View More
View Less
System Message
An unknown error has occurred and your request could not be completed. Please contact support.
Wait Listed
Personal Calendar
Conference Event
There aren't any available sessions at this time.
Conflict Found
This session is already scheduled at another time. Would you like to...
Please enter a maximum of {0} characters.
{0} remaining of {1} character maximum.
Please enter a maximum of {0} words.
{0} remaining of {1} word maximum.
must be 50 characters or less.
must be 40 characters or less.
Session Summary
We were unable to load the map image.
This has not yet been assigned to a map.
Search Catalog
Replies ()
New Post
Microblog Thread
Post Reply
Your session timed out.
This web page is not optimized for viewing on a mobile device. Visit this site in a desktop browser to access the full set of features.
DockerCon 2018
Add to My Interests
Remove from My Interests

187485 - Workshop: Using Istio In the adoption of cloud native technologies developers have found one of the greatest challenges is the integration of services in distributed systems. The challenges include service discovery, load balancing, fault tolerance, end-to-end monitoring, dynamic routing for canary deployments and most importantly securing the communication channels. Istio solves these problems by providing a layer of infrastructure between the services and the network that allows the service communication to be controlled outside the application code. This fundamentally changes how services are connected, managed and secured. During thisworkshop you will gain hands-on experience to understand how Istio is changing the landscape of cloud native applications. We will walk through deploying each piece of Istio alongside a microservice application running in Kubernetes and in the process create a service mesh to control the communication. In a series of hands-on labs, we see features of Istio such as: • Traffic Management, Resilient Communication and Load Balancing between Services • Policy Enforcement and Rate Limiting • Telemetry, Monitoring and Reporting • Securing Communication between • Microservices Canary Deployments Lee Calcote - Head of Technology Strategy, SolarWinds
Girish Ranganathan - Principal Architect, SolarWinds
187481 - Workshop: Migrating a .Net App to Docker This workshop teaches you how to move existing full .NET Framework apps into container and run them on the Docker container platform for Windows, to modernize the application architecture. You'll learn how to break out back-end features into separate containers and integrate them with a message queue, and how to break out UI components into containers and integrate them with a reverse proxy. At the start of the session you'll be running a monolithic ASP.NET app in a single container, and by the end you'll have a distributed application running across multiple containers, using Docker to build, run and manage them all. Steven Follis - Solution Engineer, Docker
Elton Stoneman - Developer Advocate, Docker
187483 - Workshop: Migrating a Java App to Docker This workshop covers the process for migrating a N-tier Java REST application to Docker. The process begins with a containerization of the application without changing code. After the containerized application has been tested, we will add a messaging queue to improve application performance through horizontal scaling and elastic deployment of the app. As the application scales, we’ll add logging and monitoring by deploying an ELK stack. Finally, we’ll replace the original JSP client interface to separate the client development from the Java application development. Through each step of the migration, we’ll go through the process of creating images, registering images in Docker Trusted Registry and deploying the application in Docker Enterprise Edition. Sophia Parafina - Developer Relations Engineer, Docker
Eric Smalling - Solution Architect, Docker
221635 - Lightning Talk: Spilling the beans: Monitoring Java Apps in Containers

Monitoring Java apps running inside containers can be hard:

- What are the system metrics that matter?
- How does JVM behave inside Docker and why are JVMs killed by the OOM killer?
- Can we collect all the metrics we care about like heap, stack, garbage collection, threads or JMX custom metrics more easily than exporting ports all the time?

In this session, we will reveal all our monitoring secrets on how to collect and use these metrics to resolve common issues.

Jorge Salamero Sanz - Engineer, Sysdig
219694 - Lightning Talk: Making Modernization Magical

Dan will demonstrate how development and test teams are using Skytap Cloud, Docker, and DevOps to accelerate modernizing traditional applications.

As cloud buzz continues to proliferate in all directions, we’re hosting a session to cut through the chatter. This demonstration will focus on the technology developers, system administrators, and architects leverage to get organizations into the cloud - and use it effectively.

While some on-premises applications easily migrate to containers, many applications that power enterprises today are complex, monolithic applications running on older operating systems, like AIX. Modernizing these applications requires more than magic, but with Skytap Cloud, it’s achievable and realistic.

Dan will detail how you can combine Skytap Cloud, automation tools including Jenkins, Chef, Puppet, and UrbanCode, and the magic of Docker containers plus Kubernetes, to release more frequently, increase test coverage, and make the most of cloud’s benefits.

After Dan’s magic act, please join us at the Skytap booth for more fun and carnival games!

Dan Jones - VP of Product, Skytap
224341 - General Session: Day 1 Opening

Join the DockerCon opening general session as Docker CEO Steve Singh kicks off the conference and speaks about how Docker works for you, your team and your company. You'll also hear from enterprise companies on their Docker success stories, and what would a DockerCon be without tech demos by the Docker engineering team.

