NodeJS-todo

In this Repo, I will try to dockerize a sample Node JS-todo Application using Dockerfile, create a docker image and run a container based on that docker image and also will push that docker Image to Amazon Elastic Conatiner Registry(E.C.R) for scanning the vulnerabilities.

Prerequisites:

-> An AWS account with EC2 and ECR access.

Step 1:

1. First Find a sample NodeJS app source code available on opensource or you can fork this repo and use this.

2. After Writing/Finding a Sample Node JS application, Try to run it locally on your laptop by installing Node and npm by using following commands.

sudo apt install nodejs

sudo apt install npm

npm install

node app.js

3. You can also skip the second step if you want to use docker.

Step 2: Setting Up the EC2 Instance

1. Create an EC2 Virtual machine of any type like Ubuntu, CentOS.. and Install Git and Docker on it using suitable commands like yum or apt-get based on your type of EC2 instance.

2. After installation, Clone this repo using the following command.

git clone https://github.com/AnilKumar-Noolu/NodeJS-todo-app.git

3. After the repo is cloned, type ls command to view the Repo that is downloaded locally on your EC2 machine.

Step 3: Dockerizing the NodeJS Application

1. Create your Dockerfile for the above NodeJS Appliocation. In Dockerfile, we are exposing this NodeJS todo application on Port: 8000.

2. Now build this Dockerfile using the build command.

docker build -t nodejs-todo .

3. On Successfully building this Dockerfile, you can view the images created successfully using the command. docker images

4. Once, you verified that the image is successfully created, Now create a Container to run the application using the following command.

docker run -d -p 8000:8000 nodejs-todo:latest

5. Here, we are exposing our NodeJS Application to the Outside World using 8000 Port. Enter the docker ps to know the status of the running Container.

6. Now Check the browser by pasting the <Public_IP_address:8080> You can see that the application is running on your Browser.

Step 4: Pushing the Image to DockerHub

1. Now Since the Container is running fine, we can store the Docker Image to Repository and can use it when we really need it. For that we can use DockerHub, Amazon ECR, Jfrog Artifactory etc..

2. Now, we will see how we will push that image to DockerHub.

3. Firstly create an account in DockerHub using email and Password.

4. Login to the DockerHub inside your instance using username and password with following command.

docker login

5. Then you need to Tag that image first before pushing it to the DockerHub. Tag that Image using the following command.

docker tag nodejs-todo:latest <your_dockerhub_username>/nodejs-todo:latest

6. Once the tagging is done, Then Push it to the DockerHub Using the following command:

docker push <your_dockerhub_username>/nodejs-todo:latest

7. After few seconds, you can see that the Image you tagged is successfully pushed to your DockerHub Account.

STEP 5: Pushing the Image to Amazon ELastic Container Registry

1. Open the ECR Console.

2. Click on "Create repository"

3. Enter a name for your repository, select pribvate access and Check for Scan on Push Option and click "Create repository"

4. Open the AWS CLI on your local machine

5. Run the following command to authenticate your Docker client with ECR:

aws ecr get-login-password | docker login --username AWS --password-stdin <your-account-id>.dkr.ecr.<region>.amazonaws.com Replace and with your actual values

6. Run the following command to tag your Docker image:

docker tag <image-name>:<tag> <your-account-id>.dkr.ecr.<region>.amazonaws.com/<repository-name>:<tag> Replace , , , and with your actual values

7. Verify that the tag has been applied to your Docker image by running docker images

8. Run the following command to push your Docker image to ECR:

docker push <your-account-id>.dkr.ecr.<region>.amazonaws.com/<repository-name>:<tag> Replace , , and with your actual values

9. Wait for the push to complete and verify that your Docker image is now in your ECR repository by refreshing the ECR Console.

10. You can also see the Vulnerabilities Present in that Image which are classified as HIGH, MEDIUM, LOW and you can take steps later to eliminate that vulnerabilities.

Congratulations, you have successfully pushed a Docker image to Amazon ECR!