Container Technologies

<h2 id="container-technologies-for-geode" class="position-relative d-flex align-items-center group"> Container Technologies for Geode <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="container-technologies-for-geode" aria-haspopup="dialog" aria-label="Share link: Container Technologies for Geode"> Share link </button> </h2><div id="headingShareModal" class="heading-share-modal" role="dialog" aria-modal="true" aria-labelledby="headingShareTitle" hidden> <div class="hsm-dialog" role="document"> <div class="hsm-header"> <h2 id="headingShareTitle" class="h6 mb-0 fw-bold">Share this section</h2> <button type="button" class="hsm-close" aria-label="Close"> </button> </div> <div class="hsm-body"> <label for="headingShareInput" class="form-label small text-muted mb-1 text-uppercase fw-bold" style="font-size: 0.7rem; letter-spacing: 0.5px;">Permalink</label> <div class="input-group mb-4 hsm-url-group"> <input id="headingShareInput" type="text" class="form-control font-monospace" readonly aria-readonly="true" style="font-size: 0.85rem;" /> <button class="btn btn-primary hsm-copy" type="button" aria-label="Copy" title="Copy"> </button> </div> <div class="small fw-bold mb-2 text-muted text-uppercase" style="font-size: 0.7rem; letter-spacing: 0.5px;">Share via</div> <div class="hsm-share-grid"> <a id="share-twitter" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> Twitter </a> <a id="share-linkedin" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> LinkedIn </a> <a id="share-facebook" class="btn btn-outline-secondary w-100" target="_blank" rel="noopener noreferrer"> Facebook </a> </div> </div> </div> </div> <style> .heading-share-modal { position: fixed; inset: 0; display: flex; justify-content: center; align-items: center; background: rgba(0, 0, 0, 0.6); z-index: 1050; padding: 1rem; backdrop-filter: blur(4px); -webkit-backdrop-filter: blur(4px); } .heading-share-modal[hidden] { display: none !important; } .hsm-dialog { max-width: 420px; width: 100%; background: var(--bs-body-bg, #fff); color: var(--bs-body-color, #212529); border: 1px solid var(--bs-border-color, rgba(0,0,0,0.1)); border-radius: 1rem; box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.25); overflow: hidden; animation: hsm-fade-in 0.2s ease-out; } @keyframes hsm-fade-in { from { opacity: 0; transform: scale(0.95); } to { opacity: 1; transform: scale(1); } } [data-bs-theme="dark"] .hsm-dialog { background: #1e293b; border-color: rgba(255,255,255,0.1); color: #f8f9fa; } .hsm-header { display: flex; justify-content: space-between; align-items: center; padding: 1rem 1.5rem; border-bottom: 1px solid var(--bs-border-color, rgba(0,0,0,0.1)); background: rgba(0,0,0,0.02); } [data-bs-theme="dark"] .hsm-header { background: rgba(255,255,255,0.02); border-color: rgba(255,255,255,0.1); } .hsm-close { background: transparent; border: none; color: inherit; opacity: 0.5; padding: 0.25rem 0.5rem; border-radius: 0.25rem; font-size: 1.2rem; line-height: 1; transition: opacity 0.2s; } .hsm-close:hover { opacity: 1; } .hsm-body { padding: 1.5rem; } .hsm-url-group { display: flex !important; align-items: stretch; } .hsm-url-group .form-control { flex: 1; min-width: 0; margin: 0; background: var(--bs-secondary-bg, #f8f9fa); border-color: var(--bs-border-color, #dee2e6); border-top-right-radius: 0; border-bottom-right-radius: 0; height: 42px; } .hsm-url-group .btn { flex: 0 0 auto; margin: 0; margin-left: -1px; border-top-left-radius: 0; border-bottom-left-radius: 0; height: 42px; display: flex; align-items: center; justify-content: center; padding: 0 1.25rem; z-index: 2; } [data-bs-theme="dark"] .hsm-url-group .form-control { background: #0f172a; border-color: #334155; color: #e2e8f0; } .hsm-share-grid { display: flex; flex-direction: column; gap: 0.5rem; } .hsm-share-grid .btn { display: flex; align-items: center; justify-content: center; font-size: 0.9rem; padding: 0.6rem; border-color: var(--bs-border-color); width: 100%; } [data-bs-theme="dark"] .hsm-share-grid .btn { color: #e2e8f0; border-color: #475569; } [data-bs-theme="dark"] .hsm-share-grid .btn:hover { background: #334155; border-color: #cbd5e1; } </style> <script> (function(){ const modal = document.getElementById('headingShareModal'); if(!modal) return; const input = modal.querySelector('#headingShareInput'); const copyBtn = modal.querySelector('.hsm-copy'); const twitter = modal.querySelector('#share-twitter'); const linkedin = modal.querySelector('#share-linkedin'); const facebook = modal.querySelector('#share-facebook'); const