Hands on Docker - Launch your own LEMP or LAMP stack - SunshinePHP

@danaluther
Hands on Docker:
Launch Your Own LEMP or LAMP Stack
Dana Luther
https://git.io/JvUy5
https://joind.in/talk/d1bc3

@danaluther
What are we going to do today, Brain?
Set up standard LAMP and LEMP stacks using Docker stack
Modify the stack to mimic production
Run codeception test suites against our application
Learn how to swap out php versions
Add and remove additional services

@danaluther
Where are you on your Docker
journey?
Brand new to this
rodeo…
Docker containers are
my jam!
I am Docker.

@danaluther
Everyone set up and ready?
Docker Desktop installed and running
Checked out the GIT repo
Pulled the docker images
Anyone using Windows? Set to use LCOW?

@danaluther
Moving beyond containers…

@danaluther
Image Container Service Stack

@danaluther
Image Container Service Stack App

@danaluther
Release the swarm!
> docker swarm init

@danaluther
Basic LAMP Stack
docker-compose.yml
php:7.4-apache
mysql
01_LAMP

@danaluther
Basic LAMP Stack
version: "3.7"
services:
php:
# https: //hub.docker.com/_/php
image: php:7.4-apache
ports:
- 80:80
volumes:
- ./src:/var/ www/html
db:
image: mysql
environment:
- MYSQL_ROOT_PASSWORD_FILE=/run/secrets/db_pwd
secrets:
- db_pwd
secrets:
db_pwd:
file: ./root_db_password.txt
docker-compose.yml
01_LAMP

SIDEBAR:
@danaluther
https://docs.docker.com/compose/compose-ﬁle/
Docker compose ﬁle reference

SIDEBAR:
@danaluther
What’s in a secret?

@danaluther
Basic LAMP Stack
> docker stack deploy -c docker-compose.yml hod
Make sure you are on the 01_LAMP branch of the workshop repo
01_LAMP

@danaluther
Verify the services have all launched
> docker service ls
01_LAMP

SIDEBAR:
@danaluther
Stuck and not sure what the
problem is?
> docker stack ps hod --no-trunc

⚠ Common “Gotcha”
@danaluther
No public port for MySQL unless you *want* to expose it externally.

SIDEBAR:
@danaluther
What’s in a stock PHP image?
> docker run --rm php:7.4-fpm php-fpm -m

SIDEBAR:
@danaluther
What’s in a stock PHP image?

@danaluther
Creating our custom PHP image
Add the mysqli and PDO_mysql
extensions
Use build args in the Dockerﬁle
ARG PHP_TARGET=7.4-apache
FROM php:$PHP_TARGET
RUN docker-php-ext-install
-j$(nproc) mysqli pdo_mysql
02_LAMP

@danaluther
Enabling Buildkit
https://docs.docker.com/develop/develop-images/build_enhancements/

@danaluther
Creating our custom PHP image
> docker image build -f Dockerfile-php-mysql
-t dhluther/php:7.4-apache-mysql .
From the /images/ directory:
02_LAMP

@danaluther
Update our LAMP stack
version: "3.7"
services:
php:
# Custom PHP Image - see /images/Readme.md
image: dhluther/php:7.4-apache-mysql
ports:
- 80:80
volumes:
db:
image: mysql
environment:
secrets:
- db_pwd
secrets:
db_pwd:
02_LAMP

@danaluther
Re-deploy the LAMP stack

@danaluther
<?
/**
* mysql-check.php
*/
try
{
$db = new PDO('mysql:host=db', 'root', 'sup3rs3cr3tp4ssw0rd');
echo 'MySQL Version: ',
$db ->getAttribute(PDO ::ATTR_CLIENT_VERSION);
} catch (Exception $e)
{
echo 'Aw shucks pardner, ', $e ->getMessage();
}
02_LAMP

