Patterns and antipatterns in Docker image lifecycle @ Codemash 2017

•

0 likes•654 views

While Docker has enabled an unprecedented velocity of software production, it is all too easy to spin out of control. A promotion-based model is required to control and track the flow of Docker images as much as it is required for a traditional software development lifecycle. New tools often introduce new paradigms. We will examine the patterns and the antipatterns for Docker image management, and what impact the new tools have on the battle-proven paradigms of the software development lifecycle.

Technology

whoami
Baruch Sadogursky, JFrog Developer Advocate, @jbaruch

Poll Time!
üHeard about Docker
üCan do the tutorial
üPoCing, playing etc.
üProduction, baby!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

JFrog Artifactory + Docker
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

The Promotion Pyramid
Development builds
Dev Integration tests
Integr. tests
Staging
Pre-Prod
Prod
Amount of builds
Build/Deploy time
Amount of
binaries

Pipeline: Quality Gates and Visibility
Source: Agile ALM, Michael Hüttermann, Manning Publications Co.
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

$docker build
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Too easy!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

That’s why.
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Let’s fix it!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Let’s fix it (again)!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

That’s why you don’t trust Docker
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Traditional Server Pattern
http://martinfowler.com/bliki/ImmutableServer.html
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Immutable Server Pattern
http://martinfowler.com/bliki/ImmutableServer.html
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

What’s up with the gates?!
- QA shouldn’t test dev images

What’s up with the gates?!
- QA shouldn’t test dev images
- non-tested images shouldn't be
staged

What’s up with the gates?!
- QA shouldn’t test dev images
- non-tested images shouldn't be
staged
- non-staged, non-tested or dev
images shouldn’t end up in
production!!!

Not so fast…
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Trumped-up limitations
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

The Anatomy of Docker Tag
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Wait a second, how can I
have more than one
repository per host now?!

How can we support this?
https://host:8081/artifactory/docker-dev/busybox
https://host:8081/artifactory/docker-staging/busybox
https://host:8081/artifactory/docker-qa/busybox
https://host:8081/artifactory/docker-prod/busybox
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

“ONEREGISTRYPERHOSTOUGHTTOBEENOUGHFORANYBODY.”

Panic!
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Virtual hosts/ports to the rescue
https://host:8081/artifactory/docker-dev/busybox
Context name
Virtual repository name
Tag name
https://host:port/v2/busybox

$server { listen 5001; server_name 192.168.99.100; if ($http_x_forwarded_proto = '') { set $http_x_forwarded_proto $scheme; } rewrite ^/(v1|v2)/(.*) /artifactory/api/docker/docker-dev/$1/$2; … } } @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES$

But then you realize…
Wait a second, now I need
to pull, retag and push for
every step?!

Anatomy of a container
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Our Layers
Application:
••.war file
Framework:
••JDK8 + Tomcat
Base:
••ubuntu-trusty

Framework build
- Verified base image
- Add system dependencies
from artifactory
- JDK
- Tomcat
- Own it!

Minimal Framework build Dockerfile
FROM ubuntu:14.04
MAINTAINER you@yourorg.com
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

Application build
- Framework is your base
- Run a java build
- Add a file to base
- Done!

Application build Dockerfile
FROM yourorg-docker.jfrog.io/myorg/framework:latest
MAINTAINER you@yourorg.com
ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war
/var/lib/tomcat7/webapps/app.war
@JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

HIGH QUALITY
(software and information) SPEED LOW COST
(automation)
Fast releases > Modular > Automation
Conclusions: Release Fast or Die!

Q&A and Links
• @jbaruch
• #codemash
• http://jfrog.com/shownotes
– Video
– Slides
– Links
– Feedback
– Raffle! (come early)

What's hot

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at The Pittsburgh...

Baruch Sadogursky

Patterns and antipatterns in Docker image lifecycle as was presented at Scale...

Baruch Sadogursky

Patterns and antipatterns in Docker image lifecycle as was presented at Devop...

Baruch Sadogursky

Patterns and antipatterns in Docker image lifecycle as was presented at Globa...

Baruch Sadogursky

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at DevNexus 2017

Baruch Sadogursky

Designers Make It Go to Eleven!

