processor that's running Herta and then you're gonna have Herta agents running anywhere and basically it's just gonna be like a spoke designed system where we can have bi-directional communications from the main node out to the agents. And all the agents gonna do is basically relay messages to System D. So the way you talk to System D is via D-Bus. So Herta is gonna be talking constantly back and forth to these agents and just relaying System D messages back and forth between them. We have a test program, a CLI, a tool, but Herta control, which is Herta CTL, which is based on System CTL. So again, we'd be basically taking what System CTL does and expanding it to go to all the different nodes. And to give you an idea of what the architecture looks like, hey, we have, this state manager is sort of what General Motors is gonna give. So this is the thing that's waiting for the human being to say, put the car, stop the car, put the car in reverse. And it's gonna talk to via D-Bus to Herta, the main Herta server. And that Herta service then gonna talk to Herta agent and that Herta agent's gonna talk to System D and System D will stop the services. It'll also go extend D-Bus over TCP and talk to Herta agents on each one of the nodes and similar, but just relaying those D-Bus messages around the environment. So that this Herta agent will tell this System D to go into reverse mode, tell this one to go in reverse mode. If a service crashes for any reason, then System D here is gonna realize it's gonna tell Herta agent that a service crash, that's gonna be really laid back to Herta and that's gonna go up to the state manager to say some service crash, right? So if you're driving along at 60 miles an hour and all of a sudden your sensors go down, your self-driving mode, your sensors go down, service crashes for whatever reason that General Motors, the General Motors application has to be notified and then the car is no longer safe. So it has to go into some reduced mode. So think you're in self-driving mode and this is when it tells the human being to take over. Human being, I gotta do self-driving anymore, something bad happened. So we had to build this entire system and it's really, if you go to githubcontainers slash Herta, this is a, it's available there. It's fairly simple, it's fairly elegant. It's written in C again because functional safety, we have to build code in non-multi-threaded environments. So when we're talking General Motors, we're also gonna tell them how we think they should build their applications. So a lot of people, we're talking structured language that we wanna run on the environment. So what structure language do you use for running these applications? And the answer is Kubernetes. So we want to use Kubernetes structured language in order to run containers on the car. So we're really talking about Kubernetes YAML. Podman has full support for Kubernetes YAML, understands how to set up containers and pods on Kubernetes YAML. And the nice thing is that we build on Kubernetes YAML, then General Motors or any car company then can use OpenShift to running all the CI CD systems so they could run, take the same definition of the application that's gonna run in the vehicle, run it in the cloud and run it all sorts of tests on it, even have OpenShift maybe running native, the actual native operating system and run some of the tests on that environment. So using Kubernetes is sort of a scheduler for all your testing environment. But we have the same language all the way up and down the stack. Podman supported Kubernetes for many years now. So Podman has this tool, PodmanCube generate and more importantly, PodCube play can take the same Kubernetes YAML files that Kubernetes understands and run Podman with it. So when we want to run, we wanna run Podman underneath SystemD, we decided to build a better way of running Podman inside of SystemD and that's called Quadlet. And to give you an idea where that comes from, if you play with Kubernetes at all, what do you call it when you take a Kubelet, which is the way you squash it down, you call it a Quadlet, okay? That's where the name comes from, real clever engineers. So this is an example of a Quadlet and this is in Podman now, full support. You don't have to get rivals for this, it's a full support. Anybody that's played with Podman in the past, Podman had Podman generate SystemD and that would take running containers and running pods and would generate a SystemD unifile which had sort of our best knowledge at the time we wrote it of how to run containers underneath SystemD. The problem is that thing then becomes a static document, it's a static service running on it. So when some of the rivals engineers looked at Podman generate SystemD, they said, well there's a better concept inside of SystemD called a generator. And what a generator can do is you can define something that looks like a standard SystemD unifile and then when SystemD, you define it execute, put an executable in place and when SystemD does a system control demon reload, it'll run