@danaluther
Checking the service logs
02_LAMP
> docker service logs hod_php

@danaluther
Take the stack down
02_LAMP
> docker stack rm hod

@danaluther
Basic LEMP Stack
docker-compose.yml
php:7.4-fpm
mysql
nginx
03_LEMP

@danaluther
Basic LEMP Stack
03_LEMP
version: "3.7"
services:
php:
image: dhluther/php:7.4-fpm-mysql
volumes:
…db…
web:
image: nginx
ports:
- 80:80
- 443:443
volumes:
configs:
- source: nginx-conf
target: /etc/nginx/conf.d/default.conf
secrets:
db_pwd:
configs:
nginx-conf:
file: ./nginx/default.conf

@danaluther
Creating our custom PHP-FPM image
-t dhluther/php:7.4-fpm-mysql .
--build-arg PHP_TARGET=7.4-fpm
From the /images/ directory:
03_LEMP

@danaluther
Deploy the LEMP stack
03_LEMP

@danaluther
NO PERSISTENT DATA!
03_LEMP

@danaluther
db:
image: mysql
environment:
secrets:
- db_pwd
NO PERSISTENT DATA!
03_LEMP

@danaluther
PERSISTENT DATA!
04_LEMP

@danaluther
db:
image: mysql
environment:
volumes:
- ./data:/var/lib/mysql
secrets:
- db_pwd
PERSISTENT DATA!
04_LEMP

@danaluther
Fresh deploy the Stack
04_LEMP
> docker network ls

@danaluther
Quick Break - Stretch!

@danaluther
The stack is standard, but are we?

@danaluther
Customized conﬁg ﬁles:
php.ini and php.conf
my.conf
nginx.conf

@danaluther
Customized conﬁg ﬁles:
php.ini and php.conf
my.conf
nginx.conf
Customized images:
my/php
my/mysql
my/nginx

@danaluther
Basic LEMP Stack (ﬂashback)
03_LEMP
version: "3.7"
services:
php:
volumes:
…db…
web:
image: nginx
ports:
- 80:80
- 443:443
volumes:
configs:
secrets:
db_pwd:
configs:
nginx-conf:

@danaluther
What’s in the default nginx.conf?
> docker run --rm nginx cat /etc/nginx/nginx.conf

@danaluther05_LEMP
# Max file size for uploads
client_max_body_size 20m;
# Sets the cache for 1k items for 1 minute
open_file_cache max=1000 inactive=20s;
open_file_cache_valid 60s;
open_file_cache_min_uses 5;
open_file_cache_errors off;
# GZIP compression settings, text/html is automatically compressed
gzip on;
gzip_disable "msie6";
gzip_vary on;
gzip_comp_level 5;
gzip_buffers 16 8k;
gzip_min_length 350;
gzip_proxied any;
gzip_types application/atom+xml application/rss+xml application/x-javascript application/javascript application/json text/plain text/css text/x-
component text/x-cross-domain-policy text/javascript;
# disable auto-index across the board by default
autoindex off;
# disable server side includes by default
ssi off;

@danaluther
Update NGiNX conﬁgs
05_LEMP
version: "3.7"
services:
php:
volumes:
…db…
web:
…
configs:
- source: nginx-base—conf
target: /etc/nginx/nginx.conf
secrets:
db_pwd:
configs:
nginx-conf:
nginx-base-conf:
file: ./nginx/nginx.conf

@danaluther
What’s in our PHP conﬁg?

@danaluther
What might you need to customize?
Timezone setting
Error reporting
Output caching and buffering
Listen directives
Ping/Status directives
Timeouts and extension limitations

@danaluther
Create custom .ini and .conf ﬁles
tz.ini — /usr/local/etc/php/conf.d/
custom.ini — /usr/local/etc/php/conf.d/
www.mysite.conf — /usr/local/etc/php-fpm.d/
05_LEMP

@danaluther
Update php image Dockerﬁle
05_LEMP

@danaluther
Build the php image
-t dhluther/php:7.4-fpm-mysql-c
--target=customized .
05_LEMP

@danaluther
Build the php image
05_LEMP

@danaluther
Update compose with new php image
php:
image: dhluther/php:7.4-fpm-mysql-c
volumes:
- ./src:/var/www/html

@danaluther
Deploy stack updates

@danaluther
Verify ini ﬁles loaded

@danaluther
Quick Break - Get some water!

