bluemix chicago meetup - ibm containers - docker on the cloud
TRANSCRIPT
© IBM Corporation 1
Presented by:
IBM ContainersDocker in the Cloud
Rick OsowskiTechnical Product [email protected]@rosowski
© IBM Corporation 2© IBM Corporation 2
© IBM Corporation 3© IBM Corporation 3
IBM Bluemix: Build your apps, on your runtime, your way
Bluemix supports a wide diversity of workloads by offering developers a range of choices associated with how they build and run their apps.
Cloud Foundry is an open source PaaS that offers the ability to quickly compose apps without worrying about the underlying infrastructure. Bluemix extends Cloud Foundry with a number of services and enterprise-grade DevOps tooling.
IBM Containers, powered by Docker, allow portability and consistency regardless of where they run— bare metal servers in Bluemix, your company's data center, or on your laptop. Easily spin up images from our public hub or your own private registry.
Virtual machines offer the most control over your apps and middleware. Bluemix uses industry-leading OpenStack to manage VMs in a cloud of your choice: public, dedicated, or on-premises. Key OpenStack services can be used in conjunction with Bluemix services to build hybrid apps.
Blog Post: https://ibm.biz/BdX5av
© IBM Corporation 4© IBM Corporation 4
Docker MissionDocker is an open platform for building distributed applications for developers and system administrators.
Build Ship Run
Anywhere
Any App
© IBM Corporation 5
Going deep onIBM Containers
© IBM Corporation 6© IBM Corporation 6
IBM Containers – What do you get?• IBM-managed Docker registry with pre-built Node, Java, and other runtimes• Private Docker Registry for all your containers• GUI & CLI access to manage all your containers• External persistent storage volumes, hosted on Bluemix• Integrated access to 100+ Bluemix services• Integrated deployment pipeline to automate build & deploy of your
containers completely in the cloud• Various machine sizes, to support your smallest to largest needs• Resilient container groups, supporting auto-recovery of bad instances• Single container deployments to construct your apps, your way• Integrated monitoring & logging (ELK, Grafana, etc)• And…
© IBM Corporation 7© IBM Corporation 7
© IBM Corporation 8© IBM Corporation 8
IBM Containers Vulnerability Advisor
Automatically scan for Vulnerable Packages & Policy Violations across all images in your registry
“80% of attacks leverage known vulnerabilities and configuration management setting weaknesses,” so the best opportunities in security remediation are to identify and correct, in real time, any misconfiguration or known vulnerable systems.
US State Department report
Over 30% of Official Images in Docker Hub Contain High Priority Security Vulnerabilities
Docker Hub is a central repository for Docker developers to pull and push container images. We performed a detailed study on Docker Hub images to understand how vulnerable they are to security threats. Surprisingly, we found that more than 30% of images in official repositories are highly susceptible to a variety of security attacks(e.g., Shellshock, Heartbleed, Poodle, etc.). For general images – images pushed by Docker users, but not explicitly verified by any authority – this number jumps to 40% with a sampling error bound of 3%.
http://www.banyanops.com/blog/analyzing-docker-hub/
© IBM Corporation 9© IBM Corporation 9
Demo time!!!
on
https://github.com/osowski/lets-chat-bluemix
© IBM Corporation 10© IBM Corporation 10
Thank you and keep in touch!!!
[email protected]@rosowski
Come join the fun at https://ibm.biz/bluemixchicago
© IBM Corporation 11
Additional Resources
New to Docker?– IBM Containers white paper– IBM Containers - Achieve without sacrificing
quality– Bluemix Instant Runtimes, Containers, or Vir
tual Machines?
– Making Docker Containers Work for Your Business Critical Applications
– IBM Containers Game-changing Capabilities
– Monitoring and Logging for IBM Containers. No configuration needed.
Hands-on– IBM Containers documentation on Bluemix– IBM Containers Hands-on Labs– IBM Containers Q&A in DeveloperWorks– IBM Containers Service Overview– DevOps for Containers at DockerCon– IBM Containers and Bluemix Services - simplif
ying your distributed Docker applications– Is your Docker container secure? Ask IBM Vul
nerability Advisor!
– Additional Lab: http://go.osow.ski/1O2788o
Repositories:– https://github.com/IBM-Bluemix/bluechatter– https://github.com/osowski/lets-chat-bluemix