DevCon2018, Alfresco, Docker, Xenit

1. Production-Ready Docker Stack
Xenit Solutions NV
Roxana Angheluta, Wim Evens, Willem
Van den Eynde, Wim Fabri, Toon Geens,
Jasper Hilven, Michiel Huygen, Thijs
Lemmens, Laurent Van der Linden, Wim
Obbels, Nathan Van Poppel, Lieven De
Puyselleir, Younes Regaieg, Lars
Vierbergen, ...

2. Learn. Connect. Collaborate.
Alfresco deployments
Flavor: community /
enterprise
Single / bundled Clustered Hosted
Single deployment
method
Automation Traceability Versioning
Upgrades Easy configuration
changes
Data separation Security
Monitoring Alerting Reporting

3. Learn. Connect. Collaborate.
Agenda
• Architecture
• Docker images
• Ansible deployments
• Powerful monitoring stack

4. Learn. Connect. Collaborate.
Architecture
• No docker orchestration tool, docker-compose up / down to start / stop
services
• Consul (Hashicorp) + registrator (GliderLabs) for service discovery
• Consul template (Hashicorp) for rendering load balancing configuration and
restarting load balancer

5. Learn. Connect. Collaborate.
Architecture

6. Learn. Connect. Collaborate.
Architecture
(clients)

7. Learn. Connect. Collaborate.
Architecture
(hosting)

8. Learn. Connect. Collaborate.
Docker images

9. Learn. Connect. Collaborate.
Docker images

10. Learn. Connect. Collaborate.
Docker images
Principles
● One process per container
● Init script to customize
● Small size (many images based on
AlpineLinux)
● Data separation
Images Flavour
Alfresco Enterprise
Community
Bundled
Solr Tomcat-based
Jetty-based
Jod converter
Infra-specific Consul, consul-template, registrator,
(ha)proxy
Monitoring-specific Kibana, logstash, curator,
elasticsearch, logspout
Cabot_worker, cabot_beat,
cabot_app, cabot_redis, cabot_db,
cabot2alerta
Carbon, graphite_api, grafana, statsd
Inflow Webapp, db
Databases Postgres, mysql

11. Learn. Connect. Collaborate.
Ansible deployments
ansible-role-alfresco
ansible-role-solr
ansible-role-consul
ansible-role-central-monitorin
g
ansible-role-logging
ansible-role-docker
ansible-role-infra
ansible-role-metrics-collector
ansible-role-postgres
ansible-role-move2alf
ansible-role-provision-vm
ansible-role-alfresco-bundle

12. Learn. Connect. Collaborate.
Ansible deployments
Traceability and versioning
• Each role deployed = tag
• Client environment deployment
– Collection of ansible roles tags
– Variables overwriting default values from the roles used

13. Learn. Connect. Collaborate.
Ansible deployments
Cross-roles concerns
• Security
– Tls authentication for docker and consul
– Secrets protection
• Vault (Hashicorp)

14. Learn. Connect. Collaborate.
Monitoring
Architecture

15. Learn. Connect. Collaborate.
Monitoring
Aggregated alerting dashboard

16. Learn. Connect. Collaborate.
Monitoring
Reporting
Automatic SLA reporting
● Markdown template => pdf
● Cabot availability checks
● JIRA tickets
● Grafana panels
● Kibana panels

17. Learn. Connect. Collaborate.
Demo
● Installed 4 servers: 2 with alfresco and 2 with solr
○ Demo building process of an Alfresco image
○ Demo ansible deployment of the new image
○ Demo consul template
○ Demo alerta

18. Learn. Connect. Collaborate.
Future work
● Improve the architecture
● More checks to alert on (investigate also grafana4 alerting)
● Kibana
● Pro-activity: janitors, agents to restart services

19. Thank you!