This article examines the security risk of exposing MySQL root passwords as plaintext environment variables in Docker containers and presents a practical volume‑replacement method, comparing it with password‑modification approaches while discussing Docker‑layer versus application‑layer considerations.
This article details a year‑long journey of designing, deploying, and operating container‑based development environments using Docker, Apache Mesos, and Kubernetes, covering the challenges of version consistency, rapid environment switching, resource isolation, and the practical solutions and lessons gathered from real‑world production use.
This guide walks you through setting up a dedicated PHP 7 development environment using Laravel's Homestead Vagrant box, configuring Xdebug for step‑by‑step debugging, integrating PHPStorm, and optionally packaging everything into a ready‑to‑run Docker container.
This guide explains why Docker simplifies data‑science environment setup, walks through installing Docker, pulling ready‑made images, running a container with Jupyter Notebook, managing files, installing additional packages, and cleaning up, providing step‑by‑step commands for Windows, macOS, and Linux users.
This tutorial walks you through essential Docker commands, covering how to list images, search and pull images, run containers with various options, inspect logs, stop, remove, restart containers, and export or import container snapshots, all illustrated with clear examples and screenshots.
This guide walks through essential Docker image commands—listing, searching, pulling, tagging, pushing, saving, loading, and deleting images—while explaining the underlying UnionFS layer mechanism and offering practical code examples for effective container image management.
This article provides a comprehensive analysis of Docker 1.2's architecture, detailing each module's function, the internal workflow of key commands, and how Docker's design enables lightweight, secure container virtualization for modern cloud‑native applications.
This article walks through installing and configuring a Kubernetes 0.6.2 cluster on CentOS 7, covering core concepts, environment setup, master and minion configuration, deployment of pods, services, replication controllers, and practical testing of load balancing and scaling.
The article examines how Mango TV leveraged its broadcast assets and a hybrid cloud architecture—combining private and public cloud services, Docker‑based scheduling, Redis‑Cluster, and a custom PaaS called ProjectEru—to support IPTV, OTT, and web content at massive scale while maintaining stability and low operational cost.
This article examines how MySQL containers run with Docker often expose root passwords in clear text through environment variables, detailing where the plaintext is stored, the security risks involved, and practical steps to mitigate the vulnerability.
This article details how Mogujie's private cloud platform, built on OpenStack, Docker, and KVM, was engineered and optimized to handle the massive traffic of the 11.11 shopping festival, covering architectural choices, stability measures, monitoring, disaster recovery, performance tuning, and integration with existing operations systems.
This article examines Docker container root privileges, explains how Linux capabilities limit or grant permissions, compares privileged and non‑privileged modes, and discusses the impact of user namespaces on the ongoing security‑vs‑permission trade‑off in container deployments.
In a lively Q&A session, industry experts discuss the relationship between Docker and IaaS, share best‑practice guidelines for container deployment, examine emerging standards like OCI and CNCF, and forecast the next five years of infrastructure evolution.
This article explains how Docker commit creates images from container changes, its relationship with docker build, the underlying mechanics of read‑write layers, important build considerations such as resource limits and return codes, and provides clear diagrams to illustrate the process.
This article explains the fundamentals of container technology, compares containers with virtual machines, describes how containers are managed and deployed using tools like Docker and CoreOS, and shows how container clusters improve resource utilization and scalability in modern DevOps environments.
This article explains Docker’s layered file‑system concepts, compares AUFS, devicemapper, and other storage drivers, demonstrates mounting with AUFS, shows how read‑only and read‑write layers enable container isolation, and details how image commits create new layers for version control.
This article describes how Docker was employed in a real-world logistics portal project to create a continuous delivery pipeline, integrate Jenkins for CI, standardize container images, automate deployments, and overcome resource constraints, illustrating practical DevOps practices for enterprises.
Voidbox integrates Docker containers with YARN to simplify distributed application development, improve deployment, boost cluster efficiency, and provide fault‑tolerant, DAG‑based execution modes, enabling seamless resource management for Hadoop‑based big data jobs.
The article reports on DockerCon 2015, summarizing expert viewpoints from JD, Weibo, and a startup founder on Docker’s platform direction, extensions, open standards, production readiness, resource management, and its evolving role as an app‑container versus OS‑container technology.
