Slide 1
Slide 1 text
৬ͷDockerϏϧυ
Λվળͨ͠
1
Slide 2
Slide 2 text
ࣗݾհ
໊લ: ү ݡେ(@go_vargo)
ॴଐ: גࣜձࣾίϩϓϥ
ɹɹ Πϯϑϥάϧʔϓ ୈ2νʔϜ
झຯ: ΫϥυωΠςΟϒܥͷMeetupͷࢀՃ
࠷ۙͷΈɺίϯςφϫʔΫϩʔυͷҋͷ
ཱ͔͍ͪํ
2
Slide 3
Slide 3 text
ࠓͷςʔϚ
৬ͷDockerΠϝʔδɾϏϧυΛվળͨ͠
γνϡΤʔγϣϯ:
ɾνʔϜʹ͢ͰʹDockerfile͕͋Δ
(ڥຖʹDockerfile͕ଘࡏ͢Δ)
ɾΠϝʔδαΠζνϡʔχϯάͷ༨ͳ͠
ɾݴޠPHP(Laravel)
ɾCI/CDΛͬͯϏϧυˠσϓϩΠ͍ͯ͠Δ
ɾϩʔΧϧ։ൃDocker Compose
ϦϞʔτKubernetes(GKE)
3
Slide 4
Slide 4 text
ςʔϚʹࢸͬͨϞνϕʔγϣϯ
࠷ߴͷDockerfileΛ࡞Γ͍ͨ…
ɾDockerfileͷϕετϓϥΫςΟεɾΞϯνύλʔϯ
ݻ·Γͭͭ͋Δ…͕࣍ͷهࣄΛಡΜͰɺࠓΑΓ
ͬͱDockerϏϧυΛվળͰ͖ͦ͏ͩͱࢥͬͨ
ʮDockerfileΛվળ͢ΔͨΊͷBest Practice 2019൛ʯ
https://www.slideshare.net/zembutsu/dockerfile-bestpractices-19-and-advice
ɾڥ͝ͱʹෳ͋ΔDockerfileʹΑͬͯ
Infrastructure as Codeͱͯ͠ͷՄಡੑ͕མ͍ͪͯͨɻ
ूͯ͠ɺগ͠ͰίϯςφͷҋΛΒ͍ͨ͠
4
Slide 5
Slide 5 text
5
ڥུ֓
3FHJTUSZ ,VCFSOFUFT
4QJOOBLFS
(JU-BC3VOOFS
*NBHF#VJME
1VTI
*NBHF#BLF
%FQMPZ
Slide 6
Slide 6 text
6
ࠓ͢ͱ͜Ζ
3FHJTUSZ ,VCFSOFUFT
4QJOOBLFS
(JU-BC3VOOFS
*NBHF#VJME
1VTI
*NBHF#BLF
%FQMPZ
Slide 7
Slide 7 text
ᶃ BuildKitΛ༗ޮԽ
ᶄ ڥ(ϩʔΧϧ, ։ൃڥ,etc…)͝ͱͷDockerfileΛ
ҰͭͷDockerfileʹ·ͱΊͯɺεςʔδͰ
ڥ͝ͱͷࠩΛఆٛ
ᶅ ηΩϡϦςΟੑͷ্ͱͯ͠ɺίϯςφ͔Β
ෆཁͳSecretϑΝΠϧͷআڈ(ࠓճলུ)
7
վળͨ͜͠ͱ
Slide 8
Slide 8 text
ͷલʹɺڥมΛ༗ޮԽ͢Δ͚ͩ
8
ᶃ BuildKitͷ༗ޮԽ
docker build
DOCKER_BUILDKIT=1 docker build …
Slide 9
Slide 9 text
9
ᶄ ڥࠩΛεςʔδԽ
मਖ਼લ मਖ਼ޙ
Dockerfile.local
Debugger
Git
Vim
…
Dockerfile.k8s
FROM image AS local
….
FROM image AS local debug
….
FROM image AS k8s
….
FROM image AS k8s-XXXX
….
