Overview Part 04 CppCon 2019  CppCon 2020 • Announced at CppCon 2019 • github.com/microsoft/STL • Apache License v2.0 with LLVM Exception • Implemented ~50 C++20 features • Majority from our amazing contributors extension)) { continue; } // ... } }15 Erasing Elements16 Container Erasure Strategies • Erasing unwanted elements before C++20: • vector-like: erase-remove idiom 🐞 • Invalidating iterators while looping 🐞 • Skipping elements while looping 🐞17 Uniform Container Erasure • GH-236 and GH-566 implemented by SuperWig #include #include #include

Integrated into enterprise products: VIC and PKS GitHub Repo: https://github.com/go harbor/harbor/ Apache 2.0 license An open source trusted cloud native registry project HARBOR More integrations in Storage Persistence components Local or Remote Storage (block, file, object) Users (GUI/API) Container Schedulers/Runtimes Consumers LDAP/Active Directory Supporting services Harbor Packaging

Native Modules • UI Thread vs JS Thread • Angular/Vue/Vanilla vs React • Progress vs Facebook • Apache 2.0 vs BSD+ JavaScript-Driven Native • Share code • Reuse existing skills/teams • Reuse existing source developers NativeScript CLI docs.nativescript.org Xcode, Xcode CLI tools, iOS SDK JDK, Apache Ant, Android SDK $ npm install –g nativescript NativeScript Sidekick o Tool for Mac/Windows/Linux

кластером как ОДНИМ РЕСУРСОМ ClickHouse Operator ClickHouseInstallation YAML file Лицензия: Apache 2.0, Распространяется как Docker image ClickHouse cluster resources kubectl apply K8S API Спецификация

Cloud Native and Open Source Liangyu Zhou Senior Software Engineer at Tencent Rich experience in Container and Kubernetes field, promote lots of K8S production practice in Tencent Motivation https:// isolation, but we will focus on pod-to-pod isolation in this talk, AKA Sandbox Isolation. • Container Escape docker.vh.neargle.com:8888/?command_exec=python3 -c "import docker;client = docker.Doc /proc/self/fd/ 4. Linux Kernel Patch Are those enough? NO https://landscape.cncf.io/category=container-runtime&format=card-mode&grouping=category Runtime Landscape cri- containerd runsc+gVisor kubelet

Support44  Defined in  New adaptors on top of basic sequence containers  Associative container interface (similar to std::map)  unique keys (flat_map)  fast retrieval of values based on a // "", "c", "d", "e", ""70 Changes to Ranges Library  ranges::to(): Converts a range to a container  E.g.: auto ints = std::views::iota(1, 5) | std::views::transform([](const auto& nts) }; std::print("{}", vec); // [2, 4, 6, 8]71 Changes to Ranges Library  Converts container to container  E.g.: // Convert vector to set with same element type. std::vector vec{ 33, 11, 22 };

Pointer Synchronous Reclamation Beyond Concurrency TS2 – Maged Michael template class Container { struct Obj : hazard_pointer_obj { Key k; /* etc */ }; hazard_pointer_domain dom_; // completion of destruction of Container. • Problem: High setup overhead of constructing/destroying per custom domain hazard pointers. • Even worse if many instances of Container are used by thousands of Pointer Synchronous Reclamation Beyond Concurrency TS2 – Maged Michael template class Container { struct Obj : hazard_pointer_cohort_obj { Key k; /* etc */ }; hazard_pointer_cohort cohort_;

need… • a Container Management Platform, but to network it I need… • a Service Mesh, but to secure it I need… • an automated Certificate Authority, and for more security I need… • a Container scanning and

Practicing Sparrow  https://rust-cloud-native.github.io/  Our new talk "Rust-based Container Runtimes" is coming soon. 2.3 Unified runtime for eBPF and Wasm Summary II. Practicing Sparrow

macOS, and Linux C++ IntelliSense, debug & code browsing CMake, vcpkg and git integrations SSH/container/WSL remote experiences and much much more… https://aka.ms/cpp/code Thu 10/28 – 2pm An Editor Can