Download to read offline
Uploaded byKevin Simper
Docker Best Practices in development and Production
The document outlines best practices for using Docker in development and production environments, emphasizing the importance of using official images, multi-stage builds, and running containers with read-only files and security options such as seccomp. It covers the use of Docker Compose for managing services, networking configurations, and resource limits. Additionally, it highlights key features like service discovery, seamless integration with CI/CD pipelines, and handling of secrets securely.
Docker Best Practices in development and Production
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
- 8.
- 9.
- 10. FROM gcr.io/connectedcars-staging/connectedcars-node:9.3 asbuilder ARG GITHUB_AT WORKDIR /app RUN apt-get update && apt-get install -y mysql-client ADD . /app RUN yarn global add node-gyp RUN yarn ENV NODE_ENV production RUN npm run compile RUN rm -rf node_modules && yarn FROM gcr.io/connectedcars-staging/connectedcars-node-production:9.3 ENV NODE_ENV production WORKDIR /app EXPOSE 9000 COPY --from=builder /app . CMD npm run production 10 / 44
- 11.
- 12.
- 13.
- 14.
- 15.
- 16.
- 17.
- 18. version: "3" services: proxy: build: ./proxy networks: -frontend app: build: ./app networks: - frontend - backend db: image: postgres networks: - backend networks: frontend: backend: 18 / 44
- 19.
- 20. version: "3" services: db: image: db volumes: -data-volume:/var/lib/db backup: image: backup-service volumes: - data-volume:/var/lib/backup/data volumes: data-volume: 20 / 44
- 21.
- 22.
- 23.
- 24. version: '3' services: redis: image: myapp deploy: resources: limits: cpus:'0.50' memory: 500M reservations: cpus: '0.25' memory: 200M 24 / 44
- 25.
- 26. # deployment.yaml apiVersion: apps/v1 kind:Deployment metadata: name: kevin-myapp spec: selector: matchLabels: app: kevin-myapp replicas: 2 # tells deployment to run 2 pods matching the template template: # create pods using pod definition in this template metadata: labels: app: kevin-myapp spec: containers: - name: kevin-myapp image: gcr.io/dd-decaf-cfbf6/kevin-myapp:latest ports: - containerPort: 8000 26 / 44
- 27.
- 28.
- 29. docker run -v$(pwd)/secrets/db.json:/secrets/db.json myapp 29 / 44
- 30.
- 31. docker run -d-p 80:80 --read-only nginx 31 / 44
- 32.
- 33.
- 34.
- 35.
- 36.
- 37.
- 38.
- 39. $ docker run--rm -it --security-opt seccomp=/path/to/seccomp/profile.json hello-world 39 / 44
- 40.
- 41.
- 42.
- 43.
- 44.