CoreOS in Action

CoreOS in Action
Author: Matt Bailey
Publisher: Simon and Schuster
Total Pages: 283
Release: 2017-05-11
Genre: Computers
ISBN: 1638351678

Summary CoreOS in Action is a clear tutorial for deploying container-based systems on CoreOS Container Linux. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the Technology Traditional Linux server distributions include every component required for anything you might be hosting, most of which you don't need if you've containerized your apps and services. CoreOS Container Linux is a bare-bones distro with only the essential bits needed to run containers like Docker. Container Linux is a fast, secure base layer for any container-centric distributed application, including microservices. And say goodbye to patch scheduling; when Container Linux needs an update, you just hot-swap the whole OS. About the Book CoreOS in Action is a clear tutorial for deploying container-based systems on CoreOS Container Linux. Inside, you'll follow along with examples that teach you to set up CoreOS on both private and cloud systems, and to practice common sense monitoring and upgrade techniques with real code. You'll also explore important container-aware application designs, including microservices, web, and Big Data examples with real-world use cases to put your learning into perspective. Summary Handling scaling and failures gracefully Container-driven application designs Cloud, on-premises, and hybrid deployment Smart logging and backup practices About the Reader Written for readers familiar with Linux and the basics of Docker. About the Author Matt Bailey is currently a technical lead at ZeniMax. He has worked in higher education and with scientific computing, medical, and networking technology companies, as well as a few startups. You can find him online via https://mdb.io. Table of Contents PART 1 - GETTING TO KNOW COREOS Introduction to the CoreOS family Getting started on your workstation Expecting failure: fault tolerance in CoreOS PART 2 - APPLICATION ARCHITECTURE CoreOS in production Application architecture and workflow Web stack application example Big Data stack PART 3 - COREOS IN PRODUCTION CoreOS on AWS Bringing it together: deployment System administration

Learning CoreOS

Learning CoreOS
Author: Kingston Smiler. S
Publisher: Packt Publishing Ltd
Total Pages: 190
Release: 2016-03-22
Genre: Computers
ISBN: 1785886932

Your one-stop guide for building, configuring, maintaining, and deploying one of the world's fastest growing OSes About This Book Understand the features of CoreOS and learn to administrate and secure a CoreOS environment Develop, test, and deploy cloud services and applications more quickly and efficiently inside lightweight containers using CoreOS This is a complete tutorial on CoreOS, which is the preferred OS for cloud computing as it contains components that facilitate cloud management Who This Book Is For This book is for cloud or enterprise administrators and application developers who would like to gain knowledge about CoreOS to deploy a cloud application or micro-services on a cluster of cloud servers. It is also aimed at administrators with basic networking experience. You do not need to have any knowledge of CoreOS. What You Will Learn Understand the benefits of CoreOS as a cloud orchestration platform Learn about lightweight containers and various container frameworks such as Docker and RKT in CoreOS Manage services and containers across cluster using Fleet and systemd Set up a CoreOS environment using Vagrant Create and manage CoreOS clusters Discover the service parameters using etcd Find out about chaining services running on the cluster using Flannel / Rudder and Weave Create a virtual tenant network and service chaining using OVS In Detail CoreOS is an open source operating system developed upon the Linux kernel. The rise of CoreOS is directly related to the rise of Docker (a Linux container management system). It is a minimal operating system layer and takes a different approach to automating the deployment of containers. The major difference between CoreOS and other Linux distributions is that CoreOS was designed to deploy hundreds of servers. CoreOS immensely helps the users to create systems, which are easy to scale and manage, making life easier for all, be it developer, QA, or deployer. This book is all about setting up, deploying, and using CoreOS to manage clusters and clouds. It will help you understand what CoreOS is and its benefits as a cloud orchestration platform. First, we'll show you how to set up a simple CoreOS instance with single node in the cluster and how to run a Docker container inside the CoreOS instance. Next, you'll be introduced to Fleet and systemd, and will deploy and distribute Docker services across different nodes in cluster using Fleet. Later, you'll be briefed about running services in a cluster with constraints, publishing the services already running on the cluster to new services, and making your services interact with each other. We conclude by teaching you about advanced container networking. By the end of the book, you will know the salient features of CoreOS and will be able to deploy, administrate, and secure a CoreOS environment. Style and approach This practical guide covers the basics and advanced topics related to CoreOS and lightweight containers. The topics are covered in an easy-to-follow manner with each feature explained in detail, beginning with a brief overview and followed by an explanation of its corresponding configuration files.

