DockerCon EU 2015 has ended

Sign up or log in to bookmark your favorites and sync them to your phone or calendar.

Black Belt Tech [clear filter]
Monday, November 16

11:45 CET

Tor + Docker = Anonymous
This talk is inspired by the series of blog posts Jessie wrote. This talk will cover running tor relays in containers, routing all traffic through tor in a container, running a tor socks proxy in a container, and lastly running a Docker native networking plugin to route all container traffic through tor.

avatar for Jessie Frazelle

Jessie Frazelle

Software Engineer, Docker
Nerd by day, rap battle champ by night.Jess tweets at @frazelledazzell.

Monday November 16, 2015 11:45 - 12:30 CET
Level 1, Room 111

14:00 CET

Kernel load-balancing for Docker containers using IPVS
Many companies use expensive proprietary hardware and software to provide load-balancing and routing for their users and services. I'm going to demonstrate how the same or even exceeding performance and feature set can be achieved using an open-source technology which has been a part of the mainline Linux kernel for over a decade – IPVS. Specifically, you'll see how IPVS can be used to automatically configure load balancing and routing for Docker containers using a simple Go daemon and a Docker plugin.

avatar for Andrey Sibiryov

Andrey Sibiryov

Sr. Infrastructure Engineer, Uber Technologies
Andrey is the author and lead developer of the Cocaine Cloud platform). Currently works as a Senior Infrastructure Engineer in Uber Technologies, concentrating on metrics and observability. Previously Andrey has been working on Helios CI/CD platform for Docker in Spotify and was... Read More →

Monday November 16, 2015 14:00 - 14:45 CET
Level 1, Room 111

14:55 CET

Cgroups, namespaces, and beyond: what are containers made from?
Linux containers are different from Solaris Zones or BSD Jails: they use discrete kernel features like cgroups, namespaces, SELinux, and more. We will describe those mechanisms in depth, as well as demo how to put them together to produce a container. We will also highlight how different container runtimes compare to each other. 

avatar for Jérôme Petazzoni

Jérôme Petazzoni

Tinkerer Extraordinaire, Docker
Jérôme works at Docker, where he helps others to containerize all the things. He was part of the team that built, scaled, and operated the dotCloud PAAS, before it became Docker. When annoyed he threatens to replace things with a very small shell script.Jérôme tweets @jpetazz... Read More →

Monday November 16, 2015 14:55 - 15:40 CET
Level 1, Room 111

16:25 CET

Experiences with AWS immutable deploys and job processing
How Docker is used at Gilt: At Gilt we use Docker primarily as a unit of immutability and to allow a standard way of deploying all kinds of software as opposed to its container properties. 

Why Gilt built Ionroller: An overview of the problems we tried to solve with Ionroller and immutable deploys. Pitfalls we've encountered with immutable deployments since Ionroller saw adoption in Gilt. Will cover issues such as DNS traffic migration, utilisation of resources ELBs not warmed up properly, Elasticbeanstalk using Nginx as proxy etc. Our experiences with Cloudformation and Codedeploy as an alternative to Ionroller and Elasticbeanstalk. 

Jobs: How we used to do batch jobs. Solutions we considered such as Mesos and Chronos. An overview of Sundial, an in house solution we built in the last few months and hope to open source for running containerized Docker jobs on Amazon ECS and why we chose it as our preferred solution. 

avatar for Kevin O'Riordan

Kevin O'Riordan

Senior Software Engineer, Gilt
Keven has been a software engineer working at Gilt's Dublin office for the past 18 months. First working on marketing technologies and currently working on Gilt's personalization and machine learning platform. Previous to Gilt, Kevin worked for AOL on their targeting platform for... Read More →

Monday November 16, 2015 16:25 - 17:10 CET
Level 1, Room 111

17:20 CET

Live migrating a container: pros, cons and gotchas
 In this talk I will briefly show why you might want to live migrate a container, why you might want to avoid doing this and what can be done instead. The main topic of the talk would to demonstrate why live migrating a container is more complex than live migrating a virtual machines and what can be done with this complexity. 