closeBtn = modal.querySelector('.hsm-close'); let lastFocus=null; let trapBound=false; function buildUrl(id){ return window.location.origin + window.location.pathname + '#' + id; } function isOpen(){ return !modal.hasAttribute('hidden'); } function hydrate(id){ const url=buildUrl(id); input.value=url; const enc=encodeURIComponent(url); const text=encodeURIComponent(document.title); if(twitter) twitter.href=`https://twitter.com/intent/tweet?url=${enc}&text=${text}`; if(linkedin) linkedin.href=`https://www.linkedin.com/sharing/share-offsite/?url=${enc}`; if(facebook) facebook.href=`https://www.facebook.com/sharer/sharer.php?u=${enc}`; } function openModal(id){ lastFocus=document.activeElement; hydrate(id); if(!isOpen()){ modal.removeAttribute('hidden'); } requestAnimationFrame(()=>{ input.focus(); }); trapFocus(); } function closeModal(){ if(!isOpen()) return; modal.setAttribute('hidden',''); if(lastFocus && typeof lastFocus.focus==='function') lastFocus.focus(); } function copyCurrent(){ try{ navigator.clipboard.writeText(input.value).then(()=>feedback(true),()=>fallback()); } catch(e){ fallback(); } } function fallback(){ input.select(); try{ document.execCommand('copy'); feedback(true);}catch(e){ feedback(false);} } function feedback(ok){ if(!copyBtn) return; const icon=copyBtn.querySelector('i'); if(!icon) return; const prev=copyBtn.getAttribute('data-prev')||icon.className; if(!copyBtn.getAttribute('data-prev')) copyBtn.setAttribute('data-prev',prev); icon.className= ok ? 'fa-duotone fa-clipboard-check':'fa-duotone fa-circle-exclamation'; setTimeout(()=>{ icon.className=prev; },1800); } function handleShareClick(e){ e.preventDefault(); const btn=e.currentTarget; const id=btn.getAttribute('data-share-target'); if(id) openModal(id); } function bindShareButtons(){ document.querySelectorAll('.h-share').forEach(btn=>{ if(!btn.dataset.hShareBound){ btn.addEventListener('click', handleShareClick); btn.dataset.hShareBound='1'; } }); } bindShareButtons(); if(document.readyState==='loading'){ document.addEventListener('DOMContentLoaded', bindShareButtons); } else { requestAnimationFrame(bindShareButtons); } document.addEventListener('click', function(e){ const shareBtn=e.target.closest && e.target.closest('.h-share'); if(shareBtn && !shareBtn.dataset.hShareBound){ handleShareClick.call(shareBtn, e); } }, true); document.addEventListener('click', e=>{ if(e.target===modal) closeModal(); if(e.target.closest && e.target.closest('.hsm-close')){ e.preventDefault(); closeModal(); } if(copyBtn && (e.target===copyBtn || (e.target.closest && e.target.closest('.hsm-copy')))) { e.preventDefault(); copyCurrent(); } }); document.addEventListener('keydown', e=>{ if(e.key==='Escape' && isOpen()) closeModal(); }); function trapFocus(){ if(trapBound) return; trapBound=true; modal.addEventListener('keydown', f=>{ if(f.key==='Tab' && isOpen()){ const focusable=[...modal.querySelectorAll('a[href],button,input,textarea,select,[tabindex]:not([tabindex="-1"])')].filter(el=>!el.hasAttribute('disabled')); if(!focusable.length) return; const first=focusable[0]; const last=focusable[focusable.length-1]; if(f.shiftKey && document.activeElement===first){ f.preventDefault(); last.focus(); } else if(!f.shiftKey && document.activeElement===last){ f.preventDefault(); first.focus(); } } }); } if(closeBtn) closeBtn.addEventListener('click', e=>{ e.preventDefault(); closeModal(); }); })(); </script>Container technology has revolutionized application deployment by providing lightweight, portable, and consistent runtime environments. Containers package applications with their dependencies, ensuring identical behavior across development laptops, testing environments, and production clusters. This comprehensive guide explores container technologies for Geode graph database deployments, covering Docker, Podman, security hardening, image optimization, and production-ready patterns. <h3 id="why-containers-matter-for-database-deployments" class="position-relative d-flex align-items-center group"> Why Containers Matter for Database Deployments <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="why-containers-matter-for-database-deployments" aria-haspopup="dialog" aria-label="Share link: Why Containers Matter for Database Deployments"> Share link </button> </h3>Traditional database deployments face numerous challenges: dependency conflicts between applications, environment-specific configuration drift, slow provisioning of new database instances, difficult horizontal