DockerCon 2019 On-Demand Videos

Whether you are just getting started with Docker, starting your first project with Docker Enterprise, scaling out, or driving new innovations, there’s something for everyone.

Check out our tracks with Docker experts and customer speakers to learn more

General Session

DockerCon 2019 Keynote - Day 1

Docker CEO, Steve Singh, kicks off the first day of DockerCon with the announcement of Docker Enterprise 3.0. He is then joined onstage with our Customer Innovation Awards panel as we hear how enterprises are moving beyond containers. Closing out the session are demos demonstrating the benefits of Docker Enterprise & a special guest speaker, Rosie the Robot.

DockerCon 2019 Keynote: Day 2

Black Belt

Container Security: Theory & Practice at Netflix

Usage of containers has undergone rapid growth at Netflix and it is still accelerating. Our container story started organically with developers downloading Docker and using it to improve their developer experience. The first production workloads were simple batch jobs, pioneering micro-services followed, then status as a first class platform running critical workloads. As the types of workloads changed and their importance increased, the security of our container ecosystem needed to evolve and adapt. This session will cover some security theory, architecture, along with practical considerations, and lessons we learnt along the way. Speaker: Michael Wardrop, Netflix

Crafty Requests: Deep Dive into a Kubernetes CVE

You may have heard about CVE-2018-1002105, one of the most severe Kubernetes security vulnerabilities of all time. But how does this flaw work? How can it be exploited, and what does it all mean? This deep dive will walk the audience through the Kubernetes back end, going over relevant concepts like aggregated API servers, the kubelet API, and permissions for namespace-constrained users. We will explain the details of how this flaw works, how a cluster’s moving parts can fit together to create a vulnerable context, and the risks involved in leaving this CVE unpatched in the wild. A live hacking demonstration will show the audience exactly how easy it is to exploit this vulnerability. After explaining the attack pathways, the audience will leave with practical advice about mitigation and how to protect their clusters. Speaker: Ian Coldwater, DevSecOps

Debugging Microservices Applications

The mainstreaming of containerization and microservices is raising a critical question by both developers and operators: How do we debug all this? Debugging microservices applications is a difficult task. The state of the application is spread across multiple microservices, and it's hard to get a holistic view. This session will demonstrate modern debugging techniques for distributed microservices applications allowing developers to choose which containers, pods, services or images to debug, set breakpoints in their code, follow values of their variables on the fly, step through the code while jumping between microservices, and change these values during run time. Speaker: Idit Levine, Solo.io

Developing Cloud Native Applications with Docker Desktop & Cloud Services

Cloud native applications are composed of containers, serverless functions and managed cloud services. What is the best set of tools on your desktop to provide a rapid, iterative development experience and package applications using these three components? This hand-on talk will explain how you can complement Docker Desktop, with it’s local Docker engine and Kubernetes cluster, with open source tools such as the Virtual Kubelet, Open Service Broker, the Gloo hybrid app gateway, Draft, and others, to build the most productive development inner-loop for these type of applications. It will also cover how you can use the Cloud Native Application Bundle (CNAB) format and it’s implementation in the Docker app experimental tool to package your application and manage it with container supply chain tooling such as Docker Hub. Speaker: Patrick Chanezon, Microsoft

Enabling High Assurance/Sensitive Container Workloads with Encrypted Images

Many enterprises are driven by trade secrets in their code - whether it is a proprietary AI model, or a secret high-frequency trading strategy. It is of utmost importance that critical algorithms, proprietary code, or other content that is highly sensitive have minimum exposure unencrypted. In addition, an administrator should be able to provide some assurance that the sensitive code can only be executed on certain machines that have proved their authenticity. During this talk, we will present the details of Encrypted Container Images and demonstrate Docker images which can protect sensitive data and code or algorithms embedded in your pipeline from build to runtime. We go further to show how the technology can provide additional enterprise security capabilities such as enforcing policies on sensitive content protection and geofencing execution. Speaker: Brandon Lum, IBM

Hardening Docker daemon with Rootless mode

Docker CE 19.03 is going to support "Rootless mode", which allows running the entire Docker daemon and its dependencies as a non-root user on the host, so as to protect the host from malicious containers in a simple but very strong way. Rootless mode is also attractive for users who cannot get `sudo` permission for installing Docker on shared computing machines. e.g. HPC users. In this talk, Akihiro Suda, the author of the Rootless mode (PR: moby#38050), will explain how users can get started with Rootless mode. He will also explain the implementation details of Rootless mode and planned enhancements such as LDAP integration. Speaker: Akihiro Suda, NTT Corporation

Lifecycle Management of Docker Clusters

Containerized applications are typically running on clusters that have to be deployed, managed, scaled, upgraded, torn down, and redeployed. The lifecycle of a Swarm or Kubernetes cluster is an especially important responsibility for Operations teams that have responsibility over hybrid- and multi-cloud environments. In this session, we will demonstrate a new tool for managing the lifecycle of a Docker and Kubernetes environment. Built for Docker Enterprise, this tool enables enterprises to automate initial platform deployment as well as common Day 2 and Day n operational tasks. We will highlight how this is used for your initial deployment, but also how it can be leveraged for backups and restores, scaling cluster up or down, and also how it can be extended for multi-cluster use cases. Speaker: Joe Abbey, Docker Aaron Rueth, Docker

Message-Based Microservices Architectures - Benefits and Practical Matters

To build a microservices solution you go through a process of factoring your business capabilities into well defined domains, sub domains and microservices. While this results in more moving parts, dependent on container platforms and DevOps procedures to manage it well, it also enables co-evolution of services and features with reduced friction. One of the biggest challenges is rethinking the back-end whereby each microservice owns its own data model - completely decoupled from the rest of the system. Embracing eventual consistency, and incorporating a message-based architecture can help with this, and services that "fit in your head" make for a manageable approach to introducing message-based strategies. This session will show you how to build a docker-based solution that incorporates async messaging, CQRS patterns, fit for purpose data back-ends and eventual consistency as part of a microservices solution. In addition, the session will address specific challenges such as dealing with message order, versioning, poison messages and data protection. Speaker: Michele Bustamante, Solliance

Practical Istio

A lot of ink has been spilled describing what Istio is and the (long) list of features it provides. In this talk, we move past the overview and dive in to specific problems that companies are solving using parts of Istio today. We'll walk through several concrete use cases including: how one company made an existing system highly available (HA) with Istio; how another company with strict security requirements uses Citadel to manage certificates across their fleet and secure service to service communication; and finally how a third company is using Envoys and Pilot to manage traffic in their deployments, enabling them to break down their monolith into a set of microservices without affecting the other teams in their organization consuming the monolith's functionality. To make things concrete we'll walk through demos of each use case in a live cluster, showing how Istio can be deployed and integrated with applications to meet the requirements of these use cases. Speaker: Zack Butch, Tetrate

eBPF Superpowers

It's been three years since Netflix's Brendan Gregg described the Berkeley Packet Filter as "Superpowers for Linux". Since then there has been an explosion of capabilities and tools based on eBPF, so you've probably heard the term, but do you know what it is and how to use it? In this demo-rich talk we'll explore some of the powerful things we can do with this technology, especially in the context of containers. Speaker: Liz Rice, Aqua Security

Community Theater

Can an App Deploy Itself? CI for Your CI Stack, Using Your Stack

Using CI/CD for your applications is nothing new, and Docker is an excellent catalyst in that space. That means there’s likely a CI/CD stack to run , whether Jenkins, Gitlab, or Atlassian…and Docker is great for those applications, too. But if that stack runs your deployments, what deploys it? With some creative use of 12-factor practices, we’ve found some patterns to allow us to deploy our CI engine, using itself – that lets us keep our processes and tools consistent, removes the need for extra dependencies, and keeps things light. See how we use Docker to make that happen, and see if it can help to run your own internal CI stack, or possibly think of some other uses for the pattern! Speaker: Michael Dodge, Principal Engineer, Lincoln Financial

