Continuous Delivery of Docker images
•
0 likes•1,036 views
This document discusses using continuous delivery of Docker images to deploy software updates with zero downtime. It describes setting up a high availability Docker platform using load balancers and multiple Docker hosts. It also covers aspects like application versioning, logging, monitoring, alerting and security when using continuous delivery of Docker images.
Report
Share
Report
Share
Download to read offline
Recommended
Iuwne10 S06 L01
The document discusses maintaining a wireless LAN controller including upgrading the controller platform and code version, applying configuration changes, and backing up and restoring the controller configuration and Cisco WCS database. Key steps include checking the controller and AP inventory, upgrading controller code through the GUI which requires a reboot, uploading and downloading configuration files which can be encrypted, backing up the configuration to a TFTP server or manually from the CLI, and automatically backing up the Cisco WCS database when installing new versions.
Iuwne10 S06 L03
The document provides guidance on troubleshooting wireless LAN issues through checking visual elements, common controller and client issues, and using Cisco Wireless LAN Controller commands and displays. It highlights using debug commands, show commands, and logs to test layer 2 and layer 3 connectivity and diagnose problems. Third-party packet sniffers and Cisco Spectrum Expert can also assist with troubleshooting.
ACRN vMeet-Up EU 2021 - debug ACRN hypervisor
This document discusses various methods for debugging ACRN and guests running on ACRN. It describes using JTAG and the serial port for hypervisor debugging. For guest debugging, it mentions emulating a serial port, examining vmexit information, and using hypervisor commands. Post-launch guest debugging involves tools in the Service OS like strace and gdb communicating through acrn-dm. Overall debugging depends heavily on the serial port with limited direct hardware access for guests.
Project ACRN configuration scenarios and config tool
This document discusses ACRN configuration scenarios and tools. It describes the different types of VMs in ACRN and 5 reference usage scenarios. It also covers classifying ACRN configurations into hypervisor, VM, and board configurations. Finally, it provides a walkthrough of using the acrn-config tool to generate configurations for a custom board and scenario, including importing board info, selecting a scenario, configuring options, and generating source code.
Season 4 [Free OpManager training] Part2- Monitoring Server Performance
Season 4 [Free OpManager training] Part2- Monitoring Server PerformanceManageEngine, Zoho Corporation
Learn about the following topics:
1) Monitoring the availability of network devices that are ping-able or SNMP enabled. Also, learn how to monitor the performance metrics of these devices.
2) Creating custom WMI monitors.
3) Creating scripts to monitor performance metrics that are not available in the OID.
4) Monitoring the log files and folders based on its content, size, etc.Season 4 [Free OpManager training] Part3 - Monitoring Network Performance
Season 4 [Free OpManager training] Part3 - Monitoring Network PerformanceManageEngine, Zoho Corporation
This document summarizes the agenda and content for a free OpManager network monitoring training session. The training covers monitoring the performance of network devices, interfaces, hardware sensors, and WAN/VOIP links. It also discusses how to set up custom SNMP monitors, troubleshoot issues, and generate network reports. The session is part of a five-week training series on OpManager's network monitoring capabilities.Project ACRN CSE Virtualization
The document provides an overview of the Converged Security Engine (CSE) and how it is virtualized in ACRN. It discusses how the CSE provides security features like DRM and dynamic application loading. It then explains how the Management Engine Interface (MEI) driver is used to access CSE features and how MEI is virtualized using a front-end and back-end driver with VirtIO and addressing extensions to support multiple guest VMs. The ACRN device model is used to configure virtual MEI devices for each VM.
A Comprehensive Implementation and Evaluation of Direct Interrupt Delivery
This document proposes a technique called Direct Interrupt Delivery (DID) to reduce interrupt overhead in virtual machines. DID directly delivers interrupts to the target virtual machine without requiring additional software intervention or context switches between the guest and host. This is achieved by leveraging existing hardware features like IOMMU and APIC to directly route interrupts to the correct virtual CPU. Evaluation shows DID can reduce interrupt handling latency by 80% and improve TCP throughput by 21% by eliminating virtual machine exits for interrupt delivery and end-of-interrupt notifications. DID supports delivering interrupts from SRIOV devices, emulated devices, and timers directly to virtual machines.
Recommended
Iuwne10 S06 L01
The document discusses maintaining a wireless LAN controller including upgrading the controller platform and code version, applying configuration changes, and backing up and restoring the controller configuration and Cisco WCS database. Key steps include checking the controller and AP inventory, upgrading controller code through the GUI which requires a reboot, uploading and downloading configuration files which can be encrypted, backing up the configuration to a TFTP server or manually from the CLI, and automatically backing up the Cisco WCS database when installing new versions.
Iuwne10 S06 L03
The document provides guidance on troubleshooting wireless LAN issues through checking visual elements, common controller and client issues, and using Cisco Wireless LAN Controller commands and displays. It highlights using debug commands, show commands, and logs to test layer 2 and layer 3 connectivity and diagnose problems. Third-party packet sniffers and Cisco Spectrum Expert can also assist with troubleshooting.
ACRN vMeet-Up EU 2021 - debug ACRN hypervisor
This document discusses various methods for debugging ACRN and guests running on ACRN. It describes using JTAG and the serial port for hypervisor debugging. For guest debugging, it mentions emulating a serial port, examining vmexit information, and using hypervisor commands. Post-launch guest debugging involves tools in the Service OS like strace and gdb communicating through acrn-dm. Overall debugging depends heavily on the serial port with limited direct hardware access for guests.
