Upgrade to Pro — share decks privately, control downloads, hide ads and more …

「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch

KONDO Uchio
February 17, 2018

「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch

Hacker Tackle 2018 発表資料

KONDO Uchio

February 17, 2018
Tweet

More Decks by KONDO Uchio

Other Decks in Technology

Transcript

  1. ۙ౻Ӊஐ࿕(.01FQBCP *OD
    !)BDLFS5BDLMF
    શવΘ͔Βͳ͍ɻ
    Զͨͪ͸งғؾͰ
    ίϯςφΛ΍ͬͯ

    ͍Δ

    View Slide

  2. ۙ౻Ӊஐ࿕!VE[VSB
    &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ
    ೥ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉ೥Α
    Γ෱Ԭࢢ಺ʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ
    ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛ૊Έ
    ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ
    ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ
    ͰͷτʔΫ͕࠾୒͞Εɺ·ͨ౳ιϑτ΢ΣΞ
    Ͱୈճ෱Ԭ3VCZେ৆Λड৆ɻݱࡏ͸ɺ)BDPOJXB
    Λϕʔεͱͨ͠Ϋϥ΢υαʔϏεͰ͋ΔʮϩϦϙο
    ϓʂϚωʔδυΫϥ΢υʯʹࣾ಺ٕज़ސ໰
    ͱ͠
    ͯࢀՃ͍ͯ͠Δɻ

    View Slide

  3. ࠓ೔ͷ͓࿩
    w
    งғؾͰίϯςφͷத਎Λཧղ͢Δ
    w
    งғؾͰίϯςφͷΤίγεςϜΛཧղɹ
    w
    งғؾͰίϯςφΛࣗ࡞͢Δʹ͸
    w
    ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ

    View Slide

  4. งғؾͰίϯ
    ςφͷத਎Λ
    ཧղ͢Δ

    View Slide

  5. ίϯςφԾ૝Խ

    View Slide

  6. ίϯςφɺ
    ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ

    View Slide

  7. ͡Ό͋࡞ͬͯΈ·͠ΐ͏͔

    View Slide

  8. %PDLFSΛྫʹ͠·͢
    wී௨ͷ-JOVY 6CVOUV#JPOJD
    ʹ%PDLFSΛೖΕͯɺෳ਺ݸίϯςφΛ
    ࡞ͬͯΈΔɻ
    $ docker run --rm -d debian:latest /bin/sleep 99
    d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...

    View Slide

  9. ࠷ۙ DF
    ͷ%PDLFS
    w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷQTίϚϯυΛൃߦͯ͠Έ·͠ΐ͏
    w;Ή;Ή

    View Slide

  10. ίϯςφͷTMFFQίϚϯυ͸
    ϗετϚγϯ͔Β
    ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢

    View Slide

  11. ͭ·Γ

    View Slide

  12. ίϯςφ͸ϓϩηεͳΜ
    ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ
    ʂʂʂʂʂʂʂʂʂʂ

    View Slide

  13. ίϯςφʮԾ૝Խʯͬͯݴ͏͚ΕͲ
    wίϯςφͷ࣮ݱʹ͓͍ͯ͸ɺϋʔυ΢ΣΞͷԾ૝Խʢ$16ɺϝϞϦͳ
    Ͳʣ͸ߦ͍ͬͯͳ͍͜ͱʹ஫ҙɻ
    wEPDLFSSVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷ؀ڥʹೖΔʯ͜ͱ͕ग़དྷ
    ΔɻͦͷΑ͏ʹಠཱͨ͠؀ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾ૝Խʯ
    ͱݺΜͰ͍Δͱ΋ݴ͑Δɻ
    wٯʹϓϩηεͳͷͰɺͦͷଞͷԾ૝Խख๏ΑΓ΋ܰྔͩ͠ɺΑΓࡉ͔
    ੍͍ޚ͕ՄೳʹͳΔଆ໘΋͋Δɻ