@danaluther
Great - we match production.
But what about testing??

@danaluther
Add xdebug and blackﬁre probe
07_LEMP

@danaluther
(the full xdebug install commands)
07_LEMP
RUN yes | pecl install xdebug
&& echo "zend_extension=$(find /usr/local/lib/php/extensions/ -name xdebug.so)"
> $PHP_INI_DIR/conf.d/xdebug.ini
&& echo "xdebug.remote_enable=on" >> $PHP_INI_DIR/conf.d/xdebug.ini
&& echo "xdebug.remote_autostart=off" >> $PHP_INI_DIR/conf.d/xdebug.ini
EXPOSE 8080 80 9000 9001

@danaluther
Build the debug image
07_LEMP
-t dhluther/php:7.4-debug
--target=debug .

SIDEBAR:
@danaluther
https://blackﬁre.io/docs/integrations/docker
blackfire:
image: blackfire/blackfire
ports:
- "8707:8707"
environment:
# Tokens for your account
- BLACKFIRE_CLIENT_ID=<insert id here>
- BLACKFIRE_CLIENT_TOKEN=<insert token here>
# Tokens for your environment
- BLACKFIRE_SERVER_ID=<insert id here>
- BLACKFIRE_SERVER_TOKEN=<insert token here>
- BLACKFIRE_LOG_LEVEL=4

@danaluther
07_LEMP

SIDEBAR:
@danaluther
Support the tools you use
https://www.patreon.com/derickr

@danaluther
What and how do we want to test?
Use composer to require testing framework

@danaluther
Update compose with composer
composer:
image: composer:latest
command: ['bash','-c',"sleep infinity"]
volumes:
08_LEMP

@danaluther
08_LEMP

@danaluther
Initialize composer
> docker exec -it $(docker ps -lq -f name=hod_composer)
bash
08_LEMP

SIDEBAR:
@danaluther
> docker ps -lq -f name=stack_service
The command to rule them all …
> docker exec -it 36fce0da4a8f bash
> docker exec -it $(docker ps -lq -f name=hod_php)
bash

SIDEBAR:
@danaluther
Don’t want to mess with the
composer install today?
Use the “with_vendor” branch alternates
I got you!
09_LEMP_with_vendor
10_LEMP_with_vendor

@danaluther
Require codeception
bash-5.0# composer require codeception/codeception --dev
08_LEMP

@danaluther
Alternately … composer install
bash-5.0# composer install
09_LEMP

@danaluther
Conﬁrm codeception installation
09_LEMP

@danaluther
Access via a php container
bash
09_LEMP

@danaluther
Verify that you can run unit tests
10_LEMP

@danaluther
(What did we just run?)
require '/var/ www/html/DemoQuickCalculator.php';
class testSampleTest extends CodeceptionTestUnit
{
/**
* @var UnitTester
*/
protected $tester;
// tests
public function testBasicMath()
{
$this ->assertEquals(4, DemoQuickCalculator ::alwaysEquals4());
}
}

@danaluther
(What did we just run?)
/**
* Class DemoQuickCalculator
* Quick and dirty class to show that we can run unit tests
*/
class DemoQuickCalculator
{
/**
* @return int
*/
public static function alwaysEquals4(): int
{
return 2+2;
}
}

@danaluther
Make it fail …
/**
* Class DemoQuickCalculator
* Quick and dirty class to show that we can run unit tests
*/
class DemoQuickCalculator
{
/**
* @return int
*/
public static function alwaysEquals4(): int
{
return 2+3;
}
}

@danaluther
Run the test again …
10_LEMP

@danaluther
Enable headless browsers for testing

@danaluther
Update docker-compose.yml with Chrome and Firefox images

@danaluther
Default to 0 containers - scale the service up/down as needed

@danaluther
Default to 0 containers - scale the service up/down as needed
Take advantage of YAML anchors in the .yml to keep the compose ﬁle dry

SIDEBAR:
@danaluther
What are YAML anchors?
Additional Resources
https://nickjanetakis.com/blog/docker-tip-82-using-yaml-anchors-and-x-properties-in-docker-compose
https://conﬂuence.atlassian.com/bitbucket/yaml-anchors-960154027.html
Anchor &
Alias *
Override <<:

