The Dockerizing of VMworld 2016

Containers have landed&;in VMs in the enterprise.

Docker’s adoption continues to grow in the enterprise. There have been over 5 billion images pulls, and 60% of users are running Docker in production environments. Today Docker is run everywhere &; from development to production; in the cloud, on virtual machines and bare-metal servers. Enterprise application teams around the world are seeing the value of Docker containers and how they help them containerize their existing applications to save money and better utilize infrastructure resources.
To get the latest with Docker and vms stop by our Docker booth at VMworld. Containers and vms are different but are complementary when it comes to application deployment. With their ability to optimize infrastructure resources, accelerate deployment and provide additional security, Docker containers bring some serious benefits to virtualized workloads within enterprise environments. Additionally, a Dockerized workload gains portability as containers move from VMs or bare metal systems, on prem or in the cloud. That same platform serves as the foundation for your new microservices applications as well.
 
The Docker booth experience you won’t want to miss:
Live demos &8211; Three live  demos will be featured in the booth, including:

Deploy your very first Docker container with a quick hands on tutorial
The latest Docker 1.12 with built in orchestration for intelligent host clustering and application scheduling
Witness how Docker delivers security and manageability at scale for the Enterprise with Docker Datacenter

Onsite Docker wizards from the Docker team to answer questions and provide 1:1 whiteboard session
Docker T-shirts and Swag (while supplies last) &8211; We think Moby Dock is pretty cool and have some great new t-shirts to share with you&8230;but you’re going to have to take a !
To get you prepped for Docker at VMworld 2016 we’ve included a reading list of three blogs. These will teach you about the technical differences between containers and VMs, and how you can leverage Docker containers and vms together to achieve better resource utilization.
Here are the reads:

Containers are not VMs &8211; This blog explains the technical difference between Docker containers and virtual machines
Containers and VMs Together &8211; This blog explains how containers and VMs can be used together to help you optimize your infrastructure.
Containerization for the Virtualization Admin &8211; This blog includes a replay of the Containers for The Virtualization Admin webinar.

Take a look at the image below. On the left side you’ll see containerization without vms. Notice how the Docker engine installs directly on the host OS, and how the three containerized applications running are completely isolated. On the right side you’ll see containerization combined with virtualization. Multiple docker containers can run within VMs. This enables you to better utilize your infrastructure resources.

But it’s more than just Docker containers…
Enterprise needs include security, scalability and application management. To meet these needs our customers have turned to Docker Datacenter, our commercial platform for Containers as a Service. This integrated platform is designed to take containerized applications from development to production.  With everything from built in cluster/application orchestration to integrated end-to-end security, Docker Datacenter provides the enterprise grade controls IT ops need without sacrificing the agility and portability that the business requires in order to outpace competition.
We’re looking forward to seeing you at VMworld 2016 at booth 2362!
 
Additional Docker Resources

Watch How ADP uses Docker Datacenter
Download the Docker Datacenter Datasheet
Learn more about Infrastructure Optimization with Docker

The post The Dockerizing of VMworld 2016 appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Securing the Enterprise Software Supply Chain Using Docker

At we have spent a lot of time discussing runtime security and isolation as a core part of the container architecture. However that is just one aspect of the total software pipeline. Instead of a one time flag or setting, we need to approach security as something that occurs at every stage of the application lifecycle. Organizations must apply security as a core part of the software supply chain where people, code and infrastructure are constantly moving, changing and interacting with each other.
If you consider a physical product like a phone, it’s not enough to think about the security of the end product. Beyond the decision of what kind of theft resistant packaging to use, you might want to know  where the materials are sourced from and how they are assembled, packaged, transported. Additionally it is important to ensure that  the phone is not tampered with or stolen along the way.

The software supply chain maps almost identically to the supply chain for a physical product. You have to be able to identify and trust the raw materials (code, dependencies, packages), assemble them together, ship them by sea, land, or air (network) to a store (repository) so the item (application) can be sold (deployed) to the end customer.
Securing the software supply chain is also also quite similar.  You have to:

Identify all the stuff in your pipeline; from people, code, dependencies, to infrastructure
Ensure a consistent and quality build process
Protect the product while in storage and transit
Guarantee and validate the final product at delivery against a bill of materials

In this post we will explain how Docker’s security features can be used to provide active and continuous security for a software supply chain.
Identity
The foundation of the entire pipeline is built on identity and access. You fundamentally need to know who has access to what assets and can run processes against them. The Docker architecture has a distinct identity concept that underpins the security strategy for securing your software supply chain: cryptographic keys allows the publisher to sign images to ensure proof-of-origin, authenticity, and provenance for Docker images.
Consistent Builds: Good Input = Good Output
Establishing consistent builds allow you to create a repeatable process and get control of your application dependencies and components to make it easier to test for defects and vulnerabilities. When you have a clear understanding of your components, it becomes easier to identify the things that break or are anomalous.

To get consistent builds, you have to ensure you are adding good components:

Evaluate the quality of the dependency, make sure it is the most recent/compatible version and test it with your software
Authenticate that the component comes from a source you expect and was not corrupted or altered in transit
Pin the dependency ensuring subsequent rebuilds are consistent so it is easier to uncover if a defect is caused by a change in code or dependency
Build your image from a trusted, signed base image using Docker Content Trust

Application Signing Seals Your Build
Application signing is the step that effectively “seals” the artifact from the build. By signing the images, you ensure that whomever verifies the signature on the receiving side (docker pull) establishes a secure chain with you (the publisher).  This relationship assures that the images were not altered, added to, or deleted from while stored in a registry or during transit. Additionally, signing indicates that the publisher “approves” that the image you have pulled is good.

Enabling Docker Content Trust on both build machines and the runtime environment sets a policy so that only signed images can be pulled and run on those Docker hosts.  Signed images signal to others in the organization that the publisher (builder) declares the image to be good.
Security Scanning and Gating
Your CI system and developers verify that your build artifact works with the enumerated dependencies, that operations on your application have expected behavior in both the success path and failure path, but have they vetted the dependencies for vulnerabilities?  Have they vetted subcomponents of the dependencies or bundled system libraries for dependencies?  Do they know the licenses for their dependencies? This kind of vetting is almost never done on a regular basis, if at all, since it is a huge overhead on top of already delivering bugfixes and features.

Docker Security Scanning assists in automating the vetting process by scanning the image layers.  Because this happens as the image is pushed to the repo, it acts as a last check or final gate before are deployed into production. Currently available in Docker Cloud and coming soon to Docker Datacenter, Security Scanning creates a Bill of Materials of all of the image’s layers, including packages and versions. This Bill of Materials is used to continuously monitor against a variety of CVE databases.  This ensures that this scanning happens more than once and notifies the system admin or application developer when a new vulnerability is reported for an application package that is in use.
Threshold Signing &; Tying it all Together
One of the strongest security guarantees that comes from signing with Docker Content Trust is the ability to have multiple signers participate in the signing process for a container. To understand this, imagine a simple CI process that moves a container image through the following steps:

Automated CI
Docker Security Scanning
Promotion to Staging
Promotion to Production

This simple 4 step process can add a signature after each stage has been completed and verify the every stage of the CI/CD process has been followed.