these generators that can take something that looks like this, a Quadlet and actually generate a SystemD service file off of it. So now we get to have a fairly simple definition of what a container is, so I'm just putting a container here as UBI 9 minimum and I'm doing an executive sleep inside of it. So that's really simple and what that will actually generate is here, this is the actual service that that generates so you can see the original code here coming in but it generates a real fancy Podman command here and it does all sorts of SystemD witness to make this work and basically this is all the knowledge that the Podman team has worked with the SystemD team to figure out how to run Podman underneath a SystemD environment. I'm already down to 10 minutes. Gotta move it. So Quadlets also support running Kubernetes in the environment so we can run Podman PlayCube and again this is built in totally into the system. So we're using Quadlets all over the place for running containers and now the last concept that we had to work on was a concept in the vehicle is called freedom from interference. And what freedom if interference means is we have two types of software that are gonna run in a vehicle. You have sort of the functional safe code and that's called Automotive Safety Integrity Level otherwise known as ASIL. So you'll hear this term ASIL or ASIL A, ASIL B, ASIL C, and ASIL D. So these are standard ways you want to run functionally saved code. We're only documenting relopt of ASIL B. So but basically that means all the software that's used for like self-deriving vehicle things like that can do. My example of the break eventually applying that's actually bogus because that would be ASIL D and we're not putting that in our description here. But the second part of code that runs or applications that run in your vehicle are gonna be called quality managed which basically means they're quality code but they might not be functionally safe. So when I want to run quality code and think of this as being your infotainment software so this is probably in RIVOS we're describing that you might want to run your say your infotainment software inside of Android operating system types code inside of a VM running inside of the QM environment. Other things that might be QM are like that little heat seat, the seat heater application. So you press it on to turn your heat seat or maybe the windows going up and down. Any type of software like that that's not really involved in necessarily making the car safe but it's used and there's other applications that General Motors wants it and eventually the car companies want to make this a money maker for them. So they want to sell you software in the vehicle that they could use and that software is probably gonna come in the form of, well, they're coming to ASIL A and QM. But basically we have to take the QM software and we have to isolate it from the rest of the car. So we're designing an operating system with two different instances running inside of it. So you have the ASIL software and that's gonna be running lots and lots of containers and then you have the QM section that's also gonna be running lots and lots of containers. So we had to design a sort of a subenvironment to run for the QM. Now we could use virtualization for running this but a lot of the ASIL applications want to control the QM applications. So it has to be heavy communication between the two environments. So we've decided at this point to use containerization to isolate the QM environment from it. So if you want to isolate an app, say you're driving along in your car, someone steps up a curb, it's gonna launch an application to know that the functional safe environment that that human being is there, simultaneously you are saying turn the heat seat, the heat seat up, which might launch a container and run it. So how do I make sure that system D, which is probably doing both operations, is isolated? How do I make sure that Podman coming up and that starting the container is isolated? So we really need to isolate the entire stack from the environment. So we're describing running system D, separate system D instance, a separate fully Podman instance and this is how we're doing it. So this next section is all gonna be defining how we're setting up a QM and we're using quadlets for it. So a quadlet, this is the QM container and if you go to GitHub containers slash QM, you can actually install QM right now on your systems, on your Fedora 38 systems. So QM is basically setting up a system D unit file, again a quadlet that looks like this. The top pack is all things that go standard system D commands for setting up things like C groups to isolate these environments and the bottom part is all the fields that we're using for setting up Podman basically. So the first thing we're gonna look at inside of this slice is we want to identify the entire C group or the entire environment.  