Building a Docker v1.12 Swarm cluster on ARM

•Download as PPTX, PDF•

5 likes•1,482 views

This document discusses building a Docker Swarm cluster on Raspberry Pi nodes using HypriotOS. It provides instructions for setting up the necessary hardware including Raspberry Pis, a switch and power supplies. It then outlines the steps to flash the HypriotOS SD card image, configure the nodes using docker-machine, and initialize a Docker Swarm manager and join worker nodes to create a 4 node cluster. Finally, it demonstrates running demo Docker services and scaling them across the Swarm.

Technology

Dieter Reuter @quintus23m
Senior Consultant, SEAL Systems
Stefan Scherer @stefscherer
Software Engineer, SEAL Systems
Building a Docker Swarm on ARM

Hardware
Pi’s
Switch
Power supply
Agenda
Software
SD card image
flash tool
docker-machine
Demo
docker-compose

• Education
• Learning cloud principles
• Hands-on cluster
Why?

Parts list
For a four node swarm.
• 4x Raspberry Pi 2/3
• 5 port switch with 5V
• 6x USB power supply
• 20x Distant bolts 2.5mm
• 4x micro USB cable
• 1x 5.5mm barrel USB
• 4x flat patch cable
• 4x Micro SD cards
Build Hardware

HypriotOS
Get started with Docker on ARM
in 5 minutes

For Linux and Mac
Small helper script to do all these in just
one command:
• Download the SD card image
• Uncompress it
• Set hostname for device
• Optionally set WiFi config
Flash HypriotOS

Flash HypriotOS
$ flash
--hostname swarm01
--ssid wifipsk
--password wifipwd
https://downloads.hypriot.com/hypriotos-rpi-v0.8.0.img.zip
# repeat for swarm02..swarm04

Add your SSH key
$ ssh-keygen -R swarm01.local
$ ssh-copy-id pirate@swarm01.local
# repeat for swarm02..swarm04

… some plumbing code
$ export TOKEN=$(for i in $(seq 1 32); do echo -n $(echo
"obase=16; $(($RANDOM % 16))" | bc); done; echo)
$ function getip() { (traceroute $1 2>&1 | head -n 1 |
cut -d( -f 2 | cut -d) -f 1) }

Create Docker Swarm manager v1.11
$ docker-machine create -d generic
--engine-storage-driver=overlay --swarm --swarm-master
--swarm-image hypriot/rpi-swarm:latest
--swarm-discovery="token://$TOKEN"
--generic-ip-address=$(getip swarm01.local)
swarm01

Create Docker Swarm nodes v1.11
$ docker-machine create -d generic
--engine-storage-driver=overlay --swarm
--swarm-image hypriot/rpi-swarm:latest
--swarm-discovery="token://$TOKEN"
--generic-ip-address=$(getip swarm02.local)
swarm02
# repeat for swarm03..swarm04

Create Docker Swarm manager v1.12
$ ssh pirate@swarm01.local docker swarm init

Create Docker Swarm nodes v1.12
$ export MASTER=$(getip swarm01.local)
$ ssh pirate@swarm02.local docker swarm join $MASTER:2377
$ ssh pirate@swarm03.local docker swarm join $MASTER:2377
$ ssh pirate@swarm04.local docker swarm join $MASTER:2377

Control your Docker Swarm
$ ssh pirate@swarm01.local
$ docker info
$ docker node ls

Running our first Swarm service
$ docker service create --name ping
hypriot/rpi-alpine-scratch ping 8.8.8.8
$ docker service ls
$ docker service tasks ping

Scale our Swarm service
$ docker service update ping --replicas 10 # or
$ docker service scale ping=10
$ docker service tasks ping

• Self made cluster
• Pico Cluster
• BitScope Blade
Your ideas?
Examples

• http://blog.hypriot.com
• http://picocluster.com
• http://bitscope.com/product/blade
Further Links

Thank you!
@quintus23m
@stefscherer
@HypriotTweets

The topic of orchestration comes up a lot when discussing applications. We will cover: How the word "orchestration" has been used to mean so many different things that it is a meaningless term now for shared understanding What I think people actually mean when they say they want orchestration (ordered execution of operations across a fleet) Why this model of thinking is incompatible with the autonomous actor model How we could build systems that get us the outcomes of orchestration without needing to build it explicitly. How this is particularly pertinent in an era of containerization and microservices.