scaling, and complex disaster recovery procedures. Containers solve these problems through isolation, portability, and automation. For Geode deployments, containers provide critical advantages including consistent runtime environments eliminating “works on my machine” issues, rapid provisioning of new database instances in seconds rather than hours, simplified horizontal scaling through container orchestration, portable deployments across cloud providers and on-premises infrastructure, simplified dependency management with bundled runtime requirements, and easy version management with immutable container images. Modern container runtimes like Docker and Podman implement the Open Container Initiative (OCI) specifications, ensuring interoperability. Whether you build containers with Docker, run them with Podman, and orchestrate with Kubernetes, the underlying standards enable seamless integration. <h3 id="container-architecture-fundamentals" class="position-relative d-flex align-items-center group"> Container Architecture Fundamentals <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="container-architecture-fundamentals" aria-haspopup="dialog" aria-label="Share link: Container Architecture Fundamentals"> Share link </button> </h3>Understanding container architecture helps you build efficient, secure Geode deployments. Container Images: Immutable templates containing the application, runtime dependencies, libraries, and configuration. Images consist of layered filesystems—each Dockerfile instruction creates a new layer. Layers are cached and shared between images to minimize storage and transfer time. Container Instances: Running processes isolated from the host system through Linux namespaces (PID, network, mount, UTS, IPC) and cgroups (CPU, memory, I/O limits). Each container instance is created from an image and can have unique runtime configuration. Container Registries: Centralized repositories for storing and distributing container images. Public registries like Docker Hub provide pre-built images. Private registries (Harbor, AWS ECR, Azure ACR, Google GCR) secure proprietary images with access controls and vulnerability scanning. Storage Volumes: Persistent data storage that survives container restarts and recreation. Volumes decouple data from container lifecycle, enabling database persistence. Bind mounts allow containers to access host filesystem paths for configuration files. Networking: Containers communicate through virtual networks. Bridge networks connect containers on the same host. Overlay networks enable multi-host container communication. Port mapping exposes container services to external clients. <h3 id="docker-deployment" class="position-relative d-flex align-items-center group"> Docker Deployment <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="docker-deployment" aria-haspopup="dialog" aria-label="Share link: Docker Deployment"> Share link </button> </h3> <h4 id="official-geode-image" class="position-relative d-flex align-items-center group"> Official Geode Image <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="official-geode-image" aria-haspopup="dialog" aria-label="Share link: Official Geode Image"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Pull latest image docker pull codepros/geode:latest # Pull specific version docker pull codepros/geode:v0.2.18 # Run container docker run -d \ --name geode \ -p 3141:3141 \ -v geode-data:/var/lib/geode \ codepros/geode:v0.2.18 </code></pre></div> <h4 id="geode-dockerfile" class="position-relative d-flex align-items-center group"> Geode Dockerfile <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="geode-dockerfile" aria-haspopup="dialog" aria-label="Share link: Geode Dockerfile"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-dockerfile" data-lang="dockerfile">FROM debian:bookworm-slim # Install runtime dependencies RUN apt-get update && apt-get install -y \ ca-certificates \ && rm -rf /var/lib/apt/lists/* # Create geode user RUN useradd -r -s /bin/false geode # Copy binary COPY --chown=geode:geode geode /usr/local/bin/geode RUN chmod +x /usr/local/bin/geode # Create data directory RUN mkdir -p /var/lib/geode && chown geode:geode /var/lib/geode USER geode EXPOSE 3141/udp 9090/tcp VOLUME ["/var/lib/geode"] HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \ CMD ["/usr/local/bin/geode", "ping"] || exit 1 ENTRYPOINT ["/usr/local/bin/geode"] CMD ["serve", "--listen", "0.0.0.0:3141", "--data", "/var/lib/geode"] </code></pre></div> <h4 id="docker-compose" class="position-relative