Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -

2021年度開催ProSec-IT／SECKUNの共通科目の資料です。

https://cs.kyushu-u.ac.jp/seckun/schedule-2/

Transcript

1. 1SP4FD*54&$,6/WFSTJPO
   ۙ౻Ӊஐ࿕(.01FQBCP *OD
   %PDLFSͱ
   ΍ΘΒ͔͍Ծ૝Խ
   

   View Slide

2. ۙ౻Ӊஐ࿕6DIJP,POEP
   w(.0ϖύϘٕज़ج൫݉σʔλج൫νʔϜ
   wؔ৺ൣғ3VCZ 3VTU -JOVY
   ίϯςφٕज़ ݴޠ࣮૷ 04࣮૷
   w3VCZ,BJHJ
   wʮNSVCZγεςϜϓϩάϥϛϯάʯ
   ೥݄೔ץߦ
   w޷͖ͳY
   ͷ໋ྩ45*
   

   View Slide

3. ߨٛલ൒ͷ༧ఆ
   w࠲ֶͷ಺༰
   w%PDLFSͱίϯςφԾ૝Խʹؔ͢Δ֓ཁ
   wΦϯϥΠϯԋशʢࣄલ༧श0,ʣ
   w%PDLFS%PDLFS$PNQPTFΛ࣮ࡍʹ৮ΕΔԋश
   

   View Slide

4. ίϯςφ࠲ֶ
   

   View Slide

5. ͦ΋ͦ΋ɺίϯςφͱ͸
   w-JOVYͷ৔߹ɺϓϩηεʹରִͯ͠཭ɺϦιʔε੍ݶɺݖݶͷ੍ݶͳ
   ͲΛߦ͍ɺಠཱͨ͠؀ڥΛͳΔ΂҆͘શʹఏڙͨ͠΋ͷʢͱ͢Δʣ
   wͲͷΑ͏ͳܦҢͰ͜͏͍ͬͨʮԾ૝Խʯ͕ग़ݱͨ͠ͷ͔ʁ
   

   View Slide

6. GPSLFYFDWFͷؒʹ
   

   View Slide

7. CFGPSFίϯςφͷʮܭࢉػͷڞ༗ʯ
   wਓྨ͸ίϯϐϡʔλΛޮ཰Α͘ڞ༗͔ͨͬͨ͠
   w654ɺϚϧνςφϯγʔ
   w6/*9ϢʔβʔʹΑΔܭࢉػͷڞ༗
   w"QBDIF)5514FSWFSͳͲʹΑΔ7JSUVBM)PTUػೳ
   wDISPPUΛ͸͡Ίͱͨ͠Մࢹൣғͷ੍ݶ
   wԾ૝Ϛγϯͷ࡞੒ʢLWNɺ2&.6ʣ
   

   View Slide

8. "QBDIFͷϚϧνςφϯγʔ
   wদຊʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ͢ΔݚڀʯΑΓ
   w7JSUVBM)PTU
   wDISPPU
   wεϨου୯Ґͷݖݶ؅ཧ
   wTV&9&$
   

   View Slide

9. ؆୯ͳԾ૝Խͷܥਤ
   w ʮ5IF*EFBM7FSTVTUIF3FBM3FWJTJUJOHUIF)JTUPSZPG7JSUVBM.BDIJOFTBOE$POUBJOFSTʯΑΓ
   

   View Slide

10. ίϯςφͷొ৔
    w,7.ͳͲͷΑ͏ʹɺϋʔυ΢ΣΞΛؚΜͩԾ૝Խ͸҆શͰࣗ༝౓͕
    ߴ͘ɺීٴͨ͠ɻ
    wҰํɺΦʔόʔϔουͷ௿ݮ΍ूੵ཰ͷ޲্ɺىಈ࣌ؒͳͲͷߴ଎
    Խɺ؀ڥͷϙʔλϏϦςΟ޲্ͳͲͷधཁ͕ग़ͯ͘Δ
    wগͣͭ͠ਐԽΛଓ͚͍ͯͨίϯςφʹ஫໨͕ू·Δ
    

    View Slide

11. ͍ΘΏΔԾ૝Խʢྫʣ
    ϋʔυ΢ΣΞ
    ϗετ04ϋΠύʔόΠβ
    IBSEXBSF
    FNVMBUJPO
    ήετ04
    ϥΠϒϥϦ
    ϓϩάϥϜ
    IBSEXBSF
    FNVMBUJPO
    ήετ04
    ϥΠϒϥϦ
    ϓϩάϥϜ
    IBSEXBSF
    FNVMBUJPO
    ήετ04
    ϥΠϒϥϦ
    ϓϩάϥϜ
    04ͷػೳΛ
    ͦΕͧΕ४උ
    

