🇫🇷 Devops

# Que sont les images Docker ?
docker image pull hello-world
docker container run hello-world

# Comment les images Docker sont nommées ?
[registry/][username/]image-name[:tag]

# Exemples :
library/ubuntu:22.04   # Image officielle (library est implicite)
ubuntu:22.04           # Identique à ci-dessus
user/mon-app:latest    # Image personnalisée

docker image pull ubuntu:22.04   # Échec sur le réseau universitaire, ou succès temporaire avant d'être blacklistés

docker image pull ubuntu:22.04   # Échec sur le réseau universitaire, ou succès temporaire avant d'être blacklistés

docker image pull cache-ili.univ-artois.fr:80/proxy_cache/library/ubuntu:22.04

{
  "registry-mirrors": ["http://cache-ili.univ-artois.fr:80/proxy_cache/"],
  "insecure-registries": ["cache-ili.univ-artois.fr:80"]
}

{
  "registry-mirrors": ["http://cache-ili.univ-artois.fr:80/proxy_cache/"],
  "insecure-registries": ["cache-ili.univ-artois.fr:80"]
}

docker image pull ubuntu:22.04   # Utilise automatiquement le cache !
docker container run gradle      # Fonctionne de manière transparente

sudo nano /etc/docker/daemon.json

sudo nano /etc/docker/daemon.json

{
  "registry-mirrors": ["http://cache-ili.univ-artois.fr:80/proxy_cache/"],
  "insecure-registries": ["cache-ili.univ-artois.fr:80"]
}

sudo nano /etc/docker/daemon.json

{
  "registry-mirrors": ["http://cache-ili.univ-artois.fr:80/proxy_cache/"],
  "insecure-registries": ["cache-ili.univ-artois.fr:80"]
}

sudo systemctl restart docker

sudo systemctl restart docker

docker image pull ubuntu:22.04    # Utilise automatiquement le cache
docker container run python:3.9   # Fonctionne sans problème

docker image pull ubuntu:22.04    # Utilise automatiquement le cache
docker container run python:3.9   # Fonctionne sans problème

# Permission refusée ? Ajoutez votre utilisateur au groupe docker :
sudo usermod -aG docker $USER
newgrp docker   # Ou déconnectez-vous / reconnectez-vous

# Toujours un souci ? Testez le cache :
docker image pull cache-ili.univ-artois.fr:80/proxy_cache/library/hello-world

{
  "proxies": {
    "default": {
      "httpProxy": "http://cache-etu.univ-artois.fr:3128",
      "httpsProxy": "http://cache-etu.univ-artois.fr:3128",
      "noProxy": "localhost,127.0.0.1"
    }
  }
}

docker container run --rm alpine:3.24.2 env | grep -i proxy
# HTTP_PROXY=http://cache-etu.univ-artois.fr:3128
# HTTPS_PROXY=... NO_PROXY=... et les formes en minuscules

docker image build \
  --build-arg HTTP_PROXY=http://cache-etu.univ-artois.fr:3128 \
  --build-arg HTTPS_PROXY=http://cache-etu.univ-artois.fr:3128 .

FROM alpine:3.24.2
RUN apk add --no-cache curl

docker image history --no-trunc --format '{{.CreatedBy}}' mon-image | grep -i proxy
# RUN |1 HTTPS_PROXY=http://cache-etu.univ-artois.fr:3128 /bin/sh -c apk add --no-cache curl # buildkit
# ARG HTTPS_PROXY=http://cache-etu.univ-artois.fr:3128

FROM alpine:3.24.2
RUN --mount=type=secret,id=proxy,env=HTTPS_PROXY \
    apk add --no-cache curl

read -rsp 'URL du proxy : ' PROXY_URL; echo   # saisie masquée
PROXY_URL="$PROXY_URL" docker image build --secret id=proxy,env=PROXY_URL .
unset PROXY_URL

FROM alpine:3.24.2
ENV HTTPS_PROXY=http://cache-etu.univ-artois.fr:3128
RUN apk add --no-cache curl

{
  "proxies": {
    "http-proxy": "http://cache-etu.univ-artois.fr:3128",
    "https-proxy": "http://cache-etu.univ-artois.fr:3128",
    "no-proxy": "localhost,127.0.0.1"
  }
}

// .devcontainer/devcontainer.json
{
  "name": "Docker DevOps Course",
  "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
  "features": {
    "ghcr.io/devcontainers/features/docker-in-docker:2": {}
  }
}

sudo tee /etc/apt/apt.conf.d/99proxy <<'PROXY'
Acquire::http::Proxy "http://cache-etu.univ-artois.fr:3128/";
Acquire::https::Proxy "http://cache-etu.univ-artois.fr:3128/";
PROXY

export http_proxy=http://cache-etu.univ-artois.fr:3128/
export https_proxy=http://cache-etu.univ-artois.fr:3128/

sudo apt remove $(dpkg --get-selections \
  docker.io docker-compose docker-compose-v2 \
  docker-doc docker-buildx podman-docker \
  containerd runc | cut -f1)

sudo apt update
sudo apt install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings

curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /tmp/docker.asc
sudo install -m 0644 /tmp/docker.asc /etc/apt/keyrings/docker.asc

sudo tee /etc/apt/sources.list.d/docker.sources <<EOF
Types: deb
URIs: https://download.docker.com/linux/ubuntu
Suites: $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}")
Components: stable
Architectures: $(dpkg --print-architecture)
Signed-By: /etc/apt/keyrings/docker.asc
EOF

sudo apt update

sudo apt install docker-ce docker-ce-cli containerd.io \
  docker-buildx-plugin docker-compose-plugin

sudo usermod -aG docker $USER

docker --version
docker compose version
docker buildx version
docker container run hello-world

name: Bonjour
on:
  - push
jobs:
  dire_bonjour:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7 # Récupère le contenu du dépôt correspondant au commit du workflow en cours

    container:
      image: mcr.microsoft.com/devcontainers/base:ubuntu # La même image que le Codespace

name: Bonjour
on:
  - push
jobs:
  dire_bonjour:
    runs-on: ubuntu-latest
    container:
      image: mcr.microsoft.com/devcontainers/base:ubuntu # La même image que le Codespace
    steps:
      - uses: actions/checkout@v7 # Récupère le contenu du dépôt correspondant au commit du workflow en cours
      - run: | # Pas de `sudo` : dans un conteneur, le job tourne déjà en root
          apt-get update
          apt-get install -y cowsay
      - run: cat README.adoc | /usr/games/cowsay # `cowsay` s'installe dans /usr/games, absent du PATH

ls --color=always -l /bin

echo ">> Contenu de /tmp :\n$(ls /tmp)"

ls /tmp
echo $?

ls /do_not_exist
echo $?

