Slide 1

Slide 1 text

Carton managing CPAN dependencies Tatsuhiko Miyagawa @miyagawa Nordic Perl Workshop 2013 Saturday, November 23, 13

Slide 2

Slide 2 text

Me • Tatsuhiko Miyagawa • Lives in San Francisco • {github,twitter,CPAN}/miyagawa Saturday, November 23, 13

Slide 3

Slide 3 text

Thank You! Saturday, November 23, 13

Slide 4

Slide 4 text

Managing CPAN Dependencies Saturday, November 23, 13

Slide 5

Slide 5 text

How many CPAN modules your app depends on? Saturday, November 23, 13

Slide 6

Slide 6 text

When is the last time upgrading a CPAN module broke your app? Saturday, November 23, 13

Slide 7

Slide 7 text

Case Study: Web App Development Saturday, November 23, 13

Slide 8

Slide 8 text

You’re writing a new web app using as many CPAN modules. Saturday, November 23, 13

Slide 9

Slide 9 text

Get them from CPAN, install on your machine. Saturday, November 23, 13

Slide 10

Slide 10 text

john@local>  cpanm  Web::Framework installed  LWP-­‐5.912 installed  Plack-­‐0.9980 installed  Web-­‐Framework-­‐1.10 Saturday, November 23, 13

Slide 11

Slide 11 text

Test it... Saturday, November 23, 13

Slide 12

Slide 12 text

Works? Ship it! Saturday, November 23, 13

Slide 13

Slide 13 text

What if ... Saturday, November 23, 13

Slide 14

Slide 14 text

• Jul 2nd: Started working on project • using Web::Framework 1.1 • Jul 9th: Finished version 1.0 • Jul 10-15th: internal beta, QA • Jul 16th: Deploy to the production Saturday, November 23, 13

Slide 15

Slide 15 text

• Jul 2nd: Started working on project • using Web::Framework 1.1 • Jul 9th: Finished version 1.0 • Jul 10-15th: internal beta, QA • Jul 15th: Web::Framework 1.2 is released • Jul 16th: Deploy to the cloud/production Saturday, November 23, 13

Slide 16

Slide 16 text

root@prod>  cpanm  Web::Framework installed  LWP-­‐5.912 installed  Plack-­‐0.9980 installed  Web-­‐Framework-­‐1.20 Saturday, November 23, 13

Slide 17

Slide 17 text

Web::Framework 1.2 API changes! Saturday, November 23, 13

Slide 18

Slide 18 text

Saturday, November 23, 13

Slide 19

Slide 19 text

Saturday, November 23, 13

Slide 20

Slide 20 text

“Upgrading CPAN modules broke my app” Saturday, November 23, 13

Slide 21

Slide 21 text

Dependencies are part of your app. Saturday, November 23, 13

Slide 22

Slide 22 text

a solution cpanm 1.6 Saturday, November 23, 13

Slide 23

Slide 23 text

>  cpanm  Web::Framework@1.10 installed  Web-­‐Framework-­‐1.10 Saturday, November 23, 13

Slide 24

Slide 24 text

>  cpanm  Web::Framework~">=  1.0,  <  1.2" installed  Web-­‐Framework-­‐1.19 Saturday, November 23, 13

Slide 25

Slide 25 text

♥ MetaCPAN Saturday, November 23, 13

Slide 26

Slide 26 text

a solution cpanfile + cpanm 1.6 Saturday, November 23, 13

Slide 27

Slide 27 text

>  cat  cpanfile requires  'Web::Framework',  '==  1.10'; >  cpanm  -­‐-­‐installdeps  . installed  Web-­‐Framework-­‐1.10 Saturday, November 23, 13

Slide 28

Slide 28 text

cpanfile DSL to describe prereqs Saturday, November 23, 13

Slide 29

Slide 29 text

requires  'Catalyst',  '5.8000';   recommends  'JSON::XS',  '2.0'; on  'test'  =>  sub  {    requires  'Test::More',  '>=  0.96' }; on  'develop'  =>  sub  {    recommends  'Devel::NYTProf'; }; feature  'sqlite'  =>  sub  {    requires  'DBD::SQLite'; }; Saturday, November 23, 13

Slide 30

Slide 30 text

inspired by: gemfile(5) Saturday, November 23, 13

Slide 31

Slide 31 text

Compatible to: Module::Install(::DSL) Saturday, November 23, 13

Slide 32

Slide 32 text

Converted to: CPAN::Meta::Prereqs Saturday, November 23, 13

Slide 33

Slide 33 text

Toolset Module::CPANfile Module::Install::CPANfile Dist::Zilla plugins Saturday, November 23, 13

Slide 34

Slide 34 text

Supported by dzil, Milla & cpanm 1.6 Saturday, November 23, 13

Slide 35

Slide 35 text

cpanfile + cpanm • Simple • Yet powerful and flexible way to describe dependencies and version requirements • Version control cpanfile Saturday, November 23, 13

Slide 36

Slide 36 text

caveats • Locking each dependency with specific version is tedious work • Can only lock direct dependencies • MetaCPAN as SPOF • No easy/reliable way to fallback Saturday, November 23, 13

