Alice Sowerby
    • Create new note
    • Create a note from template
      • Sharing URL Link copied
      • /edit
      • View mode
        • Edit mode
        • View mode
        • Book mode
        • Slide mode
        Edit mode View mode Book mode Slide mode
      • Customize slides
      • Note Permission
      • Read
        • Only me
        • Signed-in users
        • Everyone
        Only me Signed-in users Everyone
      • Write
        • Only me
        • Signed-in users
        • Everyone
        Only me Signed-in users Everyone
      • Engagement control Commenting, Suggest edit, Emoji Reply
    • Invite by email
      Invitee

      This note has no invitees

    • Publish Note

      Share your work with the world Congratulations! 🎉 Your note is out in the world Publish Note

      Your note will be visible on your profile and discoverable by anyone.
      Your note is now live.
      This note is visible on your profile and discoverable online.
      Everyone on the web can find and read all notes of this public team.
      See published notes
      Unpublish note
      Please check the box to agree to the Community Guidelines.
      View profile
    • Commenting
      Permission
      Disabled Forbidden Owners Signed-in users Everyone
    • Enable
    • Permission
      • Forbidden
      • Owners
      • Signed-in users
      • Everyone
    • Suggest edit
      Permission
      Disabled Forbidden Owners Signed-in users Everyone
    • Enable
    • Permission
      • Forbidden
      • Owners
      • Signed-in users
    • Emoji Reply
    • Enable
    • Versions and GitHub Sync
    • Note settings
    • Note Insights New
    • Engagement control
    • Make a copy
    • Transfer ownership
    • Delete this note
    • Save as template
    • Insert from template
    • Import from
      • Dropbox
      • Google Drive
      • Gist
      • Clipboard
    • Export to
      • Dropbox
      • Google Drive
      • Gist
    • Download
      • Markdown
      • HTML
      • Raw HTML
Menu Note settings Note Insights Versions and GitHub Sync Sharing URL Create Help
Create Create new note Create a note from template
Menu
Options
Engagement control Make a copy Transfer ownership Delete this note
Import from
Dropbox Google Drive Gist Clipboard
Export to
Dropbox Google Drive Gist
Download
Markdown HTML Raw HTML
Back
Sharing URL Link copied
/edit
View mode
  • Edit mode
  • View mode
  • Book mode
  • Slide mode
Edit mode View mode Book mode Slide mode
Customize slides
Note Permission
Read
Only me
  • Only me
  • Signed-in users
  • Everyone
Only me Signed-in users Everyone
Write
Only me
  • Only me
  • Signed-in users
  • Everyone
Only me Signed-in users Everyone
Engagement control Commenting, Suggest edit, Emoji Reply
  • Invite by email
    Invitee

    This note has no invitees

  • Publish Note

    Share your work with the world Congratulations! 🎉 Your note is out in the world Publish Note