# Une seconde fois. Que se passe-t'il ?
echo $?

ls -l /tmp
echo "Hello" > /tmp/hello.txt
ls -l /tmp
ls -l /tmp >/dev/null
ls -l /tmp 1>/dev/null

ls -l /do_not_exist
ls -l /do_not_exist 1>/dev/null
ls -l /do_not_exist 2>/dev/null

ls -l /tmp /do_not_exist
ls -l /tmp /do_not_exist 1>/dev/null 2>&1

ls -l /bin

ls -l /bin | grep "d" --color=auto

mkdir -p /workspaces/projet-vcs-1/
cd /workspaces/projet-vcs-1/
ls -la # Pas de dossier .git
git status # Erreur "fatal: not a git repository"
git init ./
ls -la # On a un dossier .git
git status # Succès avec un message "On branch main No commits yet"

echo "# Read Me\n\nObi Wan" > ./README.md
git status # Message "Untracked file"

git add ./README.md
git status # Message "Changes to be committed"
git commit -m "Ajout du README au projet"
git status  # Message "nothing to commit, working tree clean"

git log

git show # Show the "HEAD" commit
echo "# Read Me\n\nObi Wan Kenobi" > ./README.md

git diff
git status

git checkout -- README.md
git status

git switch --create feature/html
# Ou alors: git branch feature/html && git switch feature/html
echo '<h1>Hello</h1>' > ./index.html
git add ./index.html && git commit --message="Ajout d'une page HTML par défaut" # -m / --message

git log
git log --graph

# 'git lg' n'existe pas par défaut : c'est un alias, à définir une fois pour toutes
git config --global alias.lg "log --graph --oneline --decorate --all"
git lg # cat ~/.gitconfig => l'alias apparaît maintenant dans la section [alias]

git switch main
git merge --no-ff feature/html # Enregistrer puis fermer le fichier 'MERGE_MSG' qui a été ouvert
git log --graph

# git lg

docker container run hello-world
# Equivalent de l'ancienne commande 'docker run'

docker container ls --help
# ...
docker container ls
# ...
docker container ls --all

CONTAINER ID   IMAGE         COMMAND    CREATED          STATUS                      PORTS     NAMES
109a9cdd3ec8   hello-world   "/hello"   33 seconds ago   Exited (0) 17 seconds ago             festive_faraday

$ docker container run busybox echo hello world

$ docker container run busybox echo hello world

$ docker container run busybox echo hello world

$ docker container run busybox echo hello world

$ docker container run busybox echo hello world

$ docker container run busybox echo hello world

docker container run --name=bonjour hello-world
# Affiche le texte habituel

docker container logs bonjour
# Affiche le même texte : pratique si on a fermé le terminal

docker container start bonjour
# N'affiche pas le texte mais l'identifiant unique du conteneur 'bonjour'

docker container logs bonjour
# Le texte est affiché 2 fois !

docker container ls --all
# Le conteneur est présent
docker container rm bonjour
docker container ls --all
# Le conteneur n'est plus là : il a été supprimé ainsi que ses logs

docker container logs bonjour
# Error: No such container: bonjour

docker container run  --interactive --tty alpine

docker container run  --interactive --tty alpine
/ $

docker container run  --interactive --tty alpine
/ $

docker container run  --interactive --tty alpine
/ $

docker container run  --interactive --tty alpine
/ $

docker container run  --interactive --tty alpine
/ $

$ cat /etc/os-release
# ... Ubuntu ....

$ docker container run --tty --interactive alpine:3.24.2
/ $ cat /etc/os-release
# ... Alpine ...
# Notez que le "prompt" du terminal est différent DANS le conteneur
/ $ exit
$ docker container ls --all

$ docker container run alpine:3.24.2 cat /etc/os-release
# ... Alpine ...

/ $ curl google.fr

/ $ curl google.fr
/bin/sh: curl: not found

/ $ curl google.fr
/bin/sh: curl: not found

/ $ curl google.fr
/bin/sh: curl: not found

/ $ apk update && apk add curl

/ $ curl google.fr
/bin/sh: curl: not found

/ $ apk update && apk add curl
v3.24.2-58-g29b9ec24b1b [https://dl-cdn.alpinelinux.org/alpine/v3.24/main]
v3.24.2-61-g887b5770c3e [https://dl-cdn.alpinelinux.org/alpine/v3.24/community]
OK: 28651 distinct packages available
(1/9) Installing brotli-libs (1.2.0-r1)
(2/9) Installing c-ares (1.34.8-r0)
(3/9) Installing libunistring (1.4.2-r0)
(4/9) Installing libidn2 (2.3.8-r0)
(5/9) Installing nghttp2-libs (1.69.0-r0)
(6/9) Installing libpsl (0.21.5-r3)
(7/9) Installing zstd-libs (1.5.7-r2)
(8/9) Installing libcurl (8.22.0-r0)
(9/9) Installing curl (8.22.0-r0)
Executing busybox-1.37.0-r31.trigger
OK: 13.1 MiB in 25 packages

/ $ curl google.fr
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="http://www.google.fr/">here</A>.
</BODY></HTML>

/ $ exit

/ $ exit

/ $ exit

docker container run  --interactive --tty alpine

/ $ exit

docker container run  --interactive --tty alpine

/ $ curl google.fr

/ $ exit

docker container run  --interactive --tty alpine

/ $ curl google.fr
/bin/sh: curl: not found

docker container run

docker container run

docker container run

docker container run  --interactive --tty jpetazzo/clock

docker container run  --interactive --tty jpetazzo/clock
Mon Sep 25 10:33:51 UTC 2023
Mon Sep 25 10:33:52 UTC 2023
Mon Sep 25 10:33:53 UTC 2023
Mon Sep 25 10:33:54 UTC 2023
Mon Sep 25 10:33:55 UTC 2023
Mon Sep 25 10:33:56 UTC 2023
...

