Docker for PHP Developers (NomadPHP)

Docker for PHP
Developers
Chris Tankersley
@dragonmantank
NomadPHP EU April 2016
NomadPHP EU April 2016 1

Who Am I
•  PHP Programmer for over 11 years
•  Sysadmin/DevOps for around 9 years
•  Using Linux for more than 15 years
•  hJps://github.com/dragonmantank
•  Author of “Docker for Developers”
•  Reigning, Defending, Undisputed PHP
MTG Champion of the World

Docker

What Is Docker?
“Docker is an open plaWorm for developers and sysadmins to build,
ship, and run distributed applicaXons. ConsisXng of Docker Engine, a
portable, lightweight runXme and packaging tool, and Docker Hub, a
cloud service for sharing applicaXons and automaXng workﬂows,
Docker enables apps to be quickly assembled from components and
eliminates the fricXon between development, QA, and producXon
environments.”
hJps://www.docker.com/whaXsdocker/

What is it from a technical standpoint?
•  Docker is a wrapper around Containers
•  Docker Engine is the packaging porXon that builds and runs the
containers
•  Docker Hub allows you to publish images for others to use
•  Docker Machine is a bare-metal provisioning tool
•  Docker Swarm is an load-balancing deployment tool
•  Docker Compose is a mulX-container build system

Containers

Normal Bare-Metal Server
CPU RAM HD Network
OperaXng System
nginx PHP DB

Virtual Machines
CPU RAM HD Network
OperaXng System
nginx PHP DB
OperaXng System
nginx PHP DB
OperaXng System
Hypervisor

Containers
CPU RAM HD Network
OperaXng System
nginx nginx PHP DB PHP DB

Docker can use many different containers
•  Since 0.9.0 it supports:
•  LXC (Linux Containers) – Started with LXC when it was released
•  OpenVZ
•  Systemd-nspawn
•  libvert-sandbox
•  Qemu/kvm
•  BSD Jails
•  Solaris Zones
•  chroot

Runs on *nix and Windows Hyper-V
•  No naXve container drivers for OSX*
•  Amazon has ElasXc Container Service, and Microsok Azure has Azure
Container Service

Sorry OSX Users
•  Docker support is oﬃcially maintained through Docker Toolbox

Docker Toolbox also is for Windows

Let’s use Docker

Running a container
•  `docker run` will run a container
•  This will not restart an exisXng container, just create a new one
•  docker run [opXons] IMAGE [command] [arguments]
•  [opXons ]modify the docker process for this container
•  IMAGE is the image to use
•  [command] is the command to run inside the container
•  [arguments] are arguments for the command

Running a simple shell

Running Two Webservers

Some Notes
•  All three containers are 100% self contained
•  Docker containers share common ancestors, but keep their own ﬁles
•  `docker run` parameters:
•  --rm – Destroy a container once it exits
•  -d – Run in the background (daemon mode)
•  -i – Run in interacXve mode
•  --name – Give the container a name
•  -p [local port]:[container port] – Forward the local port to the container port

Volumes

Modifying a running container
•  `docker exec` can run a command inside of an exisXng container
•  Use Volumes to share data

Persistent Data with Volumes
•  You can designate a volume with -v
•  Volumes can be shared amongst containers
•  Volumes can mount data from the host system

Mounting from the host machine

Mounting from the host isn’t perfect
•  The container now has a window into your host machine
•  Permissions can get screwy if you are modifying in the container
•  Most things it creates will be root by default, and you probably aren’t root on
the host machine
•  Host-mounted volumes are not portable at all
•  Docker Toolbox’s VM only allows mounXng from within your home
directory

Container Data Volumes
•  Uses a small container that does nothing but stores data
•  Have our app containers use the data volume to store data
•  Use ‘editor containers’ to go in and modify data when needed

Mounting Data Volumes

Why not run SSH inside of the container?
•  Well, you can…
•  Docker is designed for one command per container
•  If you need to modify data, then you need to change your setup
•  If you have to run SSH, then you need a way to run SSH and your
command

Why go through the hassle?
•  Data volumes are portable
•  Data volumes are safer
•  Separates the app containers from data
•  ProducXon can use a data volume, dev can use a host volume
•  Our app containers stay small

Network Linking

Docker Links
•  Allows containers to ‘see’ each other over the network
•  Each container thinks the other one is just another machine
•  Containers all have an internal network address, so we don’t need to
expose everything through the host
•  Currently only works if all the containers are on one machine, Docker
1.10 should ﬁx that