    View Slide

12. ίϯςφܕʮԾ૝Խʯ
    ϋʔυ΢ΣΞ
    ϗετ04ʢ-JOVYʣ
    ίϯςφ
    Τϯδϯ
    ϥΠϒϥϦ
    ϓϩάϥϜ
    ίϯςφ
    Τϯδϯ
    ϥΠϒϥϦ
    ϓϩάϥϜ
    ίϯςφ
    Τϯδϯ
    ϥΠϒϥϦ
    ϓϩάϥϜ
    04ͷػೳ͸
    ڞ௨Ͱ࢖͏
    

    View Slide

13. ίϯςφʹΑΔʮԾ૝Խʯٕज़ཁૉ
    w SFGIUUQTJCMBDLIBUDPN64"5IVSTEBZVT"WSBIBNJ&TDBQJOH7JSUVBMJ[FE$POUBJOFSTQEG
    

    View Slide

14. ϓϩηε͔ΒΞΫηεͰ͖Δൣғͷ෼཭
    wϑΝΠϧγεςϜͷִ཭DISPPUQJWPU@SPPU
    w04Ϧιʔεͷִ཭-JOVY/BNFTQBDF
    w1*%ͷִ཭ɺϚ΢ϯτϙΠϯτͷִ཭ɺ6TFS*%NBQQJOH΄͔
    

    View Slide

15. ϓϩηεͷݖݶͷ੍ݶ
    wಛݖΛ෼ׂ͠ɺҰ෦ͷΈͷണୣ΍෇༩-JOVY$BQBCJMJUZ
    wγεςϜίʔϧ୯ҐͰͷݺͼग़੍͠ݶɺτϨʔεTFDDPNQ
    w-JOVY4FDVSJUZ.PEVMF -4.
    "QQ"SNPS4&-JOVY
    

    View Slide

16. ϓϩηεͷϋʔυ΢ΣΞϦιʔεͷ੍ݶ
    wݹయతSFTPVSDFMJNJUVMJNJU
    SMJNJUQSMJNJU
    wDHSPVQ $POUSPM(SPVQT
    
    w$16ɺϝϞϦɺϒϩοΫ*0ɺ1*%਺΄͔
    w୯ʹϓϩηεͷάϧʔϓ୯ҐͰͷૢ࡞΋ߦ͑Δ
    

    View Slide

17. %PDLFSͷొ৔
    w1BB4Ͱ͋ͬͨ%PU$MPVEࣾͷࣾ಺ίϯςφج൫Λ044Խͨ͠΋ͷ͕
    %PDLFSͷ࢝·Γɻ͔ͦ͜ΒҰؾʹ޿·ͬͨ
    w%PDLFS͸ʮΠϝʔδʯͷ֓೦ΛίϞσΟςΟԽͨ͠
    wίϯςφͷՁ஋ʹɺʮϙʔλϒϧͳ؀ڥͷ࠶ݱʯ͕ՃΘΔ
    wίϯςφͷӡ༻ͷཹҙ఺ʹ͓͍ͯʮΠϝʔδͷ؅ཧʯ͕େ͖͘઎ΊΒ
    ΕΔΑ͏ʹͳΔ
    

    View Slide

18. %PDLFSʹ͓͚ΔΠϝʔδ
    wࠩ෼ϑΝΠϧγεςϜʢ6OJPO'JMFTZTUFNʣΛ༻͍ͯมߋՕॴ͚ͩΛ
    ௥هͯ͠؅ཧՄೳʹͨ͠
    wΫϥ΢υ্ʹΠϝʔδΛϓογϡ͠ɺ୭Ͱ΋ϓϧͰ͖ΔΑ͏
    IUUQTEPDTEPDLFSDPNTUPSBHFTUPSBHFESJWFSɹ
    

    View Slide

19. %PDLFS,VCFSOFUFT0$*
    wϥϯλΠϜͷ։ൃɺཚཱ
    w0QFO$POUBJOFS*OJUJBUJWFͷ੒ཱɺ0$*TQFDͷެ։
    wίϯςφ͕ຬͨ͢΂͖࢓༷ͷ੔ཧʢΠϝʔδɺηΩϡϦςΟଞʣ
    w,VCFSOFUFTͷొ৔
    w(PPHMFࣾ಺ͷج൫ʮ#PSHʯΛϕʔεʹެ։͞Εͨ΋ͷ
    wߴϨϕϧϥϯλΠϜɺ௿ϨϕϧϥϯλΠϜͷϨΠϠ෼͚͕ਐΉ
    

