README.md

Concepts

⚫ Docker Images

• Images are made up of app binaries, dependencies, and metadata. Don't contain a full OS.
• Images are a combination of multiple layers.
• Each Image has its unique ID and a tag for a different version.

⚫ Dockerfile

Commands:

• FROM (base image)
• COPY (copy files from local to the container)
• ARG (pass arguments)
• ENV (environment variable)
• RUN (any arbitrary shell command)
• EXPOSE (open port from container to virtual network)
• CMD (command to run when the container starts)
• WORKDIR (Create a dir where all the files will be copied and used.)

To build an image from the Dockerfile, use this command

docker build <path> 
// docker build.

Good Practice

• Copy the dependencies 1st and then copy the rest of the files.

COPY package.json ./
RUN npm install
COPY . ./

⚫ .dockerignore

We have a file .dockerignore which is not required when we copy files into the container.

⚫ Docker Network

• We need create custom bridge network to enable dns resolution between containers. It doesn't work with the default bridge network.

• Host: Use the host network stack inside the container. The container will use the host's network interfaces. We don't need to expose ports.

⚫ Docker Volumes

We need volume to Persist our data, like databases and user info, because containers can go up and down, and we need some way to preserve our data.

We attach volume during run time

docker run -v /path/in/container

Named Volume We can also name the volume otherwise it will generate the ID and be hard to track

docker run -v <volume name>:</path in container> <image name>
docker run -v myvolume:/src/public nginx

Bind Mounting

A file or directory on the host machine is mounted into a container, i.e it will match the condition of the file system inside a container.

docker run -v <path to your local sytem>:<conatiner path>
docker run -v /app/content:/usr/share/nginx/html  nginx
docker run -v $(pwd):/user/html nginx

In compose, we dont have to give the pwd

    volumes:
     - ./:/usr/share/nginx/html:ro
     - ./app:/usr/share/nginx/html/app:ro 

⚫ Docker Compose

• Compose help us define and running multi-container Docker applications and configure relationships between containers
• It also saves the hassle from entering the commands from the CLI.
• We have to write the configs in the YAML file, by default the file name is docker-compose.yml. We can run/stop by docker compose up/down

The Skeleton of Docker compose

services:  # containers. same as docker run
  servicename: # a friendly name. this is also the DNS name inside the network
    image: # Optional if you use to build:
    command: # Optional, replace the default CMD specified by the image
    environment: # Optional, same as -e in docker run
    volumes: # Optional, same as -v in docker run
  servicename2:

volumes: # Optional, same as docker volume create

networks: # Optional, same as docker network create

Sample:

  mongo:
    container_name: mongo
    image: mongo:4.0
    volumes:
      - mongo-db:/data/db
    networks: 
      - my-net
      
volumes:
  mongo-db: # named volume
  
networks:
    my-net:
        driver: bridge

If any container depends on another container

depends_on:
  - mysql-primary

⚫ Docker Swarm

Docker Swarm is an orchestration management tool that runs on Docker applications. Container orchestration automates the deployment, management, scaling, and networking of containers

• Docker Swarm is not enabled by default, we have enabled it by

docker swarm init

• In this, we create services, instead of creating the container directly

Docker service

In swarm we don't create containers directly, instead, we create service and that creates a container for us. A service can run multiple nodes on several nodes.

Docker Stack

When we have multiple services and to establish the relationship between them we use the stack, it is the same as compose file. Here we don't use build: object and there is new deploy: specific to swarm to like replicas, and secrets.

    deploy:
      replicas: 3

We deploy stack files with this command

docker stack deploy -c file.yml <stackname>

Docker Secrets

Docker Swarm supports secrets. We can pass ENV variables like SSH keys, Usernames, and passwords with help of that. We can pass secrets from the file or save the Docker secret.

• We can create Docker secrets though CLI external:

echo "<password text>" | docker secret create psql-pw -

or

• Create a file with a password and then pass the path in the stack file:

services:
    postgres:
      image: postgres
      secrets:
        - post-pass
        - post-user
      environment:
          POSTGRES_PASSWORD_FILE: /run/secrets/post-pass
          POSTGRES_USER_FILE: /run/secrets/post-user
      
secrets:
    post-pass:
      external: true
    post-user:
        file: ./post-user.txt

⚫ Docker Healthcheck

HEALTHCHECK --interval=30s --timeout=3s \
CMD curl -f http://localhost/ || exit 1

⚫ Private Docker Registry

We can create a reg with the official Registry image