Continuous Delivery of Docker images

•

0 recomendaciones•1,036 vistas

armincoralic

Tecnología

DELIVER SOFTWARE WITH THE SPEED OF
THOUGHT

CONTINUOUS DELIVERY OF DOCKER IMAGES
Platform to deploy your docker images to
Security
Set up the logging, monitoring and alerting
Application versioning
Zero downtime deployment

LOADBALANCER
frontend main
bind *:80
mode http
maxconn 1000
default_backend app
backend app
mode http
balance roundrobin
option httpchk /health
server intapp01 intapp01.zorgdomein.local:80 check port 8080
server intapp02 intapp02.zorgdomein.local:80 check port 8080
server intapp03 intapp03.zorgdomein.local:80 check port 8080

LOADBALANCER
frontend main_ssl
bind *:443 ssl crt /etc/pki/tls/private/dockerintegration.pem no-sslv3
mode http
maxconn 1000
default_backend app

DOCKERHOST
UbuntuUbuntu
OLD
VS
NEW
SSH
Other services
Application
Syslog
SSH
Syslog
Application
Other services

MONITORING
Dockerhost
Syslog
StatsDApplication

ALERTING
Dockerhost
Syslog
StatsD
Events
Application

APPLICATION VERSIONING
commit

push
commit

push
OLD
NEW

IMAGE VERSIONING
zorgdomein/syslog:8.9-2
zorgdomein/ta:20150520_1830
zorgdomein/te:20150520_1736

APPLICATION VERSIONING
ZorgDomein Application
C_20150520_1830
zorgdomein/syslog:8.9-2
zorgdomein/ta:20150520_1830
zorgdomein/te:20150520_1736

ENVIRONMENT VERSIONING
ZorgDomein Application
C_20150520_1830
zorgdomein/syslog:8.9-2
zorgdomein/ta:20150520_1830
zorgdomein/te:20150520_1736
conﬁg.yml
librato_ﬂush_interval: 60
librato_token: "3847hwd"
librato_user: “…”
tc_db_user: “…”
tc_db_host: “…zorgdomein.nl”

$ZERO DOWNTIME DEPLOYMENT WITH ANSIBLE --- - include: util/docker_update.yml vars: name: 'docker-stats' image: 'zorgdomein/docker-stats' image_version: "{{ version }}" container_state: "{{ state | default('present') }}" args: -v /var/run/docker.sock:/var/run/docker.sock -e 'STATSD_HOST={{ statsd_hostname }}' -e 'INTERVAL={{ stats_interval }}'$

ZERO DOWNTIME DEPLOYMENT
syslog:8.9-2
health:4
syslog:8.9-2
health:4
syslog:8.9-2
health:4

ZERO DOWNTIME DEPLOYMENT
syslog:8.9-3
health:4
syslog:8.9-2
health:4
syslog:8.9-2
health:4

ZERO DOWNTIME DEPLOYMENT
syslog:8.9-3
health:4
syslog:8.9-3
health:4
syslog:8.9-3
health:4

DOCKER API
Allow
run
stop
stats
events
Filter
inspect

$DOCKER API - FILTER EXAMPLE "Config": { "Cmd": [ "./run_te.sh" ], "Env": [ ….., "ZDDB_USERNAME=dbintuser", “ZDDB_PASSWORD=*********”$

DOCKER IMAGE MANAGEMENT
Image Size MB
Debian +
Java
450
BusyBox +
Java
300
Go 6

WHAT WE DO
Automate, automate, automate!
Code the infrastructure!
Containerize all the things!

powered by Xebia
Armin Čoralić
armin@cargonauts.io
THANKS!

Más contenido relacionado

La actualidad más candente

Cman

Mohsen B

VMworld 2013: How to Exchange Status Message Between Guest and Host Using RPC

VMworld

The accompanying demo (slide 15) can be found at https://vimeo.com/90534015 The presentation will cover Xen vs Xen Automotive gaps and analysis. We will elaborate technical solutions for the identified gaps: * ARM architecture - support HW virtualization extensions for embedded systems * Stability requirements * RT Scheduler * Rich virtualized peripheral support (WiFi, Gfx, MM, USB, etc.) * Performance benchmarking * Security The audience is anyone interesting in building OSS based IVI systems. Attendees can expect the OSS stack detailed architecture, current status of the project, the challenges seen, road map and much more.

