Learning Docker - Second Edition

Title Page

Learning Docker

Second Edition

Faster app development and deployment with Docker containers

Jeeva S. Chelladhurai

Vinod Singh

Pethuru Raj

BIRMINGHAM - MUMBAI

Copyright

Learning Docker

Second Edition

Copyright © 2017 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: June 2015

Second edition: May 2017

Production reference: 1290517

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham 

B3 2PB, UK.

ISBN 978-1-78646-292-3

www.packtpub.com

Credits

About the Authors

Jeeva S. Chelladhurai has been working as a DevOps specialist at the IBM Global Cloud Center of Excellence (CoE) in India for the past 8 years. He has more than 20 years of experience in the IT industry. In various capacities, he has technically managed and mentored diverse teams across the globe in envisaging and building pioneering telecommunication products. He specializes in DevOps and cloud solution delivery, with a focus on data center optimization, Software-defined Environments (SDEs), and distributed application development, deployment, and delivery using the newest Docker technology. Jeeva is also a strong proponent of agile methodologies, DevOps, and IT automation. He holds a master's degree in computer science from Manonmaniam Sundaranar University and a graduate certificate in project management from Boston University. He has been instrumental in crafting reusable assets for IBM solution architects and consultants in Docker-inspired containerization technology. He can be reached at his LinkedIn page:

https://www.linkedin.com/in/JeevaChelladhurai

Vinod Singh held various positions across development, architecture, and engagement with clients throughout his career.

Currently, he is a senior cloud architect with IBM's cloud flagship offering Bluemix, supporting customers across the world. Vinod's experience with networking and data communication spans software design, development, and testing. The cloud, cognitive computing, and Linux are his passions, and he feels cognitive computing is once again going to change the world.

Vinod is a regular speaker at IBM's internal conferences, IEEE conferences, and technology meetups. Vinod's latest day job revolves around IBM Bluemix, Kubernetes, Docker, IBM Watson and Amazon AWS. He can be reached at LinkedIn page:

https://www.linkedin.com/in/vinod-singh-687b43/ and Twitter @1vinodsingh.

Vinod acknowledges his wife for extraordinary support at home that enables him to run extra mile in professional life.

Pethuru Raj, PhD, has been working as the chief architect in Reliance Jio Cloud and previously worked as a cloud infrastructure architect in the IBM Global Cloud Center of Excellence (CoE), IBM India, Bangalore for four years. Prior to that, he worked as TOGAF-certified enterprise architecture (EA) consultant in Wipro Consulting Services (WCS) Division. He also had a fruitful stint as a lead architect in the corporate research (CR) division of Robert Bosch, Bangalore. He has gained more than 17 years of IT industry experience and 8 years of research experience.

He finished the CSIR-sponsored PhD degree in Anna University, Chennai and continued the UGC-sponsored postdoctoral research in the department of Computer Science and Automation, Indian Institute of Science, Bangalore. Thereafter, he was granted a couple of international research fellowships (JSPS and JST) to work as a research scientist for 3.5 years in two leading Japanese universities. He has published more than 30 research papers in peer-reviewed journals such as IEEE, ACM, Springer-Verlag, and Inderscience. He has authored 7 books thus far and he focuses on some of the emerging technologies such as:

Software-defined Cloud Environments (SDCEs)

Big, Fast, Streaming and IoT Data Analytics

DevOps through Docker-enabled Containerization

Microservices Architecture (MSA)

Context-aware Computing

Edge / Fog and Cognitive Analytics

Blockchain Technology for IoT Data and Device Security

Smarter Cities Technologies and Tools

Home page: www.peterindia.net

LinkedIn profile: https://www.linkedin.com/in/peterindia

He gives all honor and glory to the Lord and Savior Jesus Christ.

About the Reviewer

Werner Dijkerman is a system engineer from the Netherlands. He has more than 10 years of experience in IT operations departments in different organizations. He started working with a leading online retailer in the Netherlands and continued in one of the leading software companies for general practitioners. He now works for iWelcome, the only established IDaaS provider in Europe. 

Having experience as a Windows and Linux admin, he also knows his way around Java application servers such as Tomcat and JBoss, (No)SQL databases, and monitoring systems. He is very busy with maintaining several free available Docker containers. Finding new ways to monitor Docker, orchestrate containers, and testing containers before it is used on production environments. 

