Media

README.md

@@ -0,0 +1,88 @@
+## Uvod
+
+- Docker je platforma za development, delivery i izvršavanje aplikacija
+- Docker omogućava da se aplikacija izolira u repetativnoj okolini i odvoji od infrastrukture
+
+[Features of Docker](https://www.geeksforgeeks.org/features-of-docker/):
+- Open-source platform
+- An Easy, lightweight, and consistent way of  delivery of applications
+- Fast and efficient development life cycle
+- Segregation of duties
+- Service-oriented architecture
+- Security
+- Scalability
+- Reduction in size
+- Image management
+- Networking
+- Volume management
+
+
+## Struktura
+
+- Dockerfile
+- image
+- container registry
+	- lokalni
+	- dockerhub
+	- AWS ECR
+- container
+
+
+## Dockerfile
+
+- base image
+	- odabir najmanjeg funkcionalnog
+	- debian prije ubuntua
+	- debian-slim prije debiana
+	- alpine
+	- from scratch
+- env varijable
+
+
+## Docker image
+
+- single stage build
+- multistage build
+
+
+## Docker container
+
+run, publish port 3000:
+```
+docker run --name api-server-3000 --publish 3000:3000 --env CONTAINER_NAME="Awesome API server on port 3000" -d api-server
+```
+
+run, publish port 3001:
+```
+docker run --name api-server-3001 --publish 3001:3000 --env CONTAINER_NAME="Awesome API server on port 3001" -d api-server
+```
+run, publish port 3002:
+```
+docker run --name api-server-3002 --publish 3002:3000 --env CONTAINER_NAME="Awesome API server on port 3002" -d api-server
+```
+
+# Media
+
+## Docker vs VM
+
+![Docker vs VM](media/docker-vs-vm.svg)
+
+## Docker elements
+
+![Docker elements](media/docker-elements.svg)
+
+## Dockerfile layers
+
+![Dockerfile layers](media/dockerfile-layers.svg)
+
+## Port publishing
+
+![Port publishing](media/port-publishing.svg)
+
+## Horizontal scaling
+
+![Horizontal scaling](media/horizontal-scaling.svg)
+
+## Volumes
+
+![Volumes](media/volumes.png)

api-server/Dockerfile

@@ -1,5 +1,10 @@
 FROM python:3.11-slim-bookworm
 
+# uid to run application
+ARG USER=1000
+# gid to run application
+ARG USER_GROUP=1000
+
 # set virtual env path
 ENV \
     PATH=/venv/bin:$PATH
@@ -13,11 +18,15 @@ WORKDIR /app
 # copy app files to /app directory
 COPY ./app .
 
-# install dependencies
+# set permissions to log directory and install dependencies
 RUN \
+    chown -R ${USER}:${USER_GROUP} /app/log && \
     python -m venv /venv && \
     pip install -r requirements.txt
 
+# set user to run application
+USER ${USER}:${USER_GROUP}
+
 # start shell script when container starts
 ENTRYPOINT ["/app/run.sh"]
 

api-server/Makefile

@@ -1,13 +1,14 @@
 IMAGE_NAME=api-server
 CONTAINER_NAME=api-server
 
+
 build: clean
 	@docker build \
 		--progress=plain \
-		--no-cache \
 		--tag $(IMAGE_NAME) \
 		.
 
+
 run:
 	@docker run \
 		--name $(IMAGE_NAME) \
@@ -16,6 +17,7 @@ run:
 		--detach \
 		$(CONTAINER_NAME)
 
+
 run-mount-log:
 	@docker run \
 		--name $(IMAGE_NAME) \

multistage-build/Dockerfile

@@ -1,5 +1,10 @@
 FROM python:3.11-slim-bookworm
 
+# uid to run application
+ARG USER=1000
+# gid to run application
+ARG USER_GROUP=1000
+
 # set virtual env path
 ENV \
     PATH=/venv/bin:$PATH
@@ -19,11 +24,15 @@ RUN \
 # copy app files to /app directory
 COPY ./app .
 
-# install dependencies && cleanup
+# set permissions to log directory and install dependencies && cleanup
 RUN \
+    chown -R ${USER}:${USER_GROUP} /app/log && \
     pip install -r requirements.txt && \
     apt purge --auto-remove -y
 
+# set user to run application
+USER ${USER}:${USER_GROUP}
+
 # start shell script when container starts
 ENTRYPOINT ["/app/run.sh"]
 

multistage-build/Dockerfile.multistage

@@ -23,6 +23,11 @@ RUN \
 
 FROM python:3.11-slim-bookworm
 
+# uid to run application
+ARG USER=1000
+# gid to run application
+ARG USER_GROUP=1000
+
 # set virtual env path
 ENV \
     PATH=/venv/bin:$PATH
@@ -38,11 +43,11 @@ COPY --from=install-dependencies /venv /venv
 # copy app files to /app directory
 COPY ./app .
 
-RUN ls -alF /
-RUN ls -alF /venv
-RUN ls -alF /venv/bin
-RUN ls -alF /app
+# set permissions to log directory
+RUN chown -R ${USER}:${USER_GROUP} /app/log
 
+# set user to run application
+USER ${USER}:${USER_GROUP}
 
 # start shell script when container starts
 ENTRYPOINT ["/app/run.sh"]

multistage-build/Makefile

@@ -1,12 +1,14 @@
 IMAGE_NAME=api-server-ms
 CONTAINER_NAME=api-server-ms
 
+
 build: clean
 	@docker build \
 		--progress=plain \
 		--tag $(IMAGE_NAME) \
 		.
 
+
 build-multistage: clean
 	@docker build \
 		--progress=plain \
@@ -14,14 +16,17 @@ build-multistage: clean
 		--file Dockerfile.multistage \
 		.
 
+
 run:
 	@docker run \
 		--name $(IMAGE_NAME) \
 		--publish 3000:3000 \
 		--env CONTAINER_NAME="Awesome API server" \
+		--volume /var/log/api-server:/app/log \
 		--detach \
 		$(CONTAINER_NAME)
 
+
 clean:
 	- @docker stop $(CONTAINER_NAME)
 	- @docker rm $(CONTAINER_NAME)