Image passes CI? Add a signature!
Docker Security Scanning says the image is free of vulnerabilities? Add a signature!
Build successfully works in staging? Add a signature!
Verify the image against all 3 signatures and deploy to production

Now before a build can be deployed to the production cluster, it can be cryptographically verified that each stage of the CI/CD process has signed off on an image.
Conclusion
The Docker platform provide enterprises the ability to layer in security at each step of the software lifecycle.  From establishing trust with their users, to the infrastructure and code, our model gives both freedom and control to the developer and IT teams. From building secure base images to scanning every image to signing every layer, each feature allows IT to layer in a level of trust and guarantee into the application.  As applications move through their lifecycle, their security profile is actively managed, updated and finally gated before it is finally deployed.

Docker secure beyond containers to your entire app pipeline To Tweet

More Resources:

Read the Container Isolation White Paper
ADP hardens enterprise containers with Docker Datacenter
Try Docker Datacenter free for 30 days
Watch this talk from DockerCon 2016

The post Securing the Enterprise Software Supply Chain Using Docker appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

Getting started with managing VMware with Red Hat CloudForms

The VMworld 2016 US event is approaching and Red Hat will be there to showcase our Management portfolio. This includes Red Hat CloudForms which provides unified management for container, virtual, private, and public cloud infrastructures.
With this in mind, we thought it would be a good time to recap how easy it is to deploy Red Hat CloudForms in a VMware virtualized environment. Deploying CloudForms for VMware is very straightforward and consists of three steps to get to an implemented solution that gives full visibility of your VMware infrastructure.
 
Step One &; Obtain the appliance image and import it in VMware
The latest CloudForms appliance is available for download from the Red Hat Customer Portal. CloudForms is provided as a virtual appliance for Microsoft Azure, Google Cloud Platform, Microsoft Hyper-V, Red Hat Virtualization, Red Hat OpenStack and VMware. In the case of VMware, CloudForms is distributed as an OVA (open virtual appliance) image template. You can find it labelled as ‘CFME VMware Virtual Appliance’ in the download section.
Once downloaded, the appliance file needs to be uploaded onto VMware. There are different ways to proceed but the most common is to use vSphere Client and its ‘Deploy OVF Template’ functionality. The associated wizard prompts for a source location which should point to the OVA template file we downloaded. The deployment configuration options can be left as pre-configured (e.g. memory settings, number of CPUs, etc) but we need to specify the host and cluster where the appliance will be deployed and launched. The resource pool and datastore need to be able to accommodate the appliance and associated virtual disk files. Both thin or thick storage provisioning can be used. Select your network and IP allocation as required. You are now ready to deploy the CloudForms appliance. Click Finish to proceed.
Documentation for this step is available: Installing CloudForms on VMware vSphere
 
Step Two &8211; Configure CloudForms appliance
After few seconds, the appliance appears in the inventory. Before powering it on, we add an additional disk which will be used for the internal VMDB database. A typical size for the disk is 50GB but further guidelines are provided as part of the CloudForms Deployment Planning Guide. We can now power on the VM.
Before accessing the CloudForms UI, we need to ensure the configuration is suitable for our environment. We will use the appliance_console configuration tools which can be accessed from the Bash prompt. Login to the appliance, using SSH or remote console, as the root user and type appliance_console command. A summary of the configuration settings is displayed. Common configuration requires setting the network configuration (e.g. static), a fully qualified hostname, timezone, date & time, as well as configuring a database. Each setting can be configured by typing the associated number and pressing Enter.
 

 
The VMDB database can be internal or external. In our case we want to use the additional disk to configure an internal PostgreSQL database on the appliance. We simply follow the prompt, creating a new key, selecting ‘internal’ database, choosing our additional disk and setting a digit region ID (for example 99 to set this instance as master region database). CloudForms will automatically deploy and configure the database for us.
Once all of the settings are configured, we can start the server by selecting ‘Start Server Processes’. After a few seconds, we are able to navigate to CloudForms from our browser. We can exit the appliance_console tool.
Finally let’s change the default root password with the passwd command.
Documentation for this step is available: Installing CloudForms on VMware vSphere
 
Step Three &8211; Configure vCenter as a provider in CloudForms
The last steps are performed from the CloudForms UI. Login as admin and navigate to ‘Settings > Configuration’.
From there, select our appliance server in the tree and make sure appropriate server roles are enabled in the Server Control section. A single appliance deployment is usually configured with the following roles:
 

 
Next, we ensure Capacity & Utilization (C&U) data is captured by clicking on the CFME Region and selecting the ‘C & U Collection’ tab. Both collection for Clusters and Datastores must be selected.
 

 
We are all set for the basic CloudForms configuration. The last part is to configure a VMware provider. This will allow CloudForms to connect to VMware vCenter and its managed hypervisors.
Navigate to ‘Compute > Infrastructure > Providers’ and select ‘Configuration > Add a New Infrastructure Provider’.
 

 
From there, select the VMware vCenter provider type and fill in the administrative user credentials as required. You can validate the connection using the ‘Validate’ button. The configuration should look like the following:
 

 
Once saved, we can start discovery by selecting ‘Configuration > Refresh Relationships & Power States’ from the provider. This will authenticate to VMware vCenter API and query for all existing entities (e.g. ESX hosts, Clusters, Datastores, VMs, Templates, Snapshots, etc). After a few seconds, CloudForms gets a complete view of the virtual environment and starts monitoring events.
 

 
Documentation for this step is available: Managing Providers
 
Optional Step &8211; Configure SmartState Analysis
SmartState Analysis is a CloudForms capability that allows to inspect the contents of virtual machines, templates, hosts & containers without the need for an agent. The collected data (e.g. users/groups, packages/applications, files/registries) can be used with policies to validate compliance on hosts and guests. This step describes what is required to enable this functionality in CloudForms.
First, we install the VMware VDDK (Virtual Disk Development Kit) on the appliance. The VDDK is used to perform SmartState Analysis on virtual machines running on VMware. We download the installer from VMware Support website and follow their instructions for installation on the appliance via SSH or remote console. Do not forget to run the ‘ldconfig’ command once installed to make sure CloudForms is aware of the library.
SmartState Analysis on a virtual machine requires an analysis profile named ‘default’. We can navigate to  ‘Settings > Configuration’ in the CloudForms UI and simply create a ‘default’ profile by copying the existing ‘sample’ profile and renaming it. The Analysis Profiles can be found in the Settings tree under your CFME Region. The ‘default’ profile is used as a starting point, but it can be further enhanced to capture specific files or registries.
The last configuration requirement is to specify credentials on each ESX host to perform SmartState Analysis. Navigate to ‘Compute > Infrastructure > Hosts / Nodes’ and select the ESX hypervisor(s) your want to configure. Select ‘Configuration > Edit Selected Items’ to open the configuration screen. The ESX credentials are specified under the ‘Default’ tab in the ‘Endpoints’ section. Connections can be verified using the ‘Validate’ button.
The next steps are to perform SmartState Analysis on the ESX hosts, on the attached datastores, as well as on templates and virtual machines (running on not). This can be done manually by clicking ‘Perform SmartState Analysis’ on the ‘Configuration’ button, or automatically by scheduling a the task in ‘Settings > Configuration > Schedules’.
 

 
 
That’s it! We have just deployed a CloudForms appliance, configured it and connected a VMware provider. With SmartState Analysis enabled, we get complete visibility of the infrastructure, including guests details (e.g. installed packages, user and group configuration, file or registry content, etc) as well as capacity and utilization consumption. All the collected data is used to provide insights and reporting on resource utilization, performance optimization, operation management, as well as compliance and governance.
 
