book

The Docker Workshop

Name: The Docker Workshop
ISBN: 9781838983444

by Vincent Sesto, Onur Yılmaz, Sathsara Sarathchandra, Aric Renzo, Engy Fouda, Ankit Mishra, Fiodar Sazanavets, Craig Newton, Earl Waud

October 2020

Beginner

792 pages

14h 47m

English

Packt Publishing

Read now

Unlock full access

The Docker Workshop
Preface
About the BookAudienceAbout the ChaptersConventionsSetting Up Your EnvironmentHardware RequirementsOperating System RequirementsInstallation and SetupUpdating Your Package ListsInstalling GitDockerDual-Booting Ubuntu for Windows UsersResizing PartitionsCreating a Bootable USB Drive to Install UbuntuInstalling UbuntuOther RequirementsAccessing the Code Files
1. Running My First Docker Container
IntroductionAdvantages of Using DockerDocker EngineRunning Docker ContainersExercise 1.01: Running the hello-world ContainerManaging Docker ContainersExercise 1.02: Managing Container Life CyclesAttaching to Containers Using the attach CommandExercise 1.03: Attaching to an Ubuntu ContainerActivity 1.01: Pulling and Running the PostgreSQL Container Image from Docker HubActivity 1.02: Accessing the Panoramic Trekking App DatabaseSummary
2. Getting Started with Dockerfiles
IntroductionWhat Is a Dockerfile?Common Directives in DockerfilesThe FROM DirectiveThe LABEL DirectiveThe RUN DirectiveThe CMD DirectiveThe ENTRYPOINT DirectiveExercise 2.01: Creating Our First DockerfileBuilding Docker ImagesExercise 2.02: Creating Our First Docker ImageOther Dockerfile DirectivesThe ENV DirectiveThe ARG DirectiveExercise 2.03: Using ENV and ARG Directives in a DockerfileThe WORKDIR DirectiveThe COPY DirectiveThe ADD DirectiveExercise 2.04: Using the WORKDIR, COPY, and ADD Directives in the DockerfileThe USER DirectiveExercise 2.05: Using USER Directive in the DockerfileThe VOLUME DirectiveExercise 2.06: Using VOLUME Directive in the DockerfileThe EXPOSE DirectiveThe HEALTHCHECK DirectiveExercise 2.07: Using EXPOSE and HEALTHCHECK Directives in the DockerfileThe ONBUILD DirectiveExercise 2.08: Using ONBUILD Directive in the DockerfileActivity 2.01: Running a PHP Application on a Docker Container Summary
3. Managing Your Docker Images
IntroductionDocker Layers and CachingExercise 3.01: Working with Docker Image LayersExercise 3.02: Increasing Build Speed and Reducing LayersCreating Base Docker ImagesExercise 3.03: Creating Your Base Docker ImagesThe Scratch ImageExercise 3.04: Using the Scratch ImageDocker Image Naming and TaggingExercise 3.05: Tagging Docker ImagesUsing the latest Tag in DockerExercise 3.06: Issues When Using latestDocker Image Tagging Policies Exercise 3.07: Automating Your Image TaggingStoring and Publishing Your Docker ImagesExercise 3.08: Transporting Docker Images ManuallyStoring and Deleting Docker Images in Docker HubExercise 3.09: Storing Docker Images in Docker Hub and Deleting the RepositoryThe Docker RegistryExercise 3.10: Creating a Local Docker RegistryActivity 3.01: Build Scripts Using Git Hash VersioningActivity 3.02: Configuring Your Local Docker Registry StorageSummary