Steve Singh - CEO, Docker, Docker
154351 - Lightning Talk: How MIT's AI Competition runs on 2,000 Docker Containers Battlecode is MIT’s 17 year old AI competition, where players submit bots that compete against each other in a real time strategy game. In order to run such a competition with thousands of competitors, Battlecode must be able to securely sandbox untrusted player code, guarantee a consistent execution environment, and scale to run hundreds of matches in seconds. We achieve this through a unique usage of Docker; to this date, we have deployed our container to hundreds of match-running servers and thousands of competitors. Some of the interesting challenges we have faced when using Docker for Battlecode are, in no particular order, 1) using docker in docker to ensure players don’t tamper with match running software, 2) deploying software to competitors with Docker, and 3) managing a distributed horde of containers. Joshua Gruenstein - Director, Battlecode
223916 - Deploy faster! Become a hero! And more reasons why Docker users prefer HPE

Doing a POC, building a container DevOps pipeline, or deploying Docker containers at large scale?   HPE got you covered with our range of solutions, services, and support that can ease your transition to containers and provide you with a flexible choice of options.  HPE PointNext services can help you modernize, containerize, and shorten your Docker production readiness to days.  You can deploy a production ready Docker cluster in 30 minutes with Express Containers.  Or you can build an Enterprise CaaS platform on composable systems with the ability to flex your compute, storage, and networking resources.  Building container applications that need persistent storage? You have your choices of software defined container storage or leverage HPE 3PAR and Nimble storage offerings.

Ka Wai Leung - Solutions Product Management, HPE
Gary Harris - Sr. Director - Open Cloud/Cloud Native Services, HPE
187663 - Workshop: Docker Storage Concepts In this lab we'll learn how Docker handles storage. We'll take a look at how the file system is represented on disk and how that relates to file system drivers. We'll move from there into looking at bind mounts and volumes - what they are and when to use them. Finally we'll show how to provide persistent storage to your applications. Derrick Miller - Senior Solutions Engineer, Docker
Daniel Finneran - EMEA Solutions Architect, Docker
187204 - Container Innovation SIG Room 2002 - Contribute & Collaborate Wednesday, June 13 11:30am-2:15pm This half day includes talks on some of the top Open Source projects and areas shaping the future of container-based platforms including:
High Performance Containers and the Convergence of Big Data and Big Compute By Christian Kniep (Docker)
KubeFlow: Machine Learning Meets Containers by Jay Smith (Google)
Introduction to Project Fn by Chad Arimura
Introduction to Hyperledger Fabric by Jonathan Levi (Hacera)
Introduction to OpenFaaS by Alex Ellis
Run any code on OpenWhisk Docker Actions by Carlos Santana
Gloo: the Function Gateway by Idit Levine
Idit Levine - Founder and CEO,
Carlos Santana - STSM, IBM Cloud Functions (Serverless OpenWhisk), IBM
Chad Arimura - VP Serverless, Oracle
Alex Ellis - Founder, OpenFaas
Michelle Casbon - Senior Engineer, Google
David Aronchick, Google
Christian Kniep - Technical Account Manager, Docker
Stefan Prodan - DX Engineer, Weaveworks
Jay Smith - Cloud Customer Engineer, Google
Jonathan Levi - Principal, HACERA
201452 - Lightning Talk: What's a Cat Doing in my Cluster?

You've spun up Kubernetes in your DockerEE cluster, but what are all these new components?  Where's Libnetwork? What is this cute Calico cat doing here? I just turned on this "network policy thing" and now nothing is talking - What is going on?

In 15 minutes, I will explain Kubernetes networking basics, how it works in DockerEE, what network policy is and what you can use it for,  a real-world use-case from the front lines of containerized network security, and even who that insufferably cute kitten is, and what it's doing in your cluster.

Christopher Liljenstolpe - CTO, Solutions, Tigera
219704 - Lightning Talk: Defending against the unexpected: Immutability to the rescue!

  A lot of (justified) attention has been given to managing vulnerabilities and securing the build pipeline. While avoiding known vulnerabilities and ensuring that only trusted images are used are necessary building blocks of any secure Docker deployment, this is not where security ends. Malicious code can be introduced in other ways, and unknown vulnerabilities (zero days) might be exploited. Rather than looking for complex patterns or trying to guess what an attacker might do, there is a relatively simple way of protecting containers against many such attacks – enforcing immutability. In this talk, Liz will demonstrate how Aqua can block attacks by preventing image-container drift and ensuring that containers only perform their intended functions.