    Your note will be visible on your profile and discoverable by anyone.
    Your note is now live.
    This note is visible on your profile and discoverable online.
    Everyone on the web can find and read all notes of this public team.
    See published notes
    Unpublish note
    Please check the box to agree to the Community Guidelines.
    View profile
    Engagement control
    Commenting
    Permission
    Disabled Forbidden Owners Signed-in users Everyone
    Enable
    Permission
    • Forbidden
    • Owners
    • Signed-in users
    • Everyone
    Suggest edit
    Permission
    Disabled Forbidden Owners Signed-in users Everyone
    Enable
    Permission
    • Forbidden
    • Owners
    • Signed-in users
    Emoji Reply
    Enable
    Import from Dropbox Google Drive Gist Clipboard
       Owned this note    Owned this note      
    Published Linked with GitHub
    • Any changes
      Be notified of any changes
    • Mention me
      Be notified of mention me
    • Unsubscribe
    # FreeBSD Cloud Native Containers Technologies ## Key info ### 45m meeting biweekly * Go to https://wiki.freebsd.org/CommunityCalendar to see day and time. * Join at https://us06web.zoom.us/j/87237884069?pwd=VAACINGReoLFkVAu2Fbxr3Kvn7tzja.1 * Meeting ID: 872 3788 4069 * Passcode: 713475 * [More ways to join](https://applications.zoom.us/addon/invitation/detail?meetingUuid=NYfOdN1QQVuAeo%2BFI%2BtEGQ%3D%3D&signature=112ca3531d75feaa718ee871e79270bcb13cc3e555d032059a324b2d7e38eb61&v=1) ### Tracking spreadsheet https://docs.google.com/spreadsheets/d/1IGk2uZd2TG3CUddFmWi6_7PygER08n0XlGmronXq0Pk/edit?usp=sharing ### Goal of meeting The (draft) goal of the group is "Identify important work needed to make FreeBSD a top-tier choice for running cloud native containerised workloads. Aim to champion these pieces of work to the point where they can "graduate" from this group e.g. have an owner and are being actively worked on." ## Meeting notes ### 2026-02-09 - [ ] Alice Sowerby - [ ] Bernard B - [x] Ed Maste - [x] Carmi Weinzweig (Meeting facilitator) - [ ] Dave Cottlehuber (dch) - [x] Doug Rabson - [ ] Goran Mekić - [x] Greg Wallace - [ ] Jan Melen - [ ] Matías Pizarro - [x] Roger Marquis - [ ] William Mortl - [X] Michael Johnson (ahze) #### Updates - FOSDEM travel and illness notes - TO DO: Look into the port of netavark to FreeBSD - Can DCH provide an update? - Greg to ping DCH to see if he has anything on this - Carmi will ping Goran to see if he is still interested in doing this work - Ed - Two co-op students looking for proijects to take on. Anything in this domain that's relatively small and self contained? - Related, GSOC may provide another opportunity - Someone on Mastadon asked Ed if there are any plans to update Docker support on FreeBSD. - https://mastodon.bsd.cafe/@martin/116025672394935530 - We could use a good summary of FreeBSD Cloud Native status, and how-to - Carmi will send out a new Zoom link for the next call - Questions at FOSDEM about K8s on FreeBSD - Doug has notes on his GitHub (https://github.com/dfr/kubernetes-demo)] - Adding to Ports forthcoming ### 2026-01-26 - [x] Alice Sowerby (Meeting facilitator) - [ ] Bernard B - [x] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber (dch) - [x] Doug Rabson - [ ] Goran Mekić - [ ] Greg Wallace - [ ] Jan Melen - [X] Matías Pizarro - [ ] Roger Marquis - [ ] William Mortl - [X] Michael Johnson (ahze) #### Updates 1. [Alice] Looking for a new host for this meeting. 2. [dch] Working on customer solution to deploying container in production. It's been in testing no problems. Soon will go live! Need some help fixing some [issues with package management](https://github.com/skunkwerks/pkg/compare/2.5.1...skunkwerks:pkg:fix/misc-2.5.1). @dch: example of building in one container and pulling build artifacts into a lean image ``` FROM freebsd:15.0 AS builder [... building pdfium here] FROM freebsd:15.0 # Copy only build artifacts, leaving tests and build outputs behind RUN mkdir -p /usr/local/lib /usr/local/include/pdfium/cpp /usr/local/share/licenses/pdfium COPY --from=builder /opt/pdfium/out/Release/obj/libpdfium.a /usr/local/lib/ COPY --from=builder /opt/pdfium/public/*.h /usr/local/include/pdfium/ COPY --from=builder /opt/pdfium/public/cpp/*.h /usr/local/include/pdfium/cpp/ COPY --from=builder /opt/pdfium/LICENSE /usr/local/share/licenses/pdfium/ CMD ["/bin/sh"] ``` Also, building a leaner jail by not committing pkg cache and db to a layer: ``` RUN /usr/bin/env pkg install -yr FreeBSD-base-proxy FreeBSD-ssh FreeBSD-ee FreeBSD-ncurses \ && /usr/bin/env pkg install -yr FreeBSD-base-proxy FreeBSD-clang-dev FreeBSD-clibs-dev \ && /usr/bin/env pkg install -yr FreeBSD-ports-proxy ripgrep ncdu curl htop git tmux tree rsync jq \ && /usr/bin/env pkg install -yr FreeBSD-ports-proxy doas sudo \ && /usr/bin/env pkg install -yr FreeBSD-ports-proxy gh ccache4 lang/go \ && /usr/bin/env pkg install -yr FreeBSD-ports-proxy claude-code codex \ && /usr/bin/env pkg install -yr FreeBSD-ports-proxy py311-uv py311-uv-build py311-uv-bump py311-ruff py311-gdbm py311-sqlite3 py311-tkinter py311-uv-dynamic-versioning py311-grpcio \ && /usr/bin/env pkg add /var/db/pkg/pulumi-3*.pkg \ && /usr/bin/env pkg add /var/db/pkg/pulumi-p*.pkg \ && rm -f /var/cache/pkg/* \ && rm -rf /var/db/pkg/* ``` @dch, great speed up in container building by getting pkgs from a containerized version of [[@crest's pkg caching proxy setup](https://web.archive.org/web/20240620030431/https://blog.rlwinm.de/why-and-how-to-run-your-own-freebsd-package-cache-3wbg)](https://) that leverages stunnel and Varnish to serve a fast and up-to-date cache of package files. Let me know if you want the Containerfile and config files. 3. [Doug] MJ asked about annotations to enable Jail allow flags. Tried using hooks to enable flags. MJ's patch is in review and Doug has been testing it (integrating with OCI runtime instance). (orig patch: https://github.com/daemonless/daemonless/blob/main/scripts/ocijail-allow-annotations.patch) 4. [Doug] Also a bug from Matías - when a container that is attached to a terminal, if it's streaming too much output it killed the jail, sometimes all the way to a reboot of the machine (now fixed, one line update in conmon). Issue and discussion: https://github.com/containers/podman/issues/27918 Patched port: https://github.com/docBase/freebsd-ports/tree/main/sysutils/conmon Just the file patch: https://github.com/docBase/freebsd-ports/tree/main/sysutils/conmon/files #### Work items tracking and updates 1. Review the tracking spreadsheet https://docs.google.com/spreadsheets/d/1IGk2uZd2TG3CUddFmWi6_7PygER08n0XlGmronXq0Pk/edit?usp=sharing #### Any other business 1. Add your item here. ### 2026-01-12 - [x] Alice Sowerby (Meeting facilitator) - [ ] Bernard B - [x] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber - [x] Doug Rabson - [ ] Goran Mekić - [x] Greg Wallace - [ ] Jan Melen - [x] Matías Pizarro - [ ] Roger Marquis - [ ] William Mortl #### Updates * [Alice] "This is a WIP script to install Podman via bsdinstall. Mostly inspired by the (semi-related) FreeBSD Foundation's Laptop Support and Usability Project and the alfix/kde-installer-dialogs repository in particular."" https://gitlab.com/ly2en/podman-installer-dialogs * [dch] Podman handbook changes * https://reviews.freebsd.org/D53927 (metadata diff only, not very interesting) - https://reviews.freebsd.org/D53929 (synopsis) - https://reviews.freebsd.org/D53928 (intro, discuss tagging & naming) - [dch] podman vs zfs problems - 12427 100655 pkg - zfs_zget+0x2c6 zfs_dirent_lookup+0x175 zfs_dirlook+0x81 zfs_lookup+0x350 zfs_freebsd_lookup+0x1a3 vfs_cache_lookup+0xad cache_fplookup_final_modifying+0x182 cache_fplookup+0x3dc namei+0xe4 kern_renameat+0x135 amd64_syscall+0x126 fast_syscall_common+0xf8 - 12427 100655 pkg - dbuf_hold+0x22 dmu_buf_hold_noread_by_dnode+0x39 dmu_buf_hold_by_dnode+0x1c zap_lockdir+0x58 zap_lookup_norm+0x39 zap_lookup+0x11 zfs_dirent_lookup+0x143 zfs_dirlook+0x81 zfs_lookup+0x350 zfs_freebsd_lookup+0x1a3 vfs_cache_lookup+0xad vfs_lookup+0x401 namei+0x26d kern_renameat+0x20b amd64_syscall+0x126 fast_syscall_common+0xf8 ### reproduction Assuming you already have a working podman setup. ``` # zfs destroy -vrf zroot/containers # zfs create -o mountpoint=/var/db/containers zroot/containers # zfs snapshot -r zroot/containers@empty # podman run -it --dns 1.1.1.1 --volume /var/cache/podman/pkg:/var/cache/pkg ghcr.io/freebsd/freebsd-toolchain:15.0 # sed -i '' -E -e