cgroupとLinux Capabilityの活用 / rcon and capcon internals #lxcjp

Slide 1

Slide 1 text

DHSPVQͱ-JOVY$BQBCJMJUZͷ׆༻ GMOϖύϘגࣜձࣾ γχΞɾϓϦϯγύϧΤϯδχΞ MATSUMOTO, Ryosuke @matsumotory 2016/04/23 ୈ9ճ ίϯςφܕԾ૝Խͷ৘ใަ׵ձˏ෱Ԭ SDPOBOEDBQDPO JOUFSOBMT

Slide 2

Slide 2 text

໨࣍ ίϯςφཁૉٕज़ SDPOJOUFSOBMT DBQDPOJOUFSOBMT ·ͱΊ

Slide 3

Slide 3 text

ίϯςφཁૉٕज़

Slide 4

Slide 4 text

ϓϩηε੍ޚٕज़ DHSPVQ ϓϩηεάϧʔϓͷϦιʔε੍ݶɾִ཭ SDPOΛ։ൃ -JOVYDBQBCJMJUZ εϨου୯Ґʹ੍ޚՄೳͳಛݖάϧʔϓ܈ DBQDPOΛ։ൃ

Slide 5

Slide 5 text

DHSPVQ

Slide 6

Slide 6 text

DHSPVQ ϓϩηεάϧʔϓͷϦιʔε੍ޚ $16ɺ*0ɺϝϞϦ౳ DHSPVQGTʹΑΔ*' ϑΝΠϧϕʔεͷૢ࡞ ୈճɹ-JOVYΧʔωϧͷίϯςφػೳʦʧᴷDHSPVQͱ͸ʁʢͦͷʣ SFGIUUQHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST

Slide 7

Slide 7 text

DHSPVQͷ׆༻ྫ NPE@NSVCZʹΑΔ"QBDIFͷϦιʔε੍ޚ 8FCαʔό΁ͷϦΫΤετ୯Ґ ͜ͷυϝΠϯ܈͸$16Ҏ಺ ͜ͷಈతίϯςϯπ͸$16 ͜ͷಈతίϯςϯπ͸*0Λ.CQT ͜ͷಈతίϯςϯπ͸ಛఆͷ$16ͷίΞ SFGIUUQCMPHNBUTVNPUPSKQ Q

Slide 8

Slide 8 text

-JOVY$BQBCJMJUZ

Slide 9

Slide 9 text

ΞΫηε੍ޚϞσϧͷ෮श ೚ҙΞΫηε੍ޚʢ%"$ʣ ࣗ਎͕࡞ͬͨϦιʔε΁ͷΞΫηε͸ࣗ਎͕ܾఆ 6/*9ͷඪ४తͳϞσϧ ڧ੍ΞΫηε੍ޚʢ."$ ࣗ਎͕࡞ͬͨϦιʔεʹ׬શʹΞΫηεͰ͖ΔΘ ͚Ͱ͸ͳ͍ɻ؅ཧऀ͕ܾఆ 4&-JOVYɺ50.0:0-JOVY

Slide 10

Slide 10 text

-JOVYDBQBCJMJUZ ैདྷͷ֊૚ͷ%"$ݖݶϞσϧͷ֦ு εϨου୯Ґʹ੍ޚՄೳͳಛݖάϧʔϓ εϨου͸छྨͷDBQBCJMJUZTFUΛ࣋ͭ 1FSNJUUFEɾ&⒎FDUJWFɾ*OIFSJUBCMF ͦΕΒͷ૊Έ߹ΘͤͰDBQCJMJUZͷݖݶΛ੍ޚ

Slide 11

Slide 11 text

1FSNJUUFEͱ&GGFDUJWF 1FSNJUUFE͸ڐՄ &⒎FDUJWFͷηοτɾΞϯηοτ͕Մೳ 1FSNJUUFEΛΞϯηοτ͢Δͱ໭Εͳ͍ &⒎FDUJWF͸࣮ޮ ࣮ࡍͷݖݶՄ൱νΣοΫ͸&⒎FDUJWFΛݟΔ 1FSNJUUFE͕͋Ε͹Ξϯηοτޙͷ࠶ηοτ͕Մೳ