Liz Rice - Technology Evangelist, Aqua Security
151972 - Accelerating Development Velocity of Production ML Systems with Docker The rise of microservices has allowed ML systems to grow in complexity, but has also introduced new challenges when things inevitably go wrong. This talk dives into why and how Pinterest Dockerized the array of microservices that produces the Pinterest Home Feed to accelerate development and decrease operational complexity and outlines benefits we gained from this change that may be applicable to other microservice based ML systems. Most companies provide isolated development environments for engineers to work within. While a necessity once a team reaches even a small size, this same organizational choice introduces potentially frustrating dependencies when those individual environments inevitably drift. This project was initially motivated by challenges arising from the difficulty of testing individual changes in a reproducible way - without having standardized environments, pre-deployment testing often yielded non-representative results, causing downtime and confusion for those responsible for keeping the service up. The Docker solution that was eventually deployed pre-packages all dependencies found in each microservice, allowing developers to quickly set up large portions of the Home Feed stack, and always test on the current team-wide configs. This architecture enabled the team to debug latency issues, expand our testing suite to include connecting to simulated databases, and more quickly do development on our thrift APIs. This talk will feature tips and tricks for Dockerizing a large scale legacy production service and discuss how an architectural change like this can change how an ML team works. Ekrem Kocaguneli - Senior Software Engineer, Pinterest
Kinnary Jangla - Engineering Manager, Pinterest
154354 - How To Build Your Containerization Strategy The Docker Enterprise Edition platform helps customers deploy and manage applications faster and it secures the application pipeline at a lower cost than traditional application delivery models. But it takes more than just great technology to achieve the desired results. The organization and culture of your enterprise directly impacts what you transform, how it’s done, and who does it. Success requires a strategy for how you will govern the Docker EE container platform, how to assess your application estate, what your delivery pipeline will look like, and how to ensure developers, operators, security teams and others play nicely together. In this talk I will cover topics such as different types of workloads (legacy, microservices, FaaS, big data, ...), how your org chart can influence whether you deploy a CaaS (Containers as a Service) vs CLaaS (Clusters as a Service), how "shifting left" can determine if you can outsource, centralized vs distributed CI/CD and how containers play a role, transforming your pets into cattle, how giant whale balloons are used for onboarding, and a prescriptive and comprehensive methodology for successfully deploying Docker in your enterprise. Lee Namba - EMEA Practice Manager, Docker
154883 - Java in a World of Containers Container technologies such as Docker are rapidly becoming the de-facto way to deploy cloud applications, and Java is committed to being a good container citizen. This session will explain how OpenJDK fits into the world of containers, specifically how it fits with Docker images and containers. The session will focus on the production of optimized Docker images containing a JDK. We will introduce technologies such as jlink, that can be used to reduce the size of the created image. The session will explain Alpine/musl support for an effective image and runtime. The session will also talk about and the inclusion of Class Data Sharing (CDS) archives and Ahead of Time (AOT) shared object libraries for improving startup time. The attendees will learn about the recent work that has gone into OpenJDK for interacting with container resource limitations. Robert Vandette - Consulting Engineer, Oracle
Arun Gupta - Principal Technologist, AWS
154999 - #bigwhale: An Unexpected Journey into Containerization @ Lockheed Martin - Part 1 2017 was a banner year for change and disruption at Lockheed Martin. Specifically Enterprise IT, moving to cloud and taking a chance on Containerization as a Service with Docker. As innovation accelerates and customer needs rapidly evolve, Lockheed Martin must become increasingly agile. Rapidly responding to customer requirements is key, and to facilitate overall business goals, Enterprise IT needs to be agile. We are experiencing software development lifecycles moving from waterfall to agile models of development. These changes are moving downstream toward Enterprise IT operations with the evolution of DevOps. In order to meet the demands of the customer and make significant progress on our cloud journey, we needed to look at changing how we manage infrastructure, how we change our IT culture and ultimately how we innovate at scale. That’s where the story of i2 labs begins. This presentation will focus on the creation of i2 labs at Lockheed Martin, which inspired and enabled people and processes to invest in Docker as a company, Containerization as a technology and DevOps as a methodology. How we went from labs testing to building Agile Development Teams to preparing to enter our BETA phase of our Enterprise Containerization as a Service to deploy applications in a consistent, repeatable, and reliable manner. Arjuna Rivera - i2 Labs Leader, Lockheed Martin
155328 - Designing a Centralized Container Platform for a Multi-Cluster Enterprise Environment Deploying, operating and maintaining many independent clusters is always a key challenge for central service providers in large enterprises. The number of customers and different use-cases realized on the provided platform requires an architecture that is highly integrated into the enterprise IT ecosystem. In this talk we highlight the challenges that came up during the development of the “Container as a Service” Platform based on Docker Enterprise Edition. We also address the architectural and operational decisions we made to cope with requirements of different stakeholders. Further we will show the integration of a multi-cluster/multi-tenant Platform into our existing IT factory. Till Schenk - IT Infrastructure Architect, Robert Bosch GmbH
160496 - Creating Effective Docker Images Sick of getting paged at 2am and wondering "where did all my disk space go?" This has actually happened to me, and you can learn from my mistakes! New Docker users often start with a stock image in order to get up and running quickly, but that isn't always the right answer. Creating efficient images is often overlooked, but important. Beyond saving resources, using minimal images also delivers important security benefits: include only what you need and not a whole runtime that might have security vulnerabilities. In this session, I'll talk about how to create effective images and lessons I've learned from running containers in production at a number of startups. I'll also cover topics like "how do layers work?" and some things you should think about when creating your images, such as; choosing or creating the right base image; the importance of caching; using RUN statements conservatively; cleaning up as you go. I'll also address best practices; both at a high level with multi-stage builds; and some language-specific best practices, for example, tips and tricks for creating containers for Node.js vs Go. To illustrate these points, we'll cover: How layers work? Choosing a base image vs. creating your own The basics of building minimal images and the importance of choosing a base image vs. creating your own The basics for building minimal images and the importance of caching High level best practices for Linux containers (in general, and some language specific examples). High level best practices for Windows container images. New and improved: multi-stage builds Good vs. not so good Dockerfile examples Docker Image Scanning, and other friends. What's up next? Looking to the future for more optimization. Abby Fuller - Sr. Technical Evangelist, Amazon Web Services
219106 - Learn from Watson: Using Containers to Run AI Workloads The rise of AI has coincided with the rise of the Cloud. Limitless capacity, elasticity and specialized hardware delivered from the Cloud have enabled massive improvements in machine learning technology. Companies are now seeing the benefit of infusing AI into a variety of cloud-native apps and are growing AI in existing workloads. In this keynote, you'll hear about how containers provide a natural choice for AI workloads, particularly machine learning. The secret is in how you design containers and clusters for these unique workloads, so that you can focus on building your app. The combination of Kubernetes and Cloud can make that happen for you. The IBM Cloud Kubernetes Service provides AI-ready capabilities for building cloud-native apps, adding Cloud services to existing apps, and ultimately relieving pain around security, scale, and infrastructure management. Try it on your own terms: come by the IBM Cloud booth, containerize an app, and bind it to a Watson service in 5 minutes. Jason McGee - IBM Fellow, VP and CTO, IBM Cloud Platform, IBM
219699 - Lightning Talk: How Atlassian Protects your Code Running in Pipelines Containers

Atlassian's CI/CD product, Pipelines, runs a Docker container of your own construction on our Kubernetes cluster. Find out how we safeguard your code even as others have the ability to run arbitrary code of their own. This talk will be heavily security focused.

