Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -

KONDO Uchio
October 30, 2021

Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -

2021年度開催ProSec-IT/SECKUNの共通科目の資料です。

https://cs.kyushu-u.ac.jp/seckun/schedule-2/

KONDO Uchio

October 30, 2021
Tweet

More Decks by KONDO Uchio

Other Decks in Technology

Transcript

  1. 1SP4FD*54&$,6/WFSTJPO ۙ౻Ӊஐ࿕(.01FQBCP *OD %PDLFSͱ ΍ΘΒ͔͍Ծ૝Խ

  2. ۙ౻Ӊஐ࿕6DIJP,POEP w(.0ϖύϘٕज़ج൫݉σʔλج൫νʔϜ wؔ৺ൣғ3VCZ 3VTU -JOVY  ίϯςφٕज़ ݴޠ࣮૷ 04࣮૷ w3VCZ,BJHJ

       wʮNSVCZγεςϜϓϩάϥϛϯάʯ ೥݄೔ץߦ w޷͖ͳY  ͷ໋ྩ45*
  3. ߨٛલ൒ͷ༧ఆ w࠲ֶͷ಺༰ w%PDLFSͱίϯςφԾ૝Խʹؔ͢Δ֓ཁ wΦϯϥΠϯԋशʢࣄલ༧श0,ʣ w%PDLFS%PDLFS$PNQPTFΛ࣮ࡍʹ৮ΕΔԋश

  4. ίϯςφ࠲ֶ

  5. ͦ΋ͦ΋ɺίϯςφͱ͸ w-JOVYͷ৔߹ɺϓϩηεʹରִͯ͠཭ɺϦιʔε੍ݶɺݖݶͷ੍ݶͳ ͲΛߦ͍ɺಠཱͨ͠؀ڥΛͳΔ΂҆͘શʹఏڙͨ͠΋ͷʢͱ͢Δʣ wͲͷΑ͏ͳܦҢͰ͜͏͍ͬͨʮԾ૝Խʯ͕ग़ݱͨ͠ͷ͔ʁ

  6. GPSLFYFDWFͷؒʹ

  7. CFGPSFίϯςφͷʮܭࢉػͷڞ༗ʯ wਓྨ͸ίϯϐϡʔλΛޮ཰Α͘ڞ༗͔ͨͬͨ͠ w654ɺϚϧνςφϯγʔ w6/*9ϢʔβʔʹΑΔܭࢉػͷڞ༗ w"QBDIF)5514FSWFSͳͲʹΑΔ7JSUVBM)PTUػೳ wDISPPUΛ͸͡Ίͱͨ͠Մࢹൣғͷ੍ݶ wԾ૝Ϛγϯͷ࡞੒ʢLWNɺ2&.6ʣ

  8. "QBDIFͷϚϧνςφϯγʔ wদຊʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ͢ΔݚڀʯΑΓ w7JSUVBM)PTU wDISPPU wεϨου୯Ґͷݖݶ؅ཧ wTV&9&$

  9. ؆୯ͳԾ૝Խͷܥਤ w ʮ5IF*EFBM7FSTVTUIF3FBM3FWJTJUJOHUIF)JTUPSZPG7JSUVBM.BDIJOFTBOE$POUBJOFSTʯΑΓ

  10. ίϯςφͷొ৔ w,7.ͳͲͷΑ͏ʹɺϋʔυ΢ΣΞΛؚΜͩԾ૝Խ͸҆શͰࣗ༝౓͕ ߴ͘ɺීٴͨ͠ɻ wҰํɺΦʔόʔϔουͷ௿ݮ΍ूੵ཰ͷ޲্ɺىಈ࣌ؒͳͲͷߴ଎ Խɺ؀ڥͷϙʔλϏϦςΟ޲্ͳͲͷधཁ͕ग़ͯ͘Δ wগͣͭ͠ਐԽΛଓ͚͍ͯͨίϯςφʹ஫໨͕ू·Δ

  11. ͍ΘΏΔԾ૝Խʢྫʣ ϋʔυ΢ΣΞ ϗετ04ϋΠύʔόΠβ IBSEXBSF FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ IBSEXBSF FNVMBUJPO

