Make docker to another level, and add http2

2026-08-09 05:06:28 +10:00 · 2018-03-02 13:32:05 +11:00
parent cc0e673fb8
commit c0e91bf812
4 changed files with 103 additions and 90 deletions
@@ -12,5 +12,6 @@
 - [Application](categories/application.md)
 - [Web Scraping](categories/web-scraping.md)
 - [Devops](categories/devops.md)
+    - [Docker](categories/devops/docker.md)
 - [Web](categories/web.md)
 - [Success Team Work](categories/team-work.md)
@@ -10,82 +10,6 @@
 - Gitlab CI
 - Travis

-# Docker
- Orchestration
-	- Rancher
-	- Kubernetes
-		- Pod
-			- Single container
-			- Multiple containers
-				- share ip
-				- share volumes
-		- Node
-		- Service
-			- ClusterIP (default)
-			- NodePort （ access by port）
-			- LoadBalancer (external ip)
-			- ExternalName dns
-		- Deployment
-		- Replica Set
-		- Service rolling update
-		- DaemonSet
-			- running a cluster storage daemon, such as glusterd, ceph, on each node
-			- running a logs collection daemon on every node, such as fluentd or logstash.
-			- running a node monitoring daemon on every node, such as Prometheus Node Exporter, collectd, New Relic agent, or Ganglia gmond.
-		- StatefulSets
-			- Ordered, graceful deployment and scaling
-			- Stable, persistent storage.
-			- Stable, unique network identifiers.
-			- Ordered, graceful deletion and termination.
-		- Proxy
-		- DNS
-			- service.namespace
-		- Secrets
-		- Persistent volumes
-			- Available
-				- a free resource that is not yet bound to a claim
-			- Bound
-				-  the volume is bound to a claim
-			- Released
-				- the claim has been deleted, but the resource is not yet reclaimed by the cluster
-			- Failed
-				- the volume has failed its automatic reclamation
- benefits
-	- escape the app dependency matrix
-	- Solve the environment issue. it works on my machine.
- Network
-	- Bridge
-	- Host
- Tips
-	- difference between `cmd` and `entrypoint`
-	- difference between `copy` and `add`
-
-        Basically they are similar, copy files and folder to destination. While ADD has some features (like local-only tar extraction and remote URL support) that are not immediately obvious. Consequently, the best use for ADD is local tar file auto-extraction into the image, as in ADD rootfs.tar.xz /.
- CMD
-	- has three forms
-		- CMD ["executable","param1","param2"]
-			- exec form, preferred
-		- CMD ["param1","param2"]
-			- as default parameters to ENTRYPOINT
-		- CMD command param1 param2
-			- shell form
-	- The main purpose of a CMD is to provide defaults for an executing container. These defaults can include an executable, or they can omit the executable, in which case you must specify an ENTRYPOINT instruction as well.
-	- If CMD is used to provide default arguments for the ENTRYPOINT instruction, both the CMD and ENTRYPOINT instructions should be specified with the JSON array format.
-	- docker run could override the default specified in CMD.
- ENTRYPOINT
-	- docker run arguments will as the entrypoint’s parameters. not CMD’s override
-	- has two forms
-		- ENTRYPOINT ["executable", "param1", "param2"]
-			- exec form, preferred
-		- ENTRYPOINT command param1 param2
-			- shell form
-	- entrypoint setting can be override by docker run —entrypoint
- Security
-	- https://docs.docker.com/engine/security/security/
-	- use non root user
-	- docker daemon attack surface
-	- kernel security features
-
 # Linux
 - ssh
 - IP table
@@ -0,0 +1,81 @@
+# Docker
+
+## Orchestration
+
+- Rancher
+- Kubernetes
+    - Pod
+        - Single container
+        - Multiple containers
+            - share ip
+            - share volumes
+    - Node
+    - Service
+        - ClusterIP (default)
+        - NodePort （ access by port）
+        - LoadBalancer (external ip)
+        - ExternalName dns
+    - Deployment
+    - Replica Set
+    - Service rolling update
+    - DaemonSet