docker container run  --interactive --tty jpetazzo/clock
Mon Sep 25 10:33:51 UTC 2023
Mon Sep 25 10:33:52 UTC 2023
Mon Sep 25 10:33:53 UTC 2023
Mon Sep 25 10:33:54 UTC 2023
Mon Sep 25 10:33:55 UTC 2023
Mon Sep 25 10:33:56 UTC 2023
...

docker container run  --interactive --tty jpetazzo/clock
Mon Sep 25 10:33:51 UTC 2023
Mon Sep 25 10:33:52 UTC 2023
Mon Sep 25 10:33:53 UTC 2023
Mon Sep 25 10:33:54 UTC 2023
Mon Sep 25 10:33:55 UTC 2023
Mon Sep 25 10:33:56 UTC 2023
...

docker container run  --interactive --tty jpetazzo/clock
Mon Sep 25 10:33:51 UTC 2023
Mon Sep 25 10:33:52 UTC 2023
Mon Sep 25 10:33:53 UTC 2023
Mon Sep 25 10:33:54 UTC 2023
Mon Sep 25 10:33:55 UTC 2023
Mon Sep 25 10:33:56 UTC 2023
...

docker container run --detach jpetazzo/clock

docker container run --detach jpetazzo/clock
399f3b23bc0585991afa80dfee854cf0a953d782b99153b4e2cbc74ab6b07770

docker container logs 399f3

docker container logs 399f3
Tue Sep 12 12:37:01 UTC 2023
Tue Sep 12 12:37:02 UTC 2023
Tue Sep 12 12:37:03 UTC 2023
Tue Sep 12 12:37:04 UTC 2023
Tue Sep 12 12:37:05 UTC 2023
Tue Sep 12 12:37:06 UTC 2023
Tue Sep 12 12:37:07 UTC 2023
Tue Sep 12 12:37:08 UTC 2023
Tue Sep 12 12:37:09 UTC 2023
Tue Sep 12 12:37:10 UTC 2023
Tue Sep 12 12:37:11 UTC 2023

docker container logs 399f3
Tue Sep 12 12:37:01 UTC 2023
Tue Sep 12 12:37:02 UTC 2023
Tue Sep 12 12:37:03 UTC 2023
Tue Sep 12 12:37:04 UTC 2023
Tue Sep 12 12:37:05 UTC 2023
Tue Sep 12 12:37:06 UTC 2023
Tue Sep 12 12:37:07 UTC 2023
Tue Sep 12 12:37:08 UTC 2023
Tue Sep 12 12:37:09 UTC 2023
Tue Sep 12 12:37:10 UTC 2023
Tue Sep 12 12:37:11 UTC 2023

docker container ls

docker container ls
CONTAINER ID   IMAGE                           COMMAND                  CREATED        STATUS       PORTS                    NAMES
02cbf2fb3721   cours-devops-docker-serve       "/sbin/tini -g gulp …"   3 hours ago    Up 3 hours   0.0.0.0:8000->8000/tcp   cours-devops-docker-serve-1
ebfbe695b2ec   moby/buildkit:buildx-stable-1   "buildkitd"              2 months ago   Up 3 hours                            buildx_buildkit_exciting_williams0

docker container ls
CONTAINER ID   IMAGE                           COMMAND                  CREATED        STATUS       PORTS                    NAMES
02cbf2fb3721   cours-devops-docker-serve       "/sbin/tini -g gulp …"   3 hours ago    Up 3 hours   0.0.0.0:8000->8000/tcp   cours-devops-docker-serve-1
ebfbe695b2ec   moby/buildkit:buildx-stable-1   "buildkitd"              2 months ago   Up 3 hours                            buildx_buildkit_exciting_williams0

docker container stop 399f3

docker container stop 399f3

docker container start 399f3

docker container ls --all

docker container ls --all
CONTAINER ID   IMAGE                           COMMAND                  CREATED          STATUS                        PORTS                    NAMES
90725f661d4e   hello-world                     "/hello"                 13 seconds ago   Exited (0) 12 seconds ago                              hardcore_wescoff
9d0a6586b9e1   busybox                         "echo hello world"       22 seconds ago   Exited (0) 21 seconds ago                              gracious_moser
368ed08a35e3   jpetazzo/clock                  "/bin/sh -c 'while d…"   6 minutes ago    Up 5 minutes                                           sweet_clarke
c036e57bbf05   jpetazzo/clock                  "/bin/sh -c 'while d…"   17 minutes ago   Exited (130) 17 minutes ago                            cool_euclid
02cbf2fb3721   cours-devops-docker-serve       "/sbin/tini -g gulp …"   3 hours ago      Up 3 hours                    0.0.0.0:8000->8000/tcp   cours-devops-docker-serve-1
ebfbe695b2ec   moby/buildkit:buildx-stable-1   "buildkitd"              2 months ago     Up 4 hours                                             buildx_buildkit_exciting_williams0

 docker container ls --all
CONTAINER ID   IMAGE                           COMMAND                  CREATED          STATUS                        PORTS                    NAMES
90725f661d4e   hello-world                     "/hello"                 13 seconds ago   Exited (0) 12 seconds ago                              hardcore_wescoff
9d0a6586b9e1   busybox                         "echo hello world"       22 seconds ago   Exited (0) 21 seconds ago                              gracious_moser
368ed08a35e3   jpetazzo/clock                  "/bin/sh -c 'while d…"   6 minutes ago    Up 5 minutes                                           sweet_clarke
c036e57bbf05   jpetazzo/clock                  "/bin/sh -c 'while d…"   17 minutes ago   Exited (130) 17 minutes ago                            cool_euclid
02cbf2fb3721   cours-devops-docker-serve       "/sbin/tini -g gulp …"   3 hours ago      Up 3 hours                    0.0.0.0:8000->8000/tcp   cours-devops-docker-serve-1
ebfbe695b2ec   moby/buildkit:buildx-stable-1   "buildkitd"              2 months ago     Up 4 hours                                             buildx_buildkit_exciting_williams0

