人間たちとsystemd - Speaker Deck

人間たちとsystemd

by KONDO Uchio

Slide 1

Slide 1 text

TZTUFNEͬ͘͟Γೖ໳ GMO Pepabo, Inc. Uchio Kondo 2016/04/23 ίϯςφܕԾ૝Խͷ৘ใަ׵ձˏ෱Ԭ ਓؒͨͪͱTZTUFNE

Slide 2

Slide 2 text

ਓؒͷ঺հ

Slide 3

Slide 3 text

No content

Slide 4

Slide 4 text

ۙ౻͏͓ͪ (.0ϖύϘॴଐ ٕज़ج൫νʔϜ ෱Ԭࢧࣾۈ຿ 'VLVPLBSC 3BJMT(JSMT'VLVPLB૯߹ࡶ༻ίʔν·ͱΊ

Slide 5

Slide 5 text

No content

Slide 6

Slide 6 text

No content

Slide 7

Slide 7 text

Slide 8

Slide 8 text

ڵຯ 3VCZ(PMBOHΛগʑ %PDLFS-9$ 1VQQFU )BTIJDPSQUPPMT 0QFO4UBDL &MFDUSPO3FBDU IUUQXXXTMJEFTIBSFOFUVE[VSBIBTIJDPSQUPPMT

Slide 9

Slide 9 text

ZFBSTPME3VCZJTU 3BJMT͝Ζ͔ΒͷϧϏʔετ d 3VCZΛ͜͡Βͤͯஶ࡞͋Γ 8FC%#1SFTT3VCZ࿈ࡌ d ύʔϑΣΫτ3VCZ ύʔϑΣΫτ3BJMT 8FC%#1SFTTWPM৽ਓಛू߸

Slide 10

Slide 10 text

No content

Slide 11

Slide 11 text

No content

Slide 12

Slide 12 text

'PVOEFSPG

Slide 13

Slide 13 text

No content

Slide 14

Slide 14 text

੍ݶࣄ߲ 04ͳͲͷϨΠϠʔɺਖ਼௚Θ͔͍ͬͯͳ͍͠ɺ  Χʔωϧͷίʔυ΋ಡΜͩ͜ͱ͕͋Γ·ͤΜ ʮ࣮͸ʜʜ͖͔ͬ͞Β଍͕਒͍͑ͯΔοʜʜʯ

Slide 15

Slide 15 text

ਓؒͨͪͷͨΊͷ  TZTUFNE֓ཁ

Slide 16

Slide 16 text

JOJUʢ͋Δ͍͸ͦͷ୅ସʣ ࠷ॳʹىಈͯ͠ɺͨ͘͞ΜͷαʔϏεͲ΋Λ  ্ཱͪ͛ͯ؅ཧ͢Δ $FOU04ͳͲʜTZTWJOJU $FOU046CVOUVʜ6QTUBSU 049ʜMBVODIE ʜʜ

Slide 17

Slide 17 text

JOJUTDSJQU

Slide 18

Slide 18 text

6QTUBSU

Slide 19

Slide 19 text

TZTUFNEͬ͘͟Γ ࠾༻ σΟετϦ αʔϏε  ఆٛ 04  റΓ DHSPVQ OBNFTQBDF ͱ࿈ܞ ૢ࡞ίϚϯυ JOJU TDSJQU $FOU04 ͳͲ͍Ζ͍Ζ JOJUTDSJQU  4IFMMεΫϦϓτ ͳ͍ εΫϦϓτ௚  TFSWJDF 6QTUBSU $FOU04 ࠷ۙ·Ͱͷ 6CVOUV ಠࣗܗࣜͷ  DPOG FUDJOJUDPOG ͳ͍ TFSWJDFJOJUDUM TZTUFNE $FOU04d 6CVOUVd ΄͔ 6OJUϑΝΠϧ -JOVY  ͷΈ ΍͍ͬͯ͘ TZTUFNDUM  TFSWJDF ˞6CVOUV͔Βར༻͸Մೳ