Ben Walther - Senior Security Engineer
220283 - Securing your Container Environment with Open Source Cloud Native platforms such as Kubernetes and Cloud Foundry help developers to easily get started deploying and running their applications at scale. But as this access to compute starts to become ubiquitous, how you secure and maintain compliance standards in these environments becomes extremely important. In this talk we'll cover the basics of securing Cloud Native platforms such as Kubernetes. We will also cover open source tools - such as Clair, Anchore, and Sysdig Falco - that can be used to maintain secure computing environment. Attendees will walk away with a good understanding of the challenges of securing a Cloud Native platform and practical advice on using open source tools as part of their security strategy. Michael Ducy - Director of Community & Evangelism, Sysdig
152812 - Lightning Talk: Frequently Answered Queries on StackOverflow Jump start your adoption of Docker by avoiding some of the most common issues encountered. This talk aims to clarify many of the common points of confusion around docker, leveraging countless questions on StackOverflow and hands on experience implementing Docker in production environments. Topics include pitfalls of treating containers like virtual machines, why you should not define a volume in a Dockerfile, how host volumes and a named bind mount are different, the easy way to debug networking issues inside your containers, the difference between exposing and publishing a port, and how RUN, CMD, and ENTRYPOINT may not behave as you expect. Brandon Mitchell - Solutions Architect, BoxBoat
219461 - Lightning Talk: Lessons Learned Running Docker at Extreme Scale

The ascendance of Docker has helped bring about about a new focus on some software development values that are dear to our heart at CircleCI—consistency, automation, and continuity; that is, developing software within a consistent build environment, testing it in an automated fashion, and deploying it with a focus on continuous delivery of new code.

We released CircleCI 2.0 with these values in mind, placing Docker at the core of our Continuous Integration platform and allowing customers to build projects on CircleCI using any combination of Docker images as build environments.

CircleCI’s images for popular languages + frameworks have over 38M+ pulls on DockerHub. Docker images are an incredible asset for ensuring that your dev and production environments are mirrors. But, with every new technology comes added complexity and management overhead.

In this session, CircleCI CTO Rob Zuber will share some lessons learned in running Docker at scale, across thousands of customers, their language + technology choices, and their environments. With over 350,000 users and 10M+ jobs per month, we’ve seen up close how customers can succeed with Docker, and how to avoid potential issues.