LFCollab14: Xen vs Xen Automotive

The Linux Foundation

Project ACRN hypervisor introduction

Project ACRN

ACRN vMeet-Up EU 2021 - functional safety design and certification plan

Project ACRN

Join SwarmKit maintainers Drew and Nishant as they showcase features that have made Swarm Mode even more powerful, without compromising the operational simplicity it was designed with. They will discuss the implementation of new features that streamline deployments, increase security, and reduce downtime. These substantial additions to Swarm Mode are completely transparent and straightforward to use, and users may not realize they're already benefiting from these improvements under the hood.

Under the Hood with Docker Swarm Mode - Drew Erny and Nishant Totla, Docker

Docker, Inc.

STATUS UPDATE OF COLO PROJECT XIAOWEI YANG, HUAWEI AND WILL AULD, INTEL

The Linux Foundation

Mobile devices, such as smart phones and tablets, are becoming de-facto everyday computing and communication devices, virtualization can bring additional benfits to mobile devices for both security and manageability. IT department may use hypervisor, as a highly secure solution, to manage autherized mobile devices, such as for network traffic monitoring, filtering, scan (for virus detection), and/or OS update/patching even when the guest OS becomes completely dead. We insert Xen to the mobile OS Android to deprivilege Android as guest for security and manageability purpose. However, the usage case of mobile device is quit different with that of server, for example mobile devices runs completely different benchmarks (mostly multimedia focused) vs. that in server (mostly responsiveness focused). We analyze the gap of Xen as a mobile hypervisor and present how we improve the performance.

XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...

The Linux Foundation

ClearPass 6.3.6 Release Notes

Aruba, a Hewlett Packard Enterprise company

Recent years have seen an increasing demand for supporting real-time systems in virtualized environments. To combine real-time and virtualization, a real-time scheduler at the hypervisor level is needed to provide timing guarantees to the guest virtual machines. RT-Xen provides a suite of multi-core real-time schedulers to deliver real-time performance to domains running on the Xen hypervisor. Work is underway to incorporate RT-Xen in the Xen distribution to replace the legacy SEDF scheduler. We have implemented and empirically compared a diverse set of multicore real-time scheduling policies within the RT-Xen scheduling framework. Based on extensive experiments of different scheduling policies, we plan to submit a patch on global EDF scheduler to the xen-devel as the first step to incorporate multicore real-time scheduling support within the Xen hypervisor.

XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...

The Linux Foundation

Oracle Enterprise manager SNMP and Exadata

Mike Chafin

Currently, several initiatives promote XEN hypervisor into the automotive area as a base of complex virtualized systems. To support those initiatives and plunge into the automotive world XEN should fit at least two requirements: it should be appropriately certified and to be able to host a security domain. Leaving behind certification topic, here we focus on security domain hosting capability of XEN. Particularly on keeping RT guarantees for the specific domain. This talk is a presentation of the investigation on a XEN hypervisor applicability to building a multi-OS system with real-time guarantees being kept for one of the hosted OSes. During this presentation following topics would be outlined: - experimental setup - experimental use-cases and their motivation - received results and discovered issues - solutions and mitigation measures for discovered issues

XPDDS18: Real Time in XEN on ARM - Andrii Anisov, EPAM Systems Inc.

The Linux Foundation

La actualidad más candente (12)

Cman

VMworld 2013: How to Exchange Status Message Between Guest and Host Using RPC

LFCollab14: Xen vs Xen Automotive

Project ACRN hypervisor introduction

ACRN vMeet-Up EU 2021 - functional safety design and certification plan

Under the Hood with Docker Swarm Mode - Drew Erny and Nishant Totla, Docker

STATUS UPDATE OF COLO PROJECT XIAOWEI YANG, HUAWEI AND WILL AULD, INTEL

XPDS13: Performance Optimization on Xen-based Android Device - Jack Ren, Inte...

