Devops And Docker Talk

Docker Captain Michael Irwin and I go over various storage options for persistent volumes in Swarm, and how you need to think about storage for Docker.

In March of 2019 I talked with Michael about the new "docker-app" experimental tool. This clip talks about why it exists, and how to use it. In April 2019 Docker released a beta of 19.03 that includes "docker-app" as a plugin to the standard docker CLI, as "docker app", but most other features of this tool stay the same. We also talk about the standard behind this tool, CNAB.

In this episode, I list the steps to copy or sync files between a docker volume and the host

In this episode I quickly list the steps to setup a Docker Swarm in AWS using docker-machine and shell scripts

I go through the multiple ways to get your environment variables into a container, and what shouldn't go into your ENV's.

In this episode, I give a quick answer to the discussion on a single production server. Should you use docker-compose or Docker Swarm?

In this episode, I give a quick answer on how you might design MongoDB and other database servers for auto-clustering inside Docker.

In this episode, I answer a question on when you should run multiple apps in a container, and how you can use supervisor to do that.

In this episode, I answer the question: should you migrate your postgres servers into containers.

In this episode, I talk about the recent Docker runc vulnerability and what you need to do about it.

In this episode I answer a question about how to control docker and other containers like a nginx proxy from inside a seperate container.

In Docker 18.09.1 and Docker Desktop 2.0.0.2 (stable) in January 2019, we now have a new option for running Windows Containers on Windows 10 in "process isolation mode" which removes the need to launch a full Windows Server Hyper-V VM. It's a great new way for running lightweight Windows Containers, but has its own limits and config requirements.

A viewer asks how they can prototype their software in Docker with a Raspberry Pi. I explain the various parts of the workflow including ARM 64 vs. x64 CPU architectures, the benefits of QEMU emulation in Docker Desktop, and how to get Docker images from your local machine to the Pi.

A viewer asks why their Elasticsearch server on their local development setup with Docker Compose would give them a yellow health status. I talk about the common causes for this in my own experience with shard replication.

A viewer asks about how their local docker container IP's, if behind NAT, can have issues with outside subnets at their company. I explain some of the ways even NAT won't solve IP routing for containers and how you can change your settings to different private subnets.

Someone asks about image pruning while a Swarm service is in the middle of deployment, and how they've experienced failed containers. I reply with the details of what's going on in specific steps of a Service creation and deployment, and how the prune command could interfere.

I answer questions about updating your app secrets and configs in Docker Swarm without downtime

I answer questions about designing Apache web servers for multiple Websites in containers

I answer a question about using sudo in containers and file permissions when using non-root users.

Alpine Linux container images are often regarded as the "best for production, security, and image size", but I debate this based on several trends and current limitations.