Slide 37

Slide 37 text

Many other solutions Needs servers, Needs databases Too simple, Too complicated, etc. Saturday, November 23, 13

Slide 38

Slide 38 text

the new Solution Saturday, November 23, 13

Slide 39

Slide 39 text

Carton https://github.com/miyagawa/carton Saturday, November 23, 13

Slide 40

Slide 40 text

Inspired by... Saturday, November 23, 13

Slide 41

Slide 41 text

Saturday, November 23, 13

Slide 42

Slide 42 text

Basic idea: Describe CPAN dependencies snapshot tarball pathnames Saturday, November 23, 13

Slide 43

Slide 43 text

Built on top of: cpanfile + cpanm 1.7 Saturday, November 23, 13

Slide 44

Slide 44 text

• App-specific local environment • Fast and safe install with caches • Dep-tree analysis, including versions • Freezing module versions • Conservative updates • Easy Redeployment, Rollback • Single-file, VCS friendly Saturday, November 23, 13

Slide 45

Slide 45 text

Local perl environment Using local::lib and cpanm -L Each app has an isolated local library path Saturday, November 23, 13

Slide 46

Slide 46 text

Fast and safe install Saves MYMETA.json and install meta info Saturday, November 23, 13

Slide 47

Slide 47 text

Dep tree analysis Rebuild the dependency tree from snapshot Checks if anything is missing/superfluous Saturday, November 23, 13

Slide 48

Slide 48 text

Freezing versions Versions are saved in snapshots including dependencies Saturday, November 23, 13

Slide 49

Slide 49 text

Easy Redeployment Reinstall exactly the same set of modules on another prod/development machines. Saturday, November 23, 13

Slide 50

Slide 50 text

Conservative Update Modules won't be upgraded unless it is required, or manually updated. Saturday, November 23, 13

Slide 51

Slide 51 text

Single-file, VCS friendly You can add cpanfile.snapshot to git update whenever you update modules "Dependencies are part of your app." Saturday, November 23, 13

Slide 52

Slide 52 text

Safe and easy rollback revert the lock file and redeploy Saturday, November 23, 13

Slide 53

Slide 53 text

DEMO Saturday, November 23, 13

Slide 54

Slide 54 text

Deployment with Carton Saturday, November 23, 13

Slide 55

Slide 55 text

 @local>  carton  install  @local>  git  commit  cpanfile.snapshot  @local>  git  push @remote>  carton  install  -­‐-­‐deployment @remote>  carton  exec  plackup  ... Saturday, November 23, 13

Slide 56

Slide 56 text

Example: github.com/miyagawa/cpanmetadb-perl capistrano, Server::Starter, carton, plackup (twiggy) Saturday, November 23, 13

Slide 57

Slide 57 text

PaaS/Cloud github.com/miyagawa/heroku-buildpack-perl Saturday, November 23, 13

Slide 58

Slide 58 text

Saturday, November 23, 13

Slide 59

Slide 59 text

http://weblog.bulknews.net Saturday, November 23, 13

Slide 60

Slide 60 text

Support to come! Dokku, DotCloud, Travis CI, Cloud Foundry etc. Saturday, November 23, 13

Slide 61

Slide 61 text

carton 1.0 on CPAN Saturday, November 23, 13

Slide 62

Slide 62 text

>  cpanm  Carton Saturday, November 23, 13

Slide 63

Slide 63 text

Preview: next major releases Saturday, November 23, 13

Slide 64

Slide 64 text

cpanm 1.8 git (+ any URL) support in index Saturday, November 23, 13

Slide 65

Slide 65 text

cpanfile 1.1 git syntax support Saturday, November 23, 13

Slide 66

Slide 66 text

requires  'Plack',  '1.0000',    git  =>  'git://github.com/plack/Plack.git',    ref  =>  'devel'; carton 1.1 Saturday, November 23, 13

Slide 67

Slide 67 text

requires  'Plack',  '1.0011',    dist  =>  'MIYAGAWA/Plack-­‐1.0011.tar.gz'; carton 1.1 Saturday, November 23, 13

Slide 68

Slide 68 text

requires  'Plack',  '1.0011',    dist  =>  'http://darkpan/Plack-­‐1.tar.gz'; carton 1.1 Saturday, November 23, 13

Slide 69

Slide 69 text

(demo) Saturday, November 23, 13

Slide 70

Slide 70 text

cpanm 1.8 • Rewrite internals • Backend API • Plugin support • CPAN Testers support (via plugins) Saturday, November 23, 13

Slide 71

Slide 71 text

carton 1.1 • binstubs • configure args/hints support • safe exec on development • remember options (--path etc.) Saturday, November 23, 13

Slide 72

Slide 72 text

github.com/miyagawa/carton irc.perl.org #carton Saturday, November 23, 13

Slide 73

Slide 73 text

speakerdeck.com /miyagawa Saturday, November 23, 13

Slide 74

Slide 74 text

gum.co/BmXz Saturday, November 23, 13

Slide 75

Slide 75 text

Questions? Saturday, November 23, 13