The article summarizes DockerCon 2015, detailing Docker's rapid growth, roadmap for multi‑container management, plugin and networking architectures, security practices, vendor showcases, and the emerging Open Container Project, providing a comprehensive view of Docker's direction and ecosystem.
This guide explains how to use the Ambassador container pattern to enable Docker containers on different hosts to communicate without needing to know each other's IP addresses, illustrated with a step‑by‑step Redis example.
This guide explains how to configure Docker’s daemon to use DaoCloud’s Docker Hub Mirror on CentOS and Ubuntu, enabling dramatically faster image downloads by adding a registry‑mirror option, restarting the service, and verifying the speed with a test pull.
Learn how to connect Docker containers reliably by using container names instead of volatile IP addresses, with step-by-step commands for naming, linking, and verifying connectivity, ensuring network stability even after container or Docker service restarts.
This guide explains how Docker data volumes enable file‑system sharing between containers and the host, covering volume concepts, mounting host directories, and using --volumes‑from to share data across multiple containers, with practical command examples and visual illustrations.
This guide explains Dockerfile fundamentals, breaking down its four sections, providing a complete example, and detailing each core instruction such as FROM, MAINTAINER, RUN, CMD, EXPOSE, ENV, ADD, COPY, ENTRYPOINT, VOLUME, USER, and WORKDIR for building Docker images.
Learn step‑by‑step how to download a CentOS base image, create a Dockerfile that installs and configures OpenSSH, build a new SSH‑enabled image, run the container with port mapping, and verify connectivity via an SSH client, turning a closed container into a remote‑accessible environment.
Docker images serve as read‑only templates for containers, which are lightweight, isolated sandboxes that run applications, while Docker repositories store and share these images, supporting both public and private registries, enabling versioned, incremental management of containerized environments.
Learn how to install Docker on CentOS, start the service, pull the official Ubuntu image, and launch an interactive container to display a simple 'hello world' message, with step‑by‑step commands and screenshots illustrating each stage of the process.
This guide introduces essential Docker commands—from pulling images and managing containers to inspecting and removing them—providing clear examples and best practices for safely operating Docker on any system, including host file configuration, interactive sessions, background execution, and cleanup procedures.
This article examines Docker’s core design principles—lightweight, rapid startup, and limited security—explaining how containers act as isolated service units rather than virtual machines, and why these traits simplify daemonization, privilege management, and configuration, ultimately reshaping server‑side development and operations.
The article recounts the evolution from Douban's App Engine to Mango TV's Nebulium Engine and finally Project Eru, describing how Docker, Redis Cluster, MacVLAN networking, and custom resource scheduling were combined to build a scalable, cloud‑native platform for heterogeneous workloads.
The April 25, 2015 Suning Cloud Computing sharing session in Nanjing gathered around 200 cloud enthusiasts and developers, featuring talks on CloudStack’s open‑source contributions, troubleshooting, Docker adoption, object storage practices, custom network design, and distributed storage systems, followed by Q&A and a group photo.
Docker is an open‑source platform that packages applications into lightweight Linux containers, offering faster startup, isolated environments, and simple image management via Docker Hub, while providing core components like daemon, client, and networking modes, and spawning an ecosystem of tools such as CoreOS, Kubernetes, Deis, and Flynn for scalable deployment.
Meituan’s new Docker‑based automated build system isolates each build in lightweight containers, using YAML‑defined images to compile code, preprocess assets, and package artifacts, which speeds builds, eliminates environment conflicts, and delivers pre‑built packages for faster, more reliable releases across the platform.
Docker, an open-source tool written in Go, packages applications into lightweight Linux containers that share the host kernel, offering near-native performance, a client-server architecture with images and containers, simple bridge networking, essential CLI commands, and an evolving ecosystem including CoreOS, Kubernetes, and PaaS platforms.
This article outlines the requirements, architecture, and implementation considerations for creating a private Docker registry, covering intelligent layer deduplication, a searchable web UI, horizontal scaling, and the underlying Python/Flask stack with various storage back‑ends.
This article introduces Docker, explains its architecture and advantages over virtual machines, compares it with Vagrant, and provides a step‑by‑step tutorial for installing Docker on Fedora, pulling images, running a Node.js/Express app inside a container, and publishing the image to Docker Hub.
Google is developing Docker‑based containers to let software run unchanged across any cloud platform, aiming to eliminate current fragmentation, simplify development, and treat the entire Internet as a single computer, though compatibility hurdles and developer adoption still pose significant challenges.