s/quarterly/latest/ /etc/pkg/FreeBSD.conf ; # rm -rf /usr/local/etc/pkg/repos/*.conf ; # echo 'FreeBSD-base: { enabled: yes }' | tee /usr/local/etc/pkg/repos/FreeBSD.conf ; # env ASSUME_ALWAYS_YES=yes pkg update -f # pkg -d upgrade -y ``` This reliably hangs (or gets extremely slow, hard to tell the difference) here on 4 different systems. ``` # procstat -kk 12427 PID TID COMM TDNAME KSTACK 12427 100655 pkg - zfs_zget+0x2c6 zfs_dirent_lookup+0x175 zfs_dirlook+0x81 zfs_lookup+0x350 zfs_freebsd_lookup+0x1a3 vfs_cache_lookup+0xad cache_fplookup_final_modifying+0x182 cache_fplookup+0x3dc namei+0xe4 kern_renameat+0x135 amd64_syscall+0x126 fast_syscall_common+0xf8 # procstat -kk 12427 PID TID COMM TDNAME KSTACK 12427 100655 pkg - kern_renameat+0x36d amd64_syscall+0x126 fast_syscall_common+0xf8 # procstat -kk 12427 PID TID COMM TDNAME KSTACK 12427 100655 pkg - cache_fplookup_final_modifying+0x219 cache_fplookup+0x3dc namei+0xe4 kern_renameat+0x20b amd64_syscall+0x126 fast_syscall_common+0xf8 # procstat -kk 12427 PID TID COMM TDNAME KSTACK 12427 100655 pkg - dbuf_hold+0x22 dmu_buf_hold_noread_by_dnode+0x39 dmu_buf_hold_by_dnode+0x1c zap_lockdir+0x58 zap_lookup_norm+0x39 zap_lookup+0x11 zfs_dirent_lookup+0x143 zfs_dirlook+0x81 zfs_lookup+0x350 zfs_freebsd_lookup+0x1a3 vfs_cache_lookup+0xad vfs_lookup+0x401 namei+0x26d kern_renameat+0x20b amd64_syscall+0x126 fast_syscall_common+0xf8 ``` * [Matías] filed a bug report re:"`FreeBSD: "output destination cannot be nil" with fast PTY output when podman stdout is a terminal`" on github: https://github.com/containers/podman/issues/27918 * [Matías] Pulumi-based framework for deploying array of servers. > Just a quick update on how things are going on this end. > > I zoomed out a bit on my Podman containers effort to re-focus on building a few real, end-to-end, production use cases that we can use in my company and that hopefully can be useful for others. > > I am still continuing to work on the initial effort but I found it needed to be grounded in just-works patterns that people can adopt rather than having to bump into endless succession of walls. > > One example is the attached rewrite I did of the ZFS and SysV annotations so that they work both for stand-alone and in-pod containers. Would this warrant a follow-up to your post? Would love to get your feedback on it in any case. > > I built a Pulumi-based framework that takes a YAML configuration to deploy a Hetzner Cloud based fully configurable array of servers organized in private and/or public networks and subnets, with the necessary Wireguard capabilities and configurations. Each of these is fully configurable and so are the services and the pods or stand-alone containers they can run. It lets one define recipes that can be composed to get the desired infrastucture and services. Full deployment requires a single "pulumi up". > > This works as an open-source library that can be installed in a private project and can be re-used and modified by others to suit their own needs. > > This is currently replacing some of our AWS/Azure/GCP resources though I will be extending this to support deployment on those cloudds too. > > Happy to schedule a quick run through session if of interest to you at any point. Full publication will take some time as I aim for this to be battle-tested and working end-to-end for a few real production use cases and avoid everyone having to solve again the same problems themselves. #### Work items tracking and updates 1. Review the tracking spreadsheet https://docs.google.com/spreadsheets/d/1IGk2uZd2TG3CUddFmWi6_7PygER08n0XlGmronXq0Pk/edit?usp=sharing: 2. #### Any other business * [Matías] I am working on a Pulumi-based framework that takes a YAML configuration to deploy a Hetzner Cloud based fully configurable array of servers organized in private and/or public networks and subnets, with the necessary wireguard capabilities and configurations. Each of these is fully configurable and so are the services and the pods or stand-alone containers they can run. Full deployment requires a single "pulumi up". This works as an open-source library that can be installed in a private project and can be re-used and modified by others to suit their own needs. * a rewrite of the ZFS