Kickass Development Environments with Docker (PHPMiNDS, November, 2016)

Docker, the hottest technology around at the moment. It swept the Ops world by storm in 2014, became mainstream in 2015, and now it’s set to dominate the developer world, in 2016.

Docker is a tool that allows you to package your application up into a single-runnable distributable binary - akin to the phar, but in Hulk mode. Docker allows you, a developer, to specify the exact environment your application needs to run, across development; test; staging; and production.

In this talk I will cover the creation of this utopian distributable and show you how to can compose your entire production infrastructure locally with only a small YAML file and without installing a single thing.

Lets say hello, to Docker.

Transcript

1. Kickass Development Environments with Docker PHPMiNDS November, 2016
2. david@rawkode.com @rawkode github.com/rawkode ~ Software Consultant Docker Glasgow Organiser Scotland PHP Organiser • PHP / Go / Elixir • DevOps / CI / CD / Docker • CQRS & Event Sourcing • Domain-Driven Design • TDD / BDD
3. Kickass Development Environments with Docker
4. let’s travel through time ...
5. Development Environments circa 2000 $ tree awesome-million-pound-project └── src ├── game.php ├── game.php.bk-david ├── game.php.bk-deano ├── main.php ├── main.php.maybe-fixed ├── main.php.bk-1999-12-02 ├── main.php.bk-1999-12-02.2 ├── player.php ├── player.php.orig └── .swp.player.php
6. Production Environments circa 2000 $ tree awesome-million-pound-project └── src ├── game.php ├── game.php.bk-david ├── game.php.bk-deano ├── main.php ├── main.php.maybe-fixed ├── main.php.bk-1999-12-02 ├── main.php.bk-1999-12-02.2 ├── player.php ├── player.php.orig └── .swp.player.php
7. things got better ...
8. but not for another six years ...
10. Dev/Prod parity becomes a twinkle in our eye
12. DSL Hell
14. Vagrant Problems • You’re creating and managing VMs for each project / service • Those VM’s are mutable / prone to error by user changes • They’re built JIT (most cases) • How long goes your vagrant up take?
15. Let’s check out another option
16. What is Docker?
17. What is Docker? Docker allows you to package an application with all of its dependencies into a standardized unit for software development. docker.com
18. What’s the goal? A single, runnable, distributable executable
19. The Docker Family • Docker • Docker Engine • Docker Registry • Docker Compose • Docker Machine • Docker Swarm
20. Lets jump in!
21. Dockerfile
22. FROM php:7.0
23. ADD ./ /var/www COPY ./ /var/www Warning: Be careful with ADD
24. WORKDIR /var/www
25. ENTRYPOINT [ “php” ]
26. CMD [ “-v” ]
27. Layering
28. Every Dockerfile keyword commits a layer
29. This is great for caching
30. Docker Container
31. Docker Container
32. Docker Container
34. Do I have to rebuild my container when I update my code?
35. Docker Volumes
36. … -v `pwd`:/var/www
37. … -v /var/log/apache2
38. … --volumes-from=app
39. I’m on OSX / Windows, and it’s really really slow!
40. Docker on OSX / Windows isn’t native
41. VirtualBoxFs
42. VirtualBox Fileshare is slow ...
43. rsync! github.com /rawkode /docker-developer-utils docker-machine create -d virtualbox \ --virtualbox-no-share \ Development docker-machine-rsync
44. Note: Docker for Windows / Mac is now availability … though OSX still has the same issues
45. That’s great, but what about the database, cache, elasticsearch, etc
46. Project Dependencies
47. Project Dependencies
48. docker run memcached docker run postgres docker run elasticsearch
49. docker run \ -e APP_ENV=development \ -v .:/var/www \ -p 0.0.0.0:10000:80 \ --link elasticsearch:elasticsearch \ --link postgres:postgres \ --link memcached:memcached \ app:1
50. Docker Compose
51. version: ‘2’ services: application: image: php-7.0-apache redis: image: redis:version
52. Boilr! https://github.com/tmrts/boilr
53. Boilr & Docker Compose & PHP https://github.com/rawkode/boilr-docker-compose-php
54. Demo Let’s setup a project with: • PHP 7 • Elasticsearch • PostgreSQL • Memcached • … and so much more!
55. Docker Tips
56. ENV DB_PASSWD • Don’t store secrets in your Dockerfile or image! • Inject at run time Build Once Ship Everywhere
57. composer install --ignore-platform-reqs • IDE AutoComplete • Cached to ~/.composer • Not passing keys or tokens to Docker container for satis / private repositories Composer Keep it local
58. https://goo.gl/B26y17 or medium.com/@rawkode Composer Keep it local … but feel free to run it in a container!
59. docker-compose down -v • Stops and removes all containers and networks in the project • -v means delete the volumes as well Down Means Destroy
60. List all the Docker networks: docker network ls Feeling brave? docker network rm -f \ $(docker network ls -q) Mind Your Networks Avoid subnet collisions!
61. FROM alpine:3.3 Alpine Linux ~ 5 MiB (with solid package management!)
62. Base Image ONBUILD FTW # Dockerfile ONBUILD COPY . /var/www # docker-compose.yml application: image: base-image volumes: - .:/var/www # CI build FROM base-image
63. Base Image NIGHTLY BUILDS cron / curl / wget / whatever! # There’s no cascading builds # in Docker. Automate it. FROM your-company:base:latest FROM your-company:base:dev FROM your-company:base:prod
64. Arbitrary Commands docker-compose run --rm -u www-data service_name command
65. Image Size Keep it Lean! RUN DEBIAN_FRONTEND=noninteractive \ apt-get update \ && apt-get install -y \ --no-install-recommends \ apache2 \ && rm -rf /var/lib/apt/lists/*
66. Image Size GOTCHAS ADD . /var/www RUN chown www-data -R /var/www THIS WILL COST YOU TWICE THE MiBs! Do it at entrypoint, if really needed
67. Image Size https://goo.gl/2vGdLj docker history myimage
68. volumes: cache: driver: local logs: driver: local app: - volumes: - cache:/var/www/app/cache - logs:/var/www/app/logs Volumes Containerised logs and cache!
69. Abuse Docker testing-database-pdo: extends: service: testing-php-5.5 environment: - DATABASE_USER=root - DATABASE_PASS=testing - DATABASE_NAME=testing testing-database-mysql: extends: service: testing-database-pdo links: - mysql:mysql environment: - DATABASE_DRIVER=pdo_mysql - DATABASE_HOST=mysql - DATABASE_PORT=3306
70. Reduced Attack Surface If you get hacked, you SHOULD / COULD / MIGHT be OK
71. Docker Security Modelled as the Matrix ...
72. You, the Architect ...
73. Your system is looking pretty sweet!
74. Processes are being kept in-line
75. But then, hackers come along
76. This Guy!
77. Corrupting your innocent processes and turning them into weapons
78. Making them bend the rules
79. In-order to escape your utopian system!
80. The point?
81. One process per container
82. Would have stopped
83. This Guy!
84. Finding out about
85. This Guy
86. Corrupting him
87. To do his evil bidding
88. This wouldn’t have happened
89. This wouldn’t have happened
90. Most importantly This wouldn’t have happened
91. Thanks for having me! Questions? @rawkode Slides speakerdeck.com/rawkode
92. Yes, OK! My Damn Prompt https://github.com/rawkode/ saltstack-dotfiles/ blob/master/states/zsh/zshrc.user or https://github.com/bhilburn/powerlevel9k