cgroupとLinux Capabilityの活用 / rcon and capcon internals #lxcjp

cgroupとLinux Capabilityの活用 / rcon and capcon internals #lxcjp

2b692bd83f4418103142a053ecf5ff59?s=128

MATSUMOTO Ryosuke

April 23, 2016
Tweet

Transcript

  1. 5.
  2. 6.

    DHSPVQ  ϓϩηεάϧʔϓͷϦιʔε੍ޚ  $16ɺ*0ɺϝϞϦ౳  DHSPVQGTʹΑΔ*'  ϑΝΠϧϕʔεͷૢ࡞ 

    ୈճɹ-JOVYΧʔωϧͷίϯςφػೳʦʧᴷDHSPVQͱ͸ʁʢͦͷʣ  SFGIUUQHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST
  3. 7.

    DHSPVQͷ׆༻ྫ  NPE@NSVCZʹΑΔ"QBDIFͷϦιʔε੍ޚ  8FCαʔό΁ͷϦΫΤετ୯Ґ  ͜ͷυϝΠϯ܈͸$16Ҏ಺  ͜ͷಈతίϯςϯπ͸$16 

    ͜ͷಈతίϯςϯπ͸*0Λ.CQT  ͜ͷಈతίϯςϯπ͸ಛఆͷ$16ͷίΞ SFGIUUQCMPHNBUTVNPUPSKQ Q
  4. 11.

    1FSNJUUFEͱ&GGFDUJWF  1FSNJUUFE͸ڐՄ  &⒎FDUJWFͷηοτɾΞϯηοτ͕Մೳ  1FSNJUUFEΛΞϯηοτ͢Δͱ໭Εͳ͍  &⒎FDUJWF͸࣮ޮ 

    ࣮ࡍͷݖݶՄ൱νΣοΫ͸&⒎FDUJWFΛݟΔ  1FSNJUUFE͕͋Ε͹Ξϯηοτޙͷ࠶ηοτ͕Մೳ
  5. 12.

    -JOVYDBQBCJMJUZ  ໿άϧʔϓʹ෼ׂ͞Ε͍ͯΔ  VJEɾHJEมߋͷಛݖ  ಛݖϙʔτʢҎԼʣͷόΠϯυಛݖ  DISPPUͷಛݖ 

    SFCPPUͷಛݖͳͲͳͲ  SFGIUUQTMJOVYKNPTEOKQIUNM-%1@NBOQBHFTNBODBQBCJMJUJFT IUNM
  6. 14.
  7. 15.
  8. 17.
  9. 23.

    ϝϞϦίʔϧόοΫ  DHSPVQͷϝϞϦΠϕϯτΛݕ஌  ϝϞϦ੍ݶ஋΁ͷ౸ୡ΍0VUPG.FNPSZ  FWFOUGEΛNSVCZFWFOUGEͱ࣮ͯ͠૷  IUUQTHJUIVCDPNNBUTVNPUPSNSVCZFWFOUGE 

    NSVCZSDPO  3VCZϒϩοΫΛίʔϧόοΫՄೳ  ϝϞϦ੍ݶ஋ͷ֦ு  NSVCZFWFOUGEʹΑΔݕ஌ͱ௨஌  IUUQTHJUIVCDPNNBUTVNPUPSNSVCZSDPO
  10. 24.
  11. 25.
  12. 26.
  13. 29.

    ิ଍ɿDBQͷҾ͖ܧ͗ϧʔϧ 1 QFSNJUUFE  1 JOIFSJUBCMF ' JOIFSJUBCMF c 

    ' QFSNJUUFE DBQ@CTFU  1 F⒎FDUJWF ' F⒎FDUJWF  1 QFSNJUUFE  1 JOIFSJUBCMF 1 JOIFSJUBCMF  1FYFDWF  લͷεϨουͷέʔύϏϦςΟηοτͷ஋ 1`FYFDWF  ޙͷεϨουͷέʔύϏϦςΟηοτͷ஋ 'ϑΝΠϧέʔύϏϦςΟηοτͷ஋ DBQ@CTFUέʔύϏϦςΟό΢ϯσΟϯάηοτͷ஋
  14. 30.
  15. 32.

    ࠓޙ΍Γ͍ͨ͜ͱ  7.ΛϓϩηεɺίϯςφΛεϨουͱݟཱͯΔ  LFSOFM͕͋Δछͷڞ༗ϝϞϦͷΑ͏ͳ΋ͷ  ͍͔ʹϓϩηεΛ଎͘ɾޮ཰ྑ͘GPSL ͢Δ͔  ͍͔ʹεϨουΛ଎͘ɾ҆શʹ࡞Δ͔

     ͍͔ʹϓϩηεؒͷεέδϡʔϧ΍Ϧιʔε؅ཧΛ͢Δ͔ ࠓޙ͸7.΍ίϯςφͷ࿈ܞ͕ࠓͰ͍͏04ͱͳΔੈք͕དྷΔ ͱࢥ͍ͬͯΔͷͰɺݹయతͳ04ͷػೳΛ͍͔ʹωοτϫʔΫ Λ௨ͨͦ͡Εʹஔ͖׵͍͔͑ͯ͘ʹ௅ઓ