+        - running a cluster storage daemon, such as glusterd, ceph, on each node
+        - running a logs collection daemon on every node, such as fluentd or logstash.
+        - running a node monitoring daemon on every node, such as Prometheus Node Exporter, collectd, New Relic agent, or Ganglia gmond.
+    - StatefulSets
+        - Ordered, graceful deployment and scaling
+        - Stable, persistent storage.
+        - Stable, unique network identifiers.
+        - Ordered, graceful deletion and termination.
+    - Proxy
+    - DNS
+        - service.namespace
+    - Secrets
+    - Persistent volumes
+        - Available
+            - a free resource that is not yet bound to a claim
+        - Bound
+            -  the volume is bound to a claim
+        - Released
+            - the claim has been deleted, but the resource is not yet reclaimed by the cluster
+        - Failed
+            - the volume has failed its automatic reclamation
+## Benefits
+
+	- escape the app dependency matrix
+	- Solve the environment issue. it works on my machine.
+## Network
+
+- Bridge
+- Host
+
+## Tips
+
+	- difference between `cmd` and `entrypoint`
+	- difference between `copy` and `add`
+
+        Basically they are similar, copy files and folder to destination. While ADD has some features (like local-only tar extraction and remote URL support) that are not immediately obvious. Consequently, the best use for ADD is local tar file auto-extraction into the image, as in ADD rootfs.tar.xz /.
+- CMD
+	- has three forms
+		- CMD ["executable","param1","param2"]
+			- exec form, preferred
+		- CMD ["param1","param2"]
+			- as default parameters to ENTRYPOINT
+		- CMD command param1 param2
+			- shell form
+	- The main purpose of a CMD is to provide defaults for an executing container. These defaults can include an executable, or they can omit the executable, in which case you must specify an ENTRYPOINT instruction as well.
+	- If CMD is used to provide default arguments for the ENTRYPOINT instruction, both the CMD and ENTRYPOINT instructions should be specified with the JSON array format.
+	- docker run could override the default specified in CMD.
+- ENTRYPOINT
+	- docker run arguments will as the entrypoint’s parameters. not CMD’s override
+	- has two forms
+		- ENTRYPOINT ["executable", "param1", "param2"]
+			- exec form, preferred
+		- ENTRYPOINT command param1 param2
+			- shell form
+	- entrypoint setting can be override by docker run —entrypoint
+- Security
+	- https://docs.docker.com/engine/security/security/
+	- use non root user
+	- docker daemon attack surface
+	- kernel security features
@@ -1,19 +1,26 @@
 # HTML

- HTML5
-	- audio
-	- video
-	- drag and drop
-	- more input type
-	- more elements
-		- section
-		- article
-		- footer
-		- header
-	- localstorage
-	- websocket
-	- canvas
- HTTPS
+- [HTML](#html)
+- [HTTP 2](#http-2)
+    - [HTTP server push](#http-server-push)
+- [CSS3](#css3)
+- [CORS](#cors)
+- [CDN](#cdn)
+- [Websocket](#websocket)
+- [json-schema](#json-schema)
+- [Auth Related](#auth-related)
+- [Browser](#browser)
+- [CSS](#css)
+
+# HTTP 2
+ ## HTTP server push
+
+ HTTP/2 Push allows a web server to send resources to a web browser before the browser gets to request them. It is, for the most part, a performance technique that can help some websites load faster.
+
+ HTTP/2 Push is not a mechanism for the server to notify things to the browser. Instead, pushed contents are used by the browser when it may have otherwise produced a request to get the resource anyway. But if the browser does not request the resource, the pushed contents become wasted bandwidth.
+
+Server push some related resource before the browser sends the request. .e.g. Browser request index.html, and then server response with index.html and also take the initiative to push style.css and index.js to frontend.
+

 # CSS3