Slide 20

Slide 20 text

3FUIJOLJOHPG1*% ௕จ͕ͩʜ ͬ͘͟Γ ىಈεΫϦϓτɺ݁ہશ෦γΣϧεΫϦϓτͩͬͨΓɺҰ ݸҰݸىಈͰ͠ΜͲ͔ͬͨΓɺDHSPVQͱ͔φ΢ౕ͍ͱͷ ࿈ܞ΋େมͩΑͶʜʜ ͦ͜ͰTZTUFNEɺͱ͍͏ײ͡Β͍͠ ˞IUUQQPJOUFSEFCMPHQSPKFDUTTZTUFNEIUNM

Slide 21

Slide 21 text

TZTUFNEΛ ࢖ͬͯΈΔ

Slide 22

Slide 22 text

6OJUϑΝΠϧ ಠࣗܗࣜ JOJ෩ એݴత ʮUBSHFUʯʮNPVOUʯʮTFSWJDFʯʮEFWJDFʯ ͳͲͷछྨ͕͋Δ 6OJUಉ࢜͸ґଘؔ܎͕͋Δ

Slide 23

Slide 23 text

ྫόΠφϦҰݸͷαʔϏε

Slide 24

Slide 24 text

ྫόΠφϦҰݸͷαʔϏε આ໌ͷ΄͔ɺґଘ͢Δ6OJUϑΝΠϧɺ  ىಈॱংΛهड़ ίϚϯυɺ࣮ߦϢʔβʔɺ  લޙʹൃߦ͢ΔίϚϯυɺ؀ڥม਺ɺ  DHSPVQTͷ੍ݶͳͲ ϥϯϨϕϧ૬౰Λهड़

Slide 25

Slide 25 text

ྫఆظ࣮ߦλΠϚʔ

Slide 26

Slide 26 text

-PHHJOH KPVSOBMEͱ͍͏αʔϏε͕୲౰͢Δ TZTUFNEͷҰ෦ͱ͍͏ѻ͍ αʔϏεଆ͸ɺجຊ͸ͱʹ͔͘ඪ४ग़ྗʹϩάΛग़ͤ͹͍͍ ʢGBDUPSBQQײʣ ᠘TZTUFNEͰ͸ɺKPVSOBMEΛ࠶ىಈ͢Δͱ  αʔϏε͕མͪΔ͜ͱ΋͋Δʜʜ $FOU04ͷσϑΥϧτ $FOU04ͰTZTUFNEʹͳΓɺ௚ͬͯΔ

Slide 27

Slide 27 text

TZTUFNEͱ  Ϧιʔε੍ݶ

Slide 28

Slide 28 text

VMJNJU ϦιʔεΛ͍͍ײ͡ʹ੍ݶ͢Δ΍ͭ $16ɺϝϞϦɺϑΝΠϧσΟεΫϦϓλ਺ʜʜ

Slide 29

Slide 29 text

6OJUϑΝΠϧ 6OJUϑΝΠϧ͸γΣϧεΫϦϓτ͡Όͳ͍ JOJUεΫϦϓτΈ͍ͨʹVMJNJUΛॻ͚͹͍͍ͱ͍ ͏࿩͡Όͳ͍ VMJNJU͸όΠφϦͰ͸ͳ͍ͷͰ&YFD4UBSU1SFͰΩοΫͰ͖ ͳ͍ɺͳͲ όΠφϦͻͱͭΈ͍ͨͳͱ͖͸ɺϥούʔΛ͔· ͢ʁ͍΍͍΍ʜʜ

Slide 30

Slide 30 text

NBOTZTUFNEFYFD IUUQXXXGSFFEFTLUPQPSHTPGUXBSFTZTUFNENBOTZTUFNEFYFDIUNM-JNJU$16

Slide 31

Slide 31 text

NBOTZTUFNEFYFD 6OJUϑΝΠϧʹએݴతʹॻ͘ˠΘ͔Γ΍͍͢ʂ VMJNJUͰ͍͏ͲΕʹ૬౰͢Δ͔͕ॻ͍ͯ͋ͬͯ ศར > LimitCPU= ➡ ulimit -t > LimitRSS= ➡ ulimit -m > LimitNOFILE= ➡ ulimit -n

