Abstract:Many modern software applications are composed of several components (e.g., a web application is composed of a web server component and a database component). Each of these components can be instantiated as a container from a Docker image. Each Docker image corresponds to a software package (e.g, Apache or MySQL) along with various configuration details. Such containerization simplifies, speeds up, and enables the systematic deployment and maintenance of components at scale. As a natural progression of Docker, applications are now using "Docker Compose" to compose multi-component (aka. multi-container) applications by specifying the various components and their relations – in turn simplifying the deployment and maintenance of complex multi-component applications. This paper reports on a study of 4,103 open-source Github projects that use Docker Compose. Our primary goal is to better understand how it is used in the wild. We observe that over a quarter (26.8%) of the studied projects use Docker Compose for single-component applications. The Docker Compose file for an application is infrequently updated with 30% of such files never changed. We also observe that most of the composed applications leverage basic Docker Compose options instead of using advanced options (e.g., just 4.3% of the multi-component applications use a security related option). While Docker Compose has evolved over the years (it is currently at version 3), applications rarely adopt the new versions and 2.4% of the studied projects downgraded to an earlier version due to platform and option compatibility issues. Our study highlights that while applications are using Docker Compose, they appear to be content with its basic options and earlier versions in many instances. Future studies are needed to better understand how to improve the uptake of the more advanced aspects of Docker Compose, if they are needed at all.

A study of how Docker Compose is used to compose multi-component systems

Patterns of multi-container composition for service orchestration with Docker Compose

Visual Notations in Container Orchestrations: An Empirical Study with Docker Compose

Challenges in Docker Development: A Large-scale Study Using Stack Overflow

An empirical analysis of the Docker container ecosystem on GitHub

Revisiting Dockerfiles in Open Source Software Over Time

Containerization and Orchestration: Implementing OpenShift and Docker

On Security Measures for Containerized Applications Imaged with Docker

Longitudinal Risk-based Security Assessment of Docker Software Container Images

Container Technologies for ARM Architecture: A Comprehensive Survey of the State-of-the-Art

On The Relation Between Outdated Docker Containers, Severity Vulnerabilities and Bugs

A qualitative and quantitative analysis of container engines

Navigating the Docker Ecosystem: A Comprehensive Taxonomy and Survey

Microservice Architecture Practices and Experience: a Focused Look on Docker Configuration Files

Resource Management Schemes for Cloud-Native Platforms with Computing Containers of Docker and Kubernetes

Hosted Universal Composition: Models, Languages and Infrastructure in mashArt

Component-aware Orchestration of Cloud-based Enterprise Applications, from TOSCA to Docker and Kubernetes

Evaluation of Docker Containers for Scientific Workloads in the Cloud

Container Performance and Vulnerability Management for Container Security Using Docker Engine

Research and Design of Docker Technology Based Authority Management System