-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathdocker_interactive.html
More file actions
1199 lines (1126 loc) · 74.1 KB
/
Copy pathdocker_interactive.html
File metadata and controls
1199 lines (1126 loc) · 74.1 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<!DOCTYPE html>
<html lang="fr">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Docker — Guide interactif</title>
<style>
:root {
--bg: #f8fafc; --card: #ffffff; --border: #e2e8f0; --text: #1e293b; --muted: #64748b;
--acc: #2496ed; --acc2: #1d76c4; --blue600: #2563eb;
--green: #16a34a; --red: #dc2626; --orange: #ea580c; --purple: #7c3aed;
--grad1: #0b3a5c; --grad2: #12557f;
}
@media (prefers-color-scheme: dark) {
:root {
--bg: #0d0d0d; --card: #1a1a1a; --border: #2a2a2a; --text: #e2e8f0; --muted: #94a3b8;
}
}
* { box-sizing: border-box; margin: 0; padding: 0; }
body { font-family: system-ui, -apple-system, sans-serif; background: var(--bg); color: var(--text); line-height: 1.6; }
.header { background: linear-gradient(135deg, var(--grad1), var(--grad2)); color: white; padding: 2rem; text-align: center; }
.header h1 { font-size: 2rem; font-weight: 700; margin-bottom: .5rem; }
.header p { color: #7dd3fc; font-size: 1rem; }
.badge { display: inline-block; background: var(--acc); color: white; padding: .2rem .7rem; border-radius: 20px; font-size: .8rem; font-weight: 600; margin-top: .5rem; }
nav { display: flex; flex-wrap: wrap; gap: .5rem; justify-content: center; padding: 1.5rem 1rem; background: var(--card); border-bottom: 1px solid var(--border); position: sticky; top: 0; z-index: 100; }
.tab-btn { padding: .5rem 1.1rem; border-radius: 999px; border: none; background: var(--border); color: var(--muted); cursor: pointer; font-size: .9rem; font-weight: 500; transition: all .2s; white-space: nowrap; }
.tab-btn:hover { background: var(--border); color: var(--blue600); }
.tab-btn.active { background: var(--blue600); color: white; }
.content { max-width: 1100px; margin: 0 auto; padding: 2rem 1rem; }
.tab-panel { display: none; }
.tab-panel.active { display: block; }
.section-title { font-size: 1.4rem; font-weight: 700; color: var(--text); margin-bottom: 1rem; display: flex; align-items: center; gap: .5rem; }
.section-title::before { content: ''; display: inline-block; width: 4px; height: 1.4rem; background: var(--blue600); border-radius: 2px; }
.card { background: var(--card); border: 1px solid var(--border); border-radius: 12px; padding: 1.5rem; margin-bottom: 1.5rem; }
.card h3 { font-size: 1.1rem; font-weight: 700; margin-bottom: .8rem; color: var(--text); }
.grid2 { display: grid; grid-template-columns: 1fr 1fr; gap: 1.5rem; }
.grid3 { display: grid; grid-template-columns: repeat(3, 1fr); gap: 1rem; }
@media (max-width: 700px) { .grid2, .grid3 { grid-template-columns: 1fr; } }
.info-box { background: var(--border); border-radius: 8px; padding: 1rem; margin-bottom: 1rem; }
.info-box.blue { border-left: 4px solid var(--blue600); }
.info-box.teal { border-left: 4px solid #0d9488; }
.info-box.amber { border-left: 4px solid #d97706; }
.info-box.purple { border-left: 4px solid var(--purple); }
.info-box.coral { border-left: 4px solid var(--red); }
.info-box.green { border-left: 4px solid var(--green); }
.info-box.orange { border-left: 4px solid var(--orange); }
.info-box.cyan { border-left: 4px solid #0891b2; }
.info-box .label { font-weight: 700; font-size: .85rem; text-transform: uppercase; letter-spacing: .05em; margin-bottom: .4rem; }
.info-box.blue .label { color: var(--blue600); }
.info-box.teal .label { color: #0d9488; }
.info-box.amber .label { color: #d97706; }
.info-box.purple .label { color: var(--purple); }
.info-box.coral .label { color: var(--red); }
.info-box.green .label { color: var(--green); }
.info-box.orange .label { color: var(--orange); }
.info-box.cyan .label { color: #0891b2; }
.tag { display: inline-block; padding: .2rem .6rem; border-radius: 4px; font-size: .8rem; font-weight: 600; margin: .15rem; }
.tag-blue { background: var(--border); color: var(--blue600); }
.tag-teal { background: #f0fdfa; color: #0d9488; }
.tag-amber { background: #fffbeb; color: #d97706; }
.tag-purple { background: #f5f3ff; color: var(--purple); }
.tag-green { background: #f0fdf4; color: var(--green); }
.tag-coral { background: #fff1f2; color: var(--red); }
@media (prefers-color-scheme: dark) {
.tag-blue { background: #1e3a5f; } .tag-teal { background: #042f2e; } .tag-amber { background: #451a03; }
.tag-purple { background: #2e1065; } .tag-green { background: #052e16; } .tag-coral { background: #4c0519; }
}
/* Architecture Diagram */
.arch-diagram { display: flex; flex-direction: column; align-items: center; gap: 0; }
.arch-layer { display: flex; align-items: center; gap: 1rem; width: 100%; max-width: 700px; margin: .3rem 0; }
.arch-label { width: 120px; text-align: right; font-size: .8rem; color: var(--muted); font-weight: 600; flex-shrink: 0; }
.arch-box { flex: 1; border-radius: 8px; padding: .6rem 1rem; text-align: center; font-size: .85rem; font-weight: 600; cursor: pointer; transition: transform .15s; }
.arch-box:hover { transform: translateY(-2px); }
.arch-arrow { width: 100%; max-width: 700px; text-align: center; color: var(--muted); font-size: 1.2rem; margin: 0; }
/* Layer diagram */
.layer-stack { max-width: 500px; margin: 0 auto; }
.layer-item { display: flex; align-items: stretch; margin-bottom: 2px; border-radius: 6px; overflow: hidden; cursor: pointer; transition: all .2s; }
.layer-item:hover { transform: translateX(4px); }
.layer-num { width: 36px; display: flex; align-items: center; justify-content: center; font-weight: 700; font-size: .9rem; color: white; flex-shrink: 0; }
.layer-content { flex: 1; padding: .5rem .8rem; background: var(--border); }
.layer-name { font-weight: 600; font-size: .9rem; }
.layer-desc { font-size: .78rem; color: var(--muted); }
/* Steps */
.steps { display: flex; flex-direction: column; gap: .5rem; }
.step { display: flex; gap: 1rem; align-items: flex-start; padding: .8rem; background: var(--border); border-radius: 8px; }
.step-num { width: 28px; height: 28px; border-radius: 50%; display: flex; align-items: center; justify-content: center; font-weight: 700; font-size: .85rem; flex-shrink: 0; color: white; background: var(--blue600); }