So we're just gonna name a QM slice and then you can do things special things with C groups like the top one here actually says I'm gonna run all my applications in the QM and in this case my laptop has 12 virtual CPUs on it and I'm just saying I'm only gonna run on the bottom six CPUs. Now the rest of the A's of the environment can use zero through 11. They can use all the CPUs but the QMs can only run on that. This is easily changeable by General Motors if they only want to use two of the CPUs, they can do that. Similar CPU weight. So CPU weight basically says in C groups, a CPU weight goes from zero to 200 and the default CPU weight is 100. So if you set your CPU weight to 50 in your C group that means all the processes inside the QM are gonna get one slice for every two slices that the system gets. Then I can do IO weight very similar. That's again, and these numbers can be changed, right? You can set it to 10 and get 10 times as much. The next thing I wanna quickly mention is the idea of umkiller. So umkiller is when you're running in C groups, if you start to run out of memory on the system, the kernel can't take memory away from a process. All it can do is shoot it in the head. So what we wanna do in the QM environment is say, I am the catness, right? Pick me, pick me to kill. So by setting these scores and the power goes from umkiller goes from minus 1,000 to plus 1,000, all processes run with zero. And what we're saying here is anything in the QM is gonna get priority to be killed over the rest of the system. The last thing I wanna show in the system depot of it is we're defining where the software is. We're not gonna be using an OCI image for this environment. We're actually installing the software directly on disk. And so the software's gonna go in to use a live RudaFest and then in the container section of it, we refer back to that RudaFest. So this is how the connection goes inside of the Quadlet. Now we're in the pod, these are the commands that Podman's gonna interpret on the system. So the first thing we need to do is name the entire container and that's gonna be named QM. We want to run system D as the primary process inside of this containerized environment. We also want to, in this case, we're probably gonna share the host network because it just adds complexity. We can adjust the amount of capabilities they're gonna run in the container. Probably we wanna run a lot of privileged, somewhat privileged processes in here so we're gonna leak in all the capabilities so we're gonna be able to run containers. We can add special devices so if you wanna have special devices go in. We're gonna run root read only for the entire environment except we have to have read writeable etsy and vice and these are the ways you can set up a read only petition and then have etsy and vice be read writeable. And finally, we want to have SC Linux running inside of the QM. We want to isolate containers in the QM from each other and from the host operating system. So all that stuff generates a huge, that huge Podman command line to basically show how that gets converted. So last thing that we have in the QM package is a big setup script that sets up this entire QM environment and I'm gonna start that up as I run out of time. So everybody get off the network so this will work fast. All right, so QM is the standard package inside of Fedora 38. I'm running the script now. This script is gonna go out and actually install all the software that I'm about to demonstrate. So that setup script that I'm running right now is actually gonna do, oops, skip ahead. It's gonna install root FS so I'm dropping all the files in so I actually destroyed that entire directory and reinstalling it right now. These are the only packages we're putting in the QM. So we have SC Linux policy because we want to run SC Linux in it. We have Podman system D and we have a Herte agent because we want the Herte in the system to manage the Herte agent to manage that system D. So we'll have two system Ds running inside each one of these environments. This is the software we're installing on the system right now so that there's a DNF update that's installing those packages. This script can be run multiple times to actually update the software after the fact. We're also installing a containers.conf which is the way we can reconfigure Podman inside of the QM and there's a couple of key fields in here. So this tells Podman to again do set up memory C groups so that's also the catniss. So this does two things in the environment. Now if you recall QM was 500 now we set up all the containers as being 750 which again means these containers each container should be killed before the QM is killed. The memory um C group also tells the kernel to kill kernel using kills just processes but if you set that flag in the C groups it tells it to kill actual containers running in the environment or entire C groups. So lastly in the setup script we're also setting up we want to take advantage of user namespace so we want to make sure that UIDs are different from a QM environment from an ASL environment. So we're picking out 1.5 billion UIDs to run containers in and we're picking out a