    View Slide

  14. DGͦͷଞͷԾ૝Խ
    wϗετܕ͋Δ04ʹɺઐ༻ͷιϑτ΢ΣΞΛೖΕͯԾ૝Խ͢Δ
    wϋΠύʔόΠβܕԾ૝Խઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ
    wͳͲͳͲɺ࣮ݱͷํࣜ͸ز͔ͭ͋Δ͕ɺಛ௃ͱͯ͠ɺϋʔυ΢ΣΞͷ
    Ծ૝ԽΛߦ͏ɻͦͷͨΊ04ͷछྨ͸ࣗ༝ʹͳΔ͕ɺίϯςφΑΓ΋
    Φʔόʔϔου͕େ͖͘ͳΔɻ

    View Slide

  15. View Slide

  16. View Slide

  17. ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐ΂Δ
    wΈΜͳ/procͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ
    w/proc/PID/*ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷ΋ͷ
    ͱʮίϯςφԽͨ͠ʯͷ΋ͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ
    ͍Δ͜ͱ͕Θ͔Δɻ
    w/proc/PID/ns,

    /proc/PID/cgroup,

    /proc/PID/status,


    View Slide

  18. ʮίϯςφԽʯ͢ΔͨΊͷ
    -JOVYͷػೳ

    View Slide

  19. -JOVY/BNFTQBDF

    View Slide

  20. QSPD1*%OT͕ҧ͏
    wΑ͘ݟΔͱҧ͏
    wVUTͱ͔JQDͱ͔NOUͱ͔

    ͍Ζ͍Ζ͋Δ
    w͜ΕΒ͸ɺάϩʔόϧͳ໊લۭؒͱ͸ผͷ04ϦιʔεΛׂΓ౰ͯΒ
    Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY/BNFTQBDFͱ
    ݺΜͰ͍Δɻ
    wྫ͑͹654/BNFTQBDFάϩʔόϧͳϗετ໊ͱ͸ಠཱͨ͠ϗετ໊Λ࣋ͯΔ

    View Slide

  21. View Slide

  22. ίϯςφͷωοτϫʔΫʹʮೖΔʯ
    wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY/BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ
    wEPDLFSFYFDͱൺֱͯ͠ΈΑ͏
    $ sudo nsenter \
    --net=/proc/$( \
    docker inspect hackertackle_1 -f ‘{{.State.Pid}}' \
    )/ns/net

    View Slide

  23. EPDLFSFYFD
    OTFOUFS

    View Slide

  24. DHSPVQ

    View Slide

  25. DHSPVQͱ͸
    wDHSPVQ $POUSPM(SPVQ
    ͱ͸ɺ೚ҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ
    ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ
    υ΢ΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍͸౷ܭ৘ใΛऔಘͰ͖Δɻ
    wྫ
    w$16ͷ੍ݶάϧʔϓશମͷ$16ར༻཰Λ/ʹԡ͑ͨ͞ΓɺίΞΛ
    ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭ΋Θ͔Δ
    wϝϞϦͷ੍ݶάϧʔϓશମͰ࢖͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖
    Δɻݶքʹୡͨ࣌͠ͷڍಈ΋બ΂Δ

    View Slide

  26. QJETαϒγεςϜ
    wͦͷάϧʔϓʹॴଐ͢Δϓϩηε਺Λ੍ݶͰ͖Δɻ
    wDHSPVQ͸ಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ࢖͑Δɻ
    ݸʹ੍ݶ

    View Slide

  27. ͦͷάϧʔϓʹॴଐ͢Δϓϩηε਺Λ
    ੍ݶͰ͖Δ
    ʹ
    GPSLCPNCରࡦ͕Ͱ͖Δ

    View Slide

  28. ࢼͯ͠Έ·͠ΐ͏
    w˞ࣦഊ͢Δͱɺ฼؋͝ͱམͪ·͢
    term1:~$ echo $$ #=> 5849
    term2:~$ echo 5849 | \
    sudo tee /sys/fs/cgroup/pids/hackertackle/tasks
    term1:~$ cat /proc/self/cgroup | grep pids
    3:pids:/hackertackle
    term1:~$ #... doing fork bomb ...