and SysV annotations so that they work both for stand-alone and in-pod containers. #### Actions - [ ] Alice - see if the Podman installer person (Simonas Kareiva) would like to join this call. - [ ] Matías to add his annotation notes to the FreeBSD Handbook. ## Meeting notes ### 2025-12-15 - [ ] Alice Sowerby (Meeting facilitator) - [x] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber - [x] Doug Rabson #### Updates - Dave would love people to review these podman handbook changes: - https://reviews.freebsd.org/D53927 (metadata diff only, not very interesting) - https://reviews.freebsd.org/D53929 (synopsis) - https://reviews.freebsd.org/D53928 (intro, discuss tagging & naming) Once I have the metadata & synopsis in I can add the remaining info relatively quickly from my old hackmd. #### Any other business - Samba 4.23 is in ports now. - Requires python 3.11 to build, which has open vulnerabilities. - Ryzen 3xx AI graphics work in progress. - Should work fine with scfb, unaccelerated dumb framebuffer. ### 2025-12-01 - [x] Alice Sowerby (Meeting facilitator) - [x] Bernard B - [ ] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber - [x] Doug Rabson - [x] Goran Mekić - [ ] Jan Melen - [x] Matías Pizarro - [x] Roger Marquis - [ ] William Mortl #### Welcome to any new people! Intros as needed. Goran is interested in making Netavark work for Podman. Has proposed the project to the FreeBSD Foundation. Bernard is interested in nesting podman_service in a jail for CI. #### Announcements and admin 1. Note that we now have a live calendar which contains this an other community meetings https://wiki.freebsd.org/CommunityCalendar. You can subscribe to this and receive notifications etc. 2. Cancelling over holiday period. 3. 2025-12-29 to be cancelled. First call after that to be 2026-01-12. #### Work items tracking and updates 1. Review the tracking spreadsheet: 4. Updates on any of the items. * Container images (see spreadsheet) * Containerisation framework for Mac (see spreadsheet). * Podman support for Netavark(see spreadsheet). 6. Any new items? 7. Find champions for the items without one. #### Any other business * 15.0-RELEASE should be announced tonight 2025-12-02 00:00 UTC * please publicise our container registries at [docker hub](https://hub.docker.com/u/freebsd) and [github container registry](https://github.com/orgs/freebsd/packages) * Update on progress * Add here #### Actions - [ ] everybody: please review the new container/podman docs for the handbook! If you don't have a phabricator account, you can also email dch@FreeBSD.org - https://reviews.freebsd.org/D53927 - https://reviews.freebsd.org/D53928 - https://reviews.freebsd.org/D53929 - [ ] - [ ] ### 2025-11-17 - [x] Alice Sowerby - [x] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber - [x] Deb Goodkin - [x] Doug Rabson - [ ] Jan Melen - [x] Matías Pizarro - [ ] Roger Marquis - [ ] William Mortl #### Welcome to any new people! Intros as needed. #### Announcements and updates 1. This meeting is now 45m in length. 3. The FreeBSD Foundation is discussing virtualization projects for 2026. Ed Maste, Doug Rabson, Dave Cottlehuber, Mark Johnston, and John Baldwin have all been included in this conversation. Topics from this group have been included: * Netavark * Scaling performance for multi-node clusters. Do we need to add anything else from that meeting to our tracker? e.g. * Rootless containers * ~~Should we look at porting virtio-fs instead of p9fs?~~ This is a bhyve thing, not directly for containers (could be useful if running containers in VMs). * Adding podman support to Sylve https://github.com/AlchemillaHQ/Sylve/blob/master/README.md (Hayzam is keen to add it, the architecture supports it) * Resource isolation within containers. * Kubernetes CSI support. * Question for Doug (from Dave) Mention podman "quadlets" and "pods" are these things likely to be supported? quadlets are Systemd thing, not likely to "just work" but pods do just work. * These things "just work" * [podman ansible](https://docs.ansible.com/ansible/latest/collections/containers/podman/index.html) * [podman desktop](https://podman-desktop.io/) * [podman REST API](https://docs.podman.io/en/latest/_static/api.html) * Adding Containerfile support to ports tree (already in the spreadsheet in row 6 as "Standardised container images"). 