Project ACRN configuration scenarios and config tool
This document discusses ACRN configuration scenarios and tools. It describes the different types of VMs in ACRN and 5 reference usage scenarios. It also covers classifying ACRN configurations into hypervisor, VM, and board configurations. Finally, it provides a walkthrough of using the acrn-config tool to generate configurations for a custom board and scenario, including importing board info, selecting a scenario, configuring options, and generating source code.
Season 4 [Free OpManager training] Part2- Monitoring Server Performance
Season 4 [Free OpManager training] Part2- Monitoring Server PerformanceManageEngine, Zoho Corporation
Learn about the following topics:
1) Monitoring the availability of network devices that are ping-able or SNMP enabled. Also, learn how to monitor the performance metrics of these devices.
2) Creating custom WMI monitors.
3) Creating scripts to monitor performance metrics that are not available in the OID.
4) Monitoring the log files and folders based on its content, size, etc.Season 4 [Free OpManager training] Part3 - Monitoring Network Performance
Season 4 [Free OpManager training] Part3 - Monitoring Network PerformanceManageEngine, Zoho Corporation
This document summarizes the agenda and content for a free OpManager network monitoring training session. The training covers monitoring the performance of network devices, interfaces, hardware sensors, and WAN/VOIP links. It also discusses how to set up custom SNMP monitors, troubleshoot issues, and generate network reports. The session is part of a five-week training series on OpManager's network monitoring capabilities.Project ACRN CSE Virtualization
The document provides an overview of the Converged Security Engine (CSE) and how it is virtualized in ACRN. It discusses how the CSE provides security features like DRM and dynamic application loading. It then explains how the Management Engine Interface (MEI) driver is used to access CSE features and how MEI is virtualized using a front-end and back-end driver with VirtIO and addressing extensions to support multiple guest VMs. The ACRN device model is used to configure virtual MEI devices for each VM.
A Comprehensive Implementation and Evaluation of Direct Interrupt Delivery
This document proposes a technique called Direct Interrupt Delivery (DID) to reduce interrupt overhead in virtual machines. DID directly delivers interrupts to the target virtual machine without requiring additional software intervention or context switches between the guest and host. This is achieved by leveraging existing hardware features like IOMMU and APIC to directly route interrupts to the correct virtual CPU. Evaluation shows DID can reduce interrupt handling latency by 80% and improve TCP throughput by 21% by eliminating virtual machine exits for interrupt delivery and end-of-interrupt notifications. DID supports delivering interrupts from SRIOV devices, emulated devices, and timers directly to virtual machines.
Cman
Oracle Connection Manager (CMAN) is used to proxy connections between clients and databases. It listens for connections from clients and application servers, and establishes connections to databases. CMAN uses rules defined in its configuration file to determine whether to accept or drop incoming connection requests based on source/destination IP addresses and ports. It also supports encryption and checksumming of connections using settings in the sqlnet.ora file.
VMworld 2013: How to Exchange Status Message Between Guest and Host Using RPC
This document discusses how to exchange status messages between a guest virtual machine and the host system using GuestRPC. GuestRPC provides a private communication channel between the guest and host through a shared memory interface. It allows writing and reading the virtual machine configuration file and log files. The document outlines several use cases for status reporting and application configuration. It then describes how GuestRPC works and several methods for using it, including the VMware Guest API, VMware Tools commands, and a new open source Fling GuestRPC library.
LFCollab14: Xen vs Xen Automotive
The accompanying demo (slide 15) can be found at https://vimeo.com/90534015
The presentation will cover Xen vs Xen Automotive gaps and analysis. We will elaborate technical solutions for the identified gaps:
* ARM architecture - support HW virtualization extensions for embedded systems
* Stability requirements
* RT Scheduler
* Rich virtualized peripheral support (WiFi, Gfx, MM, USB, etc.)
* Performance benchmarking
* Security
The audience is anyone interesting in building OSS based IVI systems. Attendees can expect the OSS stack detailed architecture, current status of the project, the challenges seen, road map and much more.
Project ACRN hypervisor introduction
The document discusses ACRN, an open-source lightweight hypervisor intended for consolidating heterogeneous workloads and streamlining IoT edge development. It provides an overview of ACRN's architecture and key modules, including boot process, CPU virtualization, memory management, interrupt handling, pass-through devices, and device model for handling I/O requests. The document also outlines enhancements in ACRN 2.0, such as supporting new operating systems and safety/real-time virtual machines.
ACRN vMeet-Up EU 2021 - functional safety design and certification plan
The document outlines Intel's plan for designing and certifying the ACRN hypervisor for functional safety. It discusses the safety concept of using ACRN to partition mixed-criticality workloads with static isolation. It describes the development model and techniques used, including requirements management, modular design, and fault injection testing. It also analyzes sources of inter-VM interference like shared caches and I/O, and the mitigations used through hardware virtualization and partitioning. Finally, it presents ACRN's certification plan to achieve IEC 61508 SIL3 certification through a process of submitting work products to TUV Sud for review.
Under the Hood with Docker Swarm Mode - Drew Erny and Nishant Totla, Docker
Join SwarmKit maintainers Drew and Nishant as they showcase features that have made Swarm Mode even more powerful, without compromising the operational simplicity it was designed with. They will discuss the implementation of new features that streamline deployments, increase security, and reduce downtime. These substantial additions to Swarm Mode are completely transparent and straightforward to use, and users may not realize they're already benefiting from these improvements under the hood.
