cgroupとLinux Capabilityの活用 / rcon and capcon internals #lxcjp

Transcript

1. DHSPVQͱ-JOVY$BQBCJMJUZͷ׆༻
   GMOϖύϘגࣜձࣾ
   γχΞɾϓϦϯγύϧΤϯδχΞ
   MATSUMOTO, Ryosuke
   @matsumotory
   2016/04/23 ୈ9ճ ίϯςφܕԾ૝Խͷ৘ใަ׵ձˏ෱Ԭ
   SDPOBOEDBQDPO
   JOUFSOBMT
   

   View Slide

2. ໨࣍
   ίϯςφཁૉٕज़
   SDPOJOUFSOBMT
   DBQDPOJOUFSOBMT
   ·ͱΊ
   

   View Slide

3. ίϯςφཁૉٕज़
   

   View Slide

4. ϓϩηε੍ޚٕज़
   DHSPVQ
   ϓϩηεάϧʔϓͷϦιʔε੍ݶɾִ཭
   SDPOΛ։ൃ
   -JOVYDBQBCJMJUZ
   εϨου୯Ґʹ੍ޚՄೳͳಛݖάϧʔϓ܈
   DBQDPOΛ։ൃ
   

   View Slide

5. DHSPVQ
   

   View Slide

6. DHSPVQ
   ϓϩηεάϧʔϓͷϦιʔε੍ޚ
   $16ɺ*0ɺϝϞϦ౳
   DHSPVQGTʹΑΔ*'
   ϑΝΠϧϕʔεͷૢ࡞
   ୈճɹ-JOVYΧʔωϧͷίϯςφػೳʦʧᴷDHSPVQͱ͸ʁʢͦͷʣ
   SFGIUUQHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST
   

   View Slide

7. DHSPVQͷ׆༻ྫ
   NPE@NSVCZʹΑΔ"QBDIFͷϦιʔε੍ޚ
   8FCαʔό΁ͷϦΫΤετ୯Ґ
   ͜ͷυϝΠϯ܈͸$16Ҏ಺
   ͜ͷಈతίϯςϯπ͸$16
   ͜ͷಈతίϯςϯπ͸*0Λ.CQT
   ͜ͷಈతίϯςϯπ͸ಛఆͷ$16ͷίΞ
   SFGIUUQCMPHNBUTVNPUPSKQ Q
   

   View Slide

8. -JOVY$BQBCJMJUZ
   

   View Slide

9. ΞΫηε੍ޚϞσϧͷ෮श
   ೚ҙΞΫηε੍ޚʢ%"$ʣ
   ࣗ਎͕࡞ͬͨϦιʔε΁ͷΞΫηε͸ࣗ਎͕ܾఆ
   6/*9ͷඪ४తͳϞσϧ
   ڧ੍ΞΫηε੍ޚʢ."$
   
   ࣗ਎͕࡞ͬͨϦιʔεʹ׬શʹΞΫηεͰ͖ΔΘ
   ͚Ͱ͸ͳ͍ɻ؅ཧऀ͕ܾఆ
   4&-JOVYɺ50.0:0-JOVY
   

   View Slide

10. -JOVYDBQBCJMJUZ
    ैདྷͷ֊૚ͷ%"$ݖݶϞσϧͷ֦ு
    εϨου୯Ґʹ੍ޚՄೳͳಛݖάϧʔϓ
    εϨου͸छྨͷDBQBCJMJUZTFUΛ࣋ͭ
    1FSNJUUFEɾ&⒎FDUJWFɾ*OIFSJUBCMF
    ͦΕΒͷ૊Έ߹ΘͤͰDBQCJMJUZͷݖݶΛ੍ޚ
    

    View Slide

11. 1FSNJUUFEͱ&GGFDUJWF
    1FSNJUUFE͸ڐՄ
    &⒎FDUJWFͷηοτɾΞϯηοτ͕Մೳ
    1FSNJUUFEΛΞϯηοτ͢Δͱ໭Εͳ͍
    &⒎FDUJWF͸࣮ޮ
    ࣮ࡍͷݖݶՄ൱νΣοΫ͸&⒎FDUJWFΛݟΔ
    1FSNJUUFE͕͋Ε͹Ξϯηοτޙͷ࠶ηοτ͕Մೳ
    