Slide 32

Slide 32 text

ηοτ͢ΔͱͲ͏ͳΔʁ

Slide 33

Slide 33 text

͜͏͍͏ײ͡ʹͳΔ ແࣄɺ$16Λඵ઎༗ͨ͠ޙLJMM͞ΕΔ

Slide 34

Slide 34 text

΋͏Ұͭͷํ๏ NBOTZTUFNESFTPVSDFDPOUSPM

Slide 35

Slide 35 text

DHSPVQͱͷ ࿈ܞ

Slide 36

Slide 36 text

No content

Slide 37

Slide 37 text

TZTUFNEDHUPQ

Slide 38

Slide 38 text

$162VPUBͯ͠Έ·͠ΐ͏

Slide 39

Slide 39 text

ͳΔ΄Ͳ

Slide 40

Slide 40 text

΁ʙ

Slide 41

Slide 41 text

DHSPVQͳͷͰ ಈతʹϦιʔεͷར༻཰Λมߋ͢Δ͜ͱ΋Մೳ EFNP͠·͢

Slide 42

Slide 42 text

No content

Slide 43

Slide 43 text

Ͳ͕͍͍ͬͪΜͩΖ͏ʜʜ NBOݟͨײ͡ͷҹ৅ɺSFTPVSDFDPOUSPMԡ͠ɻ l"MTPOPUFUIBU-JNJU344JTOPU JNQMFNFOUFEPO-JOVY BOETFUUJOHJUIBTOP F⒎FDUz VMJNJU͔ΒҠߦ͠΍͍͢Α͏ʹ-JNJU͕͋Δײ͡ɻ ͳΔ΂͘SFTPVSDFDPOUSPMͨ͠΄͏͕͍͍ͷͰ͸

Slide 44

Slide 44 text

TZTUFNEͱ ϑΝΠϧγεςϜͷl෼཭z

Slide 45

Slide 45 text

1SJWBUF5NQઃఆ

Slide 46

Slide 46 text

ࣗಈͰσΟϨΫτϦ͕Ͱ͖Δ ˞αʔϏεΛམͱ͢ͱσΟϨΫτϦ΋ফ͑Δ

Slide 47

Slide 47 text

αʔϏεଆͰ͸UNQ

Slide 48

Slide 48 text

ਂ௥͍ ىಈલʹ ϑΝΠϧγεςϜΛVOTIBSF͢Δ UNQΛUNQTZTUFNEQSJWBUFʹ  όΠϯυϚ΢ϯτ͢Δ ͱ͍͏͚ͩ ͳͷͰਖ਼֬ʹ͸ɺNPVOUOBNFTQBDFͷ෼཭Λ ར༻͍ͯ͠Δ

Slide 49

Slide 49 text

VOTIBSF ͱ͸ -JOVYOBNFTQBDFͱ͸ ϓϩηε͝ͱʹɺΞΫηεͰ͖ΔϦιʔεΛ෼͚Δ͜ͱ͕ Ͱ͖Δػೳ VOTIBSFΛݺͿͱ౰֘ϓϩηεͰ  ৽͍͠ωʔϜεϖʔεΛ࡞Δ  ʢNPVOUɺωοτϫʔΫɺ1*%ʜʜʣ

Slide 50

Slide 50 text

TZTUFNEͷྫ NOUͷωʔϜεϖʔε ͚͕ͩมΘ͍ͬͯΔ ͜ͱ͕Θ͔Δ

Slide 51

Slide 51 text

ͦͷଞͷNPVOU෼཭ IUUQFOBLBJIBUFOBCMPHDPNFOUSZ

Slide 52

Slide 52 text

3FBE0OMZ%JSFDUSJFT

Slide 53

Slide 53 text

ͦͷϓϩηε͔Β͸มߋͰ͖ͳ͍ ҰํͰɺଞͷϓϩηε͔Β͸Մೳ

Slide 54

Slide 54 text

ͦͷϓϩηεͰ͸ ͪ͜Β΋ɺVOTIBSF͞Εͨ͋ͱɺ  FUDSFBEPOMZUFTUΛSPͰόΠϯυϚ΢ϯτ͠ͳ͓ ͍ͯ͠Δ͜ͱ͕Θ͔Δ ҰํɺଞͷϓϩηεͰ͸ͦͷϚ΢ϯτ͕֬ೝͰ͖ͳ͍

