Docker workshop

Joern Barthel

Berlin, 24.10.2014

2

About us > 30 IT consultants

Offices in Berlin & Warsaw

Core areas of expertise Cloud consulting and change management Architecture and Development Operations

Berlindevopsdays 2014

3

Setup Virtualbox + Linux

Vagrant

Git

Clone the repo (http://bit.ly/1wnMXHn) and vagrant up

Does NFS work? Otherwise unzip repo to ~/share …

Berlindevopsdays 2014

4

Introduction to Docker Go client/server

Userland virtualization

Vastly different scope

Abstract vs. concrete

No concept of changing state from A to B

Berlindevopsdays 2014

5

Components Build

Dockerfiles = series of command Immutable images = snapshots of state Commands and context Relationships and unions Caching

Distribute

Run

Berlindevopsdays 2014

6

Components Build

Distribute Naming images Push and pull to/from repositories Only transfer images the client does not know about

Run

Berlindevopsdays 2014

7

Components Build

Distribute

Run Container process R/W image

Berlindevopsdays 2014

8

Architecture

Berlindevopsdays 2014

9

Architecture Exec drivers

Namespaces & SELinux

Filters and bridges

Berlindevopsdays 2014

10

Architecture Storage drivers

CoW: btrfs Union: aufs Hardcopies

Berlindevopsdays 2014

11

Separation of roles Running containers

Naming stuff Linking containers Beyond linking

Mapping filesystems

Mapping ports

Restricting resources

Berlindevopsdays 2014

12

CoreOS systemd: greedy pid 1

Socket Activation Journal Watchdogs Encryption, quotas, automounting D-Bus

btrfs: 5th generation fs

dockerd

etcd, locksmithd & fleetd

Berlindevopsdays 2014

13

Hands on

Berlindevopsdays 2014