    View Slide

  29. ੜؐ

    View Slide

  30. ͦͷଞͷػೳ
    [email protected]͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ
    wSMJNJUVMJNJUͷ΍ͭ
    w,FSOFM$BQBCJMJUZSPPUͷݖݶΛ෼ׂͯ͠Ұ෦Λ෇༩ɺୣ͏
    wTFDDPNQγεςϜίʔϧͷϑΟϧλϦϯά
    w."$ BQQBSNPS4&-JOVY50.0:0ଞ

    View Slide

  31. TFDDPNQͷྫ
    wίϯςφ಺෦ͰɺNLEJSίϚϯυͰ࢖͏γεςϜίʔϧ
    ʢmkdir(2)ʣ΍DIPXOίϚϯυͰ࢖͏΍ͭʢchownat(2)ʣͷݺͼ
    ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ΋౰֘ૢ࡞͕ෆՄ
    ೳʹɻ޷͖ͳίϚϯυΛstrace(1)Ͱௐ΂ͯ෧ҹ͠Α͏ʂ


    View Slide

  32. ং൫ͷ·ͱΊ
    wίϯςφ͸ಛघͳϓϩηεͱߟ͑Ε͹0,
    wϓϩηεΛϗετ͔Βִ཭ɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ
    ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱ؀ڥͱ͢Δͷ͕جຊతͳߟ͑ํ
    wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗ෼Ͱݺͼग़ͤ͹ɺί
    ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱ΋Ͱ͖Δ

    View Slide

  33. งғؾ͸௫Ί͔ͨͳʁ

    View Slide

  34. งғؾͰίϯ
    ςφͷΤίγ
    εςϜΛཧղ

    View Slide

  35. ίϯςφ༻ޠ

    View Slide

  36. ίϯςφ༻ޠ
    %PDLFS
    -9$
    -9%
    .PCZ
    ,VCFSOFUFT
    'MBOOFM
    SVOD
    (,&
    &$4
    "$*
    0$*
    5FDUPOJD
    $PSF04
    )BDPOJXB
    SLU
    SBJMDBS
    $BMJDP
    /PNBE
    4XBSN

    View Slide

  37. ଟ͘ͳ͍ʁ

    View Slide

  38. આ໌Ͱ͖·͔͢ʁ

    View Slide

  39. ϨΠϠͰߟ͑ͯΈΔ
    SVOD
    %PDLFS

    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE

    View Slide

  40. ิॿઢΛҾ͜͏
    SVOD
    %PDLFS

    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    0$*
    4QFD
    $3*

    View Slide

  41. 0$*
    0QFO$POUBJOFS*OJUJBUJWF

    View Slide

  42. 0$*ͱ͸
    wίϯςφͷ৭ʑͳن໿ɾن֨Λඪ४Խ͍ͯ͠Δஂମ
    w0$*ͷن໿ʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ
    wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε࢖͍ճ͠Ͱ͖Δ
    w04͝ͱʹඞཁͳύϥϝʔλ͕੔ཧ͞Εͯࣗ෼ͰඞཁͳϥϯλΠϜΛ
    ࣮૷Ͱ͖ͨΓ͢Δ
    w࣮૷ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ΋༰қʹͳΔ

    View Slide

  43. ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏
    EPDLFSίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ௕໊͍લ
    ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ
    υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ

    View Slide

  44. SVODͷϨΠϠʔ͸Մ׵Ͱ͋Δ
    w0$*ͷن໿Ͳ͓Γͷ࣮૷Λͨ͠ίϯςφϥϯλΠϜͰ͋Ε͹ɺ

    ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ
    wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS
    Ͱ͸EPDLFSDPOUBJOFSETIJNͱ͍
    ͏ϓϩάϥϜ͕୲͍ͬͯΔ

