While Docker has enabled an unprecedented velocity of software production, it is all too easy to spin out of control. A promotion-based model is required to control and track the flow of Docker images as much as it is required for a traditional software development lifecycle. New tools often introduce new paradigms. We will examine the patterns and the antipatterns for Docker image management, and what impact the new tools have on the battle-proven paradigms of the software development lifecycle.

1. This slide was intentionally left blank

3. whoami
Baruch Sadogursky, JFrog Developer Advocate, @jbaruch

4. JFrog Xray

5. Poll Time!

6. Poll Time!
üHeard about Docker
üCan do the tutorial
üPoCing, playing etc.
üProduction, baby!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

9. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

10. JFrog Artifactory + Docker
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

11. Who’s using Docker and nothing else?

14. The Promotion Pyramid
Development builds
Dev Integration tests
Integr. tests
Staging
Pre-Prod
Prod
Amount of builds
Build/Deploy time
Amount of
binaries

15. Pipeline: Quality Gates and Visibility
Source: Agile ALM, Michael Hüttermann, Manning Publications Co.
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

16. $docker build
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

18. Too easy!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

20. That’s why.
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

21. Let’s fix it!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

22. Let’s fix it (again)!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

23. Let’s fix it (again)!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

24. That’s why you don’t trust Docker
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

25. Traditional Server Pattern
http://martinfowler.com/bliki/ImmutableServer.html
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

26. Immutable Server Pattern
http://martinfowler.com/bliki/ImmutableServer.html
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

29. What’s up with the gates?!

30. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

31. What’s up with the gates?!

32. What’s up with the gates?!
- QA shouldn’t test dev images

33. What’s up with the gates?!
- QA shouldn’t test dev images
- non-tested images shouldn't be
staged

34. What’s up with the gates?!
- QA shouldn’t test dev images
- non-tested images shouldn't be
staged
- non-staged, non-tested or dev
images shouldn’t end up in
production!!!

35. Not so fast…
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

36. Trumped-up limitations
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

37. The Anatomy of Docker Tag
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

38. Wait a second, how can I
have more than one
repository per host now?!

39. How can we support this?
https://host:8081/artifactory/docker-dev/busybox
https://host:8081/artifactory/docker-staging/busybox
https://host:8081/artifactory/docker-qa/busybox
https://host:8081/artifactory/docker-prod/busybox
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

40. “ONEREGISTRYPERHOSTOUGHTTOBEENOUGHFORANYBODY.”

41. Panic!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

42. Virtual hosts/ports to the rescue
https://host:8081/artifactory/docker-dev/busybox
Context name
Virtual repository name
Tag name
https://host:port/v2/busybox

43. server {
listen 5001;
server_name 192.168.99.100;
if ($http_x_forwarded_proto = '') {
set $http_x_forwarded_proto $scheme;
}
rewrite ^/(v1|v2)/(.*) /artifactory/api/docker/docker-dev/$1/$2;
…
}
}
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

44. But then you realize…
Wait a second, now I need
to pull, retag and push for
every step?!

47. Anatomy of a container
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

48. Our Layers
Application:
••.war file
Framework:
••JDK8 + Tomcat
Base:
••ubuntu-trusty

49. Framework build
- Verified base image
- Add system dependencies
from artifactory
- JDK
- Tomcat
- Own it!

50. Minimal Framework build Dockerfile
FROM ubuntu:14.04
MAINTAINER you@yourorg.com
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

51. Application build
- Framework is your base
- Run a java build
- Add a file to base
- Done!

52. Application build Dockerfile
FROM yourorg-docker.jfrog.io/myorg/framework:latest
MAINTAINER you@yourorg.com
ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war
/var/lib/tomcat7/webapps/app.war
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

53. Application build Dockerfile
FROM yourorg-docker.jfrog.io/myorg/framework:latest
MAINTAINER you@yourorg.com
ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war
/var/lib/tomcat7/webapps/app.war
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

54. Application build Dockerfile
FROM yourorg-docker.jfrog.io/myorg/framework:latest
MAINTAINER you@yourorg.com
ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war
/var/lib/tomcat7/webapps/app.war
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

56. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

57. Framework Pipeline
Application Pipeline

58. Framework Pipeline
Application Pipeline

59. Framework Pipeline
Application Pipeline

60. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

62. HIGH QUALITY
(software and information) SPEED LOW COST
(automation)
Fast releases > Modular > Automation
Conclusions: Release Fast or Die!

63. Q&A and Links
• @jbaruch
• #codemash
• http://jfrog.com/shownotes
– Video
– Slides
– Links
– Feedback
– Raffle! (come early)