Commit | Line | Data |
---|---|---|
408a9c19 SS |
1 | ### About |
2 | ||
7e81faae | 3 | - [Docker](https://docker.com/) is an open source project to pack, ship and run any Linux application in a lighter weight, faster container than a traditional virtual machine. |
8200fe05 | 4 | |
a89c92f2 | 5 | - Docker makes it much easier to deploy [a Discourse forum](https://github.com/discourse/discourse) on your servers and keep it updated. For background, see [Sam's blog post](http://samsaffron.com/archive/2013/11/07/discourse-in-a-docker-container). |
2619d8e3 | 6 | |
a89c92f2 | 7 | - The templates and base image configure Discourse with the Discourse team's recommended optimal defaults. |
408a9c19 | 8 | |
4792b7d0 | 9 | ### Getting Started |
cd0f828e | 10 | |
7e81faae | 11 | The simplest way to get started is via the **standalone** template, which can be installed in 30 minutes or less. For detailed install instructions, see |
cd0f828e | 12 | |
046dfa65 | 13 | https://github.com/discourse/discourse/blob/master/docs/INSTALL-cloud.md |
cd0f828e | 14 | |
408a9c19 SS |
15 | ### Directory Structure |
16 | ||
8200fe05 | 17 | #### `/cids` |
408a9c19 SS |
18 | |
19 | Contains container ids for currently running Docker containers. cids are Docker's "equivalent" of pids. Each container will have a unique git like hash. | |
20 | ||
8200fe05 | 21 | #### `/containers` |
408a9c19 | 22 | |
4792b7d0 | 23 | This directory is for container definitions for your various Discourse containers. You are in charge of this directory, it ships empty. |
408a9c19 | 24 | |
8200fe05 | 25 | #### `/samples` |
408a9c19 | 26 | |
7e81faae | 27 | Sample container definitions you may use to bootstrap your environment. You can copy templates from here into the containers directory. |
408a9c19 | 28 | |
8200fe05 | 29 | #### `/shared` |
408a9c19 SS |
30 | |
31 | Placeholder spot for shared volumes with various Discourse containers. You may elect to store certain persistent information outside of a container, in our case we keep various logfiles and upload directory outside. This allows you to rebuild containers easily without losing important information. Keeping uploads outside of the container allows you to share them between multiple web instances. | |
32 | ||
8200fe05 | 33 | #### `/templates` |
408a9c19 | 34 | |
5a538748 | 35 | [pups](https://github.com/samsaffron/pups)-managed templates you may use to bootstrap your environment. |
408a9c19 | 36 | |
8200fe05 | 37 | #### `/image` |
408a9c19 | 38 | |
7e81faae | 39 | Dockerfile for both the base image `/discourse_base` and discourse image `/discourse`. |
408a9c19 | 40 | |
45f0fd1a | 41 | - `/discourse_base` contains all the OS dependencies including runit, postgres, nginx, ruby. |
408a9c19 | 42 | |
7e81faae | 43 | - `/discourse` builds on the base image and configures a discourse user and `/var/www/discourse` directory for the Discourse source. |
408a9c19 SS |
44 | |
45 | The Docker repository will always contain the latest built version at: https://index.docker.io/u/samsaffron/discourse/ , you should not need to build the base image. | |
46 | ||
58584176 | 47 | ### Launcher |
408a9c19 | 48 | |
45f0fd1a | 49 | The base directory contains a single bash script which is used to manage containers. You can use it to "bootstrap" a new container, enter, start, stop and destroy a container. |
408a9c19 SS |
50 | |
51 | ``` | |
7e81faae | 52 | Usage: launcher COMMAND CONFIG [--skip-prereqs] |
408a9c19 SS |
53 | Commands: |
54 | start: Start/initialize a container | |
55 | stop: Stop a running container | |
56 | restart: Restart a container | |
57 | destroy: Stop and remove a container | |
ab7a956d | 58 | enter: Use docker exec to enter a container |
408a9c19 | 59 | logs: Docker logs for container |
