Andrew Donald KENNEDY grkvlt

Running Docker Applications with Clocker (Part One)

November-December 2015, Abstract Visitor Pattern

Andrew Kennedy, Cloudsoft Corporation Limited <[email protected]>
Graeme Miller, Cloudsoft Corporation Limited <[email protected]>
Adrian Mouat, Container Solutions <[email protected]>

This post will explain how to use Clocker to build blueprints for, and deploy, applications consisting of linked Docker containers.

Enabling Effective Effectors

As part of the work I have been doing on Clocker, it became evident that the way effectors are integrated into Brooklyn is not sufficient for them to be considered first-class citizens. In particular, it is currently impossible to use effectors in any meaningful way when writing blueprints or catalogue items in YAML. To fix this, I think we need the following capabilities:

Mechanism to enable defining arbitrary scripted effectors in YAML, using JSR-223 supported scripting languages.

Apache Brooklyn YAML Style Guide

Statements should be interpreted according to RFC 2119.

Normative Statements

Blueprints MUST place all configuration inside a brooklyn.config map, and MUST use the fully qualified configuration key name
Lists MUST be indented properly, to allow IDE folding to work properly
Keywords MUST be formatted as lowerCamel tokens
Sensor, configuration key and section names MUST be formatted as lower-hyphen.dot-separated tokens

	# Copyright 2014-2015 by Cloudsoft Corporation Limited
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#o
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,

	id: riak-cluster-demo-application
	name: "Riak Cluster Demo Application"
	description: \|
	Riak cluster with load-balanced chatroom webapp
	iconUrl: classpath://riak-icon.png
	services:
	- type: org.apache.brooklyn.entity.stock.BasicApplication
	brooklyn.children:
	- type: brooklyn.networking.VirtualNetwork
	networkId: webapp

	location: meow
	services:
	- type: one
	- type: two
	location: tree

	location:
	jclouds:docker:http://swarm-url/

	services:
	- type: org.apache.brooklyn.entity.webapp.tomcat.TomcatServer

	id: swarm-softlayer
	name: "swarm-softlayer"
	version: "0.1"

	location:
	jclouds:softlayer:
	region: sjc01
	privateKeyFile: "~/.ssh/softlayer.pem"
	customizers:
	- $brooklyn:object:

	OpenSSL leaks, Target hacks, NSA surveillance... We need a way to evaluate system security that works. What would it look like?

	I finally put my proprietary development framework on Schneier's blog for free in 2013 in a reply to another commenter. There was
	hardly any demand for effective, ground-up security that I've specialized in so why not be altruistic. Cleaned up version at the
	link below:

	http://pastebin.com/y3PufJ0V

	Then, the Snowden leaks happened and I was glad to see my framework addressed about every NSA attack vector, including in TAO catalog.
	Exception was physical implants although I'm always clear that devices enemies got possession of can't be trusted. Far as source of my

	brooklyn.catalog:
	version: "0.1.1-SNAPSHOT"
	description: \|
	Entity that generates an '/etc/hosts' file containing the addresses
	of a group of entities that have the 'generate.hostsFile' config key set.
	publish:
	license_code: APACHE-2.0
	license_url: http://www.apache.org/licenses/LICENSE-2.0.txt

	items: