Debian lxc wøz— Ï äéå” inittab ” getty ôŠ»̃µ¶ ∼• cgroupfs þÁ ç · # a p t - g e t i n s t a l l l x c # l x c - c r e a t e - n c t 0 1 - t d e b i a n : ( ł •̂s−) # v i / v a r / l i b / l x c / c t 0 1 / c o n f i g ( ìáç ß Ë94”Ł1” g) # l x c - s t a r t - n c t 0 1 ( d e b i a n Ô ä ö ß çƒ”——“ nø»¶xÌ “µ—ß > < ) 1 : 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 c o n s o l e c 1 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 1 l i n u x c 2 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 2 l i n u x c 3 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 3 l i n u x c 4 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 4 l i n u x 15/68
Plamo lxc wøz— # i n s t a l l p k g / p a t h / t o / c o n t r i b / V i r t u l i z a t i o n / * . t x z # c d / e t c / r c . d / i n i t . d ; c h m o d 7 5 5 l x c - n e t c g r o u p s - m o u n t # / e t c / r c . d / i n i t . d / l x c - n e t # / e t c / r c . d / i n i t . d / c g r o u p s - m o u n t # l x c - c r e a t e - n c t 0 1 - t p l a m o # l x c - s t a r t - n c t 0 1 - d # l x c - c o n s o l e - n c t 0 1 lxcbr0 oqõ áÔ³¢{|¿veth lxcbr0 •¼ÜáÞ¡−øq•¶›–o − (Ubuntu ”ðË ) dnsmasq ³³o DHCP ¼è Õwç ¤−øq•|–m− · · 18/68
Namespace ̀ ”NÔ ° setns(2) (kernel 3.0) man 2 setns •ø− ô¹¾ å½ÕË öܳt¡øq•¶›–o−́ clone(), unshare() &|o Namespace ³¢{¡−̃ »h “w¿ ƒ” Namespace »&|znø|¤ö ×Õ ƒ”ÄCvœ|v¢s¶ó ƒ̃ ł vœ Namespace •¼Ë×Õ¡−̀ w 3.0 vœ g → setns() Namespace ³̨Ö¡−>ł ( ô¹¾ å½ÕË öÜ) · · 3.0 » net, uts, ipc ” Namespace ”Æ - i n t s e t n s ( i n t f d , i n t n s t y p e ) ; ̃”ô¹¾ å½ÕË öÜ» /proc/[pid]/ns ı̀” Namespace ³̨Ö¡−à @¶ô¹¾ å½ÕË öÜ «¶Æ• glibc » 2.14 ı ³ih Namespace file descriptors (lwn.net) · · · 25/68
Namespace ̀ ”NÔ ° User Namespace (kernel 3.8) Linux 3.8 ” User Namespace ̀ (1) Linux 3.8 ” User Namespace ̀ (2) Linux 3.8 ” User Namespace ̀ (3) Linux 3.8 ” User Namespace ̀ (4) · · · · 30/68
Namespace ̀ ”NÔ ° setns(2) (kernel 3.8) 3.7 ıÚ” /proc/[pid]/ns ı̀ 3.8 ı ” /proc/[pid]/ns ı̀ - r - - - - - - - - 1 r o o t r o o t 0 M a r 1 1 5 : 4 1 i p c - r - - - - - - - - 1 r o o t r o o t 0 M a r 1 1 5 : 4 1 n e t - r - - - - - - - - 1 r o o t r o o t 0 M a r 1 1 5 : 4 1 u t s l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 4 : 5 9 i p c - > i p c : [ 4 0 2 6 5 3 2 3 0 1 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 m n t - > m n t : [ 4 0 2 6 5 3 2 2 9 9 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 n e t - > n e t : [ 4 0 2 6 5 3 2 3 0 4 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 p i d - > p i d : [ 4 0 2 6 5 3 2 3 0 2 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 u t s - > u t s : [ 4 0 2 6 5 3 2 3 0 0 ] /proc/[pid]/ns ı̀”ô¹¾ wÃ@¶Ó ü áË Ë ¶›¤ œ∼ùÚ 7•:|–o−þ »¿ œ∼ inode ³Ë¡øq•¶›¤ · · stat() +”•œ∼ùÚ 7•:|–o−v∙qvÎ h - 32/68