.step-body { flex: 1; }
.step-title { font-weight: 600; font-size: .9rem; }
.step-desc { font-size: .82rem; color: var(--muted); margin-top: .2rem; }
/* Network diagram */
.net-diagram { display: grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap: 1rem; }
.net-node { background: var(--border); border: 2px solid var(--border); border-radius: 10px; padding: 1rem; text-align: center; cursor: pointer; transition: all .2s; }
.net-node:hover { border-color: var(--blue600); transform: translateY(-2px); box-shadow: 0 4px 12px rgba(0,0,0,.1); }
.net-node.active { border-color: var(--blue600); background: var(--border); }
.net-node-icon { font-size: 2rem; margin-bottom: .4rem; }
.net-node-name { font-weight: 700; font-size: .9rem; }
.net-node-desc { font-size: .78rem; color: var(--muted); margin-top: .2rem; }
/* Detail panel */
.detail-panel { background: var(--border); border-radius: 10px; padding: 1.2rem; margin-top: 1rem; border: 1px solid var(--border); display: none; }
.detail-panel.visible { display: block; }
/* Quiz */
.quiz-q { background: var(--card); border: 1px solid var(--border); border-radius: 10px; padding: 1.2rem; margin-bottom: 1rem; }
.quiz-q .question { font-weight: 600; margin-bottom: .8rem; }
.quiz-answers { display: flex; flex-direction: column; gap: .4rem; }
.quiz-ans { padding: .5rem .9rem; border: 1.5px solid var(--border); border-radius: 6px; cursor: pointer; font-size: .9rem; transition: all .2s; }
.quiz-ans:hover { border-color: var(--blue600); background: var(--border); }
.quiz-ans.correct { background: #dcfce7; border-color: var(--green); color: #166534; }
.quiz-ans.wrong { background: #fee2e2; border-color: var(--red); color: #991b1b; }
@media (prefers-color-scheme: dark) {
.quiz-ans.correct { background: #052e16; color: #86efac; }
.quiz-ans.wrong { background: #4c0519; color: #fca5a5; }
}
.quiz-feedback { font-size: .85rem; margin-top: .5rem; padding: .5rem .8rem; border-radius: 6px; display: none; }
.quiz-feedback.show { display: block; }
.quiz-feedback.ok { background: #dcfce7; color: #166534; }
.quiz-feedback.ko { background: #fee2e2; color: #991b1b; }
@media (prefers-color-scheme: dark) {
.quiz-feedback.ok { background: #052e16; color: #86efac; }
.quiz-feedback.ko { background: #4c0519; color: #fca5a5; }
}
#quiz-result { display: none; background: var(--border); border: 2px solid var(--blue600); border-radius: 10px; padding: 1.5rem; text-align: center; margin-top: 1rem; }
.quiz-btn { background: var(--blue600); color: white; border: none; padding: .6rem 1.4rem; border-radius: 8px; cursor: pointer; font-size: .95rem; font-weight: 600; margin-top: 1rem; }
/* Dockerfile viewer */
.dockerfile { background: #1e1e2e; color: #cdd6f4; border-radius: 10px; padding: 1.2rem; font-family: 'Courier New', monospace; font-size: .85rem; line-height: 1.7; overflow-x: auto; }
.df-cmd { color: #89b4fa; font-weight: 700; }
.df-comment { color: #6c7086; font-style: italic; }
.df-arg { color: #a6e3a1; }
.df-str { color: #f38ba8; }
/* Compose viewer */
.yaml-block { background: #1e1e2e; color: #cdd6f4; border-radius: 10px; padding: 1.2rem; font-family: 'Courier New', monospace; font-size: .82rem; line-height: 1.8; overflow-x: auto; }
.yaml-key { color: #89b4fa; }
.yaml-val { color: #a6e3a1; }
.yaml-comment { color: #6c7086; font-style: italic; }
.yaml-anchor { color: #f9e2af; }
/* Swarm diagram */
.swarm-diagram { display: flex; gap: 1.5rem; flex-wrap: wrap; justify-content: center; }
.swarm-node { border: 2px solid var(--border); border-radius: 10px; padding: 1rem; min-width: 160px; text-align: center; }
.swarm-node.manager { border-color: var(--blue600); background: var(--border); }
.swarm-node.worker { border-color: #0d9488; background: #f0fdfa; }
@media (prefers-color-scheme: dark) {
.swarm-node.manager { background: #1e3a5f; }
.swarm-node.worker { background: #042f2e; }
}
.swarm-role { font-size: .7rem; font-weight: 700; text-transform: uppercase; letter-spacing: .05em; margin-bottom: .3rem; }
.swarm-role.mgr { color: var(--blue600); }
.swarm-role.wkr { color: #0d9488; }
.swarm-name { font-weight: 700; font-size: .95rem; }
.swarm-tasks { font-size: .78rem; color: var(--muted); margin-top: .3rem; }
.connector { display: flex; align-items: center; color: var(--muted); font-size: 1.2rem; }
/* Command reference */
.cmd-table { width: 100%; border-collapse: collapse; font-size: .88rem; }
.cmd-table th { background: var(--border); padding: .6rem .8rem; text-align: left; font-weight: 700; border-bottom: 2px solid var(--border); }
.cmd-table td { padding: .5rem .8rem; border-bottom: 1px solid var(--border); }
.cmd-table tr:hover td { background: var(--border); }
.cmd-code { font-family: monospace; background: var(--border); padding: .2rem .4rem; border-radius: 3px; font-size: .82rem; }
</style>
</head>
<body>
<div class="header">
<h1>🐳 Docker — Guide interactif</h1>
<p>Architecture, images, conteneurs, réseau, volumes, Compose et Swarm</p>
<span class="badge">Docker · Docker Compose · Docker Swarm</span>
</div>
<nav id="main-nav">
<button class="tab-btn active" onclick="showTab('overview')">Vue d'ensemble</button>
<button class="tab-btn" onclick="showTab('images')">Images & Layers</button>
<button class="tab-btn" onclick="showTab('containers')">Conteneurs</button>
<button class="tab-btn" onclick="showTab('network')">Réseau</button>
<button class="tab-btn" onclick="showTab('volumes')">Volumes</button>
<button class="tab-btn" onclick="showTab('compose')">Docker Compose</button>
<button class="tab-btn" onclick="showTab('swarm')">Docker Swarm</button>
<button class="tab-btn" onclick="showTab('quiz')">Quiz</button>
</nav>
<div class="content">
<!-- ===== VUE D'ENSEMBLE ===== -->
<div id="tab-overview" class="tab-panel active">
<div class="section-title">Architecture Docker</div>
<div class="card">
<h3>Qu'est-ce que Docker ?</h3>
<p style="color:var(--muted);font-size:.93rem;margin-bottom:1rem;">
Docker est une plateforme de <strong>conteneurisation</strong> qui encapsule une application et toutes ses dépendances dans une unité isolée appelée <em>conteneur</em>. Contrairement aux machines virtuelles, les conteneurs partagent le noyau Linux de l'hôte — ils sont donc légers, rapides à démarrer et reproductibles.