    ήετ04 ϥΠϒϥϦ ϓϩάϥϜ IBSEXBSF FNVMBUJPO ήετ04 ϥΠϒϥϦ ϓϩάϥϜ 04ͷػೳΛ ͦΕͧΕ४උ
  12. ίϯςφܕʮԾ૝Խʯ ϋʔυ΢ΣΞ ϗετ04ʢ-JOVYʣ ίϯςφ Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ ίϯςφ Τϯδϯ ϥΠϒϥϦ

    ϓϩάϥϜ ίϯςφ Τϯδϯ ϥΠϒϥϦ ϓϩάϥϜ 04ͷػೳ͸ ڞ௨Ͱ࢖͏
  13. ίϯςφʹΑΔʮԾ૝Խʯٕज़ཁૉ w SFGIUUQTJCMBDLIBUDPN64"5IVSTEBZVT"WSBIBNJ&TDBQJOH7JSUVBMJ[FE$POUBJOFSTQEG

  14. ϓϩηε͔ΒΞΫηεͰ͖Δൣғͷ෼཭ wϑΝΠϧγεςϜͷִ཭DISPPUQJWPU@SPPU w04Ϧιʔεͷִ཭-JOVY/BNFTQBDF w1*%ͷִ཭ɺϚ΢ϯτϙΠϯτͷִ཭ɺ6TFS*%NBQQJOH΄͔

  15. ϓϩηεͷݖݶͷ੍ݶ wಛݖΛ෼ׂ͠ɺҰ෦ͷΈͷണୣ΍෇༩-JOVY$BQBCJMJUZ wγεςϜίʔϧ୯ҐͰͷݺͼग़੍͠ݶɺτϨʔεTFDDPNQ w-JOVY4FDVSJUZ.PEVMF -4. "QQ"SNPS4&-JOVY

  16. ϓϩηεͷϋʔυ΢ΣΞϦιʔεͷ੍ݶ wݹయతSFTPVSDFMJNJUVMJNJU  SMJNJUQSMJNJU wDHSPVQ $POUSPM(SPVQT  w$16ɺϝϞϦɺϒϩοΫ*0ɺ1*%਺΄͔ w୯ʹϓϩηεͷάϧʔϓ୯ҐͰͷૢ࡞΋ߦ͑Δ

  17. %PDLFSͷొ৔ w1BB4Ͱ͋ͬͨ%PU$MPVEࣾͷࣾ಺ίϯςφج൫Λ044Խͨ͠΋ͷ͕ %PDLFSͷ࢝·Γɻ͔ͦ͜ΒҰؾʹ޿·ͬͨ w%PDLFS͸ʮΠϝʔδʯͷ֓೦ΛίϞσΟςΟԽͨ͠ wίϯςφͷՁ஋ʹɺʮϙʔλϒϧͳ؀ڥͷ࠶ݱʯ͕ՃΘΔ wίϯςφͷӡ༻ͷཹҙ఺ʹ͓͍ͯʮΠϝʔδͷ؅ཧʯ͕େ͖͘઎ΊΒ ΕΔΑ͏ʹͳΔ

  18. %PDLFSʹ͓͚ΔΠϝʔδ wࠩ෼ϑΝΠϧγεςϜʢ6OJPO'JMFTZTUFNʣΛ༻͍ͯมߋՕॴ͚ͩΛ ௥هͯ͠؅ཧՄೳʹͨ͠ wΫϥ΢υ্ʹΠϝʔδΛϓογϡ͠ɺ୭Ͱ΋ϓϧͰ͖ΔΑ͏ IUUQTEPDTEPDLFSDPNTUPSBHFTUPSBHFESJWFSɹ

  19. %PDLFS,VCFSOFUFT0$* wϥϯλΠϜͷ։ൃɺཚཱ w0QFO$POUBJOFS*OJUJBUJWFͷ੒ཱɺ0$*TQFDͷެ։ wίϯςφ͕ຬͨ͢΂͖࢓༷ͷ੔ཧʢΠϝʔδɺηΩϡϦςΟଞʣ w,VCFSOFUFTͷొ৔ w(PPHMFࣾ಺ͷج൫ʮ#PSHʯΛϕʔεʹެ։͞Εͨ΋ͷ wߴϨϕϧϥϯλΠϜɺ௿ϨϕϧϥϯλΠϜͷϨΠϠ෼͚͕ਐΉ

