Container management with Docker

Easier Control with Panamax

Even though Docker's command structure is quite simple and is based largely on Git, it quickly gets unwieldy with many containers. Panamax [19], the first graphical interface for managing Docker containers (still in beta), solves this problem (Figure 6).

Figure 6: Panamax makes deploying several docker containers easy.

To install the browser-based GUI, you first need to install Vagrant version 1.6.5 or higher and VirtualBox 1.4.2 or higher (Figures 7 and 8). If the versions aren't available to you, you'll need to get the Vagrant [20] and VirtualBox [21] packages in Debian format off their websites. Panamax can currently be installed only on Debian-based distributions or the Apple Mac OS. It's really only a question of time that stable versions of other package formats are supported.

Figure 7: Panamax offers assisted installation from the command line.
Figure 8: Panamax allows you to search for installed containers.

Once the prerequisites are met, enter the command

$ curl http://download.panamax.io/installer/ubuntu.sh | bash

to install the minimum CoreOS container operating system and Panamax in VirtualBox (Figure 9). The process runs automatically and finishes by having you enter the http://localhost:8888 URL in your browser, which opens the Panamax interface. There you can search for images, install, run, modify, manage, and save (Figures 10 and 11). To make the best use of Panamax at this stage requires internalizing the Docker principle. Particularly important is distinguishing between an image and a container. With the help of Panamax and its documentation, you can get containers up and running quickly without entering any by hand (Figure 12). If an error occurs, you simply delete the image and start over.

Figure 9: Panamax shows a successfully created image.
Figure 10: The Panamax GUI allows you to add ports, environmental variables, or services.
Figure 11: Installing the WordPress image using Panamax.
Figure 12: Panamax is well documented.

Conclusion

The container principle is far from new. FreeBSD jails [22], Solaris Zones [23], OpenVZ [24], and LXC have existed for quite some time. Even the good old Linux chroot is nothing else in principle than a container. However, it looks like the makers of Docker bundled the right ideas into free software at the right time. (See the "Basic Commands" box for more information.)

Basic Commands

You can install Docker with the following command:

$ sudo apt-get update && apt-get install docker.io

Serious work with Docker also involves installing the following packages:

$ sudo apt-get install cgroup-tools dbootstrap rinse \
      cgroupfs-mount aufs-tools

To run commands without root privileges, do:

$ sudo gpasswd -a <username> docker

To open an account, go to the Docker sign-up page [26], then register as a user:

$ docker login

Search for the desired image (e.g., Debian):

$ docker search debian

Currently, 360 different Debian images reside in the Docker hub, requiring you to select carefully the one that fits your needs. Each image is described in detail. For the test, the first image with the name debian should be enough:

$ docker pull debian

The image is then downloaded onto the local machine. Next, start the image in a container in the shell:

$ docker run -t -i debian /bin/bash

You can also simply load an image directly with docker run without using docker pull. The image will be fetched if it isn't available locally. Next, you'll see a prompt that shows something like:

user@70a1d73753b5:

The number after the name is the container ID. Entering

$ user@70a1d73753b5: cat /etc/debian_version

should return 7.6 as the Debian version. The command

$ docker run -d ...

moves a container in the background. Entering

$ docker ps

shows the running containers, and

$ docker ps -a

shows all containers. Use exit or Ctrl+D to exit from the container; then, remove the previously stopped container with

$ docker rm debian

and the image with:

$ docker rmi debian

Many more options are described in the Docker user guide [27].

Three operating systems have emerged around Docker – CoreOS, Red Hat's Atomic project, and Dockerera – using the container technology for clusters and other expanded applications. Although it seems like conventional virtualization such as VirtualBox and VMware can't keep up with the speed and lower consumption of Docker containers, VMs aren't likely to go away any time soon. Thus, for security reasons at Google, Docker containers run on virtual machines. Hundreds of containers can be distributed among a few VMs with twice the security.