3. Matías share his work on a Proof Of Concept drop-in replacement/solution for standardised container images https://matias-pizarro.github.io/freebsd-oci-containers/images/. Forking key container image repos one by one and adding FreeBSD support. e.g. base image, ZFS image, Postgres image. For FreeBSD v14.3, 15.0 and 14 to 16 snapshots. Includes test coverage for CI. Anyone can take this to make use of it. 4. Doug - an important goal is that the images be trustworthy, need 3rd-party validation e.g. DockerHub or another authority. #### Any other business No #### Actions - [x] Dave: Get partial documentation into a place where more people can contribute. - [ ] Who: Task to do - [ ] Who: Task to do ## Meeting notes ### 2025-11-03 - [x] Alice Sowerby - [x] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber - [x] Doug Rabson - [ ] Jan Melen - [x] Matías Pizarro - [ ] Roger Marquis - [ ] William Mortl 1. Welcome to any new people! Intros 2. Announcements 1. OCI runtime extension PR is merged! https://github.com/opencontainers/runtime-spec/pull/1286 and it looks like v1.3 will be released tomorrow!!! https://github.com/opencontainers/runtime-spec/pull/1302 Huge thanks to Doug for working on this, and to everyone who played a role in getting this over the line. Alice has drafted a Foundation blog post that can be shared to get the word out. 2. Gleb Popov: "Won't be able to attend, just wanted to point out that we now have a (seemingly working) port for Podman Desktop: https://www.freshports.org/deskutils/podman-desktop" 3. New video from Mark Phillips on how to run containers on FreeBSD, please share widely https://freebsdfoundation.org/blog/oci-containers-on-freebsd/ 1. [Dave] [Goran Mekic](https://meka.rs/) has expressed interest in picking up the changes needed (in Rust) in Netavark to work with FreeBSD. This is needed for the next version of Netavark 3. Check actions from last call. 4. none 5. Tracking spreadsheet https://docs.google.com/spreadsheets/d/1IGk2uZd2TG3CUddFmWi6_7PygER08n0XlGmronXq0Pk/edit?usp=sharing #### Actions - [ ] Who: Task to do - [ ] Who: Task to do - [ ] Who: Task to do ### 2025-10-20 Attendees: - [x] Alice Sowerby - [x] Ed Maste - [x] Carmi Weinzweig - [ ] Dave Cottlehuber - [x] Doug Rabson - [ ] Jan Melen - [ ] Roger Marquis - [ ] William Mortl #### Agenda & meeting notes 1. Welcome to any new people! Intros 2. Check actions from last call. 3. Tracking spreadsheet https://docs.google.com/spreadsheets/d/1IGk2uZd2TG3CUddFmWi6_7PygER08n0XlGmronXq0Pk/edit?usp=sharing * Proposal: We use these calls to focus on getting champions for workstreams and helping champions move their workstreams along. * The champions aim to find a path forward for their workstream. * This could look like: finding a developer, proposing a project to the FreeBSD Foundation, or advocating for an upstream project to adopt the (pending) new OCI spec. 5. What help do you want from the Foundation? #### Actions - [ ] Who: Task to do - [ ] Who: Task to do - [ ] Who: Task to do ### 2025-10-06 Attendees: - [x] Alice Sowerby - [x] Ed Maste - [x] Carmi Weinzweig - [x] Dave Cottlehuber - [x] Doug Rabson - [x] Jan Melen - [x] Roger Marquis - [x] William Mortl #### Agenda & meeting notes 1. Welcome to any new people! Intros 2. Check actions from last call. 3. Netavark (podman-specific network component) update (dch) * Looking for people to do this, no success, hopefully within next few months (Rust + FreeBSD networking skills required). It's in the podman stack. * Will CNI get deprecated in the next release of Podman? Could be. It's better if we move to an alternative. 4. Postgres etc Support * Running postgres in container. It needs mlock(2) (need to verify) and SysV IPC. Covered by OCI runtime, needs plumbing work on the podman side. Depends on the OCI runtime extension to be accepted and the new spec released. Advocate for Podman to adopt the new spec. Then we can do what we want with Podman. 7. What is already being worked on? * Dave is working on docs, plan to have this ready for 15.0-RELEASE * Dave is working on using pkg-base "sets" in 15.0-RELEASE images * Carmi and Mike are working on a set of video tutorials on how to get started with these tools. 