第66期 | Docker周报

### 热点新闻 ## [Kubernetes 1.2.0 携一大波新特性震撼发布！单集群可管理1000个节点](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzIwNzA1MTA5OA%3D%3D%26mid%3D628878734%26idx%3D1%26sn%3D81d3c6b24b54afb168412544751a7d88%26scene%3D1%26srcid%3D0319XZ0po05fsmpvfMteXT7L%26key%3D710a5d99946419d996336c5a953b71b657add2c484dc5f3e5ba0de4ac96d5dd0fed24ed1d67dea058a43daf1ace7a35f%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DrrmShIDYf40I%252FwJVE3csK%252F7ggXStIaWu%252F48gPkJvBS6AdjUHTLzQRYscjAXqADJ5&itemId=880) Kubernetes 1.2.0 主要变更：支撑的集群规模增加400%，目前单个集群最多管理1000个，运行30000个Pods。在单个节点上，Kubelet可支持100个Pod，并且性能是v1.1.1的四倍。 [时速云](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzIwNzA1MTA5OA%3D%3D%26mid%3D628878734%26idx%3D1%26sn%3D81d3c6b24b54afb168412544751a7d88%26scene%3D1%26srcid%3D0319XZ0po05fsmpvfMteXT7L%26key%3D710a5d99946419d996336c5a953b71b657add2c484dc5f3e5ba0de4ac96d5dd0fed24ed1d67dea058a43daf1ace7a35f%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DrrmShIDYf40I%252FwJVE3csK%252F7ggXStIaWu%252F48gPkJvBS6AdjUHTLzQRYscjAXqADJ5&itemId=880) ### 演讲SLIDES ## [CoreOS这家公司，都做了哪些事情？](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fvdisk.weibo.com%2Fs%2FFkad7p8nWWhjc&itemId=881) CoreOS CTO的KubeCon上的分享！ [微盘](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fvdisk.weibo.com%2Fs%2FFkad7p8nWWhjc&itemId=881) ### 学习教程 ## [集群调度框架的架构演进之路](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1113&itemId=870) 集群架构是现代数据中心非常重要的组件，在最近几年中有长足发展。架构也从单体式设计转向更加灵活、去中心化和分布式设计。然而，许多现代开源实现仍然是单体式设计或者缺少很多功能，而这些功能对实际用户非常有用。 [Firmament](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1113&itemId=870) ## [使用Docker构建持续集成与自动部署的Docker集群](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fmy.oschina.net%2Fjayqqaa12%2Fblog%2F633683%3Ffromerr%3DxPwL3Xtn&itemId=871) 让我们来使用Docker来构建我们的持续集成系统，自动部署集群管理，集中式日志管理和主机监控系统，本文结合作者的实践介绍了构建的整个步骤和遇到的问题。 [开源中国](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fmy.oschina.net%2Fjayqqaa12%2Fblog%2F633683%3Ffromerr%3DxPwL3Xtn&itemId=871) ## [初次微服务体验：从Docker容器农场说起](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fblog.dataman-inc.com%2F92-docker-shurenyun%2F&itemId=872) 在本文中，Mesos、Zookeeper、Marathon、Bamboo + HaProxy、Logstash、MesosDns、ElasticSearch和Kibana + Nginx等纷纷亮相，并配有详细的代码说明。本文旨在从最初的安装和环境基础建立开始，一步步指引你搭建自己的集群，实现你的目标架构，并在其上运行分布式服务。 [数人云](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fblog.dataman-inc.com%2F92-docker-shurenyun%2F&itemId=872) ## [微服务架构会和分布式单体架构高度重合吗？](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMjM5MDE0Mjc4MA%3D%3D%26mid%3D403062061%26idx%3D1%26sn%3D4a2da04a0d649144082bfa302a2b7404%26scene%3D1%26srcid%3D03159d18Z52qHkljexWHOBTl%26key%3D710a5d99946419d9373dc223192af8cfd99ac2ccdeb297e66f4ef464f8e58579e56522378c9e204560f9b592de40edc3%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DD0HgkPuhk%252FeLVZfJ1X9stOxl4O%252BtEV19QYLkIHhvTJ24V1TTVVN4WGrBKP1rKlll&itemId=873) 在最近的Microservices Practitioner Summit峰会上，来自Facebook的工程师Ben Christensen就目前正在普遍快速增长的分布式系统与二进制依赖关系的一种反面模式发表了自己的看法。 [InfoQ](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMjM5MDE0Mjc4MA%3D%3D%26mid%3D403062061%26idx%3D1%26sn%3D4a2da04a0d649144082bfa302a2b7404%26scene%3D1%26srcid%3D03159d18Z52qHkljexWHOBTl%26key%3D710a5d99946419d9373dc223192af8cfd99ac2ccdeb297e66f4ef464f8e58579e56522378c9e204560f9b592de40edc3%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DD0HgkPuhk%252FeLVZfJ1X9stOxl4O%252BtEV19QYLkIHhvTJ24V1TTVVN4WGrBKP1rKlll&itemId=873) ## [用P2P方法快速分发Docker镜像](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzAwNzUyNzI5Mw%3D%3D%26mid%3D476871072%26idx%3D1%26sn%3D33d53a1dc0be0f8f50bafde084d727a4%26scene%3D1%26srcid%3D0316Jc8hEYQRCb9WYts2iZXD%26key%3D710a5d99946419d9df926d10d7eac77d4dd49c468d0807e39d9a9ca87510444ee7555436d709edf7971ce989435fddb8%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DUk7tF5nU4vYiQicN%252BarO3EIKUMipIit6SD29SebZ10KmppH8OsgOjUCkLobPjAe0&itemId=874) 在部署较大的容器应用集群时，把应用镜像发布到所有节点常常需要大量时间。