Upgrade to Pro — share decks privately, control downloads, hide ads and more …

コンテーナーの話

Avatar for Ian Lewis Ian Lewis
June 04, 2014
Technology
0
100

 コンテーナーの話

Avatar for Ian Lewis

Ian Lewis

June 04, 2014
Tweet

More Decks by Ian Lewis

See All by Ian Lewis
Kubernetes Security Best Practices
Avatar for Ian Lewis ianlewis
38
26k
The Enemy Within: Running untrusted code in Kubernetes
Avatar for Ian Lewis ianlewis
0
1.3k
The Enemy Within: Running untrusted code with gVisor
Avatar for Ian Lewis ianlewis
4
1.2k
KubeCon EU Runtime Track Recap
Avatar for Ian Lewis ianlewis
3
1.6k
コンテナによるNoOpsオートメーション
Avatar for Ian Lewis ianlewis
2
160
Google Kubernetes Engine 概要 & アップデート @ GCPUG Kansai Summit Day 2018
Avatar for Ian Lewis ianlewis
2
940
Extending Kubernetes with Custom Resources and Operator Frameworks
Avatar for Ian Lewis ianlewis
10
3.8k
Kubernetesのセキュリティのベストプラクティス
Avatar for Ian Lewis ianlewis
12
17k
Scheduling and Resource Management in Kubernetes
Avatar for Ian Lewis ianlewis
2
1.4k

Other Decks in Technology

See All in Technology
ハッカソン by 生成AIハッカソンvol.05
Avatar for 1ft-seabass 1ftseabass
PRO
0
170
Zephyr RTOSを使った開発コンペに参加した件
Avatar for misoji engineer iotengineer22
1
180
How Community Opened Global Doors
Avatar for hiroramos hiroramos4
PRO
1
140
事業成長の裏側：エンジニア組織と開発生産性の進化 / 20250703 Rinto Ikenoue
Avatar for SHIFT EVOLVE shift_evolve
PRO
2
14k
CI/CD/IaC 久々に0から環境を作ったらこうなりました
Avatar for Kaz Watanabe kaz29
1
220
AI導入の理想と現実～コストと浸透〜
Avatar for oprst oprstchn
0
170
あなたの声を届けよう！ 女性エンジニア登壇の意義とアウトプット実践ガイド #wttjp / Call for Your Voice
Avatar for kondoyuko kondoyuko
4
530
怖くない！はじめてのClaude Code
Avatar for Shinya Masadome（東京AI祭） shinya337
0
330
Github Copilot エージェントモードで試してみた
Avatar for Ochtum ochtum
0
140
PHPでWebブラウザのレンダリングエンジンを実装する
Avatar for ディップ株式会社 dip_tech
PRO
0
220
整頓のジレンマとの戦い〜Tidy First?で振り返る事業とキャリアの歩み〜/Fighting the tidiness dilemma〜Business and Career Milestones Reflected on in Tidy First?〜
Avatar for 株式会社ビットキー / Bitkey Inc. bitkey
1
10k
Yamla: Rustでつくるリアルタイム性を追求した機械学習基盤 / Yamla: A Rust-Based Machine Learning Platform Pursuing Real-Time Capabilities
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
4
200

Featured

See All Featured
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
82
9.1k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
53
7.7k
Optimizing for Happiness
Avatar for Tom Preston-Werner mojombo
379
70k
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
173
14k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
35
2.4k
Adopting Sorbet at Scale
Avatar for Ufuk Kayserilioglu ufuk
77
9.4k
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
48
5.4k
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
29
1.8k
Reflections from 52 weeks, 52 projects
Avatar for Jefferson Lam jeffersonlam
351
20k
Side Projects
Avatar for Sacha Greif sachag
455
42k
Agile that works and the tools we love
Avatar for Rasmus Luckow-Nielsen rasmusluckow
329
21k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
34
3.1k

Transcript

  1. コンテーナーの話

  2. 1. 誰 2. 何 3. 何故

  3. 1. 何 2. 誰 3. 何故

  4. 何

  5. LXC

  6. LinuX Container

  7. •Kernel namespaces (ipc, uts, mount, pid, network and user) Apparmor

    and SELinux profiles Seccomp policies Chroots (using pivot_root) Kernel capabilities Control groups (cgroups)

  8. import lxc container = lxc.Container("p1") container.create("ubuntu") container.start() container.get_ips() container.stop()

  9. PYTHON

  10. PYTHON3

  11. chroot

  12. None

  13. namespaces

  14. mount UTS Network SysV IPC

  15. cgroups

  16. Resource limits Prioritization Accounting Control

  17. 誰

  18. 2006

  19. None

  20. 2014

  21. EVERYTHING at Google runs in a container

  22. None
  23. None
  24. None
  25. None

  26. (￣∇￣;)

  27. April 2008

  28. None
  29. None
  30. None

  31. CoreOS

  32. 何故

  33. セキュリティ

  34. リソース

  35. パフォーマンス

  36. スケーラビリティ

  37. THE END