different 1.5 billion. So if you look up here I've allocated from 1.5 billion starting at 1 billion UIDs for the container and then I'm doing 2.5 billion and then 1.5 billion on there. To give you an idea there's 4 billion UIDs available on a Linux system. So the last thing we do is we set up Herta and Herta all we're doing is we're saying Herta inside of the QM environment is gonna have the same name as Herta outside of the QM environment with the QM pre-pended on it. Okay so that finished the install of the system. I'm actually showing the QM services up and running so this is a quadlet that generated a service and the service is now up and running on the system. If I look at the CPU weight remember we talked about setting the priority of CPUs so I set it to 50. Well the nice thing is from the ASL environment they want more priority during the running of the cast. Something's happening. I need to squash down the entire QM environment. You can do that with C-groups. So I'm just gonna set the CPU weight to 50. I'm changing it to 10 and now all of my QM environment has dropped down to only 10 so that means for every 10 slices of the CPU the QM's only gonna get one. What's interesting here is you see that a service running under the QM still has 50 but that's actually a sub of the 10. So it's only gonna get 50% of the 10%. So everything is isolated inside the environment. Here I'm showing what the QM looks like so I just did a podman exec to show you the processes running in it. We're running with a separate SE Linux label so it's running as QMT and now I'm actually running a, if you see the podman exec in front that's basically saying run podman inside of the QM. So I just ran a container inside of the QM environment. I ran another container. I ran a container outside of the QM environment in the ASL environment and to show you that there's two different podmans running, two different databases show the difference in the images in the environment. So this is showing you using user namespace so I can actually run lots of containers inside of the QM environment and notice that they all start with one billion something. Each one has a separate UID range and now if I run on the host, I've said my system isn't quite what the documentation is but you can see that they're running at 500 million so the containers on the ASL are running with different user namespaces than inside the container. I'm out of time so I'm not gonna show this. So with Herte set up on the system, here's Herte running and this is just listing all the running services on it so my laptop's called Fedora and down the bottom you'll see all the services running inside of the QM Fedora so what I can do is I can actually run so now I'm gonna demonstrate pulling down inside of the QM environment I'm pulling down a UBI8 Apache service just pulling down the image into the podman database and good you were all off the network that's good. Okay now I'm setting up a quadlet so I'm just defining a simple quadlet to run that Apache service that I just downloaded and I'm setting two fields in it just the name of this image that I did and I'm just setting up network equals host so it can be run on the host network. Now I'm using podman copy to copy the file that I created in the ASL environment into the container environment. I'm doing a podman exec to do a system control daemon reload inside of the QM environment so that basically triggered the quadlet to become a service. Now I'm actually gonna stop the service via her to control so her to control is saying restart that new my quadlet service I just generated and it can do it to the QM environment and then so I'm gonna list out and I'm showing that the service is now running inside of the QM environment and I can curl, it's not a great demo but it's running basically shows Apache is running inside of the QM environment. I can stop it with her to control I can list units and show that they're all done and that is the end of the presentation except for shameless plug to buy my book. So I think I'm out of time I'm sure they've been flashing that up but this comes out of Roddick's time so I don't really care. Any questions? Yes. So what types of SLU you're talking about hardware what is hardware? So right now with General Motors we're working on Qualcomm and Qualcomm's developing a brand new hardware for the operating system. We've talked to lots of car companies and they want to work the three vendors that we've seen they seem to want to work with Qualcomm, NVIDIA and Texas Instruments those are the three names they have but this is Ralph, right? We wanna be able to run on any operating system we're not building the operating system to run on a specific piece of hardware we want to be a general life, general purpose, so. By the way, it's very enlightening to be told. Yeah. Any other questions? Come on, you'll get less radic, this is good. Where did my idea come from for that? That wasn't my idea, that was Alex's last one. Oh, to get rid of the quad that, to get smaller? Yeah, I'm not sure. Yeah, go