Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -

Transcript

1. 1SP4FD*54&$,6/
   
   WFSTJPO ۙ౻Ӊஐ࿕
   
   (.0
   1FQBCP
   *OD %PDLFSͱ
   ΍ΘΒ͔͍Ծ૝Խ

2. ۙ౻Ӊஐ࿕
   
   6DIJP
   ,POEP w(.0ϖύϘ
   ٕज़ج൫݉σʔλج൫νʔϜ
   wؔ৺ൣғ
   3VCZ
   3VTU
   -JOVY
   ίϯςφٕज़
   ݴޠ࣮૷
   04࣮૷
   w3VCZ,BJHJ
   

   
   
   
   
   wʮNSVCZγεςϜϓϩάϥϛϯάʯ
   ೥݄೔
   ץߦ
   w޷͖ͳY  ͷ໋ྩ
   45*

3. ߨٛલ൒ͷ༧ఆ w࠲ֶͷ಺༰
   w%PDLFSͱίϯςφԾ૝Խʹؔ͢Δ֓ཁ
   wΦϯϥΠϯԋशʢࣄલ༧श0,ʣ
   w%PDLFS%PDLFS
   $PNQPTF
   Λ࣮ࡍʹ৮ΕΔԋश

4. ίϯςφ࠲ֶ

5. ͦ΋ͦ΋ɺίϯςφͱ͸ w-JOVYͷ৔߹ɺϓϩηεʹରִͯ͠཭ɺϦιʔε੍ݶɺݖݶͷ੍ݶͳ ͲΛߦ͍ɺಠཱͨ͠؀ڥΛͳΔ΂҆͘શʹఏڙͨ͠΋ͷʢͱ͢Δʣ
   wͲͷΑ͏ͳܦҢͰ͜͏͍ͬͨʮԾ૝Խʯ͕ग़ݱͨ͠ͷ͔ʁ

6. GPSLFYFDWF
   ͷؒʹ

7. CFGPSFίϯςφͷʮܭࢉػͷڞ༗ʯ wਓྨ͸ίϯϐϡʔλΛޮ཰Α͘ڞ༗͔ͨͬͨ͠
   w654ɺϚϧνςφϯγʔ
   w6/*9ϢʔβʔʹΑΔܭࢉػͷڞ༗
   w"QBDIF
   )551
   4FSWFSͳͲʹΑΔ7JSUVBM)PTUػೳ
   wDISPPUΛ͸͡Ίͱͨ͠Մࢹൣғͷ੍ݶ
   wԾ૝Ϛγϯͷ࡞੒ʢLWNɺ2&.6ʣ

8. "QBDIFͷϚϧνςφϯγʔ wদຊʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ͢ΔݚڀʯΑΓ
   w7JSUVBM)PTU
   wDISPPU
   wεϨου୯Ґͷݖݶ؅ཧ
   wTV&9&$
   

9. ؆୯ͳԾ૝Խͷܥਤ w ʮ5IF
   *EFBM
   7FSTVT
   UIF
   3FBM
   3FWJTJUJOH
   UIF
   )JTUPSZ
   PG
   7JSUVBM
   .BDIJOFT
   BOE$POUBJOFSTʯΑΓ

10. ίϯςφͷొ৔ w,7.ͳͲͷΑ͏ʹɺϋʔυ΢ΣΞΛؚΜͩԾ૝Խ͸҆શͰࣗ༝౓͕ ߴ͘ɺීٴͨ͠ɻ
    wҰํɺΦʔόʔϔουͷ௿ݮ΍ूੵ཰ͷ޲্ɺىಈ࣌ؒͳͲͷߴ଎ Խɺ؀ڥͷϙʔλϏϦςΟ޲্ͳͲͷधཁ͕ग़ͯ͘Δ
    wগͣͭ͠ਐԽΛଓ͚͍ͯͨίϯςφʹ஫໨͕ू·Δ

11. ͍ΘΏΔԾ૝Խʢྫʣ ϋʔυ΢ΣΞ ϗετ04
    
    ϋΠύʔόΠβ IBSEXBSF
    FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ IBSEXBSF
    FNVMBUJPO

    ήετ04 ϥΠϒϥϦ ϓϩάϥϜ IBSEXBSF
    FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ 04
    ͷػೳΛ
    ͦΕͧΕ४උ

