DevOps and Docker Talk: Recent Episodes
Bret Fisher
Interviews and Q&A from my weekly YouTube Live show. Topics cover Docker and container tools like Kubernetes, Swarm, Cloud Native development, Cloud tech, DevOps, GitOps, DevSecOps, and the full software lifecycle supply chain. Full YouTube shows and more info available at https://podcast.bretfisher.com
Bret and Nirmal welcome Idit Levine, Founder/CEO Solo.io. Idit focuses on Service Mesh, API-GW and Multi-Cloud networking, and security.
Idit has been involved in the Containers/DevOps community for 10+ years, building products from Docker to Envoy to Kubernetes, and now Istio and Cilium. We talk about Istio, Ambient Mesh, Envoy, Zero-Trust Security, Cilium, eBPF, Multi-Cloud and more.
This is not the first time we've talked about Solo or Service Mesh. Ambient Mesh is Solo's new product that simplifies the install and infrastructure costs of essentially running Istio.
I'm really hopeful that this is going to help a lot more people implement Istio because traditionally, it does have a lot of parts and a lot of costs with the sidecar approach, but this new approach reduces the number of essentially proxies and parts that you're running on each node of your Kubernetes cluster.
Live recording of the complete show from June 29, 2023 is on YouTube (Ep. #223).
★Topics★
Solo.io
Istio Ambient Mesh
Solo Academy (free courses)
Istio Ambient Mesh ebook
Gloo Fabric
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
Get on the waitlist for my next live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Nirmal Mehta - Host * Idit Levine - Guest
- (00:00) - Intro
- (03:59) - How did Solo.io start?
- (21:03) - The difference between service mesh and API gateway
- (30:55) - Where is service mesh going?
- (41:53) - Is Ambient Mesh as secure as the sidecar model?
- (48:11) - Opportunities after adopting Ambient Mesh
- (53:41) - Phipps compliance
- (55:46) - Unikernel vs WebAssembly
Bret and Matt welcome special guest Brendan Burns, CVP Azure Cloud Native & Resource Management, and also a founding member of the Kubernetes project.
Because Brendan is one of the three original co-founders of the Kubernetes project back in 2013 at Google, he's a little bit internet famous in open source and Cloud Native. So I was a little nervous going into this because I had so many questions.
We took some live questions as we always do from YouTube live, and I thought it was a really great episode of a little mix of talking about Azure and some of the things you can do with containers, some of the things they're working on, some of the things that he's focused on that we haven't seen yet. We talk about AI and how that relates to some of these things.
We even talk about WASM or WebAssembly, one of my favorite topics of the last year, because that's important so it was great to get his perspective.
And I think my favorite part of the show is where we really talk about the next layers of abstraction, or maybe even the ways that we can deploy to Kubernetes or make it simpler to manage and deploy to. And that's been a real challenge for the community ever since Kubernetes was created in making it more accessible to more people, without it being so complex to manage and deal with underneath. And Brendan has some really great views on what it's going to take it to get us there.
Live recording of the complete show from June 15, 2023 is on YouTube (Ep. #221).
★Topics★
Ways to run containers on Azure
Dapr
WebAssembly on Azure Kubernetes
Wasmtime
Twelve-Factor App
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
Get on the waitlist for my next live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Matt Williams - Host * Brendan Burns - Guest
- (00:00) - Intro
- (03:10) - Introducing Brendan
- (08:47) - Advice for starting to run containers
- (30:30) - Reducing complexity with AI
- (34:41) - Addressing DevOps fatigue
- (42:38) - Running WebAssembly on Kubernetes
- (54:23) - LTS Linux Distributions
- (59:28) - What's next after containers and orchestration?
Bret and Matt welcome Michael Cade, the field CTO at Kasten by Veeam.
If you've been around servers for a while, you probably have heard of Veeam. It made its debut back in the late 2000's when virtual machines and implementations of VMs were big. I first found out about them back in those days, because it was a great free product for small virtual machine environments and data centers.
They've made tons of additional backup and recovery products over those years, and now they have Kasten K10, which is a Kubernetes backup and restore/recovery product. Michael discussed with us the origins of K10 and some of the major features.
We get into some demos, which you can check out in the original YouTube live show.
Live recording of the complete show from June 1, 2023 is on YouTube (Ep. #219). Includes demos.
★Topics★
Kasten K10 website
K10 free for 5 nodes
Kanister
Kasten K10 Walkthough Project on GitHub
Kasten K10 install config
KastenByVeeam YouTube channel
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
Get on the waitlist for my next live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Matt Williams - Host * Michael Cade - Guest
- (00:00) - Intro
- (02:23) - Introducing Michael Cade
- (03:30) - Veeam: then and now
- (07:38) - How Kasten came to be
- (14:11) - Complexity and Recovery
- (19:04) - Backup litmus test
- (23:02) - Demo
- (24:26) - Navig8: an open source visualizer for Helm Chart
- (28:44) - Kanister: an open source project for data management on Kubernetes
- (31:39) - Incremental backups
- (36:44) - Label-based backup policies
- (41:39) - Location profiles
- (43:56) - Infrastructure profiles
- (49:52) - Integrate your backup into you GitOps pipeline
- (51:43) - What about security?
- (54:57) - Getting started
- (01:02:13) - Miami conference
Bret and Matt welcome Jake Warner back to the show to talk about LowOps. What does LowOps mean? What can Cycle offer us as an alternative to Swarm and Kubernetes?
Jake Warner is the CEO and founder of Cycle.io. And I had him on the show a few years ago when I first heard about Cycle and I wanted to get an update on their platform offering. On this show we generally talk about Docker and Kubernetes but I'm also interested in any container tooling that can help us deploy and manage container based applications. Cycles' platform is an alternative container orchestrator as a service. In fact, they go beyond what you would provide normally with a container orchestrator and they provide OS updates, networking, the container runtime, and the orchestrator all in a single offering as a way to reduce the complexity that we're typically faced with when we're deploying Kubernetes.
While I'm a fan of Docker swarm due to its simplicity, it still requires you to manage the OS underneath, to configure networking sometimes, and the feature releases have slowed down in recent years.
But I still have a soft spot for those solutions that are removing the grunt work of OS and update management and helping smaller teams get more work done. I think Cycle has the potential to do that for a lot of teams that aren't all in on the Kubernetes way, but still value the container abstraction as the way to deploy software to servers.
Live recording of the complete show from May 18, 2023 is on YouTube (Ep. #217). Includes demos.
★Topics★
Cycle.io website
@cycleplatform on YouTube
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
Get on the waitlist for my next live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Matt Williams - Host * Jake Warner @ Cycle.io - Guest
- (00:00) - Intro
- (02:25) - Introducing the guests
- (03:17) - What is Cycle?
- (12:33) - Deploying and staying up to date with Cycle
- (14:21) - Cycle's own OS and updates
- (17:12) - Core OS vs Cycle
- (22:10) - Use multiple providers with Cycle
- (22:52) - Run Cycle anywhere with infrastructure abstraction layer
- (24:33) - No latency requirement for the nodes
- (28:28) - DNS for container-to-container resolution
- (29:54) - Migration from one cloud provider to another?
- (31:17) - Roll back and telemetry
- (32:48) - Full-featured API
- (37:12) - Cycle data volumes
- (38:35) - Backups
- (40:24) - Autoscaling
- (43:00) - Getting started
- (44:40) - Control plane and self-hosting
- (44:58) - Question about moving to Reno
- (45:59) - Built from revenue and angels; no VC funding
Bret and Matt are joined by Corey Quinn to talk about AWS and containers.
★ Enroll now for my next Live course, GitHub Actions + Argo CD, scheduled for July 10-21. Go to bret.courses/autodeploy to sign up. ★ ------------------------------------
Corey Quinn is the Chief Cloud Economist at the Duckbill Group. You may have seen or heard some of his in-depth AWS content, including his Last Week in AWS newsletter and blog, Corey's podcast Screaming in the Cloud and the AWS Morning Brief, or his highly produced YouTube videos on the Last Week in AWS channel.
Corey runs the Duckbill Group, a company of people focused on helping clients understand and manage their cloud spend. If I had to describe Corey in a sentence, he's a quick thinking AWS expert who is one part cloud strategist, and one part sarcasm.
The inspiration for this show came from his blog series, focused on all the ways to run containers on AWS, which is to say there's a lot. Dozens of ways, in fact, which I took as a testament to how containers have won the cloud as the primary way to package and deploy software to servers. Now, the hard part for us is to figure out which method we're going to choose for running those containers.
We go on lots of tangents, but overall it was a fun conversation and I hope you enjoy this episode.
Live recording of the complete show from May 4, 2023 is on YouTube (Ep. #214).
★Topics★
The Cloud Resume Challenge
Last Week in AWS
17 ways to run containers on AWS
17 MORE ways to run containers on AWS
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Matt Williams - Host * Corey Quinn - Guest
- (00:00) - Intro
- (09:13) - 17 Ways to Run Containers on AWS
- (11:51) - If you're using the cloud, use the cloud!
- (15:26) - Data loss and it's only on the internet forever
- (19:52) - Recommended ways to run containers on AWS
- (24:43) - Biggest burn on people's AWS bills
- (31:27) - Docker Desktop on top of AWS EC2 in Windows and do you need bare metal?
- (32:07) - Bare metal required for Hyper-V
- (34:33) - AWS App Runner
- (42:20) - Services AWS has dropped
- (43:33) - Workloads inside the container; where the container should run
- (46:07) - Building experience...hands-on projects vs getting certifications
- (57:25) - Migrating. Leaving Kubernetes.
- (01:02:51) - Chat GPT Star Wars jokes
Bret and Matt are joined by Brent Baude and Dan Walsh from Red Hat to talk about the latest with Podman, Quadlet, Podman Desktop and Podman machine, and how it all works with Kubernetes.