  20. 0$*TQFD wIUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD

  21. ࡢࠓͷίϯςφϥϯλΠϜ wߴϨϕϧϥϯλΠϜ௿ϨϕϧϥϯλΠϜΛ۠ผͯ͠ཧղ͢Δ IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTTɹ

  22. ࡢࠓͷίϯςφϥϯλΠϜ w௿ϨϕϧϥϯλΠϜʹ͓͚Δ࣮૷ઓུ͝ͱͷ෼ྨ wϓϩηεϕʔεͷϦιʔεɾݖݶ෼཭Λ༻͍Δ΋ͷ SVOD DSVO ZPVLJ w7..ΛϕʔεʹͰ͖Δ͚ͩܰྔʹͨ͠΋ͷ'JSFDSBDLFS ,BUB wϢʔβϥϯυͰαϯυϘοΫεΛߏ੒ͨ͠΋ͷH7JTPS wϢχΧʔωϧΛίϯςφʹద༻ͨ͠΋ͷ/BCMB$POUBJOFS

  23. ࢀߟจݙʢ࿦จʣ wদຊ྄հ ʮ8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟʹؔ ͢Δݚڀʯ ೥౓ژ౎େֶେֶӃ৘ใֶݚڀՊത࢜࿦จֶҐ৹ ࠪެௌձ .BZ  w"MMJTPO3BOEBM ʮ5IF*EFBM7FSTVTUIF3FBM3FWJTJUJOHUIF

    )JTUPSZPG7JSUVBM.BDIJOFTBOE$POUBJOFSTʯ "$.$PNQVUJOH 4VSWFZT 7PMVNF *TTVF "SUJDMF  "QS IUUQTSFQPTJUPSZLVMJCLZPUPVBDKQETQBDFIBOEMF IUUQTBSYJWPSHBCT
  24. ࢀߟจݙʢॻ੶ʣ wίϯςφܕԾ૝Խ֓࿦ʢ઒ޱ௚໵  ΧοτγεςϜʣ wIUUQXXXDVUUDPKQCPPLIUNM

  25. ࢀߟࢿྉʢͦͷଞʣ wۙ౻Ӊஐ࿕ ৿ాߒฏʮίϯςφͷηΩϡϦςΟΛத਎͔Βཧղ͠Α ͏ʯIUUQTTQFBLFSEFDLDPNVE[VSBJOTJEFPVUDPOUBJOFS BOEJUTTFDVSJUZ wদຊ྄հʮϢϏΩλεσʔληϯλʔ04ͷจ຺ʹ͓͚Δίϯςφ࣮ ߦ؀ڥͷ෼ྨʯIUUQTICNBUTVNPUPSKQFOUSZ 

  26. ࢀߟࢿྉʢͦͷଞʣ wಙӬߤฏʮࠓ࿩୊ͷ͍Ζ͍ΖͳίϯςφϥϯλΠϜΛൺֱͯ͠Έͨʯ IUUQTXXXTMJEFTIBSFOFU,PIFJ5PLVOBHBTT wٶԼ߶ีʮ$PNQBSF0$*3VOUJNFTʯIUUQTTQFBLFSEFDLDPN NJ[[ZDPNQBSFPDJSVOUJNFT wՃ౻ହจʮ-9$ͰֶͿίϯςφೖ໳ܰྔԾ૝Խ؀ڥΛ࣮ݱ͢Δٕ ज़ʯIUUQTHJIZPKQBENJOTFSJBMMJOVY@DPOUBJOFST

  27. ࢀߟࢿྉʢͦͷଞʣ wVUBNLʮৄઆ0$*ίϯςφϥϯλΠϜZPVLJʯ IUUQTTQFBLFSEFDLDPNVUBNLYJBOHTIVP PDJLPOUFOBSBOUBJNVZPVLJBUEJIVJLPOUFOBKJTIVGBMTFRJOH CBPKJBPIVBOIVJ