f8c887b6 | 60 | memconfig: Configure sane defaults for available RAM |
408a9c19 | 61 | bootstrap: Bootstrap a container for the config based on a template |
7e81faae | 62 | rebuild: Rebuild a container (destroy old, bootstrap, start new) |
408a9c19 SS |
63 | ``` |
64 | ||
e0fd1f5b TB |
65 | If the environment variable "SUPERVISED" is set to true, the container won't be detached, allowing a process monitoring tool to manage the restart behaviour of the container. |
66 | ||
4792b7d0 | 67 | ### Container Configuration |
408a9c19 | 68 | |
f1579f0e | 69 | The beginning of the container definition can contain the following "special" sections: |
408a9c19 | 70 | |
58584176 | 71 | #### templates: |
408a9c19 SS |
72 | |
73 | ``` | |
74 | templates: | |
75 | - "templates/cron.template.yml" | |
76 | - "templates/postgres.template.yml" | |
77 | ``` | |
78 | ||
8aab40ca | 79 | This template is "composed" out of all these child templates, this allows for a very flexible configuration structure. Furthermore you may add specific hooks that extend the templates you reference. |
408a9c19 | 80 | |
58584176 | 81 | #### expose: |
408a9c19 SS |
82 | |
83 | ``` | |
84 | expose: | |
85 | - "2222:22" | |
e8c34114 | 86 | - "127.0.0.1:20080:80" |
408a9c19 SS |
87 | ``` |
88 | ||
c12bc318 | 89 | Expose port 22 inside the container on port 2222 on ALL local host interfaces. In order to bind to only one interface, you may specify the host's IP address as `([<host_interface>:[host_port]])|(<host_port>):<container_port>[/udp]` as defined in the [docker port binding documentation](http://docs.docker.com/userguide/dockerlinks/) |
408a9c19 SS |
90 | |
91 | ||
58584176 | 92 | #### volumes: |
408a9c19 SS |
93 | |
94 | ``` | |
95 | volumes: | |
96 | - volume: | |
c12bc318 | 97 | host: /var/discourse/shared |
408a9c19 SS |
98 | guest: /shared |
99 | ||
100 | ``` | |
101 | ||
dae709bf | 102 | Expose a directory inside the host to the container. |
408a9c19 | 103 | |
8b4382c7 GXT |
104 | #### links: |
105 | ``` | |
106 | links: | |
107 | - link: | |
108 | name: postgres | |
109 | alias: postgres | |
110 | ``` | |
111 | ||
112 | Links another container to the current container. This will add `--link postgres:postgres` | |
113 | to the options when running the container. | |
114 | ||
4792b7d0 | 115 | ### Upgrading Discourse |
c57d9880 | 116 | |
4792b7d0 | 117 | The Docker setup gives you multiple upgrade options: |
c57d9880 | 118 | |
7e81faae | 119 | 1. Use the front end at http://yoursite.com/admin/upgrade to upgrade an already running image. |
c57d9880 | 120 | |
7e81faae JA |
121 | 2. Create a new base image manually by running: |
122 | - `./launcher rebuild my_image` | |
c57d9880 | 123 | |
4792b7d0 | 124 | ### Single Container vs. Multiple Container |
c57d9880 | 125 | |
4792b7d0 | 126 | The samples directory contains a standalone template. This template bundles all of the software required to run Discourse into a single container. The advantage is that it is easy. |
c57d9880 | 127 | |
4792b7d0 | 128 | The multiple container configuration setup is far more flexible and robust, however it is also more complicated to set up. A multiple container setup allows you to: |
c57d9880 | 129 | |
a89c92f2 | 130 | - Minimize downtime when upgrading to new versions of Discourse. You can bootstrap new web processes while your site is running and only after it is built, switch the new image in. |
4792b7d0 JA |
131 | - Scale your forum to multiple servers. |
132 | - Add servers for redundancy. | |
133 | - Have some required services (e.g. the database) run on beefier hardware. | |
6776444f JA |
134 | |
135 | If you want a multiple container setup, see the `data.yml` and `web_only.yml` templates in the samples directory. To ease this process, `launcher` will inject an env var called `DISCOURSE_HOST_IP` which will be available inside the image. | |