10. What else should we look at starting? * quadratic slowdown when spinning up many jails (1000s - 1_000_000). dch was testing this, and it slows down quadratically to the point of taking 2 weeks for 1 million. 1000 functionally too slow to be useful. Not sure what takes it so long, but perhaps could be a relatively constrained issue suitable for a new kernel developer. * Carmi - we spoke before about getting some standard containers for some of the common workload component e.g. postgres. More suited to this group than the OCI runtime call. Could be included within the container files in the ports tree. This could be handled by another build tasks, similarly to release artifacts. Couple of weeks' work. Portmgr@ would need to agree. #### Actions - [x] Alice: Create a tracking doc for work items identified. - [ ] Who: Task to do - [ ] Who: Task to do ### 2025-09-22 Attendees: - [x] Alice Sowerby - [ ] Ed Maste - [x] Carmi Weinzweig - [ ] Dave Cottlehuber - [x] Doug Rabson #### Agenda 1. Who else might be interested? 1. Sam Karp 1. Jan Brankamp 1. Greg Wallace 1. William Mortl 3. Mission of group/scope 1. Identify important work needed to make FreeBSD a top-tier choice for running cloud native containerised workloads. Aim to champion these pieces of work to the point where they can "graduate" from this group e.g. owner, being worked on. 2. See scope of work needed: https://docs.google.com/document/d/1vS4wszs7hIEaYiK7d-A75gaKPL5Maypr22W-6U35oTk/edit?tab=t.cdhn9gqu62sx#heading=h.sbd6tj2cemq7 4. Where to promote/document. 1. Document the OCI work on the Wiki page https://wiki.freebsd.org/Containers, and also this call. 2. Promote anywhere else? Announcement on the FreeBSD project home page. Also FreeBSD Forum. And the Jails mailing list. 5. Priorities 6. 7. Next steps #### Additional notes: **Info about William Mortl (via Deb)** “Previously I worked at Microsoft and wrote several of the Kubernetes operators for Azure Kubernetes Service that facilitated deploying Azure infrastructure as part of the service manifest specification for Kubernetes services. I did a lot of Go and infrastructure as code and have a deep knowledge of Kubernetes. "That brings me to my FreeBSD project. I am porting Kubernetes to FreeBSD and adding functionality to Kubernetes to deploy FreeBSD jails as a first class citizen alongside containers. I’m well on my way and when the prototype is finished in a couple months I was hoping that I could then discuss what interest there would be in the FreeBSD community? "Once the functional demo/beta is ready, I’d love to make this a community open source project and even push for my new “jailerd” service (which should act as the FreeBSD equivalent of “containerd” for Linux) to get accepted into CNCF. **Carmi - IBC conference report** Was demoing in the Dell booth. Talking to people, suggesting they should create a FreeBSD port, and also figuring out what people's issues are. Isilon long conversation, including "why do you not support anything running on isilon except storage stuff itself." They couldn't find anything as clean/safe as containers. Potentially Perforce is suitable. Also, AMD were excited about a ROCm port (like CUDA, AI). They would have hardware resources and funds to get a port done. AMD and NVIDIA have data center class networking cards 2-400GB very cluster oriented. Head of workstation deployments is excited about the idea of getting Pensando do a port of FreeBSD. Most commonly, no-one was thinking about FreeBSD as a container OS. Both AMD and Isilon are interested in doing more with FreeBSD. Head of server stuff at Unreal (game engine) wants to help get support. Carmi has been trying to get a list of requirements to see what they need and create a group of companies that can support a combined effort. This can then be provided to the Foundation for consideration as a managed project. #### Actions - [x] Alice: Connect Doug with William Mortl. - [x] Alice: Ask Foundation to promote this call - [x] Carmi: Promote it on the Forum. Also invited the speaker from EuroBSD con. Doug also heard back from him. - [x] Alice: Update the Wiki. - [x] Alice: Send mail to the Jails mailing list.