    View Slide

  45. ͍֮͑ͯ·͔͢ɺSBJMDBS
    w0SBDMFͷίϯςφϥϯλΠϜɺࠓ೔ͷτʔΫ΋େ੝گɾ3VTU੡
    w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ࢖͏Α͏ʹࢦఆՄೳ
    wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ

    FEHFͷͰ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠

    ExecStart=/usr/bin/dockerd -H fd:// --experimental \
    --add-runtime "rc=/usr/local/bin/railcar"

    View Slide

  46. SBJMDBSΛ%PDLFSͰ࢖͑Δ

    View Slide

  47. $3*
    $POUBJOFS3VOUJNF*OUFSGBDF

    View Slide

  48. ͜ͷ෼໺ ,VCFSOFUFT
    ʹؔͯ͠͸
    wૉਓͳΜͰ͕͢
    w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢
    wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ
    8BSOJOH

    View Slide

  49. NJOJDVCFͳͲͰαΫοͱLT؀ڥΛ
    w࡞ͬͯΈΔ
    wNJOJLVCFTTIͰೖΔͱɺ౰વEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ
    wຬ଍ͨ͠ͷͰ

    ͜ͷ؀ڥ͸ফ͠·͢

    View Slide

  50. ࠓ౓͸ɺΦϓγϣϯΛม͑Δ
    wҎԼͷΦϓγϣϯͰNJOJLVCFTUBSU͢Δ
    wʢ্ख͘ಈ͔ͳ͍࣌͸Ұ୴NJOJLVCFTUPQΦϓγϣϯແ͠Ͱ
    NJOJLVCFTUBSUʣ
    $ minikube start \
    --network-plugin=cni \
    --container-runtime=cri-o \
    --bootstrapper=kubeadm

    View Slide

  51. DSJP ͍ͬͯ͏΍ͭʁ
    w͕͍Δ
    w͍ͭ͜͸୭ͩ

    View Slide

  52. DSJPSLUMFUͳͲͳͲ
    w$3*ͱ͸ɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ
    ࢓༷ͷࣄͰɺH31$Λ࢖͍ͬͯΔ
    w$3*ϓϩτίϧΛ஻ΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ
    ࣮૷ʹؔ܎ͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ
    wDSJP͸ίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ࢖͏
    wSLUMFU͸ίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ࢖͏

    View Slide

  53. ͜͜·Ͱͷ·ͱΊ
    w0$*ͱ͍͏ஂମͷ࡞ͬͨن໿ʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ

    w$3*ͱ͍͏ن໿ʹԊ࣮ͬͨ૷ͰίϯςφϥϯλΠϜΛ࡞Δͱศར
    w͜ΕΒͷن໿ͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ

    View Slide

  54. ṖͷਤΛՃ޻ͯ͠࠶ܝ
    SVOD
    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    0$*
    4QFD
    $3*
    ,FSOFMTZTDBMM

    View Slide

  55. ṖͷਤΛՃ޻ͯ͠࠶ܝ
    SVOD
    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    0$*
    4QFD
    $3*
    ,FSOFMTZTDBMM
    ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ

    ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷ໾ׂ͔ҙࣝ͢Δͱ٢

    View Slide

  56. ṖͷਤΛՃ޻ͯ͠࠶ܝ
    SVOD
    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    0$*
    4QFD
    $3*
    ,FSOFMTZTDBMM
    %PDLFS͸͜͜Λ
    ·ͱΊͯར༻͢ΔԿ͔

    View Slide

  57. ṖͷਤΛՃ޻ͯ͠࠶ܝ
    SVOD
    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    ,FSOFMTZTDBMM
    -9$-9%ʹؔͯ͠͸ɺ0$*ͱ΋·ͨผ͕ͩɺ
    ͬ͘͟Γ-9$͕Χʔωϧ΍ΓͱΓɺ-9%͕)551"1*Λ୲౰
    )BDPOJXB͸͜Ε͔Β)551 5$1
    JOUFSGBDFΛ࡞Γ·͢