QNAP COSCUP Container Station

Wu Fan-Cheng

Docker Orchestration at Production Scale

Docker, Inc.

The Dockerfile Explosion and the Need for Higher Level Tools by Gareth Rushgrove

Docker, Inc.

Dockerfiles are great. They provide a zero-barrier-to-entry format for describing a single Docker image which is immediately clear to anyone reading them. But with that simplicity comes problems that become apparent as your adoption of Docker gathers pace. * Dockerfiles can inherit from other docker images, but images are not Dockerfiles * Dockerfile provides no built-in mechanism for creating abstractions, so as usage grows identical or similar instructions can be duplicated across many files * The Docker APi exposes a build endpoint, but the API is very course, taking Dockerfile as the transport rather than exposing the individual instructions * Dockerfiles are just that, files. So they can come from anywhere The one layer per line in a Dockerfile limitation can lead to an explosion of layers, which fail to take advantage of the promised space and performance benefits.

Develop QNAP NAS App by Docker

Terry Chen

Docker 1.11 Presentation

Sreenivas Makam

CoreOS @Codetalks Hamburg

Timo Derstappen

The last couple of years have seen an increasing interest in Docker and related technologies. One of these technologies is CoreOS, a new operating system built from the ground up for running Docker containers at scale. In this talk we will learn about CoreOS main concepts and tools. We will get our hands dirty as we work together toward a goal of running a CoreOS cluster on AWS (using Ansible) and running docker containers on it. The talk will conclude with a discussion on the place of Ansible (and configuration management tools in general) in the "next-generation" stack.

Docker 初探，實驗室中的運貨鯨

Ruoshi Ling

http://blog.fntsr.tw/articles/2015/05/28/docker-talks-on-ncu/ 學校實驗室總會有些需求，架設各種服務，例如：Redmine、MySQL、Wiki、GitLab ... 以往我們都會一股腦將這些服務架設在同一主機，或是各開一台虛擬機器，放在裡面，然後就一屆傳一屆，只要不要掛掉就繼續使用。但到了某天，發現舊版有漏洞，或是新版有更好用的功能，才又挖出更新說明，辛辛苦苦的將各種服務一一更新上線。又或是老闆要求架新服務，但才發現因為虛擬機器開太多 IP 不夠用了，只好再度將各個服務都塞在同一台電腦裡，失去原本一台機器一個服務的用意。有沒有什麼辦法去改善這種窘境？或是有沒有更快的方式能方便我們部署我們需要的服務？我想，Docker 或許就是你想要的答案。「Build, Ship, Run Any App, Anywhere」—— Docker 如是說。有別於虛擬機器的沈重，輕量的虛擬化技術 Container 正夯，本講座將帶聽眾認識 Docker —— 一個方便操作 Container 的工具，讓你以更方便、更快速的方式，管理你實驗室上的各個服務。

Endocode Kubernetes Meetup: Architecture Patterns for Microservices in Kubern...

Thomas Fricke

Kernel load-balancing for Docker containers using IPVS

Docker, Inc.

Many companies use expensive proprietary hardware and software to provide load-balancing and routing for their users and services. I'm going to demonstrate how the same or even exceeding performance and feature set can be achieved using an open-source technology which has been a part of the mainline Linux kernel for over a decade – IPVS. Specifically, you'll see how IPVS can be used to automatically configure load balancing and routing for Docker containers using a simple Go daemon and a Docker plugin.