★ Enroll now for my next Live course, GitHub Actions + Argo CD, scheduled for July 10-21. Go to bret.courses/autodeploy to sign up. ★ ------------------------------------
Dan Walsh, a Senior Distinguished Engineer at Red Hat, has been working with containers since the beginning. He's a contributor to Docker, Project Atomic, SELinux, and a lot more. He literally wrote the book on Podman.
Brent Baude, is a Senior Principal Software Engineer at Red Hat and an architect and a primary maintainer of Podman, and contributes to many of its associated technologies like CRI-O, Buildah, and Skopeo.
We go through a lot of tooling in this episode because Red Hat has taken a different stance than Docker in how it delivers its container tooling. You might say they take the approach of the Unix philosophy of every program does one thing well. Most of us know Docker and how it bundles many things related to containers into a single command line and daemon, yet some would prefer to isolate pieces of container management functionality into discreet, smaller programs - one for building images, one for running containers, one for communicating with registries, one for adding a GUI to your container manager, and one for managing the container VM. It's just sort of how I would break down the Podman ecosystem.
And while that may seem like a lot of things, it's basically what Docker does for you in a single tool, yet the isolation of these tools is what can make them purpose-fit when you only need a fraction of the functionality of Docker. For example, one of Podman's core tenants is that it tells systemd to run your pods, which is the initialization process on most Linux distributions. In this way, your containers become more like standard system processes, rather than the Docker way of running all containers under the Docker Daemon process itself.
Now many of us have heard of the other two original Red Hat container projects, Skopeo and Buildah, but there's now an increasing number of things the Podman ecosystem can do. So I'm grateful to Dan and Brent for coming on to break down the new parts of this toolkit and how we might use them.
Live recording of the complete show from April 20, 2023 is on YouTube (Ep. #212).
★Topics★
Podman Website
Podman Desktop Website
Dan Walsh's book, Podman in ActionPodman Machine referenceQuadlet Blog Post
Podman and Quadlet Blog Post
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Matt Williams - Host * Brent Baude - Guest * Dan Walsh - Guest
- (00:00) - Intro
- (06:20) - Dan's history with containers
- (12:46) - The recommended way to get Podman
- (13:49) - Podman Machine
- (15:21) - How is Podman Machine installed
- (18:37) - How is Podman organised
- (21:16) - Podman Compose explained
- (27:15) - Podman Desktop
- (30:46) - Podman and Docker extensions
- (32:10) - Support for Kubernetes YAML
- (38:48) - Podman and systemd workloads
- (44:38) - How to get started with Podman
- (53:32) - Overlaying networks with Podman
Bret and his co-host, Matt, are joined by Jason Dellaluce and Luca Guerra from Sysdig to talk about Falco, a tool I recommend for production clusters and knowing about any bad behavior on your servers.
Enroll now for my next Live course, GitHub Actions + Argo CD, scheduled for July 10-21. Go to bret.courses/autodeploy to sign up.
Falco is a security tool I've mentioned multiple times on this show, because I mostly think that a low level security focused logging product is something that every production server needs. The ability to log unexpected events and behaviors on your Linux host is powerful and necessary to be able to audit what's really happening on your infrastructure outside of your app itself.
Falco has been a CNCF incubating project for over four years, and I was immediately drawn to it in its early days, because it was container and Kubernetes aware and it could log and alert with default rules for everything, from someone starting a shell inside a container, to a bash history file being deleted, to a container trying to talk to the Kubernetes API.
This episode will be useful for those of you new to tools like Falco and for those familiar with its basics, but also wanting to learn about newer features and use cases, which I did some learning on myself in this episode.
Live recording of the complete show from April 6, 2023 is on YouTube (Ep. #210).
★Topics★
Falco website
Falco on CNCF
Support this show and get exclusive benefits on Patreon, YouTube, or bretfisher.com!
★Join my Community★
New live course on CI automation and gitops deployments
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot Box
Homepage bretfisher.com
Creators & Guests* Bret Fisher - Host * Cristi Cotovan - Editor * Beth Fisher - Producer * Matt Williams - Host * Jason Dellaluce - Guest * Luca Guerra - Guest
- (00:00) - Intro
- (04:18) - Introducing the guests
- (07:19) - What is Falco? Why do we need it?
- (09:54) - What can Falco monitor?
- (19:05) - How are events logged?
- (32:53) - Does Falco classify alerts by severity?
Bret is joined by Rosemary Wang from HashiCorp to show off Vault for Kubernetes, an an open source secrets provider.
Rosemary is a return guest and does her usual fantastic job at explaining the complex topics around storing secrets, who needs Vault and why, running Vault on Kubernetes, the Vault storage backend and so much more.
Streamed live on YouTube on September 29, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #186)
★Topics★Vault website
HashiCorp Cloud
Raft storage for Vault, how Raft works
Example repo: HashiCorp Vault for Development Teams
★Rosemary Wang★Rosemary on Twitter
Rosemary on Linkedin
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Lee Calcote and Nic Jackson, co-authors of the Service Mesh Patterns book, to discuss service mesh for Docker Desktop and Compose apps with the new Meshery extension for Docker desktop.
They talk about what service mesh is and go into the new Measure extension for Docker Desktop, which is a CNCF sandbox project. One of its bigger features is to help you try out different service meshes and test them with only a few clicks. They also cover other features of their tools, such as the beta of MeshMap which helps you visualize your clusters and apply better practices to your service mesh.
Streamed live on YouTube on September 22, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #185)
★Topics★Learn Service Mesh
Meshery Docker Extension
MeshMap
Service Mesh Patterns Book
★Nic Jackson, Principal Developer Advocate, HashiCorp★Nic on Twitter
Nic on Linkedin
Nic Jackson on YouTube
Shipyard website
★Lee Calcote, Founder and CEO, Layer5★Lee on Twitter
Lee on Linkedin
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Liz Rice, Chief Open Source Officer at Isovalent, the makers of Cilium, to discuss Cilium and eBPF.
Liz Rice is back to give us more insight into eBPF and the Cilium project. Isovalent is the company that created and manages the Cilium Project, which does an increasing number of things for Kubernetes, including networking, CNI support, security, advanced networking stuff, and observability, as well as other things like load balancing. Liz is one of my go-to experts on how low-level Linux internals work. She's been speaking about container internals since the early days of Docker.
Streamed live on YouTube on September 8, 2022.
Unedited live recording of this show on YouTube (Ep #183)
★Topics★
Cilium website
Isovalent website
eBPF
Network Policy Editor
★Liz Rice★
Liz Rice on Twitter
Liz Rice's website
Books on Containers, eBPF, Kubernetes and Go
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Going to KubeCon? Me too! We're planning a meetup on my Discord server #kubecon channel.
The Loot Box is Live! Get your DevOps and tech-inspired t-shirts, mugs, and more.
Bret is joined by Shauli Rozen, CEO and Co-Founder of ARMO, creators of Kubescape. Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer, and image vulnerability scanning.
I'm a fan of tools like this and specifically of Kubescape, which I use and recommend to my clients. The scanner can scan your YAML manifests of your Kubernetes resources. It can scan your live Kubernetes clusters. And it can scan the YAML in your Git repos, as well as the images themselves that you're deploying to Kubernetes. As ARMO calls it, it's a single pane of glass into your Kubernetes security.
Streamed live on YouTube on September 1, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #182)
★Topics★Kubescape's GitHub
K8s Security Dashboard
ARMO website
★Shauli Rozen★Shauli on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us and fellow students on our Discord Server DevOps Fans
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Going to KubeCon? Me too! We're planning a meetup on my Discord server #kubecon channel.
The Loot Box is Live! Get your DevOps and tech-inspired t-shirts, mugs, and more.
Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.
Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects.
Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.
Streamed live on YouTube on July 28, 2022. Includes demos.
Unedited live recording of this show on YouTube (Ep #180)
★Topics★
Docker Slim
Slim.ai
★Martin Wimpress★Martin Wimpress on Twitter
★Pieter van Noordennen★
Pieter van Noordennen on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server DevOps Fans
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Going to KubeCon? Me too! We're planning a meetup on my Discord server #kubecon channel.
The Loot Box is Live! Get your DevOps and tech-inspired t-shirts, mugs, and more.
Bret is joined by Dmitriy Kalinin and John Ryan, software engineers at VMWare, to show off the many Carvel project tools.
Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. The Carvel project includes tools for templating, image building and tracking, secrets management, app deploying and more. The tool list includes ytt, kapp, kapp-controller, kbld, imgpkg, vendir, and kwt.
Streamed live on YouTube on July 14, 2022.
Unedited live recording of this show on YouTube (Ep #178)
★Topics★
Carvel website
Carvel on Twitter
★Dmitriy Kalinin★
Dmitriy Kalinin on Twitter
★John Ryan★
John Ryan on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Going to KubeCon? Me too! We're planning a meetup on my Discord server #kubecon channel.
The Loot Box is Live! Get your DevOps and tech-inspired t-shirts, mugs, and more.
Bret goes through his top recommendations for securing container images, Docker containers and Kubernetes pods.
This is a tip-packed show where Bret lists much of what's documented in his courses, starting with the first steps you should take, and the bare security necessities that everyone should be doing. Then he covers more advanced security activities you should consider once the basics are covered.
Streamed live on YouTube on July 7, 2022.
Unedited live recording of this show on YouTube (Ep #177).
★Topics★
Bret's Container Security AMA
Docker Security Docs
Docker Buys Atomist
Slim.ai website: Auto-slimming images
Docker Slim tool
Kubescape website
Kubernetes Security Context
Seccomp by default
Lint all files with super-linter
Datree K8s file scan
Kubernetes Benchmark
My GitHub Actions examples: Automate your builds, CVE scans, and more
Video on building a more secure base image
Snyk security tools website
Trivy CVE and K8s scans
Falco for watching servers for bad behavior
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Going to KubeCon? Me too! We're planning a meetup on my Discord server #kubecon channel.