d-flex align-items-center group"> Docker Compose <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="docker-compose" aria-haspopup="dialog" aria-label="Share link: Docker Compose"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml">version: '3.8' services: geode: image: codepros/geode:v0.2.18 container_name: geode ports: - "3141:3141" - "9090:9090" volumes: - geode-data:/var/lib/geode - ./geode.yaml:/etc/geode/geode.yaml:ro environment: - GEODE_LOG_LEVEL=info - GEODE_MAX_CONNECTIONS=1000 restart: unless-stopped healthcheck: test: ["/usr/local/bin/geode", "ping"] interval: 30s timeout: 10s retries: 3 start_period: 40s networks: - geode-network volumes: geode-data: driver: local networks: geode-network: driver: bridge </code></pre></div> <h3 id="container-optimization" class="position-relative d-flex align-items-center group"> Container Optimization <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="container-optimization" aria-haspopup="dialog" aria-label="Share link: Container Optimization"> Share link </button> </h3> <h4 id="multi-stage-build" class="position-relative d-flex align-items-center group"> Multi-Stage Build <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="multi-stage-build" aria-haspopup="dialog" aria-label="Share link: Multi-Stage Build"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-dockerfile" data-lang="dockerfile"># Build stage FROM golang:1.24-alpine AS builder WORKDIR /build COPY geode/ . RUN zig build -Doptimize=ReleaseSafe # Runtime stage FROM debian:bookworm-slim RUN apt-get update && apt-get install -y \ ca-certificates \ && rm -rf /var/lib/apt/lists/* COPY --from=builder /build/zig-out/bin/geode /usr/local/bin/geode RUN useradd -r -s /bin/false geode && \ mkdir -p /var/lib/geode && \ chown geode:geode /var/lib/geode USER geode EXPOSE 3141/udp 9090/tcp VOLUME ["/var/lib/geode"] ENTRYPOINT ["/usr/local/bin/geode"] CMD ["serve", "--listen", "0.0.0.0:3141", "--data", "/var/lib/geode"] </code></pre></div> <h4 id="image-size-optimization" class="position-relative d-flex align-items-center group"> Image Size Optimization <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="image-size-optimization" aria-haspopup="dialog" aria-label="Share link: Image Size Optimization"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-dockerfile" data-lang="dockerfile"># Use distroless for minimal image FROM gcr.io/distroless/base-debian12 COPY --chown=nonroot:nonroot geode /usr/local/bin/geode COPY --chown=nonroot:nonroot --chmod=755 /data /var/lib/geode USER nonroot EXPOSE 3141/udp 9090/tcp ENTRYPOINT ["/usr/local/bin/geode"] CMD ["serve", "--listen", "0.0.0.0:3141"] </code></pre></div> <h3 id="security-best-practices" class="position-relative d-flex align-items-center group"> Security Best Practices <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="security-best-practices" aria-haspopup="dialog" aria-label="Share link: Security Best Practices"> Share link </button> </h3> <h4 id="non-root-user" class="position-relative d-flex align-items-center group"> Non-Root User <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="non-root-user" aria-haspopup="dialog" aria-label="Share link: Non-Root User"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-dockerfile" data-lang="dockerfile"># Always run as non-root USER geode # Or use numeric UID USER 1000:1000 </code></pre></div> <h4 id="read-only-filesystem" class="position-relative d-flex align-items-center group"> Read-Only Filesystem <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="read-only-filesystem" aria-haspopup="dialog" aria-label="Share link: Read-Only Filesystem"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">docker run -d \ --name geode \ --read-only \ --tmpfs /tmp:rw,noexec,nosuid,size=100m \ -v geode-data:/var/lib/geode \ codepros/geode:v0.2.18 </code></pre></div> <h4 id="resource-limits" class="position-relative d-flex align-items-center group"> Resource Limits <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="resource-limits" aria-haspopup="dialog" aria-label="Share link: Resource Limits"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">docker run -d \ --name geode \ --memory=16g \ --memory-swap=16g \ --cpus=8 \ --pids-limit=4096 \ codepros/geode:v0.2.18 </code></pre></div> <h3 id="advanced-container-patterns" class="position-relative d-flex align-items-center group"> Advanced Container Patterns <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="advanced-container-patterns" aria-haspopup="dialog" aria-label="Share