agenda PAE Docker Docker PAE

Size: px

Start display at page:

Download "agenda PAE Docker Docker PAE"

Dominick Hardy
6 years ago
Views:

1 Docker

2 agenda PAE Docker Docker PAE 2

3 3

4 PAE PlCloud APP Engine Docker Docker Caas APP 4

5 APP APP volume images 5

6 App 6

7 APP Show Time 7

8 8

9 Docker Public DockerHup Private registry push pull AUFS Layered readonly GO Build once run anywhere Read-write Linux os mysql apche run commit LXC Docker OS Namespace cgroups 9

10 Docker vs VM Hypervisor 10

11 Docker vs VM Hypervisor <1s KB Linux GB Hypervisior 11

12 Docker 12

13 Docker Terminology Registry search: Search for an image on the Docker Hub pull: Download image from repository push: push an image or a repository to the registry 13

14 Docker Terminology Image pull: Download image from repository push: push an image or a repository to the registry build: an Image from a Dockerfile images: List all local images run: Create a container from an image and execute a command in it tag: Tag an image save: Save an image(s) to a tar archive load: Load an image from a tar archive on STDIN rmi: Delete a local image 14

15 Docker Terminology Container ps: List all running containers ps a: List all containers (incl. stopped) exec: Run a command in a running container rename: Rename an existing container start: Start a stopped container stop: Stop a running container kill: Kill a running container restart: Restart a running container rm: Delete a container commit: Create an image from a container export: Export a filesystem as a tar archive import: Create an empty filesystem image and import the contents of the tarball into it, then optionally tag it 15

16 Docker #docker search ubuntu #docker pull ubuntu #docker run ubuntu /bin/echo Hello World Hello World # docker run -i -t ubuntu /bin/bash # docker run -d p 3306:3306 v /data:/var/lib/ mysql mysql mysqld_safe 16

17 Docker PAE 17

18 18

19 Commit Container # docker run it ubuntu /bin/bash # APP # Docker commit [containerid] [image] Dockerfile # # # 19

20 Dockerfile FROM ubuntu MAINTAINER liuyang RUN apt-get update && apt-get install -y nginx COPY app /usr/local/nginx/html/ ADD nginx.conf /etc/nginx/nginx.conf ENV TZ Asia/Shanghai EXPOSE 80 WORKDIR /var/www/html CMD /usr/sbin/nginx # docker build -t imagename. 20

21 https Nginx basic auth debug Docker registry HTTP REST API Registry Registry Images data registry.plcloud.com 21

22 Docker registry docker / HTTP REST API Nginx https ssl basic authentication 22

23 APP app app app app app app app app app Network & Discovery C to C 23

24 Kubernetes Google GO - Kube-scheduler - ReplicationController - Pod-livenessProbe - ReplicationController-replicas - Service - Kube-proxy 24

25 Kubernetes pod service replicationco ntroller Pod Pod apiserver master scheduler Kubernetes Controller-manager minion kubelet proxy 25

26 Kube Pod ReplicationController Pod Service proxy Labels,,, Replication Controller Service Load balancer Scale pods Pod N containers Pod N containers 26

27 Pod kubernetes Pod : Network IP ports space, localhost : Volumes : container Localhost mysql website nginx map Service Endpoint 27

28 Pod 28

29 ReplicationController Pod replica / Rolling upgrade Replace 29

30 ReplicationController 30

31 Service dns Docker link, namespace kube-proxy(iptables Nat) 31

32 Service 32

33 Label (key/value) pod rc service frontend pod service Label :app=backend pod Label :app=backend Label Selector pod Label :app=backend replicationcontroller Label :app=backend Replica:3 pod Label :app=backend 33

34 Namespace ResourcesLimits Resourcequota Persistentvolume/Persistentvolumeclaim Secret 34

35 Etcd key/value Raft kube-apiserver REST API running in master kube-scheduler Pod / kube-controller-manager endpoint-controller replication-controller Kubelet docker kube-proxy Flanneld Docker 35

36 Internet Firewall Kubecfg user command Minion Docker kubelet cadvisor Proxy Pod Pod Pod APIs Scheduling actuator Authorization authentication REST pods services rep.contollers Kubelet Info service container container container container container container container container container scheduler scheduler Controller manager Distibuted Watchable Storage implemented via etcd Minion Docker Master components Colocated,or spread across machines, As dictated by cluster size kubelet cadvisor Proxy Pod Pod Pod container container container container container container container container container 36

37 Docker Network --net=host --net=container:name or ID --net=none --net=bridge 37

38 --net=bridge Container Container Container eth0 eth0 eth0 vethxx vethyy docker0 docker /16 vethzz 38

39 Flannel CoreOS TCP UDP VxLAN GRE Docker IP 39

40 # etcdctl get /coreos.com/network/config {"Network": /16"} # nohup flanneld --v=0 --logtostderr=false --log_dir=/var/log/k8s -- etcd-endpoints= & # cat /run/flannel/subnet.env FLANNEL_SUBNET= /24 FLANNEL_MTU=1422 FLANNEL_IPMASQ=false # cat /etc/sysconfig/docker OPTIONS='--bip= /24 --mtu=1422' 40

41 41

42 42

43 emptydir hostpath gcepersistentdisk GCE disk Google Cloud Engine awselasticblockstore GCE disk, AWS EC2 Glusterfs open source networked filesystem NFS - Network File System Rbd ceph PersistentVolumeClaim PV 43

44 C C C C C C rbd rbd rbd rbd Kubernetes Docker node node NFS 44

45 C C C 45

46 PAE Bind+HA+nginx kubectl RSET API Kube-proxy APPUrl Kube-scheduler Kube-apiserver Kubelet Node Docker/Container Ceph Kube-controller Flanneld app1 app1 app1 app app1 app1 app1 app Etcd 46

47 save/load,export/import Dockerfile COPY/ADD Docker Registry v1/v2 Pod Resource Limits Request NFS Ceph RBD 47

48 Kube Master pacemaker active-standly-standly OVS APP Zabbix APP ELK 48

49 谢谢!

Kubernetes introduction. Container orchestration

Kubernetes introduction. Container orchestration Kubernetes introduction Container orchestration Container Orchestration Why we need container orchestration? Restart containers if they are not healthy. Provide private container network. Service discovery.