The Loot Box is Live! Get your DevOps and tech-inspired t-shirts, mugs, and more.
Bret is joined by Marc Campbell of Replicated to discuss the challenges of deploying your software on other people's Kubernetes.
Following a discussion of the problems Replicated is solving, they go over all the great open source projects they are developing for deploying, managing, and troubleshooting Kubernetes.
Streamed live on YouTube on June 23, 2022.
Unedited live recording of this show on YouTube (Ep #175).
★Topics★
Replicated
Replicated OSS Projects
Kubernetes Troubleshooter
Schema Hero
Kubelist podcast, CNCF project leader interviews
Enterprise Ready assessment and podcast
kURL - Customize your Kubernetes Installer
KOTS - Manage COTS on K8s
Find Outdated Images
Unfork your custom Helm charts
★Marc Campbell★
Marc Campbell on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Guillaume Tardif and Felipe Cruz of Docker Inc. for a deep dive into Docker extensions.
Docker Extensions are a favorite new feature. Guillaume and Felipe are both engineers at Docker and they walk us through how extensions came about, how to install them, and how to submit them to the marketplace.
By the time Docker released extensions at DockerCon in May 2022, there were already a dozen solid extensions, including a disk manager, log explorer, and other third-party tools like Portainer, Snyk, and Anchor. Docker extensions will be most helpful to people who use Docker Desktop.
Streamed live on YouTube on June 16, 2022.
Unedited live recording of this show on YouTube (Ep #174). Includes demos.
★Topics★
Docker Extensions homepage
Docker Extensions announcement at DockerCon 2022
Build your first Docker Extension
Submit your extension for the Marketplace
Vackup, an example custom extension
Extension SDK
Other Extension resources
★Guillaume and Felipe★
Guillaume Tardif on Twitter
Felipe Cruz on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Nirmal Mehta, a Principal Specialist Solution Architect at AWS, and a Docker Captain, to discuss Karpenter, an autoscaling solution launched by AWS in 2021. Karpenter simplifies Kubernetes infrastructure by automating node scaling up and down, giving you "the right nodes at the right time."
Autoscaling, particularly for Kubernetes, can be quite a complex project when you first start. Bret and Nirmal discuss how Karpenter works, how it can help or complement your existing setup, and how autoscaling generally works.
Streamed live on YouTube on June 9, 2022.
Unedited live recording of this show on YouTube (Ep #173). Includes demos.
★Topics★
Starship Shell Prompt
Bret's favorite shell setup
Karpenter
Karpenter release blog
K8s Scheduling Concepts
Other types of autoscalers:
Horizontal Pod Autoscaler
Vertical Pod Autoscaler
Cluster Autoscaler
★Nirmal Mehta★
Nirmal on Twitter
Nirmal on LinkedIn
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Laura Tacho, an engineering leadership coach, to discuss measuring your team's performance with DevOps metrics (DORA) and the new SPACE framework. Team Performance is one of Bret's favorite topics, and it should be everyone's concern.
Laura and Bret discuss soft skills, how to implement DORA DevOps metrics, the new SPACE framework, as well as common pitfalls people make when attempting to implement those measurements.
Streamed live on YouTube on June 2, 2022.
Unedited live recording of this show on YouTube (Ep #172).
★Topics★
Laura's course on High-Performing Software Teams
DORA (DevOps Research and Assessment)
DORA Metrics
DORA DevOps Quick Check
SPACE framework
Goodhart's law
Developer Experience
DevOps Handbook
Accelerate Book
★Laura Tacho★
Laura's homepage and Newsletter
Laura on Twitter
Laura on the GitHub blog
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by the co-creators of the Argo project and co-founders of Akuity - Hong Wang and Jesse Suen - to discuss the state of Argo and their new Akuity offering for Argo CD in the Cloud.
Chances are, you've heard of one or more of the Argo projects. They include Argo Workflows, Argo CD, Argo Events, and Argo roll-outs. Argo is one of those Kubernetes projects that is so common for teams to choose that it's nearly an assumption that every team is using one of their tools in a cluster or two.
Hong Wang and Jessie Suen helped co-create the Argo project years back at Intuit and have now co-founded a growing startup called Akuity. The company is focusing on making the Argo products better and creating SaaS offerings for the Argo tools. In this episode, we get a perspective on where the Argo tools came from and what the team behind it is doing. Streamed live on YouTube on May 26, 2022.
Unedited live recording of this show on YouTube (Ep #171).
★Topics★
Argo CD homepage
Akuity homepage
Akuity news on more funding
Argo CD in the cloud
ArgoCon in September
Declarative setup of Argo CD
★Twitter Links★
Argo
Akuity
Jesse Suen
Hong Wang
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Rosemary Wang, a developer advocate at Hashi Corp. She recently finished a Manning book, titled Infrastructure as Code: Patterns and Practices. They discuss how infrastructure as code fits into DevOps and Gitops, and how you can get started with IaC and run over some important patterns, such as controlling versioning, IaC testing and managing costs.
Rosemary worked at ThoughtWorks previously, and it was interesting to hear her experiences on learning from senior engineering, and how pairing and other types of mentorship can help. Streamed live on YouTube on April 28, 2022.
Unedited live recording of this show on YouTube (Ep #168).
★Topics★
Infrastructure as Code: Patterns and Practices, with examples in Python and Terraform
★Rosemary Wang★
Rosemary on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Ravi Lachhman, Field CTO at Shipa, to discuss the basics of Shipa application and policy management, and show off the developer experience that Shipa brings to apps running on IaC and GitOps tools like ArgoCD, Crossplane, Terraform, Kubernetes, and more.
Shipa is focused on the layer above the infrastructure where application developers can avoid other Kubernetes manifest tools like Helm or Kustomize, and create a cleaner contract between what their application needs are and how the infrastructure provides them.
If you've done Kubernetes YAML long enough, you know that it can get quite complex and verbose, and it requires both infrastructure and developer roles or knowledge to fully configure it. So you kind of got to know both worlds. But Shipa wants to fit in the middle somewhere, not replacing the infrastructure tools like Terraform or Crossplane, but rather working on top of them, providing an easier way to describe your apps from a dev's point of view and how they work on top of your infrastructure. It focuses on the application requirements, not necessarily how those requirements are implemented. Streamed live on YouTube on April 14, 2022.
Unedited live recording of this show on YouTube (Ep #166). Includes demos.
★Topics★
Shipa website
Shipa example
DevOps Days Atlanta
★Ravi Lachhman★
Ravi on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Erik Veld, Manager, Developer Advocacy at HashiCorp, the creators of Nomad. Nomad is an orchestrator like Kubernetes and Swarm but it has a unique set of features that make it an interesting alternative on multiple levels. It's known for having a much simpler infrastructure design than Kubernetes, and also having a stronger community and feature release cycle then Swarm. Erik talks about the basics of Nomad, the reason it was created and runs through some demos. Streamed live on YouTube April 7, 2022.
Unedited live recording of this show on YouTube (Ep #165). Includes demos.
★Topics★
Nomad website
Nomad GitHub page
Tech-Nomadic, Run Your Software Anywhere (YouTube)
Managing DigitalOcean Kubernetes clusters with Terraform (YouTube)
★Erik Veld★
Erik on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by David Flanagan, aka Rawkode Academy, from Pulumi to show off how Pulumi infrastructure-as-code can improve GitOps pipelines. Our conversation focused on what GitOps and Pulumi are and how they work together to manage your infrastructure and app deploys. Streamed live on YouTube on March 24, 2022.
Unedited live recording of the complete show on YouTube (Ep #164). Includes demos.
★ Topics ★
Pulumi
Product
K8s Operator
K8s
GitOps
Law of Demeter
1Password SSH management
★ David Flanagan aka Rawkode Academy★
Rawkode Academy, Live weekly
Rawkode on Twitter
★ Join My Community ★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Unedited live recording of the complete show on YouTube (Ep #167). Includes demos.
Bret is joined by Anca Iordache and Dave Scott, software engineers at Docker Inc, to talk about why they made Docker Desktop for Linux and how it's different from running the Docker Engine daemon.
We talk about the origins of Docker Desktop for Linux, why it needs to exist, and how it's different than running Docker Engine on the native host. Docker Desktop for Linux behaves like Mac and windows versions where it uses a VM and we clear up some confusion around that. Further, we talk about some of the functionality with operating it in tandem with Docker Engine on the host so you can run both at the same time and use context to switch between them.
★ Topics ★
Download Docker Desktop for Linux
Docker Roadmap
Docker Desktop for Linux GitHub Issues
Docker Developer Preview Program
Docker Community Signup
DockerCon 2022
★ Join My Community ★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret is joined by Lukas Gentele and Rich Burroughs of Loft Labs to talk about vcluster, a Kubernetes distribution that can run inside an existing cluster namespace, aka "clusters in clusters." Lukas is the CEO of Loft Labs and Rich is their Senior Developer Advocate.
VCluster is quite a universal tool for running fully-fledged Kubernetes clusters for dev and test environments and even potentially in production. In this episode, Lukas and Rich break down a ton of ways vcluster is currently being used and where they see it going in the future. Streamed live on YouTube on March 10, 2022.
Unedited live recording of the complete show on YouTube (Ep #162). Includes demos.
★Topic Links★
Loft Labs
VCluster
★Lukas Gentele and Rich Burroughs★
Lukas Gentele on Twitter
Rich Burroughs on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret and his guests - Jamie Duncan and John Osborne, authors of "OpenShift in Action" - talk about Enterprise Kubernetes adoption, the barriers teams encounter and why it's worth solving the hard problems in enterprise teams by standardizing on Kubernetes.