Podman in Action

Podman in Action
Author: Daniel Walsh
Publisher: Simon and Schuster
Total Pages: 310
Release: 2023-03-21
Genre: Computers
ISBN: 163835183X

The next generation of containers is here. Learn Podman directly from its creator, discover its exceptional security features, and start managing rootless containers that integrate easily into your systems. In Podman in Action you will learn how to: Build and run containers in rootless mode Develop and manage pods Use SystemD to oversee a container’s lifecycle Work with the Podman service via Python Keep your containers confined using Podman security features Manage containerized applications on edge devices Podman in Action shows you how to deploy containerized applications on Linux, Windows, and MacOS systems using Podman. Written by Daniel Walsh, who leads the Red Hat Podman team, this book teaches you how to securely manage the entire application lifecycle without human intervention. You’ll quickly get to grips with Podman’s unique advantages over Docker, and learn how easy it is to migrate your Docker-based infrastructure. It also demonstrates how, with Podman, you can easily convert containerized applications into Kubernetes-based microservices. About the technology It’s time to upgrade your container engine! The Podman container manager delivers flexible image layer control, seamless Kubernetes compatibility, and rootless containers that can be created, run, and managed by users without admin rights. Plus, its OCI-compliant support for the Docker API lets you shift existing containers to Podman without breaking your scripts or changing the way you work. About the book Podman in Action introduces the Podman container manager. The easy-to-follow explanations and examples give you a clear view of what containers are, how they work, and how to manage them using Podman’s powerful features. You’ll get a deep look at the Linux components Podman uses and even learn more about Docker along the way. You’ll especially appreciate author Dan Walsh’s unique insights into container security. What's inside Develop and manage pods Key security concepts including SELinux and SECCOMP Use systemd to oversee a container’s lifecycle Keep your containers confined using Podman security Manage containerized applications on edge devices Install and run Podman on MacOS and Windows About the reader For developers or system administrators experienced with Linux and Docker. About the author Daniel Walsh is a senior distinguished engineer at Red Hat, and leads the team that created Podman. Table of Contents PART 1 FOUNDATIONS 1 Podman: A next-generation container engine 2 Command line 3 Volumes 4 Pods PART 2 DESIGN 5 Customization and configuration files 6 Rootless containers PART 3 ADVANCED TOPICS 7 Integration with systemd 8 Working with Kubernetes 9 Podman as a service PART 4 CONTAINER SECURITY 10 Security container isolation 11 Additional security considerations

Istio in Action

Istio in Action
Author: Christian E. Posta
Publisher: Simon and Schuster
Total Pages: 478
Release: 2022-04-26
Genre: Computers
ISBN: 1617295825

Istio in Action teaches you how to implement an Istio-based service mesh that can handle complex routing scenarios, traffic encryption, authorization, and other common network-related tasks. You'll start by defining a basic service mesh and exploring the data plane with Istio's service proxy, Envoy. Then, you'll dive into core topics like traffic routing and visualization and service-to-service authentication, as you expand your service mesh to workloads on multiple clusters and legacy VMs.