Idan Gazit

What source control software did you use in 2010? Possibly Git, if you were an early adopter or a Linux kernel committer. But chances are you were using Subversion, as this was the product of choice for the majority of the software developers. Ten years later, Git is the most popular product. Which makes me wonder: what will we use another ten years from now? In this talk we will think about what features we want from our source control software in 2030. More speed? Better collaboration support? No merge conflicts ever? I’ll also discuss a few products that have been published after Git emerged, including Plastic, Fossil and Pijul. I’ll talk about the extent to which they contain the features we so dearly desire and I’ll demonstrate a few typical use cases. To conclude, I’ll try to predict which one will be ‘the top dog’ in 2030 (all information is provided “as is”, no guarantees etc. etc.). So attend this session if you’re excited about the future of version control and if you want to have a shot at beating even (!) the early adopters. Now if it turns out I was right, remember that you heard it here first. 

JCON 2021 talk - "Wil Git Be Around Forever? A List of Possible Successors"

🎤 Hanno Embregts 🎸

What source control software did you use in 2008? Possibly Git, if you were an early adopter or a Linux kernel committer. But chances are you were using Subversion, as this was the product of choice for the majority of the software developers. Ten years later, Git is the most popular product. Which makes me wonder: what will we use another ten years from now? In this talk we will think about what features we want from our source control software in 2028. More speed? Better collaboration support? No merge conflicts ever? I’ll also discuss a few products that have been published after Git emerged, including Fossil, Veracity and Pijul. I’ll talk about the extent to which they contain the features we so dearly desire and I’ll demonstrate a few typical use cases. To conclude, I’ll try to predict which one will be ‘the top dog’ in 2028 (all information is provided “as is”, no guarantees etc. etc.). So attend this session if you’re excited about the future of version control and if you want to have a shot at beating even (!) the early adopters. Now if it turns out I was right, remember that you heard it here first. 

Will Git Be Around Forever? A List of Possible Successors

🎤 Hanno Embregts 🎸

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at Oracle Code Au...

Baruch Sadogursky

Qa in production singular 2019

rouanw

Debugging Your Plone Site

cdw9

A Research Study into DevOps Bottlenecks

Baruch Sadogursky

A Research Study into DevOps Bottlenecks

Baruch Sadogursky

Introducción a HTML5 & CSS3

jose diaz

ldc dev-clojure

Diego Pacheco

WebDev References

dynamis

Presented August 15th, 2018 at 6:30 pm till 7:30 pm at Google in SF as part of a Google Developers Group SF Meetup. Talk: Progressive Web Apps 101 Description: I’ll walk you through the steps of transforming an existing website into a Progressive Web App from the bottom up. Together we’ll also explore the wide array of companies that have already benefited from the many enhancements PWAs offer. More event details: https://www.meetup.com/google-developer-group-san-francisco/events/251833049/

GDG SF Meetup - Progressive Web Apps 101

Frances Coronel

Functional IoT: Hardware and Platform

Kiwamu Okabe

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at Devoxx 2017

Baruch Sadogursky

What's hot (19)

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at The Pittsburgh...

Patterns and antipatterns in Docker image lifecycle as was presented at Scale...

Patterns and antipatterns in Docker image lifecycle as was presented at Devop...

Patterns and antipatterns in Docker image lifecycle as was presented at Globa...

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at DevNexus 2017

Designers Make It Go to Eleven!

JCON 2021 talk - "Wil Git Be Around Forever? A List of Possible Successors"

Will Git Be Around Forever? A List of Possible Successors

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at Oracle Code Au...

Qa in production singular 2019

Debugging Your Plone Site

A Research Study into DevOps Bottlenecks

Introducción a HTML5 & CSS3

ldc dev-clojure

WebDev References

GDG SF Meetup - Progressive Web Apps 101

Functional IoT: Hardware and Platform

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at Devoxx 2017

Viewers also liked

We aren’t sure about you, but working with Java 8 made one of the speakers lose all of his hair and the other lose his sleep (or was it the jetlag?). If you still haven’t reached the level of Brian Goetz in mastering lambdas and strings, this talk is for you. And if you think you have, we have some bad news for you, you should attend as well. Baruch and Viktor will show you some surprising, bizarre, and inconceivable parts of Java 8 and make sure that you won’t be (too) surprised when it hits you in production. As with any other puzzlers talk, there will be two speakers, lots of puzzling questions, answers by the audience, T-shirts flying around, and a lot of fun, all for one purpose—to help you better understand Java 8.

