Upgrade to Pro — share decks privately, control downloads, hide ads and more …

コンテーナーの話

Avatar for Ian Lewis Ian Lewis
June 04, 2014
Technology
0
110

 コンテーナーの話

Avatar for Ian Lewis

Ian Lewis

June 04, 2014
Tweet

More Decks by Ian Lewis

See All by Ian Lewis
Kubernetes Security Best Practices
Avatar for Ian Lewis ianlewis
38
26k
The Enemy Within: Running untrusted code in Kubernetes
Avatar for Ian Lewis ianlewis
0
1.4k
The Enemy Within: Running untrusted code with gVisor
Avatar for Ian Lewis ianlewis
4
1.3k
KubeCon EU Runtime Track Recap
Avatar for Ian Lewis ianlewis
3
1.7k
コンテナによるNoOpsオートメーション
Avatar for Ian Lewis ianlewis
2
190
Google Kubernetes Engine 概要 & アップデート @ GCPUG Kansai Summit Day 2018
Avatar for Ian Lewis ianlewis
2
970
Extending Kubernetes with Custom Resources and Operator Frameworks
Avatar for Ian Lewis ianlewis
10
3.9k
Kubernetesのセキュリティのベストプラクティス
Avatar for Ian Lewis ianlewis
12
17k
Scheduling and Resource Management in Kubernetes
Avatar for Ian Lewis ianlewis
2
1.4k

Other Decks in Technology

See All in Technology
Sansan Engineering Unit 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
1
3.9k
マーケットプレイス版Oracle WebCenter Content For OCI
Avatar for oracle4engineer oracle4engineer
PRO
5
1.6k
データの整合性を保ちたいだけなんだ
Avatar for ShoheiMitani shoheimitani
8
3.1k
Bill One急成長の舞台裏 開発組織が直面した失敗と教訓
Avatar for SansanTech sansantech
PRO
2
380
日本の85%が使う公共SaaSは、どう育ったのか
Avatar for たけだ taketakekaho
1
230
OpenShiftでllm-dを動かそう！
Avatar for jpishikawa jpishikawa
0
110
SREチームをどう作り、どう育てるか ― Findy横断SREのマネジメント
Avatar for adachi.ryo rvirus0817
0
300
プロダクト成長を支える開発基盤とスケールに伴う課題
Avatar for yuu26 yuu26
4
1.3k
生成AIを活用した音声文字起こしシステムの2つの構築パターンについて
Avatar for Kazuki Miura miu_crescent
PRO
2
210
制約が導く迷わない設計 〜 信頼性と運用性を両立するマイナンバー管理システムの実践 〜
Avatar for ないとー bwkw
3
960
クレジットカード決済基盤を支えるSRE - 厳格な監査とSRE運用の両立 (SRE Kaigi 2026)
Avatar for capytan capytan
6
2.8k
Cosmos World Foundation Model Platform for Physical AI
Avatar for Takuya MINAGAWA takmin
0
930

Featured

See All Featured
Un-Boring Meetings
Avatar for Sebastian Deterding codingconduct
0
200
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
Mozcon NYC 2025: Stop Losing SEO Traffic
Avatar for Sam Torres samtorres
0
140
Utilizing Notion as your number one productivity tool
Avatar for Mfonobong Umondia mfonobong
3
220
Public Speaking Without Barfing On Your Shoes - THAT 2023
Avatar for David Neal reverentgeek
1
310
KATA
Avatar for Megan Lloyd mclloyd
PRO
34
15k
The Art of Delivering Value - GDevCon NA Keynote
Avatar for David Neal reverentgeek
16
1.8k
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
74
5k
Kristin Tynski - Automating Marketing Tasks With AI
Avatar for Tech SEO Connect techseoconnect
PRO
0
140
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
231
22k
Paper Plane (Part 1)
Avatar for Katie Cordina Lindsey katiecoart
PRO
0
4.3k
The Curious Case for Waylosing
Avatar for Cassini Nazir cassininazir
0
240

Transcript

  1. コンテーナーの話

  2. 1. 誰 2. 何 3. 何故

  3. 1. 何 2. 誰 3. 何故

  4. 何

  5. LXC

  6. LinuX Container

  7. •Kernel namespaces (ipc, uts, mount, pid, network and user) Apparmor

    and SELinux profiles Seccomp policies Chroots (using pivot_root) Kernel capabilities Control groups (cgroups)

  8. import lxc container = lxc.Container("p1") container.create("ubuntu") container.start() container.get_ips() container.stop()

  9. PYTHON

  10. PYTHON3

  11. chroot

  12. None

  13. namespaces

  14. mount UTS Network SysV IPC

  15. cgroups

  16. Resource limits Prioritization Accounting Control

  17. 誰

  18. 2006

  19. None

  20. 2014

  21. EVERYTHING at Google runs in a container

  22. None
  23. None
  24. None
  25. None

  26. (￣∇￣;)

  27. April 2008

  28. None
  29. None
  30. None

  31. CoreOS

  32. 何故

  33. セキュリティ

  34. リソース

  35. パフォーマンス

  36. スケーラビリティ

  37. THE END