Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Securing CI/CD Systems Through eBPF (recap)
Search
whywaita
PRO
November 24, 2022
Technology
1
860
Securing CI/CD Systems Through eBPF (recap)
Talked by
https://k8sjp.connpass.com/event/264501/
whywaita
PRO
November 24, 2022
Tweet
Share
More Decks by whywaita
See All by whywaita
self-hosted runnerと actions/cache の噛み合わせが悪かった件 #githubactionsmeetup
whywaita
PRO
3
1.2k
過去事例から見るモニタリングの大切さ #techfeed_live
whywaita
PRO
2
1.1k
バリエーションで差をつける。myshoesの新たな挑戦 #cicd_test_night
whywaita
PRO
0
5.1k
ディスクレスハイパーバイザ 〜運用しやすいクラウドのために〜
whywaita
PRO
0
89
GitHub Actions runner基盤におけるオンプレミスマルチテナントアプリケーションの運用 #CADC2022
whywaita
PRO
0
370
Development myshoes and Provide Cycloud-hosted runner -- GitHub Actions with your shoes. #cndjp
whywaita
PRO
0
36
イベント企画運営の経験と実際 / The history of organizing events by me
whywaita
PRO
0
10
作って(壊して?)学ぶインターネットのしくみ サイバーエージェントの実験用ASの紹介 / Introduce experimental AS in CyberAgent Internet Seminer
whywaita
PRO
0
6
CyberAgent における OSS の CI/CD 基盤開発 myshoes #CICD2021
whywaita
PRO
0
38
Other Decks in Technology
See All in Technology
マルチアカウント環境への発見的統制の導入
ch1aki
1
1.3k
Delivering Millions of Messages within seconds @ Duolingo
pelelgrino
0
340
Hands-on / Kaname Frusawa / Cloud Compare Users Meetup 2024 at University of Tokyo on April 17
paraworld
2
470
Discord とビルダー&チャットボットの使い方 / How to use Discord and Builder & Chatbots
ks91
PRO
0
130
アプリがつくるNOT A HOTELブランド
hokuts
1
450
**強い**エンジニアのなり方 - フィードバックサイクルを勝ち取る / grow one day each day
soudai
61
18k
WebアプリケーションにおけるPDOの使い方入門 / phpcon odawara 2024
meihei3
2
430
Cloud Native Java with Spring Boot (CNCF Aarhus, April 2024)
thomasvitale
1
120
プロトタイピングによる不確実性の低減 / Reducing Uncertainty through Prototyping
ohbarye
3
240
長期運用プロジェクトでのMySQLからTiDB移行の検証
colopl
2
670
プロデザ! BY リクルート vol.18_リクルートのリサーチ実践組織「リサーチブーストコミュニティ」
recruitengineers
PRO
3
240
NgRx Signal Store
rainerhahnekamp
0
120
Featured
See All Featured
4 Signs Your Business is Dying
shpigford
175
21k
Design by the Numbers
sachag
274
18k
A Philosophy of Restraint
colly
196
16k
