BASE IMAGE CHOOSING THE RIGHT...
Transcript of BASE IMAGE CHOOSING THE RIGHT...
![Page 1: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/1.jpg)
CHOOSING THE RIGHT CONTAINER BASE IMAGE
For your applications
Scott McCartyPrincipal Product Manager05/07/2019
Red Hat Summit 2019
![Page 2: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/2.jpg)
WHAT IS A BASE IMAGE?
![Page 3: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/3.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS A CONTAINER IMAGE?Let’s start with a traditional operating system
Dependencies
● Libraries - Compile once, update once, everyone gets benefits
● Binaries - Leverages libraries because requires SME knowledge I don’t have to
● Packages - Put this logic in packages so that I don’t have to know it
![Page 4: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/4.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS A CONTAINER IMAGE?We started containers by putting these same components in container images
Dependencies
● Libraries - Compile once, update once, everyone gets benefits
● Binaries - Leverages libraries because requires SME knowledge I don’t have
● Packages - Put this logic in packages so that I don’t have to know it
● OCI Container Images - Tar files full of packages and JSON metadata
![Page 5: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/5.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS A CONTAINER IMAGE?We started containers by putting these same components in container images
Dependencies
● Libraries - Compile once, update once, everyone gets benefits
● Binaries - Leverages libraries because requires SME knowledge I don’t have
● Packages - Put this logic in packages so that I don’t have to know it
● OCI Container Images - Tar files full of packages and JSON metadata
![Page 6: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/6.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS A CONTAINER IMAGE?Side by side comparison
Benefits/Drawbacks
● Libraries - every binary inherits changes
● Binaries - dynamically inherit changes
● Packages - SME knowledge offloaded to specialist
● OCI Container Images - Easy to deploy with single command
![Page 7: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/7.jpg)
INSERT DESIGNATOR, IF NEEDED
DO LINUX DISTRIBUTIONS STILL MATTER?With containers?
Short Answer
● Yes
Longer Answer
● Container Image: You are still using in binaries that are compiled - even JVMs, Python, Ruby, Node.js, etc
● Interaction with Container Host: Performance, security and testing - regressions, extra resources used, unknown CVEs (yes, this can happen)
See Also
● https://opensource.com/article/19/2/linux-distributions-still-matter-containers
![Page 8: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/8.jpg)
KEY QUESTIONS INSELECTING A BASE IMAGE
![Page 9: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/9.jpg)
INSERT DESIGNATOR, IF NEEDED
QUESTION #1Do I even need a base image?
Some Options
● YUM - just pull the packages you need in a multi-stage build● Distroless - some programming languages compiled● Scratch - literally nothing, just a scratch image
Reality
● You are likely pulling in pre-built packages● You are compiling everything yourself● When things break, it’s a developer action, not an operations action
![Page 10: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/10.jpg)
INSERT DESIGNATOR, IF NEEDED
QUESTION #2How do I guarantee performance in production?
CONTAINER
GENERIC CONTAINER IMAGE
LANGUAGE RUNTIMES
APP
PRODUCTION
CONTAINER
GENERIC CONTAINER IMAGE
LANGUAGE RUNTIMES
APP
LAPTOP
Works on my laptop But, what about at 1M transactions per second
1M TPS
![Page 11: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/11.jpg)
INSERT DESIGNATOR, IF NEEDED
QUESTION #3How do I guarantee security in production?
CONTAINER
GENERIC CONTAINER IMAGE
LANGUAGE RUNTIMES
APP
PRODUCTION
CONTAINER
GENERIC CONTAINER IMAGE
LANGUAGE RUNTIMES
APP
LAPTOP
Works on my laptop What about hackers?
![Page 12: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/12.jpg)
INSERT DESIGNATOR, IF NEEDED
QUESTION #3Can I redistribute my application how I want?
CONTAINER
OS(USER SPACE)
LANGUAGE RUNTIMES
ISV APP
Joint Red Hat Customer
Only ISV Customer
Joint Red Hat Customer
Only ISV Customer
![Page 13: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/13.jpg)
INSERT DESIGNATOR, IF NEEDED
QUESTION #5What else am I not thinking about?
