Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Dockercon 16 Recap

Dockercon 16 Recap

Presented at the Docker Austin meetup on July 7th, 2016.

Video recording - https://www.youtube.com/watch?v=-x-YfwTRZ98

Lee Calcote

July 07, 2016
Tweet

More Decks by Lee Calcote

Other Decks in Technology

Transcript

  1. Community Announcements July 11-13th July 23rd July 8-9th Sep 7-9th

    July 19th • Companies Hiring? • People Looking? • Other Events? • Interesting News?
  2. Docker Birthday #3 Training + Celebration • 125 Docker Birthday

    celebrations • 8000+ RSVPS • 600+ mentors • 1000+ attendees completed the training!
  3. 1. Get out of the way The best tools… 2.

    Adapt to you 3. Make the powerful simple
  4. Hypervisor Framework vmnet Framework Docker Container Engine HyperKit Linux VPNKit

    DataKit Client Libraries Admin GUI CLI Security Sandbox Making things easy is really hard. Hypervisor Framework vmnet Framework Docker Container Engine HyperKit Linux VPNKit DataKit Client Libraries Admin GUI CLI Security Sandbox
  5. Moby - the Docker VM Alpine was designed to boot

    from init ramdisk So, restart the VM should you run into trouble
  6. 3 ways to get to Moby’s console 1. screen ~/Library/Containers/com.docker.docker/Data/com.docker.driver.amd64-linux/tty

    9600 2. docker run -it --privileged --pid=host debian nsenter -t 1 -m -u -n -i sh 3. docker run --net host --pid host --privileged -v /:/hostfs chroot /hostfs
  7. Swarm mode Service API Cryptographic node identity Built-in routing mesh

    Docker 1.12: now with orchestration built-in.
  8. Combine your engines in swarms of any scale Self-organizing, self-healing

    No external data store required No single points of failure Infrastructure-agnostic topology Swarm mode
  9. Cryptographic node identity Government-grade security by default End-to-end TLS Built-in

    government-grade PKI Automated key rotation Revoke any node at any time
  10. Section 2 - Docker daemon configuration 2.14 Enable live restore

    2.15 Set the auto-accept mode for the swarm to none 2.16 Set a secret value when initializing swarm mode 2.17 Do not enable swarm node, if not needed 2.18 Control the number of manager nodes in a swarm Section 4 - Container Images and Build File 4.6 Add HEALTHCHECK to the container image Section 5 - Container Runtime 5.26 Check container health at runtime
  11. Built-in Routing Mesh Swarm-wide overlay networking Container-native load-balancing DNS-based service

    discovery No separate cluster to setup Works with your existing load-balancers Rock-solid kernel-only data path with IPVS
  12. Swarm mode Service API Cryptographic node identity Built-in routing mesh

    Docker 1.12: now with orchestration built-in.
  13. Docker-native experience No external dependencies No single point of failure

    Secure by default Works with your infrastructure Reverse compatible Docker 1.12: now with orchestration built-in.