0507 057 01 98 * Adana Klima Tamir Servisi, Adana Klima Tamir Servisi, Adana Klima Tamir Servisleri, Arçelik Klima Tamir Servisi Adana, Beko Klima Tamir Servisi Adana, Demirdöküm Klima Tamir Servisi Adana, Vestel Klima Tamir Servisi Adana, Aeg Klima Tamir Servisi Adana, Bosch Klima Tamir Servisi Adana, Ariston Klima Tamir Servisi Adana, Samsung Klima Tamir Servisi Adana, Siemens Klima Tamir Servisi Adana, Profilo Klima Tamir Servisi Adana, Fujitsu Klima Tamir Servisi Adana, Baymak Klima Tamir Servisi Adana, Sharp Klima Tamir Servisi Adana, Mitsubishi Klima Tamir Servisi Adana, Alaska Klima Tamir Servisi Adana, Aura Klima Tamir Servisi Adana, Adana Çukurova Klima Servisleri, Adana Yüreğir Klima Servisleri, Adana Seyhan Klima Servisleri

1. Container as a Service with Docker
Patrick Chanezon, Docker Inc.
@chanezon

2. French
Polyglot
Platforms
Software Plumber
San Francisco
Developer Relations
@chanezon

3. 1995 2015

4. “The future is already here — it's
just not very evenly distributed”
William Gibson, Neuromancer

5. Docker’s mission is to
build tools of mass innovation

6. Internet (hardware layer)
Servers Desktops Phones Cars Houses Drones
Network
equipment
Public
transit
TVs
Industrial
facilities
Scientific
instruments
Financial
system
Programmers
Internet (software layer)
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App

7. Internet (hardware layer)
Servers Desktops Phones Cars Houses Drones
Network
equipment
Public
transit
TVs
Industrial
facilities
Scientific
instruments
Financial
system
Programmers
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
App
a software layer to program the internet

8. Cloud Market
PublicHybridPrivate
IT Pros Devops DevelopersArchitects

9. Linux Container Ecosystem
flockerglusterfs
weavecalicomidokuracisconuage
Cloud
OS
Plugins
Orchestration

10. Devops

11. 25
Mainframe

12. Client-Server
26

13. 27
Web

14. 28
Cloud - Devops

15. 25
Mainframe

16. Devops
• Cultural movement
• Inspired by agile methods
• People, Processes & Tools
• Continuous delivery
• Infrastructure as code
• Cross silo collaboration
• Small iterations
• Feedback loop, measurement
Image from Patrick Debois
http://www.slideshare.net/jedi4ever/devops-the-war-is-over-if-you-want-it
http://www.slideshare.net/jedi4ever/devopsdays-downundervfinal

17. Devops: singing Kumbaya?

21. Low MTBIAMSH
MTBIAMSH (Mean Time Between Idea And Making Stuff Happen)

22. Devops + Agility == $$

23. Docker

26. Isolation using Linux kernel features
namespaces
 pid
 mnt
 net
 uts
 ipc
 user
cgroups
 memory
 cpu
 blkio
 devices

27. Image layers

28. Docker Mission

29. Docker for developers
https://registry.hub.docker.com/_/java/

30. docker-compose: running multiple containers
 Run your stack with one command: docker-compose up
 Describe your stack with one file: docker-compose.yml
web:
build: .
command: python app.py
ports:
- "5000:5000"
volumes:
- .:/code
links:
- redis:redis
redis:
image: redis

31. Docker for Mac and Windows private beta
https://beta.docker.com/

32. default
DOCKER_HOST=tcp://xxx.xxx.xxx.xxx:2376
DOCKER_MACHINE_NAME=default
DOCKER_TLS_VERIFY=1
DOCKER_CERT_PATH=$HOME/.docker/machine/machines/default
IP xxx.xxx.xxx.xxx
manages
Docker Toolbox

33. unset ${!DOCKER_*}
docker.local
symlink /var/tmp/docker.sock
manages
Docker for Mac

