Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Containerless Django
Search
Peter Baumgartner
October 16, 2018
Programming
5
1.7k
Containerless Django
Deploying Django without Docker
Peter Baumgartner
October 16, 2018
Tweet
Share
More Decks by Peter Baumgartner
See All by Peter Baumgartner
Just Enough Ops for Developers
ipmb
0
250
Prepping Your Project for Production
ipmb
2
880
Django Deployments Done Right
ipmb
6
1.5k
High Performance Django: From runserver to Reddit hugs
ipmb
1
1.4k
Getting Started with Salt (PyCon 2014)
ipmb
6
1.3k
Monitoring Infrastructure with SaltStack
ipmb
16
10k
Getting Started with Salt
ipmb
11
1.7k
Other Decks in Programming
See All in Programming
リッチエディターを安全に開発・運用するために
unachang113
1
320
プロダクトという一杯を作る - プロダクトチームが味の責任を持つまでの煮込み奮闘記
hiliteeternal
0
320
Git Sync を超える!OSS で実現する CDK Pull 型デプロイ / Deploying CDK with PipeCD in Pull-style
tkikuc
4
490
オホーツクでコミュニティを立ち上げた理由―地方出身プログラマの挑戦 / TechRAMEN 2025 Conference
lemonade_37
1
390
React 使いじゃなくても知っておきたい教養としての React
oukayuka
18
4.8k
TypeScriptでDXを上げろ! Hono編
yusukebe
4
890
AIに安心して任せるためにTypeScriptで一意な型を作ろう
arfes0e2b3c
0
300
AI時代の『改訂新版 良いコード/悪いコードで学ぶ設計入門』 / ai-good-code-bad-code
minodriven
23
10k
副作用と戦う PHP リファクタリング ─ ドメインイベントでビジネスロジックを解きほぐす
kajitack
3
500
AWS Summit Japan 2024と2025の比較/はじめてのKiro、今あなたは岐路に立つ
satoshi256kbyte
1
260
202507_ADKで始めるエージェント開発の基本 〜デモを通じて紹介〜(奥田りさ)The Basics of Agent Development with ADK — A Demo-Focused Introduction
risatube
PRO
5
1.3k
Workers を定期実行する方法は一つじゃない
rokuosan
0
130
Featured
See All Featured
How GitHub (no longer) Works
holman
314
140k
Reflections from 52 weeks, 52 projects
jeffersonlam
351
21k
Statistics for Hackers
jakevdp
799
220k
The Art of Programming - Codeland 2020
erikaheidi
54
13k
Product Roadmaps are Hard
iamctodd
PRO
54
11k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Building Adaptive Systems
keathley
43
2.7k
Balancing Empowerment & Direction
lara
1
510
Building Applications with DynamoDB
mza
95
6.5k
Typedesign – Prime Four
hannesfritz
42
2.7k
RailsConf 2023
tenderlove
30
1.2k
Improving Core Web Vitals using Speculation Rules API
sergeychernyshev
18
1k
Transcript
DjangoCon US—San Diego Oct 2018 Deploying without Docker Containerless Django
Peter Baumgartner
Founder at Lincoln Loop—lincolnloop.com Former SysAdmin, DevOps for 8 years
Author of High Performance Django About Me
Docker is cool!
@ipmb | #djangocon Docker is cool! The “pipeline” Security Isolation
Dev/prod parity
Just bundle the entire OS
Some philosophy
“ —Mike Perham https://www.mikeperham.com/2016/02/09/kill-your-dependencies/ No code runs faster than no
code. No code has fewer bugs than no code. No code uses less memory than no code. No code is easier to understand than no code. “
None
@ipmb | #djangocon Docker Drawbacks Slow Extra abstractions More software,
more problems
None
How did we get here?
@ipmb | #djangocon Deployments sucked Dependencies would shift underneath you
Build tools and dev packages needed to be installed Multiple languages, multiple builds (Python & Node)
@ipmb | #djangocon The ideal deployment Download a binary Create
a configuration file Run it
@ipmb | #djangocon The ideal deployment /usr/local/bin/traefik \ --configFile=/etc/traefik/traefik.toml /usr/local/bin/telegraf
\ --config=/etc/telegraf/telegraf.conf /usr/sbin/nginx -c /etc/nginx/nginx.conf
@ipmb | #djangocon Python isn’t C or Go Requires a
VM Dynamic linking Packaging isn’t straightforward
None
Can we do better?
@ipmb | #djangocon We already are! Lock files via pipenv
or poetry Pre-compiled wheels (Pillow, psycopg2-binary, etc.) Still lots of holes - Assembling virtualenvs - Static files - Production webserver
@ipmb | #djangocon Prior art Private PyPI virtualenv-clone Platter dh-virtualenv
Pex
@ipmb | #djangocon ZIP applications? Part of Python since 2.6
PEP-441 improves support in 3.5 Create a ZIP archive of your project. Run it with Python. …but no mechanism for handling dependencies
None
@ipmb | #djangocon Enter shiv! A project from LinkedIn Zipapps
with dependencies A single artifact you can build → test → deploy ./myproject.pyz runserver
Django as a zipapp
Package your project with setup.py
@ipmb | #djangocon Include templates & static files Create a
MANIFEST.in graft your_project/collected_static graft your_project/templates
@ipmb | #djangocon Production webserver gunicorn + whitenoise ⭐ https://pypi.org/project/django-pyuwsgi/
@ipmb | #djangocon Build your zipapp
@ipmb | #djangocon Run your zipapp ./yourproject.pyz pyuwsgi --http=:8000
@ipmb | #djangocon Configuration Same zipapp, but different settings per
environment Options: - Multiple settings files and DJANGO_SETTINGS_MODULE - Environment variables - ⭐ https://pypi.org/project/goodconf/
@ipmb | #djangocon The zipapp pipeline Use CI (Travis, CircleCI,
Bitbucket, etc.) to: - Build - Test - Push Deploy = Download and run
None
What about security?
Systemd's got your back
@ipmb | #djangocon Systemd is awesome ProtectSystem=strict ProtectHome=true DynamicUser=true CapabilityBoundingSet=~CAP_SYS_ADMIN
AppArmorProfile=srv.yourproject.pyz ProtectKernelTunables=true ProtectControlGroups=true ProtectKernelModules=true PrivateDevices=true PrivateTmp=true SystemCallArchitectures=native
What about isolation?
@ipmb | #djangocon Isolation You still need Python installed globally
Easy to install multiple Pythons on one server Docker has better isolation, but do you need it?
@ipmb | #djangocon What about parity? Zipapp is the same
from CI to all deployed environments Use Docker to mimic deployment envionrment locally (or don't)
@ipmb | #djangocon Pros Simpler. No Docker on the server.
No registry. ~1M fewer lines of code to depend on. Smaller artifacts Faster deployments It's just Python
@ipmb | #djangocon Cons Not as isolated as true containers
Requires Python runtime on the server Python-specific Not cross-platform compatible (if you have packages with C extensions)
@ipmb | #djangocon Sweet spot for zipapps You are deploying
primarily Python services You have outgrown PaaS (Heroku, PythonAnywhere, Divio, etc.) You have fewer than 50 services to maintain
None
None
Thanks! Peter Baumgartner
[email protected]
@ipmb