「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch

Hacker Tackle 2018 発表資料

Transcript

1. ۙ౻Ӊஐ࿕
   
   (.0
   1FQBCP
   *OD
   
   !)BDLFS
   5BDLMF શવΘ͔Βͳ͍ɻ
   Զͨͪ͸งғؾͰ
   ίϯςφΛ΍ͬͯ
 ͍Δ
2. ۙ౻Ӊஐ࿕
   !VE[VSB &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ ೥ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉ೥Α Γ෱Ԭࢢ಺ʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛ૊Έ ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ
   ͰͷτʔΫ͕࠾୒͞Εɺ·ͨ౳ιϑτ΢ΣΞ Ͱୈճ෱Ԭ3VCZେ৆Λड৆ɻ
   ݱࡏ͸ɺ)BDPOJXB Λϕʔεͱͨ͠Ϋϥ΢υαʔϏεͰ͋ΔʮϩϦϙο ϓʂϚωʔδυΫϥ΢υʯʹࣾ಺ٕज़ސ໰ ͱ͠ ͯࢀՃ͍ͯ͠Δɻ
3. ࠓ೔ͷ͓࿩ w
   งғؾͰίϯςφͷத਎Λཧղ͢Δ
   w
   งғؾͰίϯςφͷΤίγεςϜΛཧղɹ
   w
   งғؾͰίϯςφΛࣗ࡞͢Δʹ͸
   w
   ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ
4. งғؾͰίϯ ςφͷத਎Λ ཧղ͢Δ
5. ίϯςφԾ૝Խ
6. ίϯςφɺ
   ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
7. ͡Ό͋࡞ͬͯΈ·͠ΐ͏͔
8. %PDLFS
   Λྫʹ͠·͢ wී௨ͷ-JOVY 6CVOUV
   #JPOJD ʹ%PDLFSΛೖΕͯɺෳ਺ݸίϯςφΛ ࡞ͬͯΈΔɻ $ docker run --rm -d debian:latest /bin/sleep 99 d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...
9. ࠷ۙ DF ͷ%PDLFS w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷ
   QT
   ίϚϯυΛൃߦͯ͠Έ·͠ΐ͏
   w;Ή;Ή
10. ίϯςφͷTMFFQίϚϯυ͸
    ϗετϚγϯ͔Β
    ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢
11. ͭ·Γ
12. ίϯςφ͸ϓϩηεͳΜ ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ ʂʂʂʂʂʂʂʂʂʂ
13. ίϯςφʮԾ૝Խʯͬͯݴ͏͚ΕͲ wίϯςφͷ࣮ݱʹ͓͍ͯ͸ɺϋʔυ΢ΣΞͷԾ૝Խʢ$16ɺϝϞϦͳ Ͳʣ͸ߦ͍ͬͯͳ͍͜ͱʹ஫ҙɻ
    wEPDLFS
    SVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷ؀ڥʹೖΔʯ͜ͱ͕ग़དྷ ΔɻͦͷΑ͏ʹಠཱͨ͠؀ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾ૝Խʯ ͱݺΜͰ͍Δͱ΋ݴ͑Δɻ
    wٯʹϓϩηεͳͷͰɺͦͷଞͷԾ૝Խख๏ΑΓ΋ܰྔͩ͠ɺΑΓࡉ͔ ੍͍ޚ͕ՄೳʹͳΔଆ໘΋͋Δɻ
14. DG
    ͦͷଞͷԾ૝Խ wϗετܕ
    
    ͋Δ04ʹɺઐ༻ͷιϑτ΢ΣΞΛೖΕͯԾ૝Խ͢Δ
    wϋΠύʔόΠβܕ
    
    Ծ૝Խઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ
    wͳͲͳͲɺ࣮ݱͷํࣜ͸ز͔ͭ͋Δ͕ɺಛ௃ͱͯ͠ɺϋʔυ΢ΣΞͷ Ծ૝ԽΛߦ͏ɻͦͷͨΊ04ͷछྨ͸ࣗ༝ʹͳΔ͕ɺίϯςφΑΓ΋ Φʔόʔϔου͕େ͖͘ͳΔɻ
17. ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐ΂Δ wΈΜͳ
    /proc
    ͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ
    w/proc/PID/*
    ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷ΋ͷ ͱʮίϯςφԽͨ͠ʯͷ΋ͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ ͍Δ͜ͱ͕Θ͔Δɻ
    w/proc/PID/ns,
 /proc/PID/cgroup,
 /proc/PID/status,
 
18. ʮίϯςφԽʯ͢ΔͨΊͷ
    -JOVYͷػೳ
19. -JOVY
    /BNFTQBDF
20. QSPD1*%OT
    ͕ҧ͏ wΑ͘ݟΔͱҧ͏
    wVUTͱ͔JQDͱ͔NOUͱ͔
 ͍Ζ͍Ζ͋Δ
    w͜ΕΒ͸ɺάϩʔόϧͳ໊લۭؒͱ͸ผͷ04ϦιʔεΛׂΓ౰ͯΒ Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY
    /BNFTQBDFͱ ݺΜͰ͍Δɻ
    wྫ͑͹654
    /BNFTQBDF
    
    άϩʔόϧͳϗετ໊ͱ͸ಠཱͨ͠ϗετ໊Λ࣋ͯΔ
22. ίϯςφͷωοτϫʔΫʹʮೖΔʯ wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY
    /BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ
    wEPDLFS
    FYFD
    ͱൺֱͯ͠ΈΑ͏ $ sudo nsenter \ --net=/proc/$( \ docker inspect hackertackle_1 -f ‘{{.State.Pid}}' \ )/ns/net
23. EPDLFS
    FYFD OTFOUFS
24. DHSPVQ
25. DHSPVQͱ͸ wDHSPVQ $POUSPM
    (SPVQ ͱ͸ɺ೚ҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ υ΢ΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍͸౷ܭ৘ใΛऔಘͰ͖Δɻ
    wྫ
    w$16ͷ੍ݶ
    άϧʔϓશମͷ$16ར༻཰Λ/ʹԡ͑ͨ͞ΓɺίΞΛ ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭ΋Θ͔Δ
    wϝϞϦͷ੍ݶ
    άϧʔϓશମͰ࢖͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖ Δɻݶքʹୡͨ࣌͠ͷڍಈ΋બ΂Δ
26. QJETαϒγεςϜ wͦͷάϧʔϓʹॴଐ͢Δϓϩηε਺Λ੍ݶͰ͖Δɻ
    wDHSPVQ͸ಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ࢖͑Δɻ ݸʹ੍ݶ
27. ͦͷάϧʔϓʹॴଐ͢Δϓϩηε਺Λ ੍ݶͰ͖Δ
    ʹ
    GPSL
    CPNC
    ରࡦ͕Ͱ͖Δ
28. ࢼͯ͠Έ·͠ΐ͏ w˞
    ࣦഊ͢Δͱɺ฼؋͝ͱམͪ·͢ term1:~$ echo $$ #=> 5849 term2:~$ echo 5849 | \ sudo tee /sys/fs/cgroup/pids/hackertackle/tasks term1:~$ cat /proc/self/cgroup | grep pids 3:pids:/hackertackle term1:~$ #... doing fork bomb ...
29. ੜؐ
30. ͦͷଞͷػೳ wDISPPUQJWPU@SPPU
    
    ͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ
    wSMJNJU
    
    VMJNJUͷ΍ͭ
    w,FSOFM
    $BQBCJMJUZ
    
    SPPUͷݖݶΛ෼ׂͯ͠Ұ෦Λ෇༩ɺୣ͏
    wTFDDPNQ
    
    γεςϜίʔϧͷϑΟϧλϦϯά
    w."$ BQQBSNPS4&-JOVY50.0:0ଞ
31. TFDDPNQͷྫ wίϯςφ಺෦ͰɺNLEJSίϚϯυͰ࢖͏γεςϜίʔϧ ʢmkdir(2)ʣ΍DIPXOίϚϯυͰ࢖͏΍ͭʢchownat(2)ʣͷݺͼ ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ΋౰֘ૢ࡞͕ෆՄ ೳʹɻ޷͖ͳίϚϯυΛstrace(1)Ͱௐ΂ͯ෧ҹ͠Α͏ʂ ➡ ➡
32. ং൫ͷ·ͱΊ wίϯςφ͸ಛघͳϓϩηεͱߟ͑Ε͹0,
    wϓϩηεΛϗετ͔Βִ཭ɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱ؀ڥͱ͢Δͷ͕جຊతͳߟ͑ํ
    wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗ෼Ͱݺͼग़ͤ͹ɺί ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱ΋Ͱ͖Δ
33. งғؾ͸௫Ί͔ͨͳʁ
34. งғؾͰίϯ ςφͷΤίγ εςϜΛཧղ
35. ίϯςφ༻ޠ
36. ίϯςφ༻ޠ %PDLFS -9$ -9% .PCZ ,VCFSOFUFT 'MBOOFM SVOD (,& &$4 "$* 0$* 5FDUPOJD $PSF04 )BDPOJXB SLU SBJMDBS $BMJDP /PNBE 4XBSN
37. ଟ͘ͳ͍ʁ
38. આ໌Ͱ͖·͔͢ʁ
39. ϨΠϠͰߟ͑ͯΈΔ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE
40. ิॿઢΛҾ͜͏ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$*
    4QFD $3*
41. 0$*
    0QFO
    $POUBJOFS
    *OJUJBUJWF
42. 0$*ͱ͸ wίϯςφͷ৭ʑͳن໿ɾن֨Λඪ४Խ͍ͯ͠Δஂମ
    w0$*ͷن໿ʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ
    wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε࢖͍ճ͠Ͱ͖Δ
    w04͝ͱʹඞཁͳύϥϝʔλ͕੔ཧ͞Εͯࣗ෼ͰඞཁͳϥϯλΠϜΛ ࣮૷Ͱ͖ͨΓ͢Δ
    w࣮૷ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ΋༰қʹͳΔ
43. ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏ EPDLFS
    ίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ௕໊͍લ ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ
44. SVOD
    ͷϨΠϠʔ͸Մ׵Ͱ͋Δ w0$*ͷن໿Ͳ͓Γͷ࣮૷Λͨ͠ίϯςφϥϯλΠϜͰ͋Ε͹ɺ
 ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ
    wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS Ͱ͸EPDLFSDPOUBJOFSETIJNͱ͍ ͏ϓϩάϥϜ͕୲͍ͬͯΔ
45. ͍֮͑ͯ·͔͢ɺ
    SBJMDBS w0SBDMFͷίϯςφϥϯλΠϜɺࠓ೔ͷτʔΫ΋େ੝گɾ3VTU੡
    w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ࢖͏Α͏ʹࢦఆՄೳ
    wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ
 FEHFͷ
    
    Ͱ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠ ExecStart=/usr/bin/dockerd -H fd:// --experimental \ --add-runtime "rc=/usr/local/bin/railcar"
46. SBJMDBS
    Λ%PDLFSͰ࢖͑Δ
47. $3*
    $POUBJOFS
    3VOUJNF
    *OUFSGBDF
48. ͜ͷ෼໺ ,VCFSOFUFT ʹؔͯ͠͸ wૉਓͳΜͰ͕͢
    w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢
    wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ 8BSOJOH
49. NJOJDVCF
    ͳͲͰαΫοͱLT؀ڥΛ w࡞ͬͯΈΔ
    wNJOJLVCF
    TTI
    ͰೖΔͱɺ౰વEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ
    wຬ଍ͨ͠ͷͰ
 ͜ͷ؀ڥ͸ফ͠·͢
50. ࠓ౓͸ɺΦϓγϣϯΛม͑Δ wҎԼͷΦϓγϣϯͰNJOJLVCF
    TUBSU͢Δ
    wʢ্ख͘ಈ͔ͳ͍࣌͸Ұ୴NJOJLVCF
    TUPQ
    
    Φϓγϣϯແ͠Ͱ
    NJOJLVCF
    TUBSUʣ $ minikube start \ --network-plugin=cni \ --container-runtime=cri-o \ --bootstrapper=kubeadm
51. DSJP
    