34. unset ${!DOCKER_*}
docker.local
symlink /var/tmp/docker.sock
manages
default
IP xxx.xxx.xxx.xxx
manages
DOCKER_HOST=tcp://xxx.xxx.xxx.xxx:2376
DOCKER_MACHINE_NAME=default
DOCKER_TLS_VERIFY=1
DOCKER_CERT_PATH=$HOME/.docker/machine/machines/default
Docker for Mac and Toolbox

35. Linux X11 Apps on Docker for Mac
https://github.com/chanezon/docker-tips/x11

36. docker-machine
docker-machine create -d azure
—azure-subscription-id="c4f51be3-784c-xxx-7c50ad9e1b7c"
--azure-subscription-cert="/Users/pat/.ssh/docker-azure-
cert.pem"
--azure-location="East US"
--azure-size=Small
--azure-username="pat"
pat-docker-machine-n

38. Kitematic

39. Docker Mission

40. Docker Hub

41. Docker Hub
Dev & QA
ColleaguesDevelopers
QA
Build & Ship

42. Docker Trusted Registry

44. Docker Mission

45. Swarm
Scheduler plugins
Engine
Volumes plugins
Network plugins
Service discovery
plugins
Engine
Volumes plugins
Network plugins
Service discovery
plugins
mesos
flockerglusterfs
weavecalico
consuletcdzookeeper
midokuraciscoazurenuagenetworks
Docker Plugins
Batteries included but removable

46. Docker
CLI
Docker
CLI
Docker
CLI
Docker Engine

47. us-west us-east
Docker
CLI
Docker
CLI
Docker Swarm
Swarm

48. Swarm load balancing: interlock
https://github.com/ehazlett/interlock/tree/master/plugins/haproxy

49. 51
Docker Datacenter

50. 52
Docker Cloud

51. Open Standards

53. Plumbing

54. Notary
“Let’s stop using curl|sh”
Trusted collections for any content
Transport-agnostic
Reliable updates, proof of origin, resistant to untrusted
transport, survivable key compromise
Build on industry-leading standards and research

55. RunC
The universal container runtime
https://runc.io

56. containerd
A daemon to control runC
built for performance and density
http://containerd.tools/

57. containerd

58. Docker 1.11

59. Docker & Microsoft

60. Docker & Microsoft
• Build
• Docker Toolbox & Kitematic for Windows
• Docker for Windows beta
• Docker engine on Windows Server 2016 TP4
• yo-docker to dockerize existing projects
• Visual Studio Docker Tools
• Ship
• VSTS extension for Docker beta
• Run
• Azure Docker agent
• ACS
• Docker datacenter on Azure ARM template

61. Unikernels

62. Unikernel Systems + Docker

63. Unikernels
http://unikernel.org/

64. Unikernels
specialised, single-address-space machine images
constructed by using library operating systems.
• Smaller
• link only the parts of the OS lib you need
• Faster
• fast boot
• compiler can perform whole-system optimization
• More secure
• reduced attack surface

65. Unikernels & Docker
http://unikernel.org/blog/2015/unikernels-meet-docker/
https://github.com/Unikernel-Systems/DockerConEU2015-demo

66. Docker CaaS

67. The Docker mission
Build Ship Run
Anywhere
Distributed Applications
70

68. XaaS Pyramid
Platform As A Service
Infrastructure As A Service
Software
As A Service

71. 5
Goldilocks and the 3 XaaS
Just rightToo highToo low
IaaS PaaS CaaS

72. 5
Goldilocks and the 3 XaaS
Platform As A Service
Infrastructure As A Service
Software
As A Service
Too high
Too low
Just right
Container As A Service

73. 5
Goldilocks and the 3 XaaS
Container As A Service
Infrastructure As A Service
Software
As A Service

74. Docker Containers as a Service (CaaS)
An IT managed and secure application content and infrastructure
where developers can self service build and deploy applications

75. The Docker Journey: The Power of AND
78
Manage and secure
at scale
Frictionless
movement
Innovation at
speed
+ +Agility Portability Control

