Docker Engine 1.10 Security Improvements
It’s been a crazy past few months with DockerCon and the holidays but yet we are still hacking away on the Docker Engine and have some really awesome security features I would like to highlight with the release of Docker … ContinuedCompose 1.6: New Compose file for defining networks and volumes
In the previous version of Docker Engine we added a completely new system for managing networks and volumes, and we’re pleased to announce full support for these features in Docker Compose. Compose files used to describe just one thing: the … ContinuedAnnouncing Docker Birthday #3
Back in March 2013, Docker’s CTO and Founder, Solomon Hykes introduced Docker publicly for the first time during a lightning talk at PyCon. Three years later the Docker project has significantly matured to become the open platform of choice for building, shipping and running distributed applications in … ContinuedYour Docker Agenda for February
This month is packed with plenty of great events to learn about all things Docker! From webinars to workshops, meetups to conference talks, check out our list of events that are coming up in February. Official Docker Training Courses … ContinuedAnother Good Year for Ansible Users
It seems like just yesterday that we were putting together the recap of Ansible's community growth in 2014. That was a very good year.
Here we are at the start of 2016 already -- and looking back on 2015, it was an even better year than 2014 was.
First, let's take a look at the numbers. For consistency's sake, we'll mostly compare to 2014 numbers, which can be found in last year's analysis. Note that the same caveats from last year's analysis also apply this year.
Debian Popcon
Debian’s Popularity Contest is an opt-in way for Debian users to share information about the software they’re running on their systems. Although it represents only a small sample of the Linux distro world, it’s useful because it’s one of the few places where we can really see an apples-to-apples comparison of install bases of the various tools. Because Ansible is agentless, we compare the Ansible package to the server packages of other configuration management tools.
For the first time in 2015, Ansible installations on this chart outnumbered Puppetmaster installations. Ansible shows continued strong growth, and appears to remain on an upward trend into 2016.
Caveats abound with this chart, but it does Continue reading
Another Good Year for Ansible Users
It seems like just yesterday that we were putting together the recap of Ansible's community growth in 2014. That was a very good year.
Here we are at the start of 2016 already -- and looking back on 2015, it was an even better year than 2014 was.
First, let's take a look at the numbers. For consistency's sake, we'll mostly compare to 2014 numbers, which can be found in last year's analysis. Note that the same caveats from last year's analysis also apply this year.
Debian Popcon
Debian’s Popularity Contest is an opt-in way for Debian users to share information about the software they’re running on their systems. Although it represents only a small sample of the Linux distro world, it’s useful because it’s one of the few places where we can really see an apples-to-apples comparison of install bases of the various tools. Because Ansible is agentless, we compare the Ansible package to the server packages of other configuration management tools.
For the first time in 2015, Ansible installations on this chart outnumbered Puppetmaster installations. Ansible shows continued strong growth, and appears to remain on an upward trend into 2016.
Caveats abound with this chart, but it does Continue reading
Containers as a Service (CaaS) as your new platform for application development and operations
Developers don’t adopt locked down platforms. That one simple statement summarizes decades of tension between IT operations and development teams. Along the spectrum of control versus agility are the desires and needs of IT operations teams responsible for keeping environments … ContinuedThree New Official Repos Join the Docker Library
We’re excited to announce that we’ve added three new Official Repos to the Docker Library. These repos are the latest additions to a growing library of curated content maintained by Docker and our partners. Docker users have pulled Official Repos … ContinuedDocker Online Meetup #31: Unikernels
On Wednesday, we hosted a Docker Online Meetup that was all about Unikernels! Amir Chaudhry, Richard Mortier and Martin Lucina joined us and presented an overview on Unikernels including a demo of Unikernels and Docker. The recorded video and slides from … ContinuedTechnology Short Take #60
Welcome to Technology Short Take #60. As usual, I’ve gathered what I hope to be a useful but varied collection of articles and links on key data center technologies. I hope something I’ve included here will be helpful—enjoy!
