Upgrade to Pro — share decks privately, control downloads, hide ads and more …

better docker image

orisano
October 09, 2018

better docker image

orisano

October 09, 2018
Tweet

More Decks by orisano

Other Decks in Technology

Transcript

  1. Better Docker Image
    Container Build Meetup #1 #container_build
    @orisano

    View Slide

  2. ྑ͍Docker Imageͱ͸Կ͔

    View Slide

  3. αʔϏεʹؔΘΔਓΛ
    ޾ͤʹ͢ΔΠϝʔδ

    View Slide

  4. ݟͯΘ͔Γ΍͍͢
    खݩͰߴ଎ʹbuild͞ΕΔ
    CI্Ͱߴ଎ʹbuild͞ΕΔ
    ߴ଎ʹdeploy͞ΕΔ

    View Slide

  5. ࠓ೔࿩͍ͨ͜͠ͱ

    View Slide

  6. ͲͷΑ͏ʹ଎͘͢Δ͔
    ͲͷΑ͏ʹখ͘͢͞Δ͔

    View Slide

  7. ͲͷΑ͏ʹ଎͘͢Δ͔
    ͲͷΑ͏ʹখ͘͢͞Δ͔

    View Slide

  8. ͲͷΑ͏ʹ଎͘͢Δ͔
    • ΠϝʔδΛখ͘͢͞Δ
    • ίϚϯυͦͷ΋ͷΛ଎͘͢Δ
    • cacheΛޮ͔ͤΔ
    • ґଘͷͳ͍εςʔδΛฒྻͰ࣮ߦ͢Δ
    • ඞཁͳ͍εςʔδΛbuild͠ͳ͍

    View Slide

  9. ͲͷΑ͏ʹ଎͘͢Δ͔
    • ΠϝʔδΛখ͘͢͞Δ
    • ίϚϯυͦͷ΋ͷΛ଎͘͢Δ
    • cacheΛޮ͔ͤΔ
    • ґଘͷͳ͍εςʔδΛฒྻͰ࣮ߦ͢Δ
    • ඞཁͳ͍εςʔδΛbuild͠ͳ͍

    View Slide

  10. imageΛখ͘͢͞Δͷ͸
    docker push͢Δͱ͖ͷ଎౓
    docker pull͢Δͱ͖ͷ଎౓
    ͷߴ଎Խʹͭͳ͕Δ

    View Slide

  11. Ͳͷ༷ʹখ͘͢͞Δ͔͸
    ͋ͱͰ

    View Slide

  12. ͲͷΑ͏ʹ଎͘͢Δ͔
    • ΠϝʔδΛখ͘͢͞Δ
    • ίϚϯυͦͷ΋ͷΛ଎͘͢Δ
    • cacheΛޮ͔ͤΔ
    • ґଘͷͳ͍εςʔδΛฒྻͰ࣮ߦ͢Δ
    • ඞཁͳ͍εςʔδΛbuild͠ͳ͍