76. Docker survey 2016 - Enabling the Software Supply Chain
79

77. Lessons learned: Avoid these pitfalls
1
2
3
Developers don’t adopt locked down systems
Existing “end to end” solutions break the
Docker experience
Beware of lock-in and loss of portability
80

78. Let’s Play: Where’s Whaledo

79. in Google Container Engine?
$ docker build -t gcr.io/${PROJECT_ID}/hello-node .
$ gcloud docker push gcr.io/${PROJECT_ID}/hello-node
$ gcloud container clusters create hello-world
--num-nodes 1
--machine-type g1-small
$ kubectl run hello-node --
image=gcr.io/${PROJECT_ID}/hello-node --port=8080
$ kubectl get services hello-node
$ kubectl scale rc hello-node --replicas=3
https://cloud.google.com/container-engine/docs/tutorials/hello-node

80. in Kubernetes?

81. in EC2 Container Service?
$ ecs-cli up --keypair id_rsa --capability-iam
—size 2 --instance-type t2.medium
create a compose file
$ ecs-cli compose --file hello-world.yml up
$ ecs-cli ps
$ ecs-cli compose --file hello-world.yml scale 2
$ ecs-cli compose --file hello-world.yml service up
http://docs.aws.amazon.com/AmazonECS/latest/developerguide/ECS_CLI_tutorial.html

82. in Red Hat?
$ ./openshift kube apply -c docker-registry-config.json
OpenShift relies on the concept of Builds to turn your
application source into a runnable Docker image
$ ./openshift kube create buildConfigs -c application-
buildconfig.json
$ curl -s -A "GitHub-Hookshot/github" -H "Content-
Type:application/json" -H "X-Github-Event:push" -d @github-
webhook-example.json
http://localhost:8080/osapi/v1beta1/buildConfigHooks/build100/se
cret101/github
$ ./openshift kube process -c application-template.json |
./openshift kube apply -c -
https://blog.openshift.com/openshift-v3-deep-dive-docker-kubernetes/

83. in Red Hat?
https://blog.openshift.com/openshift-v3-deep-dive-docker-kubernetes/

84. in Pivotal Cloud Foundry?
$cf api --skip-ssl-validation api.bosh-lite.com
$cf auth admin admin
$cf create-org diego
$cf target -o diego
$cf create-space diego
$cf target -s diego
$cf push my-app --no-start
$cf start my-app
https://github.com/cloudfoundry-incubator/diego-release

85. in Pivotal Cloud Foundry?
runC

86. Developers IT Operations
BUILD
Developer Workflows
SHIP
Secure Content & Collaboration
RUN
Deploy, Manage, Scale
Docker CaaS Platform

87. Docker Containers as a Service platform
90
BUILD
Developer Workflows
SHIP
Registry Services
RUN
Management
Docker Toolbox Docker Trusted Registry Docker Universal Control Plane
Docker Cloud
Docker Engine
Ecosystem Plugins and Integrations

88. Characteristics of a CaaS
91
Any
Infrastructure
Any Operating
System
Any
Language
Any App
Architecture
Any
Application
Stage
Developers
+ IT Ops
The Power of AND
Open APIs
Broadest Ecosystem Support

89. Docker accelerates modern app initiatives
Cloud
Microservices
80%
Docker is central to
cloud strategy
State of App development Survey: Q1 - 2016
3 out 4
Top initiatives revolve
around applications
44%
Looking to adopt
DevOpsDevOps
92

90. Use Case: Decentralized CaaS for hybrid and multi cloud portability
Private datacenter for regulated apps
Central Portal
• Provision resources
• RBAC to VPC / datacenter
• Trusted Registry hosted
application templates
Cloud for all other apps
VPC 1 VPC2
App 1 App 2 App
App 1 App 2 App
Cloud
Portability
App
Portability

