Crucible is a project to provide a declarative interface for defining BOSH jobs and executing them in a secure and consistent environment.
Crucible takes advantage of containerization via RunC to isolate BOSH jobs on a host to provide improvements for release developers as well as operators. The declarative configuration simplifies the release author experience, and Crucible will handle many of the hand-rolled BOSH-job housekeeping tasks such as managing PID files, log redirection, and directory creation. For the operator Crucible provides better security since jobs will not have unrestricted access to the host VM.
In this talk, James Myers and Aram Price will discuss the development and design of Crucible. They will cover the improvements to the release developer's experience, and the security and stability benefits for operators.
Topics will include: An in depth look at how Crucible utilizes RunC to provide release authors and operators with isolated execution environments by default. A detailed comparisons between the existing BOSH release interface and Crucible's simplified declarative interface, Examples of how to convert existing bosh releases to use Crucible and the various benefits it provides currently. The possibilities that Crucible enables for the future.
James Myers is a software engineer for Pivotal Software and a core contributor to the Cloud Foundry project. James is currently working on the BOSH team. Previously, James has worked extensively on the core open source Cloud Foundry teams, including the Diego, CF Runtime, and CFCR... Read More →