docker container rm 90725f661d4e

docker container rm 90725f661d4e
90725f661d4e

docker container rm 90725f661d4e
90725f661d4e

docker container rm 90725f661d4e
90725f661d4e

docker container run  --interactive --tty --rm jpetazzo/clock

docker container exec <containerID> echo "hello"

docker container ls

docker container ls
CONTAINER ID   IMAGE                           COMMAND                  CREATED        STATUS       PORTS                    NAMES
368ed08a35e3   jpetazzo/clock                  "/bin/sh -c 'while d…"   4 hours ago    Up 4 hours                            sweet_clarke
02cbf2fb3721   cours-devops-docker-serve       "/sbin/tini -g gulp …"   7 hours ago    Up 7 hours   0.0.0.0:8000->8000/tcp   cours-devops-docker-serve-1
ebfbe695b2ec   moby/buildkit:buildx-stable-1   "buildkitd"              2 months ago   Up 7 hours                            buildx_buildkit_exciting_williams0

docker container ls
CONTAINER ID   IMAGE                           COMMAND                  CREATED        STATUS       PORTS                    NAMES
368ed08a35e3   jpetazzo/clock                  "/bin/sh -c 'while d…"   4 hours ago    Up 4 hours                            sweet_clarke
02cbf2fb3721   cours-devops-docker-serve       "/sbin/tini -g gulp …"   7 hours ago    Up 7 hours   0.0.0.0:8000->8000/tcp   cours-devops-docker-serve-1
ebfbe695b2ec   moby/buildkit:buildx-stable-1   "buildkitd"              2 months ago   Up 7 hours                            buildx_buildkit_exciting_williams0

docker container exec 368ed08a35e3 echo hello
hello

docker container exec --interactive --tty <containerID> bash

# Lancer un container "daemon" `jpetazzo/clock`
docker container run --detach --name first-clock jpetazzo/clock

# Utiliser l'équivalent de `tail -f` pour lire la sortie standard du container 💡
docker container logs -f first-clock

# * Lancer un second container "daemon" 👹
docker container run --detach --name second-clock jpetazzo/clock

# Stocker l'identifiant de ce container dans une variable du shell, en une seule commande et en jouant avec `docker container ls`
# --filter "name=second-clock" filters the list of containers to include only those with the name "second-clock."
container_id=$(docker container ls -q --filter "name=second-clock")

# Stopper le container avec cet identifiant
docker container stop "$container_id"

# Afficher les containers lancés  🏃📦
docker container ls

# Afficher les containers arrêtés 🛑📦
docker container ls --filter "status=exited"

# Relancer un des containers arrêtés.
docker container start second-clock

# Exécuter un `ps -ef` dans ce container
docker container exec second-clock ps -ef
PID   USER     TIME  COMMAND
    1 root      0:00 /bin/sh -c while date; do sleep 1; done
   56 root      0:00 sleep 1
   57 root      0:00 ps -ef

# Quel est le PID du process principal ?
# 1

# Vérifier que le container "tourne" toujours
docker container ls
# (sortie abrégée : autres conteneurs et colonnes CREATED, PORTS retirés)
CONTAINER ID   IMAGE            COMMAND                  STATUS              NAMES
edea0c46c6d8   jpetazzo/clock   "/bin/sh -c 'while d…"   Up About a minute   second-clock

# Supprimer l'image (tip : `docker image rm`)
docker image rm jpetazzo/clock
Error response from daemon: conflict: unable to delete jpetazzo/clock:latest (must be forced)
 - container edea0c46c6d8 is using its referenced image dc06bbc3744f

# Supprimer les containers (first-clock utilise aussi l'image)
docker container stop first-clock second-clock
first-clock
second-clock

docker container rm first-clock second-clock
first-clock
second-clock

# Supprimer l'image (pour de vrai cette fois)
docker image rm jpetazzo/clock
Untagged: jpetazzo/clock:latest
Deleted: sha256:dc06bbc3744f7200404bff0bbb2516925e7adea115e07de9da8b36bf15fe3dd3

docker image rm -f jpetazzo/clock
Untagged: jpetazzo/clock:latest

docker container run --detach --name=webserver-1 nginx
# <ID du conteneur>

docker container ls
docker container ls --all

docker container exec webserver-1 cat /etc/os-release
# ... Debian ...

docker container stop webserver-1
docker container ls
docker container ls --all

docker container start webserver-1
docker container ls
docker container ls --all

docker container start webserver-1
docker container ls

cat /etc/os-release
# ...
git --version
# ...

# Même version de Linux que dans Codespaces
docker container run --rm ubuntu:24.04 git --version
# docker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "git": executable file not found in $PATH: unknown.

# En interactif ?
docker container run --rm --tty --interactive ubuntu:24.04 git --version

cat <<EOF >Dockerfile
FROM alpine:3.24.2

RUN apk add --no-cache git
EOF

docker image build --tag=docker-git ./

docker image ls | grep docker-git

# Doit fonctionner
docker container run --rm docker-git:latest git --version

docker image tag docker-git:latest docker-git:1.0.0

# 2 lignes
docker image ls | grep docker-git
# 1 ligne
docker image ls | grep docker-git | grep latest
# 1 ligne
docker image ls | grep docker-git | grep '1.0.0'

# Doit fonctionner
docker container run --rm docker-git:1.0.0 git --version

cat ./Dockerfile
FROM alpine:3.24.1
RUN apk add --no-cache git
LABEL description="Une image contenant git préconfiguré"
RUN git config --global init.defaultBranch main

docker image build -t docker-git:1.1.0 ./docker-git/
# Sending build context to Docker daemon  2.048kB
# Step 1/4 : FROM alpine:3.24.1
#  ---> e40cf56b4be3
# Step 2/4 : RUN apk add --no-cache git
#  ---> Using cache
#  ---> 926b8d87f128
# Step 3/4 : LABEL description="Une image contenant git préconfiguré"
#  ---> Running in 0695fc62ecc8
# Removing intermediate container 0695fc62ecc8
#  ---> 68c7d4fb8c88
# Step 4/4 : RUN git config --global init.defaultBranch main
#  ---> Running in 7fb54ecf4070
# Removing intermediate container 7fb54ecf4070
#  ---> 2858ff394edb
Successfully built 2858ff394edb
Successfully tagged docker-git:1.1.0

docker container run --rm docker-git:1.0.0 git config --get init.defaultBranch
docker container run --rm docker-git:1.1.0 git config --get init.defaultBranch
# main