Angel Rivera - Developer Advocate, CircleCI
220281 - Lightning Talk: From Build to Runtime: Operational Container Security for DevOps and Security Teams in the Hybrid World Containers are changing the IT landscape and fueling the DevOps movement. Security teams need to extend their practices to this new evolution and transform to DevSecOps by automating security at the speed of business. This session explains how to shift your security left, automate with policy-based orchestration and gain visibility into you complete container pipeline. Attendees will learn by demonstration how to: Restrict vulnerable images from moving out of the build to repositories. Create an automated policy-based orchestration to disallow containers from being spun up in Kubernetes deployments. Track runtimes violating the immutable behavior, while maintaining complete visibility into the complete topography of the container environment. Hari Srinivasan - Director of Product Management
225148 - Lightning Talk: Reducing Mean Time To Clue in DevOps and Data Science with Dotmesh Often a bad day at work can be characterized by not having access to the data you need when you need it. As developers, we often spend hours trying to debug issues which would be much faster to reproduce if we could have a complete application state snapshot from whoever reported the bug. In production, not having a data snapshot when you need it can be the difference between a 5 minute outage and catastrophic data loss. And in data science teams, building models with current data is relatively straightforward, but being able to reproduce the 94% accuracy Bob got last Thursday can be tricky – especially as the data, code & parameters you're working with are all constantly changing and being updated. This talk introduces the open source project dotmesh ( as a way to alleviate all of these pains – both in ""raw form"" as Docker and Kubernetes volume plugins (with clustering and production workloads supported) and also as the upcoming product dotscience, which provides a tool for tracking data science work, providing perfect reproducibility, provenance, discoverability & performance tracking. Please come and join in the discussion, whether you're a developer, an operator or a member of a data science team – Luke would love to hear from you! Luke Marsden - CEO and Founder, Dotmesh
153085 - Automated Hardware Testing Using Docker for Space Two things are for certain – space is hard, and Docker is not just for web content! Space software development traditionally lags behind state of the art software process for good reason – our missions are long (7+ years), we run on highly constrained embedded hardware, and the software cannot fail. Docker, along with a devops mentality, has helped us create a scalable, parallelizable and rapidly deployable test infrastructure for DART, NASA’s mission to hit an asteroid at 6 km/s. During the presentation, we will walk through how our dev cycle has changed from a human based testing system to an automated one. We will outline how we are using Docker (and NASA Goddard’s Core Flight Executive) for both our embedded development environment and our scalable test environment. Next, we will discuss what deployment means to us (and how different it is from web deployment). Lastly, we will explore lessons learned on how our hardware-centric testing approach was adapted into a software-based approach: what worked, what didn’t, what we wish we could do someday. How can you help? We are new to Docker. We are excited to share our experiences and hear from the Docker community on our use cases, technological hurdles that we faced, our solutions to these problems, and how we can harness Docker to the fullest extent. Christopher Heistand - Flight Software Lead, Johns Hopkins Applied Physics Lab
154486 - Building Your Production Tech Stack for Docker Container Platform This session will focus on the practicals of building a fully-functional stack of container cluster tools, with different options for stacking those tools from the OS-up. We’ve all seen examples of common technologies stacks, like the good ol’ LAMP and MEAN stacks for apps, but what about lower-level infrastructure? And can we get it without cloud vendor lock in please? Oh and pure containers and infrastructure-as-code too? With Docker, sure thing! This session will cover: Which OS/Distro and Kernel to use VM’s or Bare Metal Recommended Swarm architectures Tool stacks for “pure open source”, “cloud-service based”, and “Docker EE” scenarios Demos of these tools working together including InfraKit, Docker, Swarm, Flow-Proxy, ELK, Prometheus, REX-Ray, and more. Bret Fisher - Docker Captain and DevOps Sysadmin, Independent Consultant
155016 - Building Your NoSQL Ship: How an Enterprise transitioned from a RDBMS to NoSQL DB using Agile and Docker How do you bring a NoSQL DB into a production Docker Environment? What are key orchestration challenges? How can you design a portable solution that can lift and shift into any environment? What are pro’s and con’s to containerizing your database? By establishing a set of best practices and proper testing you can ensure that your infrastructure design can be resilient in any global environment. The challenge is identifying what works best for your organization. Disruptive testing and partnering with other teams within your company can ensure success when implementing a global application. In this session you will learn from a member of MetLife’s ModSquad innovation team firsthand what challenges MetLife overcame using a NoSQL DB in a Docker environment. You will learn about key decisions impacting orchestration, availability, database replication, and disaster recovery. Additionally, you will understand key differences in classic and swarm mode and how Kubernetes and Docker teaming up will help your Production Design. Jonell Taylor - Platform Engineer, MetLife
155180 - Windows Container Security The majority of the container security discussion revolves around containers on Linux while the security of containers in Windows is left as a mystical black box. In this talk we'll peel back the curtain and dive in to how Windows containers are secured. Does Windows have namespaces? How does it compose the layers of a container's filesystem? How does it limit resource usage of containers? I heard there's a Hyper-V isolation thing, what's that about? We'll answer all these questions and more! Saruhan Karademir - Security Engineer, Microsoft
Yuvraj Mehta - Group Product Manager, Docker
159838 - Diversity != stock photos: Are you looking for candidates in all the wrong places? If you work in tech, it's likely your company has a Diversity initiative... but what does that even mean? If you are a "diverse" candidate, have you noticed a difference? If you are a manager, how have you changed your practices to support diversity? How many fantastic SW developers have you met that came from a non-traditional background? Did they all have a CS degree? Should a CS degree be a prerequisite for all SW engineering roles? With the rise of coding bootcamps and self-taught programmers around the world, perhaps it's time we start changing our hiring processes. In this talk, we'll dive into how to approach ways to evolve your current recruiting practices to encourage more diverse candidates through your door, take a critical look at current interviewing procedures and processes (hint: you may be blocking the door to many candidates), explore the benefits of hiring bootcamp grads (as well as discuss the bandwidth needed to train one), highlight success stories, and I'll share some funny (and cringe-worthy) stories from my time as a junior developer interviewing without a CS degree. Join Chloe Condon - Theater/TV/Movie actress turned Software Developer, as she tells her story and shares her expertise. Chloe Condon - Developer Evangelist,
160792 - Docker for Developers on Mac and Windows The whole Docker ecosystem exists today because of every single developer who found ways of using Docker to improve how they build software; whether streamlining production deployments, speeding up continuous integration systems or standing up an application on your laptop to hack on. In this talk we want to take a step back and look at where Docker sits today from the software developers point of view - and then jump ahead and talk about where it might go in the future. In this talk, we’ll discuss: * Making Docker an everyday part of the developing software on the desktop, with Docker for Windows and Docker for Mac * Docker Compose, and the future of describing applications as code * How Docker provides the best tools for developing applications destined to run on any Kubernetes cluster This session should be of interest to anyone who writes software; from people who want to hack on a few personal projects, to polyglot open source programmers and to professional developers working in tightly controlled environments. Everyone deserves a better developer experience. Gareth Rushgrove - Product Manager, Docker
187667 - Workshop: Networking for Swarm and Kubernetes in Docker Enterprise Edition Docker Enterprise is changing the application landscape but you still need container A to talk to B in a reliable and portable way. In this workshop you will learn about key Docker Enterprise networking concepts. You will get your hands dirty by going over use-cases, best practices and examples across both Swarm and Kubernetes. Join us to learn more. Andy Randall - Co-Founder & VP of Partners & Customer Success, Tigera
David Yu - Partner Solutions Engineer, Docker
Christopher Liljenstolpe - CTO, Solutions, Tigera
219450 - Understanding the Developer Experience with Azure​

Azure offers great experiences for building anything from simple to very complex applications using Docker and containers. If its modernizing a .NET application for migration to the cloud, using containers to process workloads on demand with Container Instances, or using open source tools like Helm and Draft to create and deploy apps; Azure has it covered.  In this session, stop by and see how you can take advantage of Azure's offerings alongside open source tools to get your app into the cloud and your organization more productive.