Come and see us at VMworld to learn more about Red Hat CloudForms and see all the other advanced virtualization capabilities the platform can offer your VMware virtualization environment.
Quelle: CloudForms

Your Docker Agenda for LinuxCon North America

Hey Dockers! We’re excited to be back at this year in Toronto and hope you are, too! We’ve a got a round-up of many of our awesome speakers, as well as a booth. Come visit us in between the sessions at booth inside “The Hub”. You may even be able to score yourself some Docker swag.
 

Monday:
11:45am &; Curious about the Cloud Native Computing Foundation, Open Container Initiative, Cloud Foundry Foundation and their role in the cloud ecosystem? Docker’s Stephen Walli joins other panelists to deliver So CFF, CNCF, and OCI Walk into a Room (or ‘Demystifying the Confusion: CFF, CNCF, OCI).
3:00pm &8211; Docker Captain Phil Estes will describe and demonstrate the use of the new schema format’s capabilities for multiple platform-specific image references in his More than x86_64: Docker Images for Multi-Platform session.
4:20 pm &8211; Join Docker’s Mike Coleman for Containers, Physical, and virtual, Oh My! insight on what points businesses need to consider as they decide how and where to run their Docker containers.
 
Tuesday:
2:00pm &8211; Docker Captain Phil Estes is back with Runc: The Little (Container) Engine that Could where he will 1) give an overview of runc, 2) explain how to take existing Docker Containers and migrate them to runc bundles and 3) demonstrate how modern container isolation features can be exploited via runc container configuration.
2:00pm &8211; Docker’s Amir Chaudhry will explain Unikernels: When you Should and When you Shouldn’t to help you weigh the pros and cons of using unikernels and help you decide when when it may be appropriate to consider a library OS for your next project.
 
Wednesday:
10:55am &8211; Mike Goelzer and Victor Vieux rom Docker&;s Core team will walk the audience through the new orchestration features added to Docker this summer: secure clustering, declarative service specification, load balancing, service discovery and more in their session From 1 to N Docker Hosts: Getting Started with Docker Clustering.
11:55am &8211; Kendrick Coleman, Docker Captain will talk about Highly Available & Distributed Containers. Learn how to deploy stateless and stateful services all completely load balanced in a Docker 1.12 swarm cluster
2:15pm &8211; Docker’s Paul Novarese will dive into User namespace and Seccomp support in Docker Engine, covering new features that respectively allow users to run Containers as without elevated privileges and provide a method of containment for containers.
4:35pm &8211; Docker’s Riyaz Faizullabhoy will deliver When The Going Gets Tough, Get TUF Going!
The Update Framework (TUF) helps developers secure new or existing software update systems. Join Docker’s Riyaz Faizullabhoy’s When The Going Gets Tough, Get TUF Going! to learn the attacks that TUF protects against and how it actually does so in a usable manner.
 
Thursday:
9:00am &8211; In this all day tutorial, Jerome Petazzoni will teach attendees how to Orchestrate Containers in Production at Scale with Docker Swarm.
In addition to our Docker talks, we have two amazing Docker Toronto meetups lined up just for you. Check them out:
On August 23rd, we’re joining together with Toronto NATS Cloud Native and IoT Group at Lighthouse Labs to feature Diogo Monteiro on “Implementing Microservices with NATS” and our own Riyaz Faizullabhoy on “Docker Security and the Update Framework (TUF)”.
Come August 24th we’ll be at the Mozilla Community Space. Gou Rao, CTO and co-founder of Portworx will be touching on “Radically Simple Storage for Docker”, while Drew Erny from Docker will discuss “High Availability using Docker Swarm”.

Going to linuxcon next week? here is the list of docker sessions we recommend cc&;Click To Tweet

The post Your Docker Agenda for LinuxCon North America appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

5 Minutes with the Docker Captains

Captain is a distinction that Docker awards select members of the community that are both experts in their field and are passionate about sharing their Docker knowledge with others. Captains are Docker ambassadors (not Docker employees) and their genuine love of all things Docker has a huge impact on the Docker community &; whether they are blogging, writing books, speaking, running workshops, creating tutorials and classes, offering support in forums, or organizing and contributing to local events &8211; they make Docker’s mission of democratizing technology possible. Whether you are new to Docker or have been a part of the community for awhile, please don’t hesitate to reach out to Docker Captains with your challenges, questions, speaking requests and more.

This week we are highlighting 3 of our outstanding Captains who made August one filled with Docker learnings and events. Read on to learn more about how they got started, what they love most about Docker, and why Docker.
While Docker does not accept applications for the Captains program, we are always on the lookout to add additional leaders that inspire and educate the Docker community. If you are interested in becoming a Docker Captain, we need to know how you are giving back. Sign up for community.docker.com, share your activities on social media with the Docker, get involved in a local meetup as a speaker or organizer and continue to share your knowledge of Docker in your community.
 
Brian Christner
 
Brian Christner is a Cloud Advocate for Swisscom a Switzerland based Telecom where they are busy deploying a large Docker infrastructure. Brian is passionate about Linux, Docker or anything with a .IO domain name and regularly contributes Dockerarticles and GitHub projects.
 
How has Docker impacted what you do on a daily basis?
3 years ago Docker was still a relatively new concept to my coworkers and customers. Today, I would say that over 50% of the meetings I attend are about Docker, containers or technologies surrounding the Docker ecosystem. We recently integrated Docker image support into our Application Cloud which was a huge success. Docker continues to power our Services platform for Application Cloud where we are busy adding more services all the time like MongoDB, Redis, RabbitMQ and ELK as a service.
As a Docker Captain, how do you share your learnings with the community?
I keep quite busy building new Docker projects, researching, presenting at meetups and publishing articles to https://www.brianchristner.io. I’m also one of the maintainers of the Awesome Docker List which is a collection of Docker resources and projects.  If you have a good project or resource, please submit it so the community can benefit. I also contribute regularly to https://www.reddit.com/r/docker
Are you working on any fun projects?
Currently I’m building a Docker Swarm version of https://github.com/vegasbrianc/prometheus
Who are you when you’re not online?
When I’m not online you can find me in the Swiss Alps Hiking, mountain biking or skiing with my wife and son.
 
Viktor Farcic
 
Viktor Farcic is a Senior Consultant at CloudBees. His big passions are Microservices, Continuous Integration, Delivery and Deployment (CI/CD) and Test-Driven Development (TDD). He wrote The DevOps 2.0 Toolkit: Automating the Continuous Deployment Pipeline with Containerized Microservices and the Test-Driven Java Development books. His random thoughts and tutorials can be found on his blog TechnologyConversations.com.
 
 
How has Docker impacted what you do on a daily basis?
Almost everything I do today involves Docker one way or another. The code I wrote is compiled through containers (since I bought my last laptop, I do not even have most of my build tools installed). Tests I run are inside containers. Services and applications are packaged and deployed as containers. Servers I used for development and testing are substituted with containers running on my laptop. The list can go on and on. In my case, Docker is everywhere.
What is a common technology question you’re asked and the high-level explanation?
How do we put things into containers without changing anything else? My answer is always the same. Docker is not only a tool but a new way to approach many different software development aspects. If we are to leverage Docker’s full potential, many things need to change. Architecture, team structure, processes, and so on.
Share a random story with us.
When I was young, I almost become archeologist. Being in the same profession as Indiana Jones was a much better way to attract girls than being a geek. Eventually, my geeky side won and I went back to computers.
If you could switch your job with anyone else, whose job would you want?
It would be Jérôme Petazzoni. He looks like someone who truly enjoys his work (apart from being great at it).
 