  28. ίϯςφͷར༻ͱ ΦʔέετϨʔγϣϯ

  29. ίϯςφͷॏཁͳϢʔεέʔε w؀ڥͷϙʔλϒϧԽ w؀ڥߏஙͷࣗಈԽʢΦʔέετϨʔγϣϯʣ w؀ڥͷίʔυԽʢ*OGSBTUSVDUVSFBT$PEFʣ wू໿͞Εͨ؀ڥఏڙ wʢαϯυϘοΫεʁʣ

  30. ίϯςφҎલͷ*B$ w$IFG1VQQFUʹΠϯελϯεϨϕϧͷߏ੒؅ཧ w5FSSBGPSNʹΞʔΩςΫνϟϨϕϧͷߏ੒؅ཧɺ*BB4ͷ؅ཧ wγεςϜ؅ཧΛࣗಈԽ͍ͨ͠ͱ͍͏Ϟνϕʔγϣϯ͕࠷ॳʹ͋ͬͨ w"HJMF*OGSB%FW0QTιϑτ΢ΣΞ։ൃͷϓϥΫςΟεΛΠϯϑϥ ؅ཧʹԠ༻͢ΔͨΊʹ࢖ΘΕ޿·Δ wΠϯελϯεϨϕϧˠ"1*ʹΑΔ*BB4ͷૢ࡞ͱ؅ཧʹ޿͕Δ

  31. ίϯςφͷΦʔέετϨʔγϣϯ wʮΠϝʔδʯͷൃୡʹίϯςφΠϝʔδΛΦʔέετϨʔγϣϯͷ ύʔπͱͯ͠ଊ͑ΒΕΔΑ͏ʹͳΔɻ૊Έ߹ΘͤϕʔεͷΠϯϑϥ w#PSH͔Βͷ,VCFSOFUFTʹίϯςφΛ؅ཧ͢Δ෼ࢄΞʔΩςΫνϟ ͷҰͭͷύλʔϯ͕Ͱ͖ɺͦΕ͕ΦʔϓϯʹͳΓ࠶࣮૷͞ΕΔ w#PSH༝དྷͷ༷ʑͳ֓೦3FDPODJMJBUJPO-PPQɺ෼ࢄετϨʔδ΁ ͷઃఆอଘɺ.BTUFSͱ,VCFMFUɺ

  32. ίϯςφϕʔεΛલఏͱͨ͠ΤίγεςϜ wʮίϯςφϕʔεͷΠϯϑϥʯ͸ࠓ·Ͱʹଘࡏ͠ͳ͔ͬͨ΋ͷͳͷ Ͱɺطଘͷϛυϧ΢ΣΞͷ੾ΓସΘΓ͕ى͜Δ w$/$'ʢ5IF$MPVE/BUJWF$PNQVUJOH'PVOEBUJPOʣͷઃཱ w$MPVE/BUJWFͷఆٛɹIUUQTHJUIVCDPNDODGUPDCMPCNBTUFS%&'*/*5*0/NE ɹ w৽ੈ୅ͷɺ͋Δ͍͸Ґஔ͚ͮΛ৽ͨ͘͠͠ϛυϧ΢ΣΞͨͪ w1SPNFUIFVTɺ'MVFOUEɺ$PSF%/4ɺ&OWPZɺ)FMNɺ3PPLɺ 'BMDPɺ0QFO5SBDJOHɺH31$

  33. ࢀߟจݙɾࢿྉ wʮ-BSHFTDBMFDMVTUFSNBOBHFNFOUBU(PPHMFXJUI#PSHʯ IUUQTQEPTDTBJMNJUFEVQBQFSTCPSHQEG w೔ຊޠͰ͸ʮ(PPHMF͕࡞ͬͨ෼ࢄΞϓϦέʔγϣϯج൫ɺ#PSHͷ࿦จΛಡ Έղ͘ʯγϦʔζͳͲ IUUQTCMPHJOEVDUPSNFFOUSZ wٶԼ߶ีʮ*OGSBTUSVDUVSFBT$PEFͷ͜Ε·Ͱͱ͜Ε͔Βʯ IUUQTTQFBLFSEFDLDPNNJ[[ZJOGSBTUVEZNFFUVQOVNCFS

  34. લ൒ऴྃ