Bryan Liston - Cloud Developer Advocate, Microsoft
219456 - Docker Adoption Trends and Best Practices

Join us at DockerCon as Datadog shares findings from our 2018 Docker and Orchestrator Adoption study. As a SaaS monitoring solution specializing in containers and cloud, Datadog has a unique vantage point into the world of Docker, orchestration, and containers. Join us as we open up the data and discuss surprising facts about real world Docker usage. Is Docker usage making it into production or are we all dabblers? Which deployment patterns most often lead to successful rollouts? Are containers really short lived? Join us as we bust myths, review usage statistics, and make a few predictions.

Ilan Rabinovitch - Vice President, Product, Datadog
154487 - Packaging Software for Distribution on the Edge with Docker and Windows Server At GE Digital, in the Asset Performance Management space, we need to supply an edge solution that impacts both on-premise and data transmission to the cloud. Our current edge solutions are relatively simplistic, but as our technologies mature along with our customers’ needs, we’re finding that we need to grasp a more fog computing-based approach where we include more intelligence, more computing power, at the edge. Along with this computative power, we need to better remotely manage these systems – to be able to monitor progress and diagnose problems – a technology that would enable us to containerize, to better manage, our software bundlings and deployments. We found that Windows Docker seemed to fit the bill -- much of the technologies that live at our edge solutions are Windows OS based (as the customers’ main platforms are Windows OS based). This presentation reviews the approach that we took to repackage one of our main APM on-premise solutions using Windows Docker. We’ve created a prototype which we’re looking forward to productize and enable the capability of remote management to thousands of deployments. The presentation also contains a video demo of the running system. The on-prem APM system will demonstrate the usage of Docker networking along with docker volumes and three (3) docker containers – will discuss the construction of the images, and nuances, of execution of the running docker containers. Peter Ngai - Software Architect, GE Digital
154935 - 5 Patterns for Success for Application Transformation Legacy apps weren't designed to run in a modern distributed platform like Docker. They have their own ideas about logging, configuration and health which don't translate to the world of containers and make transformation projects hard. This session shows you how to bring your old apps into the modern world, and integrate them with Docker - without changing code. We'll cover patterns for all the core application concerns: * logging * configuration * monitoring * health * dependency management The sample apps will be in .NET and Java, and will show you how to turn your existing apps into good Docker citizens. Elton Stoneman - Developer Advocate, Docker
160795 - Docker Enterprise Edition: An Architecture and Operations Overview Docker Enterprise Edition (EE) is much more than just an application packaging format and run-time. It is an enterprise-ready container platform that automates the delivery of applications using an agile operating model with integrated security. Join members of the Docker product team as we walk through how you can leverage Docker EE to construct a pipeline to create new apps on Docker Desktop or modernize traditional apps using Docker Application Converter, move apps through a secure supply chain with Docker Trusted Registry, and deploy and monitor the apps at scale in Universal Control Plane. * Overview and architecture of Docker EE technical solution * Locking down a multi-tenant deployment by limiting user access to specific cluster nodes and API/CLI/UI permissions * Using Compose to simplify Dev app creation while leveraging both Swarm and Kubernetes for maximum Ops flexibility * Creating a secure supply chain that scans your apps for vulnerabilities and cryptographically signs them for verification Stick around for tips and tricks running Docker at scale, and demos of new features! Anshul Pundir - Software Engineer, Docker
Ryan Kennedy - Group Product Manager, Docker
185680 - Building a Docker Center of Excellence: Panel Discussion with MetLife, PayPal, and Splunk As with many new technologies, the adoption of containerization is as much cultural change as it is technological change.. The Docker container platform unlocks many advantages in software delivery but can also challenge traditional development and IT operations paradigms. Companies should consider the potential impact and opportunity the organization, culture and processes as part of the technology implementation. This panel led by Meghdoot Bhattacharya, Director of Cloud Engineering at PayPal, Tim Tyler, Principal Solutions Engineer at MetLife, and Mike Dickey, Senior Director, Engineering at Splunk will feature their experience in rolling out Docker Enterprise Edition across legacy codebases and multiple application teams with minimal disruption to the business. A successful pattern common across all three companies is the formation of a Center of Excellence (COE) to build expertise and focus the execution of the containerization strategy. Gain valuable insights into the intangibles such as how to find the right mix of skills for the team, how to find quick wins that solidify the strategy, and how to roll out Docker in phases to reduce disruption. Mike Dickey - Senior Director, Engineering, Splunk
Meghdoot Bhattacharya - Director of Cloud Engineering, PayPal
Tim Tyler - Principal Engineer, MetLife
Mark Church - Product Manager, Docker
186735 - Container Orchestration from Theory to Practice Join Laura Frank and Stephen Day as they explain and examine technical concepts behind container orchestration systems, like distributed consensus, object models, and node topology. These concepts build the foundation of every modern orchestration system, and each technical explanation will be illustrated using SwarmKit and Kubernetes as a real-world example. Gain a deeper understanding of how orchestration systems work in practice and walk away with more insights into your production applications. Stephen Day - CA, :D
Laura Frank Tacho - Director of Engineering, Codeship @ CloudBees
198084 - All Roads Lead to the Cloud: Liberty Mutual's Journey with Docker EE Like many organizations, Liberty Mutual knows their future is in the cloud. But as a large, Fortune 100 company, there are many different business units with different technology stacks, different generations of applications, and different levels of expertise around the organization. Achieving their goals of moving to the cloud requires a solution that is both easy for the developers to adopt and promotes the primary objectives of application portability and technology innovation. In this session, Eric Drobisewski and Michael Letourneau, Senior Architects at Liberty Mutual will discuss how the company got this project started, their initial design and how it was scoped and why they chose Docker EE. They will also share their progress today with apps in production, best practices for implementation, and what they are looking to accomplish with the platform over the next year. Michael Letourneau - Architect, Liberty Mutual Group
Eric Drobisewski - Senior Architect, Liberty Mutual
219441 - From Design Time to Run Time; Integrating Security into your Continuous Delivery Pipeline.