ClearPass 6.3.6 Release Notes

XPDS14 - RT-Xen: Real-Time Virtualization in Xen - Sisu Xi, Washington Univer...

Oracle Enterprise manager SNMP and Exadata

XPDDS18: Real Time in XEN on ARM - Andrii Anisov, EPAM Systems Inc.

Similar a Continuous Delivery of Docker images

Omaha (Google Update) server

Dmitry Lyfar

IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions

williamLeo13

Get hands-on with security features and best practices to protect your containerized services. Learn to push and verify signed images with Docker Content Trust, and collaborate with delegation roles. Intermediate to advanced level Docker experience recommended, participants will be building and pushing with Docker during the workshop. Led By Docker Security Experts: Riyaz Faizullabhoy David Lawrence Viktor Stanchev Experience Level: Intermediate to advanced level Docker experience recommended

Docker Security workshop slides

Docker, Inc.

Digital Forensics and Incident Response in The Cloud Part 3

Velocidex Enterprises

Stups.io - an Open Source Cloud Framework for AWS

Jan Löffler

Defcon 22-zoltan-balazs-bypass-firewalls-application-whiteli

Priyanka Aash

In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where you have deployed a malware on a user’s workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.). On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user’s workstation. I developed (and will publish) two tools that help you in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help you to circumvent the hardware firewall after we can execute code on the server with admin privileges (using a signed kernel driver). My tools are generic meaning that they work against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops. The number of problems you can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!

DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...

Zoltan Balazs

Hacker Halted 2014 - Post-Exploitation After Having Remote Access

EC-Council

In this talk, Scott Coulton will take you through Docker's cluster solution Swarm mode with his operations hat on. We will start from the beginning by describing what swarm mode is, what it does, and how it works behind the scenes. From there, we will look at very basic configurations of Swarm mode from the point of view of the operations team as well as a production-ready workflow including deployments of the cluster, logging and CD best practices. Attendees will be able to apply their learnings to their use cases.

Docker for Ops - Scott Coulton, Puppet

Docker, Inc.

When you are designing a production environment security is essential. All the Docker ecosystem but in particular Docker Swarm allows us to ship our containers out of our laptop, how can we make this process safe? During my talk, I will share tips around production environment, immutability and how troubleshooting common attack as code injection with Docker. Static analysis of our images, content trust with Notary to make our journey secure. How can we setup a cluster on the main cloud providers with VPN and node labeling to expose only a portion of our cluster? I will also show what Docker provides (Content Trust, Static Analysis) but also open source alternatives as Notary, centos/clair and Cilium. In the end of this talk, we had a better idea around how manage Docker in production.

Security Tips to run Docker in Production

Gianluca Arbezzano

How do we get our software out on the Internet of Things? Many assumptions in current deployment practices don't hold up. Devices can be occasionally connected, through low-bandwidth networks and are generally outside of direct control. Manually shuffling around binaries is not an option. Apache ACE is an open-source Java provisioning tool tackling such challenges.You can manage Java apps and configs in a modular fashion. The foundations of ACE are OSGi, semantic versioning and reliable communication. Pushing out incremental updates and managing numerous devices becomes possible.

Provisioning the IoT

Sander Mak (@Sander_Mak)

Docker presentasjon java bin

Olve Hansen

In theory, post-exploitation after having remote access is easy. Also in theory, there is no difference between theory and practice. In practice, there is. Imagine a scenario, where the hacker/penetration-tester has deployed a malware on a user's workstation, but the target information is on a secure server accessed via two-factor authentication, with screen access only (e.g. RDP, Citrix, etc.) On top of that, the server runs application white-listing, and only the inbound port to the screen server (e.g. 3389) is allowed through the hardware firewall. But you also need persistent interactive C&C communication (e.g. Netcat, Meterpreter, RAT) to this server through the user's workstation. I developed (and will publish) two tools that help the community in these situations. The first tool can drop malware to the server through the screen while the user is logged in. The second tool can help to circumvent the hardware firewall after one can execute code on the server with admin privileges (using a signed kernel driver). My tools have been tested against Windows server 2012 and Windows 8, and they work with RDP or other remote desktops (e.g. Citrix). The number of problems one can solve with them are endless, e.g., communicating with bind-shell on webserver behind restricted DMZ. Beware, live demo and fun included!