Jamie is a customer engineer at Google Cloud and John is chief architect at RedHat. In this episode, we talk a lot about Kubernetes as the new common non-vendor specific infrastructure API. Streamed live on YouTube on March 3, 2022.
Unedited live recording of this show on YouTube (Ep. 161).
★Topics ★40% off Manning books and products: poddevt19 http://mng.bz/raEE
OpenShift in Action
Google Anthos
Knative Events
Halfempty
KubeVirt
Kata Containers
★John Osborne and Jamie Duncan★
John Osborne on Twitter
Jamie Duncan on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Jim Bugwadia joins Bret to discuss Kubernetes policy management and "intelligent guardrails for K8s." Jim is the CEO and co-founder of Nirmata. He's also the founder of Kyverno, an CNCF Sandbox Project and open source project for managing policies in Kubernetes. We talk about what Kyverno is, what it isn't, and what problems it solves. We also talk a bit about Narmada and how it expands on that.
If you're in a team using Kubernetes together, controlling settings and standards in your workloads and clusters can be a constant source of frustration unless you have something to govern those policies across all your workloads and clusters.Streamed live on YouTube on Feb 24, 2022.
Unedited live recording of the complete show on YouTube (Ep #160). Includes demos.
★Topics ★
Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources, and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources plus ensure OCI image supply chain security. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.
Nirmata "Intelligent Guardrails for Kubernetes." Security, Compliance, and Operational Readiness of Kubernetes Across the Enterprise
Sigstore
Blog re Sigstore: "Linux Foundation’s Sigstore Aims to Secure Software Supply Chains"
OWASP Open Web Application Security Project
★Jim Bugwadia ★
Jim on Twitter
★Join my Community ★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
In this episode, Bret is joined by Portainer's co-founder and CEO, Neil Cresswell, to get an update on their product. If you haven't heard of Portainer, it's one of the original web apps to manage Docker, then swarm and now Kubernetes. This is one of Bret's top 10 tools for consideration to manage your container environments. Neil will show off the latest from Portainer.io. Streamed live on YouTube on February 3, 2022.
Unedited live recording of the complete show on YouTube (Ep #157). Includes demos.
★Topics★
Portainer
Portainer in DigitalOcean
Portainer in Multipass
★Neil Cresswell★Portainer on Twitter
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret explores and reviews tools that "might" replace Docker Desktop for those who decide not to pay for the subscription. He goes through the pros and cons of the alternatives. Streamed live on YouTube Jan 27, 2022.
Unedited live recording of the complete show on YouTube (Ep 156). Includes demos.
Bret's comparison spreadsheet: Docker Desktop Alternatives 2022, single-node for local dev-test
"Trilogy" blog articles all about DevOps and DevOps engineering
Docker blog: How Docker Desktop Networking Works Under the Hood
Docker blog: File Sharing with Docker Desktop
WSL2 on Bret's YouTube Live show #135: Windows 11 WSL2 with Nuno do Carmo
Licensing Changes YouTube Live show #138: Docker Desktop Licensing Changes
contains.dev: web gooey for breaking up images and looking at the layers and the files
Docker Desktop Linux implementation roadmap in GitHub
★Join my Community ★
Best coupons for my Docker and Kubernetes courses
Bret's blog posts and other details are available on bretfisher.com
Chat with us on our Discord Server Vital DevOps
★ Support this podcast on Patreon ★
Bret is joined by Eran Bibi, a co-founder and CPO of Firefly to discuss Cloud and Kubernetes drift, and dealing with unmanaged resources and policy violations in Infrastructure as Code. Streamed live on YouTube on January 13, 2022.
Unedited live recording of this show on YouTube (Ep 154). Includes demos.
★Topics ★
Firefly
Becoming a DevOps Engineer
★Eran Bibi ★
Eran Bibi on Twitter
★Join my Community ★
Best coupons for my Docker and Kubernetes courses
Follow me on Patreon and support this show!
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
In this episode, Jake Warner, founder of Cycle joins Bret to discuss and demo Cycle.io, a Kubernetes alternative to run your containers and reduce your DevOps complexity. In the background, it uses your cloud of choice, deploys a custom OS (using LinuxKit), and handles all the complexity of storage, backups, proxies, and networking. Streamed live on YouTube on Jan 6, 2022.
Unedited live recording of this show on YouTube (Ep #153). Includes multiple demos.
★Topics ★
Cycle.io
Linuxkit on GitHub
Cycle Podcast: https://www.cycle.io/podcasts
★Find Jake ★
On Twitter @JakeWarner
★Join my Community ★
Best coupons for my Docker and Kubernetes courses
Follow me on Patreon and support this show!
Chat with us on our Discord Server Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Control your testing in containers with your code! Bret's guest, Sergei Egorov, walks us through testcontainers.org and AtomicJar for using API's to control Docker from Go, Java, Python, Node, Rust, Scala, and more. Streamed live on YouTube on December 9, 2021.
Unedited live recording of this show on YouTube (Ep 149).
★Topics ★
Testcontainers
Testcontainers on GitHub
Company behind Testcontainers
Testcontainers Cloud blog
★Sergei Egorov ★
Sergei on Twitter
★Join my Community ★
Best coupons for my Docker and Kubernetes courses
Follow me on Patreon and support this show!
Chat with us on our Discord Server, Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Liz Fong-Jones from honeycomb.io joins Bret in this episode to discuss and demo their platform and Kubernetes Observability. Streamed live on YouTube on December 2, 2021.
Unedited live recording of this show on YouTube (Ep 142). Includes demos.
★Topics★
Honeycomb.io
Free eBook Observability Engineering
OpenTelementry
Pixie
12Factor
Sqlcommenter
★Guest Liz Fong-Jones★
Liz on Twitter
Liz on Twitch
★Join my Community★
Best coupons for my Docker and Kubernetes courses
Follow me on Patreon and support this show!
Chat with us on our Discord Server, Vital DevOps
Homepage bretfisher.com
★ Support this podcast on Patreon ★
Bret talks with Alex Ellis, Founder of OpenFaaS, about all things "containers on arm." They cover Apple's M1 arm processor, Raspberry Pi arm images, Docker Desktop and arm, Kubernetes clustering, Alex's new Netbooting workshop, and more. Streamed live on YouTube on Apr 1, 2021.
- Unedited live recording of this show on YouTube (Ep 142)
★Topics ★
- The past, present, and future of K8s on Pi on YouTube
- 5 Years of Raspberry Pi clusters blog
- RetroPie.org.uk
- Inlets on GitHub
- Netbooting workshop for Raspberry Pi
- Faasd on GitHub
- Serverless for everyone else
- GH Action example for multi-platform build
- Arkade
★Alex Ellis ★
- Website Homepage
- On Twitter
- YouTube channel
- Sponsor Alex's work on GitHub
★ Support this podcast on Patreon ★
Friend and fellow Docker Captain, Viktor Farcic, joins Bret to talk about all things DevOps Automation and Crossplane. Streamed live on YouTube Oct 7, 2021, Ep 142.
- Unedited live recording of this show on YouTube (Ep 142)
- Upbound, the company behind Crossplane
- Crossplane
- KOTS
- Viktor on YouTube "DevOps Toolkit"
- Viktor on Twitter
★ Support this podcast on Patreon ★
The topic is the new Gateway API and Kubernetes Ingress. Bret met with Mark Church, Product Manager of GKE Networking at Google. They talked in detail and took questions from the YouTube chat. Streamed live on YouTube Apr 8, 2021, Ep 119.
- Unedited live recording of this show on YouTube (Ep 119)
- An Introduction: What is the Gateway API?
- Join the community
- Mark Church on Twitter @ChurchOfMark
★ Support this podcast on Patreon ★
Automating container deployments with GitOps is the topic of this podcast with Bret's guest, Nirmal Mehta. At the time of the show (March 2021), Nirmal was a Distinguished Engineer and Director at Booz Allen Hamilton. He is also a Docker Captain. Streamed live on YouTube Mar 4, 2021, Ep 114.
- Unedited live recording of this show on YouTube (Ep 114)
★Topics and Links★
- Guide to GitOps from weaveworks
- GitOps origins; a blog from weaveworks: What DevOps is to the Cloud, GitOps is to Cloud Native
- Flux CD
- Argo CD
- Swarm Sync for Docker Swarm GitOps
- YouTube Live Show (Ep 113) where Bret talks about, and gives a demo of, Crossplane
- YouTube Live Show (Ep 142) where Bret and Viktor Farcic cover DevOps Automation with Crossplane
- Control GitHub GitOps through "branch protection rules"
- DevOpsDays
- Nirmal Mehta on Twitter @normalfaults
★ Support this podcast on Patreon ★
Docker Captain and Engineering Consultant Laura Tacho joins Bret and they go through all their favorite topics and tech things of 2021. Streamed live on YouTube Dec 16, 2021, Ep 150.
- Unedited live recording on YouTube (Ep #150)
- Log4Shell info from SANS Institute on YouTube
- Log4Shell info from Docker blog
- HashiCorp IPO
- Bill Gates Year in Review "Reasons for Optimism After a Difficult Year"
- GitHub blog "GitHub Actions: Reusable Workflows are Generally Available"
- Dig into your Docker images contains.dev
- WebAssembly in 100 seconds on YouTube
- Modern Finance podcast "Side Chain Scaling with Sandeep Nailwal, Co-Founder of Polygon"
- My First Million podcast
- Docker blog: "Faster Multi-Platform Builds: Dockerfile Cross-Compilation Guide"
★ Support this podcast on Patreon ★
Bret talks with Stack Overflow legend and Docker Captain, Brandon Mitchell. They talk about (and demo) “regclient” his new project for managing registries remotely via API, and all that’s happened over the last year with Docker registries and Docker Hub. It's worth watching the demos on YouTube. Streamed live on YouTube Jan 21, 2021, Ep 108.