ahead. So anything would change, we're investigating there's basically about a hundred people working on RIVOS at this point. Anything that we change, find to help say speed a boot we'll go back into the regular kernel we'll basically go into the upstream kernel so everything we're working on is going back into REL. So right now I'm not the kernel engineer so I'm not sure if we've had to fix things we've had to fix a lot of things in Podman we're working with other parts of the operating system to actually even going through the FUSA process we're updating hundreds of man pages just because we're finding problems in the man pages as we actually look at them. Yes, are there any, I'm supposed to be re-asking the question, sorry. Are there any, why are we used to about disk size? So one of the things I did pull, this slideshow goes on quite a bit longer but I was, time usually takes well over an hour to go through everything. One of the things we talk about is potentially having separate disks for the QM environment so that the QM environment can't actually accidentally use up all the disk space so that the ASL environment can't. And traditionally in the car companies they have lots and lots of petitions, way more petitions than we would normally recommend to, but basically for isolation like that. The IEO stuff is also, the IEOC groups would also take away the ability to pound the disk and cause an application not to be able to run. All right, last question, yes. Do we have any type of monitoring going on to see what's going on? Yeah, we, so we have these, you sound like General Motors. So the, so what General Motors wants to, they want to know like the car is running out of memory before the car is running out of memory or they want to know when we get to 80% CPU or things like that. So we are looking in for open source projects so they come to us and say, we need to work this and we don't want to, you know, in HRTA we had to generate brand new code. We're trying to make sure we get open source projects so we're looking at different things. Right now PC, PCP is the performance co-pilot which I think is the way that REL right now does things like that. But General Motors wants us to be able to monitor things like special devices and we have to make sure that they can build code to look at GPUs and things like that so. But yeah, PCP right now is what we're thinking. But if anybody has suggestions we're always all yes. Anyways, thank you for having me and Roddick you can take over now.


Way way behind It's diddy can up back today with another door dad's video huge sounds everybody tuned in if you are subscribed Make sure you smash subscribe button give me a thumbs up and do not skip the ads today. It's Tuesday February 1st, baby Did you pay that rent today? Did you pay that mortgage today? You know the bills don't say you may as make sure you handle your business We already got two orders order number one is dollar general and healthy um seven items 5.3 miles for 12 25 let's drive order number two is an Instacart order 10 miles 30 items two orders 2111 with the Mac 11. I hope you thank God for it, but I hope you guys enjoyed the video We are not ready already right now to do the Instacart order, so you're gonna make sure you smash the subscribe button Give me a thumbs up and do not skip those ads one more thing. I hope you guys have a good day And I hope you guys enjoyed this video. Let's go. Hello. How you doing? I have a pick up for Mark B Okay, thank you Thank you very much. You guys have a great afternoon Good afternoon. Thanks, you too All right general, baby We're gonna get this power rate to operate, but we need four power rates Blue to blue ones and two realms That power here about power rate. We need two berry blasts Uno dos we need two fruit punches And just like that we go. We're here to drop the healthy yams and Dollar general they got already about to eat good eat good for him. That's all y'all right. No, no Let's go We are here at all D baby. This is my first time been in here. You already updated it is joining righteous fake the diet Fago Cola Sometimes when I'm doing this guy, I just walk into stuff.  I've been looking like I've been doing I don't I don't I just want to tell you right now. I have no clue what to do Well, I think it's right here That's here right here, baby Wrist in the nine rounds. Yep. What's it?  Hey, come below. Let me know your favorite cereal All this they did is a lot. So I was gonna grab that 15.4. We in the door All you order number one. Let's get it done How you doing We are here to drop off order number two what it do baby They only got one bag and one case of pop. That's what I'm talking about. They don't have ten out of them Order number three get with me Panera brand five items 4.5 miles for 875 We also have Wendy's which is going to be added on point six miles for six dollars. We are hot. Let's go You got plenty of orders I think this may be They covered up. I'm quite sure it's it Think see it all Think this is it, but I want to rip it Yeah, that's us. Yeah, that's us And these baby hopefully got us together They got going on over here Comment below and let me know you come to win. What do you get? I'll tell y'all what I get. I get a number Six that's spicy chicken Yes, sir David M Thank you very much. You have a great one sir. They got a big bag, didn't they? We are here to drop this Panera bread. Let's get this bread baby Drop it like this, huh? Fuck.  