Securing Containers, One Patch at a Time - Michael Crosby, Docker

Docker, Inc.

Responsible disclosure is a key ingredient of any solid security strategy. In this session, Docker maintainer Michael Crosby will explain the ins and outs of CVE-2016-9962: how it was discovered, how it could even happen in the first place, and how it was addressed. A vertiginous abseil at the boundaries of the kernel, in the fascinating land of system calls and randomized address space. You will think twice before leaking a file descriptor again.

Docker security introduction-task-2016

Ricardo Gerardi

Dockerizing Symfony Applications - Symfony Live Berlin 2014D

Docker for Developers - Part 1 by David Gageot

Docker, Inc.

Web scale infrastructures with kubernetes and flannel

purpleocean

La capacità di rispondere in poche frazioni di secondo alle richieste degli utenti - indipendentemente dal loro numero - è un fattore determinante per il successo dei servizi sul web. Secondo Amazon, bastano 100 millisecondi di latenza nella risposta per generare una perdita economica di circa l'1% sul fatturato [1]. In base alle statistiche di Google AdWords, inoltre, il 2015 ha sancito l’ufficiale superamento del numero di interazioni mobile rispetto a quelle desktop [2], con la conseguente riduzione della durata media delle sessioni di navigazione web. In uno scenario di questo tipo, la razionalizzazione dell’utilizzo delle risorse hardware e la capacità di scalare rispetto al numero di utenti sono fattori determinanti per il successo del business. In questo talk racconteremo la nostra esperienza di migrazione di soluzioni e-commerce di tipo enterprise in Magento da un’architettura basata su VM tradizionali ad una di tipo software-defined basata su Kubernetes, Flannel e Docker. Discuteremo, quindi, delle reali difficoltà da noi incontrate nel porting su container di soluzioni in produzione e daremo evidenza di come, alla fine di questo lungo viaggio, i nostri sforzi siano stati concretamente premiati dall’aumento di resilienza, affidabilità e automazione della soluzione finale. A supporto della conversazione, mostreremo i risultati dei benchmark da noi condotti per valutare la scalabilità della nuova architettura presentando delle evidenze delle reali capacità di Kubernetes come strumento di orchestrazione di servizi erogati in Docker container. Concluderemo l’intervento presentando il nostro progetto di distribuzione geografica dei nodi master di Kubernetes facendo uso di reti SD-WAN per garantire performance e continuità di servizio della soluzione.

Docker Networking - Common Issues and Troubleshooting Techniques

Sreenivas Makam

Docker Networking Tip - Macvlan driver

Sreenivas Makam

Docker 1.12 networking deep dive

Madhu Venugopal

Docker 1.11 @ Docker SF Meetup

Docker, Inc.

Down to Stack Traces, up from Heap Dumps

Andrei Pangin

Глубже стек-трейсов, шире хип-дампов Stack trace и heap dump - не просто инструменты отладки; это потайные дверцы к самым недрам виртуальной Java машины. Доклад будет посвящён малоизвестным особенностям JDK, так или иначе связанным с обоходом хипа и стеками потоков. Мы разберём: - как снимать дампы в продакшне без побочных эффектов; - как работают утилиты jmap и jstack изнутри, и в чём хитрость forced режима; - почему все профилировщики врут, и как с этим бороться; - познакомимся с новым Stack-Walking API в Java 9; - научимся сканировать Heap средствами JVMTI; - узнаем о недокументированных функциях Хотспота и других интересных штуках.

Understanding the mysteries of the CSS property value syntax

Russ Weakley

What's hot

Dockerize Me: Distributed PHP applications with Symfony, Docker, Consul and A...

