FR
EN
Conteneur et Cloud ComputingVirtualisation et Cloud Computing (STI)
Containers and Cloud Computing
Teaching unit Virtualization and Cloud Computing · S09T_ 2SU2 | EC Code S09O_2SU2-2
8ECTS (EU)
1Coefficient
21:20Hours
Séquencement
↳ Bobelin Laurent
↳ Bousquet Aline
Learning objectives
Part-runtime objectives
At the end of the half-module on the container runtime, you will know:
- What are the main types of virtualization of the calculation
- What are the main containerization tools (Docker, gVisor)
- What is the OIC Standard
- How to secure a Docker Container
- Understanding the difference between MicroVM and containers
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Network Security | Computer Security | S7 |
| Network Administration | Computer Security | S7 |
| Introduction to Computer Networks | PO STI 1 | S3 |
| Introduction to Systems | PO STI 1 | S3 |
| Awareness of Computer Security | PO STI 2 | S4 |
Program
Courses
- Cloud
- What is the Cloud
- Public, private, hybrid - IaaS, PaaS, SaaS
- Definition and differences
- Examples of use, examples of suppliers
- Advantages and disadvantages
- Architecture
- Virtual machines (VM)
- Network
- Storage of images (block storage, object storage) - Databases
- Security
- Users, roles, policies
- Security groups
- Containers
- Definition
- Containers vs VM
- Docker
- Description
- Image Creation
- Docker images layers
- Container orchestration
- Kubernetes
- Architecture - Security
- Cloud, containers, and software development - Continuous deployment
TD
- Using cloud basic services
- Creating virtual machines
- Networking, user creation, ...
- Automatic code deployment
- Automatic scaling of instances and monitoring
- Using advanced cloud services
- Creation and use of a service database
- Use of a function system as a service
- Combined use of several services
- Containers
- Implementation of container deployment infrastructure
- Use of infrastructure to understand how it works
Part-runtime program:
Objectives
At the end of this half-module you will know:
- Session 1: Introduction to the virtualization of calculation
- Session 2: OIC and gVisor
- Session 3: Container safety and microVM Modalities of the runtime half module Evaluation is carried out under continuous supervision The course is organized in sessions containing (1) a course (2) a practical part. Each session corresponds to an evaluation, each session being itself expected to last more or less 4 course slots. No work at home.
Assessment
TD to render on Célène and TP to make group on Celene
References
- https://nvlpubs.nist.gov/nistpubs/Legacy/SP/
- nistsspecialpublication800-145.pdf
- https://docs.aws.amazon.com
- https://cloud.google.com
- https://docs.openstack.org
- kubernets.io
- github.com/kelseyhightower/kubernetes-the-hard-way
- https://kubernetes.io/docs/tutorials/kubernetes-basics/
Skills
6| Ref. | Verb | Description | Level |
|---|---|---|---|
| C2_2 | describe | Cloud architectures | 1 |
| C2_2 | describe | the architecture of a container management system | 1 |
| C2_2 | choose | between different deployment models | 2 |
| C2_3 | manage | services deployed on a cloud system | 3 |
| C2_3 | analyze | services deployed on a cloud system | 3 |
| C2_3 | implement | a container management system | 3 |
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Security of outsourced services | 1 | 2 | 1 | 2 |
| Analysis and deployment of architectures using Cloud AWS and GCE products. Use of cloud security systems (VPC, security group, access control and permissions) | ||||
| Security of electronics and hardware architectures | 2 | 1 | 0 | 1 |
| Introduction to the hardware mechanisms of TEE (MKTME, SEV) and support to virtualization | ||||
| Security of outsourced services | 2 | 2 | 1 | 2 |
| Strengthening container deployments and introduction to kata containers | ||||
| Security of specific and emerging systems | 2 | 2 | 0 | 1 |
| Securing virtualized networks by SDN and NFV | ||||