avatar for Pavel Emelyanov

Pavel Emelyanov

Principal Engineer, Odin
Principal engineer at Odin Server Virtualization team, creator and maintainer of the CRIU project. Joined Parallels in 2004 as junior Linux kernel developer, later became kernel team leader. Now works on architecture of the Odin Server products.Pavel tweets at @xemulp... Read More →

Monday November 16, 2015 17:20 - 18:05 CET
Level 1, Room 111
Tuesday, November 17

11:15 CET

How to be successful running Docker in Production

John’s presentation will cover his lessons learned from running Docker in Production @ SalesforceIQ. Learn how to scale your registry using AWS and S3. Should you use Device Mapper or AUFS? Why run Swarm, Mesos, Kubernetes, or neither. Finally, know how persistent storage (Kafka, Cassandra, or SQL) can be run successfully with Docker in Production

His team focuses on Docker based solutions to power their SaaS infrastructure and developer operations.

avatar for John Fiedler

John Fiedler

Sr. Director of Engineering, SalesforceIQ
John Fiedler is a Sr. Director of Engineering Operations at SalesforceQ. His team focuses on Docker based solutions to power their SaaS infrastructure and developer operations.John tweets at @johnfiedler... Read More →

Tuesday November 17, 2015 11:15 - 12:00 CET
Level 1, Room 111

13:30 CET

Green Font, Black Background – Docker Security by Example

In this session, you will learn everything you need to know about docker security best practices. We will cover how to write clean Dockerfiles and trim down on your base images. We will go over the runtime security settings you can and should apply to your running containers, go over a few examples around monitoring and incident respo nse and will end up demoing image signing and verification in Docker.

This is a no-slides session, and the console will be the only thing up on the screen.

avatar for Nathan McCauley

Nathan McCauley

Director of Security, Docker
Solving security problems by shipping. Past: Security Engineering Manager @Square, Engineer & PM @ArxanNathan tweets at @nathanmccauley... Read More →
avatar for Diogo Monica

Diogo Monica

Security Lead, Docker
Diogo Mónica leads the security team at Docker, after four years at Square where he led the platform security team. He is a security researcher at Instituto Superior Técnico, university from which he received his BSc and MSc degrees in Communication Networks Engineering. Diogo serves... Read More →

Tuesday November 17, 2015 13:30 - 14:15 CET
Level 1, Room 111

14:25 CET

Windows Server Containers – How we got here and architecture deep dive

Porting Docker for Windows is no small feat.  The technology behind Docker today takes advantage of Linux capabilities like namespaces and cgroups.  For native containers to exist on Windows and to have a Docker Engine for Windows, first similar primitives needed to be developed into the Windows operating system.  In this session we will explain these Windows primitives in relation to similar primitives in Linux and other architectural changes on the OS and Engine side to make containerization possible.  The process of porting includes not only the technology but also open source community interactions and cultural changes to enable this development.  And of course there will be a cool demo…

avatar for Arnaud Porterie

Arnaud Porterie

Senior Engineering Manager, Docker
Arnaud is a core maintainer of the Docker open source project, and the engineering manager for the Engine team inside Docker Inc.Arnaud tweets at @icecrime.
avatar for John Starks

John Starks

Principal Software Engineering Lead, Microsoft
John Starks is a Principal Engineering Lead on the virtualization team at Microsoft, part of the Windows and Devices Group. He is one of the core architects for Windows containers and leads the team responsible for the management interfaces and Docker Engine contributions. John joined... Read More →

Tuesday November 17, 2015 14:25 - 15:10 CET
Level 1, Room 111

15:55 CET

Container torture: run any binary in any running container. 0 patch.
Running a container app in the container is easy, attaching a custom app to a running container is a bit trickier. But, what if I wanted to run any arbitrary binary in any arbitrary running container? Common wisdom says it's impossible. Is it ? This talk dives into containers internals, just above the kernel surface and demonstrates that this is, indeed possible. With a bit of C magic and ptrace.

avatar for Jean-Tiare Le Bigot

Jean-Tiare Le Bigot

System Developer, OVH
Jean-Tiare Le Bigot leads Sailabove Docker hosting project. On his spare time, he loves digging under the hood and writes about his findings. He strongly believes that simple isbeautiful.Jean-Tiare tweets at @oyadutaf... Read More →

Tuesday November 17, 2015 15:55 - 16:40 CET
Level 1, Room 111