Changing the Future of Computer Science Education

Data Tells Us You will Love This Talk

The Data Team at Docker builds and maintains pipelines for all functional units within the company while dogfooding the latest versions of our products. Join us as we dive into the data engineering infrastructure that we use to deliver metrics and insights to different audiences. We will also share some of our key learnings and best practices as a result of our effort to create a data-centric culture within the company. Speakers: Brian Donaldson, Docker Amn Rahman, Docker

Depend Upon Docker for AI

This is the next chapter of the “Depend on Docker” series of talks that started right here at DockerCon 2018 when Alex Iankoulski (Docker Captain) and Arun Subramaniyan (VP Data Science and Analytics), BHGE presented “Depend on Docker - Imagine a world where the only dependency you need is Docker”. True to that title, followed a few talks that focused on running workloads on AWS, GCP, and Azure with Docker being the only external dependency. This talk will focus on using Docker containers in the world of Data Science, Machine Learning, and Artificial Intelligence. If you are curious about techniques to increase your processing power with GPUs and are eager to see some cool Industrial AI demos, all running in Docker, join us for this talk at DockerCon 2019! Speakers: Fabio Nonato de Paula - Director, Data & Analytics, Baker Hughes, a GE company Alex Iankoulski - Principal Architect - Data Science and Analytics, Baker Hughes, a GE company

How the Docker Community Changed My Life

How to Become a Better Ally

Improving the Human Condition with Docker

RTI International is an independent nonprofit research institute dedicated to improving the human condition, looking into areas of crime analytics, health economics and more. RTI International’s Center for Data Science sits at the confluence of academic research and innovative technologies, developing complex statistical and analytical applications derived from abstract research. In this talk, Keith Richards of the Center for Data Science will discuss some of the Center’s novel use cases of Docker technology throughout the data lifecycle for projects such as: developing and deploying software-as-a-service crime analytics, supporting public policy creation through horizontally scaled health economics microsimulations, and managing the dependencies of several machine learning applications Speaker: Keith Richards, RTI International

Online Feature Extraction and Event Generation for Computer-Animal Interaction

This talk will present an architecture developed to investigate the interaction with and between animals. The architecture allows online processing of multimedia streams and the generation, storing and visualizing of events using feature extraction. It allows biologists to analyze the events by monitoring live or by replaying streams through a web interface Docker swarm is the central component of the architecture and serves as infrastructure for stream processing, event generation, event processing and visualization. The main entry point for users is a web interface that spins up one container per user and allows independent replay of streams. This talk will focus on the architecture and on technical details concerning its implementation as well as how docker is utilized to process, store and visualize events. Some time will be spent explaining details about custom made docker solutions. Speaker: Mathias Mikkel Neerup, Scientific Assistant, University of Southern Denmark

Towards Reproducable Climate Research

NOAA/GFDL was founded in 1955 and is still in the forefront of climate research, contributing to the numerous policies and decisions undertaken in this world of evolving responses with respect to climate, which in turn creates an avalanche of effects in various sectors, e.g agriculture, health, GDP. The scale and magnitude of computing and data have proven to increase significantly in the last decade, thus making data delivery methods to the world a herculean research problem by itself. In addition to this, the time and efforts invested by a user in analyzing and peer-reviewing a research article is very laborious. Literature shows numerous outstanding climate studies published in International climate assessment reports, such as the Intergovernmental Panel on Climate Change (IPCC), the United Nations body for assessing the science related to climate change. The need to verify the research and make it reproducible and transparent before it gets translated into major decisions is, now more than ever, one of our most critical challenges. In this presentation, we will paint a picture of the history of climate computing and analytics with significant transformations applied in order to make meaningful, quantifiable, credible, interoperable, accessible and reusable climate research. In other words, we will draw a path towards reproducible research using Docker containers for massive data publishing and climate analytics. This paper will also discuss some of the pioneering efforts from collaborators from other laboratories and organizations (such as ESGF, Google, NASA JPL, Columbia University, PMEL, etc.) in the area of Docker containers in computing and analysis on and off the cloud. Speaker: Aparna Radhakrishnan, Engility

Transforming Education for the Next Generation of Software Engineers

Two Years of Fun and Productivity on Docker Hub

I set up 3 low-power servers at home to start learning Docker in 2017. In this talk, I share many things you can do (from weather reporting and webcams, to CI/CD to DVR to email) for entertainment and work with Swarm and Kubernetes, along with the 3 dozen images I've shared on Docker Hub. The recent surge of Kubernetes and GitLab-CI gave us all a fascinating new toolkit which enables me to test, build and deploy more of my content directly on the Internet; let me help you get your projects up and running on Docker Hub and GitHub! Speaker: Rich Braun, Splunk

Using Docker for Rapid Prototyping at Hackathons

Value in Simplicity - How Docker is Helping Academia in non-Developers

Despite “every company being a software company” not everybody is a software developer, not yet at least. Our lives and jobs though, today as never before, require us to use and write scripts and softwares. This is particularly true in an environment devoted to research and innovation as academia is. Here tools change often, and likewise often there’s no GUI involved, these representing an unsustainable entry threshold for outsiders slowing down the whole research progress. Portability can be a true nightmare when your very high specialization is as far from dev as it can be. Docker has been introduced in academia not just for how powerful, flexible and adaptable is, but first of all for its simplicity. Having given training about docker to biologist and biotechnologists, though the concept of containerisation is initially hard to grasp, what won their hearts was the simplicity and the velocity with which they could pick it up and exploit it in their daily lives. It is worth mentioning and reminding ourselves as well of those situations in which broadband speed and reliability is not always a matter of course: here as well Docker provides some nice, often overlooked, functionalities. The life science community has been drawn in the recent past to bioinformatics and computational biology, new fields of research that only very recently found their space in education. While new researchers are often trained in coding and data analysis, the whole community benefits from tools and platforms that lower the length of time to get results. Docker has now an important place in a number of projects, allowing, like a virtual machine with installed software, reproducibility of analysis, a major concern in science, while at the same time being easily portable, which is essential for collaborations. Even more, scientists can now share their code, packaging and distributing it themselves with very little effort. Speaker: Alice Minotto, Earlham Institute

Customer Case Studies

Digital Transformation Readiness - A Docker Journey at Halliburton

Digital technology is a business enabler at Halliburton, an energy services company that engineers solutions to maximize asset value for its customers. From remote locations around the world, to central data centers and ubiquitous public clouds, a digital transformation is underway with distributed computing as the new norm. This session will cover an IT enterprise architecture perspective of Halliburton's containerization journey and why Docker is a considered a key enabler for digital transformation. In the session, you'll learn: Architectural vision for Halliburton's distributed computing platform Why Halliburton selected Docker Enterprise Edition Halliburton's Journey with Docker (what was easy, hard, and really difficult) Speaker: Torben Pedersen, Halliburton

From Swarm to Kubernetes (and Back Again)

Companies across every industry are rapidly realizing the value of microservices, and the solutioning conducted in support of that revelation often leads to containers. Along that path comes a decision that most IT engineers in this space are familiar with: "What orchestrator do we use?" In this presentation, Don Bauer will walk you through some of the key crossroads that are often encountered when making this decision. Additionally, he'll cover how many operational and development problems can be solved with any orchestrator, and why Citizens Bank chose the path they did. Speakers: Don Bauer, Citizens Bank Mike Noe, Citizens Bank

How Entergy is Mitigating Legacy Windows Operating System Vulnerabilities With Docker Enterprise