</p>
<div class="grid2">
<div>
<div class="info-box blue"><div class="label">VM vs Conteneur</div>
<table style="width:100%;font-size:.82rem;border-collapse:collapse;">
<tr><th style="text-align:left;padding:.2rem .4rem;color:var(--muted)">Critère</th><th style="padding:.2rem .4rem;color:var(--muted)">VM</th><th style="padding:.2rem .4rem;color:var(--muted)">Conteneur</th></tr>
<tr><td style="padding:.2rem .4rem">OS complet</td><td style="padding:.2rem .4rem;text-align:center">✅</td><td style="padding:.2rem .4rem;text-align:center">❌</td></tr>
<tr><td style="padding:.2rem .4rem">Démarrage</td><td style="padding:.2rem .4rem;text-align:center">~minutes</td><td style="padding:.2rem .4rem;text-align:center">~ms</td></tr>
<tr><td style="padding:.2rem .4rem">Taille</td><td style="padding:.2rem .4rem;text-align:center">Giga-octets</td><td style="padding:.2rem .4rem;text-align:center">Méga-octets</td></tr>
<tr><td style="padding:.2rem .4rem">Isolation</td><td style="padding:.2rem .4rem;text-align:center">Forte</td><td style="padding:.2rem .4rem;text-align:center">Moyenne</td></tr>
<tr><td style="padding:.2rem .4rem">Portabilité</td><td style="padding:.2rem .4rem;text-align:center">Limitée</td><td style="padding:.2rem .4rem;text-align:center">Très haute</td></tr>
</table>
</div>
</div>
<div>
<div class="info-box teal"><div class="label">Concepts clés</div>
<ul style="font-size:.88rem;padding-left:1.2rem;color:var(--muted)">
<li><strong>Image</strong> — modèle immuable (read-only), template du conteneur</li>
<li><strong>Conteneur</strong> — instance en cours d'exécution d'une image</li>
<li><strong>Registry</strong> — dépôt d'images (Docker Hub, GHCR, ECR…)</li>
<li><strong>Dockerfile</strong> — recette textuelle pour construire une image</li>
<li><strong>Volume</strong> — stockage persistant découplé du conteneur</li>
<li><strong>Réseau</strong> — communication inter-conteneurs et vers l'extérieur</li>
</ul>
</div>
</div>
</div>
</div>
<div class="card">
<h3>Architecture interne Docker</h3>
<div class="arch-diagram">
<div class="arch-layer">
<div class="arch-label">CLI / API</div>
<div class="arch-box" style="background:#dbeafe;color:#1e40af;" onclick="showDetail('d-cli')">
docker CLI · REST API · Docker Desktop
</div>
</div>
<div class="arch-arrow">▼</div>
<div class="arch-layer">
<div class="arch-label">Daemon</div>
<div class="arch-box" style="background:#ede9fe;color:#5b21b6;" onclick="showDetail('d-daemon')">
dockerd — Docker Daemon
</div>
</div>
<div class="arch-arrow">▼</div>
<div class="arch-layer">
<div class="arch-label">Runtime</div>
<div class="arch-box" style="background:#d1fae5;color:#065f46;" onclick="showDetail('d-containerd')">
containerd → runc (OCI runtime)
</div>
</div>
<div class="arch-arrow">▼</div>
<div class="arch-layer">
<div class="arch-label">OS</div>
<div class="arch-box" style="background:#fef3c7;color:#92400e;" onclick="showDetail('d-kernel')">
Linux Kernel — Namespaces · cgroups · UnionFS
</div>
</div>
</div>
<div id="detail-d-cli" class="detail-panel">
<strong>docker CLI / API</strong> — Le client Docker envoie des commandes au daemon via une API REST (socket Unix <code>/var/run/docker.sock</code> ou TCP). Docker Desktop ajoute une interface graphique et un VM Linux sur Windows/macOS.
</div>
<div id="detail-d-daemon" class="detail-panel">
<strong>dockerd</strong> — Le daemon orchestre tout : build, pull/push d'images, création/démarrage/arrêt de conteneurs, gestion des réseaux et volumes. Il délègue l'exécution à <em>containerd</em>.
</div>
<div id="detail-d-containerd" class="detail-panel">
<strong>containerd</strong> est un runtime de niveau supérieur (gestion du cycle de vie des conteneurs, stockage, réseau). Il appelle <strong>runc</strong>, le runtime bas niveau conforme OCI, qui crée effectivement les namespaces et cgroups Linux.
</div>
<div id="detail-d-kernel" class="detail-panel">
Le kernel Linux fournit les primitives d'isolation : <strong>Namespaces</strong> (pid, net, mnt, uts, ipc, user), <strong>cgroups</strong> (limitation CPU/RAM/IO), et <strong>UnionFS/OverlayFS</strong> pour les layers d'images.
</div>
</div>
<div class="card">
<h3>Cycle de vie d'un conteneur</h3>
<div class="steps">
<div class="step"><div class="step-num">1</div><div class="step-body"><div class="step-title">docker pull / build</div><div class="step-desc">Récupérer ou construire une image depuis un Dockerfile. L'image est stockée localement.</div></div></div>
<div class="step"><div class="step-num">2</div><div class="step-body"><div class="step-title">docker create</div><div class="step-desc">Crée un conteneur à partir de l'image (couche read-write ajoutée) sans le démarrer.</div></div></div>
<div class="step"><div class="step-num">3</div><div class="step-body"><div class="step-title">docker start / run</div><div class="step-desc"><code>docker run</code> = create + start. Le processus principal (PID 1) démarre dans les namespaces isolés.</div></div></div>
<div class="step"><div class="step-num">4</div><div class="step-body"><div class="step-title">Running</div><div class="step-desc">Le conteneur tourne. On peut interagir (<code>exec</code>), voir les logs (<code>logs</code>), inspecter (<code>inspect</code>).</div></div></div>
<div class="step"><div class="step-num">5</div><div class="step-body"><div class="step-title">docker stop / kill</div><div class="step-desc"><code>stop</code> envoie SIGTERM puis SIGKILL après timeout. <code>kill</code> envoie directement SIGKILL.</div></div></div>
<div class="step"><div class="step-num">6</div><div class="step-body"><div class="step-title">docker rm / prune</div><div class="step-desc">Supprime le conteneur arrêté (la couche RW est effacée). L'image reste disponible.</div></div></div>
</div>
</div>
<div class="card">
<h3>Commandes essentielles</h3>
<table class="cmd-table">
<tr><th>Commande</th><th>Description</th></tr>
<tr><td><span class="cmd-code">docker run -d -p 80:80 nginx</span></td><td>Lancer nginx en arrière-plan, port 80 mappé</td></tr>
<tr><td><span class="cmd-code">docker ps [-a]</span></td><td>Lister les conteneurs actifs (ou tous)</td></tr>
<tr><td><span class="cmd-code">docker logs -f <id></span></td><td>Suivre les logs en temps réel</td></tr>
<tr><td><span class="cmd-code">docker exec -it <id> bash</span></td><td>Shell interactif dans un conteneur</td></tr>
<tr><td><span class="cmd-code">docker inspect <id></span></td><td>Détails JSON complets du conteneur</td></tr>
<tr><td><span class="cmd-code">docker stats</span></td><td>Utilisation CPU/RAM/IO en temps réel</td></tr>
<tr><td><span class="cmd-code">docker system prune -a</span></td><td>Nettoyer images, conteneurs, volumes orphelins</td></tr>
</table>
</div>
</div>
<!-- ===== IMAGES & LAYERS ===== -->
<div id="tab-images" class="tab-panel">
<div class="section-title">Images & système de layers</div>
<div class="card">
<h3>Système de layers (OverlayFS)</h3>
<p style="color:var(--muted);font-size:.9rem;margin-bottom:1rem;">
Une image Docker est une pile de <strong>layers immuables</strong> (read-only). Chaque instruction Dockerfile crée un nouveau layer. Lors du lancement d'un conteneur, une couche read-write temporaire est ajoutée par-dessus (Copy-on-Write).