- Unedited live recording on YouTube (Ep #108)
- An earlier YTL show about Docker Hub (Ep #89)
- Brandon on StackOverflow
- regclient on GitHub
- registry spec on GitHub
- Brandon's videos and presentations on GitHub
★ Support this podcast on Patreon ★
Bret is joined by Komodor CTO and co-founder Itiel Shwartz to talk about Kubernetes troubleshooting and using their new app to highlight changes and alerts in your clusters. Check out the unedited video version on YouTube to experience the demo. https://youtu.be/zGA6ZwdYM5A
Streamed live on YouTube on March 11, 2021, Ep 115.
- Unedited live recording on YouTube Ep 115; check it out to see the demos
- Komodor K8s troubleshooting
- kubectl cheat sheet
- Troubleshooting deployments flowchart
★ Support this podcast on Patreon ★
Docker announced Compose v2 at DockerCon 2021. Bret goes through all the new stuff you didn't know about. If you're a fan of composing (his fav docker tool), this podcast reviews what docker's done over the last two years to make it so much better! This is another episode pulled from the archive that's still quite relevant. Streamed live on YouTube Jun 10, 2021, Ep 126.
Unedited live recording on YouTube Ep 126
★Topics ★
- Compose V2 is a Docker Plug-in (written in Go)
- Compose Spec (no more yaml versions)
- Service Profiles
- Compose ls (list all running compose projects)
- BuildKit by default
- Compose cp (copy files in/out)
- Compose convert
- Compose up to ACI and ECS
- Compose up to Kubernetes
- Compose command aliases
★Links ★
- GitOps Days 2021 - Day 1 (June 9, 2021) video on YouTube
- GitOps Days 2021 - Day 2 (June 10, 2021) video on YouTube
- Compose CLI on GitHub
- Compose Spec on GitHub
- Docker Plugins installer (GitHub)
- My Shell Setup
- Building with Buildx
★ Support this podcast on Patreon ★
The topic is automating your K8s YAML validation. Bret’s guest is Eyar Zilberman, co-founder of Datree and they go through various tools and their pros and cons and help you understand why automated validation is vital as you automate your Kubernetes deployment pipeline. Streamed live on YouTube Nov 11, 2021, Ep 146.
- Unedited live recording on YouTube (Ep 146)
- Datree
- Kubeconform
- pre-commit
- https://github.com/yannh/kubeconform
- https://pre-commit.com/
- Eyar's article about K8s schema validation
- Open an issue for questions on k8s schema
- kubectl --dry-run=client bug
- Datree's CLI tool to ensure K8s manifests and Helm charts follow best practices
- Check CRDs and schema with Datree
★ Support this podcast on Patreon ★
Apple's move to Arm processors will change software development for everyone... or will it?
Apple has moved towards an Arm processor. They don't call it Arm, they call it Apple Silicon, or M1 but underneath that, the architecture of the CPU is Arm 64-bit compatible. Streamed live on YouTube Jan 7, 2021, Ep 106.
- Unedited live recording on YouTube Ep 106
★Corrections ★
- "Windows RT" isn't a thing anymore, and the Windows 10 on Arm (WoA) is getting better, with x64 emulation (MS version of Rosetta 2) in pre-beta
- AArch64 or ARM64 is the 64-bit extension of the ARM architecture
- Microsoft is indeed designing its own Arm chips for future Surface and servers
- Windows 10 Arm works in Parallels M1 beta on macOS
- AWS Arm instances are now on Gen 2, as of May 2020, with up to 40% better performance-per-dollar than old Gen 1 Arm, AMD, and Intel
★Topics ★
- MX1 and future of Apple Silicon (Arm) on YouTube
- QEMU: emulate one CPU architecture on another
- Multi-arch support in Docker Desktop in docker docs
- Build multi-arch images with buildx in docker docs
- Manifest commands for multi-arch images in docker docs
- Hardcode platform in Compose files in docker docs
- Alex Ellis blog, lots of Arm + Docker info
- My shell setup
- Setup QEMU on Linux servers
- on stereolabs.com
- on GitHub
★ Support this podcast on Patreon ★
Bret talks about linting with Super-Linter and also GitHub Action's new Reusable Workflows beta! Streamed live on YouTube Sep 30, 2021, Ep 141.
Unedited live recording on YouTube (Ep 141)
★Topics ★
- Linting Q&A
- Super-Linter 101
- Example GitHub Action Repo
- Dependabot for GHA
- Linter config files
- Customize Super-Linter
- Reusable Workflows
★Links ★
- Super-Linter GitHub
- Example Workflow in Bret's GitHub
- Editorconfig
- Reusable Workflows
- Workflow Templates
- Hacktoberfest from DigitalOcean
★ Support this podcast on Patreon ★
Alex Chalkias of the Canonical MicroK8s project joins Bret and they dive into this easy and powerful Kubernetes distribution that had some major updates in 2020, including high availability. Since the interview, the open-source community around Microk8s has been releasing versions regularly, including keeping the Kubernetes versions up to date and continuing to add new add-ons to their one-line install list. It's getting quite impressive at this point, including kata containers, open EBS, and the KEDA (Kubernetes Event-driven Autoscaling) event-driven auto-scaling. Streamed live on YouTube on November 12, 2020, Ep 101.
Unedited live recording on YouTube Ep 101
Microk8s website
Canonical Ubuntu Kubernetes web page
Multipass install page
Ubuntu YouTube
Charmhub website
★ Support this podcast on Patreon ★
My guest is Ben Arent, Developer Relations Engineer at Teleport. Teleport allows engineers and security professionals to unify access for SSH servers, Kubernetes clusters, web applications, and databases across all environments. In this episode, we talk about why it exists, the problems it solves, and how it's implemented. Streamed on YouTube Sept 29, 2021, Ep 139.
- Unedited Live recording on YouTube (Ep 139)
- Teleport website
- Teleport GitHub
- Teleport Wormhole announcement
- Ben's Twitter
- Teleport Twitter
★ Support this podcast on Patreon ★
Phil Estes from AWS joins Bret to talk about containerd/state of the project, Docker Desktop alternatives and how developers are using containerd, OpenSSF, and supply chain security, and how containers will play a role. There's a lot of stuff covered here!
Streamed on YouTube Sept 23, 2021.
- Unedited Live recording on YouTube
- containerd runtime
- Lima macOS containerd VM
- docker-friendly CLI for containerd and more
- OpenSSF Security
- Allstar GitHub Security Bot
★ Support this podcast on Patreon ★
Zaid Sabih, the founder of zSecurity, talks with Bret about cyber security, pentesting, ethical hacking, and career choices. There's even some fun conversation about the hacking from The Matrix and Mr. Robot. Streamed on YouTube on October 29, 2020.
- Unedited live recording from YouTube
- zSecurity's Twitter
- zSecurity's YouTube
- Zaid Sabih Udemy page
- zSecurity's website
- Docker and k8s and container security bret.show/securityfirst
★ Support this podcast on Patreon ★
Darren Shepherd, co-founder of Rancher Labs, joins Bret to talk about Rancher's latest projects and all things Kubernetes. They covered so many topics like k3s, RKE2, Rio, Swarm, Fleet, OPA, Kyverno, etcd, k3OS, Compose, Longhorn, KubeVirt, and more. Streamed on YouTube on October 22, 2020.
- Unedited Live recording with demos on YouTube
- Darren Shepherd Twitter
- Rancher website
- Rancher Course Training
- k3sup in GitHub
- Fleet in GitHub
- Kyverno in GitHub
- Rancher Rio
- Adrian Goins YouTube
- Artifact Hub
- Arkade Alex Ellis on GitHub
- Netshoot Nicolaka on GitHub
★ Support this podcast on Patreon ★
Docker Captain Viktor Farcic of https://codefresh.io talks about GitOps automation and workflows using the Argo project tools. Streamed live on YouTube on October 1, 2020.
- Unedited live recording on YouTube
- Viktor's YouTube channel DevOps Toolkit
- Digital Ocean's Hacktoberfest
- Viktor's website, books and courses
- Argo CD and GitOps
- Google Cloud Run and Rapid GitOps Q&A
★ Support this podcast on Patreon ★
I'm joined by fellow Docker Captain Nuno do Carmo to talk about WSL2 for Windows 10 and Windows 11. Nuno's a Docker Captain, CNCF Ambassador, and Microsoft MVP. Streamed on YouTube on August 12, 2021.
Unedited live recording with demos on YouTube
- Demos start at 00:43:08 in the show
- Nuno on Twitter
- (one of) Nuno's blogs
- Install WSL on Windows 10
- Blog: WSL2 design internals
- Windows Terminal
★ Support this podcast on Patreon ★
Docker Desktop changes to Paid plans for medium to large businesses! I dig into the facts and help you understand what's changed for you (if anything). Streamed on YouTube Sept 2, 2021.
- Full, unedited YouTube DevOps and Docker Live Show
- Docker Desktop changes licensing to require a paid plan in medium to large commercial organizations:
- Docker Blog article Docker is Updating and Extending Our Product Subscriptions
- Docker pricing FAQ
- Who's gonna build "OpenMoby" - Twitter thread from Joe Beda, Principal Engineer at VMware
- Bret's Docker Desktop feature list
- WSL2 Docker without Desktop- dev.to blog by Jonathan Bowman
- macOS Docker-like without Desktop - blog article containerd & Lima: Open Source Alternative to Docker for Mac by Akihiro Suda
★ Support this podcast on Patreon ★
I'm joined by Wayne Witzel, a Software Engineer at VMware leading the Octant project for Kubernetes, a web GUI to help developers gain insight into their apps on K8s. Streamed on YouTube Apr 9, 2020.