Java 8 Puzzlers as it was presented at Codemash 2017

Baruch Sadogursky

In this talk , we’ll cover how and why Ansible was leveraged to automate routine management of EC2 instances/EBS/EIP/ELB etc and why the Ansible approach towards automation is key for code and system deployments across 100’s of nodes and how we achieved this at Webengage. We will provide an overview of the deployment process and give a demonstration as an example Outlines : How ansible is a straightforward , easy way to manage multiple cloud resources Intended Audience : Previous experience with configuration management systems Previous experience with AWS and Ansible

Automating aws infrastructure and code deployments using Ansible @WebEngage

Vishal Uderani

Choosing the Right Framework for Running Docker Containers in Prod

Josh Padnick

One of the upsides of Microservices is the ability to deploy often,at arbitrary schedules, and independently of other services, instead of requiring synchronized deployments happening on a fixed time. But to really leverage this advantage, we need fast, efficient, and reliable deployment processes. That's one of the value propositions of Containers in general, and Docker in particular. Docker offers a new, lightweight approach to application portability.It can build applications using easy-to-write, repeatable, efficient recipes; then it can ship them across environments using a common container format; and it can run them within isolated namespaces which abstract the operating environment, independently of the distribution,versions, network setup, and other details of this environment. But Docker can do way more than deploy your apps. Docker also enables you to generalize Microservices principles and apply them on operational tasks like logging, remote access, backups, and troubleshooting.This decoupling results in independent, smaller, simpler moving parts.

Containers, Docker, and Microservices: the Terrific Trio

Jérôme Petazzoni

Architecture microservices avec docker

gcatt

Infrastructure as code: running microservices on AWS using Docker, Terraform,...

Yevgeniy Brikman

Security best practices for kubernetes deployment

Michael Cherny

Viewers also liked (7)

Java 8 Puzzlers as it was presented at Codemash 2017

Automating aws infrastructure and code deployments using Ansible @WebEngage

Choosing the Right Framework for Running Docker Containers in Prod

Containers, Docker, and Microservices: the Terrific Trio

Architecture microservices avec docker

Infrastructure as code: running microservices on AWS using Docker, Terraform,...

Security best practices for kubernetes deployment

Similar to Patterns and antipatterns in Docker image lifecycle @ Codemash 2017

Patterns and antipatterns in Docker image lifecycle as was presented at DC Do...

Baruch Sadogursky

Presented by: Baruch Sadogursky, JFrog Presented at All Things Open 2020 Abstract: Surprisingly, implementing a secure, robust and fast promotion pipelines for container images is not as easy as it might sound. Automating dependency resolution (base images), implementing multiple registries for different maturity stages and making sure that we actually run in production containers from the images we intended can be tricky. In this talk, we will compare different approaches, compile a wish-list of features and create a pipeline that checks all the boxes using free and open-source tools.

Best Practices In Implementing Container Image Promotion Pipelines

All Things Open

JFrog container registry - DevOps extravaganza

Batel Zohar Tova

A private Java (Maven or Gradle) repository as a service can be set up in the cloud. A private Docker registry as a service can be easily set up in the cloud. But what if you want to build a holistic CI/CD pipeline on the cloud of your choice? Baruch Sadogursky walks you through setting up a universal artifact repository, which can serve for both Java and Docker. You’ll learn how to build a CI/CD pipeline with traceable metadata from the Java source files all the way to Docker images. Baruch uses Amazon, Azure, and Google Cloud as examples, although the recipes shown are applicable to other clouds as well.

Building a private CI/CD pipeline with Java and Docker in the cloud as presen...

Baruch Sadogursky

A private Java (Maven or Gradle) repository as a service can be setup in the cloud. A private Docker registry as a service can be easily setup in the cloud. But what if you want to build a holistic CI/CD pipeline, and on the cloud of YOUR choice? In this talk Baruch will take you through steps of setting up a universal artifact repository, which can serve for both Java and Docker. You’ll learn how to build a CI/CD pipeline with traceable metadata from the Java source files all the way to Docker images. Amazon, Azure, and Google Cloud (do you have setup that works on these?) will be used as an example although the recipes shown would be applicable to other cloud as well.

Building a private CI/CD pipeline with Java and Docker in the Cloud as presen...

Baruch Sadogursky

Frasco: Jekyll Starter Project

Kite Koga

How do you manage your software as it is progressing from development to production? Do you version and monitor your builds with enough metadata to know what's going on? Can you manage any software language or package type through a single point of universal control? Are you always sure your dependencies are secure before deployment? If you want to trust your software in production, join me and learn how to implement an end-to-end management and security pipeline for your software pipelines.

Trust your software in production as it was presented at Detroit JUG

Baruch Sadogursky

Talk given at Devoxx Belgium 2018 Spring Boot is awesome. Docker is awesome. Together you can do great things. But, are you doing it the right way? We'll walk you through, in detail, the optimal way to structure Docker images for Spring Boot applications for iterative development. Structuring your Docker images correctly is really important for teams doing continuous integration and continuous delivery. Using Docker best practices, we'll show you the code and the technologies used to optimize Docker images for Spring Boot apps!

