Upgrade to Pro — share decks privately, control downloads, hide ads and more …

コンテーナーの話

Avatar for Ian Lewis Ian Lewis
June 04, 2014
Technology
0
100

 コンテーナーの話

Avatar for Ian Lewis

Ian Lewis

June 04, 2014
Tweet

More Decks by Ian Lewis

See All by Ian Lewis
Kubernetes Security Best Practices
Avatar for Ian Lewis ianlewis
38
26k
The Enemy Within: Running untrusted code in Kubernetes
Avatar for Ian Lewis ianlewis
0
1.3k
The Enemy Within: Running untrusted code with gVisor
Avatar for Ian Lewis ianlewis
4
1.3k
KubeCon EU Runtime Track Recap
Avatar for Ian Lewis ianlewis
3
1.7k
コンテナによるNoOpsオートメーション
Avatar for Ian Lewis ianlewis
2
170
Google Kubernetes Engine 概要 & アップデート @ GCPUG Kansai Summit Day 2018
Avatar for Ian Lewis ianlewis
2
950
Extending Kubernetes with Custom Resources and Operator Frameworks
Avatar for Ian Lewis ianlewis
10
3.8k
Kubernetesのセキュリティのベストプラクティス
Avatar for Ian Lewis ianlewis
12
17k
Scheduling and Resource Management in Kubernetes
Avatar for Ian Lewis ianlewis
2
1.4k

Other Decks in Technology

See All in Technology
The Twin Mandate of Observability
Avatar for Charity Majors charity
1
380
DMMの検索システムをSolrからElasticCloudに移行した話
Avatar for 小山凌太 hmaa_ryo
0
370
Design and implementation of "Markdown to Google Slides" / phpconfuk 2025
Avatar for Ken’ichiro Oyama k1low
1
120
ラスベガスの歩き方 2025年版（re:Invent 事前勉強会）
Avatar for JunjiKoide junjikoide
0
950
InsightX 会社説明資料/ Company deck
Avatar for InsightX insightx
0
200
Data Engineering Guide 2025 #data_summit_findy by @Kazaneya_PR / 20251106
Avatar for 風音屋 (Kazaneya) kazaneya
PRO
8
1.4k
次世代のメールプロトコルの斜め読み
Avatar for HIRANO Yoshitaka hirachan
3
390
触れるけど壊れないWordPressの作り方
Avatar for Masahiko Kawai masakawai
0
680
OPENLOGI Company Profile for engineer
Avatar for OPENLOGI hr01
1
46k
激動の2025年、Modern Data Stackの最新技術動向
Avatar for Sagara sagara
0
850
なぜ新機能リリース翌日に モニタリング可能なのか？ 〜リードタイム短縮とリソース問題を「自走」で改善した話〜 / data_summit_findy_Session_2
Avatar for Sansan R&D sansan_randd
1
120
初海外がre:Inventだった人間の感じたこと
Avatar for tommy tommy0124
1
200

Featured

See All Featured
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
186
22k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
49
14k
Building an army of robots
Avatar for Kyle Neath kneath
306
46k
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
27
2.2k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
340
57k
Visualization
Avatar for Eitan Lees eitanlees
150
16k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
127
54k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.6k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
302
51k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
37
2.6k
Side Projects
Avatar for Sacha Greif sachag
455
43k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
272
21k

Transcript

  1. コンテーナーの話

  2. 1. 誰 2. 何 3. 何故

  3. 1. 何 2. 誰 3. 何故

  4. 何

  5. LXC

  6. LinuX Container

  7. •Kernel namespaces (ipc, uts, mount, pid, network and user) Apparmor

    and SELinux profiles Seccomp policies Chroots (using pivot_root) Kernel capabilities Control groups (cgroups)

  8. import lxc container = lxc.Container("p1") container.create("ubuntu") container.start() container.get_ips() container.stop()

  9. PYTHON

  10. PYTHON3

  11. chroot

  12. None

  13. namespaces

  14. mount UTS Network SysV IPC

  15. cgroups

  16. Resource limits Prioritization Accounting Control

  17. 誰

  18. 2006

  19. None

  20. 2014

  21. EVERYTHING at Google runs in a container

  22. None
  23. None
  24. None
  25. None

  26. (￣∇￣;)

  27. April 2008

  28. None
  29. None
  30. None

  31. CoreOS

  32. 何故

  33. セキュリティ

  34. リソース

  35. パフォーマンス

  36. スケーラビリティ

  37. THE END