Slide 55

Slide 55 text

΋͏গ͚ͩ͠ ਂ௥͍

Slide 56

Slide 56 text

VOTIBSFʹͳΖ͏ IJCPNB͞Μͱ͍͏ํͷهࣄ SVCZͰVOTIBSF ݺͼग़ͯ͠Ϛ΢ϯτ໊લۭؒΛ෼཭ IUUQEIBUFOBOFKQIJCPNB ֦ுϥΠϒϥϦॻ͔ͳͯ͘ݺͼग़ͤΔΑ͏ͳͷ Ͱศར

Slide 57

Slide 57 text

JSCͰ΍Ζ͏

Slide 58

Slide 58 text

JSCͰ΍Ζ͏

Slide 59

Slide 59 text

૯ׅ

Slide 60

Slide 60 text

TZTUFNE ͨͩͷJOJUͷ୅ସͰ͸ͳ͍ DHSPVQ΍-JOVYOBNFTQBDFͱ  ݁ߏີ઀ʹ࿈ܞͰ͖ɺ৭ʑͳ࢖͍ಓ͕͋Γͦ͏ ʢͦ͏͍͑͹ׂѪ͠·͕ͨ͠ɺDBQBCJMJUZ΋͍͡Ε·͢ʣ > CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW …

Slide 61

Slide 61 text

TZTUFNEͷϝϦοτॴײ 6OJUϑΝΠϧͰએݴతʹαʔϏεఆٛɺ  ґଘɺϦιʔεͷ഑෼ɺ෼཭ΛఆٛͰ͖Δ DHSPVQMJOVYOBNFTQBDFͷৄࡉͳ"1*ʹ  ৄ͘͠ͳͯ͘΋ɺTZTUFNEͷσΟϨΫςΟϒ͕ ϥοϓͯ͘͠ΕΔͷͰɺ༰қʹར༻Ͱ͖Δ TZTUFNE͸ਓؒͨͪʹ༏͍͠ʂ

Slide 62

Slide 62 text

DPOUBJOFSWTTZTUFNE TZTUFNE͚ͩͰ΋Ͱ͖Δ͜ͱ͕݁ߏ͋Δ Ͱ͖ͳ͍͜ͱ΋͋Δɻ1*%ͷ෼཭ͱ͔͕ͦ͏ %PDLFSͱTZTUFNEͷ࿈ܞͷྫ΋͋Δ IUUQFOBLBJIBUFOBCMPHDPNFOUSZ ૬൓͢Δ΋ͷͰ΋ͳ͘ɺಘҙ෼໺Ͱ࢖͍෼͚

Slide 63

Slide 63 text

5SZ TZTUFNE

Slide 64

Slide 64 text

ࢀߟจݙ 4ZTUFNEೖ໳γϦʔζ JEFOBLBJ͞Μ IUUQFOBLBJIBUFOBCMPHDPNFOUSZ ͱ͍͏͔ඇৗʹৄ͘͠ɺ๻ͷൃදཁΔΜͩΖ͏͔ʜʜ TZTUFNEపఈೖ໳!-JOVYঁࢠ෦ ಉ IUUQXXXTMJEFTIBSFOFUFOBLBJMJOVY ๻ͷൃදSZ DPOTVMUFNQMBUFΛTZTUFNEͰಈ͔͢ͱ͖ͷֶͼ IUUQUPNPIJTBPEBDPNQPTUTVTF@TZTUFNE@XJUI@DPOTVMUFNQMBUFIUNM