@danaluther
Setting up x-defaults
x-defaults:
network: &network
networks:
- net
selenium-services: &selenium-svc
environment:
# Required to avoid container startup hanging sometimes in
# some environments
JAVA_OPTS: -Djava.security.egd=file:/dev/./urandom
ports:
- "4444:4444"
deploy:
replicas: 0
restart_policy:
condition: on-failure
<<: *network
10_LEMP

SIDEBAR:
@danaluther
The deploy block
selenium-services: &selenium-svc
…
deploy:
replicas: 0
restart_policy:

@danaluther
Implementing x-default network
php:
image: dhluther/php:7.4-debug
volumes:
<<: *network
…
networks:
net:
10_LEMP

@danaluther
Setting up Chrome and Firefox
#Used for Acceptance Tests for Firefox
ﬁrefox:
image: selenium/standalone-ﬁrefox-debug:2.53.0
<<: *selenium-svc
#Used for Acceptance Tests for Chrome
chrome:
image: selenium/standalone-chrome-debug
<<: *selenium-svc
ports:
- "4443:4444"
10_LEMP

@danaluther
Deploy and Scale services
10_LEMP

@danaluther
What if we forget to scale up chrome?
10_LEMP

@danaluther
So how do we swap out php
versions?

@danaluther
Build the 7.3-fpm image
10_LEMP

@danaluther
10_LEMP
-t dhluther/php:7.3-debug
--target=debug .

@danaluther
10_LEMP

@danaluther
Update the service
> docker service update
--image=dhluther/php:7.3-fpm-mysql-c
hod_php

POPQUIZ!
@danaluther
Does anyone remember how to get
into the container to run our unit
test?

POPQUIZ!
@danaluther
Does anyone remember how to get
into the container to run our unit
test?
bash

@danaluther
Verify the MySQL page

@danaluther
Roll back the service
> docker service rollback hod_php

SIDEBAR:
@danaluther
Updates and rollbacks happen
sequentially when affecting a
service with more than one
container running.

SIDEBAR:
@danaluther
Update a service…

SIDEBAR:
@danaluther
Rollback a service…

@danaluther
But what about additional services?

@danaluther
Add new services to our stack
phpMyAdmin — https://www.phpmyadmin.net/
Redis — https://redis.io/

@danaluther
Deﬁne the phpMyAdmin service
phpmyadmin:
image: phpmyadmin/phpmyadmin
environment:
- PMA_ARBITRARY=1
deploy:
replicas: 1
restart_policy:
ports:
- 8081:80
<<: *network
volumes:
- /sessions
11_LEMP

@danaluther
11_LEMP

@danaluther
Deﬁne the redis service
redis:
image: redis:latest
volumes:
- ./data_redis:/data
deploy:
placement:
constraints: [node.role == manager]
<<: *network
12_LEMP

@danaluther
12_LEMP

@danaluther
Verify redis is running

@danaluther
Can I use a GUI to help me?

@danalutherhttps://portainer.io

@danaluther
Deploy the portainer stack
> docker stack deploy -c docker-compose-portainer.yml
hod_port
12_LEMP

@danaluther
Shut it down!
> docker swarm leave --force
> docker stack rm hod_port

@danaluther
Questions??
🤔
?
? ?
?
https://www.linkedin.com/in/danaluther
dluther@envisageinternational.com
https://git.io/JvUy5
https://joind.in/talk/d1bc3

Hands on Docker - Launch your own LEMP or LAMP stack - SunshinePHP

Hands on Docker - Launch your own LEMP or LAMP stack - SunshinePHP

Recommended

More Related Content

What's hot

What's hot(20)

Similar to Hands on Docker - Launch your own LEMP or LAMP stack - SunshinePHP

Similar to Hands on Docker - Launch your own LEMP or LAMP stack - SunshinePHP(20)

More from Dana Luther

More from Dana Luther(10)

Recently uploaded

Recently uploaded(20)

Hands on Docker - Launch your own LEMP or LAMP stack - SunshinePHP