Entergy, a large utility company headquartered in New Orleans, LA has launched an initiative to modernize their application infrastructure. During the initial analysis, Entergy recognized the existing legacy infrastructure’s lack of compatibility with more recent operating systems would stand in the way of progress. As a result, containerization was fast-tracked as the solution that can help them with the various tenants of their strategy: hyperconvergence, SaaS (ServiceNow), and workload portability. Docker Enterprise proved to be the right solution to migrate roughly 850 legacy applications from Windows Server 2003 and 2008 to Windows Server 2016 quickly, securely and economically. Entergy IT has now delivered the ability for the business to run applications on-premise, in the cloud, and future-proofed the applications for migration to new versions of Windows Server. In this session, Entergy will talk about how they are modernizing their infrastructure to become more agile, secure, and enable workload portability. Speakers: Jason Brown, Entergy Jeff Hummel, Entergy

Modern Orchestrated IT for Enterprise CMS: A Case Study for Wiley Education Services

Wiley’s Education Services (WES) leverages a mix of CMS platforms across their 50+ student information sites for major universities throughout the world. Traditionally these sites have been housed as part of a multi-site CMS install on a single VM, and eventually across 2 VMs. Failure of either one of these VMs would mean an outage for one or all of the hosted sites. As Wiley’s leadership looked forward, they recognized the risks involved with their current design and identified Docker as a way to mitigate these risks. WES began their investigation in to Docker to address issues of fault tolerance, consistency, and portability. They used this opportunity to modernize their workflows and reduce risk by promoting Docker images through their dev, preview, and production environments using CI/CD. This increased their confidence in deployments and reduced the need for maintenance windows. Early in the process, WES brought in BoxBoat as subject matter experts to accelerate their migration, and architect their Docker EE solution. Through the use of well-defined workflows and persistent storage, applications are continually redeployed and restored between environments with zero downtime and no loss of data. Additionally developers can pull down and run any of the sites independently with configuration that matches production. Join this sessions to learn about the challenges and triumphs that Wiley faced when orchestrating CMS deployments in Docker! Speakers: Blaine Helmick, Wiley Education Services Jesse Antoszyk, BoxBoat

Modernizing Insurance with Docker Enterprise: The Physicians Mutual Technology Journey

Physicians Mutual, a 117-year-old Nebraska-based insurance company, had worked on modernizing its systems for over a decade. In such a complex industry, any IT refresh can seem like a never-ending journey. The existing application architecture made it difficult to scale or refresh applications individually. Everything was bundled, forcing the IT team to take a “one size fits all” approach that limited legacy modernization and business agility. To “untie” the bundle and create a more agile and responsive environment, the IT team determined that containerization and Dev/Ops were the answer. In 2017, the company piloted a microservice architecture and an automated pipeline on Docker Engine (CE) to deliver the new corporate API. Following the successful pilot, the company relaunched 11 mission critical services on Docker Enterprise, paving the way for a complete transformation of the company’s application architecture. In this session, you’ll learn: About the journey of transitioning the corporate API from traditional application server deployment to containerized Microservices on Docker Enterprise How the company built consensus and kept momentum in an enterprise environment About the technologies and frameworks used, including log aggregation, system monitoring, and security About key business benefits in agility and responsiveness achieved. Speaker: Nathan Coberly, Physicians Mutual

Modernizing Microsoft .NET Applications

Many enterprises have a large product portfolio of custom .NET applications running on IIS and Windows Service VM’s. In most cases, these legacy architecture based applications can benefit from containerization. Containerization can increase product quality, portability, and testability while enhancing security, increasing hardware utilization efficiency, enabling adoption of devops practices and techniques, all while supporting an evolutionary re-architecture strategy. With a bit of refactoring we can also move towards a hybrid hosting modality, simplifying the transition to public cloud providers and enabling DR savings. In this session, we’ll cover a real world containerization project consisting of .NET Windows Services as well as IIS hosted .NET WebForms components. We’ll discuss the lessons learned, realized savings, and architectural and cultural enablement that was observed. Speakers: Marius Dornean, Mitchell International Jeff Nessen, Docker

Transforming a 15+ Year Old Semiconductor Manufacturing Environment

Jireh Semiconductor bought the Hillsboro fab and its contents including the manufacturing tools, servers, and software running the fab. The previous company had been winding down for years so server and software upgrades had not been on the radar for some time. In 2011 Jireh became the proud owner of the building, the tools, and its legacy software running on servers that weren’t even made any more. That's when I started my adventure with Jireh in September 2016 with a charter to modernize the applications running the manufacturing facility process and move them into VMs with no impact to manufacturing. That led me down a path of exploration and questions. “What’s the goal?” The goal wasn't to move to VMs. It was to become independent of the aging PA-RISC architecture, bring forward the ~230 java 1.4.2 applications (10-15 years old), scale to allow increased the load on the software and hardware in order to ramp the factory output to numbers never seen previously. And do it without manufacturing downtime. The solution included a transition from waterfall and silo development to agile scrum. Rather than simply migrating to VMs, it became obvious the lynch pin for a successful software transition with the required uptime, flexibility, and scalability was Docker Enterprise. Join me for this session where I'll talk about my journey modernizing 15+ year old applications and infrastructure at Jireh. Speaker: Jeanie Schwenk, Jireh Semiconductor

Docker for Devs

Building Your Development Pipeline

Enterprises often want to provide automation and standardization on top of their container platform, using a pipeline to build and deploy their containerized applications. However, this opens up new challenges… Do I have to build a new CI/CD Stack? Can I build my CI/CD pipeline with Kubernetes orchestration? What should my build agents look like? How do I integrate my pipeline into my enterprise container registry? In this session full of examples and “how-to”s, Olly and Laura will guide you through common situations and decisions related to your pipelines. We’ll cover building minimal images, scanning and signing images, and give examples on how to enforce compliance standards and best practices across your teams. Speakers: Laura Frank Tacho, CloudBees Oliver Pomeroy, Docker

CMD and Conquer: Containerizing the Monolith

Modern microservice-oriented software architectures evangelize the principles of infrastructure-as-code and declarative directives to manage and run applications. At Splunk, we wanted to marry these ideals with the majestic monolith, Splunk Enterprise, to simplify the use of our product through containerization. Without rearchitecting the entire product from the ground-up, which can be a costly investment, we focused on incorporating a flexible configuration management layer on top of the core application. This has enabled us to make running Splunk in Docker act and behave as a true microservice, greatly reducing the friction of migrating towards more container-native software. We not only concentrated on making our open-source Docker image initiative user-friendly and production-ready, but we also wanted to seamlessly integrate it back into our internal engineering process. Join us for this session as we discuss migrating a traditional application into a microservice ecosystem, developing a containerization strategy for both external customer usage and internal development, as well as learning about our internal container platform at scale. Speakers: Nelson Wang, Splunk Tony Lee, Splunk

Containers for Beginners

Feeling overwhelmed while getting started with containers? Have you been tasked to figure out how to train everyone back at your organization? There's just so much to learn and teach! In this talk, we’ll start with a tiny bit of history to motivate the "why" and quickly move into the "what" by explaining what container and images actually are (they're not just magical black boxes!). We'll talk about how volumes help with data persistence and include an overview of Docker Compose and even orchestration. There will be plenty of live demos and fun! Speaker: Michael Irwin, Virginia Tech

Docker Containers & Java: What I Wish I Had Been Told

Nowadays, containers are more than a cool new tool to play with - they've revolutionized the way we develop, architect and ship software and have become part of our day-to-day operations. On the other hand, Java has been around for more than 2 decades, dominating the entreprise world. Both advocate the "RUN anywhere" principal, but, is it that easy? No! Your perfect working local container will most probably fail on production because of MEMORY &/or CPU issues, since jvm apps assume they OWN the server they are running on. This session will look at the gotchas of running JVM apps in containers & how to avoid costly pitfalls. We will cover: _ what updates Java 10 brought to the table to improve container awareness and the issues related to prior versions, including how to address each one of them to avoid the mess. - tips and tricks to obtain smaller images & best practices while writing your DockerFiles - some plugins to helps non-containers experts integrate docker in their development process; and - the concept of "Distroless" Docker Images and how to benefit from it. Speaker: Mohammed Aboullaite, Xhub