Alexey Petrov

Docker 101 - from 0 to Docker in 30 minutes

Luciano Fiandesio

Hide your development environment and application in a container

Johan Janssen

Docker Meetup: Docker Networking 1.11, by Madhu Venugopal

Michelle Antebi

Getting instantly up and running with Docker and Symfony

André Rømcke

Introduction to Docker & CoreOS - Symfony User Group Cologne

Breaking the RpiDocker challenge

Nicolas De Loof

Docker orchestration using core os and ansible - Ansible IL 2015

Leonid Mirsky

Docker 初探，實驗室中的運貨鯨

Ruoshi Ling

Endocode Kubernetes Meetup: Architecture Patterns for Microservices in Kubern...

Thomas Fricke

Kernel load-balancing for Docker containers using IPVS

Docker, Inc.

Securing Containers, One Patch at a Time - Michael Crosby, Docker

Docker, Inc.

Docker security introduction-task-2016

Ricardo Gerardi

Dockerizing Symfony Applications - Symfony Live Berlin 2014D

Docker for Developers - Part 1 by David Gageot

Docker, Inc.

Web scale infrastructures with kubernetes and flannel

purpleocean

Docker Networking - Common Issues and Troubleshooting Techniques

Sreenivas Makam

Docker Networking Tip - Macvlan driver

Sreenivas Makam

Docker 1.12 networking deep dive

Madhu Venugopal

Docker 1.11 @ Docker SF Meetup

Docker, Inc.

What's hot (20)

Dockerize Me: Distributed PHP applications with Symfony, Docker, Consul and A...

Docker 101 - from 0 to Docker in 30 minutes

Hide your development environment and application in a container

Docker Meetup: Docker Networking 1.11, by Madhu Venugopal

Getting instantly up and running with Docker and Symfony

Introduction to Docker & CoreOS - Symfony User Group Cologne

Breaking the RpiDocker challenge

Docker orchestration using core os and ansible - Ansible IL 2015

Docker 初探，實驗室中的運貨鯨

Endocode Kubernetes Meetup: Architecture Patterns for Microservices in Kubern...

Kernel load-balancing for Docker containers using IPVS

Securing Containers, One Patch at a Time - Michael Crosby, Docker

Docker security introduction-task-2016

Dockerizing Symfony Applications - Symfony Live Berlin 2014

Docker for Developers - Part 1 by David Gageot

Web scale infrastructures with kubernetes and flannel

Docker Networking - Common Issues and Troubleshooting Techniques

Docker Networking Tip - Macvlan driver

Docker 1.12 networking deep dive

Docker 1.11 @ Docker SF Meetup

Viewers also liked

Down to Stack Traces, up from Heap Dumps

Andrei Pangin

Understanding the mysteries of the CSS property value syntax

Russ Weakley

The "Why", "What" and "How" of Microservices

INPAY

Developing rich multimedia applications with Kurento: a tutorial for Java Dev...

Luis Lopez

This presentation contains a tutorial devoted to showing how Java developers can create rich multimedia applications with Kurento. Java developers will find natural Kurento development model, which is based on standard Java EE technologies and is inspired on the WWW Servlet model. If you have ever developed a Web application, you may be familiar with this scheme. At the browser, HTML and JavaScript code is in charge of user interaction and generates HTTP requests to the server. This code is usually programmed with the help of APIs such as jQuery, DOM, XHR or others. Upon reception, HTTP requests are processed by some kind of server side technology (e. g.. PHP, Java, Ruby, etc.) using service APIs providing features such as DB access, communications, transactions, XML parsing, and others. As a result, an HTTP response is issued and sent back to the client. Following this scheme, both server and client side APIs are just capabilities simplifying developer work and providing abstractions for programming faster and more efficiently. Kurento technologies adapt to the Web development model so that, from a programmer perspective, Kurento can be seen just as an additional set of APIs. Developers does not need to learn novel programming schemes and can reuse all their knowledge and previous background on WWW application development. When you need multimedia, just use Kurento APIs. For the rest, use your preferred APIs or reuse previous code. Kurento APIs have been designed for simplicity and Web developers will find them familiar and intuitive. Most of the low level details related to codecs, formats, protocols, profiles and containers are abstracted by the framework. Programmers just concentrate on specifying the sequence of processing steps that they want to execute on the media flows.

elasticRTC -- how to have your own WebRTC cloud scaling to be billions in min...

