← All books

orch · Edition 1.0

Inside orch

Building and Operating a Docker Orchestrator in Go

A source-based engineering study of orch: Go control planes, Docker workers, state ownership, scheduling, failure recovery, and the limits of executable integration.

Aleksandar Popovic · 40 chapters · 6 appendices · English

Read online Download PDF Download EPUB
Explore notes from this book Find a guided learning path →
Inside orch — Building and Operating a Docker Orchestrator in Go

The complete book

Contents.

Read at your own pace.
Every chapter is available in full.

Preface

  1. Preface5 min

Chapters

  1. Chapter 1 - Why Build a Container Orchestrator?9 min
  2. Chapter 2 - A Repository Built for Reasoning9 min
  3. Chapter 3 - Boot the Lab and Deploy the First Service11 min
  4. Chapter 4 - Domain Models and State Machines10 min
  5. Chapter 5 - Service Specifications, Resources, and Ports10 min
  6. Chapter 6 - Follow One Request Through the Control Plane9 min
  7. Chapter 7 - HTTP Contracts and Compatible APIs10 min
  8. Chapter 8 - A CLI That Operators Can Automate10 min
  9. Chapter 9 - Persistence, Transactions, and Optimistic Concurrency10 min
  10. Chapter 10 - A Deterministic Scheduler10 min
  11. Chapter 11 - Reconciliation as Repeated Convergence9 min
  12. Chapter 12 - Idempotent Docker Operations and Drift10 min
  13. Chapter 13 - Agents, Heartbeats, and Task Reports10 min
  14. Chapter 14 - Health Checks That Respect Trust Boundaries10 min
  15. Chapter 15 - Events, Audits, and Notification Boundaries10 min
  16. Chapter 16 - Log Streaming Without Losing Control10 min
  17. Chapter 17 - Rolling Updates and Rollback Invariants10 min
  18. Chapter 18 - Safe Deletion and Resource Cleanup10 min
  19. Chapter 19 - Offline Nodes, Draining, and Rescheduling10 min
  20. Chapter 20 - Endpoint Discovery and Internal DNS10 min
  21. Chapter 21 - Ingress, Host Networking, and the Overlay Roadmap9 min
  22. Chapter 22 - Autoscaling Decisions and Missing Integration10 min
  23. Chapter 23 - Authentication, Authorization, and Node Trust9 min
  24. Chapter 24 - Encrypted Secrets and Configuration Redaction11 min
  25. Chapter 25 - Registry Credentials and Immutable Image Identity10 min
  26. Chapter 26 - Security Contexts, Admission, and Policy9 min
  27. Chapter 27 - Namespaces and the Limits of Multi-Tenancy9 min
  28. Chapter 28 - Quotas and Usage Accounting9 min
  29. Chapter 29 - Supply Chain Designs Without False Guarantees10 min
  30. Chapter 30 - GitOps, Drift, and Controlled Reconciliation9 min
  31. Chapter 31 - Finite Jobs and Time-Based Work10 min
  32. Chapter 32 - Local Volumes, Claims, and Workload Topology10 min
  33. Chapter 33 - Extension Interfaces and a Plugin Roadmap9 min
  34. Chapter 34 - Leader Election and the Durable HA Boundary9 min
  35. Chapter 35 - Upgrades, Migrations, Maintenance, and Retention9 min
  36. Chapter 36 - Fakes, Property Tests, Fuzzing, and Contracts9 min
  37. Chapter 37 - Failure Injection and Recovery Evidence9 min
  38. Chapter 38 - Metrics, Dashboards, and Actionable Signals9 min
  39. Chapter 39 - Performance and Scale Tests That Say What They Measure9 min
  40. Chapter 40 - Release a System You Can Honestly Operate9 min

Appendices

  1. Appendix A - CLI, API, and Configuration Reference9 min
  2. Appendix B - Lifecycle States and Invariant Reference7 min
  3. Appendix C - Commit Atlas and Original Prompt Crosswalk10 min
  4. Appendix D - Worked Exercises and Design Solutions9 min
  5. Appendix E - Operator Runbooks and Measurement Contracts6 min
  6. Appendix F - Glossary, Bibliography, and Boundary Index18 min

Aleksandar Popovic · Copyright © 2026 Aleksandar Popovic · All rights reserved. Licensing and attribution