You've heard about Docker, maybe you use it already as a development environment for virtualising your project on your local machine. But running your application or website with Docker in production is a whole different deal. In this session you'll get a deeper insight into working with Docker in practice. Starting with the 101 of concepts we'll go through a practical scenario for hosting, automatically deploying and monitoring an application in production.

1. Docker in Production
by Robert Lemke

2. Robert Lemke
CEO Flownative
Project Founder Neos
robert@flownative.com
@robertlemke

4. Docker
Toolbox
www.docker.com/docker-toolbox

12. Docker =
better VM for dev

13. Docker
}dev
staging
production

14. more than that?

15. what's different
in production?

16. monitoring
deployment
debugging
security
backup

17. Host

18. which
operating
system
?

23. provis
ioning

24. Docker
Machine

27. resource "aws_instance" "www1" {
ami = "${lookup(var.amis, var.region)}"
availability_zone = "${var.region}a"
instance_type = "t2.micro"
subnet_id = "${aws_subnet.kubenet_craft.id}"
associate_public_ip_address = true
tags {
Name = "www1.${var.regioncode}.flownative.net"
}
}
resource "aws_route53_record" "kubemaster" {
zone_id = "${var.flownativenet_zone_id}"
name = "www1.${var.regioncode}"
type = "A"
ttl = "60"
records = [
"${aws_instance.www1.private_ip}"]
}

28. images

29. use your own
images

30. base image
security!
size
fitness

31. private
repositories
hub.docker.com
quay.io
Google Cloud
AWS (planned)

32. sudo docker build -t beta.gcr.io/myproject/nginx:$BUILD_ID .
sudo docker tag -f beta.gcr.io/myproject/nginx:$BUILD_ID beta.gcr.io/myproject/nginx
sudo docker login -u _json_key -p "$(cat …json)" -e x@y.com https://beta.gcr.io
sudo docker push beta.gcr.io/myproject/nginx:latest
sudo docker push beta.gcr.io/myproject/nginx:$BUILD_ID

33. persist
ent
data

34. host volume
other storages
data-only containers

35. orches
tration

36. Docker Compose

37. decouple for deployment
nginx:
image: flownative/nginx:latest
external_links:
- cargo_jenkins_1
ports:
- "443:443"
volumes:
- data/certs/STAR_flownative_com.key:/etc/nginx/certs/flownative/docker-registry/STAR_flownative_com.key
- data/certs/STAR_flownative_com-ssl-bundle.crt:/etc/nginx/certs/flownative/docker-registry/
STAR_flownative_com-ssl-bundle.crt
volumes_from:
- cargo_jenkins_1
restart: always
jenkins:
build: "docker-jenkins"
restart: always
volumes:
- data/jenkins:/var/jenkins_home
- /var/run/docker.sock:/var/run/docker.sock
- /usr/bin/docker:/usr/bin/docker
ports:
- "8080:8080"

38. Service
Discovery
-> Nginx: new
website

40. deploy
ment

41. #!/bin/bash
ssh ubuntu@foo.flownative.net mkdir -p /home/ubuntu/docker
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml stop"
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml rm -f"
scp ./docker-compose-nginx.yml ubuntu@cargo.flownative.net:/home/ubuntu/docker/
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml build"
ssh ubuntu@foo.flownative.net "cd ~/docker; sudo docker-compose -p cargo -f docker-compose-nginx.yml up -d"

46. apiVersion: v1
kind: ReplicationController
metadata:
name: "neos-wwwneosio-elasticsearch-1"
spec:
replicas: 1
selector:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearch"
version: "1"
template:
metadata:
labels:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearch"
version: "1"
spec:
containers:
- name: elasticsearch
image: docker.flownative.com/flownative/elasticsearch:1
ports:
- containerPort: 9200
resources:
requests:
memory: "100Mi"
cpu: "10m"
limits:
memory: "800Mi"
cpu: "500m"
env:
- name: ELASTICSEARCH_CLUSTER_NAME
value: "neos-wwwneosio"

47. apiVersion: v1
kind: Service
metadata:
name: elasticsearch-628f1e05
labels:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearchmaster"
spec:
type: NodePort
ports:
- name: elasticsearchrestapi
port: 9200
targetPort: 9200
- name: elasticsearchtransport
port: 9300
targetPort: 9300
selector:
account: "neos"
project: "wwwneosio"
stage: "production"
type: "elasticsearchmaster"

50. immutable
hardware

51. monito
ring

52. Docker stats
docker stats $(docker ps | awk '{if(NR>1) print $NF}')

56. tips&tricks

61. PaaS?
your
own?

62. what do you want
to work on?
Host maintenance?

63. Where to start?

64. develop images locally
use Docker compose
deploy with a script + Docker compose
start using Tutum / Giant Swarm
look into Kubernetes on Google Cloud
rehearse backup, monitoring, debugging
~
Docker in Production

65. Containers will
fundamentally
change the way we
ship web
applications.

66. robert@flownative.com
www.flownative.com
@robertlemke
share your
thoughts