Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -

Slide 1

Slide 1 text

1SP4FD*54&$,6/WFSTJPO ۙ౻Ӊஐ࿕(.01FQBCP *OD %PDLFSͱ ΍ΘΒ͔͍Ծ૝Խ

Slide 2

Slide 2 text

ۙ౻Ӊஐ࿕6DIJP,POEP w(.0ϖύϘٕज़ج൫݉σʔλج൫νʔϜ wؔ৺ൣғ3VCZ 3VTU -JOVY ίϯςφٕज़ ݴޠ࣮૷ 04࣮૷ w3VCZ,BJHJ wʮNSVCZγεςϜϓϩάϥϛϯάʯ ೥݄೔ץߦ w޷͖ͳY ͷ໋ྩ45*

Slide 3

Slide 3 text

ߨٛલ൒ͷ༧ఆ w࠲ֶͷ಺༰ w%PDLFSͱίϯςφԾ૝Խʹؔ͢Δ֓ཁ wΦϯϥΠϯԋशʢࣄલ༧श0,ʣ w%PDLFS%PDLFS$PNQPTFΛ࣮ࡍʹ৮ΕΔԋश

Slide 4

Slide 4 text

ίϯςφ࠲ֶ

Slide 5

Slide 5 text

ͦ΋ͦ΋ɺίϯςφͱ͸ w-JOVYͷ৔߹ɺϓϩηεʹରִͯ͠཭ɺϦιʔε੍ݶɺݖݶͷ੍ݶͳ ͲΛߦ͍ɺಠཱͨ͠؀ڥΛͳΔ΂҆͘શʹఏڙͨ͠΋ͷʢͱ͢Δʣ wͲͷΑ͏ͳܦҢͰ͜͏͍ͬͨʮԾ૝Խʯ͕ग़ݱͨ͠ͷ͔ʁ

Slide 6

Slide 6 text

GPSLFYFDWFͷؒʹ

Slide 7

Slide 7 text

CFGPSFίϯςφͷʮܭࢉػͷڞ༗ʯ wਓྨ͸ίϯϐϡʔλΛޮ཰Α͘ڞ༗͔ͨͬͨ͠ w654ɺϚϧνςφϯγʔ w6/*9ϢʔβʔʹΑΔܭࢉػͷڞ༗ w"QBDIF)5514FSWFSͳͲʹΑΔ7JSUVBM)PTUػೳ wDISPPUΛ͸͡Ίͱͨ͠Մࢹൣғͷ੍ݶ wԾ૝Ϛγϯͷ࡞੒ʢLWNɺ2&.6ʣ

Slide 8

Slide 8 text

"QBDIFͷϚϧνςφϯγʔ wদຊʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ͢ΔݚڀʯΑΓ w7JSUVBM)PTU wDISPPU wεϨου୯Ґͷݖݶ؅ཧ wTV&9&$

Slide 9

Slide 9 text

؆୯ͳԾ૝Խͷܥਤ w ʮ5IF*EFBM7FSTVTUIF3FBM3FWJTJUJOHUIF)JTUPSZPG7JSUVBM.BDIJOFTBOE$POUBJOFSTʯΑΓ

Slide 10

Slide 10 text

ίϯςφͷొ৔ w,7.ͳͲͷΑ͏ʹɺϋʔυ΢ΣΞΛؚΜͩԾ૝Խ͸҆શͰࣗ༝౓͕ ߴ͘ɺීٴͨ͠ɻ wҰํɺΦʔόʔϔουͷ௿ݮ΍ूੵ཰ͷ޲্ɺىಈ࣌ؒͳͲͷߴ଎ Խɺ؀ڥͷϙʔλϏϦςΟ޲্ͳͲͷधཁ͕ग़ͯ͘Δ wগͣͭ͠ਐԽΛଓ͚͍ͯͨίϯςφʹ஫໨͕ू·Δ

Slide 11

Slide 11 text

͍ΘΏΔԾ૝Խʢྫʣ ϋʔυ΢ΣΞ ϗετ04ϋΠύʔόΠβ IBSEXBSF FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ IBSEXBSF FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ IBSEXBSF FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ 04ͷػೳΛ ͦΕͧΕ४උ