link: Advanced Container Patterns"> Share link </button> </h3> <h4 id="sidecar-pattern" class="position-relative d-flex align-items-center group"> Sidecar Pattern <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="sidecar-pattern" aria-haspopup="dialog" aria-label="Share link: Sidecar Pattern"> Share link </button> </h4>Deploy helper containers alongside Geode for additional functionality: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"># docker-compose with sidecars version: '3.8' services: geode: image: codepros/geode:v0.2.18 container_name: geode-main volumes: - geode-data:/var/lib/geode prometheus-exporter: image: prom/node-exporter container_name: geode-exporter network_mode: "service:geode" depends_on: - geode log-shipper: image: fluent/fluent-bit container_name: geode-logs volumes: - /var/log/geode:/var/log/geode:ro depends_on: - geode </code></pre></div> <h4 id="init-containers" class="position-relative d-flex align-items-center group"> Init Containers <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="init-containers" aria-haspopup="dialog" aria-label="Share link: Init Containers"> Share link </button> </h4>Run initialization tasks before starting Geode: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-dockerfile" data-lang="dockerfile"># init-container.dockerfile FROM alpine:latest RUN apk add --no-cache aws-cli COPY init-geode.sh /init-geode.sh RUN chmod +x /init-geode.sh ENTRYPOINT ["/init-geode.sh"] </code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># init-geode.sh #!/bin/sh set -e # Download configuration from S3 aws s3 cp s3://config-bucket/geode.yaml /config/geode.yaml # Initialize data directory mkdir -p /var/lib/geode chown -R geode:geode /var/lib/geode # Check connectivity ping -c 3 backup-server.example.com </code></pre></div> <h3 id="container-registry-management" class="position-relative d-flex align-items-center group"> Container Registry Management <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="container-registry-management" aria-haspopup="dialog" aria-label="Share link: Container Registry Management"> Share link </button> </h3> <h4 id="private-registry-setup" class="position-relative d-flex align-items-center group"> Private Registry Setup <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="private-registry-setup" aria-haspopup="dialog" aria-label="Share link: Private Registry Setup"> Share link </button> </h4>Deploy a private registry for proprietary Geode images: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"># registry docker-compose.yml version: '3.8' services: registry: image: registry:2 ports: - "5000:5000" environment: REGISTRY_STORAGE_S3_ACCESSKEY: ${AWS_ACCESS_KEY_ID} REGISTRY_STORAGE_S3_SECRETKEY: ${AWS_SECRET_ACCESS_KEY} REGISTRY_STORAGE_S3_BUCKET: my-docker-registry REGISTRY_STORAGE_S3_REGION: us-east-1 volumes: - ./auth:/auth - ./certs:/certs command: - /bin/sh - -c - | cat > /etc/docker/registry/config.yml <<EOF version: 0.1 storage: s3: accesskey: ${AWS_ACCESS_KEY_ID} secretkey: ${AWS_SECRET_ACCESS_KEY} region: us-east-1 bucket: my-docker-registry auth: htpasswd: realm: Registry Realm path: /auth/htpasswd http: addr: :5000 tls: certificate: /certs/domain.crt key: /certs/domain.key EOF /entrypoint.sh /etc/docker/registry/config.yml </code></pre></div> <h4 id="image-scanning" class="position-relative d-flex align-items-center group"> Image Scanning <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="image-scanning" aria-haspopup="dialog" aria-label="Share link: Image Scanning"> Share link </button> </h4>Scan images for vulnerabilities before deployment: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"># Scan with Trivy docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock \ aquasec/trivy image codepros/geode:v0.2.18 # Scan with Clair docker run -d --name clair-db postgres:13 docker run -d --name clair \ --link clair-db:postgres \ quay.io/coreos/clair:latest clairctl analyze codepros/geode:v0.2.18 </code></pre></div> <h3 id="production-deployment-patterns" class="position-relative d-flex align-items-center group"> Production Deployment Patterns <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="production-deployment-patterns" aria-haspopup="dialog" aria-label="Share link: Production Deployment Patterns"> Share link </button> </h3> <h4 id="high-availability-configuration" class="position-relative d-flex align-items-center group"> High-Availability Configuration <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="high-availability-configuration" aria-haspopup="dialog" aria-label="Share