book

Learning Docker

Name: Learning Docker
ISBN: 9781784397937

by Pethuru Raj, Jeeva S. Chelladhurai, Vinod Singh

June 2015

Intermediate to advanced

240 pages

5h 25m

English

Packt Publishing

Read now

Unlock full access

Learning Docker
Table of Contents
Learning Docker
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers, and moreWhy subscribe?Free access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for

Conventions
Reader feedback
Customer support
Downloading the example codeErrataPiracyQuestions
1. Getting Started with Docker
An introduction to Docker
Docker on Linux
Differentiating between containerization and virtualization
The convergence of containerization and virtualizationContainerization technologies
Installing the Docker engine
Installing from the Ubuntu package repositoryInstalling the latest Docker using docker.io script
Understanding the Docker setup
Client server communication
Downloading the first Docker image
Running the first Docker container
Running a Docker container on Amazon Web Services
Troubleshooting
Summary
2. Handling Docker Containers
Clarifying the Docker termsDocker images and containersA Docker layerA Docker containerDocker RegistryDocker Repository
Working with Docker images
Docker Hub RegistrySearching Docker images
Working with an interactive container
Tracking changes inside containersControlling Docker containersHousekeeping containersBuilding images from containersLaunching a container as a daemon
Summary
3. Building Images
Docker's integrated image building system
A quick overview of the Dockerfile's syntax
The Dockerfile build instructions
The FROM instructionThe MAINTAINER instructionThe COPY instructionThe ADD instructionThe ENV instructionThe USER instructionThe WORKDIR instructionThe VOLUME instructionThe EXPOSE instructionThe RUN instructionThe CMD instructionThe ENTRYPOINT instructionThe ONBUILD instructionThe .dockerignore file
A brief overview of the Docker image management
Best practices for writing Dockerfiles
Summary
4. Publishing Images
Understanding the Docker Hub
Pushing images to the Docker Hub
Automating the building process for images
Private repositories on the Docker Hub
Organizations and teams on the Docker Hub
The REST APIs for the Docker Hub
Summary
5. Running Your Private Docker Infrastructure
The Docker registry and index
Docker registry use cases
Run your own index and registry
Step 1 – Deployment of the index components and the registry from GitHubStep 2 – Configuration of nginx with the Docker registryStep 3 – Set up SSL on the web server for secure communication
Push the image to the newly created Docker registry
Summary
6. Running Services in a Container
A brief overview of container networking
Envisaging the Container as a Service
Building an HTTP server imageRunning the HTTP server Image as a ServiceConnecting to the HTTP service
Exposing container services
Publishing container ports – the -p optionNetwork Address Translation for containersRetrieving the container portBinding a container to a specific IP addressAuto-generating the Docker host portPort binding using EXPOSE and the -P option
Summary
7. Sharing Data with Containers
The data volume
Sharing host data
The practicality of host data sharing
Sharing data between containers
Data-only containersMounting data volume from other containersThe practicality of data sharing between containers
Avoiding common pitfalls
Directory leaksThe undesirable effect of data volume
Summary
8. Orchestrating Containers
Linking containers
Orchestration of containers
Orchestrate containers using docker-composeInstalling docker-composeThe docker-compose.yml fileThe docker-compose commandCommon usage
Summary
9. Testing with Docker
A brief overview of the test-driven development
Testing your code inside Docker
Running the test inside a containerUsing a Docker container as a runtime environment
Integrating Docker testing into Jenkins
Preparing the Jenkins environmentAutomating the Docker testing process
Summary
10. Debugging Containers
Process level isolation for Docker containersControl groups
Debugging a containerized application
The Docker exec commandThe Docker ps commandThe Docker top commandThe Docker stats commandThe Docker events commandThe Docker logs command
Installing and using nsenter
Summary
11. Securing Docker Containers
Are Docker containers secure enough?The security facets – virtual machines versus Docker containersThe security features of containersResource isolationResource accounting and controlThe root privilege – impacts and best practicesThe trusted user controlNon-root containersLoading the Docker images and the security implicationsThe emerging security approaches
Security-Enhanced Linux for container security
SELinux-inspired benefits
The best practices for container security
Digital signature verification
Secure deployment guidelines for DockerThe future
Summary
Index

Content preview from Learning Docker

Chapter 11. Securing Docker Containers

So far, we have talked a lot about the fast emerging Docker technology in this book. It is not a nice and neat finish if Docker-specific security issues and solution approaches are not articulated in detail to you. Hence, this chapter is specially crafted and incorporated in this book in order to explain about the growing security challenges of Docker-inspired containers. We also wanted to throw more light on how lingering security concerns are being addressed through a host of pioneering technologies, high-quality algorithms, enabling tools, and best practices.

In this chapter, we are going to deal with the following topics in detail:

Are Docker containers secure?
The security features of containers
The emerging ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781784397937

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Learning Docker

by Pethuru Raj, Jeeva S. Chelladhurai, Vinod Singh

Chapter 11. Securing Docker Containers

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.