DockerCon EU 2015 featured breaking news about Docker's growing ecosystem and security focus. Speakers discussed container as a service (CAAS) platforms like Tutum and the universal control plane for on-premise deployments. Docker 1.9 adds production-ready swarm mode for clustering, improved networking and security features like content trust and image scanning. Demos showed multi-host networking overlays, adding persistent volumes, and namespace locking. Upcoming areas of interest include Microsoft Windows Server 2016 native Docker support and unikernel containers.

1. DockerCon EU 2015
& Docker 1.9
WeCraft & Devops - What’s hot

2. Julien Garcia Gonzalez
@jgsqware
jgonzalez@wemanity.com
juliengarcia.github.io
Jean-Marc Meessen
@JM_Meessen
jean-marc@meessen-web.org

3. Agenda
◇ DockerCon EU 2015
￭ Breaking News
￭ CAAS: Container as a service
￮ Tutum
￭ Universal Control Plane
￭ Signing and Content Trust
￭ What’s hot
◇ Break
◇ Let’s Demo Docker 1.9
￭ Swarm: Ready for production
￭ Networking
￭ Volumes
￭ Security

4. DockerCon EU 2015
Breaking News
1

5. Positive Energy
What I’m going to does, whatever level of positivity I had, I’m going to
double that… I’m thinking maybe you want to do that with me!
Solomon Hykes, CTO, Docker Inc.

6. Awesome Keynotes
A good sign of a technology becoming mature is that their user
conference keynote focuses on boring things like security.
@cloud_opinion

7. Huge Eco-system
There is no platform without ecosystem!
Solomon Hykes, CTO, Docker Inc.

8. Huge Eco-system
Great to see the new #Docker plug-in model; integration is critical
for ecosystem uptake and viability. #DockerCon
@DanielKrook

9. Goodies,
Goodies everywhere Sidekicks

10. Crazy party!

11. Probably
the best conference
in Europe

12. CAAS
Container-as-a-Service
2

13. CAAS: Container-as-a-Service

14. CAAS in cloud: Tutum

15. CAAS in cloud: Tutum

16. CAAS on-premise: Universal Control
Plane

17. Focus on
“Docker in Production”
Key aspect of this is Security
3

18. What’s the problem?
◇ Where the hell is this image/container coming from ?
◇ Has it been tampered with ?
◇ Are there any (new) vulnerabilities ?

19. Reminder...
Docker wants to be a
“Tool of mass innovation”

20. Docker in production
(lack of) Security is like an industry that doesn’t care for pollution

21. Docker takes this responsibility seriously
but….
Docker in production

22. Docker in production

23. Hardware based signing
"We have a password manager? I haven't even met her…
@aanand

24. Image scanning with Nautilus.
"Know your content. @docker Project Nautilus audits Official Repos
with image scanning and vuln detection #dockercon
@BettyJunod

25. Image scanning with Nautilus.
Docker Doubles Down on Security w/ Nautilus, Hardware Encryption
@yubico

26. Isolations supported by Docker Engine 0.1

27. Isolation supported by Engine/Swarm 1.9

28. Keep an eye on:
Microsoft
Windows Server 2016
Native support of Docker
UniKernel
Unikernels, meet Docker!
2.1M Nginx Docker image
zero attack surface
DockerCraft
A simple Minecraft Docker
client, to visualize and
manage Docker containers.

29. Break
See you in 15 min!

30. DockerCon EU 2015
& Docker 1.9
WeCraft & Devops - What’s hot

31. Multi-host Network
Overlay network for Webapp stack with Swarm
1

32. Network: Overlay

33. Demo
Pray the demo’s gods!

34. Volumes
Let’s add some persistent volume
2

35. Security
Namespace locking & Content trust
3

36. Demo
Pray the demo’s gods!

37. Thanks!
Any questions?

38. Bring it Home!
Slide on Slideshare
Source on Github

39. Sources
◇ Dockercon EU 2015 Photos - Slidedecks
◇ Dockercon EU 2015 Day 1 - General Session
◇ Dockercon EU 2015 Day 2 - General Session
◇ Dockercon EU 2015 Day 1 - Black Belt
◇ Dockercon EU 2015 Day 2 - Black Belt
◇ Dockercon EU 2015 Day 1 - Wild Card
◇ Dockercon EU 2015 Day 2 - Wild Card
◇ Dockercon EU 2015 - Ecosystem
◇ Dockercon EU 2015 Use cases

40. Credits
Special thanks to all the people who made and released
these awesome resources for free:
◇ Presentation template by SlidesCarnival
◇ Photographs by Unsplash