www.cfengine.com

CFEngine & Docker

• Complete visibility and alerting

• Compliance with self-healing

• OOTB inventory and reporting

• Repeatable and error-free

• Deploys to local or cloud infrastructure

• Delivers a standardized platform

2

• Agile, secure and scalable

• Policy based and convergent

• Simple, self-service consumption

Intelligent Infrastructure Automation

Policy-Based Application Deployment

Continuous Operations with

Self-Healing

Scale SpeedSecurity Stability

CFEngine is IT Automation at WebScale

Distributed, Lightweight Architecture

1. Define Desired State

HUB

3. Verify Actual State

CFEngine Hub

Design Center

MissionPortal

Policy Language

2. Ensure Desired State

CFE Agents

The Benefits of Managing Docker Environments with CFEngine

• Full automation inside and outside Docker containers – fast, secure, and scalable

• Reduce deployment complexity of distributed systems through policy-driven orchestration

• Ensure consistency and compliance across Docker and non-Docker components

• Single, unified solution to provision and manage systems across heterogeneous environments

Managing Docker Environments with CFEngine

Updating base images

Deploying complex apps

Creating and Linking Containers

Front-end

App Logic DB

Demo Scenario• Create custom Docker images on top of base

images• Provision & manage Docker containers and

images• Manage container connections and internal

configuration• Detect drift and self heal• Visualize inventory & create reports

Load balancer/front

end

Web server #1

Web server #2

DB server

Demo Scenario – Image Definitions

Use CFEngine to maintain image consistency across environments

Ensure hierarchy of images

Demo Scenario – Container Orchestration

Orchestrate services:- Deploy

containers- Make relevant

connections- Start services- Bring apps

online

Demo Scenario – Container Orchestration

The CFEngine policy uses the information made available by Docker through the container linking mechanism to correctly configure its services to talk to the other containers

Managed OSes

CFEngine Hub

DevTest

Prod

CFEngine Hub

Managed OSes

Managed OSes

Consistent Deployment Across Docker & non-Docker

Extensible Inventory Report

Customizable Filters and Report Columns

All Your System Types in One report

Graphical Representation of Reports

Self-Healing Infrastructure“docker ps” command

lists four active containers

Manually destroy one container

Second “docker ps” command lists only

three, after webserver2 was

destroyed

CFEngine Restores Desired State

A few minutes later all four containers are up again after CFEngine

resurrected webserver2

www.cfengine.com

CFEngine Enterprise is FREE for up to 25 hosts!Download and give it a try here.

Thank You!