Networking
- The rise of Linux in importance in the networking industry continues, with Arista announcing enhancements to Arista EOS to support—among other things—Docker containers. (See this SDx Central article or this Network World article for more details.)
- As a partial counterpoint to the increased use/visibility of Linux in the networking industry, check out Ivan’s take on Dell’s OS10 announcement.
- And while we are on the topic of Linux and open source in the networking industry…read this entertaining and informative article on the importance of (truly) open source libraries in networking.
- NIC offloads can make a noticeable difference in performance with VXLAN-based overlay networks, so it’s worth some time making sure that VXLAN offloads are supported and enabled. Dale Coghlan has an article on the Broadcom bnx2x driver and VXLAN offload that may save you some time in this area.
- This post on automating NSX security rules using Splunk (and some custom code) is pretty cool. Granted, it’s a VMware post, so Continue reading
Andrey Sibiryov Reflects on Speaking at DockerCon EU 2015
DockerCon EU 2015 speaker Andrey Sibiryov currently works as a Senior Infrastructure Engineer at Uber Technologies, concentrating on metrics and observability. He was also the lead developer of the Cocaine Cloud platform and led the Cloud Technologies department at Yandex in addition to working on the Helios CI/CD … ContinuedSpeaker Lineup for AnsibleFest London
Featuring speakers from Industrial Light and Magic, Atlassian, Cisco and more!
We're happy to share our speaker lineup for AnsibleFest London on Thursday, February 18th at InterContinental London - The O2. Our one-day user conference brings together hundreds of Ansible users, developers and industry partners to share best-practices, case studies and Ansible news.
With yet another record setting amount of submissions, our engineering team had their work cut out for them. We took each submission, anonymized them to remove any speaker/company/product information, and sent them off to our team of engineers for blind review. We then picked out a well-rounded agenda from the highest scoring talks.
Stay tuned for additional speakers announcements leading up to the event.
Deploying a Mesos Based Visual Effects Studio with Ansible
Aaron Carey, Production Engineer, Industrial Light and Magic
Jim Vanns, Senior Production Engineer, Industrial Light and Magic
Industrial Light and Magic is leveraging Ansible to deploy a Mesos cluster from scratch on multiple cloud platforms, build its application docker images and deploy them as services. This presentation will look at how ILM is using tags to manage services dynamically, and the steps taken to make it work across different cloud providers.
Speaker Lineup for AnsibleFest London
Featuring speakers from Industrial Light and Magic, Atlassian, Cisco and more!
We're happy to share our speaker lineup for AnsibleFest London on Thursday, February 18th at InterContinental London - The O2. Our one-day user conference brings together hundreds of Ansible users, developers and industry partners to share best-practices, case studies and Ansible news.
With yet another record setting amount of submissions, our engineering team had their work cut out for them. We took each submission, anonymized them to remove any speaker/company/product information, and sent them off to our team of engineers for blind review. We then picked out a well-rounded agenda from the highest scoring talks.
Stay tuned for additional speakers announcements leading up to the event.
Deploying a Mesos Based Visual Effects Studio with Ansible
Aaron Carey, Production Engineer, Industrial Light and Magic
Jim Vanns, Senior Production Engineer, Industrial Light and Magic
Industrial Light and Magic is leveraging Ansible to deploy a Mesos cluster from scratch on multiple cloud platforms, build its application docker images and deploy them as services. This presentation will look at how ILM is using tags to manage services dynamically, and the steps taken to make it work across different cloud providers.
Webinar Q&A: Docker Networking
Many enterprises have moved from monolithic to microservices architectures, and are using Docker to help manage these services. With loosely coupled services existing in multiple containers, these containers must be able to communicate with one another, and sometimes even exist … ContinuedUsing Docker with macvlan Interfaces
In this post, I’m going to show you how to use macvlan interfaces with Docker for networking. The use of macvlan interfaces presents an interesting networking configuration for Docker containers that may (depending on your use case) address issues with the standard Linux bridge configuration.