STATUS UPDATE OF COLO PROJECT XIAOWEI YANG, HUAWEI AND WILL AULD, INTEL
We have presented the idea of coarse grain lock-stepping (COLO) virtual machiens for non-stop service in last year's xen summit. We have made significant progress in the past year and submitted the patch series to the community. It is a good time for us to present the latest status to the community and call for participation.
XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...
XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...The Linux Foundation
Mobile devices, such as smart phones and tablets, are becoming de-facto everyday computing and communication devices, virtualization can bring additional benfits to mobile devices for both security and manageability. IT department may use hypervisor, as a highly secure solution, to manage autherized mobile devices, such as for network traffic monitoring, filtering, scan (for virus detection), and/or OS update/patching even when the guest OS becomes completely dead. We insert Xen to the mobile OS Android to deprivilege Android as guest for security and manageability purpose. However, the usage case of mobile device is quit different with that of server, for example mobile devices runs completely different benchmarks (mostly multimedia focused) vs. that in server (mostly responsiveness focused). We analyze the gap of Xen as a mobile hypervisor and present how we improve the performance.ClearPass 6.3.6 Release Notes
This document provides release notes for ClearPass 6.3.6, including information about supported browsers and system requirements, upgrade and update instructions, new features, issues resolved, and known issues. Key details include supported ESX/ESXi versions for the virtual appliance, requirements for ClearPass OnGuard and the dissolvable agent, and lists of enhancements and issues addressed in previous 6.3.x releases.
XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...
XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...The Linux Foundation
Recent years have seen an increasing demand for supporting real-time systems in virtualized environments. To combine real-time and virtualization, a real-time scheduler at the hypervisor level is needed to provide timing guarantees to the guest virtual machines. RT-Xen provides a suite of multi-core real-time schedulers to deliver real-time performance to domains running on the Xen hypervisor. Work is underway to incorporate RT-Xen in the Xen distribution to replace the legacy SEDF scheduler. We have implemented and empirically compared a diverse set of multicore real-time scheduling policies within the RT-Xen scheduling framework. Based on extensive experiments of different scheduling policies, we plan to submit a patch on global EDF scheduler to the xen-devel as the first step to incorporate multicore real-time scheduling support within the Xen hypervisor.Oracle Enterprise manager SNMP and Exadata
This slide deck describes the configuration and interaction between Oracle Enterprise Manager and an Exadata Target
XPDDS18: Real Time in XEN on ARM - Andrii Anisov, EPAM Systems Inc.
Currently, several initiatives promote XEN hypervisor into the automotive area as a base of complex virtualized systems. To support those initiatives and plunge into the automotive world XEN should fit at least two requirements: it should be appropriately certified and to be able to host a security domain. Leaving behind certification topic, here we focus on security domain hosting capability of XEN. Particularly on keeping RT guarantees for the specific domain.
This talk is a presentation of the investigation on a XEN hypervisor applicability to building a multi-OS system with real-time guarantees being kept for one of the hosted OSes.
During this presentation following topics would be outlined:
- experimental setup
- experimental use-cases and their motivation
- received results and discovered issues
- solutions and mitigation measures for discovered issues
Omaha (Google Update) server
We describe an open-source AWS based implementation of Google Update server and our DevOps approach built on top of Docker.
IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions
Download IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions and practice real questions and answers to ensure your success.
Docker Security workshop slides
Get hands-on with security features and best practices to protect your containerized services. Learn to push and verify signed images with Docker Content Trust, and collaborate with delegation roles. Intermediate to advanced level Docker experience recommended, participants will be building and pushing with Docker during the workshop.
Led By Docker Security Experts:
Riyaz Faizullabhoy
David Lawrence
Viktor Stanchev
Experience Level: Intermediate to advanced level Docker experience recommended
Digital Forensics and Incident Response in The Cloud Part 3
Do any VM's contain a particular indicator of compromise? E.g. Run a YARA signature over all executables on my virtual machines and tell me which ones match.
Stups.io - an Open Source Cloud Framework for AWS
STUPS.io is an open source cloud framework for AWS that provides maximum developer freedom while enabling near-real-time audit compliance for applications. It utilizes isolated AWS accounts with Docker deployment, managed SSH access, and immutable infrastructure to give development teams autonomy while ensuring security and compliance.
Defcon 22-zoltan-balazs-bypass-firewalls-application-whiteli
The document discusses techniques for bypassing security controls and gaining persistent access to a secured remote desktop server. It proposes infecting a client's workstation, stealing RDP credentials, and using various tools to bypass firewalls, application whitelisting, and other defenses in order to install malware and establish command and control of the target server. Specific bypass methods involve abusing Microsoft Word macros, exploiting Windows services, installing kernel drivers, and manipulating TCP source ports. The presentation demonstrates new attack tools and methods for pentesters and warns blue teams of challenges in detecting such advanced intrusions.
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where you have deployed a malware on a user’s workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.). On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user’s workstation.
I developed (and will publish) two tools that help you in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help you to circumvent the hardware firewall after we can execute code on the server with admin privileges (using a signed kernel driver). My tools are generic meaning that they work against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops. The number of problems you can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!
Hacker Halted 2014 - Post-Exploitation After Having Remote Access
In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where you have deployed a malware on a user’s workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.). On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user’s workstation.