Microservices Security in Action

Microservices Security in Action
Author: Prabath Siriwardena
Publisher: Manning Publications
Total Pages: 614
Release: 2020-08-04
Genre: Computers
ISBN: 1617295957

Microservices Security in Action teaches you how to address microservices-specific security challenges throughout the system. This practical guide includes plentiful hands-on exercises using industry-leading open-source tools and examples using Java and Spring Boot. Summary Unlike traditional enterprise applications, Microservices applications are collections of independent components that function as a system. Securing the messages, queues, and API endpoints requires new approaches to security both in the infrastructure and the code. Microservices Security in Action teaches you how to address microservices-specific security challenges throughout the system. This practical guide includes plentiful hands-on exercises using industry-leading open-source tools and examples using Java and Spring Boot. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the technology Integrating independent services into a single system presents special security challenges in a microservices deployment. With proper planning, however, you can build in security from the start. Learn to create secure services and protect application data throughout development and deployment. As microservices continue to change enterprise application systems, developers and architects must learn to integrate security into their design and implementation. Because microservices are created as a system of independent components, each a possible point of failure, they can multiply the security risk. With proper planning, design, and implementation, you can reap the benefits of microservices while keeping your application data—and your company’s reputation—safe! About the book Microservices Security in Action is filled with solutions, teaching best practices for throttling and monitoring, access control, and microservice-to-microservice communications. Detailed code samples, exercises, and real-world use cases help you put what you’ve learned into production. Along the way, authors and software security experts Prabath Siriwardena and Nuwan Dias shine a light on important concepts like throttling, analytics gathering, access control at the API gateway, and microservice-to-microservice communication. You’ll also discover how to securely deploy microservices using state-of-the-art technologies including Kubernetes, Docker, and the Istio service mesh. Lots of hands-on exercises secure your learning as you go, and this straightforward guide wraps up with a security process review and best practices. When you’re finished reading, you’ll be planning, designing, and implementing microservices applications with the priceless confidence that comes with knowing they’re secure! What's inside Microservice security concepts Edge services with an API gateway Deployments with Docker, Kubernetes, and Istio Security testing at the code level Communications with HTTP, gRPC, and Kafka About the reader For experienced microservices developers with intermediate Java skills. About the author Prabath Siriwardena is the vice president of security architecture at WSO2. Nuwan Dias is the director of API architecture at WSO2. They have designed secure systems for many Fortune 500 companies. Table of Contents PART 1 OVERVIEW 1 Microservices security landscape 2 First steps in securing microservices PART 2 EDGE SECURITY 3 Securing north/south traffic with an API gateway 4 Accessing a secured microservice via a single-page application 5 Engaging throttling, monitoring, and access control PART 3 SERVICE-TO-SERVICE COMMUNICATIONS 6 Securing east/west traffic with certificates 7 Securing east/west traffic with JWT 8 Securing east/west traffic over gRPC 9 Securing reactive microservices PART 4 SECURE DEPLOYMENT 10 Conquering container security with Docker 11 Securing microservices on Kubernetes 12 Securing microservices with Istio service mesh PART 5 SECURE DEVELOPMENT 13 Secure coding practices and automation

The Docker Book

The Docker Book
Author: James Turnbull
Publisher: James Turnbull
Total Pages: 398
Release: 2014-07-14
Genre: Computers
ISBN: 098882020X

Updated for Docker Community Edition v18.09! Docker book designed for SysAdmins, SREs, Operations staff, Developers and DevOps who are interested in deploying the open source container service Docker. In this book, we'll walk you through installing, deploying, managing, and extending Docker. We're going to do that by first introducing you to the basics of Docker and its components. Then we'll start to use Docker to build containers and services to perform a variety of tasks. We're going to take you through the development lifecycle, from testing to production, and see where Docker fits in and how it can make your life easier. We'll make use of Docker to build test environments for new projects, demonstrate how to integrate Docker with continuous integration workflow, and then how to build application services and platforms. Finally, we'll show you how to use Docker's API and how to extend Docker yourself. We'll teach you how to: * Install Docker. * Take your first steps with a Docker container. * Build Docker images. * Manage and share Docker images. * Run and manage more complex Docker containers. * Deploy Docker containers as part of your testing pipeline. * Build multi-container applications and environments. * Learn about orchestration using Compose and Swarm for the orchestration of Docker containers and Consul for service discovery. * Explore the Docker API. * Getting Help and Extending Docker.

