Skip to main content

Docker Introduction

Overview of Docker​

Docker is an open-source platform designed to simplify the development, deployment, and management of applications in a containerized environment, also known as Docker containers. Docker containers are a lightweight and portable way to package and run applications, enabling developers to package their applications with all the required dependencies and configurations in a single package that can be easily moved between any environment. Docker containers are simply the running instance of a Docker image.

Why You Should Consider Using Docker​

  • Docker is portable, meaning that one can easily run the same application on different machines without any modifications, making it easier to move applications between development, testing, and production environments.

  • Docker containers are isolated in nature, meaning that each container runs in its own isolated environment with its own file system, network protocol, and process space, providing a level of security and isolation that is not possible with traditional virtualization technologies. This solves the problem of conflict with other applications or dependencies.

  • Docker containers are easily scalable, meaning that one can easily scale the containers running the applications by horizontally adding more containers when demand increases.

  • Docker containers are efficient, meaning that containers are lightweight and consume fewer resources, allowing more containers to run on the same underlying hardware.

Docker Images​

  • Images are made up of app binaries, dependencies, and metadata. They don't contain a full OS.
  • Images are a combination of multiple layers.
  • Each image has its unique ID and a tag for a different version.

Screenshot from 2022-11-02 11-57-19

Dockerfile​

Commands:

  • FROM (base image)
  • COPY (copy files from local to the container)
  • ARG (pass arguments)
  • ENV (environment variable)
  • RUN (any arbitrary shell command)
  • EXPOSE (open port from container to virtual network)
  • CMD (command to run when the container starts)
  • WORKDIR (create a directory where all the files will be copied and used)

Docker Build Architecture​

We can build the image in two ways single architecture or multi-architecture. In the single architecture, we can build the image for a specific architecture, and in multi-architecture, we can build the image for multiple architectures.

Single Architecture​

docker build -t <image-name> .

Multi-Architecture​

docker buildx build --platform linux/amd64,linux/arm64 -t <image-name> .

Good Practice

  • Copy the dependencies first and then copy the rest of the files.
COPY package.json ./
RUN npm install
COPY . ./

.dockerignore​

The .dockerignore file is used to specify files and directories that are not copied when using the COPY command.

Docker Network​

To connect to our created containers, Docker provides several network drivers. The available default drivers are bridge, host, and null.

  • Bridge network creates a virtual network that allows containers to communicate with each other using IP addresses. We need to create a custom bridge network to enable DNS resolution between containers. Only containers connected to the same custom bridge network can communicate with each other directly. It doesn't work with the default bridge network.

  • Host network uses the host machine's network stack inside the container. We can use this network for applications that require high network performance. We don't need to expose ports here.

  • Using Null network driver disables the networking for the container.

docker network

To create a network, by default the created network will use the bridge network driver:

docker network create <network-name>

Docker Volumes​

We need volumes to persist our data, like databases and user info, because containers can go up and down, and we need some way to preserve our data.

We attach a volume during runtime:

docker run -v /path/in/container

Named Volume We can also name the volume; otherwise, it will generate an ID and be hard to track:

docker run -v <volume name>:</path in container> <image name>
docker run -v myvolume:/src/public nginx

Bind Mounting​

A file or directory on the host machine is mounted into a container, i.e., it will match the condition of the file system inside a container.

docker run -v <path to your local system>:<container path>
docker run -v /app/content:/usr/share/nginx/html nginx
docker run -v $(pwd):/user/html nginx

In Compose, we don't have to give the pwd:

volumes:
  - ./:/usr/share/nginx/html:ro
  - ./app:/usr/share/nginx/html/app:ro

Docker Compose​

  • Compose helps us define and run multi-container Docker applications and configure relationships between containers.
  • It also saves the hassle of entering the commands from the CLI.
  • We have to write the configs in the YAML file, by default the file name is docker-compose.yml. We can run/stop by docker compose up/down.

The Skeleton of Docker Compose:

services:  # containers. same as docker run
  servicename: # a friendly name. this is also the DNS name inside the network
    image: # Optional if you use to build:
    command: # Optional, replace the default CMD specified by the image
    environment: # Optional, same as -e in docker run
    volumes: # Optional, same as -v in docker run
  servicename2:

volumes: # Optional, same as docker volume create

networks: # Optional, same as docker network create

Sample:

services:
  mongo:
    container_name: mongo
    image: mongo:4.0
    volumes:
      - mongo-db:/data/db
    networks: 
      - my-net
      
volumes:
  mongo-db: # named volume
  
networks:
  my-net:
    driver: bridge

If any container depends on another container:

depends_on:
  - mysql-primary

Docker Swarm​

Docker Swarm is an orchestration management tool that runs on Docker applications. Container orchestration automates the deployment, management, scaling, and networking of containers.

  • Docker Swarm is not enabled by default. We have to enable it by:
docker swarm init
  • In Swarm, we create services instead of creating the container directly.

Docker Service​

In Swarm, we don't create containers directly. Instead, we create a service that creates a container for us. A service can run multiple nodes on several nodes.

Screenshot from 2022-11-08 13-07-01

Docker Stack​

When we have multiple services and need to establish the relationship between them, we use the stack. It is the same as the compose file. Here we don't use the build: object, and there is a new deploy: specific to swarm for things like replicas and secrets.

Screenshot from 2022-11-04 13-34-28

deploy:
  replicas: 3

We deploy stack files with this command:

docker stack deploy -c file.yml <stackname>

Docker Secrets​

Docker Swarm supports secrets. We can pass ENV variables like SSH keys, usernames, and passwords with the help of secrets. We can pass secrets from the file or save the Docker secret.

We can create Docker secrets through CLI external::

echo "<password text>" | docker secret create psql-pw -

or

Create a file with a password and then pass the path in the stack file::

services:
  postgres:
    image: postgres
    secrets:
      - post-pass
      - post-user
    environment:
      POSTGRES_PASSWORD_FILE: /run/secrets/post-pass
      POSTGRES_USER_FILE: /run/secrets/post-user
      
secrets:
  post-pass:
    external: true
  post-user:
    file: ./post-user.txt

Docker Healthcheck​

HEALTHCHECK --interval=30s --timeout=3s \
CMD curl -f http://localhost/ || exit 1

Container Registry​

A repo - a collection of repositories. Use to store and access container images.

Some popular registries are:

  • Docker Hub
  • GitHub Container Registry (ghcr.io)
  • Google Container Registry (gcr.io)
  • Amazon Elastic Container Registry (ECR)
  • Azure Container Registry (ACR)

Private Docker Registry​

We can create a registry with the official Registry image.

image

What's next?​