What? Wendy's baby. It's messed up. I believe on this this little brick thing That water just dropping down. Look right there rain All that slow milk pretty nice outside today Get it order number four we in the door Wendy's four items 2.5 miles for 625 Hey before I go in here in this Wendy's right if you're dashing right now Is it going very slow in your area because it's extremely slow here? This is only our fourth order and we started at 9 30 we stopped for maybe an hour or so and there's now 116 and this only our fourth order is going terrible But either way go in complaining with maintaining Guys want to make sure you subscribe and give me a thumbs up and do not skip those ass Let's go get this bag. Hopefully they do it usually do Well, last time I did this came here, so Hopefully my guy get us together Look a little ugly this time, but hey Hello, I have a pick up for London W Thank you No, so I'm glad a lot of people like everybody just just make them have a better day You know, don't know how to be polite have manners Why not it doesn't take none of my details, you know, say, say, thank you or something somebody I Know we all have good days and we all have bad days Okay, I can make somebody day by being polite hopefully they transfer that to another person and just keep on going on and on and on on and on and on this phone Thank you very much, you have a good one Just like that. We're here to talk about this Wendy's with the tele baby Let's get up to the room I'm doing fine yourself We aren't here. Oh the first door Ordered number five we trying to stay alive because we ain't got no orders or number five is checkers three items 2.4 miles for 675 let's drive.  Honestly to be honest my favorite my best part that I ever had ever in life That's from Timothy O'Toole with them joints bang All right, I appreciate you boss. You have a good one.  Let's get rich. It's the current order 12.3 miles 28 items for $16 we are hot a list go order number seven. Thank God For his blessings Jersey Mike seven items five miles for nine dollars away. Holla.  Let's get to this bag Hello, I have a pick up for Caleb. Oh Right here Just like that, we're here to drop off the grocery order baby. They told us to Leave it outside. They're sick. They got the wrong ski baby That's the one thing I did talk about all these is the bags the paper bags. I don't like them at all Ordered number eight and ordered number nine. You see what's behind us, right? Starbucks four point one miles for seven ninety one and then we have another Starbucks order They added on one point two miles for six fifty. Let's go. I have two orders to go one for Diane and one for Stacey Diane, I said Diane these up to for Diane. They tricked them good, ain't they? Thank you very much We are here at St. Dick's morning I got a whole water here in this zone Hello, I have a delivery for Diana Uno dos. Thank you. You guys have a good one Our here to drop off order number two, what is it? Yes, ma'am Okay. All righty. Thank you Okay, you guys have a great night Order number 10 we are really not getting it in we're doing terrible Aha sushi three point nine miles for eight thirty nine. We on the ground. Let's go Sushi Here you go. You're welcome. You have a good one, sir Hello, I have a pick up for Dan. I'm gonna try this Okay, thank you. Yes ma'am. Thank you. You have a great night How you doing? I'm doing great. I can't complain at least it's not freezing outside. So that's always a great thing Oh, it's okay. No problem, sir. Here you go. You have a great night. You too. You're welcome Ordered number 11. Check it out Swarmer King 3.5 miles for $11,020. Let's go Swarmer King, baby. It's time to get busy Oh, that's just glusive Glucifer My track just like that Y'all already know now. Bop. Let's go Number 12 sushi sushi sushi sushi Aha sushi seven items 4.1 miles for 725. Let's drive Hello, I have a pick up for Taylor Thank you very much. Thank you very much. You have a great night Let's Sushi baby says leave it by the front door. So that's exactly what we're going to do Drop the luggage all up. Hold on with that photo. Y'all already know Bop. Go back. Bop. Lucky number 13. Let's get this green. Panera bread two items 6.3 miles 1025. Let's drive We are here, baby They got us together Oh, yeah, that's what I'm talking about. Hey, I'm going to say this If you guys pick it up, believe it was for Panera bread the best time of the day night. Let's go We are here to drop off the Panera bread. Let's get this bread baby Say it's handy to me. So that's what we're going to do. Hello. How are you doing, sir? Here you go. Thank you. You have a great one And just like