Kubernetes in Action

Kubernetes in Action
Author: Marko Luksa
Publisher: Simon and Schuster
Total Pages: 1062
Release: 2017-12-14
Genre: Computers
ISBN: 1638355347

Summary Kubernetes in Action is a comprehensive guide to effectively developing and running applications in a Kubernetes environment. Before diving into Kubernetes, the book gives an overview of container technologies like Docker, including how to build containers, so that even readers who haven't used these technologies before can get up and running. Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications. About the Technology Kubernetes is Greek for "helmsman," your guide through unknown waters. The Kubernetes container orchestration system safely manages the structure and flow of a distributed application, organizing containers and services for maximum efficiency. Kubernetes serves as an operating system for your clusters, eliminating the need to factor the underlying network and server infrastructure into your designs. About the Book Kubernetes in Action teaches you to use Kubernetes to deploy container-based distributed applications. You'll start with an overview of Docker and Kubernetes before building your first Kubernetes cluster. You'll gradually expand your initial application, adding features and deepening your knowledge of Kubernetes architecture and operation. As you navigate this comprehensive guide, you'll explore high-value topics like monitoring, tuning, and scaling. What's Inside Kubernetes' internals Deploying containers across a cluster Securing clusters Updating applications with zero downtime About the Reader Written for intermediate software developers with little or no familiarity with Docker or container orchestration systems. About the Author Marko Luksa is an engineer at Red Hat working on Kubernetes and OpenShift. Table of Contents PART 1 - OVERVIEW Introducing Kubernetes First steps with Docker and Kubernetes PART 2 - CORE CONCEPTS Pods: running containers in Kubernetes Replication and other controllers: deploying managed pods Services: enabling clients to discover and talk to pods Volumes: attaching disk storage to containers ConfigMaps and Secrets: configuring applications Accessing pod metadata and other resources from applications Deployments: updating applications declaratively StatefulSets: deploying replicated stateful applications PART 3 - BEYOND THE BASICS Understanding Kubernetes internals Securing the Kubernetes API server Securing cluster nodes and the network Managing pods' computational resources Automatic scaling of pods and cluster nodes Advanced scheduling Best practices for developing apps Extending Kubernetes

DevOps: Puppet, Docker, and Kubernetes

DevOps: Puppet, Docker, and Kubernetes
Author: Thomas Uphill
Publisher: Packt Publishing Ltd
Total Pages: 925
Release: 2017-03-31
Genre: Computers
ISBN: 178829968X

Get hands-on recipes to automate and manage Linux containers with the Docker 1.6 environment and jump-start your Puppet development About This Book Successfully deploy DevOps with proven solutions and recipes Automate your infrastructure with Puppet and combine powerful DevOps methods Deploy and manage highly scalable applications using Kubernetes streamline the way you manage your applications Who This Book Is For This Learning Path is for developers, system administrators, and DevOps engineers who want to use Puppet, Docker, and Kubernetes in their development, QA, or production environments. This Learning Path assumes experience with Linux administration and requires some experience with command-line usage and basic text file editing. What You Will Learn Discover how to build high availability Kubernetes clusters Deal with inherent issues with container virtualization and container concepts Create services with Docker to enable the swift development and deployment of applications Make optimum use of Docker in a testing environment Create efficient manifests to streamline your deployments Automate Puppet master deployment using Git hooks, r10k, and PuppetDB In Detail With so many IT management and DevOps tools on the market, both open source and commercial, it's difficult to know where to start. DevOps is incredibly powerful when implemented correctly, and here's how to get it done.This Learning Path covers three broad areas: Puppet, Docker, and Kubernetes. This Learning Path is a large resource of recipes to ease your daily DevOps tasks. We begin with recipes that help you develop a complete and expert understanding of Puppet's latest and most advanced features. Then we provide recipes that help you efficiently work with the Docker environment. Finally, we show you how to better manage containers in different scenarios in production using Kubernetes. This course is based on these books: Puppet Cookbook, Third Edition Docker Cookbook Kubernetes Cookbook Style and approach This easy-to-follow tutorial-style guide teaches you precisely how to configure complex systems in Puppet and manage your containers using Kubernetes.