12. ίϯςφܕʮԾ૝Խʯ ϋʔυ΢ΣΞ ϗετ04ʢ-JOVYʣ ίϯςφ
    Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ ίϯςφ
    Τϯδϯ ϥΠϒϥϦ

    ϓϩάϥϜ ίϯςφ
    Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ 04
    ͷػೳ͸
    ڞ௨Ͱ࢖͏

13. ίϯςφʹΑΔʮԾ૝Խʯٕज़ཁૉ w SFG
    IUUQTJCMBDLIBUDPN64"5IVSTEBZVT"WSBIBNJ&TDBQJOH7JSUVBMJ[FE$POUBJOFSTQEG
    

14. ϓϩηε͔ΒΞΫηεͰ͖Δൣғͷ෼཭ wϑΝΠϧγεςϜͷִ཭
    DISPPUQJWPU@SPPU
    w04Ϧιʔεͷִ཭
    -JOVY
    /BNFTQBDF
    w1*%ͷִ཭ɺϚ΢ϯτϙΠϯτͷִ཭ɺ6TFS
    *%
    NBQQJOH΄͔

15. ϓϩηεͷݖݶͷ੍ݶ wಛݖΛ෼ׂ͠ɺҰ෦ͷΈͷണୣ΍෇༩
    -JOVY
    $BQBCJMJUZ
    wγεςϜίʔϧ୯ҐͰͷݺͼग़੍͠ݶɺτϨʔε
    TFDDPNQ
    w-JOVY
    4FDVSJUZ
    .PEVMF -4. 
    "QQ"SNPS4&-JOVY

16. ϓϩηεͷϋʔυ΢ΣΞϦιʔεͷ੍ݶ wݹయతSFTPVSDF
    MJNJU
    VMJNJU 
    SMJNJUQSMJNJU
    wDHSPVQ
    $POUSPM
    (SPVQT
    w$16ɺϝϞϦɺϒϩοΫ*0ɺ1*%਺΄͔
    w୯ʹϓϩηεͷάϧʔϓ୯ҐͰͷૢ࡞΋ߦ͑Δ

17. %PDLFSͷొ৔ w1BB4Ͱ͋ͬͨ%PU$MPVEࣾͷࣾ಺ίϯςφج൫Λ044Խͨ͠΋ͷ͕ %PDLFSͷ࢝·Γɻ͔ͦ͜ΒҰؾʹ޿·ͬͨ
    w%PDLFS͸ʮΠϝʔδʯͷ֓೦ΛίϞσΟςΟԽͨ͠
    wίϯςφͷՁ஋ʹɺʮϙʔλϒϧͳ؀ڥͷ࠶ݱʯ͕ՃΘΔ
    wίϯςφͷӡ༻ͷཹҙ఺ʹ͓͍ͯʮΠϝʔδͷ؅ཧʯ͕େ͖͘઎ΊΒ ΕΔΑ͏ʹͳΔ

18. %PDLFSʹ͓͚ΔΠϝʔδ wࠩ෼ϑΝΠϧγεςϜʢ6OJPO
    'JMFTZTUFNʣΛ༻͍ͯมߋՕॴ͚ͩΛ ௥هͯ͠؅ཧՄೳʹͨ͠
    wΫϥ΢υ্ʹΠϝʔδΛϓογϡ͠ɺ୭Ͱ΋ϓϧͰ͖ΔΑ͏ IUUQTEPDTEPDLFSDPNTUPSBHFTUPSBHFESJWFSɹ

19. %PDLFS,VCFSOFUFT0$* wϥϯλΠϜͷ։ൃɺཚཱ
    w0QFO
    $POUBJOFS
    *OJUJBUJWFͷ੒ཱɺ0$*
    TQFDͷެ։
    wίϯςφ͕ຬͨ͢΂͖࢓༷ͷ੔ཧʢΠϝʔδɺηΩϡϦςΟଞʣ
    w,VCFSOFUFTͷొ৔
    w(PPHMFࣾ಺ͷج൫ʮ#PSHʯΛϕʔεʹެ։͞Εͨ΋ͷ
    wߴϨϕϧϥϯλΠϜɺ௿ϨϕϧϥϯλΠϜͷϨΠϠ෼͚͕ਐΉ