</p>
<div class="grid2">
<div>
<div class="layer-stack">
<div class="layer-item" onclick="showLayerDetail(0)">
<div class="layer-num" style="background:#e11d48;">RW</div>
<div class="layer-content"><div class="layer-name">Container layer (R/W)</div><div class="layer-desc">Modifications runtime, effacées à la suppression</div></div>
</div>
<div style="text-align:center;color:var(--muted);margin:2px 0;">▲ Ajoutée au run</div>
<div class="layer-item" onclick="showLayerDetail(1)">
<div class="layer-num" style="background:#2563eb;">4</div>
<div class="layer-content"><div class="layer-name">COPY app/ /app/</div><div class="layer-desc">Fichiers applicatifs copiés (hash: a3f8...)</div></div>
</div>
<div class="layer-item" onclick="showLayerDetail(2)">
<div class="layer-num" style="background:#2563eb;">3</div>
<div class="layer-content"><div class="layer-name">RUN pip install -r requirements.txt</div><div class="layer-desc">Dépendances Python installées (hash: 7c2d...)</div></div>
</div>
<div class="layer-item" onclick="showLayerDetail(3)">
<div class="layer-num" style="background:#2563eb;">2</div>
<div class="layer-content"><div class="layer-name">RUN apt-get update && apt-get install</div><div class="layer-desc">Paquets système (hash: 1b5e...)</div></div>
</div>
<div class="layer-item" onclick="showLayerDetail(4)">
<div class="layer-num" style="background:#0d9488;">1</div>
<div class="layer-content"><div class="layer-name">FROM python:3.11-slim</div><div class="layer-desc">Image de base (partagée entre toutes les images python)</div></div>
</div>
</div>
</div>
<div id="layer-detail-box" class="info-box blue" style="display:block;">
<div class="label">Cliquez sur une couche</div>
<p style="font-size:.88rem;color:var(--muted);">Les layers sont identifiés par un hash SHA256. Deux images partageant les mêmes layers ne les stockent qu'une seule fois → gain d'espace massif.</p>
</div>
</div>
</div>
<div class="card">
<h3>Dockerfile — bonnes pratiques</h3>
<div class="grid2">
<div>
<p style="font-size:.88rem;color:var(--muted);margin-bottom:.8rem;">Exemple : application Python optimisée avec multi-stage build</p>
<div class="dockerfile">
<span class="df-comment"># ── Stage 1 : build ──────────────</span>
<span class="df-cmd">FROM</span> <span class="df-arg">python:3.11-slim AS builder</span>
<span class="df-cmd">WORKDIR</span> <span class="df-arg">/build</span>
<span class="df-cmd">COPY</span> <span class="df-arg">requirements.txt .</span>
<span class="df-cmd">RUN</span> <span class="df-str">pip install --prefix=/install -r requirements.txt</span>
<span class="df-comment"># ── Stage 2 : runtime ────────────</span>
<span class="df-cmd">FROM</span> <span class="df-arg">python:3.11-slim</span>
<span class="df-cmd">WORKDIR</span> <span class="df-arg">/app</span>
<span class="df-comment"># Copier seulement ce dont on a besoin</span>
<span class="df-cmd">COPY</span> <span class="df-arg">--from=builder /install /usr/local</span>
<span class="df-cmd">COPY</span> <span class="df-arg">app/ .</span>
<span class="df-comment"># Utilisateur non-root (sécurité)</span>
<span class="df-cmd">RUN</span> <span class="df-str">adduser --disabled-password appuser</span>
<span class="df-cmd">USER</span> <span class="df-arg">appuser</span>
<span class="df-cmd">EXPOSE</span> <span class="df-arg">8000</span>
<span class="df-comment"># Préférer ENTRYPOINT + CMD</span>
<span class="df-cmd">ENTRYPOINT</span> <span class="df-arg">["python", "-m", "uvicorn"]</span>
<span class="df-cmd">CMD</span> <span class="df-arg">["main:app", "--host", "0.0.0.0"]</span>
</div>
</div>
<div>
<div class="info-box amber"><div class="label">Instructions Dockerfile</div>
<table style="width:100%;font-size:.82rem;border-collapse:collapse;">
<tr><td style="padding:.25rem .4rem"><strong>FROM</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Image de base (doit être la 1ère instruction)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>WORKDIR</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Répertoire de travail courant</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>COPY / ADD</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Copier fichiers (ADD supporte tar et URL)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>RUN</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Exécuter une commande (crée un layer)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>ENV</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Variables d'environnement</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>ARG</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Variable de build (pas visible au runtime)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>EXPOSE</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Port documenté (non publié automatiquement)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>VOLUME</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Déclare un point de montage</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>USER</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">UID/GID du processus</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>ENTRYPOINT</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Commande principale (non écrasable)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>CMD</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Arguments par défaut (écrasables au run)</td></tr>
<tr><td style="padding:.25rem .4rem"><strong>HEALTHCHECK</strong></td><td style="padding:.25rem .4rem;color:var(--muted)">Commande de vérification de santé</td></tr>
</table>
</div>
<div class="info-box green" style="margin-top:.8rem;"><div class="label">Bonnes pratiques</div>
<ul style="font-size:.82rem;padding-left:1.1rem;color:var(--muted)">
<li>Regrouper les <strong>RUN</strong> avec <code>&&</code> → moins de layers</li>
<li>Placer COPY des dépendances <strong>avant</strong> le code source (cache)</li>
<li>Utiliser <strong>multi-stage build</strong> pour réduire la taille finale</li>
<li>Ne jamais stocker de <strong>secrets</strong> dans les layers</li>
<li>Épingler les versions des images de base (<code>python:3.11.9</code>)</li>
<li>Utiliser <code>.dockerignore</code> pour exclure node_modules, .git…</li>
</ul>
</div>
</div>
</div>
</div>
<div class="card">
<h3>Gestion des images</h3>
<table class="cmd-table">
<tr><th>Commande</th><th>Description</th></tr>
<tr><td><span class="cmd-code">docker build -t monapp:1.0 .</span></td><td>Construire une image depuis le Dockerfile courant</td></tr>
<tr><td><span class="cmd-code">docker images</span></td><td>Lister les images locales</td></tr>
<tr><td><span class="cmd-code">docker pull nginx:alpine</span></td><td>Télécharger une image depuis Docker Hub</td></tr>
<tr><td><span class="cmd-code">docker push monrepo/monapp:1.0</span></td><td>Publier une image sur un registry</td></tr>
<tr><td><span class="cmd-code">docker tag monapp:1.0 monapp:latest</span></td><td>Ajouter un tag à une image</td></tr>
<tr><td><span class="cmd-code">docker image inspect nginx</span></td><td>Détails JSON d'une image (layers, config…)</td></tr>
<tr><td><span class="cmd-code">docker history nginx</span></td><td>Historique des layers d'une image</td></tr>
<tr><td><span class="cmd-code">docker image prune -a</span></td><td>Supprimer les images non utilisées</td></tr>