我们VMware的研发团队测试了P2P的方法，能够较好地解决大规模镜像分发的问题，为运维实践提供了很好的指引。 [亨利笔记](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzAwNzUyNzI5Mw%3D%3D%26mid%3D476871072%26idx%3D1%26sn%3D33d53a1dc0be0f8f50bafde084d727a4%26scene%3D1%26srcid%3D0316Jc8hEYQRCb9WYts2iZXD%26key%3D710a5d99946419d9df926d10d7eac77d4dd49c468d0807e39d9a9ca87510444ee7555436d709edf7971ce989435fddb8%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DUk7tF5nU4vYiQicN%252BarO3EIKUMipIit6SD29SebZ10KmppH8OsgOjUCkLobPjAe0&itemId=874) ## [Amazon与Google间的容器竞争持续发酵](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1114&itemId=875) Amazon和Google仍然是在Docker Linux云端容器领域中最强劲的竞争者，由于微软Azure的加入使得他们的竞争进入白热化状态。本文主要介绍了Google GKE和Amazon ECS两个产品在实现自动收缩、冗余性和互操作性上的不同之处，当然还提到了微软Azure的现状。 [SearchCloudComputing](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1114&itemId=875) ## [日本最大菜谱网站Cookpad微服务经验总结](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzI3OTEzNjI1OQ%3D%3D%26mid%3D403624365%26idx%3D1%26sn%3D9a3f63be7d650e0a347bc102a83ca15d%26scene%3D1%26srcid%3D0317q9gHanJNgm4OFA3liwyS%26key%3D710a5d99946419d907c0f48a442643c7096efd66aac39fe7f9d53334c9a8b6e9a4afae22ef5077a3614fc0fe07d1b25b%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DHuFa6PT12%252Bde1ALp8d%252Bw4oYirW421SDBLycyce3u6K5vwpVsZHsYzgYykrOBJoUD&itemId=876) 本文并不打算对微服务一些抽象难懂的概念进行解说，而是更专注于具体实例。本文应该会对那些理解一些微服务的基本概念，而实际中又不知道如何应用的人有很大帮助。 [西小口物语](http://weekly.dockone.io/redirect?url=https%3A%2F%2Fmp.weixin.qq.com%2Fs%3F__biz%3DMzI3OTEzNjI1OQ%3D%3D%26mid%3D403624365%26idx%3D1%26sn%3D9a3f63be7d650e0a347bc102a83ca15d%26scene%3D1%26srcid%3D0317q9gHanJNgm4OFA3liwyS%26key%3D710a5d99946419d907c0f48a442643c7096efd66aac39fe7f9d53334c9a8b6e9a4afae22ef5077a3614fc0fe07d1b25b%26ascene%3D0%26uin%3DMjk0NzA5ODIzMw%253D%253D%26devicetype%3DiMac%2BMacBookAir7%252C1%2BOSX%2BOSX%2B10.11.3%2Bbuild%2815D21%29%26version%3D11020201%26pass_ticket%3DHuFa6PT12%252Bde1ALp8d%252Bw4oYirW421SDBLycyce3u6K5vwpVsZHsYzgYykrOBJoUD&itemId=876) ## [KUBERNETES救援 – 教你如何从新技术的坑里爬出来(下)](http://weekly.dockone.io/redirect?url=http%3A%2F%2Finsights.thoughtworkers.org%2Fhow-to-play-with-new-technology-2%2F&itemId=877) 经过一番努力，排除了基础设施的问题，集中精力查找Kubernetes配置错误，现在要抓紧最后一根救命稻草——日志，期待能从日志中找到解决问题的蛛丝马迹。 [ThoughtWorkers](http://weekly.dockone.io/redirect?url=http%3A%2F%2Finsights.thoughtworkers.org%2Fhow-to-play-with-new-technology-2%2F&itemId=877) ## [关于容器持久化存储的3个方案](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1051&itemId=878) 文章讨论了容器的持久化存储的问题。从持久化的定义到持久化的理解，并且对目前容器持久化的三种方案进行了回顾。 [CloudArchitectMusings](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1051&itemId=878) ## [一个适合 Kubernetes 的最佳网络互联方案](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1115&itemId=879) 本文比较了几种 Kubernetes 联网方案，包括 Flannel（aws-vpc | host-gw | vxlan）和 IPvlan 。目前建议选择 flannel + host-gw 方案，没有特别依赖，性能也够用。一旦 flannel 支持 IPvlan （有自动化设置工具了），且 Linux 内核版本比较新，就可以采用 IPvlan 方案。 [Machine Zone](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1115&itemId=879) ## [说到容器的安全性，我觉得它就像三明治](http://weekly.dockone.io/redirect?url=http%3A%2F%2Fdockone.io%2Farticle%2F1134&itemId=882) 作者用生动的比喻把容器比做一个三明治，而容器安全则是隐藏在三明治里面不为人知的成分。选择一个安全可用的容器，就如同选择一个放心可吃的三明治一样。