Docker in VMs can also run under different platforms, as the Boot2docker project [25] has shown (Figure 13). The operating system ISO image at only 23MB is based on Tiny Core Linux and can be run in VirtualBox as well as Mac OS and Windows. It was designed to use Docker containers in OSs other than Linux. Boot2docker is ideal for a first Docker test.

Figure 13: Boot2docker ready for deployment.

What's Ahead

Whether Docker will become more accessible to end users is yet to be seen. No doubt containers make sense deployed on the desktop as well. You can use Docker to isolate less trusted programs or processes from the rest of the operating system. Tests with slightly altered conditions can be run in containers and compared with diff.

If you're occasionally building packages for your own use, you can depend on Docker as a build environment instead of chroot. Also, users can build operating systems tailored to their needs from a base image, save them as a Docker image, and then publish them on the Docker hub. If you want to test Docker without much effort, consider Boot2docker.

Infos

  1. Docker: https://docs.docker.com/
  2. Kubernetes: http://www.datacenterknowledge.com/archives/2014/07/10/googles-docker-container-management-project-kubernetes-gets-big-league-support/
  3. Hypervisor: http://en.wikipedia.org/wiki/Hypervisor
  4. Cgroups: http://www.linux-magazine.com/Issues/2011/130/Security-Lessons-cgroups-and-LXC/%28language%29/eng-US
  5. Namespaces: http://lwn.net/Articles/531114/
  6. LXC: http://en.wikipedia.org/wiki/LXC
  7. PaaS: http://en.wikipedia.org/wiki/Platform_as_a_service
  8. CVS: http://en.wikipedia.org/wiki/Concurrent_Versions_System
  9. SaaS: http://en.wikipedia.org/wiki/Software_as_a_service
  10. aufs: http://en.wikipedia.org/wiki/Aufs
  11. Device mapper: http://en.wikipedia.org/wiki/Device_mapper
  12. Btrfs: http://en.wikipedia.org/wiki/Btrfs
  13. Filesystems: http://www.projectatomic.io/docs/filesystems/
  14. Project Atomic: http://www.projectatomic.io/
  15. Base image: https://docs.docker.com/terms/image/#base-image-def
  16. Git: http://en.wikipedia.org/wiki/Git_(software)
  17. Dockerfile: https://registry.hub.docker.com/u/toke/owncloud7/dockerfile/
  18. Docker 1.2: http://blog.docker.com/2014/08/announcing-docker-1-2-0/
  19. Panamax: http://panamax.io/
  20. Vagrant: https://www.vagrantup.com/downloads.html
  21. VirtualBox: https://www.virtualbox.org/wiki/Downloads
  22. FreeBSD jail: http://en.wikipedia.org/wiki/FreeBSD_jail
  23. Solaris Zones: http://en.wikipedia.org/wiki/Solaris_Containers
  24. OpenVZ: http://en.wikipedia.org/wiki/OpenVZ
  25. Boot2docker: http://boot2docker.io/
  26. Sign up for Docker: https://hub.docker.com/account/signup/
  27. Docker user guide: http://docs.docker.com/userguide/

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Tutorials – Docker

    You might think Docker is a tool reserved for gnarly sys admins, useful only to service companies that run complicated SaaS applications, but that is not true: Docker is useful for everybody.

  • Container Security

    A recent flurry of activity in the container space raises several interesting questions about security among a number of operational aspects in the enterprise environment.

  • Perl: Testing Modules with Docker

    If you want to distribute your programs across multiple platforms, you need to prepare them to run in foreign environments from the start. Linux container technology and the resource-conserving Docker project let you test your own Perl modules on several Linux distributions in one fell swoop.

  • CoreOS

    CoreOS is an operating system for the cloud that relies on Docker and also lets you build compute clusters out of the box.

  • Docker with OwnCloud

    Run your application smoothly and portably in the cloud with the Docker container system. This workshop takes a practical look deploying Docker with the OwnCloud cloud environment.

comments powered by Disqus

Direct Download

Read full article as PDF:

Price $2.95

News