Slide 12

Slide 12 text

-JOVYDBQBCJMJUZ ໿άϧʔϓʹ෼ׂ͞Ε͍ͯΔ VJEɾHJEมߋͷಛݖ ಛݖϙʔτʢҎԼʣͷόΠϯυಛݖ DISPPUͷಛݖ SFCPPUͷಛݖͳͲͳͲ SFGIUUQTMJOVYKNPTEOKQIUNM-%1@NBOQBHFTNBODBQBCJMJUJFT IUNM

Slide 13

Slide 13 text

$BQBCJMJUZͷ׆༻ྫ NPE@QSPDFTT@TFDVSJUZ "QBDIFIUUQEͷTV&9&$ͷεϨου൛ ϓϩηε୯Ґͷݖݶ෼཭͔ΒεϨου୯Ґ΁ ݖݶ෼཭ͷίετΛεϨουͷੜ੒ɾഁغʹ௿ݮ

Slide 14

Slide 14 text

No content

Slide 15

Slide 15 text

No content

Slide 16

Slide 16 text

ΞΫηε੍ޚϞσϧͷࠓޙ ࠓ΋ͳ͓ೋ֊૚ͷݹయతͳݖݶϞσϧ ࢖͍΍͍͕ͦ͢ΕͰྑ͍ͷ͔ʁ ྫ͑͹ҰൠϢʔβ੍͕ޚͰ͖ͯɺࢠϓϩηεʹ౉࣌͢ʹ ੍ݶͯ͠౉͢ͱ͔΍Γ͍ͨʜ͋ΕͬͰ͖Δʁ աڈͷݚڀͰ͸΋ͬͱෳࡶͳݖݶϞσϧ͕͋ͬͨ 04Ͱ΍ΕΔ͜ͱ͸ͲΜͲΜෳࡶʹͳ͍ͬͯΔ ৽ͨͳೋ֊૚Ҏ্ͷݖݶϞσϧΛݕ౼ͯ͠ΈΔ

Slide 17

Slide 17 text

SDPO

Slide 18

Slide 18 text

UIBOLTUP!SSSFFFZZZ

Slide 19

Slide 19 text

ίϚϯυͷϦιʔε੍ޚ IUUQTHJUIVCDPNNBUTVNPUPSSDPO ࣮ߦ͍ͨ͠ίϚϯυͷϦιʔε੍ޚ ࣮ߦதͷϓϩηεͷϦιʔε੍ޚ $16ɺϝϞϦɺ*0ɺάϧʔϓԽ ϦιʔεมԽ͔ΒॲཧΛίʔϧόοΫՄೳ

Slide 20

Slide 20 text

SDPOͷྑ͍ॴ ࣮ߦޙ΍ఀࢭޙʹDHSPVQͷΰϛ૟আ ࣮ߦ࣌ͷίϚϯυΛϫϯϥΠϯͰ੍ޚ DHSPVQ͕͋Ε͹࢖͑Δ MJCDHSPVQΛTUBUJDMJOL NSVCZͰϫϯόΠφϦʢHMJCDґଘʣ %PDLFS࢖֤ͬͯछHMJCDͷόΠφϦΛެ։

Slide 21

Slide 21 text

࢖͍Ͳ͜Ζͷྫ ΫϥΠΞϯτͰ-JOVY࢖ͬͯΔਓ ϒϥ΢β͸$16·Ͱ ϝʔϥʔॏ͍͔Β੍ݶͯ͠΍Ζ͏ αʔόͰ-JOVY࢖͍ͬͯΔਓ ͜ͷϓϩάϥϜ͸*0੍ޚͭͭ҆͠શʹ ͔͔࣌ؒͬͯ΋ྑ͍ͷͰ$16཈͑ؾຯͰ