link: High-Availability Configuration"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"># ha-deployment.yml version: '3.8' services: geode-1: image: codepros/geode:v0.2.18 hostname: geode-1 networks: - geode-cluster volumes: - geode-data-1:/var/lib/geode deploy: replicas: 1 placement: constraints: - node.labels.zone == us-east-1a geode-2: image: codepros/geode:v0.2.18 hostname: geode-2 networks: - geode-cluster volumes: - geode-data-2:/var/lib/geode deploy: replicas: 1 placement: constraints: - node.labels.zone == us-east-1b geode-3: image: codepros/geode:v0.2.18 hostname: geode-3 networks: - geode-cluster volumes: - geode-data-3:/var/lib/geode deploy: replicas: 1 placement: constraints: - node.labels.zone == us-east-1c haproxy: image: haproxy:2.8 ports: - "3141:3141" volumes: - ./haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro networks: - geode-cluster depends_on: - geode-1 - geode-2 - geode-3 networks: geode-cluster: driver: overlay attachable: true volumes: geode-data-1: geode-data-2: geode-data-3: </code></pre></div> <h4 id="blue-green-deployment" class="position-relative d-flex align-items-center group"> Blue-Green Deployment <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="blue-green-deployment" aria-haspopup="dialog" aria-label="Share link: Blue-Green Deployment"> Share link </button> </h4>Implement zero-downtime updates: <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash">#!/bin/bash # blue-green-deploy.sh # Deploy green environment docker-compose -f docker-compose.green.yml up -d # Wait for health checks for i in {1..30}; do if docker exec geode-green geode ping; then echo "Green environment healthy" break fi sleep 10 done # Switch traffic to green docker exec haproxy sh -c \ "echo 'set server geode-backend/blue-1 state maint' | socat stdio /var/run/haproxy.sock" docker exec haproxy sh -c \ "echo 'set server geode-backend/green-1 state ready' | socat stdio /var/run/haproxy.sock" # Verify green is receiving traffic sleep 60 if docker logs geode-green | grep -q "Queries processed"; then echo "Green deployment successful" # Stop blue environment docker-compose -f docker-compose.blue.yml down else echo "Green deployment failed, rolling back" # Rollback to blue docker exec haproxy sh -c \ "echo 'set server geode-backend/blue-1 state ready' | socat stdio /var/run/haproxy.sock" docker exec haproxy sh -c \ "echo 'set server geode-backend/green-1 state maint' | socat stdio /var/run/haproxy.sock" fi </code></pre></div> <h3 id="monitoring-and-observability" class="position-relative d-flex align-items-center group"> Monitoring and Observability <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="monitoring-and-observability" aria-haspopup="dialog" aria-label="Share link: Monitoring and Observability"> Share link </button> </h3> <h4 id="container-metrics-collection" class="position-relative d-flex align-items-center group"> Container Metrics Collection <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="container-metrics-collection" aria-haspopup="dialog" aria-label="Share link: Container Metrics Collection"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"># monitoring docker-compose.yml version: '3.8' services: prometheus: image: prom/prometheus:latest volumes: - ./prometheus.yml:/etc/prometheus/prometheus.yml - prometheus-data:/prometheus ports: - "9090:9090" command: - '--config.file=/etc/prometheus/prometheus.yml' - '--storage.tsdb.path=/prometheus' cadvisor: image: gcr.io/cadvisor/cadvisor:latest volumes: - /:/rootfs:ro - /var/run:/var/run:ro - /sys:/sys:ro - /var/lib/docker/:/var/lib/docker:ro ports: - "8080:8080" grafana: image: grafana/grafana:latest ports: - "3000:3000" environment: - GF_SECURITY_ADMIN_PASSWORD=admin volumes: - grafana-data:/var/lib/grafana - ./grafana/dashboards:/etc/grafana/provisioning/dashboards </code></pre></div> <h4 id="log-aggregation" class="position-relative d-flex align-items-center group"> Log Aggregation <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="log-aggregation" aria-haspopup="dialog" aria-label="Share link: Log Aggregation"> Share link </button> </h4><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"># logging stack services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:8.11.0 environment: - discovery.type=single-node - xpack.security.enabled=false volumes: - elasticsearch-data:/usr/share/elasticsearch/data logstash: image: docker.elastic.co/logstash/logstash:8.11.0 volumes: - ./logstash.conf:/usr/share/logstash/pipeline/logstash.conf depends_on: - elasticsearch kibana: image: docker.elastic.co/kibana/kibana:8.11.0 ports: - "5601:5601" environment: ELASTICSEARCH_HOSTS: http://elasticsearch:9200 depends_on: - elasticsearch filebeat: image: docker.elastic.co/beats/filebeat:8.11.0 user: root volumes: - ./filebeat.yml:/usr/share/filebeat/filebeat.yml:ro - /var/lib/docker/containers:/var/lib/docker/containers:ro - /var/run/docker.sock:/var/run/docker.sock:ro depends_on: - elasticsearch </code></pre></div> <h3 id="troubleshooting-container-issues" class="position-relative d-flex align-items-center group"> Troubleshooting Container Issues <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="troubleshooting-container-issues" aria-haspopup="dialog" aria-label="Share link: Troubleshooting Container Issues"> Share link </button> </h3>Container Won’t Start: Check logs with <code>docker logs <container></code>. Verify image exists and is accessible. Ensure required ports aren’t already in use. Check resource limits (memory, CPU). Performance Degradation: Monitor container resource usage with <code>docker stats</code>. Check for CPU throttling or memory pressure. Verify disk I/O isn’t bottlenecked. Review network latency between containers. Networking Issues: Verify containers are on the same network with <code>docker network inspect</code>. Check firewall rules and security groups. Test connectivity with <code>docker exec <container> ping <target></code>. Review DNS resolution. Storage Problems: Check volume mounts with <code>docker inspect <container></code>. Verify filesystem permissions. Monitor disk usage with <code>docker system df</code>. Clean unused resources with <code>docker system prune</code>. Security Vulnerabilities: Regularly scan images for CVEs. Update base images and dependencies. Review and minimize container privileges. Implement image signing and verification. <h3 id="container-best-practices-summary" class="position-relative d-flex align-items-center group"> Container Best Practices Summary <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="container-best-practices-summary" aria-haspopup="dialog" aria-label="Share link: Container Best Practices Summary"> Share link </button> </h3><ol> <li>Use official base images from trusted sources</li> <li>Implement multi-stage builds to minimize image size</li> <li>Run as non-root user for security</li> <li>Set resource limits to prevent resource exhaustion</li> <li>Use health checks for automatic failure detection</li> <li>Implement logging to stdout/stderr for centralized aggregation</li> <li>Version images with semantic versioning tags</li> <li>Scan for vulnerabilities before deployment</li> <li>Use secrets management for sensitive configuration</li> <li>Implement graceful shutdown with SIGTERM handling</li> </ol> <h3 id="related-topics" class="position-relative d-flex align-items-center group"> Related Topics <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="related-topics" aria-haspopup="dialog" aria-label="Share link: Related Topics"> Share link </button> </h3><ul> <li><a href="/tags/orchestration/" >Orchestration</a> : Kubernetes orchestration</li> <li><a href="/tags/deployment/" >Deployment</a> : Deployment strategies</li> <li><a href="/tags/cloud/" >Cloud</a> : Cloud deployments</li> <li><a href="/tags/infrastructure/" >Infrastructure</a> : Infrastructure as Code</li> <li><a href="/tags/monitoring/" >Monitoring</a> : Application monitoring</li> <li><a href="/tags/security/" >Security</a> : Security best practices</li> <li><a href="/tags/ci-cd/" >CI/CD</a> : Continuous integration and deployment</li> </ul> <h3 id="further-reading" class="position-relative d-flex align-items-center group"> Further Reading <button type="button" class="h-share btn btn-link p-0 text-decoration-none link-secondary opacity-50 hover-opacity-100 transition-all ms-1" data-share-target="further-reading" aria-haspopup="dialog" aria-label="Share link: Further Reading"> Share link </button> </h3><ul> <li>Container Guide: <code>/docs/deployment/containers/</code></li> <li>Docker Best Practices: <code>/docs/deployment/docker-best-practices/</code></li> <li>Security Hardening: <code>/docs/security/container-security/</code></li> <li>Image Optimization: <code>/docs/optimization/container-images/</code></li> <li>Registry Management: <code>/docs/deployment/container-registries/</code></li> <li>Production Patterns: <code>/docs/deployment/container-patterns/</code></li> </ul>

Popular

Related Articles