Carton 1.0 at OSCON 2013

1.

Carton 1.0 managing CPAN deps the right way Tatsuhiko Miyagawa
@miyagawa O'Reilly OSCON 2013 Wednesday, July 24, 13

2.

Me • Tatsuhiko Miyagawa • Lives in San Francisco •
{github,twitter,CPAN}/miyagawa Wednesday, July 24, 13

3.

Managing CPAN Dependencies Wednesday, July 24, 13

4.

How many CPAN modules your app depends on? Wednesday, July
24, 13

5.

When is the last time upgrading a CPAN module broke
your app? Wednesday, July 24, 13

6.

Case Study: Web App Development Wednesday, July 24, 13

7.

You’re writing a new web app using as many CPAN
modules. Wednesday, July 24, 13

8.

Get them from CPAN, install on your machine. Wednesday, July
24, 13

9.

john@local> cpanm Web::Framework installed LWP-‐5.912 installed Plack-‐0.9980 installed Web-‐Framework-‐1.10 Wednesday,
July 24, 13

10.

Test it... Wednesday, July 24, 13

11.

Works? Ship it! Wednesday, July 24, 13

12.

What if ... Wednesday, July 24, 13

13.

• Jul 2nd: Started working on project • using Web::Framework
1.1 • Jul 9th: Finished version 1.0 • Jul 10-15th: internal beta, QA • Jul 16th: Deploy to the production Wednesday, July 24, 13

14.

• Jul 2nd: Started working on project • using Web::Framework
1.1 • Jul 9th: Finished version 1.0 • Jul 10-15th: internal beta, QA • Jul 15th: Web::Framework 1.2 is released • Jul 16th: Deploy to the cloud/production Wednesday, July 24, 13

15.

root@prod> cpanm Web::Framework installed LWP-‐5.912 installed Plack-‐0.9980 installed Web-‐Framework-‐1.20 Wednesday,
July 24, 13

16.

Web::Framework 1.2 API changes! Wednesday, July 24, 13

17.

Wednesday, July 24, 13

18.


19.

“Upgrading CPAN modules broke my app” Wednesday, July 24, 13

20.

Dependencies are part of your app. Wednesday, July 24, 13

21.

a solution cpanm 1.6 Wednesday, July 24, 13

22.

> cpanm Web::Framework@1.10 installed Web-‐Framework-‐1.10 Wednesday, July 24, 13

23.

> cpanm Web::Framework~">= 1.0, < 1.2" installed Web-‐Framework-‐1.19 Wednesday, July
24, 13

24.

♥ MetaCPAN Wednesday, July 24, 13

25.

a solution cpanﬁle + cpanm 1.6 Wednesday, July 24, 13

26.

> cat cpanfile requires 'Web::Framework', '== 1.10'; > cpanm -‐-‐installdeps
. installed Web-‐Framework-‐1.10 Wednesday, July 24, 13

27.

cpanfile DSL to describe prereqs Wednesday, July 24, 13

28.

requires 'Catalyst', '5.8000'; recommends 'JSON::XS', '2.0'; on 'test' =>
sub { requires 'Test::More', '>= 0.96' }; on 'develop' => sub { recommends 'Devel::NYTProf'; }; feature 'sqlite' => sub { requires 'DBD::SQLite'; }; Wednesday, July 24, 13

29.

inspired by: gemﬁle(5) Wednesday, July 24, 13

30.

Backward compatible to: Module::Install(::DSL) Wednesday, July 24, 13

31.

Converted to to: CPAN::Meta::Prereqs Wednesday, July 24, 13

32.

Toolset Module::CPANﬁle Module::Install::CPANﬁle Dist::Zilla plugins Wednesday, July 24, 13

33.

Supported by dzil, Milla & cpanm 1.6 Wednesday, July 24,
13

34.

cpanfile + cpanm • Simple • Yet powerful and flexible
way to describe dependencies and version requirements • Version control cpanfile Wednesday, July 24, 13

35.

caveats • Locking each dependency with speciﬁc version is tedious
work • Can only lock direct dependencies • MetaCPAN as SPOF • No easy/reliable way to fallback Wednesday, July 24, 13

36.

Many other solutions Needs servers, Needs databases Too simple, Too
complicated, etc. Wednesday, July 24, 13

37.

the Solution Wednesday, July 24, 13

38.

Carton https://github.com/miyagawa/carton Wednesday, July 24, 13

39.

Inspired by... Wednesday, July 24, 13

40.


41.

Basic idea: Describe CPAN dependencies snapshot tarball pathnames Wednesday, July
24, 13

42.

Built on top of: cpanﬁle + cpanm 1.6 Wednesday, July
24, 13

43.

• App-speciﬁc local environment • Fast and safe install with
caches • Dep-tree analysis, including versions • Freezing module versions • Conservative updates • Easy Redeployment, Rollback • Single-ﬁle, VCS friendly Wednesday, July 24, 13

44.

Local perl environment Using local::lib and cpanm -L Each app
has an isolated local library path Wednesday, July 24, 13

45.

Fast and safe install Saves MYMETA.json and install meta info

46.

Dep tree analysis Rebuild the dependency tree from snapshot Checks
if anything is missing/superﬂuous Wednesday, July 24, 13

47.

Freezing versions Versions are saved in snapshots including dependencies Wednesday,
July 24, 13

48.

Easy Redeployment Reinstall exactly the same set of modules on
another prod/development machines. Wednesday, July 24, 13

49.

Conservative Update Modules won't be upgraded unless it is required,
or manually updated. Wednesday, July 24, 13

50.

Single-ﬁle, VCS friendly You can add cpanﬁle.snapshot to git update
whenever you update modules "Dependencies are part of your app." Wednesday, July 24, 13

51.

Safe and easy rollback revert the lock ﬁle and redeploy

52.

DEMO Wednesday, July 24, 13

53.

Deployment with Carton Wednesday, July 24, 13

54.

@local> carton install @local> git commit cpanfile.snapshot @local> git push
@remote> carton install -‐-‐deployment @remote> carton exec plackup ... Wednesday, July 24, 13

55.

Example: github.com/miyagawa/cpanmetadb-perl capistrano, Server::Starter, carton, plackup (twiggy) Wednesday, July 24,
13

56.

PaaS/Cloud github.com/miyagawa/heroku-buildpack-perl Wednesday, July 24, 13

57.


58.

http://weblog.bulknews.net Wednesday, July 24, 13

59.

Support to come! Dokku, DotCloud, Travis CI, Cloud Foundry etc.

60.

carton 1.0 later this week Wednesday, July 24, 13

61.

> cpanm -‐-‐dev Carton Wednesday, July 24, 13

62.

Towards 1.1 • Inject patched versions (DarkPAN) • Install from
github • bootstrap with fatpack Wednesday, July 24, 13

63.

github.com/miyagawa/carton irc.perl.org #carton Wednesday, July 24, 13

64.

speakerdeck.com /miyagawa Wednesday, July 24, 13

65.

Questions? Wednesday, July 24, 13

Carton 1.0 at OSCON 2013

Carton 1.0 at OSCON 2013

Want more?

Transcript