Ngati mukuganiza zanu makina oyimba.yml ndi guluu wa zomangamanga chabe, ganiziraninso. Mafayilo awa nthawi zambiri amakhala malo osungira zinsinsi, zizindikiritso zokhazikika, ma API token, ndi zosintha zachilengedwe zomwe zimalowa mu ulamuliro wa mtundu. Zikagwirizanitsidwa ndi GitHub kapena repo iliyonse, zinsinsi zimenezo zimatha kukhala kwamuyaya mu commit mbiri.
Opanga mapulogalamu nthawi zambiri amachita zinthu makina oyimba.yml ngati fayilo yosakhudzidwa, osaganizira momwe ingagwirire ntchito ngati fayilo vekitala yowukiraKutuluka pang'ono apa kungatanthauze mwayi wopeza mautumiki achinsinsi, ma API amkati, kapena zomangamanga zonse. Izi ndi mitundu ya zinsinsi zolembedwa ndi docker zomwe owukira amasaka.
Njira Zofala Zomwe Zinsinsi Zolembera Docker Zimalowa Docker-Compose.yml
Nazi zolakwa zina zomwe akatswiri opanga mapulogalamu amachita tsiku ndi tsiku:
1. Zikalata zolembera mwachindunji
services: db: image: postgres environment: POSTGRES_USER: admin POSTGRES_PASSWORD: supersecret123Mawu achinsinsi mu izi makina oyimba.yml tsopano ndi gawo la mbiri yanu ya git. Choyipa kwambiri, ingagwiritsidwenso ntchito popanga. Iyi ndi imodzi mwa njira zolunjika kwambiri za zinsinsi zolembera ma docker kukhudzana.
2. Kulemba ndi kuyika ma shared configs kapena StackOverflow
Makhalidwe oipa amafalikira mofulumira. Kukopera zitsanzo zosatetezeka ndikugwiritsa ntchito momwe zilili kumabweretsa zinsinsi zomwe zimaonekera m'malo onse, kuyambira pa dev mpaka prod.
3. Kukwera .fm mafayilo mwachindunji popanda kuwateteza
fayilo_ya env: – .env
.fm Mafayilo nthawi zambiri amakhala ndi makiyi a API kapena ziyeneretso, ndipo opanga mapulogalamu amaiwala kuwawonjezera pa @alirezatalischioriginalIzi zimapangitsa kuti zinsinsi ziwonekere ngati repo ndi ya anthu onse kapena yogawidwa. Izi mwachisawawa zimakhala zinsinsi za Docker Compose zikatchulidwa.
Zotsatira Zenizeni za Zinsinsi za Docker-Compose mu CI/CD
In CI/CD pipelines, zinsinsi zobisika kuchokera ku makina oyimba.yml mungathe:
- Yambitsani zomanga zosaloledwa
- Kufikira kokha ku ntchito zowonetsera kapena kupanga
- Lowetsani ma code oipa mu mapulogalamu ogwiritsidwa ntchito
- Tsegulani zitseko zakumbuyo kudzera mu kayendedwe ka mbali
Owukira akufufuza pagulu Malo osungiramo zinthu a GitHub Yang'anani makina oyimba.yml mafayilo pogwiritsa ntchito GitHub dorks kapena zida zodziyimira pawokha. Akangopeza zinsinsi, amatha kutsanzira othamanga a CI, kugwiritsa ntchito molakwika ma cloud credits, kapena choipa kwambiri, kuyika ransomware mu unyolo woperekera. Zinsinsi izi za Docker Compose zimayimira nkhani yoopsa komanso nthawi zambiri kufooka kosayembekezereka.
Kuzindikira ndi Kusamalira Zinsinsi Motetezeka
Gwiritsani ntchito zida zojambulira:
- Nkhumba ya Truffle, Gitleakskapena Xygeni imatha kuzindikira zinsinsi mu repo yanu, kuphatikizapo yakale commits.
- Yendetsani ma scan mu CI yanu pipeline kuletsa ma PR okhala ndi zinsinsi.
Sinthani zinsinsi mwachindunji ndi zosintha zachilengedwe:
ntchito:
Pulogalamu:
chithunzi: myapp
chilengedwe:
DB_PASSWORD: ${DB_PASSWORD}
Gwiritsani ntchito woyang'anira zinsinsi kuti mulowetse DB_PASSWORD nthawi yogwira ntchito, kusunga kuti musalowe m'mavuto anu makina oyimba.ymlNjira iyi imathandiza kuchepetsa zoopsa za Docker Compose.
Phatikizani oyang'anira achinsinsi:
Zida monga Vault, AWS Secrets Manager, kapena Doppler zimasunga zinsinsi mosamala ndipo zimapereka mfundo zoyendetsera zinthu.
Njira Zabwino Kwambiri Zopangira Ma DevSecOps Kuti Apewe Kuwonetsa Zinsinsi za Docker-Compose
- Zinsinsi zosasinthika in makina oyimba.yml.
- kuwonjezera .fm ku @alirezatalischioriginal, nthawi zonse.
- ntchito zida zofufuzira zachinsinsi mu dev yanu yakomweko ndi CI/CD pipeline.
- Unikani mafayilo olembedwa monga gawo la mndandanda wanu wa chitetezo cha PR.
- Sinthani mobisa kuti musinthe, makamaka pa zizindikiro ndi ziyeneretso zautumiki.
- Zitsanzo za zolemba za chipani chachitatu musanazikopere mu codebase yanu.
- Chitani deta iliyonse yachinsinsi m'mafayilo awa ngati zinsinsi za Docker Compose, ndipo muziyang'anire moyenera.
Anu Docker-Compose.yml Kungakhale Malo Anu Aakulu Kwambiri Opanda Chitetezo
Anu makina oyimba.yml sikuti ndi zongokonzera chabe; ndi gawo la malo owukira a pulogalamu yanu. Chitani ngati code. Zinsinsi zobisika mkati mwa mafayilo awa zimayambitsa zoopsa zenizeni, makamaka zikalumikizidwa ku kuwongolera kwa mtundu ndikuziphatikiza mu CI/CD.
Zida monga Xygeni zimathandiza kuzindikira ndikuwongolera zinsinsi za Docker Compose m'ma codebase ndi pipelines, kuchepetsa chiopsezo cha ziwopsezo za unyolo wogulitsa. Phatikizani izi mu ntchito yanu kuti muwone bwino ndikuwongolera zomwe mumachita makina oyimba.yml zitha kuwonetsa.