How GitHub Uses GitHub to Build GitHub
holman
468
290k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
115
18k
The Invisible Customer
myddelton
114
12k
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
15
1.4k
What’s in a name? Adding method to the madness
productmarketing
PRO
15
2.6k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
20
1.6k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
24
2.3k
ParisWeb 2013: Learning to Love: Crash Course in Emotional UX Design
dotmariusz
104
6.6k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
226
16k
Transcript
4FDVSJOH$*$%4ZTUFNT 5ISPVHIF#1' ,VCFSOFUFT.FFUVQ5PLZP ,VCF$PO/"3FDBQ $ZCFS"HFOU *ODத ݐొ XIZXBJUB
த ݐొ XIZXBJUB $MPVE.BLFSBU$ZCFS"HFOU *OD ϓϥΠϕʔτΫϥυ *BB4
ϚωʔδυαʔϏε։ൃ TFMGIPTUFESVOOFSJO(JU)VC"DUJPOT XIZXBJUBNZTIPFT044EFWFMPQFS झຯࣗαʔό ,T!IPNF ϙʔΧʔ ,VCF$POॳࢀઓ ॳւ֎ ೖࠃΠϯλϏϡʔͰҰഊ 5IBOLZPVBNTZ😭
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1'
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • CZ"MFY*MHBZFW $ZDPEF ◦ IUUQTDZDPEFDPN • IUUQTTDIFEDP"V[ • IUUQTXXXZPVUVCFDPNXBUDI
WQD#(3'W4SW : • $*$%ΛηΩϡΞʹߦ͏ͨΊʹF#1'Λར༻͢ΔࢼΈ
• &YUFOEFE#FSLFMFZ1BDLFU'JMUFS • -JOVY,FSOFMͷ4BOECPYͰίʔυΛ࣮ߦ͢Δ ◦ ϦίϯύΠϧෆཁ Ͱ ҆શ ͔ͭ ߴ
• /FUXPSL 0CTFSWBCJMJUZͷར༻ࣄྫ͕ଟΊ ◦ ,VCFSOFUFT$/* .POJUPSJOH"HFOU લఏࣝF#1'
• &YUFOEFE#FSLFMFZ1BDLFU'JMUFS • -JOVY,FSOFMͷ4BOECPYͰίʔυΛ࣮ߦ͢Δ ◦ ϦίϯύΠϧෆཁ Ͱ ҆શ ͔ͭ ߴ
• /FUXPSL 0CTFSWBCJMJUZͷར༻ࣄྫ͕ଟΊ ◦ ,VCFSOFUFT$/*$JMJVN ◦ .POJUPSJOH"HFOUEBUBEPHBHFOU FCQG@FYQPSUFS લఏࣝF#1'
IUUQTUXJUUFSDPNHSBGBOBTUBUVT લఏࣝF#1'
IUUQTHSBGBOBDPNCMPHHSBGBOBBOEDJMJVNEFFQFCQGQPXFSFEPCTFSWBCJMJUZGPSLVCFSOFUFTBOEDMPVE OBUJWFJOGSBTUSVDUVSF લఏࣝF#1'
ຊ
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • $*$%ʹ͓͚ΔηΩϡϦςΟࣄҊ ◦ 4PMBS8JOETॺ໊͖ϑΝΠϧͷॻ ◦ $PEF$PWCBTIJOTUBMMFSͷॻ ◦ /1. 1Z1*αϓϥΠνΣʔϯΞλοΫ
• $*$%πʔϧ ͷηΩϡϦςΟରࡦ͍͠ ◦ ڧݖݶ شൃ͢Δڥ Մ؍ଌੑ
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • ఏҊ$*$%F#1'ϕʔεͳ"HFOUͷಋೖ • XIZF#1' ◦ ؆୯ʹՄ؍ଌੑͱηΩϡϦςΟχʔζΛߴΊΒΕΔ ◦ ࠷৽ΧʔωϧͰಈ࡞͢Δ ◦
ڧྗͳίϛϡχςΟͱπʔϧ • $JMJVN5FUSBHPOͷ࠾༻
• F#1'CBTFE 4FDVSJUZ0CTFSWBCJMJUZ ηΩϡϦςΟͷՄ؍ଌੑ BOE 3VOUJNF&OGPSDFNFOU ϦΞϧλΠϜ࣮ߦ੍ޚ • ੨ࢁ͞ΜʹΑΔຊޠهࣄ $JMJVN1SPKFDU͔Βެ։ʂ