Step 2/4 : RUN apk add --no-cache git
  ---> Using cache

docker container run --rm --tty --interactive \
  --volume /var/run/docker.sock:/var/run/docker.sock \
  wagoodman/dive:latest <image>:<tag>

# Build one time
docker image build -t docker-git:1.1.0 ./docker-git/
# Second time is fully cached
docker image build -t docker-git:1.1.0 ./docker-git/

cat Dockerfile
# FROM alpine:3.24.1
# RUN apk add --no-cache git make
# LABEL description="Une image contenant git préconfiguré"
# RUN git config --global init.defaultBranch main

# Build one time
docker image build -t docker-git:1.2.0 ./docker-git/
# Second time is fully cached
docker image build -t docker-git:1.2.0 ./docker-git/

## Vérification
# Renvoie une erreur
docker container run --rm docker-git:1.1.0 make --version
# Doit fonctionner
docker container run --rm docker-git:1.2.0 make --version

FROM alpine:3.24
WORKDIR /repertoire/travail
RUN echo hello > ./world.txt

FROM alpine:3.24
WORKDIR /repertoire/travail
RUN echo hello > ./world.txt

FROM alpine:3.24
WORKDIR /repertoire/travail
RUN echo hello > ./world.txt

FROM alpine:3.24
WORKDIR /repertoire/travail
RUN echo hello > ./world.txt

docker image build --tag mon-img .
...

$ docker container run mon-img cat /repertoire/travail/world.txt
hello

$ docker container run mon-img pwd
/repertoire/travail

$ docker container run --workdir /home mon-img pwd
/home

FROM image
ADD https://mon-nexus/foo/bar/1.0/package.tar /uncompressed/

docker image build --tag myjava:1.42 ./
Sending build context to Docker daemon  172.8MB

# ignore les dossiers .git et .cache
.git
.cache

diff --git a/src/Dockerfile b/src/Dockerfile
index c92c67cd48121705628f67a2af14b2a65e54cdfd..77919a581fffde7c57f43c8b7cbee2a8d84b628b 100644
--- a/src/Dockerfile
+++ b/src/Dockerfile
@@ -9,6 +9,10 @@ COPY start.sh /bin/start.sh
 EXPOSE 4321
 # This line opens port 4321 on the container. It's like installing a door in your house.

+RUN adduser --disabled-password --gecos "" --home /home/www www
+USER www
+WORKDIR /home/www
+
 ENTRYPOINT ["/bin/start.sh"]
 # This line sets the command that will be run when the container starts. It's like setting the alarm clock in your house.

diff --git a/src/start.sh b/src/start.sh
index 44006d6cd8414706a5fcf564dbfd1e9c38d4bc0b..a6ed60fdf88759d4962685e7ceb6cdbc21867448 100755
--- a/src/start.sh
+++ b/src/start.sh
@@ -4,7 +4,7 @@
 set -eux
 # These are shell options. 'e' exits on error, 'u' treats unset variables as an error, and 'x' prints each command to the terminal. It's like the script's personal assistant, making sure everything runs smoothly.

-touch /home/www/started.time
+touch /tmp/started.time
 # This creates a file named 'started.time' in the '/home/www' directory. It's like the script's way of marking its territory.

 if [ $? -ne 0 ]; then
@@ -12,7 +12,7 @@ if [ $? -ne 0 ]; then
 fi
 # This checks the exit status of the last command. If it's not zero, which means there was an error, it exits the script. It's like the script's way of saying, "If I can't do it right, I won't do it at all."

-date > /home/www/started.time
+date > /tmp/started.time
 # This writes the current date and time to the 'started.time' file. It's like the script's way of keeping a diary.

 exec "$@"

stages:
  - "validator.sh"
  - "docker scout"

variables:
  PROXY: "http://cache-etu.univ-artois.fr:3128"
  IMAGE: "devops-docker-tp05:latest"

validator-job:
  image: cache-ili.univ-artois.fr/proxy_cache/library/docker
  stage: "validator.sh"
  before_script:
    - export HTTP_PROXY="$PROXY"
    - export HTTPS_PROXY="$PROXY"
    - apk add -U bash
  script:
    - errors=$(./validator.sh)
    - echo "$errors"
    - exit $([ -z "$errors" ] && echo 0 || echo 1)
  tags:
    - docker2

# No login needed, using docker desktop with wsl
scout-job:
  stage: "docker scout"
  script:
    - cd ./src
    - docker build . -t "$IMAGE"
    - docker scout cves --format only-packages --only-vuln-packages "$IMAGE"
    - docker rmi "$IMAGE"
  tags:
    - myshell

stages:
  - run_script
  - docker_scan

run_script:
  stage: run_script
  script:
    - chmod +x validator.sh src/start.sh && ./validator.sh # Makes the scripts executable and runs validator.sh
    - |
        if [ $? -eq 0 ]; then
          echo "Script exited successfully."
        else
          echo "Script exited with an error."
          exit 1  # Mark the job as a failure
        fi

docker_scan:
  stage: docker_scan
  script:
    - IMG=$(echo img$$)
    - docker image build --tag $IMG ./src > /dev/null
    - echo "Will scan $IMG"
    - echo $DOCKER_TOKEN | docker login -u $DOCKER_USERNAME --password-stdin
    - docker scout cves --format only-packages --only-vuln-packages $IMG # Runs docker scout to scan the image
    - docker scout recommendations $IMG # View base image update recommendations

docker container run --detach --name my-web httpd

# Here we're using the 'docker container run' command to start a new Docker container.
# The '--detach' option tells Docker to run the container in the background and print the container ID.
# The '--name' option allows us to give our container a custom name, in this case 'my-web'.
# Finally, 'nginx' is the name of the Docker image we want to use to create the container.
# So, to sum up, this command will start a new Docker container in the background, using the 'nginx' image, and name it 'my-web'.
docker container run --detach --name my-web nginx