    View Slide

  13. ίϚϯυͦͷ΋ͷΛ଎͘͢Δ

    View Slide

  14. URLʹର͢ΔADDΛ࢖Θͳ͍
    RUNͷத਎Λ଎͘͢Δ

    View Slide

  15. URLʹର͢ΔADDΛ࢖Θͳ͍
    RUNͷத਎Λ଎͘͢Δ

    View Slide

  16. URLʹର͢ΔADD͸
    جຊతʹμ΢ϯϩʔυ͢Δ

    View Slide

  17. ஗͍

    View Slide

  18. ΞΫηε͍ͯ͠Δઌͷ
    ίϯςϯπ͕ႈ౳ͳΒ
    wget + gzip + tarͰे෼

    View Slide

  19. `RUN wget`ʹ͢Δ͜ͱͰ
    cache͕ޮ͘

    View Slide

  20. ႈ౳Ͱͳ͍Ϧιʔεʹ
    ґଘ͢ΔͷΛۃྗ΍ΊΔ

    View Slide

  21. URLʹର͢ΔADDΛ࢖Θͳ͍
    RUNͷத਎Λ଎͘͢Δ

    View Slide

  22. GitHub͔Β࣮ߦϑΝΠϧΛ
    curl or wgetͰऔಘ͢Δ
    ͕஗͍

    View Slide

  23. Ͳ͏ʹ͔଎͘Ͱ͖ͳ͍͔
    curl -vvvΛ͏ͬͯΈͨ

    View Slide

  24. GitHub Release͸S3Ͱ͋Δ
    S3͸Accept-Ranges: bytes
    ͱ͍͏͜ͱ͕Θ͔ͬͨ

    View Slide

  25. Accept-Ranges: bytes
    ͬͯͳΜͩΖ͏

    View Slide

  26. RFC7233, Range Requests
    ൣғΛࢦఆͯ͠
    downloadͰ͖Δ

    View Slide

  27. ͭ·Γ
    ฒྻμ΢ϯϩʔυ͕Մೳ

    View Slide

  28. github.com/orisano/rget

    View Slide

  29. View Slide

  30. ؀ڥʹΑΓ·͕͢
    5min -> 2min

    View Slide

  31. Dockerfileͷ޻෉Ҏ֎ʹ΋
    ଎͘͢ΔΞϓϩʔν͸͋Δ

    View Slide

  32. ͲͷΑ͏ʹ଎͘͢Δ͔
    • ΠϝʔδΛখ͘͢͞Δ
    • ίϚϯυͦͷ΋ͷΛ଎͘͢Δ
    • cacheΛޮ͔ͤΔ
    • ґଘͷͳ͍εςʔδΛฒྻͰ࣮ߦ͢Δ
    • ඞཁͳ͍εςʔδΛbuild͠ͳ͍

    View Slide

  33. cacheΛޮ͔ͤΔ

    View Slide

  34. docker build͢ΔϚγϯ͕
    ಉҰͷ৔߹
    ಉҰͰͳ͍৔߹

    View Slide

  35. docker build͢ΔϚγϯ͕
    ಉҰͷ৔߹
    ಉҰͰͳ͍৔߹

    View Slide

  36. cacheͷ࢓૊ΈΛཧղ͢Δ

    View Slide

  37. RUN͸
    จࣈྻ͕มΘΒͳ͍ݶΓ
    جຊతʹcache͞ΕΔ

    View Slide

  38. COPY, ADD͢ΔϑΝΠϧͷ
    ಺༰͕มΘͬͨ৔߹
    Ҏ߱ͷRUNͷcache͕ഁغ

    View Slide

  39. ͳͷͰ
    lockfileͳͲΛઌʹίϐʔͯ͠
    install͚ͩͯ͠cacheͤ͞Δ

    View Slide

  40. View Slide

  41. View Slide

  42. docker build͢ΔϚγϯ͕
    ಉҰͷ৔߹
    ಉҰͰͳ͍৔߹

    View Slide

  43. CI্Ͱbuild͢Δͱ͖ͳͲ
    cache͕ͳ͍͜ͱ͕ଟ͍

    View Slide

  44. docker save & load
    or
    docker pull
    docker build —cache-from
    Λ࢖͏

    View Slide

  45. image͕େ͖͍/layer͕ଟ͍
    ৔߹
    buildͷ΄͏͕ૣ͍͜ͱ΋͋Δ

    View Slide

  46. image͕େ͖͍/layer͕ଟ͍
    ৔߹
    buildͷ΄͏͕ૣ͍͜ͱ΋͋Δ
    ܭଌܾͯ͠ΊΔ

    View Slide

  47. ͲͷΑ͏ʹ଎͘͢Δ͔
    • ΠϝʔδΛখ͘͢͞Δ
    • ίϚϯυͦͷ΋ͷΛ଎͘͢Δ
    • cacheΛޮ͔ͤΔ
    • ґଘͷͳ͍εςʔδΛฒྻͰ࣮ߦ͢Δ
    • ඞཁͳ͍εςʔδΛbuild͠ͳ͍

    View Slide

  48. ґଘͷͳ͍εςʔδΛ
    ฒྻͰ࣮ߦ͢Δ

    View Slide

  49. buildkitΛ࢖͍ͬͯͩ͘͞ʂ
    github.com/moby/buildkit
    export DOCKER_BUILDKIT=1

    View Slide

  50. ͲͷΑ͏ʹ଎͘͢Δ͔
    • ΠϝʔδΛখ͘͢͞Δ
    • ίϚϯυͦͷ΋ͷΛ଎͘͢Δ
    • cacheΛޮ͔ͤΔ
    • ґଘͷͳ͍εςʔδΛฒྻͰ࣮ߦ͢Δ
    • ඞཁͳ͍εςʔδΛbuild͠ͳ͍