Luis Lopez

Creating WebRTC applications is simple, but making them scalable in a robust and efficient way isn’t. Due to this, many application developers do not dare to use their own infrastructures and instead prefer to leverage third party clouds for creating their scalable WebRTC services. These clouds are private and usually expose some kind of API that developers consume for accessing WebRTC communication capabilities such as group-communications, media recording or media transcoding. This model is very convenient for creating simple vertical applications, but it also has some drawbacks. First, these clouds billing models are based on pay-per-minute schemes that are not always compatible with the business models desired by application developers. Second, the exposed APIs tend to be restrictive and limit the freedom of developers for innovating. Third, these clouds, being fully private, cannot be extended or customized for specific needs developers may have. In this talk, we propose an alternative solution to private WebRTC PaaS models based on leveraging novel cloud orchestration technologies such as Cloud Formation or Heat Templates for enabling developers to create their very own platform on top of public clouds. We analyze the technological ingredients required for enabling such models and present some experiments and production deployments showing how any developer may bring her own IaaS cloud for growing on it a full featured WebRTC platform with elastic scalability and full control on the billing and on the underlying technology evolution.

vJUG - The JavaFX Ecosystem

Andres Almiray

Token Authentication for Java Applications

Stormpath

Everyone building a web application that supports user login is concerned with security. How do you securely authenticate users and keep their identity secure? With the huge growth in Single Page Applications (SPAs), JavaScript and mobile applications, how do you keep users safe even though these are 'unsafe' client environments? This presentation will demystify HTTP Authentication and explain how the Next Big Thing - Token Authentication - can be used to secure web applications on the JVM, REST APIs, and 'unsafe' clients while supporting security best practices and even improving your application's performance and scale.

Spring RabbitMQ

Martin Toshev

Configuration beyond Java EE 8

Anatole Tresch

Building Netty Servers

Dani Solà Lagares

WebRTC with Java

amithap07

Viewers also liked (11)

Down to Stack Traces, up from Heap Dumps

Understanding the mysteries of the CSS property value syntax

The "Why", "What" and "How" of Microservices

Developing rich multimedia applications with Kurento: a tutorial for Java Dev...

elasticRTC -- how to have your own WebRTC cloud scaling to be billions in min...

vJUG - The JavaFX Ecosystem

Token Authentication for Java Applications

Spring RabbitMQ

Configuration beyond Java EE 8

Building Netty Servers

WebRTC with Java

Similar to Building a Docker v1.12 Swarm cluster on ARM

Building a Docker Swarm cluster on ARM by Dieter Reuter and Stefan Scherer

Docker, Inc.

In this training you'll learn how to build a physical Docker Swarm cluster with Raspberry Pi's. We'll guide you through the setup process and you’ll learn how to use Docker and Docker Swarm to complete the cluster. You'll learn how to build and deploy a distributed application and ship it as Docker containers to your cluster. In the end you have built a portable datacenter which can be used for testing and live demos as well. - building a hardware cluster with Raspberry Pi’s - install and set up HypriotOS, a Debian-based Linux system - installing Docker and Docker Swarm to connect all cluster nodes - build a distributed application, the Docker voting app - ship the app with Docker Compose to your cluster - let’s run and test your app In this training you'll learn how to build a physical Docker Swarm cluster with Raspberry Pi's. We'll guide you through the setup process and you’ll learn how to use Docker and Docker Swarm to complete the cluster. You'll learn how to build and deploy a distributed application and ship it as Docker containers to your cluster. In the end you have built a portable datacenter which can be used for testing and live demos as well. - building a hardware cluster with Raspberry Pi’s - install and set up HypriotOS, a Debian-based Linux system - installing Docker and Docker Swarm to connect all cluster nodes - build a distributed application, the Docker voting app - ship the app with Docker Compose to your cluster - let’s run and test your app

Docker Security workshop slides

Docker, Inc.