F#1'Λ༻͍ͯηΩϡϦςΟͷՄ؍ଌੑΛͨΒ͢5FUSBHPOcHJIZPKQ $JMJVN5FUSBHPO IUUQTHJUIVCDPNDJMJVNUFUSBHPO ͔Θ͍͍ˠ
$JMJVN5FUSBHPO
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • $*$%γεςϜʹ$JMJVN5FUSBHPOΛಋೖ ◦ $*$%γεςϜʹ͓͚Δzಈ࡞Λ؍ଌ͢Δ ◦ ϓϩηε ίωΫγϣϯ ϑΝΠϧ *0ใ
• 5FUSBHPO࠾༻ཧ༝ ◦ LQSPCFΛ࢝Ίͱͯ͠ଟ͘ͷσʔλ͕औಘՄೳ ◦ LTҎ֎ͷڥͰಈ࡞͢Δ
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1'
1P$ͷ࣮༰ʹ͍ͭͯ • Ϗϧυڥͷ0CTFSWBMJCJUZ ◦ ϓϩηε ଓઌυϝΠϯ *1 • ιʔείʔυͷશੑ֬อ ◦
HPϑΝΠϧͷॻΛࢹ • ௨৴ઌͷ੍ޚ ◦ ڐՄͯ͠ͳ͍*1υϝΠϯͷଓՄ൱ • (JU)VC"DUJPOT্Ͱಈ࡞͢ΔΑ͏ߏஙࡁ
1P$ͷ࣮༰ʹ͍ͭͯ
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' HJUDMPOF࣌ͷ HJUIVCDPNͷଓ UDQ@DPOOFDU ΛUSBDJOH͢Δ͜ͱͰ؍ଌޭ
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' TFUVQHPͰ࣮ߦ͞Ε͍ͯΔ ϓϩηεใͷ؍ଌޭ
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • σϞ ◦ Ϗϧυதͷ HPϑΝΠϧͷॻ 4*(,*-- ◦ ڐՄ͍ͯ͠ͳ͍*1ͷ௨৴ 4*(,*--
◦ ڐՄ͍ͯ͠ͳ͍ϓϩηεͷੜ 4*(,*--
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • σϞ ◦ Ϗϧυதͷ HPϑΝΠϧͷॻ 4*(,*-- ◦ ڐՄ͍ͯ͠ͳ͍*1ͷ௨৴ 4*(,*--
◦ ڐՄ͍ͯ͠ͳ͍ϓϩηεͷੜ 4*(,*--
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1'
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' • σϞ ◦ Ϗϧυதͷ HPϑΝΠϧͷॻ 4*(,*-- ◦ ڐՄ͍ͯ͠ͳ͍*1ͷ௨৴ 4*(,*--
◦ ڐՄ͍ͯ͠ͳ͍ϓϩηεͷੜ 4*(,*--
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1' (JU)VC"DUJPOT্ͷઃఆϑΝΠϧ͔Β $JMJVN5FUSBHPOͷઃఆΛੜ
·ͱΊ • F#1' $JMJVN5FUSBHPOύϫϑϧͳςΫϊϩδʔ • $*$%F#1'ʹΑͬͯ͞ΒʹηΩϡΞʹͳΔ • ࠓޙ1P$Ͱͬͨ"HFOUΛ044Խ༧ఆ ◦ ͞Εͯ·ͨ͠
IUUQTHJUIVCDPN$ZDPEF-BCTFCQGBHFOUBDUJPO • $POUSJCVUFͬͯΔΑʂ
ײ • 5FUSBHPOͷڧྗ͞Λेೋʹ׆͔͢ൃද ◦ 0CTFSWBCJMJUZ 3VOUJNF&OGPSDFNFOU ◦ ϕετϑΟοτ • ʮؾΛ͚ͭΔʯҎ্ͷ͜ͱ͕ग़དྷΔΑ͏ʹ
◦ $*$%ͷΑ͏ʹʮॏཁ͚ͩͲׂ͕͔Εʹ͍͘ʯ ಛʹ͜ͷΑ͏ͳऔΓΈ͕ඞཁʹͳΓͦ͏
αΠόʔΤʔδΣϯτͰͷऔΓΈ ϓϥΠϕʔτΫϥυͰͷ(JU)VC"DUJPOTج൫Λ ։ൃɾӡ༻த IUUQTXXXTMJEFTIBSFOFUXIZXBJUBEFWFMPQNFOUNZTIPFTBOEQSPWJEFDZDMPVEIPTUFESVOOFSHJUIVCBDUJPOT XJUIZPVSTIPFT
αΠόʔΤʔδΣϯτͰͷऔΓΈ IUUQTXXXTMJEFTIBSFOFUXIZXBJUBEFWFMPQNFOUNZTIPFTBOEQSPWJEFDZDMPVEIPTUFESVOOFSHJUIVCBDUJPOT XJUIZPVSTIPFT ಈతͳTFMGIPTUFESVOOFS XIZXBJUBNZTIPFT
4FDVSJOH$*$%4ZTUFNT5ISPVHIF#1'
αΠόʔΤʔδΣϯτͰͷऔΓΈ IUUQTXXXTMJEFTIBSFOFUXIZXBJUBEFWFMPQNFOUNZTIPFTBOEQSPWJEFDZDMPVEIPTUFESVOOFSHJUIVCBDUJPOT XJUIZPVSTIPFT ಈతͳ TFMGIPTUFESVOOFS XIZXBJUBNZTIPFT .BOBHFE 1P$"HFOU4FSWFS
Q?