Chanwit Kaewkasi
 
Chanwit is an Asst. Professor at  Suranaree University of Technology and a Docker Swarm Maintainer. Chanwit ported Swarm to Windows and developed a number of Swarm features in the early (v0.1) days. He serves as a Technical Cloud Adviser to many companies in Thailand, where they have been setting up Swarm clusters for their production environments.
 
How has Docker impacted what you do on a daily basis?
I’m teaching and co-running a research laboratory at Suranaree University of Technology (SUT) in Thailand. Basically, Docker is the major part of our, Large Scale Software Engineering, research ecosystem there. We use Docker as the infrastructure layer of every system we built, ranging from low-power storage clusters, bare-metal computing clouds, and upgradable IoT devices at scale.
To make the research progresses, we need to understand how does Docker and its clustering system work. This resulted in the recent 2000-node crowd-sourcing Docker cluster project, SwarmZilla (formerly known as Swarm2K) in July.
As a Docker Captain, how do you share that learning with the community?
Together with members of the Docker community, we did scaling tests on the July Swarm2K cluster and provided feedback to the Docker Engineering team so they could use the data collected from the experiments to improve Docker Engine. I blogged about Docker and the Swarm2K project and other things at http://medium.com/@chanwit.
 
The post 5 Minutes with the Docker Captains appeared first on Docker Blog.
Quelle: https://blog.docker.com/feed/

OpenStack Days Silicon Valley 2016 (The Unlocked Infrastructure Conference) Day 2

The post OpenStack Days Silicon Valley 2016 (The Unlocked Infrastructure Conference) Day 2 appeared first on Mirantis | The Pure Play OpenStack Company.
The second day of  OpenStack Days Silicon Valley continued with conversations about containers and the processes of managing OpenStack. If you missed the event and the live stream, no worries; here are the highlights.
Christian Carrasco &; When OpenStack Fails. (Hint: It’s not the Technology)
Christian, a cloud advisor at Tapjoy, started off the day by sharing what Tapjoy has learned from working with OpenStack. Tapjoy is an SaaS player that from early on set its sights on OpenStack. The company has grown to be the leading player in the mobile app monetization space, with more than two million daily engagements, 270,000 active apps, and 500 million users.
However, interestingly, most of the lessons Christian has learned while working at Tapjoy have less to do with the technology or maturity underpinning OpenStack or the many components necessary to its deployment. Instead, they revolve around the people, process, and organizational choices that are necessary for your OpenStack cloud to succeed.
Christian urged the audience to stop focusing on building a better buggy, and to instead focus on making a better cloud—the next generation of cloud. Christian argued that before we can hyper-converge the cloud, we need interoperability standards, arguing that there were many industries that couldn’t have existed without standards, such as the internet, the automobile industry, and healthcare.
Luke Kanies &8211; DevOps: Myths vs. Realities
Next up was Luke Kanies, the founder and CEO of Puppet. Luke spoke to the audience about the myths that surround DevOps in the enterprise, and argued that we need to leave behind the old way of delivering software to adopt the new world of DevOps practices.
Luke made it clear just why: top performing DevOps teams deploy 200 times more often and recover from failure 24 times faster, he said.
Luke argued that the fears companies have about adopting DevOps practices are due to two beliefs. First, that certain practices just won’t work for an organization, due to factors such as legacy environments, traditional enterprises, or hierarchical organizations. The second belief, he said, is that DevOps practices are simply unworkable when enterprises are subject to a host of external regulatory and compliance requirements.
Luke said that most organizations (97-98 percent) that had fears about introducing DevOps practices had legacy issues, but he argued that ignoring those legacy issues undermined their work.
Luke ended his talk by discussing how to overcome misconceptions by dispelling the most common myths. He said that adopting DevOps practices didn’t have to be all or nothing, they could be simpler than it appeared, and that often the largest returns come from unexpected areas. Ultimately, he argued, you have a choice—do you want to start using DevOps practices, or would you prefer for your competitors to beat you to it?
James Staten &8211; Hybrid Cloud is About the Apps, Not the Infrastructure
James Staten, Microsoft’s Chief Strategist for the Cloud and Enterprise division, was next up on stage to talk about building and deploying true enterprise cloud apps.
James said the key to this is understanding how to blend your environments, as leading enterprise examples of are not exclusively private or exclusively public cloud deployments, but are instead a mixture of both plus multiple public clouds. He said that even Microsoft runs on a hybrid cloud.
James argued that the hybrid cloud is here to stay, and not just because of the legacy code that can’t move anywhere (let alone to the cloud). He pointed to statistics that showed 74 percent of enterprises believe a hybrid cloud will enable business growth, and 82 percent have a hybrid cloud strategy (up from 74 percent a year ago).
He said that organizations used to be worried about application integration, security, and data sovereignty when considering moving apps to a public cloud. However, now organizations say they don’t use public clouds because of needing compute on premises, the Internet of Things, optimization of economics, and wanting to leverage the right resources in the right places.
James ended his session by outlining new hybrid models with many elements, including local resources, public clouds, and SAAS apps and microservices. He said that hybrid isn’t just about location, but the programming languages, devices, and operating systems. He said that the apps we are building need to have compute capability everywhere, because a hybrid cloud is about the apps you are designing.
Alex Williams, Frederic Lardinois, Craig Matsumoto, Mitch Wagner &8211; Open Source and the News Media
The first panel discussion of the day was about Open Source and the News Media, with four technology journalists: Alex Williams (founder of The New Stack), Frederic Lardinois (writer for TechCrunch), Craig Matsumoto (Managing Editor at SDxCentral, and Mitch Wagner (Editor, Enterprise Cloud, for Light Reading).
Key takeaway: People are often confused by messages coming from open source projects and companies that build products and services using them, and acronyms, clever names, and not-for-profit foundations had further contributed to this confusion. Alex said that some people would say that cloud service providers are the greatest threat to open source.
In addition, the panelists discussed the difficulties they had with tracking and learning all of the players and their interests in the Open Source movement.
Kim Bannerman (Director, Advocacy & Community &8211; Office of the CTO, Blue Box), Kenneth Hui (Senior Technical Marketing Manager, Rackspace), Patrick Reilly (Founder and Former CEO of Kismatic) — All Open Source Problems Solved in This Session
Next, Kim Bannerman, Kenneth Hui, and Patrick Reilly, a group of open source veterans, discussed critiques that are common for open source projects and looked at how to address them.
Patrick pointed out that OpenStack really is a community, and to have OpenStack work better you really need to participate. He argued that if you have a complaint, you should follow up and work to fix those issues.
Interestingly, the panel discussed the idea that often criticisms about open source projects, such as their governance, roadmap, and focus, are often just the downsides of advantages open source provides: transparency, inclusiveness, and agility.
Jonathan Donaldson (VP & GM, Software Defined Infrastructure at Intel) — The Future of OpenStack Clouds
Following the two panel discussions, Jonathan Donaldson of Intel and Craig McLuckie from Google talked to us about their collaboration and the future of OpenStack clouds.
Craig said that Google wants to be an enterprise software company, using OpenStack, because the market is too big to ignore. However, Craig said that Google is pretty behind.
During the talk, Jonathan discussed Intel’s Cloud for All initiative. It began last year and Intel began heavily investing in the OpenStack platform in an effort to improve OpenStack for the enterprise and to speed up its rate of adoption around the world. He said that Intel cares so much about a cloud for all because fostering innovation leads to use cases and creates value.
This has led to Intel and the broader community making OpenStack production-ready for enterprise workloads. He said that this has led to new features and significantly lower barriers for businesses that want to deploy private and hybrid clouds.
Randy Bias (VP of Technology, EMC), Sean Roberts (Director Technical Program Management, Walmart Labs), Mike Yang (GM of Quanta Cloud Technology) &8211; The State of OpenStack on Commodity Hardware
The first discussion of the final session was about OpenStack and commodity hardware. In the early days of OpenStack, open cloud software with “open” or commodity hardware was seen as a perfect match.
One question the panel discussed was whether BOMs that mix commodity and proprietary components were the norm, or whether pre-integrated and fully commodity BOMs with components from one manufacturer were more popular.
Randy pointed out that the bottom line is that open or commodity hardware is not free, as it still takes skill to deploy. He argued that while it eventually will be easy to deploy open hardware, it’s not there yet.
Adrian Cockcroft (Battery Ventures Technology Fellow), Boris Renski (Mirantis Co-Founder and CMO) &8211; Infrastructure Software is Dead… Or is it?
Next up Boris Renski from Mirantis and Adrian Cockcroft, a Battery Ventures Technology Fellow, conversed about Boris&; premise that Infrastructure software is dead.
As the two discussed the cloud revolution, Boris argued that the cloud revolution isn’t just about software, but also the delivery model, and that the delivery model for enterprise on-premises software has changed radically. Adrian agreed, adding that traditional hardware and software procurement cycles have collapsed with the cloud.
The two finished their talk by discussing the future of OpenStack. They said its future will not be in making the most “enterprise ready” software, but in building models for delivering customer outcomes that move the needle. Adrian said that he believed that unless you had very specialized or very large scale workloads, there is no competitive advantage to having your own data center.
Michael Miller (President of Strategy, Alliances and Marketing, SUSE) &8211; OpenStack Past, Present and Future
To wrap-up the conference, Michael Miller from SUSE discussed OpenStack’s journey from inception to the present and shared some thoughts on what to expect next, discussing just how quickly enterprise IT is now adopting OpenStack, despite initial apprehensions.
The Last Word
From hallway conversations, to expert commentary, to the swarms of people who were visiting sponsor booths, the OpenStack Days Silicon Valley conference was a great success in getting people talking not about whether OpenStack was a success—that part&8217;s a given—but why. Users were talking about where OpenStack fits in, how it&8217;s still important for enterprise workloads, and how to most efficiently leverage new technologies such as containers.
So here&8217;s our question to you: what do you think we&8217;ll be talking about next year?
 