- Unedited Live recording with demos on YouTube
- Wayne Witzel on Twitter
- Octant Project website
- Octant on Twitter
- GitHub Plugins
- Making Plugins
- The Monaco embeddable editor
- Visual Studio Code
- Kubernetes Labels
★ Support this podcast on Patreon ★
I'm joined by Nolan Brubaker of VMWare to talk about Velero, an open-source backup and migration tool for Kubernetes. Streamed on YouTube on April 30, 2020.
- Unedited live recording with demos on YouTube
- Velero website
- Velero on Twitter
- Nolan Brubaker on Twitter
★ Support this podcast on Patreon ★
My guest is Brian Christner, fellow Docker Captain, and we talked about all things DevOps, some SRE, and Traefik. Streamed on YouTube on April 15, 2021.
- Unedited live recording with demos on YouTube
- Google Site Reliability Engineering (SRE)
- Brian's Twitter page
- Brian's website
- Brian's online courses
- TheByte podcast
★ Support this podcast on Patreon ★
I was given early access to GitHub Copilot and used it intensely for a week in my DevOps tasks before this show. Docker Captain, Nirmal Mehta, joins me to see what it can do! Streamed on YouTube on July 15, 2021.
- Unedited live recording with demos on YouTube
- Copilot Tech Preview
- Google History of High-Paid Sr. Engineer
★ Support this podcast on Patreon ★
I'm joined by Steve Sloka of VMWare. We're talking about a set of Kubernetes Operators that Steve maintains including Contour (Envoy ingress) and Gimbal (multi-cluster ingress). Streamed on YouTube on March 12, 2020.
- Un-edited show with demos on YouTube
- Contour home page
- Contour GitHub
- The Operator concept for Kubernetes
- More on Operators
- Operator Framework on GitHub
- Operator Hub
- KubeCon 2019 Talk on Contour/Gimbal
★ Support this podcast on Patreon ★
I talk with Justin Quinn of Logz.io about their hosted ELK solution, and we go through features, how customers use it, and what they've added beyond the standard Elastic Stack logging solution. Streamed on YouTube Feb 27, 2020.
- Full Live Show
- Logz.io
- Elastic Stack (ELK)
- Kibana
- Grafana
★ Support this podcast on Patreon ★
This is a special episode just for the podcast, where I detail the direction shift of docker's new features and how they are using the Docker CLI to deploy to clouds directly without needing to manage the Docker Engine.
- My Live show: bret.live
- Docker ACI Beta Announcement
- Docker ECS Fargate Beta Announcement
- AWS's Announcement of Docker's ECS Fargate
- ECS Beta on GitHub
- ACI Beta on GitHub
- Docker Roadmap on GitHub
- Docker YouTube Live Demo on ECS Beta
- My demo struggles with the ACI Beta (Live Show)
- My demo struggles with the ECS Beta (Live Show)
- My shell setup live demo
- My shell setup tools list
★ Support this podcast on Patreon ★
I'm joined by Phil Estes of IBM, Distinguished Engineer & CTO for Container and Linux Architecture Strategy at IBM Cloud. He's a maintainer on the containerd CNCF project, and we're talking about containerd, which fuels Docker Engine and many Kubernetes container runtimes.
- Original YouTube Live
- What is the OCI
- namespace and cgroup deepdive
- rkt (rocket) project is archived
- podman
- buildah
- cri-o
- containerd 1.4 milestone
- Open Containers (OCI Distribution Spec)
- Phil's tools
- Phil's homepage
- Phil's blog on containers
★ Support this podcast on Patreon ★
I chat with Docker Captain Nirmal Mehta of Booz Allen Hamilton about Kubernetes Ingress controllers and resources. There seems to be a lot of confusion around them, the different choices, and what to do for incoming HTTP connections in Kubernetes.
- The original YouTube Live of this episode
- My updated Kubernetes Mastery course with Ingress
- Nirmal's Dogs, Starla and Abbey on Instagram
- Nirmal's Website
- Kubernetes Ingress Comparison Spreadsheet
- CNCF Landscape on Service Proxies
- Wildcard DNS nip.io
- Tunneling incoming connections through Inlets
- My YouTube Live Show: https://bret.live
★ Support this podcast on Patreon ★
I joined in a live Q&A with Liz Rice of Aqua Security talking about the state of container security and tools to help you understand and protect your workloads.
- Original YouTube Live stream
- Liz Rice homepage
- Aqua Security
- Trivy image scanner
- Tracee Container and system tracing using eBPF
- Falco, Cloud-Native runtime security
- Learn eBPF tracing with Brendan Gregg
- Bret's security top 10 (or 20) list
★ Support this podcast on Patreon ★
I have a live Q&A with Alex Ellis as we break down FaaS, Serverless, and how these technologies work with Docker and Kubernetes including his open-source tools like OpenFaaS, Inlets, faasd, k3sup, and more.
Original YouTube Live Stream with Demos
Alex on GitHub
OpenFaaS
Inlets
Inlets Operator
k3sup
faasd
★ Support this podcast on Patreon ★
My friend Kevin Griffin and I talk about the tools we use often for working in development and operations teams remotely.
★For Humans ★
- Tandem
- Sococo
- Standuply for Slack
- Diagrams.net
- Rocket Chat
- Notion ($10 coupon)
★For Code ★
- Inlets
- VS Code Live Share
- tmux
- tmate
★ Support this podcast on Patreon ★
I sit down with Gianluca Arbezzano, a Docker Captain and Site Reliability Engineer at InfluxData. We talk about open source projects for monitoring and observability in containers and Kubernetes.
Gianluca on Twitter
Gianluca's blog
Golang Profiling with profefe
testcontainers
Gianluca's DockerCon 2019 talk (YouTube) (Docker Blog)
Extending Kubernetes Free Report
kind, Kubernetes in Docker, for easier testing
Docker for Mac GitHub Issues
Use Compose files on Kubernetes
Rancher Rio
★ Support this podcast on Patreon ★
Brandon and I go through the last year of Swarm (SwarmKit) and what's happened so far in 2020 and talk about their future commitment to the built-in Docker orchestrator.
Docker Birthday Live on March 26th
DockerCon LIVE
DockerCon LIVE CFP's
Nov 2019: Mirantis buys Docker's enterprise business
Jan 2020: SwarmKit Jobs are merged to moby/moby master
Feb 2020: Mirantis commits to Swarm's future and new features
Alex Ellis post: You might not need Kubernetes
RexRay Docker Storage (no longer maintained)
Traefik proxy
dogvs.cat, my Swarm example stack files
dockerswarm.rocks
Portainer Swarm Web UI
Docker Swarm Backups and Design
Docker Swarm Vault Plugin
Brandon Mitchell on Stackoverflow
Brandon's Swarm Config update tool
Brandon's Swarm Stack wait tool
★ Support this podcast on Patreon ★
In this short episode, I cover some Docker upcoming events and announcements.
- Docker Birthday #7 activities
- Docker Birthday Live Stream the 26th
- DockerCon LIVE 2020
- Docker Roadmap (GitHub project cards, and blog announcement)
- Docker Certified Associate (DCA) site (with updated study guide)
★ Support this podcast on Patreon ★
I answer some audience questions about serverless, and the future of containers... when a lot of the news out there is talking about functions as a service as "the future of everything". As usual, the answer is "it depends", but if you're a team that's already doing microservices and containers, and you're looking to deploy smaller features faster and cheaper, then serverless might help. For most of us though, writing and shipping functions only, rather than traditional applications, is years away, because we have bigger problems to solve first, like speeding up our deployment processes or improving our monitoring and recovery.
- Kelsey Hightower and our next abstractions on my podcast
- Kelsey on Arrested DevOps talking about what's next for Kubernetes
★ Support this podcast on Patreon ★
In this episode, I sit down with Gerald Croes of Containous from KubeCon. We talk about the release of Traefik 2.0, and other projects like their new Service Mesh offering on top of Traefik called Maesh.
★Show Links ★
- Bret's courses on Docker and Kubernetes
- Traefik Routers
- Containous Traefik releases
- Maesh
- Containous Community
- Gerald's twitter
★ Support this podcast on Patreon ★
Happy New Year container fans! In this episode, I talk with Brice Fernandes of WeaveWorks to discuss their latest Kubernetes and Docker projects. We also talk about GitOps, which is my favorite way to set up application deployments and infrastructure changes.
★Show Links★
- Guide To GitOps
- Flux GitOps Operator
- Flux GH Repo
- Flagger by Weave
- Continuous Delivery Foundation
- Brice's Twitter
★ Support this podcast on Patreon ★
In this episode, I traveled to Vienna, Austria, and hung out with my friend Laura Tacho, and we talked about the human side of DevOps. We challenged ourselves to not mention any specific tools, but...that didn't last very long.
★Show Links★
- Bret's Docker, Swarm, and Kubernetes Courses
- State of DevOps 2019
- Laura's Twitter
- Bret's Twitter
★ Support this podcast on Patreon ★
In this episode, I chat with a powerhouse combo of Kelsey Hightower and Jérôme Petazzoni, who's combined influence in the container space can not be overstated. I was a bit nervous for this one, having such big stars on the show n' all, but I think it went great as we dove into various Kubernetes and container topics. This is surely "one for the books"!
★Show Links★
- [Sponsor] Manning Publications, get 40% off your first book or video order at manning.com with coupon poddocdev19 (enter at checkout)
- Bret's Docker and Kubernetes Courses
- Kelsey Hightower KubeCon 2019 US Keynote
- Kelsey's Tweet On Future of K8s
- Heroku
- Arrested DevOps Podcast Kelsey Hightower Episode
- Google Cloud Run
- Docker In Docker
- Aquasecurity Trivy
- Snyk
- Kelsey's Twitter
- Jerome's Twitter
★ Support this podcast on Patreon ★
In this episode, I talk with Elton Stoneman, an Architect at Docker. We talk about Everything Docker and Windows, covering topics like WSL, Windows containers, Docker on Windows Server, and more.