Join Trend Micro security architects to see how DevOps teams can secure applications while maintaining fast time to value with continuous delivery. 
From image creation to runtime deployment, this session will explore detailed demonstrations and use cases for building security into the build and deployment of applications deployed to a Kubernetes cluster. Learn how vulnerability and malware detection can be integrated to your container build process, securing images as they move through the CI/CD pipeline with tools like Jenkins. We will also show examples of how automated agent provisioning and runtime controls deliver ongoing container and host level protection for your Docker environments.
Our detailed use cases will provide a better understanding of how you can ensure application integrity with properly integrated security that meets compliance and mission-control requirements for better business outcomes.

Bryan Webster - Principal Architect, Trend Micro
219451 - Service Mesh made Docker Simple

Service mesh is the missing piece in most container deployments.  Many organizations have seen increased agility by Dockerizing their applications and deploying in Kubernetes.  Service mesh enables more complex deployment scenarios (A/B, circuit breaker), stricter security (mTLS), and better visibility.  In it's current state service mesh is difficult to leverage and adds a lot more concepts to your deployments.  In this talk we will present a new tool that builds on the simplicity of Docker Compose to deploy and run your service mesh.

Darren Shepherd - Co-founder and Chief Architect, Rancher Labs, Inc.
154800 - Lightning Talk: 5 years later: Is Docker still delivering? Confessions of a Docker-holic My name is Tom and I'm a self-confessed Docker-holic. This is my story. I first encountered Docker on August 19th 2013. One of our internal customers at Activision was growing weary of VMs and requested "fast, simple to build and reproducible" test environments to be used in the Continuous Integration pipeline. Docker was suggested and within 2 months we were running builds and tests in containers. What started as a single container test environment quickly escalated into test stacks using docker compose. 5 years later and we are using Docker to create scalable, multi-cloud Build and Test environments. The more we used Docker the more use cases we found. This talk will look at how the Build Engineering team evangelised container adoption, the change to the developer workflow, where did we fail and how did we recover. I'll also talk about some tips, tricks and anecdotes picked up along the way. The talk will conclude with "5 things I wish I'd known 5 years ago". Thomas Shaw - System Engineer, Riot Games
187205 - Cloud Native Projects SIG Room 2002 - Contribute & Collaborate Wednesday, June 13 - 3:30-6:00pm This second half day features talks on some of the top Cloud Native Foundation projects including:
Kubernetes Community Office Hours by Paris Pittman (Google)
Everything You Need to Know About the Container Storage Interface (CSI) by Saad Ali (Google)
Introduction to Istio by Dan Berg (IBM) and Zack Butcher (Google)
An Intro to SPIFFE and SPIRE: Building Trust In and Between Modern Distributed Systems by Andrew Jesup (
A HotROD Ride With Jaeger by Yuri Shkuro (Uber)
Cloud Native Logging with Fluentd by Eduardo Silva (Treasure Data)
An Intro to OpenTracing: Follow your Requests from Mobile and Web Clients to Microservices and Monoliths by Priyanka Sharma and Ted Young (LightSpeed)
Saad Ali - Senior Software Engineer, Google
Dan Berg - Distinguished Engineer, IBM
Zack Butcher - Software Engineer, Tetrate
Eduardo Silva - Sr. Software Engineer, Treasure Data
Sabree Blackmon - Developer Programs Engineer, Scytale
Paris Pittman - DevRel, Program Manager, Kubernetes, Google
Ted Young - Director of Open Source Development, LightStep
Priyanka Sharma, LightStep
Yuri Shkuro - Staff Engineer, Uber Technologies
220984 - Lightning Talk: How to Develop Multi-Cloud Application without Multi-API Headaches

For engineers and sysadmins, multi-cloud strategies usually imply complexity: multiple APIs, multiple endpoints, opaque workflows, data scattered across services with increased security threats. These are all issues Zenko tries to address by providing a unified API endpoint compatible with S3, support for multiple storage backends, full metadata search and a workflow engine.


Zenko gives users the freedom to manage data across all the main public clouds (including Azure and Google) and private clouds using a single endpoint and the S3 API. Zenko also lets you replicate data across all these backends based on programmable logic and do metadata search across all of them. All the data managed by Zenko is not mangled in any way and remains accessible natively. Developers save headaches, gain freedom of choice and users keep control of their data.


This talk will assess the current state of multi-cloud, the enterprises need for more transparency on how their data is managed, and the solutions brought to them by Zenko. We will also touch on business challenges of using Docker in production at large customer, and on our own deployment process with Kubernetes on bare metal. It will include a live demo of Zenko’s replication capabilities.