    View Slide

20. 0$*TQFD
    wIUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD
    

    View Slide

21. ࡢࠓͷίϯςφϥϯλΠϜ
    wߴϨϕϧϥϯλΠϜ௿ϨϕϧϥϯλΠϜΛ۠ผͯ͠ཧղ͢Δ
    IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTTɹ
    

    View Slide

22. ࡢࠓͷίϯςφϥϯλΠϜ
    w௿ϨϕϧϥϯλΠϜʹ͓͚Δ࣮૷ઓུ͝ͱͷ෼ྨ
    wϓϩηεϕʔεͷϦιʔεɾݖݶ෼཭Λ༻͍Δ΋ͷ
    SVOD DSVO ZPVLJ
    w7..ΛϕʔεʹͰ͖Δ͚ͩܰྔʹͨ͠΋ͷ'JSFDSBDLFS ,BUB
    wϢʔβϥϯυͰαϯυϘοΫεΛߏ੒ͨ͠΋ͷH7JTPS
    wϢχΧʔωϧΛίϯςφʹద༻ͨ͠΋ͷ/BCMB$POUBJOFS
    

    View Slide

23. ࢀߟจݙʢ࿦จʣ
    wদຊ྄հ ʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ
    ͢Δݚڀʯ ೥౓ژ౎େֶେֶӃ৘ใֶݚڀՊത࢜࿦จֶҐ৹
    ࠪެௌձ .BZ
    
    w"MMJTPO3BOEBM ʮ5IF*EFBM7FSTVTUIF3FBM3FWJTJUJOHUIF
    )JTUPSZPG7JSUVBM.BDIJOFTBOE$POUBJOFSTʯ "$.$PNQVUJOH
    4VSWFZT 7PMVNF *TTVF "SUJDMF
    "QS
    
    
    IUUQTSFQPTJUPSZLVMJCLZPUPVBDKQETQBDFIBOEMF
    
    IUUQTBSYJWPSHBCT
    

    View Slide

24. ࢀߟจݙʢॻ੶ʣ
    wίϯςφܕԾ૝Խ֓࿦ʢ઒ޱ௚໵ ΧοτγεςϜʣ
    wIUUQXXXDVUUDPKQCPPLIUNM
    

    View Slide

25. ࢀߟࢿྉʢͦͷଞʣ
    wۙ౻Ӊஐ࿕ ৿ాߒฏʮίϯςφͷηΩϡϦςΟΛத਎͔Βཧղ͠Α
    ͏ʯIUUQTTQFBLFSEFDLDPNVE[VSBJOTJEFPVUDPOUBJOFS
    BOEJUTTFDVSJUZ
    wদຊ྄հʮϢϏΩλεσʔληϯλʔ04ͷจ຺ʹ͓͚Δίϯςφ࣮
    ߦ؀ڥͷ෼ྨʯIUUQTICNBUTVNPUPSKQFOUSZ
    
    

    View Slide

26. ࢀߟࢿྉʢͦͷଞʣ
    wಙӬߤฏʮࠓ࿩୊ͷ͍Ζ͍ΖͳίϯςφϥϯλΠϜΛൺֱͯ͠Έͨʯ
    IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTT
    wٶԼ߶ีʮ$PNQBSF0$*3VOUJNFTʯIUUQTTQFBLFSEFDLDPN
    NJ[[ZDPNQBSFPDJSVOUJNFT
    wՃ౻ହจʮ-9$ͰֶͿίϯςφೖ໳ܰྔԾ૝Խ؀ڥΛ࣮ݱ͢Δٕ
    ज़ʯIUUQTHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST
    

    View Slide

27. ࢀߟࢿྉʢͦͷଞʣ
    wVUBNLʮৄઆ0$*ίϯςφϥϯλΠϜZPVLJʯ
    IUUQTTQFBLFSEFDLDPNVUBNLYJBOHTIVP
    PDJLPOUFOBSBOUBJNVZPVLJBUEJIVJLPOUFOBKJTIVGBMTFRJOH
    CBPKJBPIVBOIVJ
    