The post OpenStack Days Silicon Valley 2016 (The Unlocked Infrastructure Conference) Day 2 appeared first on Mirantis | The Pure Play OpenStack Company.
Quelle: Mirantis

DAY 1- OPENSTACK DAYS SILICON VALLEY 2016

The post DAY 1- OPENSTACK DAYS SILICON VALLEY 2016 appeared first on Mirantis | The Pure Play OpenStack Company.
THE UNLOCKED INFRASTRUCTURE CONFERENCE
By Catherine Kim

This year&;s OpenStack Days Silicon Valley, held once again at the Computer History Museum, carried a theme of industry maturity; we&8217;ve gone, as Mirantis CEO and co-Founder Alex Freedland said in his introductory remarks, from wondering if OpenStack was going to catch on to wondering where containers fit into the landscape to talking about production environments of both OpenStack and containers.

Here&8217;s a look at what you missed.
OpenStack: What Next?
OpenStack Foundation Executive Director Jonathan Bryce started the day off talking about the future of OpenStack. He&8217;s been traveling the globe visiting user groups and OpenStack Days events, watching as the technology takes hold in different parts of the world, but his predictions were less about what OpenStack could do and more about what people &; and other projects &8212; could do with it.

Standard frameworks, he said, provided the opportunity for large numbers of developers to create entirely new categories. For example, before the LAMP stack (Linux, Apache, MySQL and PHP) the web was largely made up of static pages, not the dynamic applications we have now. Android and iOS provided common frameworks that enable developers to release millions of apps a year, supplanting purpose-built machinery with a simple smartphone.

To make that happen, though, the community had to do two things: collaborate and scale. Just as the components of LAMP worked together, OpenStack needed to collaborate with other projects, such as Kubernetes, to reach its potential.

As for scaling, Jonathan pointed out that historically, OpenStack has been difficult to set up. It’s important to make success easier to duplicate. While there are incredible success stories out there, with some users using thousands of nodes, those users originally had to go through a lot of iterations and errors. For future developments, Jonathan felt it was important to share information about errors made, so that others can learn from those mistakes, making OpenStack easier to use.

To that end, the OpenStack foundation is continuing to produce content to help with specific needs, such as explaining the business benefits to a manager to more complex topics such as security. He also talked about the need to raise the size of the talent pool, and about the ability for students to take the Certified OpenStack Administrator exam (or others like it) to prove their capabilities in the market.
User talks
One thing that was refreshing about OpenStack Days Silicon Valley was the number of user-given talks. On day one we heard from Walmart, SAP, and AT&T, all of which have significantly transformed their organizations through the use of OpenStack.

OpenStack, Sean Roberts explained, enabled Walmart to make applications that can heal themselves, with failure scenarios that have rules about how they can recover from those failures. In particular, WalmartLabs, the online end of the company, had been making great strides with OpenStack, and in particular with a devops tool called OneOps. The tool makes it possible for them to manage their large number of nodes easily, and he suggested that it might do even better as an independent project under OpenStack.

Markus Riedinger talked about SAP and how it had introduced OpenStack. After making 23 acquisitions in a small period of time, the company was faced with a diverse infrastructure that didn&8217;t lend itself to collaboration. In the last few years it has begun to move towards cloud based work and in 2013 it started to move towards using OpenStack. Now the company has a container-based OpenStack structure based on Puppet, providing a clean separation of control and data, and a fully automatic system with embedded analytics and pre-manufactured PODs for capacity extension.  Their approach means that 1-2 people can take a data center from commissioned bare metal to an operational, scalable Kubernetes cluster running a fully configured OpenStack platform in less than a day.

Greg Stiegler discussed AT&T’s cloud journey, and Open Source and OpenStack at AT&T. He said that the rapid advancements in mobile data services have resulted in numerous benefits, and in turn this has exploded network traffic, with traffic expected to grow 10 times by 2020. To facilitate this growth, AT&T needed a platform, with a goal of remaining as close to trunk as possible to reduce technical debt. The result is the AT&T Integrated Cloud. Sarobh Saxena spoke about it at the OpenStack Summit in Austin earlier this year, but new today was the notion that the community effort should have a unified roadmap leader, with a strategy around containers that needs to be fully developed, and a rock solid core tent.

Greg finished up by saying that while AT&T doesn’t expect perfection, it does believe that OpenStack needs to be continually developed and strengthened. The company is grateful for what the community has always provided, and AT&T has provided an AT&T community team. Greg felt that the moral of his story was that by working together, community collaboration brings solutions at a faster rate, while weeding out mistakes through the experiences of others.
What venture capitalists think about open source
Well that got your attention, didn&8217;t it?  It got the audience&8217;s attention too, as Martin Casado, a General Partner from Adreessen Horowitz, started the talk by saying that current prevailing wisdom is that infrastructure is dead. Why? Partly because people don’t understand what the cloud is, and partly because they think that if the cloud is free, then they think “What else is there to invest in?” Having looked into it he thinks that view is dead wrong, and even believes that newcomers now have an unfair advantage.