Hacking Highly Secured Enterprise Environments by Zoltan Balazs

Shakacon

Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...

Patrick Chanezon

Docker at Flux7

Aater Suleman

青云虚拟机部署私有Docker Registry

Zhichao Liang

Hammr is an OW2 open source tool for creating machine images for multiple cloud, container and virtual environments, or migrating live systems between environments. From a single source configuration file -- created from scratch or by scanning a live system -- you can automatically build consistent, repeatable machine images for any environment. Hammr integrates into your DevOps toolchain working with other tools such as Jenkins, Chef, Puppet and SaltStack, allowing you to easily build machine images and maintain live running instances. This presentation will give an overview of how you can build images and migrate systems with Hammr, as well as presenting the latest features, including migration process improvements and the ability to deploy machine images directly to Amazon AWS, OpenStack and Microsoft Azure from the Hammr command line.

Build, migrate and deploy apps for any environment with project Hammr , OW2co...

OW2

#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Qu...

Agile Testing Alliance

Infrastructure = code - 1 year later

Christian Ortner

TRENDnet IP Camera Multiple Vulnerabilities

insight-labs

Similar a Continuous Delivery of Docker images (20)

Omaha (Google Update) server

IBM QRadar SIEM V7.3.2 Deployment C1000-055 Questions

Docker Security workshop slides

Digital Forensics and Incident Response in The Cloud Part 3

Stups.io - an Open Source Cloud Framework for AWS

Defcon 22-zoltan-balazs-bypass-firewalls-application-whiteli

DEFCON 22: Bypass firewalls, application white lists, secure remote desktops ...

Hacker Halted 2014 - Post-Exploitation After Having Remote Access

Docker for Ops - Scott Coulton, Puppet

Security Tips to run Docker in Production

Provisioning the IoT

Docker presentasjon java bin

Hacking Highly Secured Enterprise Environments by Zoltan Balazs

Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...

Docker at Flux7

青云虚拟机部署私有Docker Registry

Build, migrate and deploy apps for any environment with project Hammr , OW2co...

#Interactive Session by Kirti Ranjan Satapathy and Nandini K, "Elements of Qu...

Infrastructure = code - 1 year later

TRENDnet IP Camera Multiple Vulnerabilities

Último

Angeliki Cooney has spent over twenty years at the forefront of the life sciences industry, working out of Wynantskill, NY. She is highly regarded for her dedication to advancing the development and accessibility of innovative treatments for chronic diseases, rare disorders, and cancer. Her professional journey has centered on strategic consulting for biopharmaceutical companies, facilitating digital transformation, enhancing omnichannel engagement, and refining strategic commercial practices. Angeliki's innovative contributions include pioneering several software-as-a-service (SaaS) products for the life sciences sector, earning her three patents. As the Senior Vice President of Life Sciences at Avenga, Angeliki orchestrated the firm's strategic entry into the U.S. market. Avenga, a renowned digital engineering and consulting firm, partners with significant entities in the pharmaceutical and biotechnology fields. Her leadership was instrumental in expanding Avenga's client base and establishing its presence in the competitive U.S. market.

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Angeliki Cooney

[BuildWithAI] Introduction to Gemini.pdf

Sandro Moreira

Exploring Multimodal Embeddings with Milvus

Zilliz

Dubai, often portrayed as a shimmering oasis in the desert, faces its own set of challenges, including the occasional threat of flooding. Despite its reputation for opulence and modernity, the emirate is not immune to the forces of nature. In recent years, Dubai has experienced sporadic but significant floods, testing the resilience of its infrastructure and communities. Among the critical lifelines in this bustling metropolis is the Dubai International Airport, a bustling hub that connects the city to the world. This article explores the intersection of Dubai flood events and the resilience demonstrated by the Dubai International Airport in the face of such challenges.

Navigating the Deluge_ Dubai Floods and the Resilience of Dubai International...