Optimizing Spring Boot apps for Docker

Graham Charters

Docker is hot. However, as Docker container use spreads into more mature production pipelines, there can be issues about control of Docker images to ensure they are production-ready. Is a promotion-based model appropriate to control and track the flow of Docker images from development to production? We will demonstrate how to implement a promotion model for docker images, and then show how to distribute them to any kind of consumer, being it a customer or a data center.

Docker Container Lifecycles, Problem or Opportunity? by Baruch Sadogursky, JFrog

Docker, Inc.

Proxy and Executor

Adam Goucher

Baremetal deployment

baremetal

Baremetal deployment scale

baremetal

Mastering Docker on a Raspberry Pi

Team Hypriot

Docker: The Blue Whale of Awesomness

Sigfred Balatan Jr.

Lights, Camera, Docker: Streaming Video at DramaFever

bridgetkromhout

GroongaアプリケーションをDockerコンテナ化して配布する

ongaeshi

Design and Evolution of cyber-dojo

Jon Jagger

Docker - introduction

Michał Kurzeja

With the 'rise of containers' comes also the rise of container platforms. And while Docker is the way to do things for now, Podman has also been gaining traction as the new kid on the block especially after being somewhat embraced by RedHat and Fedora. Being new also comes with lack of heavy scrutiny and audit on the security side of things. Once you start integrating other protocols and pieces that compliment each other, such as Varlink, boundaries become fuzzy. Rather than focus on container breakouts, which are also very important, we'll focus on how Podman and Varlink interoperate and the authentication and security implications as such. We'll look at the remote API capabilities, secure configurations and how certain setups and projects out there by default can be vulnerable to compromise. By the end of the talk, we will have discussed various bugs, issues and hardening techniques around deploying Podman and Varlink together and if you don't know a lot about containers, you'll learn a bit along the way.

Adventures with Podman and Varlink

Jeremy Brown

Docker in Production: Reality, Not Hype - DevOps Chicago

bridgetkromhout

Similar to Patterns and antipatterns in Docker image lifecycle @ Codemash 2017 (20)

Patterns and antipatterns in Docker image lifecycle as was presented at DC Do...

Best Practices In Implementing Container Image Promotion Pipelines

JFrog container registry - DevOps extravaganza

Building a private CI/CD pipeline with Java and Docker in the cloud as presen...

Building a private CI/CD pipeline with Java and Docker in the Cloud as presen...

Frasco: Jekyll Starter Project

Trust your software in production as it was presented at Detroit JUG

Optimizing Spring Boot apps for Docker

Docker Container Lifecycles, Problem or Opportunity? by Baruch Sadogursky, JFrog

Proxy and Executor

Baremetal deployment

Baremetal deployment scale

Mastering Docker on a Raspberry Pi

Docker: The Blue Whale of Awesomness

Lights, Camera, Docker: Streaming Video at DramaFever

GroongaアプリケーションをDockerコンテナ化して配布する

Design and Evolution of cyber-dojo

Docker - introduction

Adventures with Podman and Varlink

Docker in Production: Reality, Not Hype - DevOps Chicago

More from Baruch Sadogursky

So, you want to update the software for your user, be it the nodes in your K8s cluster, a browser on user’s desktop, an app in user’s smartphone or even a user’s car. What can possibly go wrong? In this talk, we’ll analyze real-world software update fails and how multiple DevOps patterns, that fit a variety of scenarios, could have saved the developers. Manually making sure that everything works before sending an update and expecting the user to do acceptance tests before they update is most definitely not on the list of such patterns. Join us for some awesome and scary continuous update horror stories and some obvious (and some not so obvious) proven ideas for improvement and best practices you can start following tomorrow.

DevOps Patterns & Antipatterns for Continuous Software Updates @ NADOG April ...

Baruch Sadogursky

DevOps Patterns & Antipatterns for Continuous Software Updates @ DevOps.com A...

Baruch Sadogursky

In this talk, we’ll take you to a scaling journey, from 3 developers to a 100. We’ll talk about the challenges each milestone in this growth brings, both technological and methodological, and how to solve those challenges using the right mix of people, the right selection of tools and the correctly crafted process. The speakers excel in the different aspects of this triangle and went through this journey (more than once) themselves. And the fun and entertaining presentation as a Greek tragedy can’t hurt, can it?

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at Oracle Code NY...

Baruch Sadogursky

Devops is usually viewed from a traditional perspective of a collaboration of Dev, Ops, and QA, driven by the change in Culture, People, and Process. But how do you know where you stand and where to move? As in almost any field, data and metrics give you the gauges and instruments. In this talk, we’ll talk about the key measurements for the DevOps transformation process and provide you with 3 metrics you can start measuring tomorrow.