Docker for Windows Container Development

Docker is carefully tucked between virtualization, continuous deployment, and pure awesome, available for Linux and Windows software development. ASP.NET Core is a cross-platform, high performance and open-source reimagination of the Microsoft stack to build modern applications. In this session you will get the basics of Windows containers and getting started with Docker Desktop integration with Visual Studio to both start building new .NET Core apps and enabling Docker support for legacy .NET Framework apps in containers. You'll leave with the tools you need to Docker-enable your .NET workloads. Speaker: Rob Richardson, Developer

Dockerfile Best Practices

This talk will give you tips and tricks to get better build time performance and smaller images. The most important take-away is: you should be using multi-stage Dockerfiles and enable BuildKit. Speakers: Tibor Vass, Docker Sebastiaan van Stijn, Docker"

How Pipedrive scaled and accelerated development using Docker Enterprise

At Pipedrive, we designed all of our internal processes with a “self-service attitude” that gives our developers the flexibility to build and test new services as often as they like. Each developer has a Docker Desktop environment, with the ability to self-provision an on-demand isolated sandbox environment on top of Docker Enterprise. Tied to our CI/CD process, Pipedrive manages a fleet of microservices across multiple datacenters where we do 250+ deployments a day, 50 of them in our production environment. In this talk we’ll show you how this works, what the day in the life a developer looks like at Pipedrive, and how how several Docker products influenced the development processes. We’ll also explore the architectural decisions and reasoning around it. And finally, if the demo-gods are merciful, then we’ll do some hands-on demonstration of the environment. Speaker: Renno Reinurm, Pipedrive

Node.js Rocks in Docker for Dev and Ops

Learn the best practices of managing Node and JavaScript projects when developing, testing, and operating containers from Docker Captain Bret Fisher, who's been building and deploying Node apps in containers since the early days of the Docker project. This session will take you on a journey, starting with local development of Node and js-specific projects and how to optimize your Docker Desktop and Compose configs for "the best of both worlds" with js and Docker. You'll see examples of cutting edge features like macOS mind-mount performance enhancements, BuildKit npm caching, and multi-stage image targeting. Then Bret will walk you through examples of optimizing your builds, testing, and CI/CD of Node with new features like test stages in multi-stage builds and BuildKit for secrets like private npm modules. Finally, you'll get some examples around Node in production orchestration, and how you can optimize your cluster updates for zero-downtime scenarios on Kubernetes and Swarm using Node connection management techniques. Node apps rock in containers, so come join Bret for a fun ride through the best parts and learn solutions for the problems that you'll need to solve along the way. Speaker: Bret Fisher, Dockery Mastery

Things I Learned Working with Docker Support

I've been working with Docker Enterprise for a year now (and open source Docker before that) and I've worked with Docker support during this journey. In this session, I'll shared what I've learned from Docker support over the course of 2 major upgrades & other day-to-day questions I've encountered. I'll also be joined by Ada Mancini from Docker's support team who will share behind-the-scenes knowledge and provide tips on how to troubleshoot and work with support. We'll look at some of the assumptions I made when I originally setup Docker Enterprise, the changes Docker support recommended to us and the results, and Ada will explain the rationale behind these settings and changes. I'll even talk about the time I synced 120k users into our system and how I cleaned that up. Speakers: Sujay Pillai, Docker Ada Mancini, Docker

Tips and Tricks of the Docker Captains

Docker Captain Brandon Mitchell will help you accelerate your adoption of Docker containers by delivering tips and tricks on getting the most out of Docker. Topics include managing disk usage, preventing subnet collisions, debugging container networking, understanding image layers, getting more value out of the default volume driver, and solving the UID/GID permission issues with volumes in a way that allows images to be portable from any developer laptop and to production. Speaker: Brandon Mitchell, BoxBoat

Docker For Ops

Containerized Databases for Enterprise Applications

Containers are now being used in organizations of all sizes. From small startups to established enterprises, data persistence is necessary in many mission critical applications. “Containers are not for database applications” is a misconception and nothing could be further from the truth. This session aims to help practitioners navigate the minefield of database containerization and avoid some of the major pitfalls that can occur. Discussion includes traditional enterprise database concerns surrounding data resilience, high availability, and storage and how they mesh with a containerized deployment. Speaker: T. Joseph Carroll, Intersystems

How To Build Your Containerization Strategy

The Docker Enterprise container platform helps organizations deploy and manage applications faster and it secures the application pipeline at a lower cost than traditional application delivery models. But it takes more than just great technology to achieve the desired results. The organization and culture of your enterprise directly impacts what you transform, how it’s done, and who does it. Success requires a strategy for how you will govern the container platform environment, how to assess your application estate, what your delivery pipeline will look like, and how to ensure developers, operators, security teams and others play nicely together. In this talk I will cover topics such as different types of workloads (legacy, microservices, FaaS, big data and more), how your org chart can influence whether you deploy CaaS (Containers as a Service) vs CLaaS (Clusters as a Service), how "shifting left" can determine if you can outsource, centralized vs distributed CI/CD and how containers play a role, transforming your pets into cattle, how giant whale balloons are used for onboarding, and a prescriptive and comprehensive methodology for successfully deploying containers into your enterprise. Speaker: Lee Namba, Docker

How to Service Dev Teams with a Container Platform

Yes, you can be an early adopter of cloud native technologies and a large highly regulated healthcare enterprise. In this talk, we  will share how the McKesson cloud platform team enriches and tailors the Kubernetes platform to make it enterprise ready in the midst of serious regulatory and compliance requirements. We will detail how McKesson delivers a shared platform across multiple clouds and geographies for its business units, including: How we selected Kubernetes as an orchestrator; How to offer capabilities to drive business value and support multiple teams; How we add resources and solutions to the platform on demand; and more Through the story of one team’s journey of platform adoption, this talk will cover lessons learned adopting Kubernetes to deliver a secure, resilient, and elastic platform for multiple teams. Speakers: Sujatha Bayyapureddy, McKesson Roshan Kadasani, McKesson

Just what is a "service mesh", and if I get one will it make everything OK?

Communication is the backbone of distributed applications. Imagine you could control that backbone independently of all the components, so your application code just makes simple calls to other services, and your communication backbone does all the complex non-functional work. Load balancing, traffic management, fault tolerance, end-to-end monitoring, dynamic routing and secure communication could all be applied and controlled centrally. That's a service mesh. In this session I'll cover the major features of a service mesh using Istio - which is the most popular technology in this space. I'll show you what you can do with a service mesh, how it simplifies application design and also where it adds complexity. My examples will range from new microservices designs to legacy monoliths, and you'll see what a service mesh can bring to different types of application. Speaker: Elton Stoneman, Docker

Microservices Enabled API Server - Routing Across Any Infrastructure

Microservice architectures can be difficult to implement. Specifically how to route to the a service correctly and ensure that traffic is spread across all instances of that service. What happens in a cloud environment where it is normal to lose and gain service instances as a part of daily operations? How do you configure something to be able to consistently route to your service when you don’t even know where your service is running!? At Docker, we developed our own highly available and automated API server on top of HAProxy with deep integration with Consul. Our API server acts as a service discovery and load balancing service to ensure availability in a highly dynamic environment. In addition to running such a complex application, we need to support thousands of requests per second while being able to monitor every request that comes through--that is no small feat! In addition to running a highly available API server, we also recently migrated it from running natively on Ubuntu 14.04 to run all components inside of containers by using Kubernetes with Docker Enterprise. With the containerization journey came some benefits along with new challenges that were not foreseen. Speakers: Alex Kokanson, Docker Brett Inman, Docker