I developed (and will publish) two tools that help you in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help you to circumvent the hardware firewall after we can execute code on the server with admin privileges (using a signed kernel driver). My tools are generic meaning that they work against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops. The number of problems you can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!
Docker for Ops - Scott Coulton, Puppet
In this talk, Scott Coulton will take you through Docker's cluster solution Swarm mode with his operations hat on. We will start from the beginning by describing what swarm mode is, what it does, and how it works behind the scenes. From there, we will look at very basic configurations of Swarm mode from the point of view of the operations team as well as a production-ready workflow including deployments of the cluster, logging and CD best practices. Attendees will be able to apply their learnings to their use cases.
Security Tips to run Docker in Production
When you are designing a production environment security is essential. All the Docker ecosystem but in particular Docker Swarm allows us to ship our containers out of our laptop, how can we make this process safe? During my talk, I will share tips around production environment, immutability and how troubleshooting common attack as code injection with Docker. Static analysis of our images, content trust with Notary to make our journey secure.
How can we setup a cluster on the main cloud providers with VPN and node labeling to expose only a portion of our cluster? I will also show what Docker provides (Content Trust, Static Analysis) but also open source alternatives as Notary, centos/clair and Cilium.
In the end of this talk, we had a better idea around how manage Docker in production.
More Related Content
What's hot
Cman
Oracle Connection Manager (CMAN) is used to proxy connections between clients and databases. It listens for connections from clients and application servers, and establishes connections to databases. CMAN uses rules defined in its configuration file to determine whether to accept or drop incoming connection requests based on source/destination IP addresses and ports. It also supports encryption and checksumming of connections using settings in the sqlnet.ora file.
VMworld 2013: How to Exchange Status Message Between Guest and Host Using RPC
This document discusses how to exchange status messages between a guest virtual machine and the host system using GuestRPC. GuestRPC provides a private communication channel between the guest and host through a shared memory interface. It allows writing and reading the virtual machine configuration file and log files. The document outlines several use cases for status reporting and application configuration. It then describes how GuestRPC works and several methods for using it, including the VMware Guest API, VMware Tools commands, and a new open source Fling GuestRPC library.
LFCollab14: Xen vs Xen Automotive
The accompanying demo (slide 15) can be found at https://vimeo.com/90534015
The presentation will cover Xen vs Xen Automotive gaps and analysis. We will elaborate technical solutions for the identified gaps:
* ARM architecture - support HW virtualization extensions for embedded systems
* Stability requirements
* RT Scheduler
* Rich virtualized peripheral support (WiFi, Gfx, MM, USB, etc.)
* Performance benchmarking
* Security
The audience is anyone interesting in building OSS based IVI systems. Attendees can expect the OSS stack detailed architecture, current status of the project, the challenges seen, road map and much more.
Project ACRN hypervisor introduction
The document discusses ACRN, an open-source lightweight hypervisor intended for consolidating heterogeneous workloads and streamlining IoT edge development. It provides an overview of ACRN's architecture and key modules, including boot process, CPU virtualization, memory management, interrupt handling, pass-through devices, and device model for handling I/O requests. The document also outlines enhancements in ACRN 2.0, such as supporting new operating systems and safety/real-time virtual machines.
ACRN vMeet-Up EU 2021 - functional safety design and certification plan
The document outlines Intel's plan for designing and certifying the ACRN hypervisor for functional safety. It discusses the safety concept of using ACRN to partition mixed-criticality workloads with static isolation. It describes the development model and techniques used, including requirements management, modular design, and fault injection testing. It also analyzes sources of inter-VM interference like shared caches and I/O, and the mitigations used through hardware virtualization and partitioning. Finally, it presents ACRN's certification plan to achieve IEC 61508 SIL3 certification through a process of submitting work products to TUV Sud for review.
Under the Hood with Docker Swarm Mode - Drew Erny and Nishant Totla, Docker
Join SwarmKit maintainers Drew and Nishant as they showcase features that have made Swarm Mode even more powerful, without compromising the operational simplicity it was designed with. They will discuss the implementation of new features that streamline deployments, increase security, and reduce downtime. These substantial additions to Swarm Mode are completely transparent and straightforward to use, and users may not realize they're already benefiting from these improvements under the hood.
STATUS UPDATE OF COLO PROJECT XIAOWEI YANG, HUAWEI AND WILL AULD, INTEL
We have presented the idea of coarse grain lock-stepping (COLO) virtual machiens for non-stop service in last year's xen summit. We have made significant progress in the past year and submitted the patch series to the community. It is a good time for us to present the latest status to the community and call for participation.
XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...
XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...The Linux Foundation
Mobile devices, such as smart phones and tablets, are becoming de-facto everyday computing and communication devices, virtualization can bring additional benfits to mobile devices for both security and manageability. IT department may use hypervisor, as a highly secure solution, to manage autherized mobile devices, such as for network traffic monitoring, filtering, scan (for virus detection), and/or OS update/patching even when the guest OS becomes completely dead. We insert Xen to the mobile OS Android to deprivilege Android as guest for security and manageability purpose. However, the usage case of mobile device is quit different with that of server, for example mobile devices runs completely different benchmarks (mostly multimedia focused) vs. that in server (mostly responsiveness focused). We analyze the gap of Xen as a mobile hypervisor and present how we improve the performance.ClearPass 6.3.6 Release Notes
This document provides release notes for ClearPass 6.3.6, including information about supported browsers and system requirements, upgrade and update instructions, new features, issues resolved, and known issues. Key details include supported ESX/ESXi versions for the virtual appliance, requirements for ClearPass OnGuard and the dissolvable agent, and lists of enhancements and issues addressed in previous 6.3.x releases.
XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...
XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...The Linux Foundation
Recent years have seen an increasing demand for supporting real-time systems in virtualized environments. To combine real-time and virtualization, a real-time scheduler at the hypervisor level is needed to provide timing guarantees to the guest virtual machines. RT-Xen provides a suite of multi-core real-time schedulers to deliver real-time performance to domains running on the Xen hypervisor. Work is underway to incorporate RT-Xen in the Xen distribution to replace the legacy SEDF scheduler. We have implemented and empirically compared a diverse set of multicore real-time scheduling policies within the RT-Xen scheduling framework. Based on extensive experiments of different scheduling policies, we plan to submit a patch on global EDF scheduler to the xen-devel as the first step to incorporate multicore real-time scheduling support within the Xen hypervisor.Oracle Enterprise manager SNMP and Exadata
This slide deck describes the configuration and interaction between Oracle Enterprise Manager and an Exadata Target
XPDDS18: Real Time in XEN on ARM - Andrii Anisov, EPAM Systems Inc.
Currently, several initiatives promote XEN hypervisor into the automotive area as a base of complex virtualized systems. To support those initiatives and plunge into the automotive world XEN should fit at least two requirements: it should be appropriately certified and to be able to host a security domain. Leaving behind certification topic, here we focus on security domain hosting capability of XEN. Particularly on keeping RT guarantees for the specific domain.
This talk is a presentation of the investigation on a XEN hypervisor applicability to building a multi-OS system with real-time guarantees being kept for one of the hosted OSes.
During this presentation following topics would be outlined:
- experimental setup
- experimental use-cases and their motivation
- received results and discovered issues
- solutions and mitigation measures for discovered issues
What's hot (12)
VMworld 2013: How to Exchange Status Message Between Guest and Host Using RPC
VMworld 2013: How to Exchange Status Message Between Guest and Host Using RPC
ACRN vMeet-Up EU 2021 - functional safety design and certification plan
ACRN vMeet-Up EU 2021 - functional safety design and certification plan
Under the Hood with Docker Swarm Mode - Drew Erny and Nishant Totla, Docker
Under the Hood with Docker Swarm Mode - Drew Erny and Nishant Totla, Docker
STATUS UPDATE OF COLO PROJECT XIAOWEI YANG, HUAWEI AND WILL AULD, INTEL
STATUS UPDATE OF COLO PROJECT XIAOWEI YANG, HUAWEI AND WILL AULD, INTEL
XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...
XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...
XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...
XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...
XPDDS18: Real Time in XEN on ARM - Andrii Anisov, EPAM Systems Inc.
XPDDS18: Real Time in XEN on ARM - Andrii Anisov, EPAM Systems Inc.
Similar to Continuous Delivery of Docker images
Omaha (Google Update) server
We describe an open-source AWS based implementation of Google Update server and our DevOps approach built on top of Docker.
IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions
Download IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions and practice real questions and answers to ensure your success.
Docker Security workshop slides
Get hands-on with security features and best practices to protect your containerized services. Learn to push and verify signed images with Docker Content Trust, and collaborate with delegation roles. Intermediate to advanced level Docker experience recommended, participants will be building and pushing with Docker during the workshop.
Led By Docker Security Experts:
Riyaz Faizullabhoy
David Lawrence
Viktor Stanchev
Experience Level: Intermediate to advanced level Docker experience recommended
Digital Forensics and Incident Response in The Cloud Part 3
Do any VM's contain a particular indicator of compromise? E.g. Run a YARA signature over all executables on my virtual machines and tell me which ones match.
Stups.io - an Open Source Cloud Framework for AWS
STUPS.io is an open source cloud framework for AWS that provides maximum developer freedom while enabling near-real-time audit compliance for applications. It utilizes isolated AWS accounts with Docker deployment, managed SSH access, and immutable infrastructure to give development teams autonomy while ensuring security and compliance.
Defcon 22-zoltan-balazs-bypass-firewalls-application-whiteli
The document discusses techniques for bypassing security controls and gaining persistent access to a secured remote desktop server. It proposes infecting a client's workstation, stealing RDP credentials, and using various tools to bypass firewalls, application whitelisting, and other defenses in order to install malware and establish command and control of the target server. Specific bypass methods involve abusing Microsoft Word macros, exploiting Windows services, installing kernel drivers, and manipulating TCP source ports. The presentation demonstrates new attack tools and methods for pentesters and warns blue teams of challenges in detecting such advanced intrusions.
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where you have deployed a malware on a user’s workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.). On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user’s workstation.
I developed (and will publish) two tools that help you in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help you to circumvent the hardware firewall after we can execute code on the server with admin privileges (using a signed kernel driver). My tools are generic meaning that they work against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops. The number of problems you can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!
Hacker Halted 2014 - Post-Exploitation After Having Remote Access
In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where you have deployed a malware on a user’s workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.). On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user’s workstation.
I developed (and will publish) two tools that help you in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help you to circumvent the hardware firewall after we can execute code on the server with admin privileges (using a signed kernel driver). My tools are generic meaning that they work against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops. The number of problems you can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!
