Upgrade to Pro — share decks privately, control downloads, hide ads and more …

コンテーナーの話

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Ian Lewis Ian Lewis
June 04, 2014
Technology
110
0

 コンテーナーの話

Avatar for Ian Lewis

Ian Lewis

June 04, 2014

More Decks by Ian Lewis

See All by Ian Lewis
Kubernetes Security Best Practices
Avatar for Ian Lewis ianlewis
38
26k
The Enemy Within: Running untrusted code in Kubernetes
Avatar for Ian Lewis ianlewis
0
1.4k
The Enemy Within: Running untrusted code with gVisor
Avatar for Ian Lewis ianlewis
4
1.3k
KubeCon EU Runtime Track Recap
Avatar for Ian Lewis ianlewis
3
1.7k
コンテナによるNoOpsオートメーション
Avatar for Ian Lewis ianlewis
2
190
Google Kubernetes Engine 概要 & アップデート @ GCPUG Kansai Summit Day 2018
Avatar for Ian Lewis ianlewis
2
980
Extending Kubernetes with Custom Resources and Operator Frameworks
Avatar for Ian Lewis ianlewis
10
3.9k
Kubernetesのセキュリティのベストプラクティス
Avatar for Ian Lewis ianlewis
12
17k
Scheduling and Resource Management in Kubernetes
Avatar for Ian Lewis ianlewis
2
1.4k

Other Decks in Technology

See All in Technology
Oracle Cloud Infrastructure：2026年3月度サービス・アップデート
Avatar for oracle4engineer oracle4engineer
PRO
0
320
自分をひらくと次のチャレンジの敷居が下がる
Avatar for aki sudoakiy
5
1.6k
FlutterでPiP再生を実装した話
Avatar for 白井翔大 s9a17
0
240
AWSで2番目にリリースされたサービスについてお話しします(諸説あります)
Avatar for Yuuki Yamashita yama3133
0
110
契約書からの情報抽出を行うLLMのスループットを、バッチ処理を用いて最大40%改善した話
Avatar for SansanTech sansantech
PRO
3
340
OPENLOGI Company Profile for engineer
Avatar for OPENLOGI hr01
1
62k
Babylon.js Japan Activities (2026/4)
Avatar for Limes2018 limes2018
0
140
GitHub Advanced Security × Defender for Cloudで開発とSecOpsのサイロを超える: コードとクラウドをつなぐ、開発プラットフォームのセキュリティ
Avatar for yuriemori yuriemori
1
120
QA組織のAI戦略とAIテスト設計システムAITASの実践
Avatar for SansanTech sansantech
PRO
1
310
ThetaOS - A Mythical Machine comes Alive
Avatar for Martijn aslander
0
230
スクラムを支える内部品質の話
Avatar for IIJ_PR iij_pr
0
170
Amazon Qはアマコネで頑張っています〜 Amazon Q in Connectについて〜
Avatar for Yuuki Yamashita yama3133
1
170

Featured

See All Featured
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
10k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
46
2.7k
How to Align SEO within the Product Triangle To Get 
Buy-In & Support - #RIMC
Avatar for Aleyda Solis aleyda
1
1.5k
Exploring the relationship between traditional SERPs and Gen AI search
Avatar for Ray Grieselhuber raygrieselhuber
PRO
2
3.8k
Prompt Engineering for Job Search
Avatar for Mfonobong Umondia mfonobong
0
240
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.2k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
54k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
122
21k
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
Avatar for Sophie Logan marketingsoph
0
120
世界の人気アプリ100個を分析して見えたペイウォール設計の心得
Avatar for Akihiro Kokubo akihiro_kokubo
PRO
68
38k
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
81
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
170

Transcript

  1. コンテーナーの話

  2. 1. 誰 2. 何 3. 何故

  3. 1. 何 2. 誰 3. 何故

  4. 何

  5. LXC

  6. LinuX Container

  7. •Kernel namespaces (ipc, uts, mount, pid, network and user) Apparmor

    and SELinux profiles Seccomp policies Chroots (using pivot_root) Kernel capabilities Control groups (cgroups)

  8. import lxc container = lxc.Container("p1") container.create("ubuntu") container.start() container.get_ips() container.stop()

  9. PYTHON

  10. PYTHON3

  11. chroot

  12. None

  13. namespaces

  14. mount UTS Network SysV IPC

  15. cgroups

  16. Resource limits Prioritization Accounting Control

  17. 誰

  18. 2006

  19. None

  20. 2014

  21. EVERYTHING at Google runs in a container

  22. None
  23. None
  24. None
  25. None

  26. (￣∇￣;)

  27. April 2008

  28. None
  29. None
  30. None

  31. CoreOS

  32. 何故

  33. セキュリティ

  34. リソース

  35. パフォーマンス

  36. スケーラビリティ

  37. THE END