Martin  (who in a former life was the creator of the &;software defined&; movement through the co-founding of SDN maker Nicira) said that for this talk, something is “software defined” if you can implement it in software and distribute it in software. For example, in the consumer space, the GPS devices have largely been replaced by software applications like Waze, which can be distributed to millions of phones, which themselves can run diverse apps to replace may functionalities that used to be &8220;wrapped in sheet metal&8221;.

He argued that infrastructure is following the same pattern. It used to be that the only common interface was internet or IP, but that we have seen a maturation of software that allows you to insert core infrastructure as software. Martin said that right now is one of these few times where there’s a market sufficient for building a company with a product that consists entirely of software.  (You still, however, need a sales team, sorry.)

The crux of the matter, though, is that the old model for Open Source has changed. The old model for Open Source companies was being a support company, however, now many companies will use Open Source to access customers and get credibility, but the actual commercial offering they have is a service. Companies such as Github (which didn&8217;t even invent Git) doing this have been enormously successful.
And now a word from our sponsors&;
The morning included several very short &8220;sponsor moments&8221;; two of which included very short tech talks.

The third was Michael Miller of Suse, who was joined onstage by Boris Renski from Mirantis. Together they announced that Mirantis and Suse would be collaborating with each other to provide support for SLES as both hosts and guests in Mirantis OpenStack, which already supports Ubuntu and Oracle Linux.

“At this point, there is only one conspicuous partner missing from this equation,” Renski said. Not to worry, he continued. SUSE has an expanded support offering, so in addition to supporting SUSE hosts, through the new partnership, Mirantis/SUSE customers with CentOS and RHEL hosts can also get support. “Mirantis  is now a one-stop shop for supporting OpenStack.”

Meanwhile,  Sujal Das, SVP of Marketing for Netronome, discussed networking and security and the many industry reports that highlight the importance of zero-trust defense security, with each VM and application needing to be trusted. OpenStack enables centralised control and automation in these types of deployments, but there are some challenges when using OVS and connection tracking, which affect VMs and the efficiency of the server. Ideally, you would like line red performance, but Netronome did some tests that show you do not get that performance with zero-trust security and OpenStack. Netronome is working on enhancements and adaptations to assist with this.

Finally, Evan Mouzakitis of Data Dog gave a great explanation of how you can look at events that happen when you are using OpenStack more closely to see not only what happened, but why. Evan explained that OpenStack uses RabbitMQ by default for message passing, and that once you can listen to that, you can know a lot more about what’s happening under the hood, and a lot more about the events that are occurring. (Hint: go to http://dtdg.co/nova-listen.)
Containers, containers, containers
Of course, the main thrust was OpenStack and containers, and there was no shortage of content along those lines.
Craig McLuckie of Google and Brandon Philips of CoreOS sat down with Sumeet Singh of AppFormix to talk about the future of OpenStack, namely the integration of OpenStack and Kubernetes. Sumeet started this discussion swiftly, asking Craig and Brandon “If we have Kubernetes, why do we need OpenStack?”

Craig said that enterprise needs hybrids of technologies, and that there is a lot of alignment between the two technologies, so  both can be useful for enterprises. Brandon also said that there’s a large incumbent of virtual machine users and they aren’t going to go away.

There’s a lot of integration work, but also a lot of other work to do as a community. Some is the next level of abstraction &; one of those things is rallying together to help software vendors to have a set of common standards for describing packages. Craig also believed that there’s a good opportunity to think about brokering of services and lifecycle management.

Craig also mentioned that he felt that we need to start thinking about how to bring the OpenStack and Cloud Native Computing foundations together and how to create working groups that span the two foundation’s boundaries.

In terms of using the two together, Craig said that from his experience he found that enterprises usually ask what it looks like to use the two. As people start to understand the different capabilities they shift towards it, but it’s very new and so it’s quite speculative right now.

Finally, Florian Leibert of Mesosphere, Andrew Randall of Tigera, Ken Robertson of Apcera, and Amir Levy of Gigaspaces sat down with Jesse Proudman of IBM to discuss &8220;The Next Container Standard&8221;.

Jesse started off the discussion by talking about how rapidly OpenStack has developed, and how in two short years containers have penetrated the marketplace. He questioned why that might be.

Some of the participants suggested that a big reason for their uptake is that containers drive adoption and help with inefficiencies, so customers can easily see how dynamic this field is in providing for their requirements.

A number of participants felt that containers are another wonderful tool in getting the job done and they’ll see more innovations down the road. Florian pointed out that containers were around before Docker, but what docker has done is that it has allowed individuals to use containers on their own websites. Containers are just a part of an evolution.

As far as Cloud Foundry vs Mesos or Kubernetes, most of the participants agreed that standard orchestration has allowed us to take a step higher in the model and that an understanding of the underlying tools can be used together &8212; as long as you use the right models. Amir argued that there is no need to take one specific technology’s corner, and that there will always be new technologies around the corner, but whatever we see today will be different tomorrow.

Of course there&8217;s the question of whether these technologies are complementary or competitive. Florian argued that it came down to religion, and that over time companies will often evolve to be very similar to one another. But if it is a religious decision, then who was making that decision?

The panel agreed that it is often the developers themselves who make decisions, but that eventually companies will choose to deliberately use multiple platforms or they will make a decision to use just one.

Finally, Jesse asked the panel about how the wishes of companies for a strong ROI affects OpenStack, leading to a discussion about the importance of really strong use cases, and showing customers how OpenStack can improve speed or flexibility.
Coming up
So now we head into day 2 of the conference, where it&8217;s all about thought leadership, community, and user stories. Look for commentary from users such as Tapjoy and thought leadership from voices such as James Staten from Microsoft, Luke Kanies of Puppet, and Adrian Cockroft of Battery Ventures.

 

 The post DAY 1- OPENSTACK DAYS SILICON VALLEY 2016 appeared first on Mirantis | The Pure Play OpenStack Company.
Quelle: Mirantis

Your Docker Agenda in August

From webinars to workshops, to conference talks, check out our list of events that are coming up in August!

North America | South America | Europe | Oceania | Asia | Africa | Official Docker Training Courses
 

Check out the @Docker agenda for August! Tons of awesome meetups, webinars & conferences!Click To Tweet

Official Docker Training Courses
View the full schedule of instructor led training courses here! Description of courses are below.