<tr><td><span class="cmd-code">docker save / load</span></td><td>Exporter/importer une image en tar</td></tr>
</table>
</div>
</div>
<!-- ===== CONTENEURS ===== -->
<div id="tab-containers" class="tab-panel">
<div class="section-title">Conteneurs — isolation et gestion</div>
<div class="card">
<h3>Isolation par namespaces Linux</h3>
<div class="grid3">
<div class="info-box blue"><div class="label">pid</div>Arbre de processus isolé. PID 1 = processus principal du conteneur.</div>
<div class="info-box teal"><div class="label">net</div>Interface réseau virtuelle (veth), pile IP, routes indépendantes.</div>
<div class="info-box purple"><div class="label">mnt</div>Système de fichiers monté indépendamment via OverlayFS.</div>
<div class="info-box amber"><div class="label">uts</div>Hostname et domaine distincts de l'hôte.</div>
<div class="info-box coral"><div class="label">ipc</div>Ressources IPC (sémaphores, files, mémoire partagée) isolées.</div>
<div class="info-box green"><div class="label">user</div>Mappage UID/GID (rootless containers) pour sécurité accrue.</div>
</div>
</div>
<div class="card">
<h3>Contrôle des ressources — cgroups v2</h3>
<div class="grid2">
<div class="info-box amber">
<div class="label">Limites CPU</div>
<div class="dockerfile" style="font-size:.8rem;padding:.8rem;">
<span class="df-cmd">docker run</span> \
<span class="df-arg">--cpus="1.5"</span> \ <span class="df-comment"># max 1,5 vCPU</span>
<span class="df-arg">--cpu-shares=512</span> \ <span class="df-comment"># priorité relative</span>
nginx
</div>
</div>
<div class="info-box purple">
<div class="label">Limites mémoire</div>
<div class="dockerfile" style="font-size:.8rem;padding:.8rem;">
<span class="df-cmd">docker run</span> \
<span class="df-arg">--memory="512m"</span> \ <span class="df-comment"># RAM max</span>
<span class="df-arg">--memory-swap="1g"</span> \ <span class="df-comment"># RAM + swap</span>
<span class="df-arg">--oom-kill-disable</span> \ <span class="df-comment"># désactiver OOM killer</span>
nginx
</div>
</div>
</div>
</div>
<div class="card">
<h3>Politiques de redémarrage</h3>
<div class="grid2">
<div>
<table class="cmd-table">
<tr><th>Politique</th><th>Comportement</th></tr>
<tr><td><span class="cmd-code">no</span></td><td>Ne redémarre jamais (défaut)</td></tr>
<tr><td><span class="cmd-code">always</span></td><td>Redémarre toujours (y compris au boot)</td></tr>
<tr><td><span class="cmd-code">unless-stopped</span></td><td>Redémarre sauf si arrêté manuellement</td></tr>
<tr><td><span class="cmd-code">on-failure[:max]</span></td><td>Redémarre sur code de sortie non-zéro</td></tr>
</table>
</div>
<div>
<div class="info-box teal"><div class="label">Health check</div>
<div class="dockerfile" style="font-size:.8rem;padding:.6rem;">
<span class="df-cmd">HEALTHCHECK</span> \
<span class="df-arg">--interval=30s</span> \
<span class="df-arg">--timeout=5s</span> \
<span class="df-arg">--retries=3</span> \
<span class="df-str">CMD curl -f http://localhost/ || exit 1</span>
</div>
<p style="font-size:.8rem;color:var(--muted);margin-top:.5rem;">États : <strong>starting</strong> → <strong>healthy</strong> / <strong>unhealthy</strong></p>
</div>
</div>
</div>
</div>
<div class="card">
<h3>Commandes avancées</h3>
<table class="cmd-table">
<tr><th>Commande</th><th>Description</th></tr>
<tr><td><span class="cmd-code">docker run --name web --rm nginx</span></td><td>Conteneur nommé, auto-supprimé à l'arrêt</td></tr>
<tr><td><span class="cmd-code">docker run -e VAR=value</span></td><td>Passer des variables d'environnement</td></tr>
<tr><td><span class="cmd-code">docker run --env-file .env</span></td><td>Charger les variables depuis un fichier</td></tr>
<tr><td><span class="cmd-code">docker cp src/ container:/dest/</span></td><td>Copier des fichiers vers/depuis un conteneur</td></tr>
<tr><td><span class="cmd-code">docker diff <id></span></td><td>Voir les fichiers modifiés dans la couche RW</td></tr>
<tr><td><span class="cmd-code">docker commit <id> monimage:tag</span></td><td>Créer une image depuis un conteneur modifié</td></tr>
<tr><td><span class="cmd-code">docker pause / unpause</span></td><td>Geler/reprendre les processus (SIGSTOP/CONT)</td></tr>
<tr><td><span class="cmd-code">docker top <id></span></td><td>Processus en cours dans le conteneur</td></tr>
<tr><td><span class="cmd-code">docker update --memory 1g <id></span></td><td>Modifier les limites à chaud</td></tr>
</table>
</div>
</div>
<!-- ===== RÉSEAU ===== -->
<div id="tab-network" class="tab-panel">
<div class="section-title">Réseau Docker</div>
<div class="card">
<h3>Drivers réseau — cliquez pour les détails</h3>
<div class="net-diagram" id="net-nodes">
<div class="net-node" onclick="selectNet('bridge')">
<div class="net-node-icon">🌉</div>
<div class="net-node-name">bridge</div>
<div class="net-node-desc">Réseau par défaut</div>
</div>
<div class="net-node" onclick="selectNet('host')">
<div class="net-node-icon">🖥️</div>
<div class="net-node-name">host</div>
<div class="net-node-desc">Partage la pile hôte</div>
</div>
<div class="net-node" onclick="selectNet('overlay')">
<div class="net-node-icon">🌐</div>
<div class="net-node-name">overlay</div>
<div class="net-node-desc">Multi-hôtes (Swarm)</div>
</div>
<div class="net-node" onclick="selectNet('macvlan')">
<div class="net-node-icon">📡</div>
<div class="net-node-name">macvlan</div>
<div class="net-node-desc">MAC dédié sur LAN</div>
</div>
<div class="net-node" onclick="selectNet('ipvlan')">
<div class="net-node-icon">📶</div>
<div class="net-node-name">ipvlan</div>
<div class="net-node-desc">IP sur interface hôte</div>
</div>
<div class="net-node" onclick="selectNet('none')">
<div class="net-node-icon">🚫</div>
<div class="net-node-name">none</div>
<div class="net-node-desc">Aucun réseau</div>
</div>
</div>
<div id="net-detail" class="detail-panel"></div>
</div>
<div class="card">
<h3>Bridge réseau — comment ça marche</h3>
<div class="grid2">
<div>
<div class="info-box blue"><div class="label">Réseau bridge par défaut (docker0)</div>
<ul style="font-size:.85rem;padding-left:1.1rem;color:var(--muted)">
<li>Sous-réseau : <strong>172.17.0.0/16</strong> par défaut</li>
<li>Chaque conteneur reçoit une paire <strong>veth</strong></li>
<li>Communication par IP uniquement (pas de DNS)</li>
<li>Port mapping via <code>-p hôte:conteneur</code> (iptables NAT)</li>
</ul>
</div>
<div class="info-box teal" style="margin-top:.8rem;"><div class="label">Réseau bridge personnalisé</div>
<ul style="font-size:.85rem;padding-left:1.1rem;color:var(--muted)">
<li><strong>DNS intégré</strong> : résolution par nom de conteneur</li>
<li>Isolation : conteneurs non connectés ne se voient pas</li>
<li>Sous-réseau configurable</li>
<li>Recommandé pour toutes les applications</li>
</ul>
</div>
</div>
<div>
<div class="dockerfile" style="font-size:.82rem;">
<span class="df-comment"># Créer un réseau custom</span>
<span class="df-cmd">docker network create</span> \
<span class="df-arg">--driver bridge</span> \
<span class="df-arg">--subnet 192.168.100.0/24</span> \
<span class="df-arg">--gateway 192.168.100.1</span> \
monreseau
<span class="df-comment"># Lancer des conteneurs sur ce réseau</span>
<span class="df-cmd">docker run</span> <span class="df-arg">--network monreseau</span> --name db postgres
<span class="df-cmd">docker run</span> <span class="df-arg">--network monreseau</span> --name app myapp