Operating Docker Platforms Like an Avenger

Getting Docker installed is easy. Operating at global scale in production - for any disruptive technology - can be a pain. The devil (or zombie) is in the details, especially when it comes to operational readiness and the long checklist of items that are included with that. Shared through a lens that sees the zombie apocalypse, the Avengers, Middle Earth, and geeky things in general, Tim will highlight repeatable strategies and patterns for managing operational handoff that work for your first Docker platform, or your tenth global platform. If you are building a PaaS on premises, or deploying Docker platforms around the globe to meet data sovereignty and GDPR requirements, or are looking for tried and true methods to successfully transfer knowledge and process in a repeatable manner - this talk will detail how MetLife transferred its first Docker platform to the operations team and what we do differently as we’ve mainstreamed platform deployments around the globe. Speaker: Tim Tyler, MetLife

Persisting State for Windows Workloads in Kubernetes

The Docker Enterprise Platform is still the only generally available and supported way to run containerized Windows workloads and many real world Windows applications need to persist state. While several interfaces exist for managing persistent storage requirements of Linux workloads, Windows nodes and workloads have a more limited number of options today. And as Docker gets ready to add support for Windows workloads in Kubernetes through UCP, platform architects, operators and storage vendors need to be aware of the enhancements necessary to manage persistent storage for Windows workloads. This talk will go over a quick overview of the interfaces available for persistent storage for Linux workloads and delve into how to adapt them for Windows workloads. Speakers: Deep Debroy, Docker Anusha Ragunathan, Docker

Why Making Your Containers Run is Only 40% of the Solution

When it comes to rolling out an enterprise Containers-as-a-Service solution, getting your containers to run will only get you so far. Many of the challenges you will face are things you may not anticipate at the start of your journey: Our cluster is setup, but now what about “Day 2” operations? How do we track changes and provide logging, metrics and visibility? Our developers are moving quickly and have the tools that they need, but what security considerations should I be thinking of? · We made it past "day 2" and we have a few teams using containers, but how do I scale the process to all new Teams? With some successes under our belt we want to go faster...how do I implement automated building/testing/deployments (CI/CD)? We're getting good at providing Containers-aaS in one location, now how can we accomplish a seamless hybrid/multi-cloud strategy? What should we be looking at to enhance our Team Member experience and prepare for future opportunities? In this session, Tommy Hamilton from Quicken Loans will share all the things he wish he knew when starting with containers so you can take a shortcut in your journey and plan for success. Speaker: Tommy Hamilton, Quicken Loans

Zero Trust Networks Come to Docker Enterprise Kubernetes

Docker Enterprise got a big upgrade this year with Calico 3.5 for its Kubernetes networking! One of the most exciting new features is the ability to build Zero Trust Kubernetes networks with Calico Application Layer Policy in concert with Istio service mesh. Zero Trust networking is a way to build distributed applications such that they maintain security, even when containers, or the network itself, is compromised. Starting with Docker Enterprise, they will demonstrate some common network attacks such as IP address spoofing and certificate exfiltration, then demonstrate building a Zero Trust network (by installing Istio and Application Layer Policies) for the application. They will show how this Zero Trust network repels all the demonstrated attack strategies and explain how to build and maintain a Zero Trust network for your own applications. Speakers: Spike Curtis, Tigera Brent Salisbury, Docker

Docker Tech

Accelerating Docker Containers with NVIDIA GPUs

Using the NVIDIA Container Runtime, many developers and enterprises have been developing, benchmarking and deploying deep learning (DL) frameworks, HPC and other GPU accelerated containers at scale for the last two years. In this talk, we will go over the architecture of the NVIDIA Container Runtime and discuss our recent close collaboration with Docker. The result of our collaboration with Docker is a seamless native integration of the runtime enabling Docker Engine 19.03 CE and the forthcoming Docker Enterprise release to run GPU accelerated containers. We will also highlight containerized NVIDIA drivers. This new feature eliminates the overhead of provisioning GPU machines and brings GPU support on container optimized operating systems, which either lack package managers for installing software or require all applications to run in containers. In this session, you will learn how GPU accelerated containers can be easily built and deployed through the use of driver containers and native support for GPUs in Docker 19.03. The session will include a demo of running a GPU accelerated deep learning container using the new CLI options in Docker 19.03 and containerized drivers. Running NVIDIA GPU accelerated containers with Docker has never been this easy! Speaker: Swati Gupta and Pramod Ramarao, NVIDIA

Building and Shipping Docker Applications

Docker Hub is used by millions of people and serves as a critical tool for the growth of the container ecosystem. It also allows both individual developers and organizations to share and collaborate on software development and is often used as part of the development toolchain, integrated with an organization’s code repository and CI tools to build and test applications. In this session, we will highlight some new capabilities and best practices for leveraging the world’s leading container image library and showcase how different organizations are using the advanced features of Docker Hub like autobuilds and webhooks. This session will include several demos and explain how you and your development team can accelerate your own software pipeline using the fundamental building blocks of a Docker application. Speaker: Papi Menon, Docker

Data Center Networking with Containers

One of the common challenges for organizations that are moving more workloads to containers is running them inside a data center where you will still need to access both containerized and non-containerized workloads. In many organizations, that means you need to provide external access to and from a container and a traditional VLAN service or network via Layer 2. In this session, we’ll explain how you can interact with traditional network assets without routing through Layer 7 by using MACVLAN and Transparent Networks that allow you to use multiple MAC addresses on the same interface. We will outline how the concepts are similar but the implementations are different by demonstrating the same setup across both Linux and Windows using MACVLAN and Transparent Networks. Speaker: Shaker Gilbert, Docker

Deploying Distributed Applications with Docker App and CNAB

When developing modern microservice applications, you often find that you need a variety of tools to deploy all the parts of your application. Compose works great for containers but what about hosted databases or other infrastructure? Worse, each of these tools has its own package and lifecycle management! This talk will introduce the Cloud Native Application Bundle (CNAB) specification which provides a generic way to package tools and application definitions required to deploy any application. It will then show how Docker Spp adopts CNAB to provide a powerful lifecycle management flow for your applications. Imagine the same secure supply chain you’re familiar with for container images but for applications: Build your application into an immutable artifact, push it to a registry, test it with your CI, and then install it on your cluster. Speaker: Chris Crone, Docker Don Bauer, Citizens Bank

Docker Enterprise Platform and Architecture

Docker Enterprise is an enterprise container platform for developers and IT admins building and managing container applications. The platform includes integrated orchestration (Swarm and Kubernetes), advanced private image registry, and a centralized admin console to secure, troubleshoot, and manage containerized applications. This talk will focus on the Docker Enterprise technical architecture, key features and use cases it is designed to support. Key areas covered in this session: Latest features and enhancements Security and Compliance - how to ensure oversight and validate applications for different compliance regulations Operational Insight - how to identify and troubleshoot issues in your container environment Integrated Technology - the technologies are supported and can be run with Docker Enterprise Policy-based Automation - how to scale container environments through automated policies. Speaker: Mark Church, Docker

Docker Tools for Modernizing Legacy Applications

From decades-old legacy applications to 1-month old greenfield apps, organizations are utilizing containers to increase portability, enhance maintainability, and drive down costs through server consolidation. But how do you actually get applications containerized and how do you run your container environment to deliver the same or better performance you already have? Docker has built a set of tools that are specifically designed to help organizations containerize existing legacy applications and run them securely in production. The Docker Application Converter scans for applications and automatically generates a Dockerfile without having to touch any code, while a new tool makes it easy to fully automate the deployment and configuration of Docker Enterprise in your production environment. This session will include several demos and walk through how a typical organization can leverage these tools in their own data centers. Speaker: Steven Follis, Docker