More Traditional Setup
INTARWEBS Nginx PHP-FPM
Data Volume
Port 9000
Editor

Let’s Build It

More Notes!
•  We can now rebuild secXons of the app as needed
•  We can restart nginx without impacXng PHP
•  We can extend much easier
•  Linked containers will not update if they are stopped/started
•  If we upgrade PHP, we have to destroy/create the web_server container
again

Creating your own Images

Dockerfile
•  Dockerfile is the configuraXon steps for an image
•  Can be created from scratch, or based on another image
•  Allows you to add files, create default volumes, ports, etc
•  Can be used privately or pushed to Docker Hub

FROM phusion/baseimage:0.9.10
# …
CMD ["/sbin/my_init"]
# Nginx-PHP Installation
RUN apt-get update
RUN apt-get install -y vim git curl wget build-essential python-software-properties
php5-cli php5-fpm php5-mysql php5-pgsql php5-sqlite php5-curl
php5-gd php5-mcrypt php5-intl php5-imap php5-tidy mysql-client
# …
RUN mkdir /var/www
ADD build/default /etc/nginx/sites-available/default
# …
EXPOSE 80 22
VOLUME /var/www
VOLUME /etc/nginx
VOLUME /etc/php/
VOLUME /var/log

RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

Build it
docker build -t tag_name ./
•  This runs through the Dockerﬁle and generates the image
•  We can now use the tag name to run the image

Other Helpful Commands

Inspect a container
docker inspect [opXons] CONTAINER_NAME
•  Returns a JSON string with data about the container
•  Can also query
•  docker inspect -f “{{ .NetworkSe{ngs.IPAddres }}” web_server
•  Really handy for scripXng out things like reverse proxies

Work with images
•  docker pull IMAGE – Pulls down an image before using
•  docker images – Lists all the images that are downloaded
•  docker rmi IMAGE – Deletes an image if it’s not being used

Docker Machine

What is Docker Machine?
•  A provisioning tool that is used to set up a box with Docker
•  Used in Docker Toolbox to create the VM
•  Supports:
•  EC2
•  Azure
•  Digital Ocean
•  Hyper-V
•  OpenStack
•  Virtualbox
•  VMWare

Why use it?
•  Makes it very easy to spin up new boxes
•  Docker Machine handles all of the dirty stuﬀ for you
•  Docker Toolbox users are already using it
•  Integrates with Docker Swarm
•  It is not necessarily portable

Docker Swarm

What is Docker Swarm?
•  Cluster management tool developed by Docker
•  Looks like a machine running docker, but is actually many machines

Docker Compose

What is Docker Compose?
•  MulX-container orchestraXon
•  A single conﬁg ﬁle holds all of your container info
•  Works with Docker Swarm and a few other tools, like Rancher

Sample docker-compose.yml
phpserver:
build: ./docker/php
volumes:
- /home/ctankersley/Projects/dockerfordevs:/var/www/
links:
- mysqlserver

mysqlserver:
image: mysql
environment:
MYSQL_DATABASE: dockerfordevs
MYSQL_ROOT_PASSWORD: docker
volumes:
- /var/lib/mysql

nginx:
build: ./docker/nginx
ports:
- "80:80"
- "443:443"
links:
- phpserver

Deploying

I can’t answer this for you
¯_(ツ)_/¯

Questions?

Each situation is different
•  You will probably build something custom, using exisXng tools
•  Do you use data volumes?
•  Do you just package the enXre compiled app?
•  Does it need to be distributed?
•  Is it going on Swarm, or Amazon ECS?

Things to consider
•  Docker Compose will only deploy an app to one server
•  Docker Swarm is preJy low-level and bare-bones
•  Volumes on Swarm cannot be shared across hosts
•  Host mounXng is 99.99999% of the Xme not what you want to do

Rancher is a good start
•  Provides a nice GUI to manage everything
•  Allows volume sharing and networking across hosts
•  Works with docker-compose.yml ﬁles
•  These ﬁles can be supplemented with environment variables

Rancher in action

Questions?

http://ctankersley.com
chris@ctankersley.com
@dragonmantank
https://joind.in/talk/42cba

Docker for PHP Developers (NomadPHP)

More Related Content

What's hot

Similar to Docker for PHP Developers (NomadPHP)

More from Chris Tankersley

Recently uploaded

Docker for PHP Developers (NomadPHP)