Cgroups ”NÔ ° CFS bandwidth control (Kernel 3.2) v ß”u ( œ∼»¶³|–o−ö ×Õ•œ∼ß) Oz“¦)º¡ # e c h o 5 0 0 0 > / s y s / f s / c g r o u p / c p u / t e s t 1 / c p u . c f s _ q u o t a _ u s # e c h o 5 0 0 0 > / s y s / f s / c g r o u p / c p u / t e s t 2 / c p u . c f s _ q u o t a _ u s # p s a u x P I D U S E R P R N I V I R T R E S S H R S % C P U % M E M T I M E + C O M M A N D 3 1 4 6 k a r m a 2 0 0 1 9 1 0 4 2 2 0 4 1 5 4 0 R 5 0 . 0 0 : 4 2 . 5 2 b a s h 3 1 6 8 k a r m a 2 0 0 1 9 1 0 4 2 2 0 8 1 5 4 0 R 5 0 . 0 0 : 4 2 . 5 0 b a s h # e c h o 1 0 0 0 0 > / s y s / f s / c g r o u p / c p u / t e s t 2 / c p u . c f s _ q u o t a _ u s # p s a u x P I D U S E R P R N I V I R T R E S S H R S % C P U % M E M T I M E + C O M M A N D 3 1 4 6 k a r m a 2 0 0 1 9 1 0 4 2 2 0 4 1 5 4 0 R 1 0 0 . 0 2 : 1 3 . 1 1 b a s h 3 1 6 8 k a r m a 2 0 0 1 9 1 0 4 2 2 0 8 1 5 4 0 R 5 0 . 0 2 : 0 4 . 3 9 b a s h 42/68
Cgroups ”NÔ ° Network priority cgroup (Kernel 3.3) ̃«œ»óž¶̀ :-) ö ×ÕÌ ß ö”Åìáç ß Ë¾ Üß ôÂß Õ•Z¡−=ß̃³Ł1¡− 9÷¡− » 2 fi · · · net_prio.prioidx ( Çß ì wå ³i¡−Ì ß ö³Ú¡ß) net_prio.ifpriomap ( ž Üß ôÂß Õ•Z¡−=ß̃) - - $ c a t / s y s / f s / c g r o u p / n e t _ p r i o / n e t _ p r i o . i f p r i o m a p l o 0 e t h 1 0 e t h 0 0 46/68
Cgroups ”NÔ ° Network priority cgroup (Kernel 3.3) =ß̃”Ł1 iperf ³ |¤gp net_prio.ifpriomap # e c h o " e t h 0 1 " > / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 1 / n e t _ p r i o . i f p r i o m a p # e c h o " e t h 0 1 0 0 " > / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 2 / n e t _ p r i o . i f p r i o m a p [ 4 ] 0 . 0 - 2 0 . 5 s e c 2 . 1 7 G B y t e s 9 0 8 M b i t s / s e c < = p r i o r i t y 1 0 0 ”z [ 5 ] 0 . 0 - 2 0 . 6 s e c 7 1 . 2 M B y t e s 2 9 . 1 M b i t s / s e c < = p r i o r i t y 1 ”z # c a t / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 1 / n e t _ p r i o . i f p r i o m a p e t h 0 1 # c a t / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 2 / n e t _ p r i o . i f p r i o m a p e t h 0 1 0 0 47/68
tenforward
line_developers
egmc
kawajiritakayuki
kobayang
sansantech
yoshitake_1201
keio_smilab
dahatake
edwardkenfox
terahide
pf_businessdivision
coe
productmarketing
addyosmani
reverentgeek
eitanlees
rasmusluckow
morganepeng
chrislema
destraynor
keathley
maggiecrowley