c57d9880 | 136 | |
4792b7d0 | 137 | WARNING: In a multiple container configuration, *make sure* you setup iptables or some other firewall to protect various ports (for postgres/redis). |
596faf7a | 138 | On Ubuntu, install the `ufw` or `iptables-persistent` package to manage firewall rules. |
58584176 | 139 | |
4792b7d0 | 140 | |
2e2e7049 | 141 | |
4792b7d0 | 142 | For a Discourse instance to function properly Email must be set up. Use the `SMTP_URL` env var to set your SMTP address, see sample templates for an example. The Docker image does not contain postfix, exim or another MTA, it was omitted because it is very tricky to set up correctly. |
2e2e7049 | 143 | |
58584176 | 144 | ### Troubleshooting |
c57d9880 | 145 | |
93cbc0d4 MB |
146 | View the container logs: `./launcher logs my_container` |
147 | ||
93cbc0d4 MB |
148 | Spawn a shell inside your container using `./launcher enter my_container`. This is the most foolproof method if you have host root access. |
149 | ||
7e81faae | 150 | If you see network errors trying to retrieve code from `github.com` or `rubygems.org` try again - sometimes there are temporary interruptions and a retry is all it takes. |
a89c92f2 MB |
151 | |
152 | Behind a proxy network with no direct access to the Internet? Add proxy information to the container environment by adding to the existing `env` block in the `container.yml` file: | |
93cbc0d4 | 153 | |
a89c92f2 MB |
154 | ```yaml |
155 | env: | |
93cbc0d4 | 156 | …existing entries… |
a89c92f2 MB |
157 | HTTP_PROXY: http://proxyserver:port/ |
158 | http_proxy: http://proxyserver:port/ | |
159 | HTTPS_PROXY: http://proxyserver:port/ | |
160 | https_proxy: http://proxyserver:port/ | |
161 | ``` | |
162 | ||
58584176 | 163 | ### Security |
c57d9880 | 164 | |
596faf7a MB |
165 | Directory permissions in Linux are UID/GID based, if your numeric IDs on the |
166 | host do not match the IDs in the guest, permissions will mismatch. On clean | |
167 | installs you can ensure they are in sync by looking at `/etc/passwd` and | |
168 | `/etc/group`, the Discourse account will have UID 1000. | |
dda0e62b S |
169 | |
170 | ||
171 | ### Advanced topics | |
172 | ||
173 | - [Setting up SSL with Discourse Docker](https://meta.discourse.org/t/allowing-ssl-for-your-discourse-docker-setup/13847) | |
2e261c4d | 174 | - [Multisite configuration with Docker](https://meta.discourse.org/t/multisite-configuration-with-docker/14084) |
cbe0a21a | 175 | - [Linking containers for a multiple container setup](https://meta.discourse.org/t/linking-containers-for-a-multiple-container-setup/20867) |
5372d62c | 176 | - [Using Rubygems mirror to improve connection problem in China](https://meta.discourse.org/t/replace-rubygems-org-with-taobao-mirror-to-resolve-network-error-in-china/21988/1) |
16051fe5 | 177 | |
a1a2b497 MP |
178 | ### Developing with Vagrant |
179 | ||
180 | If you are looking to make modifications to this repository, you can easily test | |
181 | out your changes before committing, using the magic of | |
182 | [Vagrant](http://vagrantup.com). Install Vagrant as per [the default | |
183 | instructions](http://docs.vagrantup.com/v2/installation/index.html), and | |
184 | then run: | |
185 | ||
186 | vagrant up | |
187 | ||
188 | This will spawn a new Ubuntu VM, install Docker, and then await your | |
189 | instructions. You can then SSH into the VM with `vagrant ssh`, become | |
190 | `root` with `sudo -i`, and then you're right to go. Your live git repo is | |
191 | already available at `/var/discourse`, so you can just `cd /var/discourse` | |
192 | and then start running `launcher`. | |
193 | ||
194 | ||
16051fe5 KY |
195 | License |
196 | === | |
197 | MIT |