Docker for PHP Developers (NomadPHP)

Docker for PHP Developers ChrisTankersley@dragonmantankNomadPHPEUApril2016

NomadPHPEUApril2016 1

Who Am I

• PHPProgrammerforover11years•  Sysadmin/DevOpsforaround9years• UsingLinuxformorethan15years• hJps://github.com/dragonmantank

• Authorof“DockerforDevelopers”• Reigning,Defending,UndisputedPHPMTGChampionoftheWorld


Docker


What Is Docker?

“DockerisanopenplaWormfordevelopersandsysadminstobuild,ship,andrundistributedapplicaXons.ConsisXngofDockerEngine,aportable,lightweightrunXmeandpackagingtool,andDockerHub,acloudserviceforsharingapplicaXonsandautomaXngworkflows,DockerenablesappstobequicklyassembledfromcomponentsandeliminatesthefricXonbetweendevelopment,QA,andproducXonenvironments.”


hJps://www.docker.com/whaXsdocker/

What is it from a technical standpoint?

• DockerisawrapperaroundContainers• DockerEngineisthepackagingporXonthatbuildsandrunsthecontainers• DockerHuballowsyoutopublishimagesforotherstouse• DockerMachineisabare-metalprovisioningtool• DockerSwarmisanload-balancingdeploymenttool• DockerComposeisamulX-containerbuildsystem


Containers


Normal Bare-Metal Server


CPU RAM HD Network

OperaXngSystem

nginx PHP DB

Virtual Machines


CPU RAM HD Network

OperaXngSystem

nginx PHP DB

OperaXngSystem

nginx PHP DB

OperaXngSystem

Hypervisor

Containers


CPU RAM HD Network

OperaXngSystem

nginxnginx PHP DB PHP DB

Docker can use many different containers

•  Since0.9.0itsupports:•  LXC(LinuxContainers)–StartedwithLXCwhenitwasreleased•  OpenVZ•  Systemd-nspawn•  libvert-sandbox•  Qemu/kvm•  BSDJails•  SolarisZones•  chroot


Runs on *nix and Windows Hyper-V

• NonaXvecontainerdriversforOSX*• AmazonhasElasXcContainerService,andMicrosokAzurehasAzureContainerService


Sorry OSX Users

• DockersupportisofficiallymaintainedthroughDockerToolbox


Docker Toolbox also is for Windows


Let’s use Docker


Running a container

•  `dockerrun`willrunacontainer•  ThiswillnotrestartanexisXngcontainer,justcreateanewone• dockerrun[opXons]IMAGE[command][arguments]

•  [opXons]modifythedockerprocessforthiscontainer•  IMAGEistheimagetouse•  [command]isthecommandtoruninsidethecontainer•  [arguments]areargumentsforthecommand


Running a simple shell






Running Two Webservers
















Some Notes

• Allthreecontainersare100%selfcontained• Dockercontainerssharecommonancestors,butkeeptheirownfiles•  `dockerrun`parameters:

•  --rm–Destroyacontaineronceitexits•  -d–Runinthebackground(daemonmode)•  -i–RunininteracXvemode•  --name–Givethecontaineraname•  -p[localport]:[containerport]–Forwardthelocalporttothecontainerport


Volumes


Modifying a running container

•  `dockerexec`canrunacommandinsideofanexisXngcontainer• UseVolumestosharedata


Persistent Data with Volumes

•  Youcandesignateavolumewith-v• Volumescanbesharedamongstcontainers• Volumescanmountdatafromthehostsystem


Mounting from the host machine










Mounting from the host isn’t perfect

•  Thecontainernowhasawindowintoyourhostmachine• Permissionscangetscrewyifyouaremodifyinginthecontainer

•  Mostthingsitcreateswillberootbydefault,andyouprobablyaren’trootonthehostmachine

• Host-mountedvolumesarenotportableatall• DockerToolbox’sVMonlyallowsmounXngfromwithinyourhomedirectory


Container Data Volumes

• Usesasmallcontainerthatdoesnothingbutstoresdata• Haveourappcontainersusethedatavolumetostoredata• Use‘editorcontainers’togoinandmodifydatawhenneeded


Mounting Data Volumes
















Why not run SSH inside of the container?

• Well,youcan…• Dockerisdesignedforonecommandpercontainer•  Ifyouneedtomodifydata,thenyouneedtochangeyoursetup•  IfyouhavetorunSSH,thenyouneedawaytorunSSHandyourcommand


Why go through the hassle?

