第66期 · Docker周報

### 熱點新聞 ## [Kubernetes 1.2.0 攜一大波新特性震撼發布！單集群可管理1000個節點](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzIwNzA1MTA5OA%3D%3D%26mid%3D628878734%26idx%3D1%26sn%3D81d3c6b24b54afb168412544751a7d88%26scene%3D1%26srcid%3D0319XZ0po05fsmpvfMteXT7L%26key%3D710a5d99946419d996336c5a953b71b657add2c484dc5f3e5ba0de4ac96d5dd0fed24ed1d67dea058a43daf1ace7a35f%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DrrmShIDYf40I%252FwJVE3csK%252F7ggXStIaWu%252F48gPkJvBS6AdjUHTLzQRYscjAXqADJ5&itemId=880) Kubernetes 1.2.0 主要變更：支撐的集群規模增加400%，目前單個集群最多管理1000個，運行30000個Pods。在單個節點上，Kubelet可支持100個Pod，并且性能是v1.1.1的四倍。 [時速云](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzIwNzA1MTA5OA%3D%3D%26mid%3D628878734%26idx%3D1%26sn%3D81d3c6b24b54afb168412544751a7d88%26scene%3D1%26srcid%3D0319XZ0po05fsmpvfMteXT7L%26key%3D710a5d99946419d996336c5a953b71b657add2c484dc5f3e5ba0de4ac96d5dd0fed24ed1d67dea058a43daf1ace7a35f%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DrrmShIDYf40I%252FwJVE3csK%252F7ggXStIaWu%252F48gPkJvBS6AdjUHTLzQRYscjAXqADJ5&itemId=880) ### 演講SLIDES ## [CoreOS這家公司，都做了哪些事情？](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fvdisk.weibo.com%2Fs%2FFkad7p8nWWhjc&itemId=881) CoreOS CTO的KubeCon上的分享！ [微盤](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fvdisk.weibo.com%2Fs%2FFkad7p8nWWhjc&itemId=881) ### 學習教程 ## [集群調度框架的架構演進之路](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1113&itemId=870) 集群架構是現代數據中心非常重要的組件，在最近幾年中有長足發展。架構也從單體式設計轉向更加靈活、去中心化和分布式設計。然而，許多現代開源實現仍然是單體式設計或者缺少很多功能，而這些功能對實際用戶非常有用。 [Firmament](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1113&itemId=870) ## [使用Docker構建持續集成與自動部署的Docker集群](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fmy.oschina.net%2Fjayqqaa12%2Fblog%2F633683%3Ffromerr%3DxPwL3Xtn&itemId=871) 讓我們來使用Docker來構建我們的持續集成系統，自動部署集群管理，集中式日志管理和主機監控系統，本文結合作者的實踐介紹了構建的整個步驟和遇到的問題。 [開源中國](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fmy.oschina.net%2Fjayqqaa12%2Fblog%2F633683%3Ffromerr%3DxPwL3Xtn&itemId=871) ## [初次微服務體驗：從Docker容器農場說起](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fblog.dataman-inc.com%2F92-docker-shurenyun%2F&itemId=872) 在本文中，Mesos、Zookeeper、Marathon、Bamboo + HaProxy、Logstash、MesosDns、ElasticSearch和Kibana + Nginx等紛紛亮相，并配有詳細的代碼說明。本文旨在從最初的安裝和環境基礎建立開始，一步步指引你搭建自己的集群，實現你的目標架構，并在其上運行分布式服務。 [數人云](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fblog.dataman-inc.com%2F92-docker-shurenyun%2F&itemId=872) ## [微服務架構會和分布式單體架構高度重合嗎？](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMjM5MDE0Mjc4MA%3D%3D%26mid%3D403062061%26idx%3D1%26sn%3D4a2da04a0d649144082bfa302a2b7404%26scene%3D1%26srcid%3D03159d18Z52qHkljexWHOBTl%26key%3D710a5d99946419d9373dc223192af8cfd99ac2ccdeb297e66f4ef464f8e58579e56522378c9e204560f9b592de40edc3%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DD0HgkPuhk%252FeLVZfJ1X9stOxl4O%252BtEV19QYLkIHhvTJ24V1TTVVN4WGrBKP1rKlll&itemId=873) 在最近的Microservices Practitioner Summit峰會上，來自Facebook的工程師Ben Christensen就目前正在普遍快速增長的分布式系統與二進制依賴關系的一種反面模式發表了自己的看法。 [InfoQ](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMjM5MDE0Mjc4MA%3D%3D%26mid%3D403062061%26idx%3D1%26sn%3D4a2da04a0d649144082bfa302a2b7404%26scene%3D1%26srcid%3D03159d18Z52qHkljexWHOBTl%26key%3D710a5d99946419d9373dc223192af8cfd99ac2ccdeb297e66f4ef464f8e58579e56522378c9e204560f9b592de40edc3%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DD0HgkPuhk%252FeLVZfJ1X9stOxl4O%252BtEV19QYLkIHhvTJ24V1TTVVN4WGrBKP1rKlll&itemId=873) ## [用P2P方法快速分發Docker鏡像](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzAwNzUyNzI5Mw%3D%3D%26mid%3D476871072%26idx%3D1%26sn%3D33d53a1dc0be0f8f50bafde084d727a4%26scene%3D1%26srcid%3D0316Jc8hEYQRCb9WYts2iZXD%26key%3D710a5d99946419d9df926d10d7eac77d4dd49c468d0807e39d9a9ca87510444ee7555436d709edf7971ce989435fddb8%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DUk7tF5nU4vYiQicN%252BarO3EIKUMipIit6SD29SebZ10KmppH8OsgOjUCkLobPjAe0&itemId=874) 在部署較大的容器應用集群時，把應用鏡像發布到所有節點常常需要大量時間。我們VMware的研發團隊測試了P2P的方法，能夠較好地解決大規模鏡像分發的問題，為運維實踐提供了很好的指引。 [亨利筆記](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzAwNzUyNzI5Mw%3D%3D%26mid%3D476871072%26idx%3D1%26sn%3D33d53a1dc0be0f8f50bafde084d727a4%26scene%3D1%26srcid%3D0316Jc8hEYQRCb9WYts2iZXD%26key%3D710a5d99946419d9df926d10d7eac77d4dd49c468d0807e39d9a9ca87510444ee7555436d709edf7971ce989435fddb8%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DUk7tF5nU4vYiQicN%252BarO3EIKUMipIit6SD29SebZ10KmppH8OsgOjUCkLobPjAe0&itemId=874) ## [Amazon與Google間的容器競爭持續發酵](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1114&itemId=875) Amazon和Google仍然是在Docker Linux云端容器領域中最強勁的競爭者，由于微軟Azure的加入使得他們的競爭進入白熱化狀態。本文主要介紹了Google GKE和Amazon ECS兩個產品在實現自動收縮、冗余性和互操作性上的不同之處，當然還提到了微軟Azure的現狀。 [SearchCloudComputing](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1114&itemId=875) ## [日本最大菜譜網站Cookpad微服務經驗總結](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzI3OTEzNjI1OQ%3D%3D%26mid%3D403624365%26idx%3D1%26sn%3D9a3f63be7d650e0a347bc102a83ca15d%26scene%3D1%26srcid%3D0317q9gHanJNgm4OFA3liwyS%26key%3D710a5d99946419d907c0f48a442643c7096efd66aac39fe7f9d53334c9a8b6e9a4afae22ef5077a3614fc0fe07d1b25b%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DHuFa6PT12%252Bde1ALp8d%252Bw4oYirW421SDBLycyce3u6K5vwpVsZHsYzgYykrOBJoUD&itemId=876) 本文并不打算對微服務一些抽象難懂的概念進行解說，而是更專注于具體實例。本文應該會對那些理解一些微服務的基本概念，而實際中又不知道如何應用的人有很大幫助。 [西小口物語](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzI3OTEzNjI1OQ%3D%3D%26mid%3D403624365%26idx%3D1%26sn%3D9a3f63be7d650e0a347bc102a83ca15d%26scene%3D1%26srcid%3D0317q9gHanJNgm4OFA3liwyS%26key%3D710a5d99946419d907c0f48a442643c7096efd66aac39fe7f9d53334c9a8b6e9a4afae22ef5077a3614fc0fe07d1b25b%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DHuFa6PT12%252Bde1ALp8d%252Bw4oYirW421SDBLycyce3u6K5vwpVsZHsYzgYykrOBJoUD&itemId=876) ## [KUBERNETES救援 – 教你如何從新技術的坑里爬出來(下)](http://weekly.dockone.io/redirect?url=http%3A%2F%2Finsights.thoughtworkers.org%2Fhow-to-play-with-new-technology-2%2F&itemId=877) 經過一番努力，排除了基礎設施的問題，集中精力查找Kubernetes配置錯誤，現在要抓緊最后一根救命稻草——日志，期待能從日志中找到解決問題的蛛絲馬跡。 [ThoughtWorkers](http://weekly.dockone.io/redirect?url=http%3A%2F%2Finsights.thoughtworkers.org%2Fhow-to-play-with-new-technology-2%2F&itemId=877) ## [關于容器持久化存儲的3個方案](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1051&itemId=878) 文章討論了容器的持久化存儲的問題。從持久化的定義到持久化的理解，并且對目前容器持久化的三種方案進行了回顧。 [CloudArchitectMusings](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1051&itemId=878) ## [一個適合 Kubernetes 的最佳網絡互聯方案](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1115&itemId=879) 本文比較了幾種 Kubernetes 聯網方案，包括 Flannel（aws-vpc | host-gw | vxlan）和 IPvlan 。目前建議選擇 flannel + host-gw 方案，沒有特別依賴，性能也夠用。一旦 flannel 支持 IPvlan （有自動化設置工具了），且 Linux 內核版本比較新，就可以采用 IPvlan 方案。 [Machine Zone](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1115&itemId=879) ## [說到容器的安全性，我覺得它就像三明治](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1134&itemId=882) 作者用生動的比喻把容器比做一個三明治，而容器安全則是隱藏在三明治里面不為人知的成分。選擇一個安全可用的容器，就如同選擇一個放心可吃的三明治一樣。