that it is in the video. I hope you guys enjoyed it I love making the content question for you. So for those of you who do Instacart What is the a good order and what is the bad or I had a comment from Kayla I think her name is Kayla. I'm not a hundred percent sure if I'm talking about your name. I apologize But she said why did I do this Instacart? It was it was a bad order Honestly to be completely honest with you guys I do not know the difference between a good order and a bad order in Instacart because I'm so used to doing I mean, I'm still used to doing Door dash and over east that I try to go off miles and How many miles it is and how much money it is? So How much money do you guys do per item? Let me break it down. How much money do you guys do per item break it down to a syllable like that? Um, I honestly have no idea. So I hope you guys can help me out with that But again, if you want to subscribe make sure you subscribe and if you want to subscribe Give me a thumbs up and do not skip those ads one more thing before we go Today we only got a hundred forty eight thousand sixty eight cent which honestly, I thought it was going to be less than that Today was very slow. Has it been slow in your area? Yesterday was this day was decent today is tuesday So this video will be coming out in two days, which would be thursday So on tuesday was just throwing your area But I see you guys tomorrow you're going to guys want to make sure you lock in because it's going down Baby, we back at it like a crack at it tomorrow. So make sure you lock in. I see you guys on the next one We going we growing we flowing you already know in the ddk and i'm on my way


Welp, we lost our first contender. From Universe 7, Krillin Falls. And I wanna be disappointed, but I can't, bro. Like I said, we had to lose someone eventually. I think it was just the way that it was done. It was a hit and run, man. That's all it was. Welcome back to this channel. My name is Jack the Buster, I should know be. And we're on episode 100 today of Dragon Ball Super. The tournament of power is well underway and we've lost a ton of people. One universe is completely gone already. And like I said, Universe 7 has lost its first member. We're gonna hop right into this one. If you're new to this channel, don't forget to drop us up and let's get started. And either look at this as being down a man or as having nine strong, expertly trained battles. True, true. At a boy?  Not just a turtle shell, I carry. I got the wisdom of age, oh my God. Actually true, he's gotta be the leader, man. Well, Gohan's the leader, but you know what I mean. He's gonna be the wise old man. I've been at all you want, but it's still- 17's going hard. But just because you were careless. Can't say I'm not. Oh my gosh. And I'm now sad for your tears. This, this turmoil. I could trade insults, John. The chop hasn't lost anyone yet. I was about to say we're going back to Vegeta versus Megetta. Megetta and Winnie the Pooh. Okay, if Vegeta gets knocked out, we're in some real goddamn trouble then.  What, to be wanting? And you gotta do what you gotta do, bro. It's for the universe. Don't make excuses, Vegeta, just beat them. Cabba, what are you doing, brother? There's no way bruh- Is Cabba cold like that? Is he blowing up? The time stop? No way boy got flaked off. The disrespect. I'm saying man, the giant, like the biggest robots, the most intimidating, the weakest. I'm sensing a strange presence here and it's not pleasant. Unpleasant presence. Oh, poor Kale, bruh. This goes Super Saiyan Hulk already. Ew. Oh, she gon' have to very quickly. That's my Toe, your squashin' lady.  Punchin' back. That tank Dempsey was Steve Blum? I mean, she's in the tournament of power. They're not supposed to go easy. He's like Luffy though, with those stretches. Okay, when does she, you know, like pop off? How did such a lightweight get picked for this match? You'll see, pal. I got you, Kale. Aw. No, she's not. Did you what, witness that beat down? Just take a little breather. She's being very patient with her, it's sweet. Ain't no way bruh made her, his eyes pop out. Oh my gosh, there's some fury behind those punches. And he's gone. Oh, he's a sumo wrestler, that's right. Damn, dug her foot in. I feel like it's gonna take, oh! Dang, son! At least one of them's gone for good. I feel like Kalfa's gonna be almost killed and that's what's gonna take Kale to go Super Saiyan. We're like Super Saiyan Hulk again. What is it? Are you mad? Oh my gosh, bro. Now let's have some fun. I just feel like OG Naruto Hinata, bro. She just needs to tap her fingers up. Is she saying Goku? Surely not. There's no way she's about to challenge Goku. Hey, what do you think you're doing? Saiyan vs Saiyan? Oh my gosh. Super Saiyan blue. I don't care what you call it. I just want you to show me how I can do it. Yeah, sure, of course he's gonna do that. What to do? It would be very Goku-like to do it.  