docker-compose.ymlを使ったAWS ECS+Fargate構築・デプロイ
DockerとAWSが提携したことによりdocker-compose.yamlでECS+Fargate構築ができるようになったので試してみた、恐らく現状一番簡単にECS+Fargate構築する方法だと感じた
導入確認
Amazon ECS用のコンテキスト作成
AWS認証は既存Profileを使う
$ docker context create ecs docker-lamp-ecs
? Create a Docker context using: An existing AWS profile
? Select AWS Profile toyscreation-sandbox
Successfully created ecs context "docker-lamp-ecs"
コンテキスト確認
$ docker context ls
NAME TYPE DESCRIPTION DOCKER ENDPOINT KUBERNETES ENDPOINT ORCHESTRATOR
default * moby Current DOCKER_HOST based configuration unix:///var/run/docker.sock swarm
docker-lamp-ecs ecs
コンテキスト切替
$ docker context use docker-lamp-ecs
docker-lamp-ecs
サンプル用 docker-compose.yml
※ Fargateの仕様でポートは合わせないとダメ
version: '3'
services:
web:
image: nginx:alpine
ports:
- "80:80"
デプロイ
初回はネットワークやLB作成で完了まで数分必要
$ docker compose up
[+] Running 14/14
⠿ docker-lamp-ecs CreateComplete 214.0s
⠿ LogGroup CreateComplete 3.0s
⠿ DefaultNetwork CreateComplete 6.0s
⠿ Cluster CreateComplete 7.0s
⠿ WebTCP80TargetGroup CreateComplete 2.0s
⠿ CloudMap CreateComplete 47.0s
⠿ WebTaskExecutionRole CreateComplete 20.0s
⠿ DefaultNetworkIngress CreateComplete 1.0s
⠿ Default80Ingress CreateComplete 0.0s
⠿ LoadBalancer CreateComplete 93.0s
⠿ WebTaskDefinition CreateComplete 3.0s
⠿ WebServiceDiscoveryEntry CreateComplete 2.0s
⠿ WebTCP80Listener CreateComplete 3.0s
⠿ WebService CreateComplete
起動確認
$ docker compose ps
NAME SERVICE STATUS PORTS
task/docker-lamp-ecs/fe7462a926564eebb687108072cad1ce web Running docke-LoadB-16JYFI6MV3SFP-1588601394.ap-northeast-1.elb.amazonaws.com:80->80/http
$ curl http://docke-loadb-16jyfi6mv3sfp-1588601394.ap-northeast-1.elb.amazonaws.com
<!DOCTYPE html>
<html>
~略~
</html>
削除（コンテナ、LB全てが削除、注意が必要）
$ docker compose down
[+] Running 14/14
⠿ docker-lamp-ecs DeleteComplete 54.0s
⠿ DefaultNetworkIngress DeleteComplete 1.0s
⠿ WebService DeleteComplete 2.0s
⠿ Default80Ingress DeleteComplete 1.0s
⠿ WebTCP80Listener DeleteComplete 2.0s
⠿ WebTaskDefinition DeleteComplete 2.0s
⠿ Cluster DeleteComplete 2.0s
⠿ WebServiceDiscoveryEntry DeleteComplete 1.0s
⠿ CloudMap DeleteComplete 47.0s
⠿ LogGroup DeleteComplete 2.0s
⠿ WebTaskExecutionRole DeleteComplete 2.0s
⠿ WebTCP80TargetGroup DeleteComplete 0.0s
⠿ LoadBalancer DeleteComplete 1.1s
⠿ DefaultNetwork DeleteComplete
自分のDockerイメージでデプロイ
素のnginxコンテナを作成しても意味が無いので
作成したDockerイメージを使いデプロイを行う
Dockerfile
FROM nginx:alpine
COPY settings/default.conf /etc/nginx/conf.d/default.conf
COPY settings/nginx.conf /etc/nginx/nginx.conf
COPY project/html /var/www/html
サンプルHTML
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>TEST</title>
</head>
<body>
TEST
</body>
</html>
ECRにレジストリ作成
$ aws ecr create-repository --repository-name nginx --region ap-northeast-1 --profile toyscreation-sandbox
{
"repository": {
"repositoryArn": "arn:aws:ecr:ap-northeast-1:689371460795:repository/nginx",
"registryId": "689371460795",
"repositoryName": "nginx",
"repositoryUri": "689371460795.dkr.ecr.ap-northeast-1.amazonaws.com/nginx",
"createdAt": "2021-05-22T15:37:22+09:00",
"imageTagMutability": "MUTABLE",
"imageScanningConfiguration": {
"scanOnPush": false
},
"encryptionConfiguration": {
"encryptionType": "AES256"
}
}
}
コンテナビルド
上記で作成したリポジトリ名と同じになるようにビルド
タグ（latest）は適時変更、このイメージが実行環境
$ docker build -t 689371460795.dkr.ecr.ap-northeast-1.amazonaws.com/nginx:latest -f Dockerfile .
$ docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
689371460795.dkr.ecr.ap-northeast-1.amazonaws.com/nginx latest ba6f4a7d15cf 22 hours ago 22.6MB
ECRにログイン
$ aws ecr get-login-password --region ap-northeast-1 --profile toyscreation-sandbox | docker login --username AWS --password-stdin 689371460795.dkr.ecr.ap-northeast-1.amazonaws.com
Login Succeeded
ECRにイメージをプッシュ
$ docker push 689371460795.dkr.ecr.ap-northeast-1.amazonaws.com/nginx:latest
確認
$ aws ecr list-images --repository-name nginx --region ap-northeast-1 --profile toyscreation-sandbox
{
"imageIds": [
{
"imageDigest": "sha256:52bf40057dad5518478a8cb5d09bfe2c983165c1138f3541a6fdab8c9b52e44b",
"imageTag": "latest"
}
]
}
デプロイ
サンプル用 docker-compose-sandbox.yaml
version: '3'
services:
web:
image: 689371460795.dkr.ecr.ap-northeast-1.amazonaws.com/nginx:latest
ports:
- 80:80
デプロイ実行
$ docker compose -f docker-compose-sandbox.yaml up
[+] Running 14/14
⠿ sample2 CreateComplete 172.0s
⠿ WebTCP80TargetGroup CreateComplete 1.0s
⠿ LogGroup CreateComplete 2.0s
⠿ DefaultNetwork CreateComplete 6.0s
⠿ WebTaskExecutionRole CreateComplete 18.0s
⠿ CloudMap CreateComplete 47.0s
⠿ Cluster CreateComplete 6.0s
⠿ DefaultNetworkIngress CreateComplete 1.0s
⠿ Default80Ingress CreateComplete 1.0s
⠿ LoadBalancer CreateComplete 92.0s
⠿ WebTaskDefinition CreateComplete 3.0s
⠿ WebServiceDiscoveryEntry CreateComplete 2.0s
⠿ WebTCP80Listener CreateComplete 3.0s
⠿ WebService CreateComplete
起動確認
$ docker compose ps
NAME SERVICE STATUS PORTS
task/sample2/a80d925f7cf34623a89532baef64ae08 web Running sampl-LoadB-1UN021W7UW34O-1036249040.ap-northeast-1.elb.amazonaws.com:80->80/http
$ curl sampl-LoadB-1UN021W7UW34O-1036249040.ap-northeast-1.elb.amazonaws.com
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>TEST</title>
</head>
<body>
TEST
</body>
ファイル変更がある場合は新たにコンテナビルドしてECRにプッシュしdocker compose upすれば反映
docker-compose.yaml にECR特有ルールを記述することでVPC指定やオートスケール設定が可能
そこら辺はまた別の機会に
いいね！と思ったら LGTM お願いします 
【PR】週末ハッカソンというイベントやってます！ → https://weekend-hackathon.toyscreation.jp/about/