20. 0$*
    TQFD wIUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD

21. ࡢࠓͷίϯςφϥϯλΠϜ wߴϨϕϧϥϯλΠϜ௿ϨϕϧϥϯλΠϜΛ۠ผͯ͠ཧղ͢Δ IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTTɹ

22. ࡢࠓͷίϯςφϥϯλΠϜ w௿ϨϕϧϥϯλΠϜʹ͓͚Δ࣮૷ઓུ͝ͱͷ෼ྨ
    wϓϩηεϕʔεͷϦιʔεɾݖݶ෼཭Λ༻͍Δ΋ͷ
    
    
    
    
    SVOD
    DSVO
    ZPVLJ
    w7..ΛϕʔεʹͰ͖Δ͚ͩܰྔʹͨ͠΋ͷ
    'JSFDSBDLFS
    ,BUB
    wϢʔβϥϯυͰαϯυϘοΫεΛߏ੒ͨ͠΋ͷ
    H7JTPS
    wϢχΧʔωϧΛίϯςφʹద༻ͨ͠΋ͷ
    /BCMB
    $POUBJOFS

23. ࢀߟจݙʢ࿦จʣ wদຊ྄հ
    ʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ ͢Δݚڀʯ
    ೥౓
    ژ౎େֶେֶӃ৘ใֶݚڀՊ
    ത࢜࿦จֶҐ৹ ࠪެௌձ
    .BZ
    
    
    w"MMJTPO
    3BOEBM ʮ5IF
    *EFBM
    7FSTVT
    UIF
    3FBM
    3FWJTJUJOH
    UIF
    

    )JTUPSZ
    PG
    7JSUVBM
    .BDIJOFT
    BOE
    $POUBJOFSTʯ
    "$.
    $PNQVUJOH
    4VSWFZT
    7PMVNF
    
    *TTVF
    
    "SUJDMF
    
    
    "QS
    
    
    IUUQTSFQPTJUPSZLVMJCLZPUPVBDKQETQBDFIBOEMF
    
    
    IUUQTBSYJWPSHBCT
    

24. ࢀߟจݙʢॻ੶ʣ wίϯςφܕԾ૝Խ֓࿦ʢ઒ޱ௚໵
    
    ΧοτγεςϜʣ
    wIUUQXXXDVUUDPKQCPPLIUNM

25. ࢀߟࢿྉʢͦͷଞʣ wۙ౻Ӊஐ࿕
    ৿ాߒฏʮίϯςφͷηΩϡϦςΟΛத਎͔Βཧղ͠Α ͏ʯ
    
    IUUQTTQFBLFSEFDLDPNVE[VSBJOTJEFPVUDPOUBJOFS BOEJUTTFDVSJUZ
    wদຊ྄հʮϢϏΩλεσʔληϯλʔ04ͷจ຺ʹ͓͚Δίϯςφ࣮ ߦ؀ڥͷ෼ྨʯ
    IUUQTICNBUTVNPUPSKQFOUSZ 
    

26. ࢀߟࢿྉʢͦͷଞ
    ʣ wಙӬߤฏʮࠓ࿩୊ͷ͍Ζ͍ΖͳίϯςφϥϯλΠϜΛൺֱͯ͠Έͨʯ
    IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTT
    
    wٶԼ߶ีʮ$PNQBSF
    0$*
    3VOUJNFTʯ
    IUUQTTQFBLFSEFDLDPN NJ[[ZDPNQBSFPDJSVOUJNFT
    
    wՃ౻ହจʮ-9$ͰֶͿίϯςφೖ໳
    
    ܰྔԾ૝Խ؀ڥΛ࣮ݱ͢Δٕ ज़ʯ
    IUUQTHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST
    
    

27. ࢀߟࢿྉʢͦͷଞ
    ʣ wVUBNLʮৄઆ
    0$*ίϯςφϥϯλΠϜ
    ZPVLJʯ
    IUUQTTQFBLFSEFDLDPNVUBNLYJBOHTIVP PDJLPOUFOBSBOUBJNVZPVLJBUEJIVJLPOUFOBKJTIVGBMTFRJOH CBPKJBPIVBOIVJ
    