Docker for Ops - Scott Coulton, Puppet
In this talk, Scott Coulton will take you through Docker's cluster solution Swarm mode with his operations hat on. We will start from the beginning by describing what swarm mode is, what it does, and how it works behind the scenes. From there, we will look at very basic configurations of Swarm mode from the point of view of the operations team as well as a production-ready workflow including deployments of the cluster, logging and CD best practices. Attendees will be able to apply their learnings to their use cases.
Security Tips to run Docker in Production
When you are designing a production environment security is essential. All the Docker ecosystem but in particular Docker Swarm allows us to ship our containers out of our laptop, how can we make this process safe? During my talk, I will share tips around production environment, immutability and how troubleshooting common attack as code injection with Docker. Static analysis of our images, content trust with Notary to make our journey secure.
How can we setup a cluster on the main cloud providers with VPN and node labeling to expose only a portion of our cluster? I will also show what Docker provides (Content Trust, Static Analysis) but also open source alternatives as Notary, centos/clair and Cilium.
In the end of this talk, we had a better idea around how manage Docker in production.
Provisioning the IoT
How do we get our software out on the Internet of Things? Many assumptions in current deployment practices don't hold up. Devices can be occasionally connected, through low-bandwidth networks and are generally outside of direct control. Manually shuffling around binaries is not an option.
Apache ACE is an open-source Java provisioning tool tackling such challenges.You can manage Java apps and configs in a modular fashion. The foundations of ACE are OSGi, semantic versioning and reliable communication. Pushing out incremental updates and managing numerous devices becomes possible.
Docker presentasjon java bin
This document discusses Docker concepts like images vs containers, base images, Dockerfiles, volumes, and ways of building Docker images. It also covers topics like configuration, discovery, routing, and other Docker tools. Specifically, it explains that images are blueprints for containers, containers are instances of images that are writeable, and images are not after creation. It also discusses choosing a base image, tags/versions, and dissects example Dockerfiles.
Hacking Highly Secured Enterprise Environments by Zoltan Balazs
In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where the hacker/penetration-tester has deployed a malware on a user's workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.) On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user's workstation.
I developed (and will publish) two tools that help the community in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help to circumvent the hardware firewall after one can execute code on the server with admin privileges (using a signed kernel driver). My tools have been tested against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops (e.g. Citrix). The number of problems one can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!
Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...
This document provides an overview of developing and deploying Java applications on Azure using Docker. It discusses using Docker to build Java applications, running containers, and deploying stacks. It also covers Docker Enterprise Edition, including subscriptions, certifications, and security features. Finally, it demonstrates using Docker on Azure, such as with Azure Container Service, and shows examples of building, running, and deploying Java applications with Docker.
Docker at Flux7
The document discusses using Docker containers to enable a solar panel monitoring application to support multiple service providers. It describes setting up Docker containers for the TCP data ingestion server and Flask admin application for each provider, linking them to a Cassandra database container. Each provider's instances use a unique Cassandra keyspace to isolate their data. Automating this process using Docker Python APIs allows easily scaling to support additional providers. Lessons learned include Docker providing fast isolation without code changes, and needing improved Docker orchestration and Dockerfile support for multiple commands.
青云虚拟机部署私有Docker Registry
This document discusses deploying a private Docker registry using Docker registry. It provides instructions on installing Docker registry using both Python and Go versions, configuring it as a service, setting up authentication and SSL, connecting Docker hosts to the registry, and running the Docker registry frontend tool.
Build, migrate and deploy apps for any environment with project Hammr , OW2co...
Hammr is an OW2 open source tool for creating machine images for multiple cloud, container and virtual environments, or migrating live systems between environments. From a single source configuration file -- created from scratch or by scanning a live system -- you can automatically build consistent, repeatable machine images for any environment. Hammr integrates into your DevOps toolchain working with other tools such as Jenkins, Chef, Puppet and SaltStack, allowing you to easily build machine images and maintain live running instances. This presentation will give an overview of how you can build images and migrate systems with Hammr, as well as presenting the latest features, including migration process improvements and the ability to deploy machine images directly to Amazon AWS, OpenStack and Microsoft Azure from the Hammr command line.
#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Qu...
#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Qu...Agile Testing Alliance
#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Quality Engineering in Remote IoT System" at #ATAGTR2023.
#ATAGTR2023 was the 8th Edition of Global Testing Retreat.
To know more about #ATAGTR2023, please visit: https://gtr.agiletestingalliance.org/Infrastructure = code - 1 year later
This document discusses using infrastructure as code to automate server setup and deployment using Ansible. It outlines benefits like reducing human error, allowing developers and operations teams to work seamlessly through continuous integration and testing. Specifics of the infrastructure as code stack used are covered, including Ansible for configuration management, Docker for containers, and Vagrant for local virtual machine provisioning. Challenges and lessons learned around testing, debugging, and migrating existing systems are also presented. The overall message is that infrastructure as code takes time to implement but results in major improvements to deployment speed, reliability, and ability to rapidly iterate.
TRENDnet IP Camera Multiple Vulnerabilities
1. The TRENDnet IP camera models TV-IP422W contains multiple vulnerabilities, including an arbitrary file upload vulnerability that allows attackers to upload malicious files like webshells to the device.
2. The camera stores its configuration file unencrypted except for a simple bitwise NOT and XOR encryption that is easily reversible. This exposes passwords and credentials to attackers.
3. The SecurViewMobile Android app for the camera stores passwords and credentials in plaintext in an insecure manner, allowing extraction from its database.