Slide 12

Slide 12 text

ίϯςφܕʮԾ૝Խʯ ϋʔυ΢ΣΞ ϗετ04ʢ-JOVYʣ ίϯςφ Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ ίϯςφ Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ ίϯςφ Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ 04ͷػೳ͸ ڞ௨Ͱ࢖͏

Slide 13

Slide 13 text

ίϯςφʹΑΔʮԾ૝Խʯٕज़ཁૉ w SFGIUUQTJCMBDLIBUDPN64"5IVSTEBZVT"WSBIBNJ&TDBQJOH7JSUVBMJ[FE$POUBJOFSTQEG

Slide 14

Slide 14 text

ϓϩηε͔ΒΞΫηεͰ͖Δൣғͷ෼཭ wϑΝΠϧγεςϜͷִ཭DISPPUQJWPU@SPPU w04Ϧιʔεͷִ཭-JOVY/BNFTQBDF w1*%ͷִ཭ɺϚ΢ϯτϙΠϯτͷִ཭ɺ6TFS*%NBQQJOH΄͔

Slide 15

Slide 15 text

ϓϩηεͷݖݶͷ੍ݶ wಛݖΛ෼ׂ͠ɺҰ෦ͷΈͷണୣ΍෇༩-JOVY$BQBCJMJUZ wγεςϜίʔϧ୯ҐͰͷݺͼग़੍͠ݶɺτϨʔεTFDDPNQ w-JOVY4FDVSJUZ.PEVMF -4. "QQ"SNPS4&-JOVY

Slide 16

Slide 16 text

ϓϩηεͷϋʔυ΢ΣΞϦιʔεͷ੍ݶ wݹయతSFTPVSDFMJNJUVMJNJU SMJNJUQSMJNJU wDHSPVQ $POUSPM(SPVQT w$16ɺϝϞϦɺϒϩοΫ*0ɺ1*%਺΄͔ w୯ʹϓϩηεͷάϧʔϓ୯ҐͰͷૢ࡞΋ߦ͑Δ

Slide 17

Slide 17 text

%PDLFSͷొ৔ w1BB4Ͱ͋ͬͨ%PU$MPVEࣾͷࣾ಺ίϯςφج൫Λ044Խͨ͠΋ͷ͕ %PDLFSͷ࢝·Γɻ͔ͦ͜ΒҰؾʹ޿·ͬͨ w%PDLFS͸ʮΠϝʔδʯͷ֓೦ΛίϞσΟςΟԽͨ͠ wίϯςφͷՁ஋ʹɺʮϙʔλϒϧͳ؀ڥͷ࠶ݱʯ͕ՃΘΔ wίϯςφͷӡ༻ͷཹҙ఺ʹ͓͍ͯʮΠϝʔδͷ؅ཧʯ͕େ͖͘઎ΊΒ ΕΔΑ͏ʹͳΔ

Slide 18

Slide 18 text

%PDLFSʹ͓͚ΔΠϝʔδ wࠩ෼ϑΝΠϧγεςϜʢ6OJPO'JMFTZTUFNʣΛ༻͍ͯมߋՕॴ͚ͩΛ ௥هͯ͠؅ཧՄೳʹͨ͠ wΫϥ΢υ্ʹΠϝʔδΛϓογϡ͠ɺ୭Ͱ΋ϓϧͰ͖ΔΑ͏ IUUQTEPDTEPDLFSDPNTUPSBHFTUPSBHFESJWFSɹ

Slide 19

Slide 19 text

%PDLFS,VCFSOFUFT0$* wϥϯλΠϜͷ։ൃɺཚཱ w0QFO$POUBJOFS*OJUJBUJWFͷ੒ཱɺ0$*TQFDͷެ։ wίϯςφ͕ຬͨ͢΂͖࢓༷ͷ੔ཧʢΠϝʔδɺηΩϡϦςΟଞʣ w,VCFSOFUFTͷొ৔ w(PPHMFࣾ಺ͷج൫ʮ#PSHʯΛϕʔεʹެ։͞Εͨ΋ͷ wߴϨϕϧϥϯλΠϜɺ௿ϨϕϧϥϯλΠϜͷϨΠϠ෼͚͕ਐΉ

