douglasmiranda

Check your current file/directory permission with:

stat -c "%a" /path/to/dir_or_file

To recursively give directories read&execute privileges:

find /path/to/base/dir -type d -exec chmod 755 {} +

douglasmiranda

This is a draft, will probably publish a full article about, but for now:

CI/CD with Drone:

• Notes about Drone + Gitlab
• Drone agent issues when running with Docker Swarm

Private Container Registry with Docker Registry (Distribution)

douglasmiranda

Debian Stretch + Docker

Setup replicado na Digital Ocean e CloudCone, mas funciona basicamente da mesma forma em qualquer server com Debian Stretch + acesso root por ssh.

Resumo:

• vamos criar um usuário comum do sistema, permitir que ele execute comandos sudo (requisitando senha)
• vamos conectar ao servidor com ssh com o novo usuário, com acesso a partir de chave pública e desabilitar acesso ssh com senha, bem como acesso ssh do root direto
• configurar um simples firewall
• instalar Docker e executá-lo sem o sudo
• No fim há um tópico "Possíveis erros", então ao se deparar com erros, visite essa seção

douglasmiranda

Solution:

In your Drone server set the environment variable:

DRONE_KEEPALIVE_MIN_TIME: 5s

In your Drone agent set the environment variables:

douglasmiranda

Export your public key:

keybase pgp export > keybase-public.key

Export your private key:

keybase pgp export --secret > keybase-private.key

douglasmiranda

https://gomplate.hairyhenderson.ca/datasources/#using-file-datasources

gomplate -d secret=/path/to/file -i 'let me tell you my secret: {{ datasource "secret" }}'

douglasmiranda

In fact it could be a number of other issues, that are covered in google results for this problem.

But one of them could be just the redirect config.

More: https://github.com/docker/distribution/blob/master/docs/configuration.md#redirect

in /etc/docker/registry/config.yml

storage:

douglasmiranda

• Create Gitlab account
• Host Drone http://docs.drone.io/install-for-gitlab/
• Create the Drone CD application in your gitlab with api scope (Access the authenticated user's API) https://gitlab.com/profile/applications
• Access your Drone domain and authenticate through Gitlab

How to use volumes and privileged containers?

Repository's sidebar menu: Settings > Project Settings > and mark "Trusted"

How to cache:

douglasmiranda

# ...

# In Django you can tell the Nginx to not cache with:
# https://docs.djangoproject.com/en/2.0/topics/http/decorators/#module-django.views.decorators.cache

# Microcache - Want 150 requests/sec to become 1200?
# 
# https://www.nginx.com/blog/benefits-of-microcaching-nginx/
# http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache
proxy_cache_path /tmp/cache keys_zone=cache:10m max_size=10g levels=1:2 inactive=600s max_size=100m;

douglasmiranda

# https://github.com/douglasmiranda/dockerfiles/tree/master/caddy
# https://caddy.community/t/caddy-as-a-proxy-for-django/2164/2

www.{$DOMAIN_NAME} {
    redir https://example.com
}

{$DOMAIN_NAME} {
    proxy / django:5000 {
        header_upstream Host {host}