Docker and Cloud Foundry

Sankt Leon-Rot, 18th November 2014

Transcript

4. $ cf push my-app Pushing an application
5. $ cf push my/image Pushing a Docker image
6. Stage + Run
8. CF V1 Launched April 2011
9. commit ac3786b84281ddb1e3609860b24648ded118c1fd Author: Cloud Foundry Engineer <eng@cloudfoundry.com> Date: Mon Apr 11 20:18:41 2011 -0700 
 Initial commit
10. Static list of runtimes CF v1
11. runtimes: ruby18: executable: /usr/bin/ruby version: 1.8.7 ruby19: executable: ruby version: 1.9.2 node: executable: node version: 0.4.[2-9]
12. Staging logic in the Cloud Controller CF v1
13. ./cloud_controller/staging/grails/ plugin.rb ./cloud_controller/staging/node/ plugin.rb ./cloud_controller/staging/otp_rebar/ plugin.rb ./cloud_controller/staging/rails3/ plugin.rb ./cloud_controller/staging/sinatra/ plugin.rb ./cloud_controller/staging/spring/ plugin.rb
14. Isolation = separate users and ulimit CF v1
15. Stager Extracted July 2011
16. commit a59fd12acf0284f3072cfecdf04f86975579e8d5 Author: mpage <mpage@vmware.com> Date: Wed Jul 20 13:27:09 2011 -0700 Stager component skeleton This includes a basic gem skeleton that contains all of the staging code from the CC.
17. Warden November 2011
18. commit 8f2f9204e98b864936d6c8670a426fdd6f8218e1 Author: Pieter Noordhuis <pcnoordhuis@gmail.com> Date: Mon Nov 14 14:48:57 2011 -0800 Add warden: manager for ephemeral Linux containers
19. Namespaces Warden
20. CGroups Warden
21. commit 94309ac0b530b1c16563e4d8f97344472910fe88 Author: mpage <mpage@vmware.com> Date: Thu Dec 8 11:52:05 2011 -0800 Add command to set memory limit for LXC containers This allows users to set the memory limit on their containers via 'memory.limit_in_bytes'. Containers whose cgroup exceeds the supplied limit will be destroyed automatically.
22. Union File System Warden
23. commit 5cd661893b2a6989fc2c8ca77aa74af24150f2a3 Author: Pieter Noordhuis <pcnoordhuis@gmail.com> Date: Tue Feb 21 16:45:57 2012 -0800 warden: Use overlayfs on 12.04 The Ubuntu team is deprecating aufs for overlayfs starting with 12.04.
24. Network whitelists Warden
25. commit f0fa9c621c21ca13d4573c329fcce85dc5f10948 Author: Pieter Noordhuis <pcnoordhuis@gmail.com> Date: Fri Dec 9 11:59:30 2011 -0800 warden: Support outbound network traffic filtering This adds support for black/whitelisting of networks.
26. Image format and public registry Warden
27. Summary of where we are
28. Containers An implementation detail
29. Knowledge of runtimes baked into CF An implementation detail
30. The pieces are there - but I can’t push a container
31. Image format and public registry Warden
32. Buildpacks December 2012
33. Great artists steal Buildpacks
34. commit 217236def33a818e2887607b9cfb9be64184750b Author: Matthew Kocher and Tim Labeeuw <mkocher@pivotallabs.com> Date: Thu Dec 13 14:42:42 2012 -0800 Initial Ruby and Node buildpack support
35. Meanwhile…
37. Docker released March 2013
38. commit 57e2126a02f8b96b0542df7f6a573233d8419bb1 Author: Solomon Hykes <solomon@dotcloud.com> Date: Sat Mar 23 17:48:18 2013 -0700 Bumped version to 0.1.0 commit a27b4b8cb8e838d03a99b6d2b30f76bdaf2f9e5d Author: Andrea Luzzardi <aluzzardi@gmail.com> Date: Fri Jan 18 16:13:39 2013 -0800 Initial commit
39. Don’t use LXC Warden
40. commit 69c69059fc3933531e19c05a9d2e831fb713881c Merge: 93c1a7b 7776683 Author: Guillaume J. Charmes <guillaume@docker.com> Date: Mon Mar 3 16:34:20 2014 -0800 Add native execution driver to docker and make it the default Merge pull request #4327 from crosbymichael/ add-libcontainer