And as a reminder, this podcast is listener supported by those of you that buy my Docker, Swarm, and Kubernetes courses. If you're already one of my 120,000 students, I thank you so much for your support.
Just last week we launched Kubernetes Mastery, which lets you dive into hands-on with the leading container orchestrator. I built this new course with my friend Jérôme Petazzoni, who's been teaching Kubernetes and Docker longer than almost anyone.
You can get coupons for those courses at bretfisher.com. We're launching more videos monthly, which you can get notified of on my newsletter, which is also at bretfisher.com
★Show Links★
- Bret's Docker, Swarm, and Kubernetes Courses
- Pluralsight Modernizing .NET Framework
- Elton's Blog
- Elton's Book, Learn Docker in a Month of Lunches
- Elton's Workshop
- Pluralsight Monitoring Containerized App Health
- Elton's Blog Post, Getting Started With K8s on Windows
- Compose On Kubernetes GitHub Repo
- Docker Beta Release
- Elton's Twitter
★ Support this podcast on Patreon ★
In this 50th episode, I sit down with two people from Cloudbees, Viktor Farcic, and Oscar Medina. We talk about CI/CD in Kubernetes and the GitOps-style of continuous deployment using Jenkins X.
And as a reminder, this podcast is a listener supported by those of you that buy my docker, swarm, and kubernetes courses. If you're already one of my 120,000 students, I thank you so much for your support. You can get coupons for those courses at bretfisher.com. We're launching more video updates and a whole new Kubernetes Mastery course soon, which you can get notified of on my newsletter, which is also at bretfisher.com
Lastly, if you like this podcast, please take a moment to give it a 5-star rating in your favorite podcast player, so we can keep making more of 'em.
Now on with the show.
★Show Links★
- Bret's Website
- Jenkins X
- DevOps for SharePoint Book
- Viktor's Blog
- DevOps Paradox Book
- The DevOps 2.6 Toolkit
- Oscar's Twitter
- Viktor's Twitter
- Oscar's Blog
★ Support this podcast on Patreon ★
In this special episode, just a day after Docker announces they've split the company and sold their Enterprise products, I sit down with fellow Docker Captians Jeff Nickoloff, Michael Irwin, and Nirmal Mehta to discuss it, as well as the future of Docker's open source.
And as a reminder, this podcast is listener supported by those of you that buy my courses. If you're already one of my 120,000 students, I thank you so much for your support. We're launching a whole new Kubernetes Mastery course soon, an you can get course coupons, join my 20,000 user Slack Community and signup for my newsletter at bretfisher.com
★Show Links★
- Mirantis Press Release
- Docker Press Release
- Mirantis CEO Blog Post
- Docker CEO Blog Post
- Acquisition FAQs
★ Support this podcast on Patreon ★
In this episode, I talk about proxying with NGINX vs. Traefik, and the proper protocol for image tagging in a CI environment. I give a quick "elevator pitch" on Kubernetes, and I talk about service meshes like Istio. I also cover adding a conditional healthcheck to delay a service startup until another service is healthy
★Show Links ★
- [Sponsor] Manning Publications, get 40% off your first book or video order at manning.com with coupon poddocdev19 (enter at checkout)
- Authors of Docker in Action on my YouTube Live
- Docker PHP Good Defaults
- MySQL 8.0 Dockerfile
- Hypriot
- Alex Ellis Blog
- Maesh Service Mesh
- Depends on in Compose File
- Docker Mastery for Node.js
★ Support this podcast on Patreon ★
In this episode, I answer a few questions about Swarm networking, Traefik as your proxy using Consul to store its configuration, and then I go into deeper detail about logging in Docker.
★Show Links ★
- Dog vs. Cat Stack Proxy Global
- Nginx Dockerfile
- Solarwinds Papertrail
★ Support this podcast on Patreon ★
In this episode, I have a great chat with Darren Shepherd, who is the Co-founder and Chief Architect at Rancher Labs. You probably know them for making, well, Rancher. We also talk about k3s, k3OS, RancherOS, RIO and k3v. It was a lot of fun and we covered a lot of ground on how they've launched so many Kubernetes projects in the last few years.
★Show Links ★
[Sponsor] Manning Publications, get 40% off your first book or video order at manning.com with coupon poddocdev19 (enter at checkout)
- Authors of Docker in Action on my YouTube Live
- Darren's Twitter
- K3s
- Rancher
- k3d GitHub Repo
- Alex Ellis' Blog
- Hypriot Blog
- k3OS
- Rio
- Rancher Website
- GitOps Blog Post
- Rancher Project Longhorn
- k3v
- Rancher's Slack Chat
- Rancher's YouTube Channel
★ Support this podcast on Patreon ★
In this episode from my YouTube Live show, I talk more about Swarm and Kubernetes for Container Orchestration, and how I believe you should learn both. I answer questions from my Live YouTube audience and share some pros and cons of using each of the orchestrators. I recently updated my Docker Mastery course to include Kubernetes, so now you can get the best training on Docker, Compose, Swarm, and Kubernetes in a single course. Docker Mastery now includes over 15 hours of video. You can get discount coupons for all my courses at bret.show/courses
★Show Links ★
- My Courses
- My Github AMA
★ Support this podcast on Patreon ★
In this episode, I answer some student questions about Kubernetes setup, DNS round robin, some new docker plugins, and what GitOps is.
★Show Links★
- DNS Round Robin Wiki
- Docker CLI plugins list
- Newsletter
★ Support this podcast on Patreon ★
In this episode, I give a brief rundown of Kubernetes architecture, and how the raft consensus algorithm plays a major role in server communication within your cluster.
★ Support this podcast on Patreon ★
In this episode, we're celebrating the annual Sysadmin Day by covering system administration topics with containers. We'll go over health checks, exit codes, containers on windows, and more.
★Show Links★
- Sysadmin Day 2019 goodies
- Portainer
- Dog vs Cat Repo
- Awesome Docker
- Jfrog artifactory repository manager
- Gitlab repository manager
- Python Docker hub image
- Docker Mastery for Node.js course
- Nicolaka/netshoot- containers for network troubleshooting
★ Support this podcast on Patreon ★
In this episode, I talk with Chris Hickman about using containers since the early days of docker, using AWS ECS as your orchestrator, and more...
★Show Links★
- Datadog Sponsor Link
- Amazon ECS
- Bret's At home setup on Kit
- Mobycast
★ Support this podcast on Patreon ★
In this episode, I talk with the authors of the book Docker In Action, 2nd Edition. We have a great chat on real-world craziness in running software and challenges with containers. It was a lot of fun, and I've put their book discount code in the show notes.
★Show Links ★
- Secrets and LIE-abilities
- Docker in Action 2nd edition
- 40% discount on book- poddevt19
- DevOps Topologies
- Kubernetes this month
- No Drama DevOps
★ Support this podcast on Patreon ★
In this episode, I talk with Docker Captain Antonis Kalipetis about various development in docker topics.
★Show Links ★
- Docker Mastery for node.js
- Stolos
- Azure/draft
- draft.sh
- Swarm dind
- Docker hearts WSL 2
- Transistor
- Docker CE releases
- Rio
- Antonis Twitter
★ Support this podcast on Patreon ★
In this episode, I discuss learning Linux with John Kennedy, who helps organize the Northern Virginia Linux Users Group, and how we might learn Linux by running things inside Docker containers.
★Show Links ★
- [Sponsor] Datadog monitoring and analytics free trial and t-shirt
- Novalug Meetup
- Bret Fisher httping
- RasPi 4
- Netshoot
- Bash on Docker Hub
- Oh My Fish
★ Support this podcast on Patreon ★
In this episode, I talk with Betty Junod of Solo.io about Containers, Kubernetes, and Service Mesh.
★Show Links★
- [Sponsor] Datadog free 14-day trial and t-shirt
- Lee Calcote Interview
- Solo io open source
- SuperGloo
- Service Mesh Hub
- Istio
- Netshoot
★ Support this podcast on Patreon ★
In this episode, I answer a question about controlling container startup orders in a multi-container app.
★Show Links ★
- 12 Factor
★ Support this podcast on Patreon ★
In this episode, I chat with Ray Vittum, our DevOps intern, about his experience while moving from a traditional sysadmin role to a DevOps one.
★Show Links ★
- Linkedin DevOps Foundations course
★ Support this podcast on Patreon ★
In this episode, I answer a question about if it's possible to migrate or containerize, a VM into a container.
★Show Links★
- Github Image2Docker Windows
- Github Image2Docker Linux
- Youtube link to Image2Docker
★ Support this podcast on Patreon ★
In this episode, I answer a question about how to start a Swarm service container in privileged mode.
★Show Links★
- Docker CE Releases
- moby/moby service create options
- dogvs.cat
★ Support this podcast on Patreon ★
In this episode, I answer a question about how to use external volume storage with docker and swarm.
★ Support this podcast on Patreon ★
In this episode, I answer a question about how to troubleshoot docker swarm networking and docker DNS.
★Show Links★
- Nicolaka Netshoot
- Bret Fisher Netshoot
- Swarm firewall Ports
★ Support this podcast on Patreon ★
In this episode, I discuss the differences between the docker file commands of ENTRYPOINT and CMD, and how to use them together for automating container startup tasks.
★Show Links ★
- Docker Docs Entrypoint
- Dockerfile Best Practices Entrypoint
- Entrypoint vs. CMD
★ Support this podcast on Patreon ★
In this episode, I answer a question about how to control admin access to docker and swarm using roll based authentication.