28. ίϯςφͷར༻ͱ
    ΦʔέετϨʔγϣϯ

29. ίϯςφͷॏཁͳϢʔεέʔε w؀ڥͷϙʔλϒϧԽ
    w؀ڥߏஙͷࣗಈԽʢΦʔέετϨʔγϣϯʣ
    w؀ڥͷίʔυԽʢ*OGSBTUSVDUVSF
    BT
    $PEFʣ
    wू໿͞Εͨ؀ڥఏڙ
    wʢαϯυϘοΫεʁʣ

30. ίϯςφҎલͷ*B$ w$IFG1VQQFU
    ʹ
    ΠϯελϯεϨϕϧͷߏ੒؅ཧ
    w5FSSBGPSN
    ʹ
    ΞʔΩςΫνϟϨϕϧͷߏ੒؅ཧɺ*BB4ͷ؅ཧ
    wγεςϜ؅ཧΛࣗಈԽ͍ͨ͠ͱ͍͏Ϟνϕʔγϣϯ͕࠷ॳʹ͋ͬͨ
    w"HJMF
    *OGSB%FW0QT
    
    ιϑτ΢ΣΞ։ൃͷϓϥΫςΟεΛΠϯϑϥ ؅ཧʹԠ༻͢ΔͨΊʹ࢖ΘΕ޿·Δ
    wΠϯελϯεϨϕϧˠ"1*ʹΑΔ*BB4ͷૢ࡞ͱ؅ཧ
    ʹ޿͕Δ

31. ίϯςφͷΦʔέετϨʔγϣϯ wʮΠϝʔδʯͷൃୡ
    ʹ
    ίϯςφΠϝʔδΛΦʔέετϨʔγϣϯͷ ύʔπͱͯ͠ଊ͑ΒΕΔΑ͏ʹͳΔɻ૊Έ߹ΘͤϕʔεͷΠϯϑϥ
    w#PSH͔Βͷ,VCFSOFUFT
    ʹ
    ίϯςφΛ؅ཧ͢Δ෼ࢄΞʔΩςΫνϟ ͷҰͭͷύλʔϯ͕Ͱ͖ɺͦΕ͕ΦʔϓϯʹͳΓ࠶࣮૷͞ΕΔ
    w#PSH༝དྷͷ༷ʑͳ֓೦
    
    3FDPODJMJBUJPO
    -PPQɺ෼ࢄετϨʔδ΁ ͷઃఆอଘɺ.BTUFSͱ,VCFMFUɺ

32. ίϯςφϕʔεΛલఏͱͨ͠ΤίγεςϜ wʮίϯςφϕʔεͷΠϯϑϥʯ͸ࠓ·Ͱʹଘࡏ͠ͳ͔ͬͨ΋ͷͳͷ Ͱɺطଘͷϛυϧ΢ΣΞͷ੾ΓସΘΓ͕ى͜Δ
    w$/$'ʢ5IF
    $MPVE
    /BUJWF
    $PNQVUJOH
    'PVOEBUJPOʣͷઃཱ
    w$MPVE
    /BUJWFͷఆٛɹIUUQTHJUIVCDPNDODGUPDCMPCNBTUFS%&'*/*5*0/NE ɹ
    w৽ੈ୅ͷɺ͋Δ͍͸Ґஔ͚ͮΛ৽ͨ͘͠͠ϛυϧ΢ΣΞͨͪ
    
    w1SPNFUIFVTɺ'MVFOUEɺ$PSF%/4ɺ&OWPZɺ)FMNɺ3PPLɺ 'BMDPɺ0QFO5SBDJOHɺH31$

33. ࢀߟจݙɾࢿྉ wʮ-BSHFTDBMF
    DMVTUFS
    NBOBHFNFOU
    BU
    (PPHMF
    XJUI
    #PSHʯ
    IUUQTQEPTDTBJMNJUFEVQBQFSTCPSHQEG
    
    w೔ຊޠͰ͸ʮ(PPHMF͕࡞ͬͨ෼ࢄΞϓϦέʔγϣϯج൫ɺ#PSHͷ࿦จΛಡ Έղ͘ʯγϦʔζͳͲ
    IUUQTCMPHJOEVDUPSNFFOUSZ
    
    wٶԼ߶ีʮ*OGSBTUSVDUVSF
    BT
    $PEFͷ͜Ε·Ͱͱ͜Ε͔Βʯ
    IUUQTTQFBLFSEFDLDPNNJ[[ZJOGSBTUVEZNFFUVQOVNCFS

34. લ൒ऴྃ