I'm not entirely sure either of you rookies are ready to handle that kind of power. That's true too, it's one of the power of a god. If that's what you think of us, then you've got another thing. Kale is the definition of a rookie. What are you waiting for? Transform. Here we go.  Can I leave? Try not to freak out. It's just gonna be super Saiyan. But does she have something else? What? Brother, what? Okay, please clobber her, Goku. Yeah, she's unconvinced with her powers. She hasn't had them very long. Pumped up your muscles for strength. Slowed you down. He needs to stop wasting energy though. I get that like he's not very worried about anyone, but I mean he's already used blue and we have a long way to go, man. That's the one I got you. No one ever taught you?  Just throw her out. If I use your form as a god. If she powers up really hard and is able to like match him to an extent, I'm gonna be mad. And she got super Saiyan too. I can't, bro. Come on, let's go. It's like giving her sparring time, man. I know he's not gonna throw her out. It's kind of sweet though. It feels like father-daughter in a sort of sense. Where's, is Kale just watching? I had to kind of imagine. That's me like spanning my transmission in Xenoverse. Yep, no, he had the upper hand. Oh my gosh. I love when they hit a rock and then go straight through it. Are you all right? Oh my gosh, bro. You shouldn't have to do this alone. Then transform.  Don't look. Here she goes. Oh, there is no way. Hey, no way, she's apologizing. Oh my gosh, brother man. Oh, she rejected her. Wait, maybe this pisses her off and she goes, Hulk. Oh my gosh, man. They just continued. That's what it took, I guess. Not her being pushed to the brink, but her feelings being hurt. I like the color changes. I don't know what it is like representing, but I guess like sheer power. This was a big wild card for this tournament. All right, let's see what she can do. She's smoking at the mouth. Oh, come on. Wait, oh.   What was that? Yeah, but we'll find out very quickly how strong it actually is or if it's just brute strength. Oh my goodness. Are we sure that's like that indestructible material still? That's not his name. It can't be that fast, I don't think. Oh my gosh. Oh my goodness. Okay, I mean, he was just regular Super Saiyan, I guess. He's not doing any damage though. He's going blue. Man, he's using so much energy. Like, I don't know. I don't know how much his reserves are. Like choir. Da, da, da, da, da. That's a pretty long build up, though. Will she dot? Oh, she didn't even do it. He knew she wouldn't dodge. And he just wanted to see if that would be enough to knock her down.  She's using up all her energy yet. Oh, the power. It's expelling. I think it's going to knock a lot of random people off. Oh my goodness. She's gone. Oh. She's still going with the names. I like this though. It's forming sort of like mountains and stuff. Oh. Oh. He's going to try stuff. That's a pride trooper. The pride trooper. He has Wonder Woman's whip, bro. Justice whip. This is Wonder Woman. They're Justice Whip. Weak, bro. I knew the other pride troopers outside of that four or five would be like, is he pre-selecting? Oh. Not going to change anything. Oh. Kale's going for her. Oh. Did Jiren just one-shot her? Oh, she's not dead. I thought he just nuked her.  Oh my. Okay. Agreed. What did she just put on her? The tournament of power is clearly Goku, I don't know if you want to smoke. Unimaginable strength. I don't think Jiren's been like knocked down a single time or like even broken a sweat yet either. The brutal contest continues on Dragon Ball Super. What a banger of an episode though. Holy. Got to see Hulk Kale again. I don't know if that's the last time we'll see her in this tournament either. I thought Jiren like just knocked her out and I was going to say it might have been a little bit of a waste, but it seems like she's still in. What did she put in her hair there at the end? It looks like she just tied her hair up, I guess. But yeah, banger episode. We got to see the sheer power of Jiren. And I think it was very directly, very purposefully juxtaposed with how hard Super Saiyan blue Goku struggled against her and then how easy it was for Jiren. But I think Goku approaching Jiren here is a huge mistake because one, he's already been strained this tournament. He's already fought a few people. Two, I don't think Jiren's broken a sweat. And three, I mean, he might as well just wait for Jiren to hopefully take on other opponents and maybe like roll the dice on him being weakened at least a little bit or teaming up with someone to take on Jiren and not going at it alone. Yeah, I like the detail of Hit saving Califla with the time skip. He, him being sort of a wild card this tournament, Frost is an insane wild card too. I like him just lurking in the shadows, but they're very, very, very intelligently backing off of this knowing how strong Jiren is based on what just happened. But brother, I'm never underestimating Kaba again. Let me just one shot two contestants in the blink of an eye. But that has been it for my reaction to episode 100.  Now catch you guys in the next episode. Peace, peace.