Slide 20

Slide 20 text

0$*TQFD wIUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD

Slide 21

Slide 21 text

ࡢࠓͷίϯςφϥϯλΠϜ wߴϨϕϧϥϯλΠϜ௿ϨϕϧϥϯλΠϜΛ۠ผͯ͠ཧղ͢Δ IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTTɹ

Slide 22

Slide 22 text

ࡢࠓͷίϯςφϥϯλΠϜ w௿ϨϕϧϥϯλΠϜʹ͓͚Δ࣮૷ઓུ͝ͱͷ෼ྨ wϓϩηεϕʔεͷϦιʔεɾݖݶ෼཭Λ༻͍Δ΋ͷ SVOD DSVO ZPVLJ w7..ΛϕʔεʹͰ͖Δ͚ͩܰྔʹͨ͠΋ͷ'JSFDSBDLFS ,BUB wϢʔβϥϯυͰαϯυϘοΫεΛߏ੒ͨ͠΋ͷH7JTPS wϢχΧʔωϧΛίϯςφʹద༻ͨ͠΋ͷ/BCMB$POUBJOFS

Slide 23

Slide 23 text

ࢀߟจݙʢ࿦จʣ wদຊ྄հ ʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ ͢Δݚڀʯ ೥౓ژ౎େֶେֶӃ৘ใֶݚڀՊത࢜࿦จֶҐ৹ ࠪެௌձ .BZ w"MMJTPO3BOEBM ʮ5IF*EFBM7FSTVTUIF3FBM3FWJTJUJOHUIF )JTUPSZPG7JSUVBM.BDIJOFTBOE$POUBJOFSTʯ "$.$PNQVUJOH 4VSWFZT 7PMVNF *TTVF "SUJDMF "QS IUUQTSFQPTJUPSZLVMJCLZPUPVBDKQETQBDFIBOEMF IUUQTBSYJWPSHBCT

Slide 24

Slide 24 text

ࢀߟจݙʢॻ੶ʣ wίϯςφܕԾ૝Խ֓࿦ʢ઒ޱ௚໵ ΧοτγεςϜʣ wIUUQXXXDVUUDPKQCPPLIUNM

Slide 25

Slide 25 text

ࢀߟࢿྉʢͦͷଞʣ wۙ౻Ӊஐ࿕ ৿ాߒฏʮίϯςφͷηΩϡϦςΟΛத਎͔Βཧղ͠Α ͏ʯIUUQTTQFBLFSEFDLDPNVE[VSBJOTJEFPVUDPOUBJOFS BOEJUTTFDVSJUZ wদຊ྄հʮϢϏΩλεσʔληϯλʔ04ͷจ຺ʹ͓͚Δίϯςφ࣮ ߦ؀ڥͷ෼ྨʯIUUQTICNBUTVNPUPSKQFOUSZ

Slide 26

Slide 26 text

ࢀߟࢿྉʢͦͷଞʣ wಙӬߤฏʮࠓ࿩୊ͷ͍Ζ͍ΖͳίϯςφϥϯλΠϜΛൺֱͯ͠Έͨʯ IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTT wٶԼ߶ีʮ$PNQBSF0$*3VOUJNFTʯIUUQTTQFBLFSEFDLDPN NJ[[ZDPNQBSFPDJSVOUJNFT wՃ౻ହจʮ-9$ͰֶͿίϯςφೖ໳ܰྔԾ૝Խ؀ڥΛ࣮ݱ͢Δٕ ज़ʯIUUQTHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST

Slide 27

Slide 27 text

ࢀߟࢿྉʢͦͷଞʣ wVUBNLʮৄઆ0$*ίϯςφϥϯλΠϜZPVLJʯ IUUQTTQFBLFSEFDLDPNVUBNLYJBOHTIVP PDJLPOUFOBSBOUBJNVZPVLJBUEJIVJLPOUFOBKJTIVGBMTFRJOH CBPKJBPIVBOIVJ

