douglasmiranda

- https://github.com/thumbor/thumbor
- https://github.com/thumbor-community/aws
- https://github.com/Starou/django-thumborstorage
- https://github.com/ricobl/django-thumbor

douglasmiranda

Infrastructure Provisioning with Terraform

terraform.io

• Infrastructure Provisioning with Terraform
  • General stuff
    • git
  • Linode
    • How do I set regions when creating a instance?
  • Digital Ocean

douglasmiranda

Ansible for Configuration Management

I'm using Ansible only for Configuration Management, the server is up and I want to configure users, install packages and configure them.

For infrastructure provisioning terraform.io is nice!

Currently, my deployment flow includes Drone.io/GitlabCI for CI/CD and Docker Swarm for orchestrating containers.

• Ansible for Configuration Management
• Tasks

douglasmiranda

Answer: "NO" (2018-12-08)

When you're running your service on a container as a node of Docker Swarm, you're gonna get the IP of the ingress network gateway, not the user's IP.

Of course there's solutions, not an ideal one, but workarounds with each tool you're using. (Nginx, Caddy, Traefik..)

Related links:

• moby/moby#25526

douglasmiranda

Well there's no builtin way of doing.

The problem is:

We need a way of skipping steps, or conditional pipelines that are triggered when some dir/* files.* were changed since last commit.

Useful if you maintain a:

• Monorepo

douglasmiranda

Check your current file/directory permission with:

stat -c "%a" /path/to/dir_or_file

To recursively give directories read&execute privileges:

find /path/to/base/dir -type d -exec chmod 755 {} +

douglasmiranda

This is a draft, will probably publish a full article about, but for now:

CI/CD with Drone:

• Notes about Drone + Gitlab
• Drone agent issues when running with Docker Swarm

Private Container Registry with Docker Registry (Distribution)

douglasmiranda

Debian Stretch + Docker

Setup replicado na Digital Ocean e CloudCone, mas funciona basicamente da mesma forma em qualquer server com Debian Stretch + acesso root por ssh.

Resumo:

• vamos criar um usuário comum do sistema, permitir que ele execute comandos sudo (requisitando senha)
• vamos conectar ao servidor com ssh com o novo usuário, com acesso a partir de chave pública e desabilitar acesso ssh com senha, bem como acesso ssh do root direto
• configurar um simples firewall
• instalar Docker e executá-lo sem o sudo
• No fim há um tópico "Possíveis erros", então ao se deparar com erros, visite essa seção

douglasmiranda

Solution:

In your Drone server set the environment variable:

DRONE_KEEPALIVE_MIN_TIME: 5s

In your Drone agent set the environment variables:

douglasmiranda

Export your public key:

keybase pgp export > keybase-public.key

Export your private key:

keybase pgp export --secret > keybase-private.key