Docker 1.12 Introduction (Docker Meetup Cluj-Napoca)
0 likes115 views
The document provides an introduction to Docker 1.12, highlighting key features such as Swarm mode, services, distributed application bundles, routing mesh, container health checks, plugins, and enhanced security measures. It outlines commands for initializing Swarm mode, creating services, scaling, and deploying applications. Additionally, the document emphasizes the importance of security with encryption and mutual authentication.
![DOCKER 1.12 INTRODUCTION - PLUGINS
PLUGINS
$ docker plugin install tiborvass/no-remove
$ docker plugin enable no-remove
$ docker plugin disable no-remove
$ docker plugin install tiborvass/no-remove
Plugin “tiborvass/no-remove:latest”
requested the following privileges:
- Networking: host
- Mounting host path: /data
Do you grant the above permissions? [y / N]](https://image.slidesharecdn.com/docker-1-160922203315/85/Docker-1-12-Introduction-Docker-Meetup-Cluj-Napoca-13-320.jpg)
Docker 1.12 Introduction (Docker Meetup Cluj-Napoca)
- 2. DOCKER 1.12 INTRODUCTION WHAT’S NEW? ▸Docker Swarm Mode ▸Services ▸Distributed Application Bundles ▸Routing Mesh ▸Container Healthcheck ▸Plugins ▸Security out of the box
- 3. DOCKER 1.12 INTRODUCTION - SWARM MODE SWARM MODE $ docker swarm init $ docker swarm join <IP-OF-MANAGER>:2377 M W M W W W
- 4. DOCKER 1.12 INTRODUCTION - SERVICES SERVICES $ docker service create —name nginx —replicas 2 —network frontend nginx $ docker network create —driver overlay —subnet 10.0.100.0/24 frontend FRONTEND M W M W W W NGINX NGINX
- 5. DOCKER 1.12 INTRODUCTION - SERVICES NODE FAILURE FRONTEND M W M W W NGINX NGINX W NGINX
- 6. DOCKER 1.12 INTRODUCTION - SERVICES SERVICE SCALING FRONTEND M W M W W NGINX NGINX $ docker service scale nginx=4 NGINX NGINX
- 7. DOCKER 1.12 INTRODUCTION - SERVICES GLOBAL SERVICES FRONTEND M W M W W NGINX NGINX $ docker service create —name agent —mode=global agent:latest NGINX NGINX AG AG AG AGAG
- 8. DOCKER 1.12 INTRODUCTION - SERVICES SERVICE CONSTRAINTS FRONTEND M W M W W $ docker service create —name nginx —replicas 4 —network frontend —constraint com.example.storage=“ssd” nginx docker daemon —label com.example.storage=“ssd” NGINX NGINX NGINX NGINX
- 9. DOCKER 1.12 INTRODUCTION - DAB SERVICES WEB-APP WEB-APP.1 WEB-APP.2 WEB-APP.3 NGINX:LATEST CONTAINER NGINX:LATEST CONTAINER NGINX:LATEST CONTAINER SERVICE TASKS CONTAINERS
- 10. DOCKER 1.12 INTRODUCTION - DAB DISTRIBUTED APPLICATION BUNDLES WEB-APP WEB-APP.1 WEB-APP.2 WEB-APP.3 NGINX:LATEST NGINX:LATEST NGINX:LATEST SERVICE TASKS CONTAINERS STACK WEB-APP WEB-APP.1 WEB-APP.2 WEB-APP.3 NGINX:LATEST NGINX:LATEST NGINX:LATEST SERVICE TASKS CONTAINERS $ docker stack deploy <STACK>
- 11. DOCKER 1.12 INTRODUCTION - ROUTING MESH ROUTING MESH NGINX SERVICE NGINX SERVICE INGRESS NETWORK IPVS 1.1.1.1 IPVS 1.1.1.1 NGINX- CONTAINER 1.1.1.3 NGINX- CONTAINER 1.1.1.4 NGINX- CONTAINER 1.1.1.5 NGINX- CONTAINER 1.1.1.6 172.1.1.10172.1.2.10 port8080port8080EXTERNAL LOAD BALANCER
- 12. DOCKER 1.12 INTRODUCTION - HEALTH CHECKS CONTAINER HEALTH CHECK $ HEALTHCHECK --interval=5m —timeout=3s --retries 3 CMD curl -f http://localhost/ || exit 1 ▸ Checks every 5 minutes if the localhost web server returns the index page within 3 seconds ▸ Container is considered unhealthy after 3 consecutive failures
- 13. DOCKER 1.12 INTRODUCTION - PLUGINS PLUGINS $ docker plugin install tiborvass/no-remove $ docker plugin enable no-remove $ docker plugin disable no-remove $ docker plugin install tiborvass/no-remove Plugin “tiborvass/no-remove:latest” requested the following privileges: - Networking: host - Mounting host path: /data Do you grant the above permissions? [y / N]
- 14. DOCKER 1.12 INTRODUCTION - SECURITY SECURITY ▸ End-to-end encryption between managers and workers ▸ There is no “insecure” ▸ Automatic Encryption and mutual authentication (TLS) ▸ Certificate Rotation ▸ External CA Integration
- 15. Q & A alex.vranceanu@accesa.eu DOCKER 1.12 INTRODUCTION