Data driven devops as presented at QCon London 2018

Baruch Sadogursky

A Research Study Into DevOps Bottlenecks as presented at Oracle Code LA 2018

Baruch Sadogursky

Java Puzzlers NG S03 a DevNexus 2018

Baruch Sadogursky

Do you always know what’s going on with your product artifacts since the moment they are built by the CI server from Git sources all the way to being deployed by Helm into Kuberenetes? In this talk, we will show how to build a reliable and transparent pipeline from code to cluster using Git, Artifactory, Docker, Kubernetes, and Helm. We’ll show how you such a pipeline can help you answer the big questions: What to deploy, What is deployed, and what is this artifact that I am looking for. This kind of transparency is critical for today’s environments, and Kubernetes with Helm shouldn’t be an exception.

Where the Helm are your binaries? as presented at Canada Kubernetes Meetups

Baruch Sadogursky

By Baruch Sadogursky Devops is usually viewed from a traditional perspective of a collaboration of Dev, Ops and QA, driven by the change in Culture, People and Process. But how do you know where you stand and were to move? As in almost any field, data and metrics give you the gauges and instruments. In this talk we’ll talk about the key measurements for the DevOps transformation process and provide you with 3 metrics you can start measuring tomorrow.

Data driven devops as presented at Codemash 2018

Baruch Sadogursky

A Research Study into DevOps Bottlenecks as presented at Codemash 2018

Baruch Sadogursky

By Baruch Sadogursky There are three hard things in computer science: cache invalidation, naming things, and off-by-one errors. This session tackles naming, especially Docker version naming. Labels, tags, checksums...how should you use them to keep track of Docker versions? What about dev versus prod images—how best to distinguish those? What about the “latest” tag? What about cleanup? Could we do more? Versioning often seems like a simple problem, but when you have a tool that gives you as much power and flexibility as Docker does, it often helps to develop guidelines. The presentation examines the tools available for managing Docker images and some simple patterns you can employ in various use cases for CI/CD to keep track of your containers.

Best Practices for Managing Docker Versions as presented at JavaOne 2017

Baruch Sadogursky

Debugging applications in production is like being the detective in a crime movie. Especially with microservices. Especially with containers. Especially in the cloud. Trying to see what’s going on in a production deployment at scale is impossible without proper tools! Google has spent over a decade deploying containerized Java applications at unprecedented scale and the infrastructure and tools developed by Google have made it uniquely possible to manage, troubleshoot, and debug, at scale. Join this session to see how you can diagnose and troubleshoot production issues w/ out of the box Kubernetes tools, as well as getting insight from the ecosystem with Weave Scope, JFrog Artifactory & Stackdriver tools.

Troubleshooting & Debugging Production Microservices in Kubernetes as present...

Baruch Sadogursky

Amazon Alexa Skills vs Google Home Actions, the Big Java VUI Faceoff as prese...

Baruch Sadogursky

Moar puzzlers! The more we work with Java 8, the more we go into the rabbit hole. Did they add all those streams, lambdas, monads, Optionals and CompletableFutures only to confuse us? It surely looks so! And Java 9 that heads our way brings even more of what we like the most, more puzzlers, of course! In this season we as usual have a great batch of the best Java WTF, great jokes to present them and great prizes for the winners!

Java Puzzlers NG S02: Down the Rabbit Hole as it was presented at The Pittsbu...

Baruch Sadogursky

Let’s Wing It: A Study in DevRel Strategy

Baruch Sadogursky

In this talk, Baruch Sadogursky presents the challenges of a high demand SaaS product incident triage at scale, as well as discuss the sources of log items, including the platform, tenants and other types of log sources. He will show practical examples of collector and filters configuration and will take you through a number of real world examples of problems investigations using Artifactory and Sumo Logic.

Log Driven First Class Customer Support at Scale

Baruch Sadogursky

No relationship in DevOps is more important than that between your CI/CD server and your Binary Repository. Jenkins has long been the go-to server for CI/CD, and JFrog Artifactory has long been one of the most popular integrations with it. This webinar focuses on the new features of the integration, leveraging the Jenkins Pipeline DSL for infrastructure-as-code of your favorite artifactory features whether it be generic, maven, gradle or Docker, and will show an end-to-end example of pipelines across multiple technologies and how powerful these new capabilities are.