How Docker Simplifies Kubernetes for the Masses

Kubernetes has taken the technology industry by storm these last few years. It delivers powerful orchestration and container management capabilities that have been leveraged by cloud-scale companies and small startups alike. But for many organizations, the learning curve for Kubernetes can be steep and organizations can’t build up their skills fast enough. Luckily Docker has always had a history of making the complex easy - first with Linux containers and now with Kubernetes - both in our Desktop and Enterprise platform. In this session, we’ll highlight some of the innovation Docker has added to Kubernetes to simplify configuration and ongoing operations while still providing a fully conformant Kubernetes environment. We’ll cover areas like deploying applications on Kubernetes, managing access controls and multi-tenancy, end-to-end security and improved troubleshooting. Demos will highlight key comparisons to show you that you don’t have to build it yourself. Speaker: David Yu, Docker

Securing Edge & IoT Devices with Docker Enterprise

Edge & IoT devices need to be securely managed and their identity attested. ExxonMobil, Intel, and Docker have been working together to define a secure mechanism to attest to the authenticity of a remote Edge or IoT device. A simple, secure, and robust solution leveraging newly released Intel Trusted Platform Module (TPM) 2.0 hardware backed APIs has been developed. Secure design and use-cases will be discussed, along with a hands-on demo. See for yourself how hardware backed Root of Trust can extend the Docker Secure Software Supply Chain to Edge & IoT devices. Speakers: Jameson Hyde, Docker David Hedge, ExxonMobil Cesar Martinez, Intel

The Road Ahead for Containers

Since Docker first hit the scene 6 years ago, container usage and features have been improving at a lightning pace. We have seen networking improvements, storage and volume options, and schedulers like Swarm and Kubernetes open up a world of use cases for users. But what now? Where do we go from here? In this talk, we will discuss a few of the feature sets that are being designed and worked on to improve containers running on developer's machines and data centers, across machine learning and IoT use cases. The next set of container use cases will require further extensibility to support new operating models. We will share some of the key R&D that is coming from Docker to push containers forward. Speaker: Michael Crosby, Docker

Using Docker Desktop to Accelerate Software Development

Docker Desktop is the easiest - and most popular - way for developers to get started with Docker and Kubernetes. It’s a tool that is designed for both beginners and advanced Docker users and we’ve added a number of enhancements over the last 6 months to make it easier for developers to “shift left” and deliver production-ready applications. We’ll demonstrate how application templates are built and used and also how Docker Desktop integrates with your favorite development tools. You'll see how easy it can be for developers that are new to Docker to get started with container-based development. If you're a Docker pro or an application architect we'll show you how to Docker Desktop enables you to control the application and container specs. Finally, we’ll also highlight some of the things we’re working on to further enhance the desktop experience. Speaker: Christine Lovette, Docker

Ecosystem

Developing and Deploying Containers for Arm using Docker Desktop

As Arm continues to drive adoption from cloud infrastructures like AWS to edge computing and IoT environments, seamless cloud native development on Arm is becoming a requirement. Discover how multi-architecture containers with Docker can be used to rapidly accelerate Arm development. Learn about the tools available today and what Docker and Arm are co-developing for the future. See examples and demos of using an end to end container development process within Docker Platform in typical Arm-based embedded and cloud development cycles. Speakers: Jason Andrews, Arm Kevin Ryan, Arm Adam Parco, Docker

Open Source

Building and Deploying a Secrets Plugin on Docker Swarm

Secrets have been part of Swarm Mode since its inception, making it trivial to provide generic, static secrets to your distributed services. However, not all secrets are equal, and some use cases call for a more dynamic approach. Docker Engine allows installing a plugin and using it as a driver when creating secrets, letting the value of the secret be determined at runtime, thus enabling dynamic use cases. The talk will cover how to write a secrets plugin that fetches dynamic secret values from HashiCorp Vault, and how to deploy it as a Swarm service. Speakers: Sune Keller, Alm Brand

Deep Dive into firecracker-containerd

Amazon recently released the Firecracker Virtual Machine Manager (VMM) built on top of the Linux KVM subsystem, which is optimized for lightweight, container-like "micro"-VMs. This session dives deep into the architecture of the firecracker-containerd project, which aims to allow portability between standard OCI container images and the larger container ecosystem with Firecracker micro-VMs. Topics covered will include the standard containerd architecture with the reference OCI runtime (runc), challenges adapting containers into micro-VMs, and the firecracker-containerd suite. Speaker: Samuel Karp, AWS

Establishing an Open Source Program Office

In many companies, open source programs start informally with a group of diligent engineers and a few legal people. The ad-hoc group soon realizes it needs a more formal program to scale to address the litany of important issues and achieve specific business goals. With such an office in place, businesses can establish and execute on their open source strategies in clear terms, giving their leaders, developers, marketers, and other staff the tools they need to make open source a success within their operations. In this talk, we’ll discuss: • Why create an open source program office. • The role of the open source program office. • Open source programs at prominent technology companies. • How to establish an open source office. • Program structure and management roles. • Setting policy, processes and goals. • Measuring and monitoring success. Speakers: Lee Calcote, Layer5 Tim Tyler, Metlife

Giving Back to Upstream: An Open Source Beginner's Primer

So you really want to contribute to open source? Varying opinions about open source, foundations, governance models, and licensing are proclaimed across our industry's news feeds regularly. But the fact of the matter is, open source is everywhere and the broad ecosystem benefits of giving back through open source contribution is hard to argue against! If you haven't ever contributed to open source or don't even have a GitHub ID, this talk is your kickstarter to get out there and share what you have with an open source community! This talk will cover everything from the basics of getting started with tools like git and GitHub to what to expect when working with various upstream communities. Open source community participation can have its share of bumps and bruises, but it can be extremely rewarding as well. Your involvement could be the spark that a particular community needs to be more open and welcoming. We'll talk about the practical aspects of dealing with remote communities, misunderstandings in online communication, and how best to work with community maintainers. Best of all, you'll walk away with the information you need and hopefully the confidence to enter the open source world and make a difference with your contributions! Speaker: Phil Estes, IBM

Open Source Summit: Build Kit

BuildKit is a modern builder toolkit powering the next generation of docker build with many new capabilities to boost your developer and CI workflow. Maintainers and BuildKit experts from Docker, Google, and NTT Corporation will present new features and useful patterns for getting the most out of BuildKit, advanced features around defining your own front-ends, and using a rootless BuildKit in Kubernetes. Getting the most out of BuildKit Tonis Tiigi, Docker Inc., Software Engineer In this session, Tonis will cover useful features of BuildKit, the new modern build architecture for Docker. He'll explain the advantages of BuildKit and techniques you can now use in your Dockerfile to significantly improve your developer and CI workflows. Tonis will also give an update on the new BuildKit capabilities in the latest releases, for example, the new inline build cache feature coming in Docker 19.03. You can learn about the remote caching capabilities, how to efficiently use BuildKit for building multi-platform images or how BuildKit can now be used to build other types of artifacts than just container images. Implementing Alternative Frontends with BuildKit Matt Rickard, Google, Software Engineer Did you know that you could use the Docker CLI to build Docker images with something other than a Dockerfile? We’ll do a step-by-step walkthrough of implementing an alternative frontend using BuildKit, a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. You’ll get an overview of BuildKit, as well as the skills you need to go back and implement your own frontend. You’ll see how you can use your own syntax to define an image that can be built with the same Docker tools you already have. In our journey, we’ll touch on some of the more advanced features of BuildKit: distributable workers, execution without root privileges, and of course the extendable front ends. Deploying Rootless BuildKit on Kubernetes Akihiro Suda, NTT Corporation, Software Engineer, Moby/BuildKit maintainer Building images on Kubernetes is attractive for distributing workload across multiple nodes, typically in CI/CD pipeline. However, it had been considered dangerous due to the dependency on `securityContext.privileged`. In this talk, Akihiro will show how to use Rootless BuildKit in Kubernetes, which can be executed as a non-root user without extra `securityContext` configuration. Tonis Tiigi - Software Engineer, Docker Matt Rickard - Software Engineer, Google Akihiro Suda - Software Engineer, NTT Corporation