Get hands-on with security features and best practices to protect your containerized services. Learn to push and verify signed images with Docker Content Trust, and collaborate with delegation roles. Intermediate to advanced level Docker experience recommended, participants will be building and pushing with Docker during the workshop. Led By Docker Security Experts: Riyaz Faizullabhoy David Lawrence Viktor Stanchev Experience Level: Intermediate to advanced level Docker experience recommended

桃園市教育局Docker技術入門與實作

Philip Zheng

ITB2019 Try This At Home: Building a Personal Docker Swarm - Matt Clemente

Ortus Solutions, Corp

There’s no shortage of excitement surrounding Docker. But while many developers are familiar with containers in the abstract (they’ve installed Docker on their machines, watched online courses, and played with images locally), they’re unsure of the concrete steps needed to deploy CFML apps to Swarm. Since it’s said that you learn more on your first day of production than all the time beforehand, why wait? In this session, we’ll take a API Mashup project from local development to replicated cloud deployment on a multi-node Swarm. Containerizing a small, fun application provides a great opportunity for acquiring real-world knowledge and hands-on experience. At each step in the process, I’ll share the practical approaches I’ve learned, with the goal of removing obstacles, both real and imagined, that prevent ColdFusion developers from using Swarm.

Running Docker in Development & Production (DevSum 2015)

Ben Hall

PuppetConf 2016: The Challenges with Container Configuration – David Lutterko...

Puppet

Challenges of container configuration

lutter

Introducing containers into your infrastructure brings new capabilities, but also new challenges, in particular around configuration. This talk will take a look under the hood at some of those operational challenges including: * The difference between runtime and build-time configuration, and the importance of relating the two together. * Configuration drift, immutable mental models and mutable container file systems. * Who configures the orchestrators? * Emergent vs. model driven configuration. In the process we will identify some common problems and talk about potential solutions. Talk from PuppetConf 2016

Docker

Chen Chun

파이썬 개발환경 구성하기의 끝판왕 - Docker Compose

raccoony

Geode on Docker

Apache Geode

Simple docker hosting in FIWARE Lab

Fernando Lopez Aguilar

Things I've learned working with Docker Support

Sujay Pillai

Docker 進階實務班

Philip Zheng

廣宣學堂: 容器進階實務 - Docker進深研究班

Paul Chao

Docker security

Janos Suto

Docker summit 2015: 以 Docker Swarm 打造多主機叢集環境

謝宗穎

Delivering Docker & K3s worloads to IoT Edge devices

Ajeet Singh Raina

About 94% of AI Adopters are planning to use containers in the next 1 year. What’s driving this exponential growth? Faster time to deployment and Faster AI workload processing are the two major reasons. You can use GPUs in big data applications such as machine learning, data analytics, and genome sequencing. Docker containerization makes it easier for you to package and distribute applications. You can enable GPU support when using YARN on Docker containers. In this talk, I will demonstrate how Docker accelerates the AI workload development and deployment over the IoT Edge devices in efficient manner

Troubleshooting Tips from a Docker Support Engineer

Jeff Anderson

Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker

Docker, Inc.

Docker makes everything easier. But even with the easiest platforms, sometimes you run into problems. In this session, you'll learn first hand from someone whose job is helping customers fix these problems. Using Docker and Docker Data Center, you can keep your apps running smoothly with minimal downtime. In this session, you'll learn how to apply your troubleshooting skills in the Docker ecosystem, including: 1. Identification and characterization of the problem. 2. Command line tools to inspect networking and namespaces. 3. Applying these skills to your workloads on OSS Docker and on DDC.