[
  "nginx",
  "-g",
  "daemon off;"
]

# This command is using 'docker container ls' to list our Docker containers. The '--filter' option allows us to only show containers with the name 'my-web', and '--no-trunc' prevents Docker from truncating the output.
# We then pipe this output to 'awk', a powerful text processing tool. 'NR==1 {cmd=index($0, "COMMAND"); created=index($0, "CREATED")}' tells 'awk' to find the positions of the 'COMMAND' and 'CREATED' headers in the first line of the output.
# 'NR>1 {print substr($0, cmd, created-cmd)}' then tells 'awk' to print the substring from the start of the 'COMMAND' field to the start of the 'CREATED' field for the rest of the lines.
# So, to sum up, this command will give us the command used to start the 'my-web' container, extracted from the output of 'docker container ls'.
docker container ls --filter "name=my-web" --no-trunc | awk 'NR==1 {cmd=index($0, "COMMAND"); created=index($0, "CREATED")} NR>1 {print substr($0, cmd, created-cmd)}'

docker container run --detach nginx
bd12c4d7110d17ce80...

docker container ls
CONTAINER ID    IMAGE   COMMAND                  CREATED    STATUS    PORTS
bd12c4d71       nginx   "/docker-entrypoint.…"   35 s. ago  Up 33 s.  80/tcp

"Networks": {
                "bridge": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "c0fcec43e3e8…eecd6558ac0870a468a3",
                    "EndpointID": "0ec8fb237a10e9227359b4…db23edc32",
                    "Gateway": "172.17.0.1",
                    "IPAddress": "172.17.0.2",
                    "IPPrefixLen": 16,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "02:42:ac:11:00:02",
                    "DriverOpts": null
                }
            }

docker container inspect --format "{{.NetworkSettings.IPAddress}}" <ContainerID>
template parsing error: [...] map has no entry for key "IPAddress"

curl -I --noproxy '*' http://172.17.0.2:80
HTTP/1.1 200 OK
....
Server: nginx/1.25 ...

curl -I --noproxy '*' http://172.17.0.2:80
HTTP/1.1 200 OK
Server: nginx/1.25.2
Date: Wed, 18 Oct 2023 11:54:49 GMT
Content-Type: text/html
Content-Length: 284237
Last-Modified: Tue, 10 Oct 2023 12:12:13 GMT
Connection: keep-alive
ETag: "65253f9d-4564d"
Accept-Ranges: bytes

<html><head></head><body><header>
<title>http://info.cern.ch</title>
</header>

<h1>http://info.cern.ch - home of the first website</h1>
<p>From here you can:</p>
<ul>
<li><a href="http://info.cern.ch/hypertext/WWW/TheProject.html">Browse the first website</a></li>
<li><a href="http://line-mode.cern.ch/www/hypertext/WWW/TheProject.html">Browse the first website using the line-mode browser simulator</a></li>
<li><a href="http://home.web.cern.ch/topics/birth-web">Learn about the birth of the web</a></li>
<li><a href="http://home.web.cern.ch/about">Learn about CERN, the physics laboratory where the web was born</a></li>
</ul>
</body></html>

wget -O sample.war https://github.com/gounthar/tp07-sample/releases/download/v2026.09.07-083440/sample-2026.09.07-083440.war
# wget sort en 0 même s'il a reçu une page HTML : vérifier que c'est bien une archive
file sample.war
sample.war: Zip archive data, made by v2.0 UNIX, ...

git clone https://github.com/spring-guides/gs-spring-boot.git

<!-- Proxy de l'université pour Maven, qui ignore HTTP_PROXY et HTTPS_PROXY -->
<settings>
  <proxies>
    <proxy>
      <id>univ</id>
      <active>true</active>
      <protocol>http</protocol>
      <host>cache-etu.univ-artois.fr</host>
      <port>3128</port>
    </proxy>
  </proxies>
</settings>

mkdir -p ~/.m2 && cp settings.xml ~/.m2/settings.xml

# Use a Maven image for building the application
FROM maven:3.9-eclipse-temurin-25-alpine
WORKDIR /app

# Clone the Spring Boot application repository
RUN apk add git && git clone https://github.com/spring-guides/gs-spring-boot.git

# Change directory to the application's complete directory
WORKDIR /app/gs-spring-boot/complete

# Build the application using Maven; settings.xml (proxy) is mounted as a build secret, if provided
RUN --mount=type=secret,id=maven-settings,target=/root/.m2/settings.xml mvn package

WORKDIR /app/gs-spring-boot/complete/target

# Command to run the Spring Boot application
CMD ["java", "-jar", "spring-boot-complete-0.0.1-SNAPSHOT.jar"]

#!/bin/sh
echo Building alexellis2/href-counter:build

docker image build --build-arg https_proxy=$https_proxy --build-arg http_proxy=$http_proxy \
    -t alexellis2/href-counter:build . -f Dockerfile.build
docker container create --name extract alexellis2/href-counter:build
docker container cp extract:/go/src/github.com/alexellis/href-counter/app ./app
docker container rm -f extract

echo Building alexellis2/href-counter:latest
docker image build --no-cache -t alexellis2/href-counter:latest .
rm ./app

FROM golang:1.27

WORKDIR /go/src/github.com/alexellis/href-counter/

COPY go.mod .
COPY go.sum .
COPY app.go	.

RUN CGO_ENABLED=0 GOOS=linux go build  -ldflags "-s -w" -o app .

FROM alpine:3.24.2
RUN apk --no-cache add ca-certificates

WORKDIR /root/

COPY --from=0 /go/src/github.com/alexellis/href-counter/app    .

CMD ["./app"]

FROM golang:1.27

WORKDIR /go/src/github.com/alexellis/href-counter/

COPY go.mod .
COPY go.sum .
COPY app.go	.

RUN CGO_ENABLED=0 GOOS=linux go build  -ldflags "-s -w" -o app .