    Import from clipboard

    Paste your markdown or webpage here...

    Advanced permission required

    Your current role can only read. Ask the system administrator to acquire write and comment permission.

    This team is disabled

    Sorry, this team is disabled. You can't edit this note.

    This note is locked

    Sorry, only owner can edit this note.

    Reach the limit

    Sorry, you've reached the max length this note can be.
    Please reduce the content or divide it to more notes, thank you!

    Import from Gist

    Import from Snippet

    or

    Export to Snippet

    Are you sure?

    Do you really want to delete this note?
    All users will lose their connection.

    Create a note from template

    Create a note from template

    Oops...
    This template has been removed or transferred.
    Upgrade
    All
    • All
    • Team
    No template.

    Create a template

    Upgrade

    Delete template

    Do you really want to delete this template?
    Turn this template into a regular note and keep its content, versions, and comments.

    This page need refresh

    You have an incompatible client version.
    Refresh to update.
    New version available!
    See releases notes here
    Refresh to enjoy new features.
    Your user state has changed.
    Refresh to load new user state.

    Sign in

    Forgot password

    or

    By clicking below, you agree to our terms of service.

    Sign in via Facebook Sign in via Twitter Sign in via GitHub Sign in via Dropbox Sign in with Wallet
    Wallet ( )
    Connect another wallet

    New to HackMD? Sign up

    Help

    • English
    • 中文
    • Français
    • Deutsch
    • 日本語
    • Español
    • Català
    • Ελληνικά
    • Português
    • italiano
    • Türkçe
    • Русский
    • Nederlands
    • hrvatski jezik
    • język polski
    • Українська
    • हिन्दी
    • svenska
    • Esperanto
    • dansk

    Documents

    Help & Tutorial

    How to use Book mode

    Slide Example

    API Docs

    Edit in VSCode

    Install browser extension

    Contacts

    Feedback

    Discord

    Send us email

    Resources

    Releases

    Pricing

    Blog

    Policy

    Terms

    Privacy

    Cheatsheet

    Syntax Example Reference
    # Header Header 基本排版
    - Unordered List
    • Unordered List
    1. Ordered List
    1. Ordered List
    - [ ] Todo List
    • Todo List
    > Blockquote
    Blockquote
    **Bold font** Bold font
    *Italics font* Italics font
    ~~Strikethrough~~ Strikethrough
    19^th^ 19th
    H~2~O H2O
    ++Inserted text++ Inserted text
    ==Marked text== Marked text
    [link text](https:// "title") Link
    ![image alt](https:// "title") Image
    `Code` Code 在筆記中貼入程式碼
    ```javascript
    var i = 0;
    ```
    var i = 0;
    :smile: :smile: Emoji list
    {%youtube youtube_id %} Externals
    $L^aT_eX$ LaTeX
    :::info
    This is a alert area.
    :::

    This is a alert area.

    Versions and GitHub Sync
    Get Full History Access

    • Edit version name
    • Delete

    revision author avatar     named on  

    More Less

    Note content is identical to the latest version.
    Compare
      Choose a version
      No search result
      Version not found
    Sign in to link this note to GitHub
    Learn more
    This note is not linked with GitHub
     

    Feedback

    Submission failed, please try again

    Thanks for your support.

    On a scale of 0-10, how likely is it that you would recommend HackMD to your friends, family or business associates?

    Please give us some advice and help us improve HackMD.

     

    Thanks for your feedback

    Remove version name

    Do you want to remove this version name and description?

    Transfer ownership

    Transfer to
      Warning: is a public team. If you transfer note to this team, everyone on the web can find and read this note.

        Link with GitHub

        Please authorize HackMD on GitHub
        • Please sign in to GitHub and install the HackMD app on your GitHub repo.
        • HackMD links with GitHub through a GitHub App. You can choose which repo to install our App.
        Learn more  Sign in to GitHub

        Push the note to GitHub Push to GitHub Pull a file from GitHub

          Authorize again
         

        Choose which file to push to

        Select repo
        Refresh Authorize more repos
        Select branch
        Select file
        Select branch
        Choose version(s) to push
        • Save a new version and push
        • Choose from existing versions
        Include title and tags
        Available push count

        Pull from GitHub

         
        File from GitHub
        File from HackMD

        GitHub Link Settings

        File linked

        Linked by
        File path
        Last synced branch
        Available push count

        Danger Zone

        Unlink
        You will no longer receive notification when GitHub file changes after unlink.

        Syncing

        Push failed

        Push successfully