• Datavolumesareportable• Datavolumesaresafer•  Separatestheappcontainersfromdata

•  ProducXoncanuseadatavolume,devcanuseahostvolume

• Ourappcontainersstaysmall


Network Linking


Docker Links

• Allowscontainersto‘see’eachotheroverthenetwork•  Eachcontainerthinkstheotheroneisjustanothermachine• Containersallhaveaninternalnetworkaddress,sowedon’tneedtoexposeeverythingthroughthehost• Currentlyonlyworksifallthecontainersareononemachine,Docker1.10shouldfixthat


More Traditional Setup


INTARWEBS Nginx PHP-FPM

DataVolume

Port9000

Editor

Let’s Build It


Let’s Build It


Let’s Build It


Let’s Build It


Let’s Build It


Let’s Build It


More Notes!

• WecannowrebuildsecXonsoftheappasneeded• WecanrestartnginxwithoutimpacXngPHP• Wecanextendmucheasier

•  Linkedcontainerswillnotupdateiftheyarestopped/started•  IfweupgradePHP,wehavetodestroy/createtheweb_servercontaineragain


Creating your own Images


Dockerfile

• DockerfileistheconfiguraXonstepsforanimage• Canbecreatedfromscratch,orbasedonanotherimage• Allowsyoutoaddfiles,createdefaultvolumes,ports,etc• CanbeusedprivatelyorpushedtoDockerHub


FROMphusion/baseimage:0.9.10#…CMD["/sbin/my_init"]#Nginx-PHPInstallationRUNapt-getupdateRUNapt-getinstall-yvimgitcurlwgetbuild-essentialpython-software-properties\

php5-cliphp5-fpmphp5-mysqlphp5-pgsqlphp5-sqlitephp5-curl\ php5-gdphp5-mcryptphp5-intlphp5-imapphp5-tidymysql-client

#…RUNmkdir/var/wwwADDbuild/default/etc/nginx/sites-available/default#…EXPOSE8022VOLUME/var/wwwVOLUME/etc/nginxVOLUME/etc/php/VOLUME/var/logRUNapt-getclean&&rm-rf/var/lib/apt/lists/*/tmp/*/var/tmp/*


Build it

dockerbuild-ttag_name./

•  ThisrunsthroughtheDockerfileandgeneratestheimage• Wecannowusethetagnametoruntheimage


Other Helpful Commands


Inspect a container

dockerinspect[opXons]CONTAINER_NAME

• ReturnsaJSONstringwithdataaboutthecontainer• Canalsoquery

•  dockerinspect-f“{{.NetworkSe{ngs.IPAddres}}”web_server

• ReallyhandyforscripXngoutthingslikereverseproxies


Work with images

• dockerpullIMAGE–Pullsdownanimagebeforeusing• dockerimages–Listsalltheimagesthataredownloaded• dockerrmiIMAGE–Deletesanimageifit’snotbeingused


Docker Machine


What is Docker Machine?

• AprovisioningtoolthatisusedtosetupaboxwithDocker• UsedinDockerToolboxtocreatetheVM•  Supports:

•  EC2•  Azure•  DigitalOcean•  Hyper-V•  OpenStack•  Virtualbox•  VMWare


Why use it?

• Makesitveryeasytospinupnewboxes• DockerMachinehandlesallofthedirtystuffforyou• DockerToolboxusersarealreadyusingit•  IntegrateswithDockerSwarm

•  Itisnotnecessarilyportable


Docker Swarm


What is Docker Swarm?

• ClustermanagementtooldevelopedbyDocker•  Lookslikeamachinerunningdocker,butisactuallymanymachines


Docker Compose


What is Docker Compose?

• MulX-containerorchestraXon• Asingleconfigfileholdsallofyourcontainerinfo• WorkswithDockerSwarmandafewothertools,likeRancher


Sample docker-compose.yml phpserver:build:./docker/phpvolumes:-/home/ctankersley/Projects/dockerfordevs:/var/www/links:-mysqlservermysqlserver:image:mysqlenvironment:MYSQL_DATABASE:dockerfordevsMYSQL_ROOT_PASSWORD:dockervolumes:-/var/lib/mysqlnginx:build:./docker/nginxports:-"80:80"-"443:443"links:-phpserver


Deploying


I can’t answer this for you


¯\_(ツ)_/¯

Questions?


Each situation is different

•  Youwillprobablybuildsomethingcustom,usingexisXngtools• Doyouusedatavolumes?• DoyoujustpackagetheenXrecompiledapp?• Doesitneedtobedistributed?•  IsitgoingonSwarm,orAmazonECS?


Things to consider

• DockerComposewillonlydeployanapptooneserver• DockerSwarmispreJylow-levelandbare-bones• VolumesonSwarmcannotbesharedacrosshosts• HostmounXngis99.99999%oftheXmenotwhatyouwanttodo


Rancher is a good start

• ProvidesaniceGUItomanageeverything• Allowsvolumesharingandnetworkingacrosshosts• Workswithdocker-compose.ymlfiles

•  Thesefilescanbesupplementedwithenvironmentvariables


Rancher in action


Questions?


http://ctankersley.com [email protected]

@dragonmantank

https://joind.in/talk/42cba


Technology

Docker for PHP Developers (NomadPHP)