This presentation discusses Docker architecture and components. It is comprised of four main parts: Docker client and daemon, images, registries, and containers. The client communicates with the daemon to execute commands. Images are read-only templates used to create containers, which are lightweight and isolated environments for applications. Registries store images. The presentation explains how Docker works, how it differs from virtual machines and LXC, and the underlying technologies of namespaces, control groups, and union file systems that enable Docker's functionality.

1. Presentation By:
Mohammadreza Amini
Amir Arsalan
Autumn 2015
IRAN OpenStack Users Group
Docker Architecture
Version Modified

2. Agenda
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
●
Docker Concept
●
How Does Docker Work?
●
Should know about Docker
●
Docker vs VMs
●
Docker vs lxc
●
The underlying technology

3. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Docker Concept

4. Docker is composed of following four components
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
●
Docker Client and Daemon
●
Images
●
registries
●
Containers

5. Docker Client and Daemon
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Docker Daemon
the Docker daemon runs on a host machine. The user does not directly interact
with the daemon, but instead through the Docker client.
Docker Client
The Docker client, in the form of the docker binary, is the primary user interface to
Docker. It accepts commands from the user and communicates back and forth with
a Docker daemon.

6. Images
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
A Docker image is a read-only template.
Image type:
●
Images that exist on register (docker hub)
●
Images that can created with build

7. Registeries
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Docker registries hold images. These are public or private stores from which you upload or
download images. The public Docker registry is provided with the Docker Hub.

8. Containers
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Docker containers are similar to a directory. A Docker container holds everything that is
needed for an application to run. Each container is created from a Docker image.

9. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
How Does Docker Work?

10. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Reference: https://docs.docker.com/article-img/architecture.svg

11. What happens when you run a container?
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
●
Pulls the image
●
Creates a new container
●
Allocates a filesystem and mounts a read-write layer
●
Allocates a network / bridge interface
●
Sets up an IP address
●
Executes a process that you specify
●
Captures and provides application output

12. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Should know about Docker

13. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
●
Docker is not LXC
●
Docker is not a Virtual machine Solution.
●
Docker is not a configuration management system and is not a replacement for chef,
puppet, Ansible etc.
●
Docker is not a platform as a service technology.
Things you should know about Docker:

14. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Docker vs VMs

15. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Reference: https://risingstack-blog.s3-eu-west-1.amazonaws.com/2015/05/hypervisor-based-virtualization.jpg

16. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Reference: https://risingstack-blog.s3-eu-west-1.amazonaws.com/2015/05/os-virtualization.jpg

17. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Docker vs lxc

18. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Reference: https://www.flockport.com/lxc-vs-docker/

19. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
The underlying technology

20. Namespaces
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Namespaces provides a layer of isolation: each aspect of a container runs in its own
namespace and does not have access outside it.
More Details: http://www.toptal.com/linux/separation-anxiety-isolating-your-system-with-linux-namespaces

21. Control Groups
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Cgroups running applications in isolation is to have them only use the resources you want. This ensures
containers are good multi-tenant citizens on a host. Control groups allow Docker to share available
hardware resources to containers and, if required, set up limits and constraints. For example, limiting the
memory available to a specific container.
More Details: https://www.kernel.org/doc/Documentation/cgroups/cgroups.txt

22. Union File System
Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Union file systems, or UnionFS, are file systems that operate by creating layers, making them very
lightweight and fast. Docker uses union file systems to provide the building blocks for containers.
More Details: http://www.fsl.cs.sunysb.edu/docs/unionfs-tr/unionfs.pdf

23. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Any Question?

24. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Stay in Touch and Join Us:
● Home Page: OpenStack.ir
● Meetup age: Meetup.com/IranOpenStack
● Mailing List: OpenStackir@Lists.OpenStack.org
● Twitter: @OpenStackIR , #OpenStackIRAN
● IRC Channel on FreeNode: #OpenStack-ir

25. Docker Architecture
Version Modified
| Iran Community OpenStack.ir
Mohammadreza Amini
Linux Administrator
Mohammadreza@openstack.ir
Amir Arsalan
Python Developer
Arsalan@openstack.ir
Thank You