Docker container management

Karol Kreft

Similar to Building a Docker v1.12 Swarm cluster on ARM (20)

Building a Docker Swarm cluster on ARM by Dieter Reuter and Stefan Scherer

Docker Security workshop slides

桃園市教育局Docker技術入門與實作

ITB2019 Try This At Home: Building a Personal Docker Swarm - Matt Clemente

Running Docker in Development & Production (DevSum 2015)

PuppetConf 2016: The Challenges with Container Configuration – David Lutterko...

Challenges of container configuration

Docker

파이썬 개발환경 구성하기의 끝판왕 - Docker Compose

Geode on Docker

Simple docker hosting in FIWARE Lab

Things I've learned working with Docker Support

Docker 進階實務班

廣宣學堂: 容器進階實務 - Docker進深研究班

Docker security

Docker summit 2015: 以 Docker Swarm 打造多主機叢集環境

Delivering Docker & K3s worloads to IoT Edge devices

Troubleshooting Tips from a Docker Support Engineer

Troubleshooting Tips from a Docker Support Engineer - Jeff Anderson, Docker

Docker container management

Recently uploaded

GraphRAG is All You need? LLM & Knowledge Graph

Guy Korland

Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs. 1. Unifying Large Language Models and Knowledge Graphs: A Roadmap. https://arxiv.org/abs/2306.08302 2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs: https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

Uni Systems Copilot event_05062024_C.Vlachos.pdf

Uni Systems S.M.S.A.

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

FIDO Alliance

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Epistemic Interaction - tuning interfaces to provide information for AI support

Alan Dix

Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024 https://alandix.com/academic/papers/synergy2024-epistemic/ As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.

20240607 QFM018 Elixir Reading List May 2024

Matthew Sinclair

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

nkrafacyberclub

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...

Neo4j

Leonard Jayamohan, Partner & Generative AI Lead, Deloitte This keynote will reveal how Deloitte leverages Neo4j’s graph power for groundbreaking digital twin solutions, achieving a staggering 100x performance boost. Discover the essential role knowledge graphs play in successful generative AI implementations. Plus, get an exclusive look at an innovative Neo4j + Generative AI solution Deloitte is developing in-house.

GridMate - End to end testing is a critical piece to ensure quality and avoid...

ThomasParaiso2

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

91mobiles

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

PHP Frameworks: I want to break free (IPC Berlin 2024)

Ralf Eggert

In this presentation, we examine the challenges and limitations of relying too heavily on PHP frameworks in web development. We discuss the history of PHP and its frameworks to understand how this dependence has evolved. The focus will be on providing concrete tips and strategies to reduce reliance on these frameworks, based on real-world examples and practical considerations. The goal is to equip developers with the skills and knowledge to create more flexible and future-proof web applications. We'll explore the importance of maintaining autonomy in a rapidly changing tech landscape and how to make informed decisions in PHP development. This talk is aimed at encouraging a more independent approach to using PHP frameworks, moving towards a more flexible and future-proof approach to PHP development.

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

Communications Mining Series - Zero to Hero - Session 1

DianaGray10

This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered: • Communication Mining Overview • Why is it important? • How can it help today’s business and the benefits • Phases in Communication Mining • Demo on Platform overview • Q/A

Recently uploaded (20)

GraphRAG is All You need? LLM & Knowledge Graph

Monitoring Java Application Security with JDK Tools and JFR Events

Uni Systems Copilot event_05062024_C.Vlachos.pdf

Elevating Tactical DDD Patterns Through Object Calisthenics

Securing your Kubernetes cluster_ a step-by-step guide to success !

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

DevOps and Testing slides at DASA Connect

Epistemic Interaction - tuning interfaces to provide information for AI support

20240607 QFM018 Elixir Reading List May 2024

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

PCI PIN Basics Webinar from the Controlcase Team

GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...

GridMate - End to end testing is a critical piece to ensure quality and avoid...

Essentials of Automations: The Art of Triggers and Actions in FME

FIDO Alliance Osaka Seminar: Overview.pdf

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

A tale of scale & speed: How the US Navy is enabling software delivery from l...