Open Source Summit: CNAB

Cloud Native Application Bundle (CNAB) is an open source, cloud-agnostic specification for packaging and running distributed applications that aims to solve the complications of building modern heterogeneous apps. In this discussion Docker, Microsoft, and Intel will share where the CNAB spec is today and visions for the future. Become a part of the conversation with maintainers and fellow CNAB users. Darren Pulsipher - Enterprise Solution Architect, Intel Simon Ferquel - Sr Software Engineer, Docker Michelle Noorali - Sr. Software Engineer, Microsoft Christopher Crone - Engineering Manager, Docker

Open Source Summit: Compose and Docker App

Compose is a tool for defining and running multi-container Docker applications. It is great for development, testing, and staging environments, as well as CI workflows. Learn about the latest updates of Docker Compose from the Docker Team and how to take your containers to the next level by making your Docker Compose applications reusable and shareable on Docker Hub with Docker App. Join for demos and discussion: Introduction to Docker App Chris Crone, Docker State of the Compose project Ulysses Souza, Docker Compose on Kubernetes with Simon Ferquel, Docker Speakers: Silvin Lubecki - Sr Software Developer, Docker Joffrey F - Software Engineer, Brandless Inc Ulysses Souza - Software Engineer, Docker Christopher Crone - Engineering Manager, Docker Simon Ferquel - Sr Software Engineer, Docker

Open Source Summit: Containerd

Join containerd maintainers as they go through the design and architecture of containerd and learn how to get started as a user or integrator of containerd. This session will go through how containerd manages images, runs containers, operates on Windows, and how containerd can be used with Kubernetes through the Container Runtime Interface (CRI). Additionally, see how Docker’s architecture is evolving to fully integrate with containerd as well as how Google Cloud and IBM are leveraging containerd in their platforms. Lantao Liu - Software Engineer, Google Derek McGowan - Software Engineer, Docker Phil Estes - Distinguished Engineer & CTO, IBM Cloud, IBM Michael Crosby - Engineer, Docker

Open Source Summit: Kubernetes

Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications. This session will focus on updates from Google and Docker about roadmaps for Container Storage Interface (CSI), Container Network Interface (CNI) and support for Windows workloads graduating to stable in Kubernetes 1.14. We will also see a demo of building stateful applications using Rook on Kubernetes and conclude with Birds of a Feather discussion. Kubernetes and Container Storage Interface Update [30 mins] Michelle Au, Google The Container Storage Interface (CSI) is a standard API that is used to orchestrate control plane operations for file and block storage systems. Storage vendors write a CSI-compatible driver, which can then be plugged into various container orchestration frameworks, such as Kubernetes and Mesos. In this session, I will highlight the opportunities that CSI has opened up for storage vendors and end users, discuss how vendors can integrate and test their CSI drivers in Kubernetes, talk about new and upcoming features such as volume resizing, and cloning, and provide guidance on ways you can get involved in the community. Building stateful applications on Docker Enterprise with Rook [15 mins] Roberto, Docker Inc. This talk will cover the trade-offs and challenges in deploying stateful applications such a Wordpress and Jenkins on top of Kubernetes or any other container orchestrator. Rook will be used to showcase how to automatically manage the volume's lifecycle through the Kubernetes operators. Windows support - k8s 1.14 windows support graduating to GA; GMSA [15 mins] Jean Rogue, Docker Inc. Kubernetes 1.14 has just shipped, bringing a momentous change: official support for Windows. We’ll dive into what this means exactly: is it really ready for use in production today? What features are officially supported, and how can you leverage those to migrate your existing Windows workloads to an orchestrated world? After a general overview, we’ll dig into two areas in particular: how to manage credentials and authentication using the new (alpha) GMSA support; and then what solutions currently exist for storage for Windows orchestrated workloads. Finally, we’ll look into what’s next for Windows support in Kubernetes, and what exciting features future releases should bring to the table. Deploying Istio as an Ingress Controller[15 mins] Arko Dasgupta, Docker Inc. This talk highlights the features in Istio that enable it to be a powerful Ingress Controller and how operators can leverage these to implement traffic policies such as HTTP Routing, fine grained load balancing and TLS Authentication Birds of a Feather Speaker: Michelle Au - Software Engineer, Google Arko Dasgupta - Software Engineer, Docker Jean Rouge - Sr Software Engineer, Docker Roberto Hashioka - Software Engineer, Docker

Open Source Summit: Security

The Security Summit will cover three key areas in container security: the security of the supply chain and how code gets into containers, authorization and control of what is allowed to run where, and runtime security and stopping container escapes. - Securing the supply chain, signing, provenance and control, with Santiago Torres and Justin Cappos, talking about in-toto and TUF. - Policy and authorization, controlling what can get deployed, with Tim Hinrichs, who will talk about Open Policy Agent. - Securing container runtimes, the runc container escape, and starting a container escape bounty, with Michael Wardrop, Netflix Following the talks there will be time to discuss in roundtables / bird of a feather Tim Hinrichs - CTO, Styra Justin Cormack - Security Engineer, Docker Michael Wardrop - Senior Security Software Engineer, Netflix Justin Cappos - Professor, NYU Santiago Torres-Arias - PhD Candidate, New York University

Open Source Summit: Serverless

Serverless is complementary technology running side-by-side containerization. In this session, using OpenFaas and Nuclio, panelists will present use cases via a series of demos and Q&A followed by a birds of feather round table discussion. This session will go beyond hello world, and highlight on-prem usage of serverless and containerization technologies and the real use cases in the enterprise for both technologies. Speakers: Yaron Haviv - CTO, Iguazio Burton Rheutan - DevOps Lead, 118118 Money Pav Jimanov - CEO, SoftwareDefined Rupak Ganguly - Solutions Architect, Docker

Open Source Summit: Service Mesh

“What is the performance impact that a service mesh has?" "What overhead does being on the mesh incur?” By far, this is the most common questioned by engineers coming to with the value of functionality provided by a service mesh. Generally, this question goes unanswered. In this session, the methodology and results of performance testing research done in collaboration with a university and through the lens an open source service mesh benchmark tool will be shared and discussed. The benchmarking tool will provide a common benchmark across service meshes (their control planes, like Istio) and modern proxies (their data planes, like Envoy) and will review a number of service mesh projects. In addition to performance, we’ll discuss the landscape of service meshes, characterize and contrast their functionality as well as their data plane and control plane architectures. Speaker: Lee Calcote - Founder, Layer5 William Morgan - CEO, Buoyant, Inc. Manish Chugtu - CTO, Cloud Infrastructure and Microservices, Avi Networks Zack Butcher - Founding Engineer, Tetrate Haim Helman - CTO, Octarine Spike Curtis - Senior Software Engineer, Tigera

Open Source Summit: Welcome

Welcome to the Open Source Summit. Join the conversation and unleash new opportunities for innovation and collaboration within the broader Cloud Native and Open Source communities. Speakers: Kal De - CTO, Docker Andrew Hsu - Engineering Manager, Docker Sebastiaan van Stijn - Sr Software Engineer, Docker

