Omschrijving
This course covers all the core features of Docker including container creation and management, interacting with Docker hub, using Dockerfile to create and manage custom images, advanced Docker networking (how to safely expose container services to the world, and link containers), the use of Docker volumes to manage persistent data, and Docker Compose to build multi-container applications. Emphasis is placed on best practices and how to secure Docker installations and containers. The course culminates with comprehensive labs where students use Docker, Git, and a continuous integration server to automate the testing of containerized applications.
Prerequisites
- Proficiency with the Linux CLI
- A broad understanding of Linux system administration
Supported Distributions
- Red Hat Enterprise Linux 7
- Ubuntu 16.04 LTS
Course Outline
Container Technology Overview
- Application management landscape
- Application isolation
- Resource measurement and control
- Container security
- OverlayFS overview
- Container security
- Open container initiative
- Docker alternatives
- Docker ecosystem
- Lab TasksContainer concepts runC
- Container concepts Systemd
Installing Docker
- Installing Docker
- Docker architecture
- Starting the Docker daemon
- Docker daemon configuration
- Docker control socket
- Enabling TLS for Docker
- Validating Docker install
- Lab TasksInstalling Docker
- Protecting Docker with TLS
Managing Containers
- Creating a new container
- Listing containers
- Managing container resources
- Running commands in an existing container
- Interacting with a running container
- Stopping, starting, and removing containers
- Copying files in/out of containers
- Inspecting and updating containers
- Docker output filtering and formatting
- Lab TasksManaging containers
- Configure a Docker container to start at boot
Managing Images
- Docker images
- Listing and removing images
- Searching for images
- Downloading images
- Committing changes
- Uploading images
- Export/import images
- Save/load images
- Lab TasksDocker images
- Docker platform images
Creating Images with Dockerfile
- Dockerfile
- Caching
- Docker image build
- Dockerfile instructions
- ENV and WORKDIR
- Running commands
- Getting files into the image
- Defining container executable
- HEALTHCHECK
- Best practices
- Multi-stage builds with Dockerfile
- Lab TasksDockerfile fundamentals
- Optimizing image build size
- Image builds and caching
Docker Volumes
- Volume concepts
- The Docker volume command
- Creating and using internal volumes
- Internal volume drivers
- Removing volumes
- Creating and using external volumes
- SELinux considerations
- Mapping devices
- Lab tasksDocker internal volumes
- Docker external volumes
Docker Compose/Swarm
- Writing YAML files
- Concepts
- Compose CLI
- Defining a service set
- Docker Engine swarm mode
- Docker swarm terms
- Docker swarm command overview
- Creating a swarm
- Creating services
- Creating secrets
- Stack files
- Stack command
- Swarm placements
- Swarm resource limits and reservations
- Swarm networking
- Swarm networking troubleshooting
- Lab tasksDocker Compose
- Docker Engine swarm mode
Docker Networking
- Overview
- Data link layer details
- Network layer details
- Hostnames and DNS
- Service reachability
- Container to container communication
- Container to container: links
- Container to container: private network
- Managing private networks
- Remote host to container
- Lab tasksDocker networking
- Exposing ports
Docker Logging
- Docker logging
- Docker logging with json-file and journald
- Docker logging with syslog
- Docker logging with Graylog or Logstash
- Docker logging with Fluentd
- Docker logging with Amazon or Google
- Docker logging with Splunk
- Lab TasksLogging to syslog
Appendix A
- Docker Registry Lab Tasks