<span class="df-comment"># app peut résoudre "db" par DNS</span>
<span class="df-comment"># Connecter un conteneur à un 2e réseau</span>
<span class="df-cmd">docker network connect</span> autre_reseau app
</div>
</div>
</div>
</div>
<div class="card">
<h3>Publication de ports</h3>
<div class="grid2">
<div>
<table class="cmd-table">
<tr><th>Syntaxe</th><th>Résultat</th></tr>
<tr><td><span class="cmd-code">-p 80:80</span></td><td>0.0.0.0:80 → conteneur:80</td></tr>
<tr><td><span class="cmd-code">-p 127.0.0.1:80:80</span></td><td>localhost seulement</td></tr>
<tr><td><span class="cmd-code">-p 80:80/udp</span></td><td>UDP uniquement</td></tr>
<tr><td><span class="cmd-code">-p 8080-8090:80-90</span></td><td>Plage de ports</td></tr>
<tr><td><span class="cmd-code">-P</span></td><td>Ports aléatoires (EXPOSE → hôte)</td></tr>
</table>
</div>
<div class="info-box amber">
<div class="label">iptables / nftables</div>
<p style="font-size:.85rem;color:var(--muted);">Docker ajoute automatiquement des règles <strong>DNAT</strong> dans la chaîne PREROUTING et MASQUERADE dans POSTROUTING. Les règles sont gérées par Docker — ne pas les modifier manuellement.</p>
</div>
</div>
</div>
</div>
<!-- ===== VOLUMES ===== -->
<div id="tab-volumes" class="tab-panel">
<div class="section-title">Volumes et persistance des données</div>
<div class="card">
<h3>Types de montage</h3>
<div class="grid3">
<div class="info-box blue" style="cursor:pointer;" onclick="showVolDetail('volume')">
<div class="label">📦 Volume nommé</div>
<p style="font-size:.85rem;color:var(--muted);">Géré par Docker. Stocké dans <code>/var/lib/docker/volumes/</code>. Recommandé pour la prod.</p>
<div style="margin-top:.5rem;"><span class="tag tag-blue">-v monvol:/data</span></div>
</div>
<div class="info-box teal" style="cursor:pointer;" onclick="showVolDetail('bind')">
<div class="label">🔗 Bind mount</div>
<p style="font-size:.85rem;color:var(--muted);">Monte un chemin hôte dans le conteneur. Idéal pour le développement.</p>
<div style="margin-top:.5rem;"><span class="tag tag-teal">-v /hôte:/conteneur</span></div>
</div>
<div class="info-box purple" style="cursor:pointer;" onclick="showVolDetail('tmpfs')">
<div class="label">⚡ tmpfs</div>
<p style="font-size:.85rem;color:var(--muted);">Montage en mémoire RAM. Données perdues à l'arrêt. Pour données sensibles temporaires.</p>
<div style="margin-top:.5rem;"><span class="tag tag-purple">--tmpfs /tmp</span></div>
</div>
</div>
<div id="vol-detail" class="detail-panel" style="margin-top:1rem;"></div>
</div>
<div class="card">
<h3>Commandes volumes</h3>
<table class="cmd-table">
<tr><th>Commande</th><th>Description</th></tr>
<tr><td><span class="cmd-code">docker volume create monvol</span></td><td>Créer un volume nommé</td></tr>
<tr><td><span class="cmd-code">docker volume ls</span></td><td>Lister les volumes</td></tr>
<tr><td><span class="cmd-code">docker volume inspect monvol</span></td><td>Chemin réel, driver, labels</td></tr>
<tr><td><span class="cmd-code">docker volume prune</span></td><td>Supprimer les volumes non utilisés</td></tr>
<tr><td><span class="cmd-code">docker run -v monvol:/data:ro nginx</span></td><td>Monter en lecture seule</td></tr>
<tr><td><span class="cmd-code">docker run --mount type=volume,src=monvol,dst=/data</span></td><td>Syntaxe --mount (plus explicite)</td></tr>
</table>
</div>
<div class="card">
<h3>Drivers de volumes (plugins)</h3>
<div class="grid2">
<div>
<div class="info-box amber"><div class="label">Drivers courants</div>
<ul style="font-size:.85rem;padding-left:1.1rem;color:var(--muted)">
<li><strong>local</strong> — driver par défaut (stockage local)</li>
<li><strong>nfs</strong> — partage NFS/CIFS distant</li>
<li><strong>vieux/aws-ebs</strong> — Amazon Elastic Block Store</li>
<li><strong>azure-file</strong> — Azure Files</li>
<li><strong>rexray</strong> — stockage multi-cloud</li>
<li><strong>ceph-rbd</strong> — stockage distribué Ceph</li>
</ul>
</div>
</div>
<div>
<div class="info-box green"><div class="label">Sauvegarde d'un volume</div>
<div class="dockerfile" style="font-size:.8rem;padding:.6rem;">
<span class="df-comment"># Sauvegarder dans un tar</span>
<span class="df-cmd">docker run --rm</span> \
<span class="df-arg">-v monvol:/data:ro</span> \
<span class="df-arg">-v $(pwd):/backup</span> \
alpine tar czf /backup/backup.tar.gz -C /data .
<span class="df-comment"># Restaurer</span>
<span class="df-cmd">docker run --rm</span> \
<span class="df-arg">-v monvol:/data</span> \
<span class="df-arg">-v $(pwd):/backup</span> \
alpine tar xzf /backup/backup.tar.gz -C /data
</div>
</div>
</div>
</div>
</div>
</div>
<!-- ===== DOCKER COMPOSE ===== -->
<div id="tab-compose" class="tab-panel">
<div class="section-title">Docker Compose — orchestration locale</div>
<div class="card">
<h3>Qu'est-ce que Docker Compose ?</h3>
<p style="color:var(--muted);font-size:.9rem;margin-bottom:1rem;">
Docker Compose permet de définir et gérer des <strong>applications multi-conteneurs</strong> dans un fichier YAML (<code>compose.yaml</code> ou <code>docker-compose.yml</code>). Idéal pour le développement local et les déploiements simples.
</p>
<div class="info-box blue"><div class="label">Concepts Compose</div>
<div class="grid3">
<div><strong>services</strong><br><span style="font-size:.82rem;color:var(--muted)">Définition des conteneurs (image, build, ports, env…)</span></div>
<div><strong>networks</strong><br><span style="font-size:.82rem;color:var(--muted)">Réseaux partagés entre services</span></div>
<div><strong>volumes</strong><br><span style="font-size:.82rem;color:var(--muted)">Volumes persistants nommés</span></div>
<div><strong>configs</strong><br><span style="font-size:.82rem;color:var(--muted)">Fichiers de configuration injectés</span></div>
<div><strong>secrets</strong><br><span style="font-size:.82rem;color:var(--muted)">Secrets chiffrés (Swarm ou fichiers)</span></div>
<div><strong>extends</strong><br><span style="font-size:.82rem;color:var(--muted)">Héritage entre services</span></div>
</div>
</div>
</div>
<div class="card">
<h3>Exemple complet — Stack web 3-tiers</h3>
<div class="yaml-block">
<span class="yaml-comment"># compose.yaml — Stack web avec nginx, app Python, PostgreSQL</span>
<span class="yaml-key">name</span>: <span class="yaml-val">monapp</span>
<span class="yaml-key">services</span>:
<span class="yaml-key">nginx</span>:
<span class="yaml-key">image</span>: <span class="yaml-val">nginx:alpine</span>
<span class="yaml-key">ports</span>:
- <span class="yaml-val">"80:80"</span>
- <span class="yaml-val">"443:443"</span>
<span class="yaml-key">volumes</span>:
- <span class="yaml-val">./nginx.conf:/etc/nginx/conf.d/default.conf:ro</span>
- <span class="yaml-val">certs:/etc/ssl/certs</span>
<span class="yaml-key">depends_on</span>:
<span class="yaml-key">app</span>:
<span class="yaml-key">condition</span>: <span class="yaml-val">service_healthy</span>
<span class="yaml-key">networks</span>: [<span class="yaml-val">frontend</span>, <span class="yaml-val">backend</span>]
<span class="yaml-key">app</span>:
<span class="yaml-key">build</span>:
<span class="yaml-key">context</span>: <span class="yaml-val">.</span>
<span class="yaml-key">target</span>: <span class="yaml-val">production</span> <span class="yaml-comment"># multi-stage</span>
<span class="yaml-key">environment</span>:
<span class="yaml-key">DATABASE_URL</span>: <span class="yaml-val">postgresql://user:${DB_PASS}@db:5432/mydb</span>
<span class="yaml-key">env_file</span>: [<span class="yaml-val">.env</span>]
<span class="yaml-key">healthcheck</span>:
<span class="yaml-key">test</span>: [<span class="yaml-val">"CMD", "curl", "-f", "http://localhost:8000/health"</span>]
<span class="yaml-key">interval</span>: <span class="yaml-val">30s</span>
<span class="yaml-key">retries</span>: <span class="yaml-val">3</span>
<span class="yaml-key">deploy</span>:
<span class="yaml-key">replicas</span>: <span class="yaml-val">2</span> <span class="yaml-comment"># Compose v2 + Docker Swarm</span>
<span class="yaml-key">resources</span>:
<span class="yaml-key">limits</span>: { <span class="yaml-key">cpus</span>: <span class="yaml-val">'0.5'</span>, <span class="yaml-key">memory</span>: <span class="yaml-val">256M</span> }
<span class="yaml-key">networks</span>: [<span class="yaml-val">backend</span>]
<span class="yaml-key">db</span>:
<span class="yaml-key">image</span>: <span class="yaml-val">postgres:16-alpine</span>
<span class="yaml-key">environment</span>:
POSTGRES_PASSWORD: <span class="yaml-val">${DB_PASS}</span>
POSTGRES_DB: <span class="yaml-val">mydb</span>
<span class="yaml-key">volumes</span>:
- <span class="yaml-val">pgdata:/var/lib/postgresql/data</span>
- <span class="yaml-val">./init.sql:/docker-entrypoint-initdb.d/init.sql:ro</span>
<span class="yaml-key">healthcheck</span>:
<span class="yaml-key">test</span>: [<span class="yaml-val">"CMD-SHELL", "pg_isready -U postgres"</span>]
<span class="yaml-key">networks</span>: [<span class="yaml-val">backend</span>]
<span class="yaml-key">networks</span>:
<span class="yaml-key">frontend</span>:
<span class="yaml-key">backend</span>:
<span class="yaml-key">internal</span>: <span class="yaml-val">true</span> <span class="yaml-comment"># pas d'accès internet</span>
<span class="yaml-key">volumes</span>:
<span class="yaml-key">pgdata</span>:
<span class="yaml-key">certs</span>:
<span class="yaml-key">external</span>: <span class="yaml-val">true</span> <span class="yaml-comment"># volume pré-existant</span>
</div>
</div>
<div class="card">
<h3>Commandes Docker Compose</h3>
<table class="cmd-table">
<tr><th>Commande</th><th>Description</th></tr>
<tr><td><span class="cmd-code">docker compose up -d</span></td><td>Démarrer tous les services en arrière-plan</td></tr>
<tr><td><span class="cmd-code">docker compose up --build</span></td><td>Rebuild les images avant démarrage</td></tr>
<tr><td><span class="cmd-code">docker compose down -v</span></td><td>Arrêter et supprimer conteneurs + volumes</td></tr>
<tr><td><span class="cmd-code">docker compose ps</span></td><td>Statut des services</td></tr>
<tr><td><span class="cmd-code">docker compose logs -f app</span></td><td>Logs d'un service en temps réel</td></tr>
<tr><td><span class="cmd-code">docker compose exec app bash</span></td><td>Shell dans un service</td></tr>
<tr><td><span class="cmd-code">docker compose scale app=3</span></td><td>Scaler un service</td></tr>
<tr><td><span class="cmd-code">docker compose config</span></td><td>Valider et afficher la config fusionnée</td></tr>
<tr><td><span class="cmd-code">docker compose -f prod.yml up -d</span></td><td>Utiliser un fichier Compose alternatif</td></tr>
<tr><td><span class="cmd-code">docker compose pull</span></td><td>Mettre à jour toutes les images</td></tr>
</table>
</div>
<div class="card">
<h3>Surcharge de configuration (override)</h3>
<div class="grid2">
<div>
<div class="info-box teal"><div class="label">Fichiers de surcharge</div>
<p style="font-size:.85rem;color:var(--muted);margin-bottom:.5rem;">Compose fusionne automatiquement <code>compose.yaml</code> + <code>compose.override.yaml</code>. Très utile pour séparer dev/prod.</p>
<div class="dockerfile" style="font-size:.78rem;padding:.6rem;">
<span class="df-comment"># compose.override.yaml (dev)</span>
<span class="yaml-key">services</span>:
<span class="yaml-key">app</span>:
<span class="yaml-key">build</span>: { <span class="yaml-key">target</span>: <span class="yaml-val">dev</span> }
<span class="yaml-key">volumes</span>:
- <span class="yaml-val">./src:/app/src</span> <span class="df-comment"># hot reload</span>
<span class="yaml-key">environment</span>:
<span class="yaml-key">DEBUG</span>: <span class="yaml-val">"true"</span>
</div>
</div>
</div>
<div>
<div class="info-box amber"><div class="label">Profils</div>
<p style="font-size:.85rem;color:var(--muted);margin-bottom:.5rem;">Les profils permettent d'activer certains services optionnellement.</p>
<div class="dockerfile" style="font-size:.78rem;padding:.6rem;">
<span class="yaml-key">services</span>:
<span class="yaml-key">pgadmin</span>:
<span class="yaml-key">image</span>: <span class="yaml-val">dpage/pgadmin4</span>
<span class="yaml-key">profiles</span>: [<span class="yaml-val">"debug"</span>]
<span class="df-comment"># Activer le profil debug</span>
<span class="df-cmd">docker compose</span> \
<span class="df-arg">--profile debug up -d</span>
</div>
</div>
</div>
</div>
</div>
</div>
<!-- ===== DOCKER SWARM ===== -->
<div id="tab-swarm" class="tab-panel">
<div class="section-title">Docker Swarm — orchestration en cluster</div>
<div class="card">
<h3>Architecture d'un cluster Swarm</h3>
<p style="color:var(--muted);font-size:.9rem;margin-bottom:1rem;">Docker Swarm transforme un groupe de machines Docker en un <strong>cluster</strong>. Les <em>managers</em> orchestrent, les <em>workers</em> exécutent les tâches.</p>
<div class="swarm-diagram">
<div class="swarm-node manager">
<div class="swarm-role mgr">Manager (Leader)</div>
<div class="swarm-name">node1</div>
<div class="swarm-tasks">Raft consensus · API · Scheduler</div>
</div>
<div class="connector">⇆</div>
<div class="swarm-node manager">
<div class="swarm-role mgr">Manager (Follower)</div>
<div class="swarm-name">node2</div>
<div class="swarm-tasks">Backup Raft</div>
</div>
<div class="connector">⇆</div>
<div class="swarm-node manager">
<div class="swarm-role mgr">Manager (Follower)</div>
<div class="swarm-name">node3</div>
<div class="swarm-tasks">Backup Raft</div>
</div>
</div>
<div style="display:flex;justify-content:center;margin:1rem 0;color:var(--muted);">▼ Distribution des tâches ▼</div>
<div class="swarm-diagram">
<div class="swarm-node worker">
<div class="swarm-role wkr">Worker</div>
<div class="swarm-name">node4</div>
<div class="swarm-tasks">2 réplicas app · 1 tâche db</div>
</div>
<div class="swarm-node worker">
<div class="swarm-role wkr">Worker</div>
<div class="swarm-name">node5</div>
<div class="swarm-tasks">2 réplicas app · 1 réplica redis</div>
</div>
<div class="swarm-node worker">
<div class="swarm-role wkr">Worker</div>
<div class="swarm-name">node6</div>
<div class="swarm-tasks">1 réplica app · 1 réplica redis</div>
</div>
</div>
<div style="margin-top:.8rem;font-size:.82rem;color:var(--muted);text-align:center;">Recommandation : 3 ou 5 managers (quorum Raft = N/2+1). Toujours un nombre impair.</div>
</div>
<div class="card">
<h3>Services Swarm vs Conteneurs</h3>
<div class="grid2">
<div>
<div class="info-box blue"><div class="label">Service Swarm</div>
<ul style="font-size:.85rem;padding-left:1.1rem;color:var(--muted)">
<li><strong>Répliqué</strong> — N copies sur le cluster</li>
<li><strong>Global</strong> — 1 copie par nœud</li>
<li>Mise à jour <strong>rolling update</strong> sans interruption</li>
