cstpdk / gcloud-coreos

5 stars 2 forks source link

Question about your cloud-config.yaml #1

Open gegere opened 9 years ago

gegere commented 9 years ago

Greetings, I noticed in your cloud-config.yaml file, the following highlights regarding Docker would you be able to help me and explain?

cstpdk commented 9 years ago

Hello there,

Your link points to two lines, that are trivially similar to those before them. I assume a mistake in your link? In case not: They denote a name for the systemd service file, docker.service, and a command, start, which means that the unit will run rather than only being enabled.

Anyway, it's great that you ask this question, as it reminds me to get this repo cleaned up at some point in the near future. The unit file for the docker service is taken from a CoreOS default docker service file some time back. I think some of the options are redundant with new versions of docker. The important part in this context is that:

  1. The docker daemon is started with a static bridge ip

    --bip=172.17.42.1/16

  2. The docker daemon is using both its own bridge ip and a public dns adress for all containers spawned:

    --dns 172.17.42.1 --dns 8.8.8.8

The above enables me to dnsmasq a hostname (.local) on the bridge ip, meaning that the docker daemon will get the requests, which will hit haproxy and continue on their service discovery path.

The rest of the service file mimicks CoreOS' default completely so as to not create inconsistencies. One interesting bit is the NOFILE and NPROC limits, which are discussed here, and explained here (sorry, you have to search, no anchors).

The docker options are well described with

docker --help

But for thoroughness:

Let me know if some of the above answers your question!

gegere commented 9 years ago

Thanks for providing such thorough, my highlight was not in error. Much of what you explained is depreciated. I have been working at a very focused level to understand Docker / Fleet / CoreOS, here is a repo.

I would be interested in chatting further about HAproxy and Fleet services, one on one if you have a little time to spare.