Infrastructure as Code (IAC) Cookbook

Infrastructure as Code (IAC) Cookbook
Author: Stephane Jourdan
Publisher: Packt Publishing Ltd
Total Pages: 440
Release: 2017-02-17
Genre: Computers
ISBN: 1786461293

Over 90 practical, actionable recipes to automate, test, and manage your infrastructure quickly and effectively About This Book Bring down your delivery timeline from days to hours by treating your server configurations and VMs as code, just like you would with software code. Take your existing knowledge and skill set with your existing tools (Puppet, Chef, or Docker) to the next level and solve IT infrastructure challenges. Use practical recipes to use code to provision and deploy servers and applications and have greater control of your infrastructure. Who This Book Is For This book is for DevOps engineers and developers working in cross-functional teams or operations and would now switch to IAC to manage complex infrastructures. What You Will Learn Provision local and remote development environments with Vagrant Automate production infrastructures with Terraform, Ansible and Cloud-init on AWS, OpenStack, Google Cloud, Digital Ocean, and more Manage and test automated systems using Chef and Puppet Build, ship, and debug optimized Docker containers Explore the best practices to automate and test everything from cloud infrastructures to operating system configuration In Detail Infrastructure as Code (IAC) is a key aspect of the DevOps movement, and this book will show you how to transform the way you work with your infrastructure—by treating it as software. This book is dedicated to helping you discover the essentials of infrastructure automation and its related practices; the over 90 organized practical solutions will demonstrate how to work with some of the very best tools and cloud solutions. You will learn how to deploy repeatable infrastructures and services on AWS, OpenStack, Google Cloud, and Digital Ocean. You will see both Ansible and Terraform in action, manipulate the best bits from cloud-init to easily bootstrap instances, and simulate consistent environments locally or remotely using Vagrant. You will discover how to automate and test a range of system tasks using Chef or Puppet. You will also build, test, and debug various Docker containers having developers' interests in mind. This book will help you to use the right tools, techniques, and approaches to deliver working solutions for today's modern infrastructure challenges. Style and approach This is a recipe-based book that allows you to venture into some of the most cutting-edge practices and techniques about IAC and solve immediate problems when trying to implement them.

Docker Management Design Patterns

Docker Management Design Patterns
Author: Deepak Vohra
Publisher: Apress
Total Pages: 329
Release: 2017-09-22
Genre: Computers
ISBN: 1484229738

Master every aspect of orchestrating/managing Docker including creating a Swarm, creating services, using mounts, scheduling, scaling, resource management, rolling updates, load balancing, high availability, logging and monitoring, using multiple zones, and networking. This book also discusses the managed services for Docker Swarm: Docker for AWS and Docker Cloud Swarm mode. Docker Management Design Patterns explains how to use Docker Swarm mode with Docker Engine to create a distributed Docker container cluster and how to scale a cluster of containers, schedule containers on specific nodes, and mount a volume. This book is based on the latest version of Docker (17.0x). You will learn to provision a Swarm on production-ready AWS EC2 nodes, and to link Docker Cloud to Docker for AWS to provision a new Swarm or connect to an existing Swarm. Finally, you will learn to deploy a Docker Stack on Docker Swarm with Docker Compose. What You'll Learn Apply Docker management design patterns Use Docker Swarm mode and other new features Create and scale a Docker service Use mounts including volumes Configure scheduling, load balancing, high availability, logging and monitoring, rolling updates, resource management, and networking Use Docker for AWS managed services including a multi-zone Swarm Build Docker Cloud managed services in Swarm mode Who This Book Is For Docker admins, Docker application developers, and container as a service (CAAS) developers. Some prerequisite knowledge of Linux and Docker is required. Apress Pro Docker is recommended as a companion to this book.