from docker to production - zendcon 2016

ZendCon, October 2016 1

From Docker to ProductionChris Tankersley@dragonmantankZendCon 2016, October 2016

Subliminal Advertisement

Considerations

How does your app handle storage?

What does your build process look like?

How well does your app handle scaling?

Does it make sense?

The Build Process

Start Small• Build your application• Run composer• Run npm/bower• Build JS/CSS

• Use the compiled output to build an image with docker build• Push full image to private registry

docker build• Additional options to look at• -f, --file – Specify a different filename for the Dockerfile• --no-cache – Don’t use a cached layer• --pull – Always pull a new version of the image

Sample usagedocker build \ --no-cache \ –f docker/php/phpserver.dockerfile \ –t prod_php /opt/builds/20161010

phpserver.dockerfileFROM php:fpmRUN docker-php-ext-install pdo pdo_mysqlCOPY ./ /var/www

Docker Compose

Very Good for Small Deployments• Can be used to augment your dev environment• Works well with Docker Machine

Create a machinedocker-machine create --driver digitalocean \ --digital-ocean-access-token [token] \ zendcon2016

Switch to the remote node• Run docker-machine env zendcon2016

& "C:\Program Files\Docker\Docker\Resources\bin\docker-machine.exe" env zendcon2016 | Invoke-Expression

Set up docker-compose• Docker Compose allows multiple config files with -f• Have a base docker-compose.yml for Production• Add a secondary one for Development

version: '2'volumes: mysqldata: driver: localservices: nginx: build: context: ./ dockerfile: ./nginx.dockerfile ports: - 80:80 - 443:443 phpserver: build: context: ./ dockerfile: ./phpserver.dockerfile working_dir: /var/www/public mysqlserver: image: mysql environment: [redacted] volumes: - mysqldata:/var/lib/mysql

docker-compose.yml

version: '2'volumes: mysqldata: driver: localservices: nginx: image: nginx volumes: - ./output_dev:/var/www/public:ro - ./app/nginx/default.conf:/etc/nginx/conf.d/default.conf - ./ssl:/etc/nginx/ssl/ phpserver: build: context: ./ dockerfile: ./phpserver.dockerfile working_dir: /var/www/public volumes: - ./app:/var/www/ - ./vendor:/var/www/vendor mysqlserver: image: mysql environment: [redacted] volumes: - mysqldata:/var/lib/mysql

docker-compose.dev.yml

When doing developmentdocker-compose \ –f docker-compose.yml \ –f docker-compose.dev.yml \ up -d

When doing a deploymentdocker-compose up -d

Other Alternative – Variable Substitution• Docker Compose allows variable substitution inside the file• Wrap variables in ${}• image: ${DEPLOY_VERSION}_php

When doing a deploymentdocker build –f […] –t 20161010_php /opt/builds/20161010DEPLOY_VERSION=20161010 docker-compose up -d

Rancher

Daycamp 4 Developers - Ops for Devs 33

Rancher and RancherOS

Manages your Containers

Manages your Hosts

Allows you to monitor containers

Allows you to manage your applications

Allows you to deploy your applications

Supports Docker Compose

Blue-Green Deployments

Router

App v1 App v2

Router

App v3 App v2

Router

App v3 App v2

Add rancher/server to the master

docker run -d \ --restart=always \ -p 8080:8080 \ –name=rancher \ rancher/server

Add rancher/agent to nodes

docker run -d \ --privileged \ -v /var/run/docker.sock:/var/run/docker.sock \ rancher/agent:v0.7.9 \ http://192.168.99.100:8080/v1/scripts/[hash]

All Done!

Deploying with Rancher CLI

What is it?• Rancher has an API!• Small executable that interacts with Rancher API• Kind of like a custom docker-compose

Get an API Key

Download Rancher CLI

Export Stack Config

Two Config Files

docker-compose.yml

Deploy ScriptACCESS_KEY="C4F407CE1D8C59EB53BE"SECRET="daNENHR241Jzm5Z9iw6VsujD9hWfjHWrDzkKmKiA"RANCHER_URL="http://192.168.99.100:8080"

./rancher-compose --secret-key=${SECRET} --access-key=${ACCESS_KEY} --url=${RANCHER_URL} --file=docker-compose.yml --rancher-file=rancher-compose.yml -p phptest up --upgrade -d

Edit and Deploy

Finish Upgrade

Thank You!• Software Engineer for InQuest• Author of “Docker for Developers”• https://leanpub.com/dockerfordevs

• Co-Host of “Jerks Talk Games”• http://jerkstalkgames

• http://ctankersley.com• chris@ctankersley.com• @dragonmantank

from docker to production - zendcon 2016

Technology

zendcon zray

monitoring large scale docker production environments

implementing docker in production at scale

docker 101 - from production to development

zendcon 2007 api design

zendcon scaling magento

zendcon 2007 presentation

docker + microservices in production

ibm hackathon@zendcon 2014

zendcon 2015 - laravel forge: hello world to hello...

zendcon security

debugging (docker) containers in production

docker en production et la sécurité … _

docker online meetup #3: docker in production

assetic (zendcon)

techtalks: taking docker to production

docker: testing to production

josa techtalk: taking docker to production

docker in production - stateful services

docker security in production overview