Deployment with Docker电子书

Title Page

Credits

About the Author

Acknowledgments

About the Reviewer

www.PacktPub.com

Why subscribe?

Customer Feedback

Dedications

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the example code

Downloading the color images of this book

Errata

Piracy

Questions

Containers - Not Just Another Buzzword

The what and why of containers

Docker's place

Introduction to Docker containers

The competition

rkt

System-level virtualization

Desktop application-level virtualizations

When should containerization be considered?

The ideal Docker deployment

The container mindset

The developer workflow

Summary

Rolling Up the Sleeves

Installing Docker

Debugging containers

Seeing what the container sees

Our first Dockerfile

Breaking the cache

A container more practical

Extending another container with FROM

Ensuring the latest patches are included

Applying our custom NGINX configuration

Building and running

Service from scratch

Labels

Setting environment variables with ENV

Exposing ports

Container security layering with limited users

VOLUMEs and data that lives outside of the container

Setting the working directory

Adding files from the internet

Changing the current user

Putting it all together

Summary

Service Decomposition

A quick review

Docker commands

Dockerfile commands

Writing a real service

An overview

What we are going to build

The implementation

Web server

Authentication

The database

The application server

The main application logic

Running it all together

Launching

Testing

Limitations and issues with our implementation

Fixing the critical issues

Using a local volume

Generating the credentials at runtime

Introducing Docker networking

Summary

Scaling the Containers

Service discovery

A recap of Docker networking

Service Discovery in depth

Client-side discovery pattern

Server-side discovery pattern

Hybrid systems

Picking the (un)available options

Container orchestration

State reconciliation

Docker Swarm

Kubernetes

Apache Mesos/Marathon

Cloud-based offerings

Implementing orchestration

Setting up a Docker Swarm cluster

Initializing a Docker Swarm cluster

Deploying services

Cleaning up

Using Swarm to orchestrate our words service

The application server

index.js

The web server

Database

Deploying it all

The Docker stack

Clean up

Summary

Keeping the Data Persistent

Docker image internals

How images are layered

Persisting the writable CoW layer(s)

Running your own image registry

Underlying storage driver

aufs

btrfs / zfs

overlay and overlay2

devicemapper

Cleanup of Docker storage

Manual cleanup

Automatic cleanup

Persistent storage

Node-local storage

Bind mounts

Read-only bind mounts

Named volumes

Relocatable volumes

Relocatable volume sync loss

UID/GID and security considerations with volumes

Summary

Advanced Deployment Topics

Advanced debugging

Attaching to a container's process space

Debugging the Docker daemon

Advanced networking

Static host configuration

DNS configuration

Overlay networks

Docker built-in network mappings

Docker communication ports

High availability pipelines

Container messaging

Implementing our own messaging queue

package.json

index.js

Dockerfile

Advanced security

Mounting the Docker socket into the container

Host security scans

Read-only containers

Base system (package) updates

Privileged mode versus --cap-add and --cap-drop

Summary

The Limits of Scaling and the Workarounds

Limiting service resources

RAM limits

CPU limits

Pitfall avoidance

ulimits

Max file descriptors

Socket buffers

Ephemeral ports

Netfilter tweaks

Multi-service containers

Zero-downtime deployments

Rolling service restarts

Blue-green deployments

Blue-turquoise-green deployments

Summary

Building Our Own Platform

Configuration management

Ansible

Installation

Basics

Usage

Amazon Web Services setup

Creating an account

Getting API keys

Using the API keys

HashiCorp Packer

Installation

Usage

Choosing the right AMI base image

Building the AMI

Deployments to AWS

The road to automated infrastructure deployment

Running the deployment and tear-down playbooks

Continuous integration/Continuous delivery

Resource considerations

First-deploy circular dependency

Further generic CI/CD uses

Summary

Exploring the Largest-Scale Deployments

Maintaining quorums

Node automation

Reactive auto-scaling

Predictive auto-scaling

Monitoring

Evaluating next-gen technologies

Technological needs

Popularity

A team's technical competency

Summary