Similar to Continuous Delivery of Docker images (20)
IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions
IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions
Digital Forensics and Incident Response in The Cloud Part 3
Digital Forensics and Incident Response in The Cloud Part 3
Defcon 22-zoltan-balazs-bypass-firewalls-application-whiteli
Defcon 22-zoltan-balazs-bypass-firewalls-application-whiteli
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...
Hacker Halted 2014 - Post-Exploitation After Having Remote Access
Hacker Halted 2014 - Post-Exploitation After Having Remote Access
Hacking Highly Secured Enterprise Environments by Zoltan Balazs
Hacking Highly Secured Enterprise Environments by Zoltan Balazs
Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...
Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...
Build, migrate and deploy apps for any environment with project Hammr , OW2co...
Build, migrate and deploy apps for any environment with project Hammr , OW2co...
#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Qu...
#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Qu...
Recently uploaded
20240607 QFM018 Elixir Reading List May 2024
Everything I found interesting about the Elixir programming ecosystem in May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Everything I found interesting about machines behaving intelligently during May 2024
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers:
* What is Vector Search?
* Importance and benefits of vector search
* Practical use cases across various industries
* Step-by-step implementation guide
* Live demos with code snippets
* Enhancing LLM capabilities with vector search
* Best practices and optimization strategies
Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications.
#MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology
Full-RAG: A modern architecture for hyper-personalization
Mike Del Balso, CEO & Co-Founder at Tecton, presents "Full RAG," a novel approach to AI recommendation systems, aiming to push beyond the limitations of traditional models through a deep integration of contextual insights and real-time data, leveraging the Retrieval-Augmented Generation architecture. This talk will outline Full RAG's potential to significantly enhance personalization, address engineering challenges such as data management and model training, and introduce data enrichment with reranking as a key solution. Attendees will gain crucial insights into the importance of hyperpersonalization in AI, the capabilities of Full RAG for advanced personalization, and strategies for managing complex data integrations for deploying cutting-edge AI solutions.
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
Maruthi Prithivirajan, Head of ASEAN & IN Solution Architecture, Neo4j
Get an inside look at the latest Neo4j innovations that enable relationship-driven intelligence at scale. Learn more about the newest cloud integrations and product enhancements that make Neo4j an essential choice for developers building apps with interconnected data and generative AI.
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-und-domino-lizenzkostenreduzierung-in-der-welt-von-dlau/
DLAU und die Lizenzen nach dem CCB- und CCX-Modell sind für viele in der HCL-Community seit letztem Jahr ein heißes Thema. Als Notes- oder Domino-Kunde haben Sie vielleicht mit unerwartet hohen Benutzerzahlen und Lizenzgebühren zu kämpfen. Sie fragen sich vielleicht, wie diese neue Art der Lizenzierung funktioniert und welchen Nutzen sie Ihnen bringt. Vor allem wollen Sie sicherlich Ihr Budget einhalten und Kosten sparen, wo immer möglich. Das verstehen wir und wir möchten Ihnen dabei helfen!
Wir erklären Ihnen, wie Sie häufige Konfigurationsprobleme lösen können, die dazu führen können, dass mehr Benutzer gezählt werden als nötig, und wie Sie überflüssige oder ungenutzte Konten identifizieren und entfernen können, um Geld zu sparen. Es gibt auch einige Ansätze, die zu unnötigen Ausgaben führen können, z. B. wenn ein Personendokument anstelle eines Mail-Ins für geteilte Mailboxen verwendet wird. Wir zeigen Ihnen solche Fälle und deren Lösungen. Und natürlich erklären wir Ihnen das neue Lizenzmodell.
Nehmen Sie an diesem Webinar teil, bei dem HCL-Ambassador Marc Thomas und Gastredner Franz Walder Ihnen diese neue Welt näherbringen. Es vermittelt Ihnen die Tools und das Know-how, um den Überblick zu bewahren. Sie werden in der Lage sein, Ihre Kosten durch eine optimierte Domino-Konfiguration zu reduzieren und auch in Zukunft gering zu halten.
Diese Themen werden behandelt
- Reduzierung der Lizenzkosten durch Auffinden und Beheben von Fehlkonfigurationen und überflüssigen Konten
- Wie funktionieren CCB- und CCX-Lizenzen wirklich?
- Verstehen des DLAU-Tools und wie man es am besten nutzt
- Tipps für häufige Problembereiche, wie z. B. Team-Postfächer, Funktions-/Testbenutzer usw.
- Praxisbeispiele und Best Practices zum sofortigen Umsetzen
TrustArc Webinar - 2024 Global Privacy Survey
How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024?
In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores.
See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar will review:
- The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey
- The top challenges for privacy leaders, practitioners, and organizations in 2024
- Key themes to consider in developing and maintaining your privacy program
GraphRAG for Life Science to increase LLM accuracy
GraphRAG for life science domain, where you retriever information from biomedical knowledge graphs using LLMs to increase the accuracy and performance of generated answers
Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Climate Impact of Software Testing at Nordic Testing Days
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
Infrastructure Challenges in Scaling RAG with Custom AI models
Building Retrieval-Augmented Generation (RAG) systems with open-source and custom AI models is a complex task. This talk explores the challenges in productionizing RAG systems, including retrieval performance, response synthesis, and evaluation. We’ll discuss how to leverage open-source models like text embeddings, language models, and custom fine-tuned models to enhance RAG performance. Additionally, we’ll cover how BentoML can help orchestrate and scale these AI components efficiently, ensuring seamless deployment and management of RAG systems in the cloud.