Orbitshub

The microservices honeymoon is over. When starting a new project or revamping a legacy monolith, teams started looking for alternatives to microservices. The Modular Monolith, or 'Modulith', is an architecture that reaps the benefits of (vertical) functional decoupling without the high costs associated with separate deployments. This talk will delve into the advantages and challenges of this progressive architecture, beginning with exploring the concept of a 'module', its internal structure, public API, and inter-module communication patterns. Supported by spring-modulith, the talk provides practical guidance on addressing the main challenges of a Modultith Architecture: finding and guarding module boundaries, data decoupling, and integration module-testing. You should not miss this talk if you are a software architect or tech lead seeking practical, scalable solutions. About the author With two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Victor Rentea

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Whatsapp Number Escorts Call girls 8617370543 Available 24x7 Mcleodganj Call Girls Service Offer Genuine VIP Model Escorts Call Girls in Your Budget. Mcleodganj Call Girls Service Provide Real Call Girls Number. Make Your Sexual Pleasure Memorable with Our Mcleodganj Call Girls at Affordable Price. Top VIP Escorts Call Girls, High Profile Independent Escorts Call Girls, Housewife Women Escorts Call Girl, College Girls Escorts Call Girls, Russian Escorts Call girls Service in Your Budget.

Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model

Deepika Singh

DBX First Quarter 2024 Investor Presentation

Dropbox

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

FWD Group - Insurer Innovation Award 2024

The Digital Insurer

Following the popularity of “Cloud Revolution: Exploring the New Wave of Serverless Spatial Data,” we’re thrilled to announce this much-anticipated encore webinar. In this sequel, we’ll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you’re building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

apidays

Keynote 2: APIs in 2030: The Risk of Technological Sleepwalk Paolo Malinverno, Growth Advisor - The Business of Technology Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...

apidays

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

apidays

Vector Search -An Introduction in Oracle Database 23ai.pptx

Remote DBA Services

MS Copilot expands with MS Graph connectors

Nanddeep Nachan

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Tracing the root cause of a performance issue requires a lot of patience, experience, and focus. It’s so hard that we sometimes attempt to guess by trying out tentative fixes, but that usually results in frustration, messy code, and a considerable waste of time and money. This talk explains how to correctly zoom in on a performance bottleneck using three levels of profiling: distributed tracing, metrics, and method profiling. After we learn to read the JVM profiler output as a flame graph, we explore a series of bottlenecks typical for backend systems, like connection/thread pool starvation, invisible aspects, blocking code, hot CPU methods, lock contention, and Virtual Thread pinning, and we learn to trace them even if they occur in library code you are not familiar with. Attend this talk and prepare for the performance issues that will eventually hit any successful system. About authorWith two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Finding Java's Hidden Performance Traps @ DevoxxUK 2024

Victor Rentea

Continuous Delivery of Docker images

1. CONTINUOUS DELIVERY OF DOCKER IMAGES A Customer case: ZorgDomein powered by Xebia Armin Čoralić armin@cargonauts.io

2. DELIVER SOFTWARE WITH THE SPEED OF THOUGHT

3. WE AS

4. DOCKER + CONTINUOUS DELIVERY +

5. CONTINUOUS DELIVERY OF DOCKER IMAGES

6. CONTINUOUS DELIVERY OF DOCKER IMAGES Platform to deploy your docker images to Security Set up the logging, monitoring and alerting Application versioning Zero downtime deployment

7. HIGH AVAILABLE PLATFORM

8. HIGH AVAILABLE PLATFORM 

9. LOADBALANCER frontend main bind *:80 mode http maxconn 1000 default_backend app backend app mode http balance roundrobin option httpchk /health server intapp01 intapp01.zorgdomein.local:80 check port 8080 server intapp02 intapp02.zorgdomein.local:80 check port 8080 server intapp03 intapp03.zorgdomein.local:80 check port 8080

10. LOADBALANCER frontend main_ssl bind *:443 ssl crt /etc/pki/tls/private/dockerintegration.pem no-sslv3 mode http maxconn 1000 default_backend app