He was also a technical reviewer on the book Zabbix Network Monitoring, Second Edition, also available from Packt Publishing.

www.PacktPub.com

For support files and downloads related to your book, please visit www.PacktPub.com.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.comand as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@packtpub.com for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

https://www.packtpub.com/mapt

Get the most in-demand software skills with Mapt. Mapt gives you full access to all Packt books and video courses, as well as industry-leading tools to help you plan your personal development and advance your career.

Why subscribe?

Fully searchable across every book published by Packt

Copy and paste, print, and bookmark content

On demand and accessible via a web browser

Customer Feedback

Thanks for purchasing this Packt book. At Packt, quality is at the heart of our editorial process. To help us improve, please leave us an honest review on this book's Amazon page at https://www.amazon.com/dp/1786462923.

If you'd like to join our team of regular reviewers, you can e-mail us at customerreviews@packtpub.com. We award our regular reviewers with free eBooks and videos in exchange for their valuable feedback. Help us be relentless in improving our products!

Table of Contents

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the example code

Downloading the color images of this book

Errata

Piracy

Questions

Getting Started with Docker

The key drivers for Dockerization

Differentiating between containerization and virtualization

The latest additions to the Docker platform

Windows containers

Installing the Docker Engine

Installing Docker on Ubuntu

Installing Docker using an automated script

Installing Docker on the Mac

Installing Docker on Windows

Understanding the Docker setup

Client-server communication

Downloading the first Docker image

Running the first Docker container

Troubleshooting Docker containers

Summary

Handling Docker Containers

Clarifying Docker terms

Docker images

Docker containers

Docker Registry

Working with Docker images

The Docker Hub

Searching Docker images

Working with an interactive container

Tracking changes inside containers

Controlling Docker containers

Housekeeping containers

Building images from containers

Launching a container as a daemon

Summary

Building Images

Docker's integrated image building system

A quick overview of the Dockerfile's syntax

The comment line

The parser directives

The Dockerfile build instructions

The FROM instruction

The MAINTAINER instruction

The COPY instruction

The ADD instruction

The ENV instruction

The ARG instruction

The environment variables

The USER instruction

The WORKDIR instruction

The VOLUME instruction

The EXPOSE instruction

The LABEL instruction

The RUN instruction

The CMD instruction

The ENTRYPOINT instruction

The HEALTHCHECK instruction

The ONBUILD instruction

The STOPSIGNAL instruction

The SHELL instruction

The .dockerignore file

A brief on the Docker image management

Best practices for writing a Dockerfile

Summary

Publishing Images

Understanding Docker Hub

Pushing images to Docker Hub

Automating the build process for images

Private repositories on Docker Hub

Organizations and teams on Docker Hub

The REST API for Docker Hub

Summary

Running Your Private Docker Infrastructure

Docker Registry

Docker Registry use cases

Running Docker Registry and pushing the image

Running the Docker Registry on localhost with an SSL certificate

Running Docker Registry with restrictions

Managing Docker Registry with Docker Compose

Load balancing consideration

Webhook notifications

Docker Registry HTTP API support

Summary

Running Services in a Container

A brief overview of container networking

Envisaging container as a service

Building an HTTP server image

Running the HTTP server image as a service

Connecting to the HTTP service

Exposing container services

Publishing a container's port - the -p option

NAT for containers

Retrieving the container port

Binding a container to a specific IP address

Autogenerating the Docker host port

Port binding using EXPOSE and -P option

Summary

Sharing Data with Containers

Data volume

The volume management command

Sharing host data

The practicality of host data sharing

Sharing data between containers

Data-only containers

Mounting data volume from other containers

The practicality of data sharing between containers

Avoiding common pitfalls

Directory leaks

The undesirable effect of data volume

Summary

Orchestrating Containers

Docker inbuilt service discovery

Linking containers

Orchestration of containers

Orchestrating containers using docker-compose

Installing docker-compose

The docker-compose file

The docker-compose command

Common usage

Summary

Testing with Docker

A brief overview of TDD

Testing your code inside Docker

Running the test inside a container

Using a Docker container as a runtime environment

Integrating Docker testing into Jenkins

Preparing the Jenkins environment

Automating the Docker testing process

Summary

Debugging Containers

Process-level isolation for Docker containers

Control groups

Debugging a containerized application

The docker exec command

The docker ps command

The docker top command

The docker stats command

The Docker events command

The docker logs command

The docker attach command

Debugging a Dockerfile

Summary