Porter: an Opinionated CNAB Authoring Experience

When we deploy to the cloud, most of us aren't dealing with just a single cloud provider or even deployment tool. It seems like even the simplest of applications today need load balancers, persistent storage, databases, SSL certificates, and any number of other components. That's even before you get to your own application! That is a lot to figure out! The Cloud Native Application Bundle specification was created to help solve this problem. CNAB is specifies lots of great things about a bundle and how it is run, but it actually gives you a good deal of freedom in how to actually build that bundle. Porter, a cloud native package manager built on CNAB, adopts an opinionated approach to make bundle authoring straightforward and approachable. In this talk, you will learn how Porter makes it easier to author CNAB bundles and manage cloud native applications in the messy imperfect hybrid cloud world that we all live in. You'll also learn some of the issues we encountered that led us to develop Porter, how we addressed them, how you can contribute to Porter's development and how you might build your own tooling on top of the CNAB spec. Speaker: Jeremy Rickard, Microsoft

Retro Gaming with Docker

Docker has cemented itself as mainstay in modern tech, but it is often used for modernizing legacy apps. But a legacy app might be more than that old Classic ASP e-commerce site that your mom uses to sell crochet creations on. A legacy app can basically be anything that is old and old DOS games and BBS's are no exception. Building a platform that can run old DOS games in a container and hosting that container in the cloud can be a lot of fun, giving you an online retro gaming server. Likewise, BBS door games can be run on a containerized BBS that runs on the cloud too. This session will look at how this was done and get you thinking about how to use Docker for all kinds of things... Speakers: Blaize Stewart, Wintellect Patrick Devine, Docker

Using Docker Content Trust w/ Kubernetes Admission Controllers to Further Secure your Runtime

The Update Framework (and its sister project from the CNCF, Notary...which is called Docker Content Trust) are a little known gems in the cloud native community. These projects are however extremely vital for making rigorous guarantees about the contents of your software package (in the land of Docker that's a container image,) when it is deployed into an environment like Kubernetes. We'll demystify TUF/Notary at the beginning of this talk, and then do a demonstration for setting up image signing through your build pipeline finally ending in Kubernetes where we will restrict the container images that can be deployed to just ones signed by us (using Validating/Mutating Admission Webhook Controllers.) My goal is to empower you to take the skills you learn from the talk and implement a similar process in your own CI/CD pipeline. Speakers: Zachary Arnold, Ygrene Energy Fund Justin Cappos, NYU

Write Maintainable Integration Tests with Docker

Integration tests are extremely valuable but very hard to maintain and to write. You need to provision and manage the lifecycle for the dependencies that your application uses such as caches and databases. Testcontainer is an open source community all focused on solving this kind of problems across many languages. Gianluca is the maintainer of the Golang implementation that uses the Docker API to expose a test-friendly library that you can use in your test cases. During this talk, he will show you how to use testcontainer to write unit tests in Go with very low overhead. Speaker: Gianluca Arbezzano, InfluxData

Transform

#bigwhale Goes to Production: An Unexpected Journey @ Lockheed Martin (Part 2)

June 15th, 2018: As my Agile Development Team and I were wrapping up a fantastic experience at DockerCon 2018 US and entering the BETA phase of our Enterprise Containerization as a Service (CaaS) we understood the importance and criticality of completing our work and going to production. Part 1 of our journey was now behind us. Now we needed to look forward to what we call #bigwhale, Part 2. As innovation accelerates and customer needs rapidly evolve, Lockheed Martin is becoming increasingly agile. Quickly responding to customer requirements is key, and to facilitate overall business goals, Enterprise IT is demonstrating its agility. This session will focus on the steps it took to go production, expansion of our apps, services, and containers running in our Docker Enterprise cluster. I will discuss: - What we learned from containerizing enterprise-scale apps from augmented reality to system health and monitoring, and Wordpress all in production. - The critical lessons learned around container security. - How we built, marketed and promoted an internal version of "Play with Docker" at Lockheed. Speaker: Arjuna Rivera, Lockheed Martin

A New Lens for Venture Capital

In Venture Capital, the lens of identifying opportunity and investing in the companies that affect us all has been historically shaped by a narrow perspective. Yet, the world is changing and in a few short years to come, the minority will soon become the majority. As Director of Deal Flow for Backstage Capital's fund and Accelerator - one that invests in founders who identify as women, person of color and/or LGBTQ - Brittany Davis is in a unique position of identifying this new market. She will share stories of what it means to see through the Backstage lens, how she's building teams to appropriately support and service this new wave, and navigating the unexpected perspectives that need to be taken into account. Speaker: Brittany Davis, Backstage Capital

A Transformation of Attitude: Why Mentors Matter

What excites you - the idea of scuba diving to explore the deepest depths of the sea, or reaching the summit of Mount Everest? What goals make you happy - living your life with the financial freedom of a minimalist, or with the financial opportunities of the CEO of a Fortune 100 company? Have you ever had a mentor help turbo boost your journey toward achieving your dreams? This session will cover three ways to leverage mentoring: - The benefit of having at least one mentor in your life - How to proactively take control of your destiny through selectively choosing mentors when you begin a new journey - The positive impact you can have on the lives of others by becoming a mentor Speaker: Roxy Stimpson, D4DT (IOT World Labs)

Adding a Modern API Layer to ‘Dockerized’ Legacy Apps

As enterprises navigate a high degree of change, IT teams are stretched across supporting existing services and driving innovation. But when it comes to delivering on new services like a mobile app or IoT, a common challenge is that the crown jewels of the enterprise, its data and systems, remain locked up in proprietary applications or in the brains of specialists. In this hands-on demo and talk, we show how you can unlock the data in your proprietary applications and core systems. You’ll see how to go beyond containerization by adding a restful API-layer to a ‘dockerized’ legacy app, which can unlock its capabilities and data in a secure and managed way. Lastly, we also introduce the idea of an Application Network, its key guiding principles (discoverability, security, and manageability), and how it can help fuel innovation. Speakers: Dejim Juang, Mulesoft Elton Stoneman, Docker

Data-driven DevOps: The Key to Improving Speed and Scale

As CTO of CloudBees and the creator of Jenkins, I get to see lots of real-world software development, and teams and organizations trying to push better DevOps practice forward. In those conversations, I noticed that some are more successful than others. In this talk, I will explore where those differences seem to be made. One is around data. Our automation in software development is sufficiently broad that it is producing lots of data, but by and large most of those are simply thrown away. Yet at the same time, the management is feeling like they are flying blind because they have little insight! Another is around how they leverage “economy of scale.” Successful teams seem like they managed to drive great uniformity and consistency across software development, which allow organizations to move at great speed and make developers feel great. Speaker: Kohsuke Kawaguchi, CloudBees

How Intentional Diversity Creates Thought Leadership

How is it that some organizations seem to “get it” while others miss the mark? The answer: The best companies nurture diversity in thought —something James understood deeply when building mass market solutions. With a unique experience as a minority in tech, and an entrepreneur, James realized early on that an organization is only as diverse as its members. His inspiring presentation delivers practical ideas when it comes to building a diverse and capable team. You’ll learn how about: - Building a culture that celebrates fresh thinking and embraces new ideas - Specific techniques to hold an effective forum for diverse ideas - What a diverse team looks like in 2019 - Best practices for team building with remote employees Speaker: James Norman, Pilotly

Media and Analyst Q&A on Emerging Trends and the Role of Containerization

Bring your questions and join a panel of top media and industry analysts covering emerging trends such as edge computing, cloud migration and digital initiatives such as application and infrastructure modernization. Learn how containerization will accelerate these initiatives by enabling organization to operate as modern software factory and drive innovation. The panel will discuss advancements in container security, orchestration, networking and storage and how these capabilities will accelerate adoption. The panel will also look at what is in store for 2019. Speakers: Sean Michael Kerner, eWeek Ron Miller, TechCrunch Rosalie Chan, Business Insider Kelly Fitzpatrick, Red Monk Bret Fisher, DevOps Consultant + Instructor

Get updates about DockerCon