    ͍ͬͯ͏΍ͭʁ w͕͍Δ
    w͍ͭ͜͸୭ͩ
52. DSJP
    
    SLUMFU
    ͳͲͳͲ w$3*
    ͱ͸ɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ ࢓༷ͷࣄͰɺH31$Λ࢖͍ͬͯΔ
    w$3*
    ϓϩτίϧΛ஻ΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ ࣮૷ʹؔ܎ͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ
    wDSJP
    ͸ίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ࢖͏
    wSLUMFU͸ίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ࢖͏
53. ͜͜·Ͱͷ·ͱΊ w0$*
    ͱ͍͏ஂମͷ࡞ͬͨن໿ʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ ར
    w$3*
    ͱ͍͏ن໿ʹԊ࣮ͬͨ૷ͰίϯςφϥϯλΠϜΛ࡞Δͱศར
    w͜ΕΒͷن໿ͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ
54. ṖͷਤΛՃ޻ͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$*
    4QFD $3* ,FSOFM
    TZTDBMM
55. ṖͷਤΛՃ޻ͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$*
    4QFD $3* ,FSOFM
    TZTDBMM ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ
 ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷ໾ׂ͔ҙࣝ͢Δͱ٢
56. ṖͷਤΛՃ޻ͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$*
    4QFD $3* ,FSOFM
    TZTDBMM %PDLFS
    ͸͜͜Λ
    ·ͱΊͯར༻͢ΔԿ͔
57. ṖͷਤΛՃ޻ͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE ,FSOFM
    TZTDBMM -9$-9%ʹؔͯ͠͸ɺ0$*ͱ΋·ͨผ͕ͩɺ
    ͬ͘͟Γ-9$͕Χʔωϧ΍ΓͱΓɺ-9%͕)551
    "1*Λ୲౰ )BDPOJXB͸͜Ε͔Β)551 5$1
    JOUFSGBDFΛ࡞Γ·͢
58. ࠷ޙͷϨΠϠʔ෼͚ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$*
    4QFD $3* ,FSOFM
    TZTDBMM
59. ίϯςφͷωοτϫʔΫઃఆ wز͔ͭઓུ͕͋Δɻ
    w
    ΫϥελϦϯά͠ͳ͍
    wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍
    w
    ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ
    wίϯςφ͕࢖͏ϒϦοδͳͲ΋ࣗ෼ͰҾͬுͬͯؤுͬͯؤுΔ
    w
    $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ
60. $/*
    $POUBJOFS
    /FUXPSL
    *OUFSGBDF
61. $/*ͱ͸ w͜Ε΋·ͨɺ0QFO
    $POUBJOFS
    *OJUJBUJWFͷఆΊͨίϯςφͷωοτ ϫʔΫͷن໿
    w,VCFSOFUFTͰ΋ར༻Ͱ͖Δ
    wOFUXPSLQMVHJODOJ
    Ͱىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ
 γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ
    wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ
    /etc/cni/net.d
    ʹઃఆ͕ೖ ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ
62. qBOOFMͷྫ wqBOOFM͸WYMBO -
    PWFS
    - Λ࣮ݱ͢ΔσʔϞϯ
    wࣗ෼Ͱ૊ΜͰ΋͍͍͚Ͳɺ
 $/*ϓϥάΠϯ͕͋Δ $ kubectl apply -f kube-flannel.yml ʮqBOOFM
    Λ࢖ͬͯ
    -JOVY
    Ͱ࣮ݱ͢Δ
    WYMBO
    ͷ͞ΘΓΛ஌Δʯ
    IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG
    
63. DBMJDP
    ͷྫ w1SPKFDU
    $BMJDP͸-ͷΈͰ࣮ݱ͍ͯ͠Δ
 εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ
 ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ
    w ʮ:BIPP
    +"1"/
    .FFU6Q
    
    ʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ
 IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ $ kubectl apply -f calico.yaml
64. ͦͷଞͷબ୒ࢶ wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO OFUXPSLJOH
    w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυ؀ڥݻ༗ͷઃఆ΋͋ ΔΑ͏ͩʁ
65. ࣮૷ϕʔεͳϨΠϠΘ͚·ͱΊ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$*
    4QFD $3* ,FSOFM
    TZTDBMM $/*  $MVTUFSFE
    /PEF
    1PPM
66. ଟ෼
    ͜͜·ͰͰ
    ෼
67. 0OF
    NPSF
    UIJOH
68. งғؾͰίϯ ςφΛࣗ࡞͠ ͯΈͨ
69. ࣗ࡞Ұཡ wίϯςφϥϯλΠϜ
    