Securing Docker Containers

The security scenario in the containerization domain

The security ramifications of Docker containers

The security facets - virtual machines versus Docker containers

The prominent security-fulfilment features of containers

Immutable infrastructure

Resource isolation

Resource accounting and control

The root privilege - impacts and best practices

The trusted user control

Non-root containers

SELinux for container security

Loading the Docker images and the security implications

Image signing and verification using TUF

The emerging security approaches

The best practices for container security

Secure deployment guidelines for Docker containers

The future of Docker security

Summary

The Docker Platform – Distinct Capabilities and Use Cases

Describing containers

Distinguishing Docker containers

Briefing the Docker platform

The evolving Docker platform components

Implications of the Docker technology

Modern enterprise development

MSA and Docker containers

Case study

Infrastructure optimization

Case study

Enabling DevOps

Continuous integration and continuous deployment

Continuous delivery

Accurate testing

Facilitating CaaS

Accelerating workload modernization

Docker for stateful applications

Containers for edge computing

Devices networking, service enablement, and clustering

Device service registry for discovery

Fault tolerance

Caching

The Docker use cases

Integrating containers into workflows

Docker for HPC and TC applications

Containers for telecom applications

Summary

Preface

There are several technical and business advantages associated with Docker. The longstanding goals of application development, deployment, and delivery automation are accomplished through Docker-enabled containerization, which is being touted as a crucial automation method for the tremendous success of the cloud paradigm. Existing workloads are containerized and cloud-enabled to be stocked in public as well as private repositories. Both business and IT workloads can be easily pampered, packaged, and presented as remotely discoverable, usable, portable, and composable containers. Further on, containers are shipped and run everywhere without any hassle, hitches, and hurdles. The containerization concept has made IT infrastructures and processes agile and adaptive. This means that not only is software engineering sped up, but also the tasks of software configuration, deployment, and delivery are accelerated. Precisely speaking, the unique goals of DevOps are accomplished through the smart use of containers.

Beside a litany of Docker-centric solutions, there is a growing family of third-party tools to make embracing and enabling Docker risk-free, easier, and faster. There are powerful case studies and real-world deployments clearly illustrating that Docker consistently contributes to establishing and sustaining IT environments in minutes rather than in months. The other noteworthy advancements brought by the Docker paradigm include the real-time scalability of application infrastructures and the improved utilization of IT resources brought about by having several application containers within any Docker host. There are container cluster management platforms for efficient container scheduling, and orchestration for quickly producing and sustaining multihost, multicontainer, and microservices-centric distributed applications.  

The role and responsibility of the widely deliberated Docker technology in ensuring event-driven, service-oriented, insights-filled, context-aware, cloud-hosted, business-centric, and mission-critical applications is enchanting really and is well articulated in this new edition of the book, in order to adequately empower our readers with all the relevant details of the most popular Docker paradigm.

What this book covers

Chapter 1, Getting Started with Docker, talks about the various distinctions of the open-source Docker platform and how it simplifies and speeds up the process of realizing containerized workloads to be readily deployed and run on a variety of operating systems, bare metal servers, and virtual machines. This chapter also has step-by-step details on installing the Docker Engine, downloading a Docker image from the centralized Docker Hub, creating a Docker container out of that image, and troubleshooting the Docker container.

Chapter 2, Handling Docker Containers, is dedicated to clearly explaining the various commands required to manage Docker images and containers. This chapter provides the basic Docker terminologies needed to understand the output of Docker commands. Other details covered here include starting an interactive session inside a container, managing your images, running containers, and tracking changes inside containers.

Chapter 3, Building Images, describes how Docker images are built. There are several ways and means through which Docker images are built and stored. The other important topics covered in this chapter include a quick overview of a Dockerfile's syntax and a bit of theoretical information on how Docker stores images.

Chapter 4, Publishing Images, tells you everything about publishing images on the centralized Docker Hub and how to get the most out of Docker Hub. The other important contents in the chapter include more details about Docker Hub, how to push images to Docker Hub, the automatic building of images, how to create organizations on Docker Hub, and finally private repositories.