[Webinar] The Frog And The Butler: CI Pipelines For Modern DevOps

Baruch Sadogursky

Groovy Puzzlers S04: The Bytecode Bites Back at Gr8Conf US 2017

Baruch Sadogursky

Not sure about you, but working with Java 8 made me lose all of my hair and most of my sleep (or was it the jet lag?). If you still haven’t reached the level of Brian Goetz in mastering lambdas and strings, this session is for you. And if you think you have, here’s some bad news for you: you should attend as well. You’ll see some surprising, bizarre, and inconceivable parts of Java 8, so you won’t be (too) surprised when they hit you in production. Like any other puzzlers session, this one consists lots of puzzling questions, answers from the audience, t-shirts flying around, and a lot of fun—all for one purpose: to make you understand Java 8 better.

Java Puzzlers NG as it was presented at Detroit Java User Group

Baruch Sadogursky

Looking to the future of DevOps, as release cycles get shorter and microservices get smaller, we can imagine a world in which at any one time, our systems’ software is being updated. Effectively, software will become liquid in that products and services will be connected to “software pipes” that constantly stream updates into our systems and devices; liquid software continuously and automatically updating our systems with no human intervention. This is the next big challenge of the DevOps revolution. Just as we turn on a tap, expect water to come out without having to think about it, and trust the quality of the water, our systems and devices should be continuously and automatically updated with software we can trust and consume safely. However, there are still some challenges to address.

Liquid Software: The Future of DevOps as presented at TiECon 2017

Baruch Sadogursky

More from Baruch Sadogursky (19)

DevOps Patterns & Antipatterns for Continuous Software Updates @ NADOG April ...

DevOps Patterns & Antipatterns for Continuous Software Updates @ DevOps.com A...

DevOps @Scale (Greek Tragedy in 3 Acts) as it was presented at Oracle Code NY...

Data driven devops as presented at QCon London 2018

A Research Study Into DevOps Bottlenecks as presented at Oracle Code LA 2018

Java Puzzlers NG S03 a DevNexus 2018

Where the Helm are your binaries? as presented at Canada Kubernetes Meetups

Data driven devops as presented at Codemash 2018

A Research Study into DevOps Bottlenecks as presented at Codemash 2018

Best Practices for Managing Docker Versions as presented at JavaOne 2017

Troubleshooting & Debugging Production Microservices in Kubernetes as present...

Amazon Alexa Skills vs Google Home Actions, the Big Java VUI Faceoff as prese...

Java Puzzlers NG S02: Down the Rabbit Hole as it was presented at The Pittsbu...

Let’s Wing It: A Study in DevRel Strategy

Log Driven First Class Customer Support at Scale

[Webinar] The Frog And The Butler: CI Pipelines For Modern DevOps

Groovy Puzzlers S04: The Bytecode Bites Back at Gr8Conf US 2017

Java Puzzlers NG as it was presented at Detroit Java User Group

Liquid Software: The Future of DevOps as presented at TiECon 2017

Recently uploaded

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

This presentation explores the impact of HTML injection attacks on web applications, detailing how attackers exploit vulnerabilities to inject malicious code into web pages. Learn about the potential consequences of such attacks and discover effective mitigation strategies to protect your web applications from HTML injection vulnerabilities. for more information visit https://bostoninstituteofanalytics.org/category/cyber-security-ethical-hacking/

HTML Injection Attacks: Impact and Mitigation Strategies

Boston Institute of Analytics

Created by Mozilla Research in 2012 and now part of Linux Foundation Europe, the Servo project is an experimental rendering engine written in Rust. It combines memory safety and concurrency to create an independent, modular, and embeddable rendering engine that adheres to web standards. Stewardship of Servo moved from Mozilla Research to the Linux Foundation in 2020, where its mission remains unchanged. After some slow years, in 2023 there has been renewed activity on the project, with a roadmap now focused on improving the engine’s CSS 2 conformance, exploring Android support, and making Servo a practical embeddable rendering engine. In this presentation, Rakhi Sharma reviews the status of the project, our recent developments in 2023, our collaboration with Tauri to make Servo an easy-to-use embeddable rendering engine, and our plans for the future to make Servo an alternative web rendering engine for the embedded devices industry. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://ossna2024.sched.com/event/1aBNF/a-year-of-servo-reboot-where-are-we-now-rakhi-sharma-igalia

A Year of the Servo Reboot: Where Are We Now?