    )BDPOJXB
    wίϯςφઓུ ΦʔέετϨʔγϣϯ૚
    
 'BTU$POUBJOFS
    XJUI
    /)).
    TUBDL
70. )BDPOJXB wίϯςφϥϯλΠϜɻNSVCZݴޠΛ૊ΈࠐΜͰ͍ͯɺίʔυͰίϯς φͷઃఆ΍ৼΔ෣͍ͳͲΛهड़Ͱ͖Δɻ
    wྫ͑͹ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ෼཭͢Δ͔ɺ*1͸ԿΛͭ ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ
    w͋Δ͍͸ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺ౳ɻ
    w๻͕࡞ͬͨɻ
71. 'BTU$POUBJOFS wͬ͘͟ΓߦͰ
    wϦΫΤετ͕͋Δ·Ͱ
 ىಈ͠ͳ͍
    wىಈޙɺҰఆ࣌ؒޙʹఀࢭ
    wͲΜͲΜίϯςφ͕॥؀͢Δ
    wDG
    1IPFOJY
    4FSWFST
    1BUUFSO
    wDG
    'BTU$(* ˞ʮҰาઌߦ͘ίϯςφ؅ཧΞʔΩςΫνϟʯ8&# %#
    13&44
    7PM
72. ΦʔέετϨʔγϣϯΞʔΩςΫνϟ w$.%# $POUFOUT
    .BOBHFNFOU
    %BUBCBTF ͷঢ়ଶʹऩଋ͢Δ ˞ʮ'BTU$POUBJOFS࣮ߦ؀ڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ
73. ,VCF
    TUBDL
    ͱͷൺֱ SVOD ,VCFSOFUFT 'MBOOFM $BMJDP $3*0 $POUBJOFSE ,FSOFM
    TZTDBMM $MVTUFSFE
    /PEF
    1PPM )BDPOJXB OHY@NSVCZ
 CBTFE
 TFSWJDF
    NFTI OHY@NSVCZ

    )551
    "1*
 +BSEJO #SJEHF
    
    WFUI $.%# FUDE
74. ࠙਌ձ Ͱ
75. ऴΘΓʹ
76. ίϯςφɺ࢖ͬͯ·͔͢ʁ wԿͷͨΊʹ࢖͍ͬͯ·͔͢ʁ
    w࣮͸࢖ΘΕ͍ͯΔͷͰ͸ʁ
    wίϯςφͰ͋ͳͨͷ໰୊͸ղܾ͠·͔͢ʁ
    w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠
77. ίϯςφͷ
    ʮงғؾʯ
78. ίϯςφͷ
    ֓೦Ϟσϧ
79. ௨ৗ͸͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ ͏ಈ͔͘ͷઆ໌ʢʣɻ
    ͜Ε͸ɺ໾ʹཱ͍ͬͯΔݶΓ͸ɺ׬શͳ΋ͷ Ͱͳͯ͘΋Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ ʰ୭ͷͨΊͷσβΠϯʁʱ
    
    %"ϊʔϚϯɺ๜༁վగ൛೥
80. ίϯςφͷ֓೦Ϟσϧ͸ʁ wͦΕ͸ίϯςφͰ͢Ͷ
    w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ Ξε͕͋ΔͷͰ͸ͳ͍ͩΖ͏͔ɻ
    w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ
    wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૝૾Ͱ͖Δʁ
    w͔͠͠7.ͷΑ͏ʹԿ΋͔΋Ծ૝Խ͞Ε͍ͯΔΘ͚Ͱ͸ͳ͍͠ɺϗε τʹΑΔ੍໿͸େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ
81. ίϯςφΛͪΌΜͱӡ༻͢Δʹ͸
    ʢ·ͩ·ͩʣத਎Λ௥͍͔͚ͯ
 ཧղ͢Δ͜ͱ͕ॏཁɻ
82. ͦΕʹ
    த਎Λ͔ͬ͠Γཧղ͢Δ͜ͱ͸
    ָ͍͠ʢ͸ͣʣ
83. &OKPZ
    5BDLMJOH
    $POUBJOFS
    &DPTZTUFN
84. ࢀߟࢿྉ w0$*
 IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD
 IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD
    w1SPUPUZQJOH
    ,VCFSOFUFT
    $3*
    CZ
    !SFNPSF
    ͞Μ
 IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ XJUISVCZBOEHSQD
85. 4QFDJBM
    5IBOLT wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓ͸ၟӽͳ͕Β๻ʣ
    w!UONU
    w!S@UBLBJTIJ