Docker, Virtualization, Swarm.

1. basics
Biztositás.hu Kft.
Peter Perger

4. Virtual
Machine
Hardware
Software
Virtualization

5. In computing, virtualization refers
to the act of creating a virtual
(rather than actual) version of
something, including virtual computer
hardware platforms, storage devices,
and computer network resources.
Wikipedia

6. CP-40
1967 - IBM's Cambridge Scientific Center

7. The creation of a virtual machine that acts like a real
computer with an operating system.
Hardware virtualization

8. Hypervisors
Platform virtualization softwares
• Citrix Xen Server
• Microsoft Hyper-V
• Red Hat KVM
• VMware vSphere
• Canonical LXC
• Oracle VirtualBox

9. OS-level virtualization

11. The Benefits Of
Containers
- Application level isolation
- Faster to set up and scale than VM
- Takes less memory and space than VM
- Faster communication between containers
- Improves application deployment and
maintenance due to self-contained container
images.
- Reduces time to deliver the application

16. Linux Kernel Features

17. Namespaces

18. Control groups

19. Image Layers

20. Docker
Hub
GitHub
Dockerfile -> Push -> Github -> Build -> Dockerhub -> Pull -> Container
Registry

21. Container Data

22. Client
• Docker runs as a root-privileged daemon process
• The daemon listens on a Unix socket
• We can specify multiple bindings
• User interfaces: Docker, Portainer, Shipyard.

23. Networks

25. Bridge Network

26. Overlay Network

27. Docker Security
•Just use Docker in default settings
•Scan your hosts for proper Docker config (DBS)
•Don't run apps in containers as root
•App and OS dependency scanning (CVE)
•Don't expose the Docker TCP socket
•Enable "user namespaces"
•Runtime Bad Behavior Monitoring (Sysdig Falco)
•Content Trust
•Check AppArmor, SELinux, Seccomp
•Docker root-less

28. Docker Swarm

29. Computer Cluster

36. Features
• Certifications
• Compose
• Secrets
• Update
• Healthcheck

38. • Simple architecture
• No auto scaling
• Easy to start a cluster
• Limited API capabilities
• Auto load balancing
• No GUI
• No auto rollbacks
• Third party mon. and log.
• Only 10-20 cont. in prod
• Complex architecture
• Auto scaling
• Hard to start a cluster
• Advanced API capabilities
• Manually load balancing
• Has GUI
• Auto rollbacks in failure
• Monitoring and logging
• 100-1000 cont. in prod
Docker Swarm Kubernetes

41. Workshop
x
Host (Windows 10 with Hyper-V)
Docker
Browser Files (Volumes, Mounts)
LAMP Network (Bridge)
Docker-Compose (YML)
PHP MySQL
ELK Network (Bridge)
Docker-Compose (YML)
Elastic
Search
Log
Stash
Kibana
Logstash Network (Bridge)
Apache
Apache, Logstash