<li>Auto-rescheduling si un nœud tombe</li>
<li>Load balancing intégré via <strong>routing mesh</strong></li>
<li>Accès via <strong>Virtual IP (VIP)</strong> ou DNS round-robin</li>
</ul>
</div>
</div>
<div>
<div class="dockerfile" style="font-size:.82rem;">
<span class="df-comment"># Initialiser un Swarm</span>
<span class="df-cmd">docker swarm init</span> <span class="df-arg">--advertise-addr 10.0.0.1</span>
<span class="df-comment"># Ajouter un worker (token affiché à l'init)</span>
<span class="df-cmd">docker swarm join</span> \
<span class="df-arg">--token SWMTKN-1-xxx</span> 10.0.0.1:2377
<span class="df-comment"># Déployer un service répliqué</span>
<span class="df-cmd">docker service create</span> \
<span class="df-arg">--name webapp</span> \
<span class="df-arg">--replicas 3</span> \
<span class="df-arg">--publish 80:8000</span> \
<span class="df-arg">--update-delay 10s</span> \
<span class="df-arg">--update-failure-action rollback</span> \
monapp:1.0
<span class="df-comment"># Scaler</span>
<span class="df-cmd">docker service scale</span> webapp=5
<span class="df-comment"># Mise à jour rolling</span>
<span class="df-cmd">docker service update</span> \
<span class="df-arg">--image monapp:2.0</span> webapp
</div>
</div>
</div>
</div>
<div class="card">
<h3>Stacks — Compose sur Swarm</h3>
<div class="grid2">
<div>
<p style="font-size:.88rem;color:var(--muted);margin-bottom:.8rem;">Une <strong>stack</strong> déploie un fichier Compose sur un cluster Swarm. Tout ce qui est dans la section <code>deploy:</code> est pris en compte uniquement en mode Swarm.</p>
<div class="yaml-block" style="font-size:.8rem;">
<span class="yaml-key">services</span>:
<span class="yaml-key">app</span>:
<span class="yaml-key">image</span>: <span class="yaml-val">monapp:2.0</span>
<span class="yaml-key">deploy</span>:
<span class="yaml-key">replicas</span>: <span class="yaml-val">3</span>
<span class="yaml-key">update_config</span>:
<span class="yaml-key">parallelism</span>: <span class="yaml-val">1</span> <span class="yaml-comment"># 1 réplica à la fois</span>
<span class="yaml-key">delay</span>: <span class="yaml-val">10s</span>
<span class="yaml-key">failure_action</span>: <span class="yaml-val">rollback</span>
<span class="yaml-key">rollback_config</span>:
<span class="yaml-key">parallelism</span>: <span class="yaml-val">2</span>
<span class="yaml-key">restart_policy</span>:
<span class="yaml-key">condition</span>: <span class="yaml-val">on-failure</span>
<span class="yaml-key">max_attempts</span>: <span class="yaml-val">3</span>
<span class="yaml-key">placement</span>:
<span class="yaml-key">constraints</span>:
- <span class="yaml-val">node.role == worker</span>
- <span class="yaml-val">node.labels.zone == eu-west</span>
<span class="yaml-key">resources</span>:
<span class="yaml-key">limits</span>: { <span class="yaml-key">cpus</span>: <span class="yaml-val">'0.5'</span>, <span class="yaml-key">memory</span>: <span class="yaml-val">256M</span> }
<span class="yaml-key">reservations</span>: { <span class="yaml-key">cpus</span>: <span class="yaml-val">'0.1'</span>, <span class="yaml-key">memory</span>: <span class="yaml-val">64M</span> }
<span class="yaml-key">secrets</span>:
- <span class="yaml-val">db_password</span>
<span class="yaml-key">secrets</span>:
<span class="yaml-key">db_password</span>:
<span class="yaml-key">external</span>: <span class="yaml-val">true</span> <span class="yaml-comment"># créé avec docker secret create</span>
</div>
</div>
<div>
<div class="info-box green"><div class="label">Routing mesh</div>
<p style="font-size:.85rem;color:var(--muted);margin-bottom:.5rem;">Tout port publié est accessible sur <strong>n'importe quel nœud</strong> du Swarm, même si aucun réplica ne s'y trouve. Le daemon route automatiquement vers un réplica actif.</p>
<div style="background:var(--border);border-radius:6px;padding:.7rem;font-size:.82rem;text-align:center;">
Requête → node4:80 → routing mesh → réplica sur node5
</div>
</div>
<div class="info-box amber" style="margin-top:.8rem;"><div class="label">Réseau overlay</div>
<p style="font-size:.85rem;color:var(--muted);">Les services d'une même stack communiquent via un réseau <strong>overlay chiffré</strong> (VXLAN). Les secrets sont distribués chiffrés et montés dans <code>/run/secrets/</code>.</p>
</div>
<div class="info-box teal" style="margin-top:.8rem;"><div class="label">Commandes Swarm</div>
<div class="dockerfile" style="font-size:.78rem;padding:.6rem;">
<span class="df-comment"># Déployer une stack</span>
<span class="df-cmd">docker stack deploy</span> \
<span class="df-arg">-c compose.yaml</span> mastack
<span class="df-cmd">docker stack ls</span>
<span class="df-cmd">docker stack services</span> mastack
<span class="df-cmd">docker stack ps</span> mastack
<span class="df-cmd">docker stack rm</span> mastack
<span class="df-comment"># Secrets</span>
<span class="df-cmd">echo "motdepasse"</span> | \
docker secret create db_password -
</div>
</div>
</div>
</div>
</div>
<div class="card">
<h3>Docker Swarm vs Kubernetes</h3>
<table class="cmd-table">
<tr><th>Critère</th><th>Docker Swarm</th><th>Kubernetes</th></tr>
<tr><td>Courbe d'apprentissage</td><td>🟢 Simple</td><td>🔴 Élevée</td></tr>
<tr><td>Configuration</td><td>Compose YAML standard</td><td>YAML spécifique (pods, deployments…)</td></tr>
<tr><td>Scalabilité</td><td>Centaines de nœuds</td><td>Des milliers de nœuds</td></tr>
<tr><td>Auto-healing</td><td>Basique</td><td>Avancé</td></tr>
<tr><td>Réseau</td><td>Overlay intégré</td><td>CNI (Calico, Flannel, Cilium…)</td></tr>
<tr><td>Écosystème</td><td>Limité</td><td>Très riche (Helm, Istio, ArgoCD…)</td></tr>
<tr><td>Idéal pour</td><td>Petites/moyennes équipes</td><td>Grandes infras, cloud-native</td></tr>
</table>
</div>
</div>
<!-- ===== QUIZ ===== -->
<div id="tab-quiz" class="tab-panel">
<div class="section-title">Quiz Docker</div>
<p style="color:var(--muted);margin-bottom:1.5rem;">10 questions pour valider vos connaissances sur Docker, Compose et Swarm.</p>
<div id="quiz-container">
<div class="quiz-q" data-q="0">
<div class="question">1. Quelle est la différence fondamentale entre une image Docker et un conteneur Docker ?</div>
<div class="quiz-answers">
<div class="quiz-ans" onclick="answer(this,0,false)">Une image peut être modifiée, pas un conteneur</div>
<div class="quiz-ans" onclick="answer(this,0,true)">Une image est un modèle immuable, un conteneur est une instance en cours d'exécution</div>
<div class="quiz-ans" onclick="answer(this,0,false)">Une image contient le code, un conteneur contient les dépendances</div>
<div class="quiz-ans" onclick="answer(this,0,false)">Ils sont identiques, seul le nom diffère</div>
</div>
<div class="quiz-feedback">Une <strong>image</strong> est read-only et sert de template. Un <strong>conteneur</strong> est une instance en vie d'une image, avec une couche read-write ajoutée par-dessus.</div>
</div>
<div class="quiz-q" data-q="1">
<div class="question">2. Quelle commande permet de démarrer tous les services d'un fichier compose.yaml en arrière-plan ?</div>
<div class="quiz-answers">
<div class="quiz-ans" onclick="answer(this,1,false)">docker compose start</div>
<div class="quiz-ans" onclick="answer(this,1,true)">docker compose up -d</div>
<div class="quiz-ans" onclick="answer(this,1,false)">docker compose run -d</div>