Slide 28

Slide 28 text

ίϯςφͷར༻ͱ ΦʔέετϨʔγϣϯ

Slide 29

Slide 29 text

ίϯςφͷॏཁͳϢʔεέʔε w؀ڥͷϙʔλϒϧԽ w؀ڥߏஙͷࣗಈԽʢΦʔέετϨʔγϣϯʣ w؀ڥͷίʔυԽʢ*OGSBTUSVDUVSFBT$PEFʣ wू໿͞Εͨ؀ڥఏڙ wʢαϯυϘοΫεʁʣ

Slide 30

Slide 30 text

ίϯςφҎલͷ*B$ w$IFG1VQQFUʹΠϯελϯεϨϕϧͷߏ੒؅ཧ w5FSSBGPSNʹΞʔΩςΫνϟϨϕϧͷߏ੒؅ཧɺ*BB4ͷ؅ཧ wγεςϜ؅ཧΛࣗಈԽ͍ͨ͠ͱ͍͏Ϟνϕʔγϣϯ͕࠷ॳʹ͋ͬͨ w"HJMF*OGSB%FW0QTιϑτ΢ΣΞ։ൃͷϓϥΫςΟεΛΠϯϑϥ ؅ཧʹԠ༻͢ΔͨΊʹ࢖ΘΕ޿·Δ wΠϯελϯεϨϕϧˠ"1*ʹΑΔ*BB4ͷૢ࡞ͱ؅ཧʹ޿͕Δ

Slide 31

Slide 31 text

ίϯςφͷΦʔέετϨʔγϣϯ wʮΠϝʔδʯͷൃୡʹίϯςφΠϝʔδΛΦʔέετϨʔγϣϯͷ ύʔπͱͯ͠ଊ͑ΒΕΔΑ͏ʹͳΔɻ૊Έ߹ΘͤϕʔεͷΠϯϑϥ w#PSH͔Βͷ,VCFSOFUFTʹίϯςφΛ؅ཧ͢Δ෼ࢄΞʔΩςΫνϟ ͷҰͭͷύλʔϯ͕Ͱ͖ɺͦΕ͕ΦʔϓϯʹͳΓ࠶࣮૷͞ΕΔ w#PSH༝དྷͷ༷ʑͳ֓೦3FDPODJMJBUJPO-PPQɺ෼ࢄετϨʔδ΁ ͷઃఆอଘɺ.BTUFSͱ,VCFMFUɺ

Slide 32

Slide 32 text

ίϯςφϕʔεΛલఏͱͨ͠ΤίγεςϜ wʮίϯςφϕʔεͷΠϯϑϥʯ͸ࠓ·Ͱʹଘࡏ͠ͳ͔ͬͨ΋ͷͳͷ Ͱɺطଘͷϛυϧ΢ΣΞͷ੾ΓସΘΓ͕ى͜Δ w$/$'ʢ5IF$MPVE/BUJWF$PNQVUJOH'PVOEBUJPOʣͷઃཱ w$MPVE/BUJWFͷఆٛɹIUUQTHJUIVCDPNDODGUPDCMPCNBTUFS%&'*/*5*0/NE ɹ w৽ੈ୅ͷɺ͋Δ͍͸Ґஔ͚ͮΛ৽ͨ͘͠͠ϛυϧ΢ΣΞͨͪ w1SPNFUIFVTɺ'MVFOUEɺ$PSF%/4ɺ&OWPZɺ)FMNɺ3PPLɺ 'BMDPɺ0QFO5SBDJOHɺH31$

Slide 33

Slide 33 text

ࢀߟจݙɾࢿྉ wʮ-BSHFTDBMFDMVTUFSNBOBHFNFOUBU(PPHMFXJUI#PSHʯ IUUQTQEPTDTBJMNJUFEVQBQFSTCPSHQEG w೔ຊޠͰ͸ʮ(PPHMF͕࡞ͬͨ෼ࢄΞϓϦέʔγϣϯج൫ɺ#PSHͷ࿦จΛಡ Έղ͘ʯγϦʔζͳͲ IUUQTCMPHJOEVDUPSNFFOUSZ wٶԼ߶ีʮ*OGSBTUSVDUVSFBT$PEFͷ͜Ε·Ͱͱ͜Ε͔Βʯ IUUQTTQFBLFSEFDLDPNNJ[[ZJOGSBTUVEZNFFUVQOVNCFS

Slide 34

Slide 34 text

લ൒ऴྃ