Macvlan interfaces, if you’re unfamiliar with them, are a (somewhat) recent addition to the Linux kernel that enables users to add multiple MAC address-based logical interfaces to a single physical interface. These logical interfaces must reside in the same broadcast domain as the associated physical interface, which means that Docker containers attached to macvlan interfaces also will be in the same broadcast domain as the associated physical interface. In other words, the Docker containers will be on the same network as the host—no IPTables rules, no Linux bridge, just attached directly to the host’s network. This introduces some interesting possibilities (and potential challenges), but I’ll save that discussion for a future post.
Right now, macvlan supported is implemented via an unsupported Docker Network plugin hosted on GitHub. However, I suspect that the macvlan functionality found in this plugin will find its way into the core of Docker Network, and probably sooner rather than later.
You’ll Continue reading
Ansible Galaxy 2.0 Launches
Here’s a quick run-down:
Organizations
There really should be a drum roll playing as you read this, because this feature has been at the top of everyone’s wish list for as long as Galaxy has been around. But here it is… Organizations now have a home in Galaxy. Yes, you can import roles into an organization!
How, you ask? Just click the import button. Really. That’s it. The role will be imported exactly as the repository appears in GitHub. If the role belongs to ‘acmeco’ in GitHub, then it will appear under ‘acmeco’ in Galaxy.
You can import any repositories from GitHub where you are a collaborator or owner. Log in as yourself, and import your roles or your organization’s roles.
Existing roles prior to Galaxy 2.0 have not been changed. To move a role from your username to an organization, delete the role and import it again.
Semantic URLs
Sharing links to your content in Galaxy now makes sense with user-friendly URLs that include GitHub username or organization and Continue reading
Ansible Galaxy 2.0 Launches
Here’s a quick run-down:
Organizations
There really should be a drum roll playing as you read this, because this feature has been at the top of everyone’s wish list for as long as Galaxy has been around. But here it is… Organizations now have a home in Galaxy. Yes, you can import roles into an organization!
How, you ask? Just click the import button. Really. That’s it. The role will be imported exactly as the repository appears in GitHub. If the role belongs to ‘acmeco’ in GitHub, then it will appear under ‘acmeco’ in Galaxy.
You can import any repositories from GitHub where you are a collaborator or owner. Log in as yourself, and import your roles or your organization’s roles.
Existing roles prior to Galaxy 2.0 have not been changed. To move a role from your username to an organization, delete the role and import it again.
Semantic URLs
Sharing links to your content in Galaxy now makes sense with user-friendly URLs that include GitHub username or organization and Continue reading
Recap: Docker at SCALE 14x
SCALE 14x in Pasadena was a blast! With the exciting Unikernels announcement and Docker LA Meetup along with talks and workshops at the conference, there was a lot of buzz around Docker last week. Check out the slides and videos … ContinuedUnikernel Systems Joins Docker
I’m happy to announce today that Unikernel Systems is part of Docker! Unikernels compile your source code into a custom operating system that includes only the functionality required by the application logic. That makes them small, fast, and improves efficiency. … ContinuedLooking Ahead: My 2016 Projects
Almost every year since 2012, I’ve been publishing a list of projects/goals for the upcoming year (here’s the original list for 2012, then 2013, I skipped 2014, and here’s the list for 2015). In this post, I’m going to share with you the list of projects/goals for 2016.
Here’s the list for 2016. For some of the items below, I’m also going to include a stretch goal, something I’ll aim toward but won’t count against myself if I don’t actually attain it.
-
Complete a new book (again). In addition to actually completing the new network automation book I’m writing with Jason Edelman and Matt Oswalt (it’s available now as an Early Access edition), I have another book project lined up that I intend to finish and get published in 2016.
-
Make more open source contributions. I failed this one miserably last year (see last year’s report card), but I am intent on making this one happen. Over time, I expect that this will just be part of who I am, but until then I’m going to explicitly call it out. Since I’m not a programmer (not yet, may never be), these contributions will have Continue reading