The document discusses using Docker in production environments, highlighting different aspects such as monitoring, deployment, and security. It provides examples of setting up AWS resources using Terraform, configuring containers with Docker Compose, and managing persistent data. The author emphasizes the transformative impact of containers on web application deployment and invites feedback on the content.

1. Docker in Production
by Robert Lemke

2. Robert Lemke
CEO Flownative
Project Founder Neos
robert@flownative.com
@robertlemke

4. Docker
Toolbox
www.docker.com/docker-toolbox

12. Docker =
better VM for dev

13. Docker
}dev
staging
production

14. more than that?

15. what's different
in production?

16. monitoring
deployment
debugging
security
backup

17. Host

18. which
operating
system
?

23. provis
ioning

24. Docker
Machine

27. resource "aws_instance" "www1" {
ami = "${lookup(var.amis, var.region)}"
availability_zone = "${var.region}a"
instance_type = "t2.micro"
subnet_id = "${aws_subnet.kubenet_craft.id}"
associate_public_ip_address = true
tags {
Name = "www1.${var.regioncode}.flownative.net"
}
}
resource "aws_route53_record" "kubemaster" {
zone_id = "${var.flownativenet_zone_id}"
name = "www1.${var.regioncode}"
type = "A"
ttl = "60"
records = [
"${aws_instance.www1.private_ip}"]
}

28. images

29. use your own
images

30. base image
security!
size
fitness

31. private
repositories
hub.docker.com
quay.io
Google Cloud
AWS (planned)

32. sudo docker build -t beta.gcr.io/myproject/nginx:$BUILD_ID .
sudo docker tag -f beta.gcr.io/myproject/nginx:$BUILD_ID beta.gcr.io/myproject/nginx
sudo docker login -u _json_key -p "$(cat …json)" -e x@y.com https://beta.gcr.io
sudo docker push beta.gcr.io/myproject/nginx:latest
sudo docker push beta.gcr.io/myproject/nginx:$BUILD_ID

33. persist
ent
data

34. host volume
other storages
data-only containers

35. orches
tration

36. Docker Compose

37. decouple for deployment
nginx:
image: flownative/nginx:latest
external_links:
- cargo_jenkins_1
ports:
- "443:443"
volumes:
- data/certs/STAR_flownative_com.key:/etc/nginx/certs/flownative/docker-registry/STAR_flownative_com.key
- data/certs/STAR_flownative_com-ssl-bundle.crt:/etc/nginx/certs/flownative/docker-registry/
STAR_flownative_com-ssl-bundle.crt
volumes_from:
- cargo_jenkins_1
restart: always
jenkins:
build: "docker-jenkins"
restart: always
volumes:
- data/jenkins:/var/jenkins_home
- /var/run/docker.sock:/var/run/docker.sock
- /usr/bin/docker:/usr/bin/docker
ports:
- "8080:8080"

38. Service
Discovery
-> Nginx: new
website

40. deploy
ment

41. #!/bin/bash
ssh ubuntu@foo.flownative.net mkdir -p /home/ubuntu/docker
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml stop"
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml rm -f"
scp ./docker-compose-nginx.yml ubuntu@cargo.flownative.net:/home/ubuntu/docker/
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml build"
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml up -d"

46. apiVersion: v1
kind: ReplicationController
metadata:
name: "neos-wwwneosio-elasticsearch-1"
spec:
replicas: 1
selector:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearch"
version: "1"
template:
metadata:
labels:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearch"
version: "1"
spec:
containers:
- name: elasticsearch
image: docker.flownative.com/flownative/elasticsearch:1
ports:
- containerPort: 9200
resources:
requests:
memory: "100Mi"
cpu: "10m"
limits:
memory: "800Mi"
cpu: "500m"
env:
- name: ELASTICSEARCH_CLUSTER_NAME
value: "neos-wwwneosio"

47. apiVersion: v1
kind: Service
metadata:
name: elasticsearch-628f1e05
labels:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearchmaster"
spec:
type: NodePort
ports:
- name: elasticsearchrestapi
port: 9200
targetPort: 9200
- name: elasticsearchtransport
port: 9300
targetPort: 9300
selector:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearchmaster"

50. immutable
hardware

51. monito
ring

52. Docker stats
docker stats $(docker ps | awk '{if(NR>1) print $NF}')

56. tips&tricks

61. PaaS?
your
own?

62. what do you want
to work on?
Host maintenance?

63. Where to start?

64. develop images locally
use Docker compose
deploy with a script + Docker compose
start using Tutum / Giant Swarm
look into Kubernetes on Google Cloud
rehearse backup, monitoring, debugging
~
Docker in Production

65. Containers will
fundamentally
change the way we
ship web
applications.

66. robert@flownative.com
www.flownative.com
@robertlemke
share your
thoughts