    View Slide

  58. ࠷ޙͷϨΠϠʔ෼͚
    SVOD
    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    0$*
    4QFD
    $3*
    ,FSOFMTZTDBMM

    View Slide

  59. ίϯςφͷωοτϫʔΫઃఆ
    wز͔ͭઓུ͕͋Δɻ
    w
    ΫϥελϦϯά͠ͳ͍
    wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍
    w
    ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ
    wίϯςφ͕࢖͏ϒϦοδͳͲ΋ࣗ෼ͰҾͬுͬͯؤுͬͯؤுΔ
    w
    $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ

    View Slide

  60. $/*
    $POUBJOFS/FUXPSL*OUFSGBDF

    View Slide

  61. $/*ͱ͸
    w͜Ε΋·ͨɺ0QFO$POUBJOFS*OJUJBUJWFͷఆΊͨίϯςφͷωοτ
    ϫʔΫͷن໿
    w,VCFSOFUFTͰ΋ར༻Ͱ͖Δ
    wOFUXPSLQMVHJODOJͰىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ

    γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ
    wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ/etc/cni/net.dʹઃఆ͕ೖ
    ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ

    View Slide

  62. qBOOFMͷྫ
    wqBOOFM͸WYMBO -PWFS-
    Λ࣮ݱ͢ΔσʔϞϯ
    wࣗ෼Ͱ૊ΜͰ΋͍͍͚Ͳɺ

    $/*ϓϥάΠϯ͕͋Δ
    $ kubectl apply -f kube-flannel.yml
    ʮqBOOFMΛ࢖ͬͯ-JOVYͰ࣮ݱ͢ΔWYMBOͷ͞ΘΓΛ஌Δʯ
    IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG

    View Slide

  63. DBMJDPͷྫ
    w1SPKFDU$BMJDP͸-ͷΈͰ࣮ݱ͍ͯ͠Δ

    εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ

    ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ
    w ʮ:BIPP+"1"/.FFU6QʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ

    IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ
    $ kubectl apply -f calico.yaml

    View Slide

  64. ͦͷଞͷબ୒ࢶ
    wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO
    OFUXPSLJOH
    w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυ؀ڥݻ༗ͷઃఆ΋͋
    ΔΑ͏ͩʁ

    View Slide

  65. ࣮૷ϕʔεͳϨΠϠΘ͚·ͱΊ
    SVOD
    -9$ -9%
    )BDPOJXB
    .PCZ
    SLU
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    4XBSN
    /PNBE
    SBJMDBS
    $3*0
    $POUBJOFSE
    0$*
    4QFD
    $3*
    ,FSOFMTZTDBMM
    $/*

    $MVTUFSFE/PEF1PPM

    View Slide

  66. ଟ෼
    ͜͜·ͰͰ

    View Slide

  67. 0OFNPSFUIJOH

    View Slide

  68. งғؾͰίϯ
    ςφΛࣗ࡞͠
    ͯΈͨ

    View Slide

  69. ࣗ࡞Ұཡ
    wίϯςφϥϯλΠϜ)BDPOJXB
    wίϯςφઓུΦʔέετϨʔγϣϯ૚

    'BTU$POUBJOFSXJUI/)).TUBDL

    View Slide

  70. )BDPOJXB
    wίϯςφϥϯλΠϜɻNSVCZݴޠΛ૊ΈࠐΜͰ͍ͯɺίʔυͰίϯς
    φͷઃఆ΍ৼΔ෣͍ͳͲΛهड़Ͱ͖Δɻ
    wྫ͑͹ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ෼཭͢Δ͔ɺ*1͸ԿΛͭ
    ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ
    w͋Δ͍͸ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺ౳ɻ
    w๻͕࡞ͬͨɻ