Slide 22

Slide 22 text

DHSPVQT,FSOFM MJCDHSPVQ DHSPVQGT NSVCZDHSPVQNSVCZFWFOUGE SDPO NSVCZSDPO ϝϞϦίʔϧόοΫ ͷΈϑΝΠϧ*0Λར༻

Slide 23

Slide 23 text

ϝϞϦίʔϧόοΫ DHSPVQͷϝϞϦΠϕϯτΛݕ஌ ϝϞϦ੍ݶ஋΁ͷ౸ୡ΍0VUPG.FNPSZ FWFOUGEΛNSVCZFWFOUGEͱ࣮ͯ͠૷ IUUQTHJUIVCDPNNBUTVNPUPSNSVCZFWFOUGE NSVCZSDPO 3VCZϒϩοΫΛίʔϧόοΫՄೳ ϝϞϦ੍ݶ஋ͷ֦ு NSVCZFWFOUGEʹΑΔݕ஌ͱ௨஌ IUUQTHJUIVCDPNNBUTVNPUPSNSVCZSDPO

Slide 24

Slide 24 text

No content

Slide 25

Slide 25 text

No content

Slide 26

Slide 26 text

DBQDPO

Slide 27

Slide 27 text

೚ҙͷίϚϯυͷಛݖΛݶఆ ೚ҙͷίϚϯυΛ೚ҙͷϢʔβͰ DBQBCJMJUZΛ੍ޚ࣮ͭͭ͠ߦ͔ͨͬͨ͠ ͕ɺͰ͖ͳ͔ͬͨʂ

Slide 28

Slide 28 text

Ͱ͖ͳ͔ͬͨཧ༝ FYFDWF࣌ʹDBQ͕શͯམͪΔ XSBQQFSπʔϧͳͷͰGPSLFYFDWF͸ඞਢ SPPUݖݶͩͱFWFDWFޙ΋Ҿ͖ܧ͙͕ Ͱ΋ࠓճ͸೚ҙͷϢʔβͰ࣮ߦ͍ͨ͠ ϑΝΠϧDBQΛઃఆ͢ΔͱҾ͖ܧ͙͕ ೚ҙͷίϚϯυ͕ର৅ͳͷͰϑΝΠϧDBQ͸࿔Εͳ͍

Slide 29

Slide 29 text

ิ଍ɿDBQͷҾ͖ܧ͗ϧʔϧ 1 QFSNJUUFE 1 JOIFSJUBCMF ' JOIFSJUBCMF c ' QFSNJUUFE DBQ@CTFU 1 F⒎FDUJWF ' F⒎FDUJWF 1 QFSNJUUFE 1 JOIFSJUBCMF 1 JOIFSJUBCMF 1FYFDWF લͷεϨουͷέʔύϏϦςΟηοτͷ஋ 1`FYFDWF ޙͷεϨουͷέʔύϏϦςΟηοτͷ஋ 'ϑΝΠϧέʔύϏϦςΟηοτͷ஋ DBQ@CTFUέʔύϏϦςΟό΢ϯσΟϯάηοτͷ஋

Slide 30

Slide 30 text

·ͱΊ

Slide 31

Slide 31 text

SDPOBOEDBQDPOJOUFSOBMT DHSPVQTͱ-JOVYDBQBCJMJUZͷ׆༻ ίϚϯυϥΠϯ͔Β׆༻͍ͨ͠ SDPO͸Ͱ͖͚ͨͲDBQDPO͸ະ׬੒ DHSPVQTͱDBQBCJMJUZͰϓϩηεΛ ߴ౓ʹ੍ޚͰ͖Δ

Slide 32

Slide 32 text

ࠓޙ΍Γ͍ͨ͜ͱ 7.ΛϓϩηεɺίϯςφΛεϨουͱݟཱͯΔ LFSOFM͕͋Δछͷڞ༗ϝϞϦͷΑ͏ͳ΋ͷ ͍͔ʹϓϩηεΛ଎͘ɾޮ཰ྑ͘GPSL ͢Δ͔ ͍͔ʹεϨουΛ଎͘ɾ҆શʹ࡞Δ͔ ͍͔ʹϓϩηεؒͷεέδϡʔϧ΍Ϧιʔε؅ཧΛ͢Δ͔ ࠓޙ͸7.΍ίϯςφͷ࿈ܞ͕ࠓͰ͍͏04ͱͳΔੈք͕དྷΔ ͱࢥ͍ͬͯΔͷͰɺݹయతͳ04ͷػೳΛ͍͔ʹωοτϫʔΫ Λ௨ͨͦ͡Εʹஔ͖׵͍͔͑ͯ͘ʹ௅ઓ