Docker (GL340) [H0DS3S]

OVERVIEW

This course covers all the core features of Docker including container creation and management, interacting with Docker hub, using Dockerfile to create and manage custom images, advanced Docker networking (how to safely expose container services to the world, and link containers), the use of Docker volumes to manage persistent data, and Docker Compose to build multi-container applications. Emphasis is placed on best practices and how to secure Docker installations and containers. The course culminates with comprehensive labs where students use Docker, Git, and a continuous integration server to automate the testing of containerized applications.

CONTENT

Container Technology Overview

• Application management landscape
• Application isolation
• Resource measurement and control
• Container security
• OverlayFS overview
• Container security
• Open container initiative
• Docker alternatives
• Docker ecosystem

Lab Tasks

• Container concepts runC
• Container concepts Systemd

Installing Docker

• Installing Docker
• Docker architecture
• Starting the Docker daemon
• Docker daemon configuration
• Docker control socket
• Enabling TLS for Docker
• Validating Docker in stall

Lab Tasks

• Installing Docker
• Protecting Docker with TLS

Managing Containers

• Creating a new container
• Listing containers
• Managing container resources
• Running commands in an existing container
• Interacting with a running container
• Stopping, starting, and removing containers
• Copying files in/out of containers
• Inspecting and updating containers
• Docker output filtering and formatting

Lab Tasks

• Managing containers
• Configure a Docker container to start at boot

Managing Images

• Docker images
• Listing and removing images
• Searching for images
• Downloading images
• Uploading images
• Export/import images
• Save/load images
• Committing changes

Lab Tasks

• Docker images
• Docker platform images

Creating Images with Dockerfile

• Dockerfile
• Caching
• Docker image build
• Dockerfile instructions
• ENV and WORKDIR
• Running commands
• Getting files into the image
• Defining container executable
• HEALTHCHECK
• Best practices
• Multi-stage builds with Dockerfile

Lab Tasks

• Dockerfile fundamentals
• Optimizing image build size
• Image builds and caching

Docker Volumes

• Volume concepts
• The Docker volume command
• Creating and using internal volumes
• Internal volume drivers
• Removing volumes
• Creating and using external volumes
• SELinux considerations
• Mapping devices

Lab Tasks

• Docker internal volumes
• Docker external volumes

Docker Compose/Swarm

• Writing YAML files
• Concepts
• Compose CLI
• Defining a service set
• Compose versions
• Docker Engine swarm mode
• Docker swarm terms
• Docker swarm command overview
• Creating a swarm
• Creating services
• Creating secrets
• Stack files
• Stack command
• Swarm placements
• Swarm resource limits and reservations
• Swarm networking
• Swarm networking troubleshooting

Lab Tasks

• Docker Compose
• Docker Engine swarm mode

Docker Networking

• Overview
• Data link layer details
• Network layer details
• Hostnames and DNS
• Service reachability
• Container to container communication
• Container to container: links
• Container to container: private network
• Managing private networks
• Remote host to container

Lab Tasks

• Docker networking
• Exposing ports

Docker Logging

• Docker logging
• Docker logging with json-file and journald
• Docker logging with syslog
• Docker logging with Graylog or Logstash
• Docker logging with Fluentd
• Docker logging with Amazon or Google
• Docker logging with Splunk

Lab Tasks

• Logging to syslog

Appendix A

• Docker Registry Lab Tasks