At the ongoing KubeCon + CloudNativeCon North America 2018, NeuVector has upgraded their line of container network security with the release of containerd and CRI-O run-time support. Attendees of the conference are invited to learn how customers use NeuVector and get 1:1 demos of the platform’s new capabilities.
Containerd is a Cloud Native Computing Foundation incubating project. It’s basically a container run-time built to emphasize simplicity, robustness, and portability while managing the complete container lifecycle of its host system. This includes managing the lifecycle of its host system, from image transfer and storage to container execution and supervision to low-level storage to network attachments and more. NeuVector is testing the containerd version on the latest IBM Cloud Kubernetes Service version, which uses the containerd run-time.
CRI-O is an implementation of the Kubernetes container run-time interface enabling OCI compatible run-times. It is a lightweight alternative to Docker as a run-time for Kubernetes. CRI-O is made up of several components including:
- OCI compatible runtime
- containers/storage
- containers/image
- networking (CNI)
- container monitoring (common)
- security is provided by several core Linux capabilities
With this newly added support, organizations using containerd or CRI-O can deploy NeuVector to secure their container environments.
Read Next
Stripe open sources ‘Skycfg’, a configuration builder for Kubernetes.
Kubernetes 1.13 released with new features and fixes to a major security flaw