★Show Links ★
- Portainer
★ Support this podcast on Patreon ★
In this episode, I talk with Kubernetes, Docker, and Swarm instructor Jérôme Petazzoni about how to learn and use Kubernetes, and we answer a bunch of YouTube Live questions along the way.
★Show Links★
- PyCon
- Kubernetes
- Kubernetes on Docker Desktop
- Minikube
- Single Node Kubernetes
- Play With Kubernetes
- K3s
- Running Kubernetes Without Nodes
- 12 Factor Apps
★ Support this podcast on Patreon ★
In this episode, I'm live from the show floor at DockerCon with Nirmal Mehta and Nils De Moor as we cover the announcements, our favorite sessions, and take your questions on everything from Kubernetes, K3s, Proxy's, Traefik, Docker Enterprise 3.0, Linkerd, storage replication, and more.
★Show Links ★
- Kubernetes CVE Deep Dive
- Laura Tacho CI/CD Development Pipeline
- Docker Enterprise 3.0 Announcement
- Docker Enterprise 3.0 Beta
- K3s (simple Kubernetes)
★ Support this podcast on Patreon ★
In this episode, I have guests Nirmal Mehta, a Chief Technologist at Booz Allen Hamilton, and Michael Irwin, an Application Architect at Virginia Tech University. We talk about running tech meetups, how to be a community leader, the Docker and ARM announcement (the processor in Raspberry Pi), Docker for Node.js, AWS ARM A1 instances, QEMU, Traefik Proxies, Docker Swarm, Network Time (NTP, SNTP), Let's Encrypt, and more.
★Show Links ★
- Docker and ARM Announcement
- Docker Mastery for Node.js
- AWS ARM A1 Instances
- QEMU
- Traefik
- Let's Encrypt
- Michael's Blog
★ Support this podcast on Patreon ★
In this episode, I am joined by Phil Estes of IBM, Scott Coulton of Microsoft, and Sujay Pillai. We're all working in the DevOps space and discuss topics and open source projects weeks before DockerCon. Topics include Kubernetes, CNCF, ContainerD, CNAB, Rootless Docker, Linux security in containers, and more.
★Show Links★
- CNAB
- ContainerD
- CNCF
- Kubernetes
- User Namespaces
- Rootless Docker
- DockerCon
- Phil's Talks and Publications
- Phil's Blog
- Scott's Blog
- Sujay's Blog
★ Support this podcast on Patreon ★
In this episode, I chat with Laura Tacho from CloudBees and Marcos Lilljedahl from iúnigo, both Docker Captains and developers. We take questions from the live audience and discuss topics ranging from the difference between Jenkins and Jenkins X, to Facebook's osquery and another new open-source, to Docker's upcoming 19.03 release and its new features.
★Show Links★
- OSQuery
- Play With Docker
- Play With Docker Training
- GitHub Jedis
- Play With Kubernetes
- Cloud Run
- Docker CE Releases
- Jenkins X
★ Support this podcast on Patreon ★
I answer a question about how to build multiple Docker images from a single GitHub repository. I talk about how to change which Dockerfile Docker build will use, and how to control the path (or context) that Docker builds from.
★Show Links ★
- Docker Build Documentation
★ Support this podcast on Patreon ★
I answer a question about using TLS/SSL certificates in local development with Docker for microservices and then how to use those certs in production Docker. I talk about Let's Encrypt, Traefik, and more.
★Show Links ★
- Using TLS for Localhost
- Traefik with Swarm
- Traefik Proxy
★ Support this podcast on Patreon ★
Docker Captain Michael Irwin and I discuss Java .war files in containers, and how you should break them up. We answer a question on how to design them for easy isolation and replacement.
★ Support this podcast on Patreon ★
Docker Captain Michael Irwin and I discuss backups of databases in a container cluster like Docker Swarm.
★Show Links★
- Dog v. Cat GitHub
★ Support this podcast on Patreon ★
Docker Captain Michael Irwin and I go over various storage options for persistent volumes in Swarm, and how you need to think about storage for Docker.
★Show Links★
- Docker Hub Volume Drivers
- StorageOS
- REX-ray
★ Support this podcast on Patreon ★
In March of 2019, I talked with Michael about the new "docker-app" experimental tool. This clip talks about why it exists, and how to use it. In April 2019 Docker released a beta of 19.03 that includes "docker-app" as a plugin to the standard docker CLI, as "docker app", but most other features of this tool stay the same. We also talk about the standard behind this tool, CNAB.
★Show Links★
- Docker App GitHub
- CNAB
★ Support this podcast on Patreon ★
In this episode, I list the steps to copy or sync files between a docker volume and the host
★Show Links ★
- rsync file copy tool
- ENTRYPOINT script best practices link one
- ENTRYPOINT script best practice more info
★ Support this podcast on Patreon ★
In this episode, I quickly list the steps to set up a Docker Swarm in AWS using docker-machine and shell scripts
★Show Links★
- Shell script samples to create servers with docker-machine and create a swarm
- Docker Swarm Firewall Ports (including AWS Security Groups)
★ Support this podcast on Patreon ★
I go through the multiple ways to get your environment variables into a container, and what shouldn't go into your ENV's.
★Show Links★
- Twelve Factor Apps: The Config
- Sample PHP Dockerfile with lots of ENV
- Those Same ENV's overwritten with docker-compose.yml
- Simple example of using Docker ENV's to create custom app config
- Docker MySQL Official Image Entrypoint Script that creates ENV's from files (for secrets)
- 3 Docker Compose Features for Improving Team Development Workflow
★ Support this podcast on Patreon ★
In this episode, I give a quick answer to the discussion on a single production server. Should you use docker-compose or Docker Swarm?
★Show Links★
- GitHub AMA: Only one host for production, should I use docker-compose or Swarm
★ Support this podcast on Patreon ★
In this episode, I give a quick answer on how you might design MongoDB and other database servers for auto-clustering inside Docker.
★Show Notes★
- Autopilot Pattern
- Mongo Auto Cluster Setup In Docker GitHub Repo
- Examples of Container-native Database Solutions:
- https://www.cockroachlabs.com/
- https://vitess.io/
- https://rethinkdb.com/
- https://www.windocks.com/
★ Support this podcast on Patreon ★
In this episode, I answer a question on when you should run multiple apps in a container, and how you can use a supervisor to do that.
★Show Notes★
- Docker Docs on Supervisor and Multiple Services In Containers
- Bret's Example of PHP-FPM plus Nginx Supervisor Config
★ Support this podcast on Patreon ★
In this episode, I answer the question: should you migrate your postgres servers into containers.
★Show Links★
- HPE and Docker Whitepaper on MySQL performance
- Sysbench and Docker Setups to Benchmark Physical, Virtual, and Container-based MySQL
★ Support this podcast on Patreon ★
In this episode, I talk about the recent Docker runc vulnerability and what you need to do about it.
★Show Correction★
Correction from the audio, Docker is patching the last two stable releases of the community edition, not just the last one. See the announcement below for details.
★Show Links★
- Docker announcement
- Kubernetes announcement
- What is runC?
★ Support this podcast on Patreon ★
In this episode, I answer a question about how to control docker and other containers like a nginx proxy from inside a separate container.
★Show Links★
- Docker RBAC example
- Traefik
- Docker Socket Proxy
- My Swarm Stack Examples
★ Support this podcast on Patreon ★
In Docker 18.09.1 and Docker Desktop 2.0.0.2 (stable) in January 2019, we now have a new option for running Windows Containers on Windows 10 in "process isolation mode" which removes the need to launch a full Windows Server Hyper-V VM. It's a great new way for running lightweight Windows Containers, but has its own limits and config requirements.
★Show Notes★
- Setting up Win10 Docker Process Isolation
- Moby/Moby PR
★ Support this podcast on Patreon ★
A viewer asks how they can prototype their software in Docker with a Raspberry Pi. I explain the various parts of the workflow including ARM 64 vs. x64 CPU architectures, the benefits of QEMU emulation in Docker Desktop, and how to get Docker images from your local machine to the Pi.
★Show Notes★
- Alex Ellis' Raspberry Pi blog posts
- QEMU Emulator in Docker Desktop for Mac/Windows
★ Support this podcast on Patreon ★
A viewer asks why their Elasticsearch server on their local development setup with Docker Compose would give them a yellow health status. I talk about the common causes for this in my own experience with shard replication.
★Show Notes★
- Elasticsearch health endpoints
★ Support this podcast on Patreon ★
A viewer asks about how their local docker container IP's, if behind NAT, can have issues with outside subnets at their company. I explain some of the ways even NAT won't solve IP routing for containers and how you can change your settings to different private subnets.
★Show Notes★
- Three places to control different docker subnets
★ Support this podcast on Patreon ★
Someone asks about image pruning while a Swarm service is in the middle of a deployment, and how they've experienced failed containers. I reply with the details of what's going on in specific steps of a Service creation and deployment, and how the prune command could interfere.
★Show Notes★
- Docker Docs on image prune
- Docker Docs on Swarm task states
★ Support this podcast on Patreon ★
I answer questions about updating your app secrets and configs in Docker Swarm without downtime
★Links to things mentioned★
- Docs reference on config/stack files and the name object
- Stack example in my dogvs.cat repo
★ Support this podcast on Patreon ★
I answer questions about designing Apache web servers for multiple Websites in containers
★ Support this podcast on Patreon ★
I answer a question about using sudo in containers and file permissions when using non-root users.
★ Support this podcast on Patreon ★
Alpine Linux container images are often regarded as the "best for production, security, and image size", but I debate this based on several trends and current limitations.
★Links I reference in the show★
- Alpine Linux
- CVE Database
- Blog on CVE Scanners and their effectiveness on Alpine images
★ Support this podcast on Patreon ★