Igalia

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Tata AIG General Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Edi Saputra

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

The presentation explores the development and application of artificial intelligence (AI) from its inception to its current status in the modern world. The term "artificial intelligence" was first coined by John McCarthy in 1956 to describe efforts to develop computer programs capable of performing tasks that typically require human intelligence. This concept was first introduced at a conference held at Dartmouth College, where programs demonstrated capabilities such as playing chess, proving theorems, and interpreting texts. In the early stages, Alan Turing contributed to the field by defining intelligence as the ability of a being to respond to certain questions intelligently, proposing what is now known as the Turing Test to evaluate the presence of intelligent behavior in machines. As the decades progressed, AI evolved significantly. The 1980s focused on machine learning, teaching computers to learn from data, leading to the development of models that could improve their performance based on their experiences. The 1990s and 2000s saw further advances in algorithms and computational power, which allowed for more sophisticated data analysis techniques, including data mining. By the 2010s, the proliferation of big data and the refinement of deep learning techniques enabled AI to become mainstream. Notable milestones included the success of Google's AlphaGo and advancements in autonomous vehicles by companies like Tesla and Waymo. A major theme of the presentation is the application of generative AI, which has been used for tasks such as natural language text generation, translation, and question answering. Generative AI uses large datasets to train models that can then produce new, coherent pieces of text or other media. The presentation also discusses the ethical implications and the need for regulation in AI, highlighting issues such as privacy, bias, and the potential for misuse. These concerns have prompted calls for comprehensive regulations to ensure the safe and equitable use of AI technologies. Artificial intelligence has also played a significant role in healthcare, particularly highlighted during the COVID-19 pandemic, where it was used in drug discovery, vaccine development, and analyzing the spread of the virus. The capabilities of AI in healthcare are vast, ranging from medical diagnostics to personalized medicine, demonstrating the technology's potential to revolutionize fields beyond just technical or consumer applications. In conclusion, AI continues to be a rapidly evolving field with significant implications for various aspects of society. The development from theoretical concepts to real-world applications illustrates both the potential benefits and the challenges that come with integrating advanced technologies into everyday life. The ongoing discussion about AI ethics and regulation underscores the importance of managing these technologies responsibly to maximize their their benefits while minimizing potential harms.

Artificial Intelligence: Facts and Myths

Joaquim Jorge

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

wesley chun

Discord is a free app offering voice, video, and text chat functionalities, primarily catering to the gaming community. It serves as a hub for users to create and join servers tailored to their interests. Discord’s ecosystem comprises servers, each functioning as a distinct online community with its own channels dedicated to specific topics or activities. Users can engage in text-based discussions, voice calls, or video chats within these channels. Understanding Discord Servers Discord servers are virtual spaces where users congregate to interact, share content, and build communities. Servers may revolve around gaming, hobbies, interests, or fandoms, providing a platform for like-minded individuals to connect. Communication Features Discord offers a range of communication tools, including text channels for messaging, voice channels for real-time audio conversations, and video channels for face-to-face interactions. These features facilitate seamless communication and collaboration. What Does NSFW Mean? The acronym NSFW stands for “Not Safe For Work,” indicating content that may be inappropriate for professional or public settings. NSFW Content NSFW content encompasses material that is sexually explicit, violent, or otherwise graphic in nature. It often includes nudity, profanity, or depictions of sensitive topics.

Understanding Discord NSFW Servers A Guide for Responsible Users.pdf

UK Journal

GenAI Risks & Security Meetup 01052024.pdf

lior mazor

A Domino Admins Adventures (Engage 2024)

Gabriella Davis

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Top 10 Most Downloaded Games on Play Store in 2024

SynarionITSolutions

Abhishek Deb(1), Mr Abdul Kalam(2) M. Des (UX) , School of Design, DIT University , Dehradun. This paper explores the future potential of AI-enabled smartphone processors, aiming to investigate the advancements, capabilities, and implications of integrating artificial intelligence (AI) into smartphone technology. The research study goals consist of evaluating the development of AI in mobile phone processors, analyzing the existing state as well as abilities of AI-enabled cpus determining future patterns as well as chances together with reviewing obstacles as well as factors to consider for more growth.

Exploring the Future Potential of AI-Enabled Smartphone Processors

debabhi2

💉💊+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHABI}}+971581248768 +971581248768 Mtp-Kit (500MG) Prices » Dubai [(+971581248768**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Maya Whatsapp +971581248768 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971581248768''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971581248768' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Cl

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

apidays

Recently uploaded (20)

Partners Life - Insurer Innovation Award 2024

HTML Injection Attacks: Impact and Mitigation Strategies

A Year of the Servo Reboot: Where Are We Now?

