2015-06-24

ProfitBricks is a sponsor of DockerCon and below we share the highlights of Day 2.

Running Docker in Production has been the theme of DockerCon 2015 and day two continues the theme with announcements around their DockerHub and Registry products. Before they unveiled everything, Docker shared some amazing stats with the audience during the keynote presentations. DockerHub currently has:

240,000+ users

150,000+ repos

500+ million pulls of images

13,000 organizations

Docker in Production at Business Insider

One of those organizations is Business Insider who has incorporated DockerHub as a core component of their build and shipping process. We heard from Chris Buckley, Director of DevOps at Business Insider, about how BI uses Docker in production. The goal for BI was to keep environments consistent across local, development, staging, and on through to production. This was accomplished by first introducing containers in the environment for temporary services. Once they became familiar with Docker they moved to more long running applications as numerous applications were using the same infrastructure.

Some of the lessons learned through BI’s experimentation and rollout of Docker into their production environment is summarized nicely by simply saying “build for local”:

Building for production first was grandiose but misguided.

Porting the work backwards for devs to use was not the right path for BI.

Bottleneck for devs to start writing code.

Another lesson BI shared with the audience is that you don’t need to throw out everything you use. Look for ways to integrate Docker and its ecosystem into your environment — pick and choose what you want to use. Leverage what you know and have; there is no need to reinvent the wheel. In BI’s case, they went back to the Puppet approved Docker module which it turns out helped them address their build / run requirements with Jenkins. BI has integrated their Jenkins workflow into DockerHub.

Developers and operations were both now using the same build / ship workflow. Developers can commit and push to DockerHub; Operations can commit and push to DockerHub. Once the updated bits hit DockerHub Jenkins or Puppet can make the required changes in the production cloud environment. BI is using Puppet and Jenkins to trigger builds and automate their entire process.

Docker Trusted Registry

To help its DockerHub organizations who require on-premise solutions, Docker announced the availability of the Docker Trusted Registry which supports the following features:

On-premise registry that can be placed behind the org’s firewall.

LDAP / Active Directory integration

RBAC

Audit & Events logging to support compliance requirements

Easy deploy, upgrade & rollback; there is a one-click deploy and update feature.

Docker also shared that their first commercial customer of the Trusted Registry is the U.S. Government General Services Administration. Customers can already purchase the Registry through partner marketplaces. 

Quality is one of the goals for Docker and their registry — both the hosted, SaaS model registry at DockerHub and the on-premise solution. A few weeks ago Docker shipped a 2.0 update to their Registry code and have moved DockerHub over to running on 2.0. Doing this, they saw some immediate gains. The new registry protocol introduces 80%  fewer requests and 60% less bandwidth. The update also helped speed up their dashboard by 2x and search by 1.6x.

DockerHub Security

Security of DockerHub and images was also brought up and is being addressed in the following ways:

Ongoing scanning and audits of DockerHub by both internal and external resources.

Content-addressable images.

The image you get is the one you wanted; it hasn’t been tampered with.

Authentication microservice

One-time use build hosts

Coupled with other changes being introduced into the Docker runtime such as ensuring root in the container is not mapped to root in the host system, the security profile of Docker has dramatically improved over last year. It is clear Docker is attempting to ensure the enterprise is comfortable running containers in production.

While the existing DockerHub is hosted on Registry 2.0, Docker has also re-done the UI. Numerous features have been added such as graphical representations of your image sizes. You can reach the new DockerHub here.

Docker Running on Windows

Docker also announced and had Mark Russinovich, CTO of Azure and general badass, demo the Visual Studio integration into Docker. Microsoft has made it easy to publish your application into a Docker container — all done within the Visual Studio workflow. He also highlighted there is no difference in pushing to a container running on a Windows Server or one running on a Linux server. It was incredible seeing a Docker container running on Windows.

Docker & It’s Ecosystem Set To Grow and Evolve Rapidly

Today was another great day at DockerCon. Looks like my list of things to read up on has only grown longer. It’s exciting to see so many new technologies released, but it is also daunting for the end-user to determine which tools are the right tools. It seemed there were many overlapping technologies presented from vendors and Docker themselves. I’ll be eager to see how the next few months play out.

Have you applied for a spot in our Early Access program for our new Docker Hosting service?  Simply visit profitbricks.com/docker and use the invitation code 82ng4r

The post DockerCon Day 2 – Talks on Docker in Production & New Enablement Tools appeared first on ProfitBricks Blog.

Show more