Architecture● C Library● Core Utilities● Size● Life Cycle● Compatibility● Troubleshooting● Technical Support● ISV Support● Distributability
Security● Updates● Tracking● Security Response
Team
Performance● Automated● Performance
Engineering
![Page 14: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/14.jpg)
INTRODUCING THE RED HAT UNIVERSAL BASE IMAGE
![Page 15: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/15.jpg)
INSERT DESIGNATOR, IF NEEDED
THE RED HAT UNIVERSAL BASE IMAGEThe purpose is...
“To be the highest quality and most flexible base container image available”
![Page 16: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/16.jpg)
INSERT DESIGNATOR, IF NEEDED
The Red Hat Universal Base Image is based on RHEL and made available at no charge by a new end user license agreement.
Development
● Minimal footprint (~90 to ~200MB)● Programming languages (Modularity & AppStreams)● Enables a single CI/CD chain
Production
● Supported as RHEL when running on RHEL● Same Performance, Security & Life cycle as RHEL● Can attach RHEL support subscriptions as RHEL
THE BASE IMAGE FOR ALL OF YOUR NEEDSEnterprise architecture, security and performance
CONTAINER
OS(USER SPACE)
LANGUAGE RUNTIMES
APP
![Page 17: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/17.jpg)
INSERT DESIGNATOR, IF NEEDED
Trusted:
● Libraries● Packaging format● Core Utilities● Security Response● Patching● Performance Response● Technical Support● More
THE BASE IMAGE FOR ALL OF YOUR NEEDSEngineered by Red Hat with an enterprise roadmap, security and performance
CONTAINER
OS(USER SPACE)
LANGUAGE RUNTIMES
APP
![Page 18: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/18.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS THE RED HAT UNIVERSAL BASE IMAGE?Three base images, language runtime images, and software packages
ALL RED HAT ENTERPRISE LINUX PACKAGES
UNIVERSALBASE IMAGEPACKAGES
BaseImages
Pre-Built Language
Images
PackageSubset
STANDARD
MULTISERVICE
MINIMAL Node.jsNode.js
Node.jsNode.js
Node.jsNode.js
Node.js
![Page 19: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/19.jpg)
INSERT DESIGNATOR, IF NEEDED
THE BASE IMAGE FOR ALL OF YOUR NEEDSBringing the value of RHEL to cloud native applications
CONTAINER
SYSTEM SOFTWARE
LANGUAGE RUNTIMES
APP
OPERATOR
DATABASE CACHETIER
WEB SERVICE
Traditional Applications
Containerized Applications
Cloud Native Applications
RHEL
KERNEL & SYSTEM SOFTWARE
LANGUAGE RUNTIMES
APP
![Page 20: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/20.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS THE RED HAT UNIVERSAL BASE IMAGE?Providing the right level of content for application stability via the RHEL API/ABI
Designed for applications that contain all dependencies (Golang, dotnet, etc)
● Minimized content set● No suid binaries● Minimal package manager
(install, update, remove)
PLATFORM
glibc (full locales)
YUM + @base
APP
MULTI-SERVICE
glibc (full locales)
/usr/sbin/init
APP0 APP1
MINIMAL
glibc (En locale)
microdnf + coreutils
APP
ubi8/ubi-minimal ubi8/ubiFor any application that runs on RHEL
● Unified, openssl crypto stack● Full YUM stack● Includes useful basic OS tools
(tar, gzip, vi, etc)
ubi8/ubi-initEases running multiple services in a single container
● Configured to run systemd on start
● Simply enable the services at build time
![Page 21: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/21.jpg)
INSERT DESIGNATOR, IF NEEDED
CAN BE BUILT & DEPLOYED ANYWHEREBuilding on UBI is the first step
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
RED HAT PLATFORM
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
ANY CONTAINER PLATFORM
Trusted base for any environment
Enterprise support when run on Red Hat platforms
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
PARTNER CONNECT CERTIFIED APP
RED HAT PLATFORM
Certification provides the highest level of support
![Page 22: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/22.jpg)
INSERT DESIGNATOR, IF NEEDED
TWO WAYS TO GET UPDATESRed Hat provides updated base images & RPM updates so you can rebuild any time you want
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
Associated RPM UpdatesBase Image Updates
![Page 23: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/23.jpg)
INSERT DESIGNATOR, IF NEEDED
SAME BITS USED IN MISSION CRITICAL WORKLOADSIt goes beyond works on my laptop CONTAINER
OS(USER SPACE)
LANGUAGE RUNTIMES
APP
OS(USER SPACE)
OS(USER SPACE)
OS(USER SPACE)
OS(USER SPACE)
OS(USER SPACE)
Compute Intensive I/O Intensive Fault Sensitive Highly Secure Latency Sensitive
![Page 24: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/24.jpg)
INSERT DESIGNATOR, IF NEEDED
LEVELS OF SUPPORTABILITYANYWHERE +RED HAT PLATFORM +CERTIFICATION +OPERATOR CERTIFICATION
Trusted Roadmap Yes Yes Yes Yes
Proven Images Yes Yes Yes Yes
Minimal Images Yes Yes Yes Yes
Package/Image Updates Only UBI Content All RHEL Content All RHEL Content All RHEL Content
Cloud Native Language Runtimes Yes Yes Yes Yes
Distribution/Redistribution Yes Yes Yes Yes
Platform Testing None Yes Yes Yes
Customer Support None Red Hat Components Joint (All Components) Joint (All Componentes)
Joint Promotion None None Yes Yes
ISV Build Support None None Yes Yes
Automated Deployment Support None None None Yes
Automated Operations Support None None None Yes
![Page 25: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/25.jpg)
INSERT DESIGNATOR, IF NEEDED
SUPPORTABILITY MATRIXTiered support model
RHEL 8 ANY CONTAINER PLATFORM
Like any upstream projectRed Hat Enterprise Linux 8
RHEL 7
Red Hat Enterprise Linux 7
RHEL 6
UBI 8 OTHER
UBI 7RHEL 6
UBI 8 OTHER
UBI 7
TIER 1 TIER 2 TIER 3 COMMUNITYSUPPORT
RHEL 6
UBI 8 OTHER
UBI 7
![Page 26: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/26.jpg)
INSERT DESIGNATOR, IF NEEDED
WITH A CERTIFIED APPLICATION CONTAINERCollaborative support with Red Hat and ISV to resolve any issue, request patches, etc
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
PARTNER CONNECT CERTIFIED APP
RED HAT PLATFORM
Collaborative Support
![Page 27: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/27.jpg)
INSERT DESIGNATOR, IF NEEDED
WHEN DEPLOYED ON RED HAT PLATFORMRed Hat Universal Base & RHEL packages when registered
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
RED HAT PLATFORM
Updates
![Page 28: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/28.jpg)
INSERT DESIGNATOR, IF NEEDED
WHEN DEPLOYED ON RED HAT PLATFORMCall Red Hat Support to resolve any issue, request patches, etc
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
RED HAT PLATFORM
Support
![Page 29: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/29.jpg)
INSERT DESIGNATOR, IF NEEDED
WHEN DEPLOYED ON ANY CONTAINER PLATFORMRed Hat Universal Base Image package updates from anywhere
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
ANY CONTAINER PLATFORM
Updates
![Page 30: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/30.jpg)
CERTIFICATION & OPERATORS
![Page 31: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/31.jpg)
INSERT DESIGNATOR, IF NEEDED
THE BASE IMAGE FOR ALL OF YOUR NEEDSBringing the value of RHEL to cloud native applications
CONTAINER
SYSTEM SOFTWARE
LANGUAGE RUNTIMES
APP
OPERATOR
DATABASE CACHETIER
WEB SERVICE