41. commit e83c8becdabbe193555c48c3fb4b22550ae0afd1 Author: Pieter Noordhuis <pcnoordhuis@gmail.com> Date: Fri Dec 16 12:11:34 2011 -0800 warden: Remove lxc-tools dependency The work that needs to be done to create a namespaced process is so little that we can do it ourselves. Apart from removing a dependency, this also gives more freedom in configuring cgroups and better startup performance.
42. Nesting Containers
43. September 2013
44. commit c8446d7f14635e5e2b505de16cb09bc2fefce0e8 Author: David Sabeti and Pieter Noordhuis <pair+david +pieter@pivotallabs.com> Date: Fri Apr 5 14:39:22 2013 -0700 Allow nesting commit 9712451911c7a0fad149f83895169a4062c47fc3 Author: David Sabeti and Pieter Noordhuis <pair+david +pieter@pivotallabs.com> Date: Fri Apr 5 15:28:03 2013 -0700 Add config for warden-cpi
45. Decker February 2014
46. commit db6637dce358c162e769543f97b9e57b00c68c38 Author: Colin Humphreys <chumphreys@pivotallabs.com> Date: Wed Feb 12 14:39:45 2014 -0800 Spike code. Decker lives. Signed-off-by: Aram Price <aprice@pivotallabs.com>
47. $ cf push --stack decker Pushing a Dockerfile
48. Dockerfile-based Decker
49. Custom Stemcell Decker
51. $ veritas help 2>&1 | grep distribution distribution - Fetch and print distribution of Tasks and LRPs Veritas
52. $ veritas distribution \ --etcdCluster=http://192.0.2.2:4001 \ --rate=1s Distribution cell_z1-0: Empty Veritas
53. $ veritas push-docker-app \ -appName=test \ -dockerImage=onsi/grace-busybox \ -space=diego \ -domain=example.com Pushing a Docker Image
54. { "name": "test", "space_guid": "a-uuid", "docker_image": "onsi/grace-busybox", "memory": 128, "disk_quota": 1024, "instances": 1 } CF Curl Request
55. $ cf set-env test DIEGO_BETA true $ cf set-env test DIEGO_RUN_BETA true Environment Variables
56. $ cf start test requested state: started instances: 1/1 usage: 128M x 1 instances urls: test.example.com state since cpu #0 running 2014-11-18 11:00:00 AM 0.0% Deploying a Docker Image
57. $ veritas distribution \ --etcdCluster=http://192.0.2.2:4001 \ --rate=1s Distribution cell_z1-0: • Veritas
58. A Running Container
59. $ cf scale test -i 5 $ veritas distribution \ --etcdCluster=http://192.0.2.2:4001 \ --rate=1s Distribution cell_z1-0: ••••• Spawning more containers
60. Load balancing across containers
61. ps Actually running under Warden
62. commit e79de919aeaea3e63498b338e9fba304e6dc27c0 Author: Alex Suraci <asuraci@pivotallabs.com> Date: Tue May 20 09:36:25 2014 -0700 support for creating containers from docker images on container creation, specify image:<repo name>. the image will be pulled down from the docker registry if not present, and mounted using Docker's own graph drivers. this does not include e.g. baked-in 'run' commands from a Dockerfile: just the resulting base image.
63. Circus: Tailor Determines command / entry point
64. Circus: Soldier Executes command / entry point
65. Circus: Spy Health check
66. libcontainer Cloud Foundry and libcontainer
67. Cloud Focker Naming. It’s hard.
68. Fast local feedback Vagrant VM running Docker
69. $ fock build Build a Docker Image
70. Do staging off-platform Reproducible Deployments
71. In Context
72. Docker BOSH Release, Service Brokers Other Docker Support
73. @kelseyhightower
 I'm sure that container management system you wrote is going to be awesome!
74. Danke Thank you
75. San Diego map photo used under creative commons attribution license: https://creativecommons.org/licenses/by/2.0/ https://www.flickr.com/photos/23465812@N00/6818213387/ No modifications were made Attribution