    View Slide

28. ίϯςφͷར༻ͱ
    ΦʔέετϨʔγϣϯ
    

    View Slide

29. ίϯςφͷॏཁͳϢʔεέʔε
    w؀ڥͷϙʔλϒϧԽ
    w؀ڥߏஙͷࣗಈԽʢΦʔέετϨʔγϣϯʣ
    w؀ڥͷίʔυԽʢ*OGSBTUSVDUVSFBT$PEFʣ
    wू໿͞Εͨ؀ڥఏڙ
    wʢαϯυϘοΫεʁʣ
    

    View Slide

30. ίϯςφҎલͷ*B$
    w$IFG1VQQFUʹΠϯελϯεϨϕϧͷߏ੒؅ཧ
    w5FSSBGPSNʹΞʔΩςΫνϟϨϕϧͷߏ੒؅ཧɺ*BB4ͷ؅ཧ
    wγεςϜ؅ཧΛࣗಈԽ͍ͨ͠ͱ͍͏Ϟνϕʔγϣϯ͕࠷ॳʹ͋ͬͨ
    w"HJMF*OGSB%FW0QTιϑτ΢ΣΞ։ൃͷϓϥΫςΟεΛΠϯϑϥ
    ؅ཧʹԠ༻͢ΔͨΊʹ࢖ΘΕ޿·Δ
    wΠϯελϯεϨϕϧˠ"1*ʹΑΔ*BB4ͷૢ࡞ͱ؅ཧʹ޿͕Δ
    

    View Slide

31. ίϯςφͷΦʔέετϨʔγϣϯ
    wʮΠϝʔδʯͷൃୡʹίϯςφΠϝʔδΛΦʔέετϨʔγϣϯͷ
    ύʔπͱͯ͠ଊ͑ΒΕΔΑ͏ʹͳΔɻ૊Έ߹ΘͤϕʔεͷΠϯϑϥ
    w#PSH͔Βͷ,VCFSOFUFTʹίϯςφΛ؅ཧ͢Δ෼ࢄΞʔΩςΫνϟ
    ͷҰͭͷύλʔϯ͕Ͱ͖ɺͦΕ͕ΦʔϓϯʹͳΓ࠶࣮૷͞ΕΔ
    w#PSH༝དྷͷ༷ʑͳ֓೦3FDPODJMJBUJPO-PPQɺ෼ࢄετϨʔδ΁
    ͷઃఆอଘɺ.BTUFSͱ,VCFMFUɺ
    

    View Slide

32. ίϯςφϕʔεΛલఏͱͨ͠ΤίγεςϜ
    wʮίϯςφϕʔεͷΠϯϑϥʯ͸ࠓ·Ͱʹଘࡏ͠ͳ͔ͬͨ΋ͷͳͷ
    Ͱɺطଘͷϛυϧ΢ΣΞͷ੾ΓସΘΓ͕ى͜Δ
    w$/$'ʢ5IF$MPVE/BUJWF$PNQVUJOH'PVOEBUJPOʣͷઃཱ
    w$MPVE/BUJWFͷఆٛɹIUUQTHJUIVCDPNDODGUPDCMPCNBTUFS%&'*/*5*0/NE
    ɹ
    w৽ੈ୅ͷɺ͋Δ͍͸Ґஔ͚ͮΛ৽ͨ͘͠͠ϛυϧ΢ΣΞͨͪ
    w1SPNFUIFVTɺ'MVFOUEɺ$PSF%/4ɺ&OWPZɺ)FMNɺ3PPLɺ
    'BMDPɺ0QFO5SBDJOHɺH31$
    

    View Slide

33. ࢀߟจݙɾࢿྉ
    wʮ-BSHFTDBMFDMVTUFSNBOBHFNFOUBU(PPHMFXJUI#PSHʯ
    IUUQTQEPTDTBJMNJUFEVQBQFSTCPSHQEG
    w೔ຊޠͰ͸ʮ(PPHMF͕࡞ͬͨ෼ࢄΞϓϦέʔγϣϯج൫ɺ#PSHͷ࿦จΛಡ
    Έղ͘ʯγϦʔζͳͲ
    IUUQTCMPHJOEVDUPSNFFOUSZ
    wٶԼ߶ีʮ*OGSBTUSVDUVSFBT$PEFͷ͜Ε·Ͱͱ͜Ε͔Βʯ
    IUUQTTQFBLFSEFDLDPNNJ[[ZJOGSBTUVEZNFFUVQOVNCFS
    

    View Slide

34. લ൒ऴྃ
    

    View Slide