ҰͭͷϑΝΠϧʹू͢Δ͜ͱͰɺ
ίʔυͷڞ௨ԽͱՄಡੑΛߴΊΔ
Dockerfile.xxxx
…
Slide 10
Slide 10 text
ޮೳᶃ:
༨ܭͳϨΠϠʔΛؚΊͳ͍ͨΊΠϝʔδαΠζݮগ‑
※ BuildKitҎલ͔Βͷޮೳ
ޮೳᶄ:
Ϗϧυ࣌ؒͷॖ
10
Ϛϧνεςʔδ × BuildKit
Dockerfile ্͔ΒԼʹϏϧυ Dockerfile
Stage1
Stage2
ฒྻϏϧυ
BuildKitͳ͠ BuildKit͋Γ
Slide 11
Slide 11 text
11
मਖ਼લ
FROM php:7.2.18-alpine
COPY docker/files /
COPY composer.json composer.lock /app/
RUN cd /app \
&& apk add --no-cache --virtual .build-deps zip unzip git \
&& curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin/ --filename=composer \
&& composer global require hirak/prestissimo \
&& composer install --prefer-dist --no-interaction --no-scripts --no-autoloader --no-dev \
&& chown -R www-data:www-data vendor \
&& find vendor/ -type d -name ‘.git’ -print0 | xargs -0 rm -rf \
&& apk del .build-deps \
&& composer global remove hirak/prestissimo \
&& rm -rf /root/.composer/
COPY --chown=www-data:www-data . /app
WORKDIR /app
CMD [“run”]
ᶄ ڥࠩΛεςʔδԽ
ىಈεΫϦϓτΛίϐʔ
ύοέʔδཧͷϑΝΠϧΛίϐʔ
ϥΠϒϥϦύοέʔδཧπʔϧΛΠϯετʔϧ
ιʔείʔυΛίϐʔ
Slide 12
Slide 12 text
12
##### ComposerΠϯετʔϧ༻ #####
FROM php:7.2.18-alpine AS builder
COPY composer.json composer.lock /app/
WORKDIR /app
RUN cd /app \
&& apk add --no-cache --virtual .build-deps zip unzip git \
&& curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin/ --filename=composer \
&& composer global require hirak/prestissimo \
&& composer install --prefer-dist --no-interaction --no-scripts --no-autoloader —no-dev
##### Kubernetes༻Πϝʔδ #####
FROM php:7.2.18-alpine AS k8s
COPY docker/files /
WORKDIR /app
COPY --chown=www-data:www-data . /app/
COPY --from= builder /usr/local/bin/composer /usr/local/bin/composer
RUN apk add —no-cache zip unzip
COPY --from=builder --chown=www-data:www-data /app/vendor /app/vendor
CMD [“run”]
मਖ਼ޙ - v1
ىಈεΫϦϓτΛίϐʔ
ύοέʔδཧͷϑΝΠϧΛίϐʔ
ύοέʔδΛΠϯετʔϧ
ՌΛίϐʔ
ύοέʔδϚωʔδϟΛίϐʔ
Slide 13
Slide 13 text
13
##### ComposerΠϯετʔϧ༻ #####
FROM php:7.2.18-alpine AS builder
COPY composer.json composer.lock /app/
WORKDIR /app
RUN cd /app \
&& apk add --no-cache --virtual .build-deps zip unzip git \
&& curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin/ --filename=composer \
&& composer global require hirak/prestissimo \
&& composer install --prefer-dist --no-interaction --no-scripts --no-autoloader —no-dev
##### Kubernetes༻Πϝʔδ #####
FROM php:7.2.18-alpine AS k8s
COPY docker/files /
WORKDIR /app
COPY --chown=www-data:www-data . /app/
COPY --from= builder /usr/local/bin/composer /usr/local/bin/composer
RUN apk add —no-cache zip unzip
COPY --from=builder --chown=www-data:www-data /app/vendor /app/vendor
CMD [“run”]
मਖ਼ޙ - v1
‑ύοέʔδϚωʔδϟͷΠϯετʔϧຖճ࣮ߦ͢Δඞཁͳ͠
Slide 14
Slide 14 text
14
##### ComposerΠϯετʔϧ༻ #####
FROM composer:1.8.6 AS builder
COPY composer.json composer.lock /app/
WORKDIR /app
RUN composer global require hirak/prestissimo \
&& curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin/ --filename=composer \
&& composer install --prefer-dist --no-interaction --no-scripts --no-autoloader --no-dev \
&& chown -R www-data:www-data vendor \
&& find vendor/ -type d -name ‘.git’ -print0 | xargs -0 rm -rf
##### Kubernetes༻Πϝʔδ #####
FROM php:7.2.18-alpine AS k8s
COPY docker/files /
WORKDIR /app
COPY --chown=www-data:www-data . /app/
COPY --from=builder /usr/local/bin/composer /usr/local/bin/composer
RUN apk add —no-cache zip unzip
COPY --from=builder --chown=www-data:www-data /app/vendor /app/vendor
CMD [“run”]
मਖ਼ޙ - v2
ผͷΠϝʔδͱͯ͠Γग़͢
Πϯετʔϧ෦আ
Slide 15
Slide 15 text
15
##### ComposerΠϯετʔϧ༻ #####
FROM composer:1.8.6 AS builder
COPY composer.json composer.lock /app/
WORKDIR /app
RUN composer global require hirak/prestissimo \
&& composer install --prefer-dist --no-interaction --no-scripts --no-autoloader --no-dev \
&& chown -R www-data:www-data vendor \
&& find vendor/ -type d -name ‘.git’ -print0 | xargs -0 rm -rf
##### Kubernetes༻Πϝʔδ #####
FROM php:7.2.18-alpine AS k8s
COPY docker/files /
WORKDIR /app
COPY --chown=www-data:www-data . /app/
COPY --from=builder /usr/local/bin/composer /usr/local/bin/composer
RUN apk add —no-cache zip unzip
COPY --from=builder --chown=www-data:www-data /app/vendor /app/vendor
CMD [“run”]
मਖ਼ޙ - v2
builderͷͪ߹Θ͕ͤൃੜ
Slide 16
Slide 16 text
16
##### Composerίϐʔ༻ #####
FROM composer:1.8.6 AS copy
##### ComposerΠϯετʔϧ༻ #####
FROM composer:1.8.6 AS builder
COPY composer.json composer.lock /app/
WORKDIR /app
RUN composer global require hirak/prestissimo \
&& composer install --prefer-dist --no-interaction --no-scripts --no-autoloader --no-dev \
&& chown -R www-data:www-data vendor \
&& find vendor/ -type d -name ‘.git’ -print0 | xargs -0 rm -rf
##### Kubernetes༻Πϝʔδ #####
FROM php:7.2.18-alpine AS k8s
COPY docker/files /
WORKDIR /app
COPY --chown=www-data:www-data . /app/
COPY --from=copy /usr/local/bin/composer /usr/local/bin/composer
RUN apk add —no-cache zip unzip
COPY --from=builder --chown=www-data:www-data /app/vendor /app/vendor
मਖ਼ޙ - v3
ͪ߹ΘͤΛճආ
ͪ͜͜߹Θͤ
Slide 17
Slide 17 text
17
BuildKitʹΑΔฒྻϏϧυ
0 1
2
3
Stage0, 1ฒྻ࣮ߦ
Stage20,1ͷྃͪ
Stage32ͷྃͪ
Slide 18
Slide 18 text
18
BuildKitʹΑΔฒྻϏϧυ
0 1 2 3
εςʔδؒͷґଘ͕ؔͳ͍
࣮ߦ࣌ؒΛॖ͢Δʹ…
ཧ
0 1 2
3
εςʔδؒͷґଘ͕ؔগͳ͍
࣍ળ
Slide 19
Slide 19 text
19
BuildKitʹΑΔฒྻϏϧυ
͍͔ʹαΠζΛখ͘͢͞Δ͔…
͍͔ʹϨΠϠʔΛগͳ͘͢Δ͔…
BuildKitΛಋೖ͢ΔͱΈมԽ͢Δ
͍͔ʹґଘ͕ؔͳ͍ΠϝʔδΛઃܭ͢Δ͔…
ಋೖޙ
ಋೖલ
͍͔ʹεςʔδΛׂ͢Δ͔…
Slide 20
Slide 20 text
20
վળ݁Ռ
ϩʔΧϧ༻Πϝʔδ मਖ਼લ मਖ਼ޙ
αΠζ 357MB 355MB
Ϗϧυ࣌ؒ(1ճ) 88s 41s
Ϗϧυ࣌ؒ(2ճҎ߱) 12s 2s
K8s༻Πϝʔδ मਖ਼લ मਖ਼ޙ
αΠζ 209MB 209MB
Ϗϧυ࣌ؒ(1ճ) 78s 41s
Ϗϧυ࣌ؒ(2ճҎ߱) 16s 2s
Slide 21
Slide 21 text
21
• BuildKit × ϚϧνεςʔδͰDockerfileڥΛඋͰ͖ͨ
• BuildKitΛ͏͜ͱͷϝϦοτΛײ͡Δ͕ɺ
σϝϦοτײ͡ͳ͍(͋͘·Ͱݸਓతʹ)
• ڧ͍ͯݴ͑ɺͨͩͰ͑͞৬ਓܳʹ͍ۙDockerϏϧυ͕
ɹΑΓ͘͠ͳ͍ͬͯΔ(ܳʹͳ͍ͬͯΔ)͔͠Εͳ͍
• ࠷ߴͷDockerfileΛٻΊΔཱྀଓ͘…
·ͱΊ