FROM alpine:3.24.2
RUN apk --no-cache add ca-certificates

WORKDIR /root/

COPY --from=0 /go/src/github.com/alexellis/href-counter/app    .

CMD ["./app"]

docker volume ls

FROM alpine:3.24
WORKDIR /repertoire/travail
VOLUME ["/data"]
RUN echo hello > ./world.txt

docker container run \
  -d \
  --read-only \
  --tmpfs /usr/local/apache2/logs \
  --tmpfs /tmp \
  httpd

docker image build -t mon-image .

cat *

Contenu du fichier 1
Contenu du fichier 2
Nouveau contenu du fichier 3

DOCKER_BUILDKIT=0 docker image build -t mon-image-legacy .
docker container run --rm mon-image-legacy ls /mon-dossier

fichier1.txt
fichier2.txt

docker container run -d -p 8000:80 nginx

docker network ls

docker network ls

NETWORK ID     NAME                                                             DRIVER    SCOPE
11b7af7b16e4   bridge                                                           bridge    local
1112832d205b   cours-devops-docker_default                                      bridge    local
7ab15cc28199   docker_volumes-backup-extension-desktop-extension_default        bridge    local
34caf4674478   host                                                             host      local
2a179c7be3b3   none                                                             null      local
0c577a792771   portainer_portainer-docker-extension-desktop-extension_default   bridge    local

docker network inspect bridge

docker network create mon-reseau

docker container run -d --net=mon-reseau --name=app img

docker network create mynet

events {
    worker_connections 1024;
}

http {
    # ❌ AUCUNE directive resolver !

    upstream backend {
        server app-server:8080;  # ❌ ÉCHEC au démarrage !
    }

    server {
        listen 80;
        location / {
            proxy_pass http://backend;
        }
    }
}

events {
    worker_connections 1024;
}

http {
    # DNS interne Docker pour résolution dynamique
    resolver 127.0.0.11 valid=30s ipv6=off;

    server {
        listen 80;
        location / {
            # ✅ Utiliser une variable pour forcer la résolution dynamique
            set $backend_host "app-server:8080";
            proxy_pass http://$backend_host;
        }
    }
}

http {
    resolver 127.0.0.11 valid=30s ipv6=off;

    upstream backend {
        zone backend 64k;               # obligatoire avec resolve
        server app-server:8080 resolve;
    }
    # server { ... proxy_pass http://backend; ... }
}

resolver 127.0.0.11 valid=30s ipv6=off;
#        ^^^^^^^^^^^ ^^^^^^^^^ ^^^^^^^^
#        Adresse DNS  Cache TTL Désactiver IPv6

services:
  webapp:
    image: nginx:1.31.6-alpine3.24
    ports:
      - "8080:80"

  proxy:
    image: nginx:1.31.6-alpine3.24
    ports:
      - "8000:80"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro

docker network connect mynet myapp

# Liste tous les réseaux Docker existants
docker network ls

# Inspecte un réseau spécifique (par exemple, le réseau bridge, d'autres réseaux peuvent être inspectés)
docker network inspect bridge

# Récupère l'identifiant de réseau complet pour le container "web1"
network_id=$(docker container inspect -f '{{.NetworkSettings.Networks.bridge.NetworkID}}' web1)

# Raccourcit l'identifiant du réseau aux premiers 12 caractères
shortened_network_id=$(echo $network_id | cut -c 1-12)

# Liste tous les réseaux docker, en filtrant par l'identifiant du réseau
docker network ls --format "table {{.ID}}\t{{.Name}}" \
  | awk -v network_id="$shortened_network_id" '$1 == network_id {print $2}'

bridge

# Lance un conteneur "nginx" nommé "web2" et l'attache au réseau "mon-reseau"
docker container run --name web2 -d --network mon-reseau nginx

services:
  backend:
    image: mon-app
    logging:
      driver: gelf
      options:
        gelf-address: "udp://logstash:12201"  # ❌ FAUX !
        tag: "backend"

  logstash:
    image: logstash:9.5.3
    ports:
      - "12201:12201/udp"

Error response from daemon: failed to create task for container:
failed to initialize logging driver: gelf: cannot connect to GELF endpoint:
logstash:12201 dial udp: lookup logstash on ...: no such host

services:
  backend:
    logging:
      driver: gelf
      options:
        gelf-address: "udp://localhost:12201"  # ✅ Adresse vue depuis l'hôte

  logstash:
    image: logstash:9.5.3
    ports:
      - "12201:12201/udp"                      # ✅ le port publié rend logstash joignable depuis l'hôte

services:
  webapp:
    image: node:18
    healthcheck:
      test: ["CMD", "curl", "-f", "http://[::1]:3000/health"]  # ❌ FAUX !

healthcheck:
  test: ["CMD", "curl", "-f", "http://localhost:3000/health"]  # ✅ OK (même conteneur)
  # OU
  test: ["CMD", "curl", "-f", "http://127.0.0.1:3000/health"]  # ✅ OK

// frontend/src/config.js
const API_URL = "http://localhost:5000/api";  // ❌ FAUX !

const API_URL = "/api";  // ✅ Relatif → passe par NGINX

const API_URL = process.env.REACT_APP_API_URL || "/api";

services:
  frontend:
    build:
      context: ./frontend
      args:
        # ✅ URL publique qui passe par le reverse proxy
        REACT_APP_API_URL: "/api"

services:
  webapp:
    image: node:18
    environment:
      DATABASE_URL: "postgresql://localhost:5432/mydb"  # ❌ Erreur 1
      REDIS_URL: "redis://127.0.0.1:6379"              # ❌ Erreur 2
    logging:
      driver: gelf
      options:
        gelf-address: "udp://localhost:12201"          # ⚠️ Piège : cette ligne est correcte

  database:
    image: postgres:15

  cache:
    image: redis:7

  logstash:
    image: logstash:9.5.3
    ports:
      - "12201:12201/udp"

#!/bin/sh
docker network create my-net
docker container run -d --net=my-net -p 3306:3306 mysql
docker container run -d --net=my-net -v /docs:/docs --name col1 httpd:2.4.58-bookworm
docker container run -d --net=my-net -v /docs:/docs --name col2 httpd:2.4.58-bookworm

services:

services:
  apache:







  middle:



  db:

services:
  apache:
    image: "my-httpd:2.4"






  middle:



  db:

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"




  middle:



  db:

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"
    environment:
      - MIDDLE_HOST_1=middle


  middle:



  db:

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"
    environment:
      - MIDDLE_HOST_1=middle
    volumes:
      - ./etc/httpd/workers.properties:/etc/httpd/conf/workers.properties
  middle:



  db:

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"
    environment:
      - MIDDLE_HOST_1=middle
    volumes:
      - ./etc/httpd/workers.properties:/etc/httpd/conf/workers.properties
  middle:
    build: .


  db:

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"
    environment:
      - MIDDLE_HOST_1=middle
    volumes:
      - ./etc/httpd/workers.properties:/etc/httpd/conf/workers.properties
  middle:
    build: .
    environment:
      - DB_HOST=db
  db:

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"
    environment:
      - MIDDLE_HOST_1=middle
    volumes:
      - ./etc/httpd/workers.properties:/etc/httpd/conf/workers.properties
  middle:
    build: .
    environment:
      - DB_HOST=db
  db:
    image: "mysql:5.6"

services:
  apache:
    image: "my-httpd:2.4"
    ports:
      - "80:80"
    environment:
      - MIDDLE_HOST_1=middle
    volumes:
      - ./etc/httpd/workers.properties:/etc/httpd/conf/workers.properties
  middle:
    build: .
    environment:
      - DB_HOST=db
  db:
    image: "mysql:5.6"
    ports:
      - "3306:3306"

docker compose up -d
docker compose build
docker compose logs
docker compose stop
docker compose restart
docker compose down

sidekick_service:
    # Configuration for the sidekick service
    image: ${DOCKERHUB_USERNAME}/jenkinsci-tutorials:sidekick_
    stdin_open: true
    tty: true
    entrypoint: sh -c "/usr/local/bin/keygen.sh /ssh-dir"  # Runs the keygen.sh script and specifies the output directory
    volumes:
      - agent-ssh-dir:/ssh-dir  # Mounts the agent-ssh-dir volume to the /ssh-dir path inside the container
    healthcheck:
      test: [ "CMD-SHELL", "[ -f /ssh-dir/conductor_ok ] || exit 1" ]  # Checks if the conductor_ok file exists in the /ssh-dir path
      interval: 5s
      timeout: 10s
      retries: 5

sidekick_service:
    # Configuration for the sidekick service
    image: ${DOCKERHUB_USERNAME}/jenkinsci-tutorials:sidekick_
    stdin_open: true
    tty: true
    entrypoint: sh -c "/usr/local/bin/keygen.sh /ssh-dir"  # Runs the keygen.sh script and specifies the output directory
    volumes:
      - agent-ssh-dir:/ssh-dir  # Mounts the agent-ssh-dir volume to the /ssh-dir path inside the container
    healthcheck:
      test: [ "CMD-SHELL", "[ -f /ssh-dir/conductor_ok ] || exit 1" ]  # Checks if the conductor_ok file exists in the /ssh-dir path
      interval: 5s
      timeout: 10s
      retries: 5

sidekick_service:
    # Configuration for the sidekick service
    image: ${DOCKERHUB_USERNAME}/jenkinsci-tutorials:sidekick_
    stdin_open: true
    tty: true
    entrypoint: sh -c "/usr/local/bin/keygen.sh /ssh-dir"  # Runs the keygen.sh script and specifies the output directory
    volumes:
      - agent-ssh-dir:/ssh-dir  # Mounts the agent-ssh-dir volume to the /ssh-dir path inside the container
    healthcheck:
      test: [ "CMD-SHELL", "[ -f /ssh-dir/conductor_ok ] || exit 1" ]  # Checks if the conductor_ok file exists in the /ssh-dir path
      interval: 5s
      timeout: 10s
      retries: 5

sidekick_service:
    # Configuration for the sidekick service
    image: ${DOCKERHUB_USERNAME}/jenkinsci-tutorials:sidekick_
    stdin_open: true
    tty: true
    entrypoint: sh -c "/usr/local/bin/keygen.sh /ssh-dir"  # Runs the keygen.sh script and specifies the output directory
    volumes:
      - agent-ssh-dir:/ssh-dir  # Mounts the agent-ssh-dir volume to the /ssh-dir path inside the container
    healthcheck:
      test: [ "CMD-SHELL", "[ -f /ssh-dir/conductor_ok ] || exit 1" ]  # Checks if the conductor_ok file exists in the /ssh-dir path
      interval: 5s
      timeout: 10s
      retries: 5

docker compose ps

NAME            IMAGE                  STATUS
myapp-backend   python:3.11-slim      Up 30 seconds (unhealthy)

docker container inspect myapp-backend | grep -A 10 Health

"Health": {
    "Status": "unhealthy",
    "FailingStreak": 5,
    "Log": [
        {
            "ExitCode": 127,  # ← Code 127 = "Command not found"
            "Output": "/bin/sh: curl: not found"
        }
    ]
}

FROM python:3.11-slim

WORKDIR /app

# Installer curl pour le health check
RUN apt-get update && \
    apt-get install -y --no-install-recommends curl && \
    rm -rf /var/lib/apt/lists/*  # ← Nettoyer le cache apt

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY . .

EXPOSE 5000

CMD ["python", "app.py"]

services:
  backend:
    build: ./backend
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:5000/health"]  # ✅ Fonctionne !
      interval: 10s
      timeout: 5s
      retries: 3

services:
  frontend:
    image: node:18-alpine
    healthcheck:
      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://localhost:3000 || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3

services:
  backend:
    image: python:3.11-slim  # ← Déjà contient Python
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/health')"]
      interval: 10s
      timeout: 5s
      retries: 3

services:
  api:
    image: node:18-alpine  # ← Déjà contient Node.js
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:8080/health', (r) => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"]
      interval: 10s
      timeout: 5s
      retries: 3

services:
  webapp:
    image: python:3.11-slim
    # Dockerfile n'installe PAS curl !
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:5000/health"]
      interval: 10s