    View Slide

  51. ඞཁͳ͍εςʔδΛ
    build͠ͳ͍

    View Slide

  52. —targetΛ࢖͑͹Α͍ͷͰ͸ʁ

    View Slide

  53. —target͸
    ࢦఆͨ͠εςʔδҎલΛ
    શ෦build͢Δ

    View Slide

  54. multi stage buildΛ
    ౿ΈࠐΜͩ࢖͍ํ͍ͯ͠Δͱ
    ૺ۰͕ͪ͠

    View Slide

  55. ͓ͦΒ͘buildkitͰͰ͖Δ͕
    buildkit͕࢖͑ͳ͍৔߹ʹ

    View Slide

  56. github.com/orisano/targd
    • DockerfileͷASTΛऔಘ
    • ࢦఆ͞ΕͨεςʔδͷґଘεςʔδΛநग़
    • ґଘεςʔδ͚ͩͷDockerfileΛग़ྗ

    View Slide

  57. github.com/orisano/targd

    View Slide

  58. ͲͷΑ͏ʹ଎͘͢Δ͔
    ͲͷΑ͏ʹখ͘͢͞Δ͔

    View Slide

  59. ͲͷΑ͏ʹখ͘͢͞Δ͔
    • multi stage buildΛ࢖͏
    • RUNΛ·ͱΊΔ(?)
    • ͳͥେ͖͍͔Λ஌Δ

    View Slide

  60. ͲͷΑ͏ʹখ͘͢͞Δ͔
    • multi stage buildΛ࢖͏
    • RUNΛ·ͱΊΔ(?)
    • ͳͥେ͖͍͔Λ஌Δ

    View Slide

  61. multi stage buildΛ࢖͏

    View Slide

  62. multi stage buildͰ
    ͋Γ͕ͪͳٙ໰

    View Slide

  63. ࠷ऴతͳΠϝʔδ͕
    খ͘͞ͳΔ͔Β
    ͦΕ·Ͱͷεςʔδ͸
    ࠷దԽ͠ͳͯ͘ྑ͍ʁ

    View Slide

  64. View Slide

  65. ݸਓతʹ͸No

    View Slide

  66. moby/issues/34715
    —cache-formͩͱ
    multi stage buildͷ
    લஈͷεςʔδͷcache͕
    ޮ͔ͳ͍

    View Slide

  67. ࠷ऴεςʔδ͔͠
    pushͯ͠ͳ͍͔Β౰ͨΓલ

    View Slide

  68. CI্Ͱͷbuild͸
    —cache-fromΛ࢖͏
    ࠷ऴεςʔδ͚ͩcache͢Δ
    ҙຯ͸ͳ͍

    View Slide

  69. multi stage build࣌ʹ
    cacheΛޮ͔͍ͤͨ৔߹͸
    લͷεςʔδ΋
    ໌ࣔతʹpush͢Δ͔͠ͳ͍

    View Slide

  70. ݁ہpush͢ΔͷͰ
    push/pullͷίετ͕͔͔Δ
    ͢΂ͯͷεςʔδΛฏ౳ʹ
    খ͘͢͞΂͖
    (ݸਓͷݟղͰ͢)

    View Slide

  71. ͲͷΑ͏ʹখ͘͢͞Δ͔
    • multi stage buildΛ࢖͏
    • RUNΛ·ͱΊΔ(?)
    • ͳͥେ͖͍͔Λ஌Δ

    View Slide

  72. RUNΛ·ͱΊΔ(?)

    View Slide

  73. Ͳ͔ͬʔ;͍͊Δ͸
    1ͭͷRUNʹ
    શ෦ॻ͘ͱྑ͍Β͍͠(?)

