~Deep dive into Windows Containers and Docker~

Transcription

1 ~Deep dive into Windows Containers and Docker~ Blog: Twitter:

2

3

4 Are we doing the right things?

5 In managing infrastructure?

6 In deployment? Desired state Scripted Installation wizard Manual

7 The cloud has changed expectations Availability 100% Uptime Hyper-scale From startup to enterprise Agility Deliver just in time speed

8 Digital Disruption is real!

9 We have to change the way we work

10 Future of application delivery Serverless Containerized Desired state Scripted Installation wizard Manual

11 The benefits of containers Cheaper

12 How to get started?

13

14 Demo First look at container isolation run, exec, rm

15 What are containers?

16 Containers are NOT VM S!

17 Containers vs VM s Isolated environment Can both be moved between hosts Resource governance

18 Implementation

19

20 Container, images, layers...

21 Demo Images and images layers search, pull, tag, inspect

22 Windows Containers

23 Architecture Docker Client Docker Compose Docker Registry Docker Swarm REST Interface libcontainerd libnetwork graph plugins Compute Service Control Groups Job objects Namespaces Object Namespace, Process Table, Networking Layer Capabilities Registry, Union like filesystem extensions Other OS Functionality

24 Windows Server Containers System Processes Host User Mode Container Management System Processes Application Processes System Processes Application Processes

25 Demo SMSS

26 Hyper-V Containers System Processes Host User Mode Virtual Machine Specifically Optimized To Run a Container Container Management System Processes Application Processes

27 Demo Hyper-V container

28 Linux vs Windows containers

29 Demo Creating our first container image commit, build, login, tag, push

30 So we put everything in one container...

31 Microservices Authentication Payment Reporting Bounded Contexts Event Handler Service Bus External Classic Adapter Classic SalesForce Adapter Salesforce

32 Demo How to share data? run, volume, inspect

33 Hmm, a docker run overload docker run ApplicationA docker run ApplicationB docker run ApplicationH docker run ApplicationC docker run ApplicationE docker run ApplicationF docker run ApplicationI docker run ApplicationJ docker run ApplicationD docker run ApplicationM docker run ApplicationL docker run ApplicationG docker run ApplicationN docker run ApplicationK

34 Docker compose version: '2' services: dotnedsaturdaydata: build: context:./src/dotnedsaturday.data/ dockerfile: Dockerfile ports: - "53000:53000" dotnedsaturdaydemo: build: context:./src/dotnedsaturday.demo/ dockerfile: Dockerfile depends_on: - "dotnedsaturdaydata" ports: - "80:54000" networks: default: external: name: nat

35 Demo Docker compose

36 CONTAINER OVERLOAD

37 Azure Container Service

38 DC/OS Swarm Kubernetes

39 Putting it all together... Azure Container Service (ACS) Docker Engine Windows Container Implementations Container Base Images Windows Server Container microsoft/windowsservercore Hyper-V microsoft/nanoserver 3. Docker build 2. Build trigger docker-compose run 1. docker pull 2. docker run 1. Commit 4. Docker push Docker Swarm Docker Hub Container Images Docker registries Windows Container Hosts

40 No containers running and filesystem full? (docker ps -a) ENV vs ARG Be aware of sensitive information! Data volume containers (docker create -v C:/DockerData:C:/data --name DataContainer microsoft/windowsservercore ocker run -it -d --volumes-from DataContainer --name Consumer1 microsoft/windowsservercore) Registries (internal vs cloud?) What we learned... Keep windows images up-to-date ( Order of layers (new layer can mean a rebuild) Exec and shell form of running scripts (Shell: CMD executable param1 param2, EXEC: CMD ["executable","param1","param2"])

41 Portainer ( ) Install-Module Image2Docker Import-Module Image2Docker ConvertTo-Dockerfile -ImagePath C:\win-2016-iis.vhd -Artifact IIS - OutputPath c:\i2d2\iis DockerTLS (docker run --rm -e IP_ADDRESSES= , v "C:\ProgramData\docker:C:\ProgramData\docker" -v "$env:userprofile\.docker:c:\users\containeradmi nistrator\.docker" stefanscherer/dockertls-windows) Group Managed Service Accounts ( ion-documentation/tree/live/windowsserver-container-tools/serviceaccountss) Tips & tricks Be aware of vulnerabilities! Ctrl+P+Q (step out the container prompt)

42 Think ahead. Ask now.