Chapter 5, Running Your Private Docker Infrastructure, explains how corporates can set up and run their own private repositories. There are a few valid reasons why corporates want to have their own repositories to host some crucial Docker images. This means that publicly available repositories are found unsuitable for storing certain specific images. This chapter has all the information required to set up and sustain private repositories.

Chapter 6, Running Services in a Container, illustrates how a web application can be run inside a Docker container as a service and how to expose the service, in order for the outside world to find and access it. How the appropriate Dockerfile is developed to simplify this task is also described in detail.

Chapter 7, Sharing Data with Containers, shows you how to use Docker's volumes feature to share data between the Docker host and its containers. The other topics covered here are how to share data between containers, the common use cases, and the typical pitfalls to avoid.

Chapter 8, Orchestrating Containers, explains how to do the orchestration of multiple containers towards composite and containerized workloads. It is a well-known truth that orchestration plays a major role in producing composite applications. This chapter includes relevant details about the orchestration process and the toolset made available for enabling the process of orchestration. Finally, you will find a well-orchestrated example of how containers can be orchestrated to bring forth highly reusable and business-aware containers.

Chapter 9, Testing with Docker, focuses on testing your code inside Docker images. You will also find out how to run tests inside an ad hoc Docker image. Finally, you will be given details of how to integrate Docker testing into a continuous integration server such as Jenkins.

Chapter 10, Debugging Containers, teaches you how to debug applications running inside containers. How Docker ensures that processes running inside containers are isolated from the outside world is also covered.

Chapter 11, Securing Docker Containers, explains the security and privacy challenges and concerns, and how they are addressed through the liberal use of competent standards, technologies, and tools. This chapter covers the mechanism for dropping user privileges once inside an image. There is also a brief introduction to how the security capabilities introduced in SELinux come in handy when securing Docker containers.

Chapter 12, The Docker Platform – Distinct Capabilities and Use Cases, describes how the Docker platform is becoming an enterprise-grade method for bringing forth a variety of distinct automation in the fields of software engineering and distributed computing. Several industry case studies are included in this chapter in order to address any worries about Docker and to enhance its penetration and participation.  

What you need for this book

You need Ubuntu 16.04 to run the examples covered in this book.

Who this book is for

This book is ideal for developers, operations managers, and IT professionals who would like to learn about Docker and use it to build and deploy container-based applications. No prior knowledge of Docker is expected.

Conventions

In this book, you will find a number of text styles that distinguish between different kinds of information. Here are some examples of these styles and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles are shown as follows: Let's start our Docker journey with the docker version subcommand, as shown here:

A block of code is set as follows:

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

Any command-line input or output is written as follows:

New terms and important words are shown in bold. Words that you see on the screen, for example, in menus or dialog boxes, appear in the text like this: Now, clicking on the Start using Jenkins button will take you to the Welcome to Jenkins! page.

Warnings or important notes appear in a box like this.

Tips and tricks appear like this.

Reader feedback

Feedback from our readers is always welcome. Let us know what you think about this book—what you liked or disliked. Reader feedback is important to us as it helps us develop titles that you will really get the most out of.

To send us general feedback, simply e-mail feedback@packtpub.com, and mention the book's title in the subject of your message.

If there is a topic that you have expertise in and you are interested in either writing or contributing to a book, see our author guide at www.packtpub.com/authors.

Customer support

Now that you are the proud owner of a Packt book, we have a number of things to help you to get the most from your purchase.

Downloading the example code

You can download the example code files for this book from your account at http://www.packtpub.com. If you purchased this book elsewhere, you can visit http://www.packtpub.com/support and register to have the files e-mailed directly to you.

You can download the code files by following these steps:

Log in or register to our website using your e-mail address and password.

Hover the mouse pointer on the SUPPORT tab at the top.

Click on Code Downloads & Errata.

Enter the name of the book in the Search box.

Select the book for which you're looking to download the code files.

Choose from the drop-down menu where you purchased this book from.

Click on Code Download.

Once the file is downloaded, please make sure that you unzip or extract the folder using the latest version of:

WinRAR / 7-Zip for Windows

Zipeg / iZip / UnRarX for Mac

7-Zip / PeaZip for Linux

The code bundle for the book is also hosted on GitHub at https://github.com/PacktPublishing/Learning-Docker-Second-Edition. We also have other code bundles from our rich catalog of books and videos available at https://github.com/PacktPublishing/. Check them out!

Downloading the