cgroupfs þÁ ç · # a p t - g e t i n s t a l l l x c # l x c - c r e a t e - n c t 0 1 - t d e b i a n : ( ł •̂s−) # v i / v a r / l i b / l x c / c t 0 1 / c o n f i g ( ìáç ß Ë94”Ł1” g) # l x c - s t a r t - n c t 0 1 ( d e b i a n Ô ä ö ß çƒ”——“ nø»¶xÌ “µ—ß > < ) 1 : 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 c o n s o l e c 1 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 1 l i n u x c 2 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 2 l i n u x c 3 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 3 l i n u x c 4 : 1 2 3 4 5 : r e s p a w n : / s b i n / g e t t y 3 8 4 0 0 t t y 4 l i n u x 15/68
l p k g / p a t h / t o / c o n t r i b / V i r t u l i z a t i o n / * . t x z # c d / e t c / r c . d / i n i t . d ; c h m o d 7 5 5 l x c - n e t c g r o u p s - m o u n t # / e t c / r c . d / i n i t . d / l x c - n e t # / e t c / r c . d / i n i t . d / c g r o u p s - m o u n t # l x c - c r e a t e - n c t 0 1 - t p l a m o # l x c - s t a r t - n c t 0 1 - d # l x c - c o n s o l e - n c t 0 1 lxcbr0 oqõ áÔ³¢{|¿veth lxcbr0 •¼ÜáÞ¡−øq•¶›–o − (Ubuntu ”ðË ) dnsmasq ³³o DHCP ¼è Õwç ¤−øq•|–m− · · 18/68
•ø− ô¹¾ å½ÕË öܳt¡øq•¶›–o−́ clone(), unshare() &|o Namespace ³¢{¡−̃ »h “w¿ ƒ” Namespace »&|znø|¤ö ×Õ ƒ”ÄCvœ|v¢s¶ó ƒ̃ ł vœ Namespace •¼Ë×Õ¡−̀ w 3.0 vœ g → setns() Namespace ³̨Ö¡−>ł ( ô¹¾ å½ÕË öÜ) · · 3.0 » net, uts, ipc ” Namespace ”Æ - i n t s e t n s ( i n t f d , i n t n s t y p e ) ; ̃”ô¹¾ å½ÕË öÜ» /proc/[pid]/ns ı̀” Namespace ³̨Ö¡−à @¶ô¹¾ å½ÕË öÜ «¶Æ• glibc » 2.14 ı ³ih Namespace file descriptors (lwn.net) · · · 25/68
ı̀ 3.8 ı ” /proc/[pid]/ns ı̀ - r - - - - - - - - 1 r o o t r o o t 0 M a r 1 1 5 : 4 1 i p c - r - - - - - - - - 1 r o o t r o o t 0 M a r 1 1 5 : 4 1 n e t - r - - - - - - - - 1 r o o t r o o t 0 M a r 1 1 5 : 4 1 u t s l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 4 : 5 9 i p c - > i p c : [ 4 0 2 6 5 3 2 3 0 1 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 m n t - > m n t : [ 4 0 2 6 5 3 2 2 9 9 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 n e t - > n e t : [ 4 0 2 6 5 3 2 3 0 4 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 p i d - > p i d : [ 4 0 2 6 5 3 2 3 0 2 ] l r w x r w x r w x 1 r o o t r o o t 0 3 j 1 Ÿ 1 5 : 0 6 u t s - > u t s : [ 4 0 2 6 5 3 2 3 0 0 ] /proc/[pid]/ns ı̀”ô¹¾ wÃ@¶Ó ü áË Ë ¶›¤ œ∼ùÚ 7•:|–o−þ »¿ œ∼ inode ³Ë¡øq•¶›¤ · · stat() +”•œ∼ùÚ 7•:|–o−v∙qvÎ h - 32/68
ZD (Linux 3.9) ( ÜÎ ) H•cvc•¶−ò&»? · The conclusion of the 3.9 merge window (lwn.net) "The NFS code has gained network namespace support, allowing the operation of per-container NFS servers." - - · 33/68