4. Multi-Stage Dockerfiles
IntroductionNormal Docker BuildsExercise 4.01: Building a Docker Image with the Normal Build ProcessWhat Is the Builder Pattern?Exercise 4.02: Building a Docker Image with the Builder PatternIntroduction to Multi-Stage DockerfilesExercise 4.03: Building a Docker Image with a Multi-Stage Docker BuildDockerfile Best PracticesUsing an Appropriate Parent Image Using a Non-Root User for Better SecurityUsing dockerignoreMinimizing LayersDon't Install Unnecessary ToolsActivity 4.01: Deploying a Golang HTTP Server with a Multi-Stage Docker BuildSummary
5. Composing Environments with Docker Compose
IntroductionDocker Compose CLIInstalling Docker Compose CLI in LinuxDocker Compose CLI CommandsDocker Compose FileExercise 5.01: Getting Started with Docker ComposeConfiguration of ServicesExercise 5.02: Configuring Services with Docker Compose Service DependencyExercise 5.03: Service Dependency with Docker Compose Activity 5.01: Installing WordPress Using Docker ComposeActivity 5.02: Installing the Panoramic Trekking App Using Docker ComposeSummary
6. Introduction to Docker Networking
IntroductionExercise 6.01: Hands-On with Docker NetworkingNative Docker DNSExercise 6.02: Working with Docker DNSNative Docker Network DriversExercise 6.03: Exploring Docker NetworksDocker Overlay NetworkingExercise 6.04: Defining Overlay NetworksNon-Native Docker NetworksExercise 6.05: Installing and Configuring the Weave Net Docker Network DriverActivity 6.01: Leveraging Docker Network DriversActivity 6.02: Overlay Networking in ActionSummary
7. Docker Storage
IntroductionThe Container Life CycleExercise 7.01: Transitioning through the Common States for a Docker ContainerExercise 7.02: Checking the Container Size on DiskStateful versus Stateless Containers/ServicesExercise 7.03: Creating and Scaling a Stateless Service, NGINXExercise 7.04: Deploying a Stateful Service, MySQLDocker Volumes and Stateful PersistenceExercise 7.05: Managing a Volume outside the Container's Scope and Mounting It to the ContainerExercise 7.06: Managing a Volume within the Container's ScopeExercise 7.07: Running a PostgreSQL Container with a Volume Exercise 7.08: Running a PostgreSQL Container without a Volume Miscellaneous Useful Docker Commands Persistent and Ephemeral VolumesExercise 7.09: Sharing Volumes between ContainersVolumes versus Filesystem and ImagesExercise 7.10: Saving a File on a Volume and Committing It to a New ImageExercise 7.11: Saving a File in the New Image FilesystemActivity 7.01: Storing Container Event (State) Data on a PostgreSQL DatabaseActivity 7.02: Sharing NGINX Log Files with the HostSummary
8. CI/CD Pipeline
IntroductionWhat Is CI/CD?Exercise 8.01: Installing Jenkins as a ContainerIntegrating GitHub and JenkinsExercise 8.02: Uploading the Code to GitHubExercise 8.03: Integrating GitHub and JenkinsIntegrating Jenkins and Docker HubExercise 8.04: Integrating Jenkins and Docker HubActivity 8.01: Utilizing Jenkins and SonarQubeActivity 8.02: Utilizing Jenkins and SonarQube in the Panoramic Trekking ApplicationSummary