CertifiedTraditional Application
CertifiedContainerized Applications
CertifiedCloud Native Applications
RHEL
KERNEL & SYSTEM SOFTWARE
LANGUAGE RUNTIMES
APP
![Page 32: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/32.jpg)
INSERT DESIGNATOR, IF NEEDED
BEHIND THE SCENESThere is a lot more than might be suspected
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
PARTNER CONNECT CERTIFIED APP
RED HAT PLATFORM
Process:
● Build● Validate● Publish● List● Grade● Rebuild
![Page 33: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/33.jpg)
INSERT DESIGNATOR, IF NEEDED
BEHIND THE SCENES
● Ongoing delivery of security patches● Ongoing validation of interoperability● Ongoing validation of supportability
Rebuild
Validate
Publish
List
Grade
Use with Confidence
Support
New Product
CUSTOMER PORTAL
CONTAINER CATALOG
CONTAINERREGISTRY
CONTAINER HEALTH INDEX
Build With
Security CONTAINER CATALOGAUTO-BUILD*
AUTO-PUBLISH*
* Red Hat’s automated build and publishing services are optional, but recommended
CONTAINER CERTIFICATIONRed Hat
Universal Base Image
![Page 34: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/34.jpg)
INSERT DESIGNATOR, IF NEEDED
COMMON CHOICES & PROBLEMSSupportability is a major concern
CONTAINER
OTHER BASE IMAGE
LANGUAGE RUNTIMES
APP
RED HAT PLATFORM
CONTAINER
OTHER BASE IMAGE
LANGUAGE RUNTIMES
APP
ANY CONTAINER PLATFORM
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
PARTNER CONNECT CERTIFIED APP
RED HAT PLATFORM
Third Party OS & Platform Third Party OS Ideal Supportable Solution
![Page 35: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/35.jpg)
INSERT DESIGNATOR, IF NEEDED
UBI IS AVAILABLE TODAYUse it with your favorite container engine
podman pull registry.access.redhat.com/ubi8/ubi
podman pull registry.access.redhat.com/ubi8/ubi-minimal
podman pull registry.access.redhat.com/ubi8/ubi-init
podman pull registry.access.redhat.com/ubi7/ubi
podman pull registry.access.redhat.com/ubi7/ubi-minimal
podman pull registry.access.redhat.com/ubi7/ubi-init
![Page 36: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/36.jpg)
THANK YOUplus.google.com/+RedHat
linkedin.com/company/red-hat
youtube.com/user/RedHatVideos
facebook.com/redhatinc
twitter.com/RedHat
![Page 37: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/37.jpg)
INSERT DESIGNATOR, IF NEEDED
SUPPORTABILITY MATRIXRed Hat Support and Community Support
RHEL 8 ANY CONTAINER PLATFORM
Like any upstream projectRed Hat Enterprise Linux 8
RHEL 7
Red Hat Enterprise Linux 7
RHEL 6
UBI 8 OTHER
UBI 7RHEL 6
UBI 8 OTHER
UBI 7
RED HATSUPPORT
COMMUNITYSUPPORT
RHEL 6
UBI 8 OTHER
UBI 7
![Page 38: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/38.jpg)
INSERT DESIGNATOR, IF NEEDED
WHAT IS THE RED HAT UNIVERSAL BASE IMAGE?The UBI is a subset of content from RHEL...
1. A set of three base images (ubi, ubi-minimal, ubi-init)
2. A set of language runtime images (nodejs, ruby, python, php, perl, etc)
3. A set of associated YUM repositories with common application dependency components
CONTAINER
OS(USER SPACE)
LANGUAGE RUNTIMES
APP
![Page 39: BASE IMAGE CHOOSING THE RIGHT CONTAINERcrunchtools.com/files/2019/05/Choosing-the-right-container-base-image... · CHOOSING THE RIGHT CONTAINER BASE IMAGE For your applications Scott](https://reader033.fdocuments.us/reader033/viewer/2022042012/5e72decc0f812928d334eeb6/html5/thumbnails/39.jpg)
INSERT DESIGNATOR, IF NEEDED
CAN BE BUILT & DEPLOYED ANYWHEREOn OpenShift and RHEL, or any container platform of your choice
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
RED HAT PLATFORM
CONTAINER
RED HAT UNIVERSAL BASE IMAGE
LANGUAGE RUNTIMES
APP
ANY CONTAINER PLATFORM