Docker and Azure Container Services

# CHAPTER 11

Docker and Azure Container Services #

1. Introduction #

2. Learning Objectives #

• Define Docker and the concept of Containerization.

• Understand the anatomy of a Dockerfile.

• Define the role of Azure Container Registry (ACR).

• Build, tag, and push a custom Docker image to Azure.

• Deploy a serverless container using Azure Container Instances (ACI).

3. Beginner-Friendly Explanation #

• The Old Way (Without Docker): You carry your loose clothes, plates, and books in your hands. You drop things. When you get to the new house, nothing fits in the new cupboards correctly. (This is deploying raw code to a server and fighting dependency errors).

• The Docker Way: You buy a standard, heavy-duty cardboard box (The Container). You put everything inside. You seal it shut (The Image). The movers don't care if it's books or plates; they just move the box. When it arrives at the new house (Azure), you open it, and everything is exactly where you left it. "It works on my machine" becomes "It works everywhere."

4. Azure Container Registry (ACR) #

5. Azure Container Instances (ACI) #

6. Anatomy of a Dockerfile #

# 1. Start with a tiny Linux environment pre-installed with Node.js
FROM node:18-alpine

# 2. Create a working directory inside the container
WORKDIR /app

# 3. Copy our application code from our laptop into the container
COPY . .

# 4. Install the required dependencies
RUN npm install

# 5. Open port 8080
EXPOSE 8080

# 6. Define the command to start the application
CMD ["npm", "start"]

7. Mini Project: Build, Push, and Run an Image #

Step-by-Step Tutorial:

1. 1. In the Azure Portal, open the Cloud Shell >.

1. 3. Create the Dockerfile:

1. 4. Create the Vault (ACR): Run this Azure CLI command to create your private registry (Name must be globally unique!):

1. 5. Build & Push: We will use "ACR Tasks" to build the image directly in the cloud!

1. 6. Run Serverlessly (ACI): Now, let's run that image instantly using Container Instances:

1. 7. Once finished, Azure will output a JSON block. Look for the fqdn (Fully Qualified Domain Name).

1. 8. Paste that FQDN (plus :8080) into your browser. Your custom Python container is running serverlessly on Azure!

8. Real-World Scenarios #

9. Best Practices #

• Vulnerability Scanning: In enterprise environments, you should upgrade your ACR from the Basic SKU to the Premium SKU and enable Microsoft Defender. Every time a developer pushes an image, Defender scans it. If it detects a critical vulnerability (like the Log4j exploit) inside the container, it alerts the security team immediately.

10. Security Tips #

• ACR Authentication: In the tutorial, we enabled the "Admin user" on ACR for simplicity. In production, NEVER use the Admin user. Always use Azure Active Directory (Managed Identities) so your AKS cluster can securely authenticate to your ACR without passwords.

11. CLI Examples #

az acr repository list --name mycompanyregistry123 --output table

12. Exercises #

1. 1. Explain the architectural difference between running a container in Azure Kubernetes Service (AKS) versus running it in Azure Container Instances (ACI).

1. 2. Why is Azure Container Registry (ACR) preferred over public Docker Hub for enterprise deployments?

13. FAQs #

14. Interview Questions #

• Q: Explain the mechanics of Docker Layer Caching. How does organizing the instruction sequence within a Dockerfile optimize image build times?

• Q: Detail the architectural workflow required to deploy a proprietary, containerized application from a developer's local machine to an Azure Container Instance, specifically highlighting the role and authentication mechanisms of Azure Container Registry (ACR).

15. Summary #

16. Next Chapter Recommendation #