9. Docker Swarm
IntroductionHow Docker Swarm Works?Working with Docker SwarmExercise 9.01: Running Services with Docker SwarmTroubleshooting Swarm NodesDeploying Swarm Deployments from Docker ComposeSwarm Service Rolling UpdatesExercise 9.02: Deploying Your Swarm from Docker ComposeManaging Secrets and Configurations with Docker SwarmExercise 9.03: Implementing Configurations and Secrets in Your SwarmManaging Swarm with SwarmpitExercise 9.04: Installing Swarmpit and Managing Your StacksActivity 9.01: Deploying the Panoramic Trekking App to a Single-Node Docker Swarm Activity 9.02: Performing an Update to the App While the Swarm Is RunningSummary
10. Kubernetes
IntroductionKubernetes DesignExercise 10.01: Starting a Local Kubernetes ClusterThe Kubernetes API and AccessExercise 10.02: Accessing Kubernetes Clusters with kubectlKubernetes ResourcesPodsDeploymentsStatefulsetsServicesIngressHorizontal Pod Autoscaling RBAC AuthorizationExercise 10.03: Kubernetes Resources in ActionKubernetes Package Manager: HelmExercise 10.04: Installing the MySQL Helm ChartActivity 10.01: Installing the Panoramic Trekking App on KubernetesSummary
11. Docker Security
IntroductionPrivileged and Root User Access in ContainersExercise 11.01: Running Containers as the Root UserRuntime Privileges and Linux CapabilitiesSigning and Verifying Docker ImagesExercise 11.02: Signing Docker Images and Utilizing DCT on Your SystemDocker Image Security ScansScanning Images Locally Using Anchore Security ScanExercise 11.03: Getting Started with Anchore Image ScanningUtilizing SaaS Security Scans with SnykExercise 11.04: Setting up a Snyk Security ScanUsing Container Security ProfilesImplementing AppArmor Security Profiles on Your ImagesExercise 11.05: Getting Started with AppArmor Security Profilesseccomp for Linux ContainersExercise 11.06: Getting Started with seccompActivity 11.01: Setting up a seccomp Profile for the Panoramic Trekking AppActivity 11.02: Scanning Your Panoramic Trekking App Images for VulnerabilitiesSummary
12. Best Practices
IntroductionWorking with Container ResourcesManaging Container CPU ResourcesExercise 12.01: Understanding CPU Resources on Your Docker ImageManaging Container Memory ResourcesExercise 12.02: Analyzing Memory Resources on Your Docker ImageManaging the Container Disk's Read and Write ResourcesExercise 12.03: Understanding Disk Read and WriteContainer Resources and Docker ComposeBest Practices in DockerRunning One Service per ContainerBase ImagesInstalling Applications and LanguagesRunning Commands and Performing TasksContainers Need to Be Immutable and StatelessDesigning Applications to Be Highly Available and ScalableImages and Containers Need to Be Tagged AppropriatelyConfigurations and SecretsMaking Your Images Minimal and SmallEnforcing Docker Best Practices in Your CodeUsing Docker Linter for Your ImagesExercise 12.04: Linting Your DockerfilesExercise 12.05: Validating Your docker-compose.yml FileActivity 12.01: Viewing the Resources Used by the Panoramic Trekking AppActivity 12.02: Using hadolint to Improve the Best Practices on DockerfilesSummary
13. Monitoring Docker Metrics
IntroductionMonitoring Environment Metrics with PrometheusExercise 13.01: Installing and Running PrometheusMonitoring Docker Containers with PrometheusExercise 13.02: Collecting Docker Metrics with PrometheusUnderstanding the Prometheus Query LanguageCounterGaugesHistogramsSummariesPerforming PromQL QueriesExercise 13.03: Working with the PromQL Query LanguageUsing Prometheus ExportersExercise 13.04: Using Metrics Exporters with Your ApplicationsExtending Prometheus with GrafanaExercise 13.05: Installing and Running Grafana on Your SystemActivity 13.01: Creating a Grafana Dashboard to Monitor System MemoryActivity 13.02: Configuring the Panoramic Trekking App to Expose Metrics to Prometheus Summary
14. Collecting Container Logs
IntroductionIntroducing SplunkBasic Architecture of Splunk InstallationInstalling and Running Splunk on DockerExercise 14.01: Running the Splunk Container and Starting to Collect DataGetting Container Logs into SplunkExercise 14.02: Creating an HTTP Event Collector and Starting to Collect Docker LogsWorking with the Splunk Query LanguageExercise 14.03: Getting Familiar with the Splunk Query LanguageSplunk App and Saved SearchesExercise 14.04: Getting Familiar with Splunk Apps and Saved SearchesActivity 14.01: Creating a docker-compose.yml File for Your Splunk Installation Activity 14.02: Creating a Splunk App to Monitor the Panoramic Trekking App Summary
15. Extending Docker with Plugins
IntroductionPlugin ManagementPlugin APIAuthorization PluginsExercise 15.01: Read-Only Docker Daemon with Authorization PluginsNetwork PluginsExercise 15.02: Docker Network Plugins in ActionVolume PluginsExercise 15.03: Volume Plugins in ActionActivity 15.01: Installing WordPress with Network and Volume PluginsSummary
Appendix
1. Running My First Docker ContainerActivity 1.01: Pulling and Running the PostgreSQL Container Image from Docker HubActivity 1.02: Accessing the Panoramic Trekking App Database2. Getting Started with DockerfilesActivity 2.01: Running a PHP Application on a Docker Container 3. Managing Your Docker ImagesActivity 3.01: Build Scripts Using Git Hash VersioningActivity 3.02: Configuring Your Local Docker Registry Storage4. Multi-Stage DockerfilesActivity 4.01: Deploying a Golang HTTP Server with a Multi-Stage Docker Build5. Composing Environments with Docker ComposeActivity 5.01: Installing WordPress Using Docker ComposeActivity 5.02: Installing the Panoramic Trekking App Using Docker Compose6. Introduction to Docker NetworkingActivity 6.01: Leveraging Docker Network DriversActivity 6.02: Overlay Networking in Action7. Docker StorageActivity 7.01: Storing Container Event (State) Data on a PostgreSQL DatabaseActivity 7.02: Sharing NGINX Log Files with the Host8. Service DiscoveryActivity 8.01: Utilizing Jenkins and SonarQubeActivity 8.02: Utilizing Jenkins and SonarQube in the Panoramic Trekking Application9. Docker SwarmActivity 9.01: Deploying the Panoramic Trekking App to a Single-Node Docker Swarm Activity 9.02: Performing an Update to the App While the Swarm Is Running10. KubernetesActivity 10.01: Installing the Panoramic Trekking App on Kubernetes11. Docker SecurityActivity 11.01: Setting up a seccomp Profile for the Panoramic Trekking AppActivity 11.02: Scanning Your Panoramic Trekking App Images for Vulnerabilities12. Best PracticesActivity 12.01: Viewing the Resources Used by the Panoramic Trekking AppActivity 12.02: Using hadolint to Improve the Best Practices on Dockerfiles13. Monitoring Docker MetricsActivity 13.01: Creating a Grafana Dashboard to Monitor System MemoryActivity 13.02: Configuring the Panoramic Trekking App to Expose Metrics to Prometheus 14. Collecting Container LogsActivity 14.01: Creating a docker-compose.yml File for Your Splunk Installation Activity 14.02: Creating a Splunk App to Monitor the Panoramic Trekking App 15. Extending Docker with PluginsActivity 15.01: Installing WordPress with Network and Volume Plugins

Overview

The Docker Workshop is your hands-on guide to mastering the use of Docker containers, an essential technology for modern development workflows. Through structured exercises and practical applications, this book teaches you the fundamentals of Docker, ensuring you can use it effectively in real-world scenarios.

What this Book will help me do

Understand and leverage the core functionalities of Docker and Docker containers to streamline your development process.
Set up networks and environments for Docker to enable service communication and optimal deployments.
Create, manage, and publish Docker images efficiently while adopting CI/CD best practices.
Implement and manage production-ready environments using tools like Docker Swarm and Kubernetes.
Ensure security and optimize performance in Docker applications following industry best practices.

Author(s)

The authors of The Docker Workshop, Vincent Sesto, Onur Yılmaz, Sathsara Sarathchandra, Aric Renzo, and Engy Fouda, are seasoned technology experts and educators with specialization in containerization technologies. They bring years of professional experience developing and deploying applications at scale. Their approachable teaching style makes complex concepts simple and comprehensible.

Who is it for?

If you're a developer or beginner looking to gain practical Docker skills, this book is for you. Ideal readers have basic experience with command-line interfaces and text editors like VS Code. Whether you're starting with containers or want to deepen your Docker expertise, this book will support reaching your goals.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781838983444

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills