Painless Docker

Preface

1. To Whom Is This Guide Addressed?
2. How To Properly Enjoy This Guide
3. Join the community

The Missing Introduction to Containerization

1. We Are Made by History
2. Jails, Virtual Private Servers, Zones, Containers, and VMs: What’s the Difference Anyway?
3. OS Containers vs. App Containers
4. Docker: Container or Platform?
5. The Open Container Initiative: What is a Standard Container?
6. A Deep Dive into Container Prototyping with runC
7. Industry Standard Container Runtimes
8. containerd, shim and runC: How Everything Works Together
9. Adding a New Runtime to Docker
10. Does CRI Mean the Death of Docker?
11. The Moby Project

Installing and Using Docker

1. Installing Docker
2. Docker CLI

Docker Events

1. Using Docker API To List Events

Docker Containers

1. Creating Containers
2. Running Containers
3. Restarting Containers
4. Pausing and Unpausing Containers
5. Stopping Containers
6. Killing Containers
7. Removing Containers
8. Container Lifecycle
9. Starting Containers Automatically
10. Accessing Containers Ports
11. Running Docker In Docker

Managing Containers Resources

1. Memory Usage Reservations and Limits
2. CPU Usage Reservations and Limits

Docker Images

1. What is an Image?
2. Images are Layers
3. Images, Intermediate Images & Dangling Images
4. The Dockerfile and its Instructions
5. The Base Image
6. Extending the Base Image
7. Exploring Images’ Layers
8. Building an Image Using a Dockerfile
9. Creating Images out of Containers
10. Migrating a VM to a Docker Image
11. Creating and Understanding the Scratch Image

Docker Hub and Docker Registry

1. Docker Hub, Public and Private Registries
2. Docker Hub: The Official Docker Registry
3. Using Docker Hub
4. DockerHub Alternatives
5. Creating a Private Docker Registry

Optimizing Docker Images

1. Less Layers = Faster Builds?
2. Is There a Maximum Number of Layers?
3. Optimizing Dockerfile Layer Caching for Dependency Management
4. The Multi-Stage Build
5. Smaller Images
6. Other Techniques: Squashing, Distroless, etc

Docker Volumes

1. What is a Docker Volume?
2. Creating and Using Docker Volumes
3. Listing and Inspecting Docker Volumes
4. Named Volumes vs Anonymous Volumes
5. Bind Mounts
6. Data Propagation
7. Dangling Volumes
8. TMPFS Mounts
9. Docker Volume From Containers

Docker Logging

1. How Docker Logs Work
2. Logging Best Practices and Recommendations
3. Logging Drivers
4. Docker Daemon Logging

Docker Networks

1. Docker Networks Types
2. The (System) Bridge Network
3. The (User) Bridge Network
4. The Host Network
5. The None Network
6. The Macvlan Network
7. The Overlay Network
8. The Ingress Network
9. Docker Links

Docker Compose

1. What is Docker Compose and Why Should I Care?
2. Installing Docker Compose
3. Understanding Docker Compose and How it Works
4. Docker Compose Dependencies
5. Creating Portable Docker Compose Stacks
6. Docker Compose Logging
7. Understanding Docker Compose Syntax
8. Using Dockerfile with Docker Compose
9. Docker Compose with Bind Mounts
10. Creating Custom Networks
11. Docker Compose Secrets
12. Scaling Docker Compose Services

Cleaning Docker

1. Delete Volumes
2. Delete Networks
3. Delete Images
4. Remove Docker Containers
5. Cleaning Up Everything

Docker Plugins

Orchestration - Docker Swarm

1. What is Docker Swarm?
2. Creating a Swarm Cluster
3. Swarm Services and Tasks
4. Networking in Docker Swarm
5. Performing Operations on Nodes
6. Multi-manager Docker Swarm
7. Docker Swarm Environment Variables and Secrets
8. Docker Swarm Volumes
9. Deploying a WordPress Application on Docker Swarm
10. Docker Swarm Global Services
11. Docker Swarm Resouce Management
12. Docker Swarm Stacks
13. Docker Swarm Rolling Updates
14. Using an External Load Balancer with Docker Swarm
15. Using Traefik as a Front-End Load Balancer with Docker Swarm
16. Docker Swarm Logging
17. Docker Swarm vs. Kubernetes

Docker Desktop

1. What is Docker Desktop?
2. How to Install Docker Desktop

Common Security Threats

1. Docker vs. VMs: Which is more secure?
2. Kernel Panic & Exploits
3. Container Breakouts & Privilege Escalation
4. Poisoned Images
5. Denial-of-service Attacks
6. Compromising secrets
7. Application Level Threats
8. Host System Level Treats

Docker Security Best Practices

1. Implement Security by Design
2. setuid/setgid Binaries
3. Control Resources
4. Use Notary to Verify Image Integrity
5. Scan Images
6. Set Container Filesystem to Read Only
7. Set Volumes to Read-Only
8. Do Not Use the Root User
9. Run the Docker Daemon in Rootless Mode
10. Do Not Use Environment Variables For Sensitive Data
11. Use Secret Management Tools
12. Do Not Run Containers in the Privileged Mode
13. Turn Off Inter-Container Communication
14. Only Install Necessary Packages
15. Make Sure Docker is up to Date
16. Security Through Obscurity
17. Use Limited Linux Capabilities
18. Use Seccomp
19. Use AppArmor
20. Use SELinux

Docker API

1. Docker SDKs
2. Docker API: Hello World
3. Prototyping a Log Collector Service

Debugging And Troubleshooting

1. Docker Daemon Logs
2. Activating Debug Mode
3. Debugging Docker Objects
4. Troubleshooting Docker Using Sysdig

The Ultimate Docker Cheat Sheet

1. Installation
2. Docker Registries & Repositories
3. Running Containers
4. Starting & Stopping Containers
5. Getting Information about Containers
6. Managing Images
7. Networking
8. Cleaning Docker
9. Docker Swarm
10. Docker Scout Suite
11. Resources

Afterword

1. What’s next?
2. Thank you
3. About the author
4. Join the community
5. Feedback