    View Slide

12. -JOVYDBQBCJMJUZ
    ໿άϧʔϓʹ෼ׂ͞Ε͍ͯΔ
    VJEɾHJEมߋͷಛݖ
    ಛݖϙʔτʢҎԼʣͷόΠϯυಛݖ
    DISPPUͷಛݖ
    SFCPPUͷಛݖͳͲͳͲ
    SFGIUUQTMJOVYKNPTEOKQIUNM-%1@NBOQBHFTNBODBQBCJMJUJFT
    IUNM
    

    View Slide

13. $BQBCJMJUZͷ׆༻ྫ
    NPE@QSPDFTT@TFDVSJUZ
    "QBDIFIUUQEͷTV&9&$ͷεϨου൛
    ϓϩηε୯Ґͷݖݶ෼཭͔ΒεϨου୯Ґ΁
    ݖݶ෼཭ͷίετΛεϨουͷੜ੒ɾഁغʹ௿ݮ
    

    View Slide

14. View Slide

15. View Slide

16. ΞΫηε੍ޚϞσϧͷࠓޙ
    ࠓ΋ͳ͓ೋ֊૚ͷݹయతͳݖݶϞσϧ
    ࢖͍΍͍͕ͦ͢ΕͰྑ͍ͷ͔ʁ
    ྫ͑͹ҰൠϢʔβ੍͕ޚͰ͖ͯɺࢠϓϩηεʹ౉࣌͢ʹ
    ੍ݶͯ͠౉͢ͱ͔΍Γ͍ͨʜ͋ΕͬͰ͖Δʁ
    աڈͷݚڀͰ͸΋ͬͱෳࡶͳݖݶϞσϧ͕͋ͬͨ
    04Ͱ΍ΕΔ͜ͱ͸ͲΜͲΜෳࡶʹͳ͍ͬͯΔ
    ৽ͨͳೋ֊૚Ҏ্ͷݖݶϞσϧΛݕ౼ͯ͠ΈΔ
    

    View Slide

17. SDPO
    

    View Slide

18. UIBOLTUP!SSSFFFZZZ
    

    View Slide

19. ίϚϯυͷϦιʔε੍ޚ
    IUUQTHJUIVCDPNNBUTVNPUPSSDPO
    ࣮ߦ͍ͨ͠ίϚϯυͷϦιʔε੍ޚ
    ࣮ߦதͷϓϩηεͷϦιʔε੍ޚ
    $16ɺϝϞϦɺ*0ɺάϧʔϓԽ
    ϦιʔεมԽ͔ΒॲཧΛίʔϧόοΫՄೳ
    

    View Slide

20. SDPOͷྑ͍ॴ
    ࣮ߦޙ΍ఀࢭޙʹDHSPVQͷΰϛ૟আ
    ࣮ߦ࣌ͷίϚϯυΛϫϯϥΠϯͰ੍ޚ
    DHSPVQ͕͋Ε͹࢖͑Δ
    MJCDHSPVQΛTUBUJDMJOL
    NSVCZͰϫϯόΠφϦʢHMJCDґଘʣ
    %PDLFS࢖֤ͬͯछHMJCDͷόΠφϦΛެ։
    

    View Slide

21. ࢖͍Ͳ͜Ζͷྫ
    ΫϥΠΞϯτͰ-JOVY࢖ͬͯΔਓ
    ϒϥ΢β͸$16·Ͱ
    ϝʔϥʔॏ͍͔Β੍ݶͯ͠΍Ζ͏
    αʔόͰ-JOVY࢖͍ͬͯΔਓ
    ͜ͷϓϩάϥϜ͸*0੍ޚͭͭ҆͠શʹ
    ͔͔࣌ؒͬͯ΋ྑ͍ͷͰ$16཈͑ؾຯͰ
    

    View Slide

22. DHSPVQT,FSOFM
    MJCDHSPVQ DHSPVQGT
    NSVCZDHSPVQNSVCZFWFOUGE
    SDPO
    NSVCZSDPO
    ϝϞϦίʔϧόοΫ
    ͷΈϑΝΠϧ*0Λར༻
    