    View Slide

  71. 'BTU$POUBJOFS
    wͬ͘͟ΓߦͰ
    wϦΫΤετ͕͋Δ·Ͱ

    ىಈ͠ͳ͍
    wىಈޙɺҰఆ࣌ؒޙʹఀࢭ
    wͲΜͲΜίϯςφ͕॥؀͢Δ
    wDG1IPFOJY4FSWFST1BUUFSO
    wDG'BTU$(*
    ˞ʮҰาઌߦ͘ίϯςφ؅ཧΞʔΩςΫνϟʯ8%#13&447PM

    View Slide

  72. ΦʔέετϨʔγϣϯΞʔΩςΫνϟ
    w$.%# $POUFOUT.BOBHFNFOU%BUBCBTF
    ͷঢ়ଶʹऩଋ͢Δ
    ˞ʮ'BTU$POUBJOFS࣮ߦ؀ڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ

    View Slide

  73. ,VCFTUBDLͱͷൺֱ
    SVOD
    ,VCFSOFUFT
    'MBOOFM
    $BMJDP
    $3*0
    $POUBJOFSE
    ,FSOFMTZTDBMM
    $MVTUFSFE/PEF1PPM
    )BDPOJXB
    [email protected]
    CBTFE

    TFSWJDFNFTI
    [email protected]
    )551"1*

    +BSEJO

    #SJEHF
    WFUI
    $.%#
    FUDE

    View Slide

  74. ࠙਌ձ
    Ͱ

    View Slide

  75. ऴΘΓʹ

    View Slide

  76. ίϯςφɺ࢖ͬͯ·͔͢ʁ
    wԿͷͨΊʹ࢖͍ͬͯ·͔͢ʁ
    w࣮͸࢖ΘΕ͍ͯΔͷͰ͸ʁ
    wίϯςφͰ͋ͳͨͷ໰୊͸ղܾ͠·͔͢ʁ
    w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠

    View Slide

  77. ίϯςφͷ
    ʮงғؾʯ

    View Slide

  78. ίϯςφͷ
    ֓೦Ϟσϧ

    View Slide

  79. ௨ৗ͸͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ
    ͏ಈ͔͘ͷઆ໌ʢʣɻ
    ͜Ε͸ɺ໾ʹཱ͍ͬͯΔݶΓ͸ɺ׬શͳ΋ͷ
    Ͱͳͯ͘΋Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ
    ʰ୭ͷͨΊͷσβΠϯʁʱ%"ϊʔϚϯɺ๜༁վగ൛೥

    View Slide

  80. ίϯςφͷ֓೦Ϟσϧ͸ʁ
    wͦΕ͸ίϯςφͰ͢Ͷ
    w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ
    Ξε͕͋ΔͷͰ͸ͳ͍ͩΖ͏͔ɻ
    w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ
    wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૝૾Ͱ͖Δʁ
    w͔͠͠7.ͷΑ͏ʹԿ΋͔΋Ծ૝Խ͞Ε͍ͯΔΘ͚Ͱ͸ͳ͍͠ɺϗε
    τʹΑΔ੍໿͸େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ

    View Slide

  81. ίϯςφΛͪΌΜͱӡ༻͢Δʹ͸
    ʢ·ͩ·ͩʣத਎Λ௥͍͔͚ͯ

    ཧղ͢Δ͜ͱ͕ॏཁɻ

    View Slide

  82. ͦΕʹ
    த਎Λ͔ͬ͠Γཧղ͢Δ͜ͱ͸
    ָ͍͠ʢ͸ͣʣ

    View Slide

  83. &OKPZ5BDLMJOH
    $POUBJOFS&DPTZTUFN

    View Slide

  84. ࢀߟࢿྉ
    w0$*

    IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD

    IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD
    w1SPUPUZQJOH,VCFSOFUFT$3*CZ!SFNPSF͞Μ

    IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ
    XJUISVCZBOEHSQD

    View Slide

  85. 4QFDJBM5IBOLT
    wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓ͸ၟӽͳ͕Β๻ʣ
    w!UONU
    [email protected]

    View Slide