91. Use Case: Centralized CaaS for transformation to DevOps and micro services
After
Authorization
App Registration
Session
Management
Marketplace
Integration
Logging
…more
Trusted RegistryApp Service App Service
App A App B
Auth
…more
App Reg
Marketplace
Logging
Auth
Session
…more
App Reg
Logging
Before
App Teams
App BAuth
App Reg Marketplace
Logging
App Service
Universal Control Plane
App AAuth
App Reg Marketplace
Logging
App Service
App BAuth
App Reg Marketplace
Logging
App Service
App AAuth
App Reg Marketplace
Logging
App Service
Portability

92. Demos

93. • Docker Swarm, Compose and networking
• docker 1.11
• swarm 1.1.0
• compose 1.6.0 with networking
• Run/Debug with STS IDE in
a container
Spring Boot App using MongoDB
https://github.com/joshlong/spring-doge
https://github.com/chanezon/docker-tips/orchestration-networking
https://github.com/chanezon/spring-doge

94. Docker Universal Control Plane
https://github.com/chanezon/docker-tips/tree/master/azure-acs-ucp

95. Load balancing in UCP with Interlock
See "Reference Architecture: Service Discovery and Load Balancing with Docker Universal Control Plane (UCP)"

96. ucp-controller
Cloud LB
ucp-node-1 ucp-node-2
Cloud LB
etcd InterlockSwarm ucp-proxy nginx nginx
Configuration
Reconfigures
myapp:314
myapp:42
myapp:1968
myapp.comdocker run myapp
Load balancing in UCP with Interlock
https://github.com/chanezon/docker-tips/orchestration-networking
Interlock
Events

97. THANK YOU

98. Let’s Dockerize a Neo4J App
https://github.com/neo4j-examples/movies-java-spring-data-neo4j-4

99. • Service Discovery
• https://github.com/gliderlabs/registrator
• https://github.com/hashicorp/consul-template
• https://github.com/ehazlett/interlock
• Persistent volumes with Swarm and Rex Ray on AWS
• http://blog.emccode.com/2015/11/03/use-docker-swarm-with-a-data-
persistence-layer/
• https://github.com/emccode/rexray
• Kubernetes on Swarm
• https://github.com/docker/swarm-frontends
Orchestration projects

100. • IPVS, Andrey Sibiryov, http://www.slideshare.net/Docker/kernel-load-
balancing-for-docker-containers-using-ipvs
• DNS Service Discovery for Docker Swarm, Ahmet Alp Balkan,
http://www.slideshare.net/Docker/dns-service-discovery-for-docker-swarm
Load Balancing

101. • Spring Boot, MongoDB, compose, swarm, networking
• https://github.com/joshlong/spring-doge
• https://github.com/chanezon/docker-tips/orchestration-networking
• Java EE 7 / Angular App with Docker Swarm by @mgreau
Compose for build and deploy, Wildfly, Apache, Angular, Mysql, Redis,
batch and API apps
• https://github.com/mgreau/docker4dev-tennistour-app
• Java EE Docker & Kubernetes by @arun-gupta
• https://github.com/javaee-samples/docker-java
Java Examples

102. • Docs
https://docs.docker.com/engine/userguide/networking/dockerne
tworks/
• Create a Swarm cluster with networking
https://github.com/chanezon/docker-tips/orchestration-
networking
• Networking in compose
https://github.com/docker/compose/blob/master/docs/networki
ng.md
• Nathan Leclaire Seamless Docker Multihost Overlay Networking
on DigitalOcean With Machine, Swarm, and Compose,
Docker networking

103. • Using Ansible with Docker Machine to Bootstrap Host Nodes
http://nathanleclaire.com/blog/2015/11/10/using-ansible-with-
docker-machine-to-bootstrap-host-nodes/
• Seamless Docker Multihost Overlay Networking on DigitalOcean
With Machine, Swarm, and Compose, RethinkDB
http://nathanleclaire.com/blog/2015/11/17/seamless-docker-
multihost-overlay-networking-on-digitalocean-with-machine-
swarm-and-compose-ft.-rethinkdb/
Nathan’s tips