    View Slide

  74. github.com/orisano/minid
    • DockerfileͷASTΛऔಘ
    • ࿈ଓ͢ΔRUN, COPY, ADDΛ࿈݁͢Δ
    • ݁ՌͷDockerfileΛग़ྗ

    View Slide

  75. github.com/orisano/minid

    View Slide

  76. αΠζ͕খ͘͞ͳͬͨ

    View Slide

  77. Ͱ΋ͳΜͰʁ

    View Slide

  78. ϨΠϠʔͷΦʔόʔϔου͕
    ݮΔ͔Βখ͘͞ͳΔʁ

    View Slide

  79. ͍͍͑

    View Slide

  80. ·ͣ
    Ͳ͏͍͏ܗͰอଘ͞ΕͯΔ͔
    Λ஌Δ

    View Slide

  81. moby/image/spec/v1.md

    View Slide

  82. AUFS

    View Slide

  83. http://docs.docker.jp/engine/userguide/storagedriver/aufs-driver.html

    View Slide

  84. ࡟আ͸
    whiteoutϑΝΠϧͷ௥Ճ
    Ҡಈ͸
    opaqueϑΝΠϧͷ௥Ճ
    ʴ
    ҠಈઌͷϑΝΠϧࠩ෼

    View Slide

  85. Ұ౓Ͱ΋
    RUN,COPY,ADDΛލ͙ͱ
    imageʹ͸࢒ͬͯ͠·͏

    View Slide

  86. ػցతʹͰ΋
    ҰͭͷRUNʹ·ͱΊΔ͜ͱͰ
    ༨ܭͳ΋ͷΛ࡟ݮͰ͖Δ

    View Slide

  87. 1ͭͷϨΠϠʔʹ
    ·ͱΊΔ͜ͱ͸
    ຊ౰ʹਖ਼͍͠ͷ͔

    View Slide

  88. ϨΠϠʔΛผ͚Δ͜ͱʹΑΓ
    ฒྻμ΢ϯϩʔυͷԸܙ
    cacheͷ༗ޮ׆༻
    Մಡੑͷ޲্

    View Slide

  89. ϨΠϠʔΛผ͚Δ͜ͱʹΑΓ
    ฒྻμ΢ϯϩʔυͷԸܙ
    cacheͷ༗ޮ׆༻
    Մಡੑͷ޲্
    ܭଌܾͯ͠ΊΔ

    View Slide

  90. ͱ͸͍͑
    ෳ਺ϨΠϠʔʹ
    ލ͕Βͳ͍ఔ౓ʹ
    ෼ׂ͢Δͷ͕ྑͦ͞͏

    View Slide

  91. ͲͷΑ͏ʹখ͘͢͞Δ͔
    • multi stage buildΛ࢖͏
    • RUNΛ·ͱΊΔ(?)
    • ͳͥେ͖͍͔Λ஌Δ

    View Slide

  92. ͳͥେ͖͍͔Λ஌Δ

    View Slide

  93. ͍͔ͳΔνϡʔχϯάͰ΋
    ܭଌͤͣʹ΍ͬͯ͸͍͚ͳ͍

    View Slide

  94. docker history

    View Slide

  95. docker history

    View Slide

  96. ͲͷϨΠϠʔ͕
    େ͖͍͔͸Θ͔Δ͚Ͳ
    ͳͥେ͖͍͔͸෼͔ΓͮΒ͍

    View Slide

  97. ҙ֎ʹίϚϯυ͕
    Ͳ͏͍͏ϑΝΠϧΛ࡞Δͷ͔
    ஌Βͳ͍

    View Slide

  98. github.com/orisano/dlayer
    • docker saveͰಘΒΕͨtarΛղੳ
    • layerͱcmdͷରԠΛͱΔ
    • layerͷࠩ෼ΛϑΝΠϧαΠζ͕େ͖͍ॱʹද

    View Slide

  99. github.com/orisano/dlayer

    View Slide

  100. ࣮ࡍʹdlayerΛ࢖ͬͯ
    golangެࣜalpineΠϝʔδͷ
    αΠζΛݮΒͯ͠Έͨ

    View Slide

  101. docker-library/golang/pull/232

    View Slide

  102. View Slide

  103. golang:1.11͔Βtoolchainͷ
    αΠζ͕Ͱ͔͘ͳͬͨ
    SSAͰͷ࠷దԽ͕૿͔͑ͨΒʁ

    View Slide

  104. 1.10: 253MB

    View Slide

  105. 1.11: 305MB

    View Slide

  106. ࡞ͬͨπʔϧ
    • github.com/orisano/rget
    • github.com/orisano/targd
    • github.com/orisano/minid
    • github.com/orisano/dlayer
    • ྑ͍ͱࢥͬͨΒελʔ͍͚ͯͨͩ͠ΔͱྭΈʹͳΓ·͢