11. DOCKERHOST UbuntuUbuntu OLD VS NEW SSH Other services Application Syslog SSH Syslog Application Other services

12. DATABASE AS SERVICE  + ○

13. LOGGING, MONITORING AND ALERTING

14. LOGGING, MONITORING AND ALERTING StatsD

15. LOGGING Dockerhost Syslog Application

16. MONITORING Dockerhost Syslog StatsDApplication

17. ALERTING Dockerhost Syslog StatsD Events Application

18. APPLICATION VERSIONING

19. APPLICATION VERSIONING commit  push commit  push OLD NEW

20. IMAGE VERSIONING zorgdomein/syslog:8.9-2 zorgdomein/ta:20150520_1830 zorgdomein/te:20150520_1736

21. APPLICATION VERSIONING ZorgDomein Application C_20150520_1830 zorgdomein/syslog:8.9-2 zorgdomein/ta:20150520_1830 zorgdomein/te:20150520_1736

22. ENVIRONMENT VERSIONING ZorgDomein Application C_20150520_1830 zorgdomein/syslog:8.9-2 zorgdomein/ta:20150520_1830 zorgdomein/te:20150520_1736 conﬁg.yml librato_ﬂush_interval: 60 librato_token: "3847hwd" librato_user: “…” tc_db_user: “…” tc_db_host: “…zorgdomein.nl”

23. ZERO DOWNTIME DEPLOYMENT

24. ZERO DOWNTIME DEPLOYMENT 

25. ZERO DOWNTIME DEPLOYMENT WITH ANSIBLE --- - include: util/docker_update.yml vars: name: 'docker-stats' image: 'zorgdomein/docker-stats' image_version: "{{ version }}" container_state: "{{ state | default('present') }}" args: -v /var/run/docker.sock:/var/run/docker.sock -e 'STATSD_HOST={{ statsd_hostname }}' -e 'INTERVAL={{ stats_interval }}'

26. ZERO DOWNTIME DEPLOYMENT syslog:8.9-2 health:4 syslog:8.9-2 health:4 syslog:8.9-2 health:4

27. ZERO DOWNTIME DEPLOYMENT syslog:8.9-2 health:4 syslog:8.9-2 health:4 syslog:8.9-2 health:4

28. ZERO DOWNTIME DEPLOYMENT syslog:8.9-2 health:4 syslog:8.9-2 health:4 syslog:8.9-2 health:4

29. ZERO DOWNTIME DEPLOYMENT syslog:8.9-3 health:4 syslog:8.9-2 health:4 syslog:8.9-2 health:4

30. ZERO DOWNTIME DEPLOYMENT syslog:8.9-3 health:4 syslog:8.9-2 health:4 syslog:8.9-2 health:4

31. ZERO DOWNTIME DEPLOYMENT syslog:8.9-3 health:4 syslog:8.9-3 health:4 syslog:8.9-3 health:4

32. ZERO DOWNTIME DEPLOYMENT syslog:8.9-3 health:4 syslog:8.9-3 health:4 syslog:8.9-3 health:4

33. SECURITY

34. SECURITY

35. DOCKER API Allow run stop stats events Filter inspect

36. DOCKER API - FILTER EXAMPLE "Config": { "Cmd": [ "./run_te.sh" ], "Env": [ ….., "ZDDB_USERNAME=dbintuser", “ZDDB_PASSWORD=*********”

37. DOCKER IMAGE MANAGEMENT Image Size MB Debian + Java 450 BusyBox + Java 300 Go 6

38. DOCKER + CONTINUOUS DELIVERY +

39. CONTINUOUS DELIVERY OF DOCKER IMAGES

40. CONTINUOUS DELIVERY OF DOCKER IMAGES Platform to deploy your docker images to Security Set up the logging, monitoring and alerting Application versioning Zero downtime deployment

41. THE DATA CENTER AUTOMATION EXPERTS

42. WHAT WE DO Automate, automate, automate! Code the infrastructure! Containerize all the things!

43. powered by Xebia Armin Čoralić armin@cargonauts.io THANKS!

Continuous Delivery of Docker images

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (12)

Similar a Continuous Delivery of Docker images

Similar a Continuous Delivery of Docker images (20)

Último

Último (20)

Continuous Delivery of Docker images