Stefano maffulli - Dir. Community Marketing, Scality
154229 - Lightning Talk: Dockerizing Blizzard's StarCraft 2 Learning Environment In August 2017, Blizzard Entertainment and Deep Mind released a StarCraft 2 Learning Environment (SC2LE) designed to take machine learning to the next level. The initial set up of the SC2LE development environment (without Docker) took over a day to troubleshoot and install. In this session, Elaine will share how Docker containers allowed her to cut the time needed to set up SC2LE from over 18 hours to under 30 minutes. Elaine Yeung - Software Engineer, Sentry
187486 - Workshop: Monitoring and Logging Monitoring and Logging are essential in a productive development life-cycle, particularly when it comes to Enterprise DevOps. As we move faster and more efficient when deploying our applications into production the importance of proper monitoring and logging only increases. No longer do we blindly deploy applications and wait for phone calls until something breaks. As not its expected we know and understand the problem before the customer realises; with container monitoring and logging we can become even more proactive when fixing issues, provide constructive feedback to the business, and perform trend analysis to support capacity planning for the future. What are you going to learn in this Lab? Monitoring & Logging Concepts Available Tooling Docker Monitoring & Logging with Docker Enterprise Install & Configure Lab Brian Christner - Co-Founder, 56K.Cloud
John Harris - Technical Account Manager, Docker
219691 - Lightning Talk: Container Security at Scale: Ensuring Trust in Container Deployments

DevOps organizations are increasing turning to container environments to meet the demand for faster, more agile software delivery. Container orchestration platforms like Kubernetes present the most effective way to manage the operational challenges as these production environments scale. However, large-scale container deployments present a new array of security challenges, including how to properly manage open source security risk. A 2017 451 research report recently identified security as the single biggest hurdle to container adoption.

The challenges of managing security risk increase in scope and complexity with the size of your deployment and the number of open source software components that are a part of your application code base. In 2017, dozens of new CVEs were reported every day, making it essential to have good visibility into and control over the open source in use in order to understand if any known vulnerabilities are present.

Black Duck open source and container management expert Tim Mackey shares the latest insights and recommendations for securing open source in your containers, including:

The role of containers in addressing some of the problems faced by teams moving to DevOps

How Kubernetes enhances that solution by answering questions of networking, image registries, deployment automation, application lifecycle, etc.

Why container environments present new application security challenges, including those posed by open source

How to scan applications running in containers to identify open source and map against known vulnerabilities Best practices and methodologies for deploying secure containers with trust

Tim Mackey - Sr Technical Evangelist, Black Duck by Synopsys
153676 - Continuous Compliance with Docker Container Platform and OSCAL Highly regulated industries such as the financial, healthcare, and Government sectors present a number of unique challenges in the realm of IT compliance. While Docker Enterprise Edition is already being used to facilitate agile and secure development workflows in these environments, it has been notoriously difficult to correlate various standards and catalogs like PCI DSS, HIPAA and NIST 800-53 to containerized workflows and ensure compliance with the same. In this session, you’ll learn about NIST’s new Open Security Controls Assessment Language (OSCAL) specification, the problems it addresses, and how it has been embedded into Docker EE to support the notion of continuous compliance. This session will also highlight how Docker, Inc., in partnership with C2 Labs, extended the platform to give compliance professionals a concise window into the complete state of their Docker environment. Anil Karmel - Co-Founder and CEO, C2 Labs
Andrew Weiss - Lead Federal Sales Engineer, Docker
154784 - Don’t Have a Meltdown! Practical Steps for Defending Your Apps Security is a key concern for application developers and operations teams, as well as security professionals. Have I done enough? What do I need to do in the face of new threats like Meltdown and Spectre? What happens when the next big issue comes along? What should my priorities be? How do containers help? In this talk we’ll demonstrate some common attacks live, and show how you can effectively defend your container deployment against them, using a combination of best practices, configuration, and tools. Taking inspiration from highlights of the OWASP Top 10, and other high profile exploits and attacks, in this talk we will look at risks and preventative measures related to: - authentication - injection - updates - sensitive data - configuration By the end of the talk you should understand the most important security risks in your applications, and how to go about mitigating them. Justin Cormack - Engineer, Docker
Liz Rice - Technology Evangelist, Aqua Security
Remove From Schedule Add To Schedule Are you sure you would like to Delete this personal time? Edit My Schedule Edit Personal Time This session is full. Would you like to be added to the waiting list? Would you like to remove "{0}" from your schedule? Would you like to add "{0}" from your schedule? Sorry, this session is full. Waitlist Available Sorry, this session and it's waiting list are completely full. Sessions Available Adding this multi-day session automatically enrolls you for all times shown below. Removing this multi-day session automatically removes you for all times shown below. Adding this multi-day session automatically enrolls you for all session times for this session. Removing this multi-day session automatically removes you for all session times for this session. Click to view details Interests Hide Interests Search Sessions Export Schedule There is a scheduling conflict. You cannot add this session to your schedule because you are participating in another session at this time. Schedule Conflict. An error occurred while processing this request.. Adding this item creates a conflict with another session on your schedule. Remove from Waiting List Add to waiting list Removing this will remove you from the waiting list for all session times for this session Adding this will add you to the waiting list for all session times for this session. You have nothing scheduled Tap below to see a list of sessions and activities that are available to add to your schedule this week Choose from the list of sessions to the left to add to your schedule for the day Add a Session

Registration Complete!

So we can prepare the best experience for you,
What can we do to help you?
Click here to skip
All Tab
The All tab
Attendee Tab
The Attendee Tab
Tailored Experiences
The Tailored Experiences Tab
Session Tab
The Session Tab
Speaker Tab
The Speaker Tab
Exhibitor Tab
The Exhibitor Tab
Files Tab
The Files Tab
Search Box
The search box
Dashboard Link
My Schedule
My Schedule Link
Recommendations Link
Interests Link
Meetings Link
Agenda Link
My Account
My Account Link
Catalog tips
Get More Results