    View Slide

  107. ·ͱΊ
    • ίϚϯυΛ଎͘Ͱ͖ͳ͍͔ߟ͑Δ
    • cacheΛཧղͯ͠༗ޮʹ׆͔͢ (CI or ϩʔΧϧ)
    • multi stage buildΛ࢖͏ (ॏ͍stageΛcache͢Δ)
    • layerΛখ͘͢͞ΔͨΊʹ෼ੳ͢Δ
    • buildkitΛ࢖͏!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    View Slide

  108. rget͜΅Ε࿩

    View Slide

  109. github.com/orisano/rget

    View Slide

  110. Ͱ΋
    ͜ΕͰຊ౰ʹ͍͍ΜͩΖ͏͔

    View Slide

  111. rgetͷbinaryΛdownload
    ͢ΔͷͰ͸ෛ͚ͨؾ͕͢Δ()

    View Slide

  112. shell͚ͩͰ
    ࣮ݱͰ͖ͳ͍ͩΖ͏͔

    View Slide

  113. ϙʔλϒϧੑ͸͍Βͳ͍ͷͰ
    ओઓ৔ͷalpineʹߜΔ

    View Slide

  114. alpine(busybox)͸
    xargs͕ೖ͍ͬͯΔʂʂʂ

    View Slide

  115. xargsΛ࢖͏͜ͱͰ
    ฒྻԽ
    ಉ࣌઀ଓ਺੍ݶ
    ͕࣮ݱͰ͖Δ

    View Slide

  116. GitHub Release͸
    ؆୯ʹHEAD͕Ͱ͖ͳ͍ͷͰ
    GETͰbodyΛແࢹͯ͠
    Content-LengthΛऔಘͰ͖Δ

    View Slide

  117. seqͰ
    chunkͷrangeΛੜ੒Ͱ͖Δ

    View Slide

  118. wget͸206 Partial Content
    ͕͏·͘ѻ͑ͳ͍ͷͰμϝ

    View Slide

  119. ࢓ํͳ͍ͷͰ
    curl -RͰdownload

    View Slide

  120. ࠷ޙʹcatͯ͠chunkΛ݁߹

    View Slide

  121. shellͰ΋࣮ݱͰ͖Δʂ

    View Slide

  122. ͔͠͠
    curl͸alpineඪ४Ͱ͸ͳ͍

    View Slide

  123. apk add —no-cache curl
    ͸ෛ͚ͨؾ͕͢Δ()

    View Slide

  124. ͔͠͠
    wget͸206͕ॲཧͰ͖ͳ͍

    View Slide

  125. ఘΊΒΕͳ͍ͷͰ
    busyboxͷwgetͷ
    ιʔείʔυΛಡΉ

    View Slide

  126. busybox/networking/wget.c

    View Slide

  127. busybox/networking/wget.c

    View Slide

  128. -OͰࢦఆͨ͠ϑΝΠϧ͕ଘࡏ
    (ϑΝΠϧαΠζ͕1Ҏ্)
    -cΛࢦఆ͍ͯ͠Δ
    ্هͷ৚݅Λຬͨ͢ͱ͖
    206Λॲཧͯ͘͠ΕΔ

    View Slide

  129. ͭ·Γ
    ద౰ͳ1byteͷϑΝΠϧʹ
    -cͰࢦఆ͢Δ͜ͱͰճආՄೳ

    View Slide

  130. ઌ಄ͷ1byteΛऔΓআ͚Ε͹
    alpineඪ४ͷΈͰ࣮ݱՄೳ

    View Slide

  131. tailͰ΋Մೳ͕ͩ஗͍
    dd skip=1 iflag=skip_bytes
    ͕ߴ଎

    View Slide

  132. alpineඪ४ͷΈͰ࣮ݱ

    View Slide

  133. https://github.com/orisano/rget/blob/master/rget.sh

    View Slide