What are the changes for CD implementations using containers compared to one using classic virtualization?

1. Continuous Delivery
with Docker
Christoph Lukas @cluk33
http://pingworks.de

2. Containerizing Applications
Hardware
Host OS / Kernel
Hypervisor
virtual
HW
Guest
OS
Apps
Binaries/
Libraries
Virtualization Containerization
Process
Binaries/
Libraries
Container
single
Process
Binaries/
Libraries
Container
Process
Binaries/
Libraries
Container
single
Process
Binaries/
Libraries
Container
Process
Binaries/
Libraries
Container
single
Process
Binaries/
Libraries
Container
Hardware
Host OS / Kernel
virtual
HW
Guest
OS
Apps
Binaries/
Libraries
virtual
HW
Guest
OS
Apps
Binaries/
Libraries

4. 1st
Module 1
Bundler
Commit Stage Acceptancetest Stage
Module 2
Module 3
2nd
Integration
UI
Performance

5. Each change triggers the
pipeline immediately
SCM
1st
Module 1
BundlerModule 2
Module 3
2nd
Integration
UI
Performance

6. If any part of the pipeline fails
stop the line
SCM
1st
Module 1
BundlerModule 2
Module 3
2nd
Integration
UI
Performance

7. Only build your binaries
once
SCM
1st
Module 1
Bundler
Binary-
Repo
Module 2
Module 3
2nd
Integration
UI
Performance

8. Building the application:
Virtualization
SCM
1st
Module 1
Bundler
Binary-
Repo
Module 2
Module 3
Binary Artefact:
*.jar, *.deb, *.rpm
Repository:
Artifactory, Nexus, ...

9. Build the application:
Containerization
SCM
1st
Module 1
Bundler
Binary-
Repo
Module 2
Module 3
Binary Artefact:
Docker Image
Repository:
Private Docker Registry

10. Deploy the same way to every
environment
SCM
1st
Module 1
Bundler
Binary-
Repo
Module 2
Module 3
2nd
Integration
UI
Performance

11. Deploying the application:
Virtualization
Deployment:
*.jar, *.deb
virtual
HW
Guest
OS
Apps
Binaries/
Libraries
Hypervisor
Hardware
Host OS / Kernel
Provisioning
Chef,
Puppet,
Ansible
SCM
Binary-
Repo
Build-Pipeline
SCM

12. Deploying Applications:
Containerization
SCM
Binary-
Repo
Build-Pipeline
Deployment:
Docker Image
Hardware
Host OS / Kernel
Process
Binaries/
Libraries
Container

13. Time for a demo....

14. Security
+ pingworks/ruby-phonebook:019ab7bab4cc
+ ruby:2.2
+ buildpack-deps:jessie
+ buildpack-deps:jessie-scm
+ buildpack-deps:jessie-curl
+ debian:jessie
+ scratch
Docker builds images by stacking filesystem layers
Example:

15. Benefits & Tradeoffs
Minimized overhead
Simplified deployment
Simplified setup for developers
New technology
Security?

16. Workshop@Heise:
http://heise.de/-2176380
Trainings:
https://pingworks.de/cd
Christoph Lukas
lukas@pingworks.de
@cluk33