Docker Datacenter Training Series
Introduction to Docker
Docker Administration and Operations
Advanced Docker Operations
Managing Container Services with Universal Control Plane
Deploying Docker Datacenter
User Management and Troubleshooting UCP

North America
 
Aug 3rd: Docker Meetup at Docker HQ &; San Francisco, CA
Come and join us at Docker HQ on Wednesday for our 47th meetup! Ben Bonnefoy , a member of the Docker technical staff, will give an insight into Docker for Mac and Docker for Windows and then Nishant Totla , a software engineer in the core open source team, will give some updates on Docker .12. This will be followed by a talk by Neil Gehani , a Sr. Product Manager at HPE, on in-cluster testing. It will be a fun evening of learning, exchanging ideas and networking with pizza, beer and plenty of Docker stickers for everyone.
RSVP
Aug 3rd: Docker Meetup at Meltmedia &8211; Tempe, AZ
This meetup will focus on Docker for AWS, specifically running distributed apps from localhost to AWS.
RSVP
Aug 4th: Docker Meetup at Rackspace &8211; Austin, TX
A discussion about Docker Tips and Tricks.
RSVP
Aug 9th: Docker Meetup at CA Technologies &8211; Denver, CO
A talk about moving from SaaS to On-Premise with Docker, in particular how Docker made it possible to deploy a SaaS web application into firewalled networks and a journey of orchestrating together micro-service architecture from raw bash script to Replicated.
RSVP
Aug 11th: Docker Meetup at Full Sail Campus &8211; Orlando, FL
Docker Ecosystem and Use Case talks, followed by networking.
RSVP
Aug 11th: Docker Meetup at Braintree &8211; Chicago, IL
Ken Sipe will take the group through a look at the anatomy of a container including control groups (cgroups) and namespaces. Then there will be a discussion about Java&;s memory management and GC characteristics and how JRE characteristics change based on core count.
RSVP
Aug 16th: Docker Meetup at AEEC Innovation Lab &8211; Alexandria, VA
Docker Captain, Phil Estes, will present.
RSVP
Aug 16th: Docker Meetup at Datastax &8211; Santa Clara, CA
Databases, Image Management, In-cluster and Chaos Testing talks by Baruch Sadogursky, Ben Bromhead and Neil Gehani.
RSVP
Aug 16th: Docker Meetup at Impact Hub &8211; Santa Barbara, CA
This meetup will be about leveraging Docker + Compose for a real world dev environment. James Brown from Invoca will discuss how the move to Docker has benefited their development process.
RSVP
Aug 18th: Docker Meetup at CirrusMio &8211; Lexington, KY
Come and learn how others are using Docker! There will be two demos/talks scheduled for this meetup. The first will be about using Jenkins to build containers and the second will be about Docker in production.
RSVP
Aug 18th: Docker Meetup in Minneapolis &8211; Minneapolis, MN
The Container Summit City Series comes to Minneapolis on August 18th to continue the conversation surrounding containers in production! Bryan Cantrell, CTO of Joyent, will be joined in speaking by other expert users from companies that have been running containers in production for years and have experience with what solution stacks work best and what pitfalls to avoid.
RSVP
Aug 22nd: Docker Meetup at Issuetrak &8211; Virginia Beach , VA
Bret Fisher will tell all about DockerCon 2016 and what&8217;s in store for Docker in 1.12.
Aug 22nd &8211; 24th: LinuxCon/ ContainerCon &8211; Toronto, CA
There’s plenty of us at LinuxCon/ ContainerCon this year! Come see us at Booth to meet the Docker speakers and pick up your swag.
Aug 23rd: Docker and NATS Cloud Native Meetup During LinuxCon &8211; Toronto, Canada
The Docker Toronto meetup group and the Toronto NATS Cloud Native and IoT meetup group are joining forces to bring you a mega-meetup during LinuxCon! Riyaz Faizullabhoy from Docker will present on &;The Update Framework&8217; and , Diogo Monteiro will discuss implementing microservices with NATS. Raffi Der Haroutiounian will give an overview of NATS, Docker and Microservices.
Aug 23rd: Docker Meetup at the Iron Yard &8211; Houston, TX
Join us for our next meetup event!
RSVP
Aug 24th: Docker Meetup at CodeGuard &8211; Atlanta, GA
Talk by Eldon Stegall entitled, &8216;Abusing The Bridge: Booting a baremetal cluster from a docker container.&8217;
RSVP
Aug 28th &8211; 31h: VMworld 16 US &8211; Las Vegas, CA
Docker returns to VMworld this year and in Las Vegas! We’re launching our newest and biggest booth yet, so be sure to catch us at Booth . Yes, there will be swag given away.
Aug 31st: Docker Meetup in Salt Lake City &8211; Salt Lake City , UT
Come for a tutorial on new Docker 1.12 features and a review of DockerCon 2016 by Ryan Walls.
RSVP

South America
 
Aug 4th: Docker Meetup at Globant &8211; Córdoba, Argentina
Come for a talk on Docker for AWS. Talks by Florencia Caro, Ruben Dopazo, Carlos Santiago Moreno y Luis Barrueco.
RSVP
Aug 6th: Docker Meetup at Universidad Interamericana de Panamá &8211; Panamá, Panama
An introduction to Docker and Docker Cluster.
RSVP
Aug 9th: Docker Meetup at VivaReal&8211; Sao Paulo, Brazil
RSVP
Aug 13th: Docker Meetup at Microsoft Peru &8211; Lima, Peru
Join for a DockerCon recap.
RSVP
Aug 20th: Docker Meetup at Auditório-Unijorge Campus Comércio &8211; Salvador, Brazil
This is the beginning of the Docker Tour: the Docker Salvador meetup group&8217;s initiate to spread Docker technology among IT students in Salvador. This event will have two lectures for beginners where they can install the tool and learn Docker at ease in a friendly environment.
RSVP
Aug 23rd: Docker Meetup at Auditório Tecnopuc &8211; Porto Alegre, Brazil
A meetup to discuss PHP and Docker.
RSVP

Europe
 
Aug 3rd: Docker HandsOn &8211; Meet-Repeat C#+1 &8211; Hamburg, Germany
Aug 4th: Docker Meetup at SkyScanner Glasgow &8211; Glasgow, United Kingdom
What&8217;s new in Docker Land (@rawkode and @GJTempleton). Guy & I will be walking you through all the latest developments in Docker Land, including Docker Engine 1.12, Docker Compose 1.8, and Docker for Mac and Windows. Also well as these Docker updates, we&8217;ll be providing a quick review of DockerCon 2016 and highlighting some of the best talks for you to watch in your own time.
RSVP
Aug 8th: Docker Talk at Golang Conference &8211; Golang, UK
Speaking Docker Captain Tiffany Jernigan
Aug 9th: IOT RpiCar si ASP.NET Core + Docker &8211; Bucharest, Romania
Aug 10th:  Docker Meetup at KWORKS &8211; Istanbul, Turkey
Dockerizing a Complex Application Stack [w/Istanbul DevOps]
Aug 24th: Docker Meetup at Pipedrive &8211; Tallinn, Estonia
Let&8217;s share and discuss our experience with Docker ecosystem. More details of the content coming up!
RSVP
Aug 24th: Docker Meetup at Elastx &8211; Stockholm, Sweden
Continuously Deploying Containers To Docker Swarm Cluster. Speaker: Viktor Farcic (Docker Captain), & Senior Consultant, CloudBees. Abstract: Many of us have already experimented with Docker &8211; for example, running one of the pre-built images from Docker Hub. It is possible that your team might have recognized the benefits that Docker, in conjunction with experimentation, provides in building microservices and the advantages the technology could bring to development, testing, integration, and, ultimately, production.
RSVP
Aug 25th: Day of Containers &8211; Stockholm &8211; Stockholm, Sweden
Andrey Devyatkin & Viktor Farcic (Docker Captain) will give a talk &;Docker 101.&; If you are new to docker, this session is for you! In this sessions you will learn all the basics of docker and its main components. We will go through the the concept of containers, writing your own docker files, connecting data volumes, and basic orchestration with compose and swarm. Bring your laptops!
Aug 28th: Docker Meetup at Praqma &8211; Copenhagen, Denmark
Continuously Deploying Containers To Docker Swarm Cluster. Speaker: Viktor Farcic, Docker Captain & Senior Consultant, CloudBees. Abstract: Many of us have already experimented with Docker &8211; for example, running one of the pre-built images from Docker Hub. It is possible that your team might have recognized the benefits that Docker, in conjunction with experimentation, provides in building microservices and the advantages the technology could bring to development, testing, integration, and, ultimately, production.
RSVP
Aug 28th: Docker Talk at Agile Peterborough &8211; Peterborough, UK
Speaker Docker Captain Alex Ellis
Aug 28th: Docker Pre- Conference Meetup &8211; Praqma, Copenhagen
Speaker Docker Captain Viktor Farcic
Aug 29th: Docker Meetup at Praqma &8211; Copenhagen, Denmark
Laura Frank (Docker Captain) &8211; &8220;Stop being lazy and test your software.&8221; Testing software is necessary, no matter the size or status of your company. Introducing Docker to your development workflow can help you write and run your testing frameworks more efficiently, so that you can always deliver your best product to your customers and there are no excuses for not writing tests anymore. Jan Krag &8211; &8220;Docker 101.&8221; If you are new to docker, this session is for you! In this sessions you will learn all the basics of docker and its main components.
Viktor Farcic (Docker Captain)