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Tata AIG General Insurance Company - Insurer Innovation Award 2024

Data Cloud, More than a CDP by Matt Robison

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Artificial Intelligence: Facts and Myths

Powerful Google developer tools for immediate impact! (2023-24 C)

Understanding Discord NSFW Servers A Guide for Responsible Users.pdf

GenAI Risks & Security Meetup 01052024.pdf

A Domino Admins Adventures (Engage 2024)

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Top 10 Most Downloaded Games on Play Store in 2024

Exploring the Future Potential of AI-Enabled Smartphone Processors

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Patterns and antipatterns in Docker image lifecycle @ Codemash 2017

1. This slide was intentionally left blank

3. whoami Baruch Sadogursky, JFrog Developer Advocate, @jbaruch

4. JFrog Xray

5. Poll Time!

6. Poll Time! üHeard about Docker üCan do the tutorial üPoCing, playing etc. üProduction, baby! @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

9. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

10. JFrog Artifactory + Docker @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

11. Who’s using Docker and nothing else?

12.

13.

14. The Promotion Pyramid Development builds Dev Integration tests Integr. tests Staging Pre-Prod Prod Amount of builds Build/Deploy time Amount of binaries

15. Pipeline: Quality Gates and Visibility Source: Agile ALM, Michael Hüttermann, Manning Publications Co. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

16. $docker build @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

17.

18. Too easy! @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

19.

20. That’s why. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

21. Let’s fix it! @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

22. Let’s fix it (again)! @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

23. Let’s fix it (again)! @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

24. That’s why you don’t trust Docker @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

25. Traditional Server Pattern http://martinfowler.com/bliki/ImmutableServer.html @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

26. Immutable Server Pattern http://martinfowler.com/bliki/ImmutableServer.html @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

27.

28.

29. What’s up with the gates?!

30. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

31. What’s up with the gates?!

32. What’s up with the gates?! - QA shouldn’t test dev images

33. What’s up with the gates?! - QA shouldn’t test dev images - non-tested images shouldn't be staged

34. What’s up with the gates?! - QA shouldn’t test dev images - non-tested images shouldn't be staged - non-staged, non-tested or dev images shouldn’t end up in production!!!

35. Not so fast… @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

36. Trumped-up limitations @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

37. The Anatomy of Docker Tag @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

38. Wait a second, how can I have more than one repository per host now?!

39. How can we support this? https://host:8081/artifactory/docker-dev/busybox https://host:8081/artifactory/docker-staging/busybox https://host:8081/artifactory/docker-qa/busybox https://host:8081/artifactory/docker-prod/busybox @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

40. “ONEREGISTRYPERHOSTOUGHTTOBEENOUGHFORANYBODY.”

41. Panic! @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

42. Virtual hosts/ports to the rescue https://host:8081/artifactory/docker-dev/busybox Context name Virtual repository name Tag name https://host:port/v2/busybox

43. server { listen 5001; server_name 192.168.99.100; if ($http_x_forwarded_proto = '') { set $http_x_forwarded_proto $scheme; } rewrite ^/(v1|v2)/(.*) /artifactory/api/docker/docker-dev/$1/$2; … } } @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

44. But then you realize… Wait a second, now I need to pull, retag and push for every step?!

45.

46.

47. Anatomy of a container @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

48. Our Layers Application: ••.war file Framework: ••JDK8 + Tomcat Base: ••ubuntu-trusty

49. Framework build - Verified base image - Add system dependencies from artifactory - JDK - Tomcat - Own it!

50. Minimal Framework build Dockerfile FROM ubuntu:14.04 MAINTAINER you@yourorg.com @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

51. Application build - Framework is your base - Run a java build - Add a file to base - Done!

52. Application build Dockerfile FROM yourorg-docker.jfrog.io/myorg/framework:latest MAINTAINER you@yourorg.com ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war /var/lib/tomcat7/webapps/app.war @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

53. Application build Dockerfile FROM yourorg-docker.jfrog.io/myorg/framework:latest MAINTAINER you@yourorg.com ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war /var/lib/tomcat7/webapps/app.war @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

54. Application build Dockerfile FROM yourorg-docker.jfrog.io/myorg/framework:latest MAINTAINER you@yourorg.com ADD https://yourorg.jfrog.io/jbaruch/java-release-local/…/app-[RELEASE].war /var/lib/tomcat7/webapps/app.war @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

55.

56. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

57. Framework Pipeline Application Pipeline

58. Framework Pipeline Application Pipeline

59. Framework Pipeline Application Pipeline

60. @JBARUCH #CODEMASH HTTP://JFROG.COM/SHOWNOTES

61.

62. HIGH QUALITY (software and information) SPEED LOW COST (automation) Fast releases > Modular > Automation Conclusions: Release Fast or Die!

63. Q&A and Links • @jbaruch • #codemash • http://jfrog.com/shownotes – Video – Slides – Links – Feedback – Raffle! (come early)