Microsoft - Power Platform_G.Aspiotis.pdf
Revolutionizing Application Development
with AI-powered low-code, presentation by George Aspiotis, Sr. Partner Development Manager, Microsoft
How to Get CNIC Information System with Paksim Ga.pptx
Pakdata Cf is a groundbreaking system designed to streamline and facilitate access to CNIC information. This innovative platform leverages advanced technology to provide users with efficient and secure access to their CNIC details.
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/building-and-scaling-ai-applications-with-the-nx-ai-manager-a-presentation-from-network-optix/
Robin van Emden, Senior Director of Data Science at Network Optix, presents the “Building and Scaling AI Applications with the Nx AI Manager,” tutorial at the May 2024 Embedded Vision Summit.
In this presentation, van Emden covers the basics of scaling edge AI solutions using the Nx tool kit. He emphasizes the process of developing AI models and deploying them globally. He also showcases the conversion of AI models and the creation of effective edge AI pipelines, with a focus on pre-processing, model conversion, selecting the appropriate inference engine for the target hardware and post-processing.
van Emden shows how Nx can simplify the developer’s life and facilitate a rapid transition from concept to production-ready applications.He provides valuable insights into developing scalable and efficient edge AI solutions, with a strong focus on practical implementation.Programming Foundation Models with DSPy - Meetup Slides
Prompting language models is hard, while programming language models is easy. In this talk, I will discuss the state-of-the-art framework DSPy for programming foundation models with its powerful optimizers and runtime constraint system.
UiPath Test Automation using UiPath Test Suite series, part 5
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
Mind map of terminologies used in context of Generative AI
Mind map of common terms used in context of Generative AI.
Recently uploaded (20)
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
GraphRAG for Life Science to increase LLM accuracy
GraphRAG for Life Science to increase LLM accuracy
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
Infrastructure Challenges in Scaling RAG with Custom AI models
Infrastructure Challenges in Scaling RAG with Custom AI models
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Programming Foundation Models with DSPy - Meetup Slides
Programming Foundation Models with DSPy - Meetup Slides
UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
Continuous Delivery of Docker images
- 1. CONTINUOUS DELIVERY OF DOCKER IMAGES A Customer case: ZorgDomein powered by Xebia Armin Čoralić armin@cargonauts.io
- 2. DELIVER SOFTWARE WITH THE SPEED OF THOUGHT
- 3. WE AS
- 4. DOCKER + CONTINUOUS DELIVERY +
- 5. CONTINUOUS DELIVERY OF DOCKER IMAGES
- 6. CONTINUOUS DELIVERY OF DOCKER IMAGES Platform to deploy your docker images to Security Set up the logging, monitoring and alerting Application versioning Zero downtime deployment
- 9. LOADBALANCER frontend main bind *:80 mode http maxconn 1000 default_backend app backend app mode http balance roundrobin option httpchk /health server intapp01 intapp01.zorgdomein.local:80 check port 8080 server intapp02 intapp02.zorgdomein.local:80 check port 8080 server intapp03 intapp03.zorgdomein.local:80 check port 8080
- 10. LOADBALANCER frontend main_ssl bind *:443 ssl crt /etc/pki/tls/private/dockerintegration.pem no-sslv3 mode http maxconn 1000 default_backend app
- 12. DATABASE AS SERVICE + ○
- 13. LOGGING, MONITORING AND ALERTING
- 14. LOGGING, MONITORING AND ALERTING StatsD
- 20. IMAGE VERSIONING zorgdomein/syslog:8.9-2 zorgdomein/ta:20150520_1830 zorgdomein/te:20150520_1736
- 22. ENVIRONMENT VERSIONING ZorgDomein Application C_20150520_1830 zorgdomein/syslog:8.9-2 zorgdomein/ta:20150520_1830 zorgdomein/te:20150520_1736 config.yml librato_flush_interval: 60 librato_token: "3847hwd" librato_user: “…” tc_db_user: “…” tc_db_host: “…zorgdomein.nl”
- 25. ZERO DOWNTIME DEPLOYMENT WITH ANSIBLE --- - include: util/docker_update.yml vars: name: 'docker-stats' image: 'zorgdomein/docker-stats' image_version: "{{ version }}" container_state: "{{ state | default('present') }}" args: -v /var/run/docker.sock:/var/run/docker.sock -e 'STATSD_HOST={{ statsd_hostname }}' -e 'INTERVAL={{ stats_interval }}'
- 33. SECURITY
- 34. SECURITY
- 36. DOCKER API - FILTER EXAMPLE "Config": { "Cmd": [ "./run_te.sh" ], "Env": [ ….., "ZDDB_USERNAME=dbintuser", “ZDDB_PASSWORD=*********”
- 37. DOCKER IMAGE MANAGEMENT Image Size MB Debian + Java 450 BusyBox + Java 300 Go 6
- 38. DOCKER + CONTINUOUS DELIVERY +
- 39. CONTINUOUS DELIVERY OF DOCKER IMAGES
- 40. CONTINUOUS DELIVERY OF DOCKER IMAGES Platform to deploy your docker images to Security Set up the logging, monitoring and alerting Application versioning Zero downtime deployment
- 41. THE DATA CENTER AUTOMATION EXPERTS
- 42. WHAT WE DO Automate, automate, automate! Code the infrastructure! Containerize all the things!
- 43. powered by Xebia Armin Čoralić armin@cargonauts.io THANKS!