Aug 31st: Docker Meetup at INCUBA &8211; Aarhus, Denmark
Rohde & Schwarz will give a talk about how they use Docker for development and test. HLTV.org will give a talk about how they use Docker to easily deploy microservices as part of their web platform.
RSVP
Aug 31st &8211; Sep 2: Software Circus &8211; Amsterdam, Netherlands
In Amsterdam for Software Circus? So is Docker! Speaking from Docker Ben Firshman

Asia
 
Aug 20th: Docker Meetup at Red Hat India Pvt. Ltd &8211; Bangalore, India
Docker for AWS and Azure &8211; Neependra Khare (Docker Captain), CloudYuga. Service Discovery and Load Balancing with Docker Swarm &8211; Ajeeth S. Raina (Docker Captain), Dell. Docker Application Bundle Overview &8211; Thomas Chacko. Logging as a service using Docker &8211; Manoj Goyal, Cisco. SDN-Like App Delivery Controller using Docker Swarm &8211; Prasad Rao, Avi Networks.
RSVP

Oceania 
Aug 1st: Docker Meetup in Auckland &8211; Auckland, New Zealand
Learn about all the new Docker features and offerings announced at DockerCon16 in Seattle!
RSVP
Aug 8th: Docker Meetup at Commbank &8211; Sydney, Australia
The Big Debate: AWS v Azure vs Google Cloud vs EMC Hybrid Cloud. One of the questions will help bring to light each platform&8217;s integration with the Docker ecosystem.
RSVP

Africa
Aug 6th: Docker Meetup at LakeHub &8211; Kisumu, Kenya
Please join us to learn about all the exciting announcements from DockerCon! Talk 1: What&8217;s New in Docker 1.12, by William Ondenge. In this presentation, William will describe Docker 1.12 new features and help you get your hands on the latest builds of Docker to try them on your own.
RSVP
// <![CDATA[
!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s); js.id=id;js.async=true;js.src="https://a248.e.akamai.net/secure.meetupstatic.com/s/script/2012676015776998360572/api/mu.btns.js?id=65gk05ie6n07ijoq3eq5vchs6f";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","mu-bootjs");
// ]]>
Quelle: https://blog.docker.com/feed/

Unexpected continuous location tracking/energy change in android?

So this is really weird, but I have found what seems to be unexpected continuous location tracking that is causing noticeable battery drain on Android 6.0. Right now, it&;s looking like a change in an automatically updated component, so it is probably due to a closed source service or app. So this is in the style of the work from Vern Paxson&8217;s group on characterizing the observed behavior of third party software.
Has anybody else running Android 6.0 noticed a particularly large increase in power drain, with the GPS icon displayed continuously? I will be running additional tests in the coming days, but wanted to report the unusual behavior and see if other researchers have noticed it as well, or want to investigate it while it lasts.
Background

I&8217;ve been doing power profiling of power drain under various regimes as part of understanding the power/accuracy tradeoffs for my travel pattern tracking project. So I basically install apps with different data collection regimes on multiple test phones of the same make, model and OS version, and carry all of them around for comparison.

From last Thu/Fri/Sat, it looks like the power drain behavior on android has changed dramatically. In particular, it looks like some system component has GPS location turned on continuously, and is draining the battery quite dramatically. See details below.
This is a Nexus 6 running a stock android kernel (v 6.0.1, patch level: March 1, 2016), with no non-OEM apps installed other than mine, and with google maps location history turned off, so this must be due to unexpected background access by either the OS or some stock google app. And since I didn&8217;t update the OS, my guess is that it is a closed source component such as google play services or google maps that is automatically updated/patched.
Details
Here are the graphs for power drain on Sat v/s Tue v/s Thu v/s Fri. I think that the change happened sometime during the day on Thursday, because I know that the GPS icon was off on phones 2 and 4 on Thursday morning and was displayed on Thursday night. It was gone again when I rebooted on Thu, but came back again sometime on Friday. Has been on ever since then, even after rebooting.

Battery levels when tracking was off on the same phone (note the higher drain on Thu and the big change on Fri + Sat)

 Before we compare levels across phones, we need to understand the data collection regimes for each of them.

table#{
border:1px solid !important;
border:none !important;
border-collapse: collapse !important;white-space: pre;}
tablew3t945 td {
border:none !important;
border-top:1px solid !important;
border-bottom:1px solid !important;
}
tablew3t945 td {border-color:bbbbbb !important;}

Phone 1Phone 2Phone 3Phone 4

Sattracking offtracking offtracking offtracking off

Tuehigh, 1 secmed, 1 sechigh, 15-30 secmed, 15-30 sec

Thuhigh, 1 secmed, 1 sechigh, 30 sectracking off

Fri + Sathigh, 1 secmed, 1 sechigh, 30 sectracking off

Next Tuehigh, 1 secmed, 1 sechigh, 30 sectracking off

 

Battery levels across phones (note the abrupt phase change that happens on Fri+Sat, and how the change is staggered across phones, consistent with an automatically updated component)

It is clear that on Tuesday, phones 2 and 3 are fairly close to each other, and both are very different from phone 1. This is consistent with intuition and results before Thursday as well.
On Thursday, the difference between phone 1 and phone 2 is much less pronounced, and the difference between phone 2 and phone 3 is also much larger. On Friday and this Tuesday, there is essentially no difference between high and medium accuracy at the fast sampling rate (phone 1 and phone 2), and no difference between slow sampling and no tracking (phone 3 and phone 4).
I also note that the GPS icon is constantly turned on, even on the phone where the tracking is stopped.

Of course, this could be a bug in my code, but:

I didn&8217;t really change the code between Tue and Thu, and
I don&8217;t get the notifications about activity changes on the phone where it is turned off, and
my app does not show up in the location or battery drain screens

Next steps
In the next few days, I plan to poke around at this some more to see if I can figure out what&8217;s going on. Some thoughts are:

uninstall my app. This is very annoying because then I have to record the battery level manually, but I can suck it up for a day.
uninstall potential culprits &; google play services, maps, ??? It turns out that most of these are system services that cannot be uninstalled, but I can try disabling them.
&;&8211;> your suggestion here <&8212;&8212;&8212; If you have any thoughts on things to try, let me know!

We can do this together
This is complicated because we are trying to treat the phone like a natural phenomenon that we cannot control but can try to understand through observation. I&8217;d love to hear from other members of the community so that we can figure out whether google is really continuously tracking us without letting us know, and killing our battery while doing so.

Quelle: Amplab Berkeley