4 ms·

Any reason why you wouldn't use some kind of supervision for your process when running it in production?

by tayo42 11y ago

xyzzy123 11y ago
It depends whether you want restarts handled from within your container or from the outside (e.g. orchestration framework). With newer docker (1.2 onwards - https://docs.docker.com/engine/admin/host_integration/ https://docs.docker.com/engine/admin/host_integration/) you can have a container restart policy which handles a lot of the simple cases where previously one might have used supervisor. Baking restart policy into the container can be convenient (and was considered standard practice before restart policies), but has the downside that it's a bit less flexible in terms of how your container works in different environments.
ploxiln 11y ago
Docker itself can restart containers when the parent process inside the container exits for any reason. That behavior is not enabled by default but it can trivially be enabled for a container (started via "docker run", or in the compose yml file similarly). https://docs.docker.com/compose/compose-file/#cpu-shares-cpu-quota-cpuset-domainname-hostname-ipc-mac-address-mem-limit-memswap-limit-privileged-read-only-restart-shm-size-stdin-open-tty-user-working-dir https://docs.docker.com/compose/compose-file/#cpu-shares-cpu...
- Matt3o12_ 11y ago
  The last time I tried to use that it failed when coupling containers. Ie that nginx requires, my web app, which requires the database. Every process but the database failed because they all depended on each other. I ended up using shell scripts which used an arbitrary wait of 2 seconds after each process. that fixed the problem so that the containers came up after a reboot. Did docker fix that yet?
  - ploxiln 11y ago
    I think the implementation of links between containers did change significantly in the past year and a half. But that "links break when containers restart or are replaced" aspect was a deal-breaker for me when I started using docker "near production". I just use --net=host ... so I don't use docker network-related functionality at all. For my purposes server-level firewall settings are fine.

Any reason why you wouldn't use some kind of supervision for your process when running it in production?

by tayo42 11y ago

Any reason why you wouldn't use some kind of supervision for your process when running it in production?

It depends whether you want restarts handled from within your container or from the outside (e.g. orchestration framework). With newer docker (1.2 onwards - https://docs.docker.com/engine/admin/host_integration/ https://docs.docker.com/engine/admin/host_integration/) you can have a container restart policy which handles a lot of the simple cases where previously one might have used supervisor. Baking restart policy into the container can be convenient (and was considered standard practice before restart policies), but has the downside that it's a bit less flexible in terms of how your container works in different environments.

ploxiln 11y ago

Docker itself can restart containers when the parent process inside the container exits for any reason. That behavior is not enabled by default but it can trivially be enabled for a container (started via "docker run", or in the compose yml file similarly). https://docs.docker.com/compose/compose-file/#cpu-shares-cpu-quota-cpuset-domainname-hostname-ipc-mac-address-mem-limit-memswap-limit-privileged-read-only-restart-shm-size-stdin-open-tty-user-working-dir https://docs.docker.com/compose/compose-file/#cpu-shares-cpu...

Matt3o12_ 11y ago
The last time I tried to use that it failed when coupling containers. Ie that nginx requires, my web app, which requires the database. Every process but the database failed because they all depended on each other. I ended up using shell scripts which used an arbitrary wait of 2 seconds after each process. that fixed the problem so that the containers came up after a reboot. Did docker fix that yet?
- ploxiln 11y ago
  I think the implementation of links between containers did change significantly in the past year and a half. But that "links break when containers restart or are replaced" aspect was a deal-breaker for me when I started using docker "near production". I just use --net=host ... so I don't use docker network-related functionality at all. For my purposes server-level firewall settings are fine.