( œ∼»¶³|–o−ö ×Õ•œ∼ß) Oz“¦)º¡ # e c h o 5 0 0 0 > / s y s / f s / c g r o u p / c p u / t e s t 1 / c p u . c f s _ q u o t a _ u s # e c h o 5 0 0 0 > / s y s / f s / c g r o u p / c p u / t e s t 2 / c p u . c f s _ q u o t a _ u s # p s a u x P I D U S E R P R N I V I R T R E S S H R S % C P U % M E M T I M E + C O M M A N D 3 1 4 6 k a r m a 2 0 0 1 9 1 0 4 2 2 0 4 1 5 4 0 R 5 0 . 0 0 : 4 2 . 5 2 b a s h 3 1 6 8 k a r m a 2 0 0 1 9 1 0 4 2 2 0 8 1 5 4 0 R 5 0 . 0 0 : 4 2 . 5 0 b a s h # e c h o 1 0 0 0 0 > / s y s / f s / c g r o u p / c p u / t e s t 2 / c p u . c f s _ q u o t a _ u s # p s a u x P I D U S E R P R N I V I R T R E S S H R S % C P U % M E M T I M E + C O M M A N D 3 1 4 6 k a r m a 2 0 0 1 9 1 0 4 2 2 0 4 1 5 4 0 R 1 0 0 . 0 2 : 1 3 . 1 1 b a s h 3 1 6 8 k a r m a 2 0 0 1 9 1 0 4 2 2 0 8 1 5 4 0 R 5 0 . 0 2 : 0 4 . 3 9 b a s h 42/68
ö ×ÕÌ ß ö”Åìáç ß Ë¾ Üß ôÂß Õ•Z¡−=ß̃³Ł1¡− 9÷¡− » 2 fi · · · net_prio.prioidx ( Çß ì wå ³i¡−Ì ß ö³Ú¡ß) net_prio.ifpriomap ( ž Üß ôÂß Õ•Z¡−=ß̃) - - $ c a t / s y s / f s / c g r o u p / n e t _ p r i o / n e t _ p r i o . i f p r i o m a p l o 0 e t h 1 0 e t h 0 0 46/68
³ |¤gp net_prio.ifpriomap # e c h o " e t h 0 1 " > / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 1 / n e t _ p r i o . i f p r i o m a p # e c h o " e t h 0 1 0 0 " > / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 2 / n e t _ p r i o . i f p r i o m a p [ 4 ] 0 . 0 - 2 0 . 5 s e c 2 . 1 7 G B y t e s 9 0 8 M b i t s / s e c < = p r i o r i t y 1 0 0 ”z [ 5 ] 0 . 0 - 2 0 . 6 s e c 7 1 . 2 M B y t e s 2 9 . 1 M b i t s / s e c < = p r i o r i t y 1 ”z # c a t / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 1 / n e t _ p r i o . i f p r i o m a p e t h 0 1 # c a t / s y s / f s / c g r o u p / n e t _ p r i o / t e s t 2 / n e t _ p r i o . i f p r i o m a p e t h 0 1 0 0 47/68
events devcg: introduce proper hierarchy support (3.10?) perf, cgroup: implement hierarchy support for perf_event controller (3.10?) memcg: make memcg's life cycle the same as cgroup soft limit rework · sane_behavior ÅöÓ :Ø (3.10?) Fixing control groups - - · The mempressure control group proposal 3.10 ‾−!? → memory.txt (3.10) - - · · · · 54/68
tenforward
ks91
foursue
pelelgrino
lycorptech_jp
visional_engineering_and_design
rainerhahnekamp
k6s4i53rx
fujiwara3
kazzpapa3
bengo4com
kmatsui
scotthsieh825
holman
moore
chrisshort
skipperchong
jnunemaker
jonyablonski
jcasabona
jponch
brianwarren
62gerente
mthomps
zakiyama
![Namespace ̀ ”NÔ ° setns(2) (kernel 3.8) 3.7 ıÚ” /proc/[pid]/ns](https://files.speakerdeck.com/presentations/2dd405b0acfa013057812a9f8029e58b/slide_31.jpg){kind=link}
![lxc 1.0 ̈Ö¦– lxc-attach ̈x s → [lxc-devel] [PATCH] [RFC]](https://files.speakerdeck.com/presentations/2dd405b0acfa013057812a9f8029e58b/slide_62.jpg){kind=link}