PHP Frameworks: I want to break free (IPC Berlin 2024)

Removing Uninteresting Bytes in Software Fuzzing

Communications Mining Series - Zero to Hero - Session 1

Building a Docker v1.12 Swarm cluster on ARM

1. Dieter Reuter @quintus23m Senior Consultant, SEAL Systems Stefan Scherer @stefscherer Software Engineer, SEAL Systems Building a Docker Swarm on ARM

2. Hardware Pi’s Switch Power supply Agenda Software SD card image flash tool docker-machine Demo docker-compose

3. • Education • Learning cloud principles • Hands-on cluster Why?

4. Build Hardware

5. Parts list For a four node swarm. • 4x Raspberry Pi 2/3 • 5 port switch with 5V • 6x USB power supply • 20x Distant bolts 2.5mm • 4x micro USB cable • 1x 5.5mm barrel USB • 4x flat patch cable • 4x Micro SD cards Build Hardware

7. HypriotOS Get started with Docker on ARM in 5 minutes

8. For Linux and Mac Small helper script to do all these in just one command: • Download the SD card image • Uncompress it • Set hostname for device • Optionally set WiFi config Flash HypriotOS

9. Flash HypriotOS $ flash --hostname swarm01 --ssid wifipsk --password wifipwd https://downloads.hypriot.com/hypriotos-rpi-v0.8.0.img.zip # repeat for swarm02..swarm04

10. Find your Pi $ ping swarm01.local

11. Add your SSH key $ ssh-keygen -R swarm01.local $ ssh-copy-id pirate@swarm01.local # repeat for swarm02..swarm04

12. … some plumbing code $ export TOKEN=$(for i in $(seq 1 32); do echo -n $(echo "obase=16; $(($RANDOM % 16))" | bc); done; echo) $ function getip() { (traceroute $1 2>&1 | head -n 1 | cut -d( -f 2 | cut -d) -f 1) }

13. Create Docker Swarm manager v1.11 $ docker-machine create -d generic --engine-storage-driver=overlay --swarm --swarm-master --swarm-image hypriot/rpi-swarm:latest --swarm-discovery="token://$TOKEN" --generic-ip-address=$(getip swarm01.local) swarm01

14. Create Docker Swarm nodes v1.11 $ docker-machine create -d generic --engine-storage-driver=overlay --swarm --swarm-image hypriot/rpi-swarm:latest --swarm-discovery="token://$TOKEN" --generic-ip-address=$(getip swarm02.local) swarm02 # repeat for swarm03..swarm04

15. Demo Time

16. Create Docker Swarm manager v1.12 $ ssh pirate@swarm01.local docker swarm init

17. Create Docker Swarm nodes v1.12 $ export MASTER=$(getip swarm01.local) $ ssh pirate@swarm02.local docker swarm join $MASTER:2377 $ ssh pirate@swarm03.local docker swarm join $MASTER:2377 $ ssh pirate@swarm04.local docker swarm join $MASTER:2377

18. Control your Docker Swarm $ ssh pirate@swarm01.local $ docker info $ docker node ls

19. Running our first Swarm service $ docker service create --name ping hypriot/rpi-alpine-scratch ping 8.8.8.8 $ docker service ls $ docker service tasks ping

20. Scale our Swarm service $ docker service update ping --replicas 10 # or $ docker service scale ping=10 $ docker service tasks ping

21. • Self made cluster • Pico Cluster • BitScope Blade Your ideas? Examples

22. • http://blog.hypriot.com • http://picocluster.com • http://bitscope.com/product/blade Further Links

23. Thank you! @quintus23m @stefscherer @HypriotTweets

Building a Docker v1.12 Swarm cluster on ARM

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (11)

Similar to Building a Docker v1.12 Swarm cluster on ARM

Similar to Building a Docker v1.12 Swarm cluster on ARM (20)

Recently uploaded

Recently uploaded (20)

Building a Docker v1.12 Swarm cluster on ARM