    View Slide

23. ϝϞϦίʔϧόοΫ
    DHSPVQͷϝϞϦΠϕϯτΛݕ஌
    ϝϞϦ੍ݶ஋΁ͷ౸ୡ΍0VUPG.FNPSZ
    FWFOUGEΛNSVCZFWFOUGEͱ࣮ͯ͠૷
    IUUQTHJUIVCDPNNBUTVNPUPSNSVCZFWFOUGE
    NSVCZSDPO
    3VCZϒϩοΫΛίʔϧόοΫՄೳ
    ϝϞϦ੍ݶ஋ͷ֦ு
    NSVCZFWFOUGEʹΑΔݕ஌ͱ௨஌
    IUUQTHJUIVCDPNNBUTVNPUPSNSVCZSDPO
    

    View Slide

24. View Slide

25. View Slide

26. DBQDPO
    

    View Slide

27. ೚ҙͷίϚϯυͷಛݖΛݶఆ
    ೚ҙͷίϚϯυΛ೚ҙͷϢʔβͰ
    DBQBCJMJUZΛ੍ޚ࣮ͭͭ͠ߦ͔ͨͬͨ͠
    ͕ɺͰ͖ͳ͔ͬͨʂ
    

    View Slide

28. Ͱ͖ͳ͔ͬͨཧ༝
    FYFDWF࣌ʹDBQ͕શͯམͪΔ
    XSBQQFSπʔϧͳͷͰGPSLFYFDWF͸ඞਢ
    SPPUݖݶͩͱFWFDWFޙ΋Ҿ͖ܧ͙͕
    Ͱ΋ࠓճ͸೚ҙͷϢʔβͰ࣮ߦ͍ͨ͠
    ϑΝΠϧDBQΛઃఆ͢ΔͱҾ͖ܧ͙͕
    ೚ҙͷίϚϯυ͕ର৅ͳͷͰϑΝΠϧDBQ͸࿔Εͳ͍
    

    View Slide

29. ิ଍ɿDBQͷҾ͖ܧ͗ϧʔϧ
    1 QFSNJUUFE
    1 JOIFSJUBCMF
    ' JOIFSJUBCMF
    
    c
    ' QFSNJUUFE
    DBQ@CTFU
    
    1 F⒎FDUJWF
    ' F⒎FDUJWF
    1 QFSNJUUFE
    
    1 JOIFSJUBCMF
    1 JOIFSJUBCMF
    
    1FYFDWF
    લͷεϨουͷέʔύϏϦςΟηοτͷ஋
    1`FYFDWF
    ޙͷεϨουͷέʔύϏϦςΟηοτͷ஋
    'ϑΝΠϧέʔύϏϦςΟηοτͷ஋
    DBQ@CTFUέʔύϏϦςΟό΢ϯσΟϯάηοτͷ஋
    

    View Slide

30. ·ͱΊ
    

    View Slide

31. SDPOBOEDBQDPOJOUFSOBMT
    DHSPVQTͱ-JOVYDBQBCJMJUZͷ׆༻
    ίϚϯυϥΠϯ͔Β׆༻͍ͨ͠
    SDPO͸Ͱ͖͚ͨͲDBQDPO͸ະ׬੒
    DHSPVQTͱDBQBCJMJUZͰϓϩηεΛ
    ߴ౓ʹ੍ޚͰ͖Δ
    

    View Slide

32. ࠓޙ΍Γ͍ͨ͜ͱ
    7.ΛϓϩηεɺίϯςφΛεϨουͱݟཱͯΔ
    LFSOFM͕͋Δछͷڞ༗ϝϞϦͷΑ͏ͳ΋ͷ
    ͍͔ʹϓϩηεΛ଎͘ɾޮ཰ྑ͘GPSL
    ͢Δ͔
    ͍͔ʹεϨουΛ଎͘ɾ҆શʹ࡞Δ͔
    ͍͔ʹϓϩηεؒͷεέδϡʔϧ΍Ϧιʔε؅ཧΛ͢Δ͔
    ࠓޙ͸7.΍ίϯςφͷ࿈ܞ͕ࠓͰ͍͏04ͱͳΔੈք͕དྷΔ
    ͱࢥ͍ͬͯΔͷͰɺݹయతͳ04ͷػೳΛ͍͔ʹωοτϫʔΫ
    Λ௨ͨͦ͡Εʹஔ͖׵͍͔͑ͯ͘ʹ௅ઓ
    

    View Slide