Share
Embed
Transcript
19 slides
-
ࣗݾհ w τχʔϞϦεϏδωεωʔϜ w ຊ໊ฏాٛ w *5ؔ࿈ͷձࣾۈ w ࣄۀձ͚ࣾʹ4ZTUFN*OUFHSBUJPOΛߦ͏৫ʹॴଐ w
%8)ɺ#VTJOFTT*OUFMMJHFODFͷࣄ͕ϝΠϯ w ྲྀߦͷݴ༿Ͱݴ͏ͱɺ#JH%BUBͱ͔"OBMZUJDT w ৬छϓϩδΣΫτϚωʔδϟʔ·ͨΞʔΩςΫτʢϓϩδΣΫτʹΑΔʣ w ΞϓϦέʔγϣϯ͔Πϯϑϥ͔ͱݴͬͨΒɺΞϓϦέʔγϣϯ୲ -
QVMMͯ͠ΈΔ w ৭ʑͱ QVMMͯ͠Έͨ w ۤ࿑ͨ͠ͷ͜ͷΤϥʔ IUUQGPSVNBMQJOFMJOVYPSHGPSVNHFOFSBMEJTDVTTJPOXJOEPXTBMQJOFEPDLFSDPNNFOU w ͜͜ʹॻ͍ͯ͋ΔखॱͰղܾ #!/bin/sh
apk add docker sysctl -w kernel.grsecurity.chroot_deny_chmod=0 sysctl -w kernel.grsecurity.chroot_deny_mknod=0 service docker start sleep 5 docker --version docker pull hello-world docker pull alpine docker images localhost:/media# docker pull ianblenke/xfce Using default tag: latest latest: Pulling from ianblenke/xfce a3ed95caeb02: Pull complete aac0c133338d: Extracting 2.235 MB/2.235 MB 762372f10b38: Download complete failed to register layer: ApplyLayer exit status 1 stdout: stderr: chmod /bin/bbsuid: permission denied failed to register layer: ApplyLayer exit status 1 stdout: stderr: chmod /bin/mount: permission denied localhost:~# docker images REPOSITORY TAG IMAGE ID CREATED SIZE docker latest 3c926f66728e 2 days ago 75.7 MB frolvlad/alpine-python3 latest 88404569db3b 9 days ago 58.06 MB frolvlad/alpine-go latest b0840d40aade 2 weeks ago 179.1 MB frolvlad/alpine-bash latest f30b8e53e1ea 2 weeks ago 14.78 MB jazzdd/alpine-flask latest b1bfa267edec 2 weeks ago 80.21 MB alpine latest d7a513a663c1 2 weeks ago 4.794 MB x11docker/lxde latest 1398a64f70a6 6 months ago 423.2 MB ianblenke/xfce latest b3c21c878fb2 12 months ago 470.5 MB -
չ͍͠ͷͰ͜Μͳ͜ͱΛ w ίϚϯυϥΠϯ্ʹը૾Λදࣔ JNHUYUίϚϯυ ˞ຊ໐ͬͯ·ͤΜ w ίϚϯυϥΠϯ্ͰNQ࠶ੜ NQH BQLͰJOTUBMM w
$6*ͷϒϥβ MZOY BQLͰJOTUBMM -
3BTQCFSSZ1JͰͬͯΈͨ w ͜ͷαΠτͷखॱͰ"MQJOFΛΠϯετʔϧ IUUQXJLJBMQJOFMJOVYPSHXJLJ3BTQCFSSZ@1J w "3.༻ͷEPDLFSͷύοέʔδ͋Γ w 3BTQCFSSZ1JͰ(6*ߏஙΛஅ೦ ɾɾɾ9TFSWFSؔ࿈ͷΤϥʔ͕ղফͰ͖ͳ͔ͬͨ IUUQTQLHTBMQJOFMJOVYPSHQBDLBHFT
OBNFEPDLFSCSBODIWSFQPBSDIBSNIGNBJOUBJOFS $%ͱൺͯ͜ͷେ͖͞ ແઢ-"/ɺ#MVFUPPUI͕ೖͬͯ= εΠοναΠΤϯεͰͷՁ֨ -
ࣄۀձࣾʹͱͬͯ%PDLFS༗ӹ͔ʁ w ΞϓϦέʔγϣϯ୲ͷݱΤϯδχΞ͔Β͢Δͱ%PDLFSඇৗʹັྗతʹөΔɻ w ͳͥͳΒɺΠϯϑϥͷ4DSBQ#VJME͕ͦ͢͠͏ͰɺԼهͷΑ͏ͳΛղܾͰ͖ͦ͏ɻ 1MBO 3% %FTJHO #VJME%FQMPZ 6"5
1MBO 3% %FTJHO #VJME%FQMPZ 6"5 "QQ 5FBN *OGSB 5FBN 1SPKFDU5JNFMJOF ͜ͷ࣌Ͱਖ਼͍͠ ඇػೳཁ݅ΛܾΊΔͷඇৗʹࠔ ͜͜Ͱ 1SPPG0G$PODFQU ͬͱ͖͍ͨ ͜ͷ࣌Ͱඇػೳཁ͕݅ ܾ·ͬͯͳ͍ͱ࡞ۀ͕ਐ·ͳ͍ ϛυϧΤΞͱ04ͷ ૬ੑͷ͕໌ ͦΜͳʹ؆୯ʹ αʔόʔ࡞Εͳ͍ ࠓ͞Βઃఆมߋແཧ ύϑΥʔϚϯεͷ ͕໌ ඇػೳཁ݅ɺ Ͳ͏ͯ͠ ͪΌΜͱܾΊͳ͍ͷʁ *OGSBνʔϜͷՌɺαʔόʔͦͷͷͱେͳઃఆϦετɺߏஙखॱॻͰ͋Δɻ ͦΕΒͷߋ৽ͱ࠶࣮ࢪɺϓϩδΣΫτͷίετΛߟ͑Δͱݱ࣮తͰͳ͍