Upgrade to Pro — share decks privately, control downloads, hide ads and more …

コンテーナーの話

Avatar for Ian Lewis Ian Lewis
June 04, 2014
Technology
0
110

 コンテーナーの話

Avatar for Ian Lewis

Ian Lewis

June 04, 2014
Tweet

More Decks by Ian Lewis

See All by Ian Lewis
Kubernetes Security Best Practices
Avatar for Ian Lewis ianlewis
38
26k
The Enemy Within: Running untrusted code in Kubernetes
Avatar for Ian Lewis ianlewis
0
1.4k
The Enemy Within: Running untrusted code with gVisor
Avatar for Ian Lewis ianlewis
4
1.3k
KubeCon EU Runtime Track Recap
Avatar for Ian Lewis ianlewis
3
1.7k
コンテナによるNoOpsオートメーション
Avatar for Ian Lewis ianlewis
2
190
Google Kubernetes Engine 概要 & アップデート @ GCPUG Kansai Summit Day 2018
Avatar for Ian Lewis ianlewis
2
970
Extending Kubernetes with Custom Resources and Operator Frameworks
Avatar for Ian Lewis ianlewis
10
3.9k
Kubernetesのセキュリティのベストプラクティス
Avatar for Ian Lewis ianlewis
12
17k
Scheduling and Resource Management in Kubernetes
Avatar for Ian Lewis ianlewis
2
1.4k

Other Decks in Technology

See All in Technology
制約が導く迷わない設計 〜 信頼性と運用性を両立するマイナンバー管理システムの実践 〜
Avatar for ないとー bwkw
3
960
インフラエンジニア必見!Kubernetesを用いたクラウドネイティブ設計ポイント大全
Avatar for 高棹大樹 daitak
1
370
量子クラウドサービスの裏側　〜Deep Dive into OQTOPUS〜
Avatar for OQTOPUS oqtopus
0
130
AIエージェントを開発しよう！-AgentCore活用の勘所-
Avatar for YukiOgawa yukiogawa
0
170
名刺メーカーDevグループ 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
0
1k
Introduction to Sansan, inc / Sansan Global Development Center, Inc.
Avatar for Sansan, Inc. sansan33
PRO
0
3k
30万人の同時アクセスに耐えたい！新サービスの盤石なリリースを支える負荷試験 / SRE Kaigi 2026
Avatar for GENDA genda
4
1.3k
プロポーザルに込める段取り八分
Avatar for ShoheiMitani shoheimitani
1
280
StrandsとNeptuneを使ってナレッジグラフを構築する
Avatar for やくも yakumo
1
120
茨城の思い出を振り返る ～CDKのセキュリティを添えて～ / 20260201 Mitsutoshi Matsuo
Avatar for SHIFT EVOLVE shift_evolve
PRO
1
320
Introduction to Sansan for Engineers / エンジニア向け会社紹介
Avatar for Sansan, Inc. sansan33
PRO
6
68k
小さく始めるBCP ― 多プロダクト環境で始める最初の一歩
Avatar for kekke-n kekke_n
1
440

Featured

See All Featured
エンジニアに許された特別な時間の終わり
Avatar for watany watany
106
230k
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
28
2.4k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
14k
The innovator’s Mindset - 
Leading Through an Era of Exponential Change - McGill University 2025
Avatar for Jean-Marc De Jonghe jdejongh
PRO
1
93
The AI Search Optimization Roadmap by Aleyda Solis
Avatar for Aleyda Solis aleyda
1
5.2k
Avoiding the “Bad Training, Faster” Trap in the Age of AI
Avatar for Mike Taylor tmiket
0
76
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
46
2.7k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
Avatar for Stéphanie Walter stephaniewalter
287
14k
Agile Leadership in an Agile Organization
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
83
Conquering PDFs: document understanding beyond plain text
Avatar for Ines Montani inesmontani
PRO
4
2.3k
Designing for humans not robots
Avatar for Tammie Lister tammielis
254
26k

Transcript

  1. コンテーナーの話

  2. 1. 誰 2. 何 3. 何故

  3. 1. 何 2. 誰 3. 何故

  4. 何

  5. LXC

  6. LinuX Container

  7. •Kernel namespaces (ipc, uts, mount, pid, network and user) Apparmor

    and SELinux profiles Seccomp policies Chroots (using pivot_root) Kernel capabilities Control groups (cgroups)

  8. import lxc container = lxc.Container("p1") container.create("ubuntu") container.start() container.get_ips() container.stop()

  9. PYTHON

  10. PYTHON3

  11. chroot

  12. None

  13. namespaces

  14. mount UTS Network SysV IPC

  15. cgroups

  16. Resource limits Prioritization Accounting Control

  17. 誰

  18. 2006

  19. None

  20. 2014

  21. EVERYTHING at Google runs in a container

  22. None
  23. None
  24. None
  25. None

  26. (￣∇￣;)

  27. April 2008

  28. None
  29. None
  30. None

  31. CoreOS

  32. 何故

  33. セキュリティ

  34. リソース

  35. パフォーマンス

  36. スケーラビリティ

  37. THE END