Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-contain...
Search
KONDO Uchio
February 17, 2018
Technology
33
18k
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch
Hacker Tackle 2018 発表資料
KONDO Uchio
February 17, 2018
Tweet
Share
More Decks by KONDO Uchio
See All by KONDO Uchio
大規模レガシーテストを 倒すための CI基盤の作り方 / #CICD2023
udzura
5
2.5k
Ruby x BPF in Action / RubyKaigi 2022
udzura
0
260
Narrative of Ruby & Rust
udzura
0
240
開発者生産性指標の可視化 / pepabo-four-keys
udzura
3
1.7k
Talk of RBS
udzura
0
460
Re: みなさん最近どうですか? / FGN tech meetup in 2021
udzura
0
800
Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -
udzura
2
750
Device access filtering in cgroup v2
udzura
1
940
"Story of Rucy" on RubyKaigi takeout 2021
udzura
0
860
Other Decks in Technology
See All in Technology
OPENLOGI Company Profile for engineer
hr01
1
45k
Okta Identity Governanceで実現する最小権限の原則 / Implementing the Principle of Least Privilege with Okta Identity Governance
tatsumin39
0
180
プロファイルとAIエージェントによる効率的なデバッグ / Effective debugging with profiler and AI assistant
ymotongpoo
1
370
マルチエージェントのチームビルディング_2025-10-25
shinoyamada
0
200
コンパウンド組織のCRE #cre_meetup
layerx
PRO
1
280
dbtとAIエージェントを組み合わせて見えたデータ調査の新しい形
10xinc
6
1.2k
AIでデータ活用を加速させる取り組み / Leveraging AI to accelerate data utilization
okiyuki99
4
1.2k
IoTLT@ストラタシスジャパン_20251021
norioikedo
0
140
SCONE - 動画配信の帯域を最適化する新プロトコル
kazuho
1
400
プレイドのユニークな技術とインターンのリアル
plaidtech
PRO
1
460
東京大学「Agile-X」のFPGA AIデザインハッカソンを制したソニーのAI最適化
sony
0
140
What's new in OpenShift 4.20
redhatlivestreaming
0
320
Featured
See All Featured
How GitHub (no longer) Works
holman
315
140k
Side Projects
sachag
455
43k
Build your cross-platform service in a week with App Engine
jlugia
233
18k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
230
22k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
10
890
Building Adaptive Systems
keathley
44
2.8k
The Power of CSS Pseudo Elements
geoffreycrofte
80
6k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
31
2.6k
The Illustrated Children's Guide to Kubernetes
chrisshort
49
51k
How STYLIGHT went responsive
nonsquared
100
5.9k
Embracing the Ebb and Flow
colly
88
4.9k
How to Think Like a Performance Engineer
csswizardry
27
2.1k
Transcript
ۙ౻Ӊஐ࿕(.01FQBCP *OD !)BDLFS5BDLMF શવΘ͔Βͳ͍ɻ ԶͨͪงғؾͰ ίϯςφΛͬͯ ͍Δ
ۙ౻Ӊஐ࿕!VE[VSB &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉΑ ΓԬࢢʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛΈ ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ ͰͷτʔΫ͕࠾͞Εɺ·ͨιϑτΣΞ ͰୈճԬ3VCZେΛडɻݱࡏɺ)BDPOJXB Λϕʔεͱͨ͠ΫϥυαʔϏεͰ͋ΔʮϩϦϙο
ϓʂϚωʔδυΫϥυʯʹٕࣾज़ސ ͱ͠ ͯࢀՃ͍ͯ͠Δɻ
ࠓͷ͓ w งғؾͰίϯςφͷதΛཧղ͢Δ w งғؾͰίϯςφͷΤίγεςϜΛཧղɹ w งғؾͰίϯςφΛࣗ࡞͢Δʹ w ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ
งғؾͰίϯ ςφͷதΛ ཧղ͢Δ
ίϯςφԾԽ
ίϯςφɺ ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
͡Ό͋࡞ͬͯΈ·͠ΐ͏͔
%PDLFSΛྫʹ͠·͢ wී௨ͷ-JOVY 6CVOUV#JPOJD ʹ%PDLFSΛೖΕͯɺෳݸίϯςφΛ ࡞ͬͯΈΔɻ $ docker run --rm -d
debian:latest /bin/sleep 99 d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...
࠷ۙ DF ͷ%PDLFS w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷQTίϚϯυΛൃߦͯ͠Έ·͠ΐ͏ w;Ή;Ή
ίϯςφͷTMFFQίϚϯυ ϗετϚγϯ͔Β ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢
ͭ·Γ
ίϯςφϓϩηεͳΜ ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ ʂʂʂʂʂʂʂʂʂʂ
ίϯςφʮԾԽʯͬͯݴ͏͚ΕͲ wίϯςφͷ࣮ݱʹ͓͍ͯɺϋʔυΣΞͷԾԽʢ$16ɺϝϞϦͳ Ͳʣߦ͍ͬͯͳ͍͜ͱʹҙɻ wEPDLFSSVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷڥʹೖΔʯ͜ͱ͕ग़དྷ ΔɻͦͷΑ͏ʹಠཱͨ͠ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾԽʯ ͱݺΜͰ͍Δͱݴ͑Δɻ wٯʹϓϩηεͳͷͰɺͦͷଞͷԾԽख๏ΑΓܰྔͩ͠ɺΑΓࡉ͔ ੍͍ޚ͕ՄೳʹͳΔଆ໘͋Δɻ
DGͦͷଞͷԾԽ wϗετܕ͋Δ04ʹɺઐ༻ͷιϑτΣΞΛೖΕͯԾԽ͢Δ wϋΠύʔόΠβܕԾԽઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ wͳͲͳͲɺ࣮ݱͷํࣜز͔ͭ͋Δ͕ɺಛͱͯ͠ɺϋʔυΣΞͷ ԾԽΛߦ͏ɻͦͷͨΊ04ͷछྨࣗ༝ʹͳΔ͕ɺίϯςφΑΓ Φʔόʔϔου͕େ͖͘ͳΔɻ
None
None
ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐΔ wΈΜͳ/procͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ w/proc/PID/*ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷͷ ͱʮίϯςφԽͨ͠ʯͷͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ ͍Δ͜ͱ͕Θ͔Δɻ w/proc/PID/ns, /proc/PID/cgroup, /proc/PID/status,
ʮίϯςφԽʯ͢ΔͨΊͷ -JOVYͷػೳ
-JOVY/BNFTQBDF
QSPD1*%OT͕ҧ͏ wΑ͘ݟΔͱҧ͏ wVUTͱ͔JQDͱ͔NOUͱ͔ ͍Ζ͍Ζ͋Δ w͜ΕΒɺάϩʔόϧͳ໊લۭؒͱผͷ04ϦιʔεΛׂΓͯΒ Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY/BNFTQBDFͱ ݺΜͰ͍Δɻ wྫ͑654/BNFTQBDFάϩʔόϧͳϗετ໊ͱಠཱͨ͠ϗετ໊Λ࣋ͯΔ
None
ίϯςφͷωοτϫʔΫʹʮೖΔʯ wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY/BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ wEPDLFSFYFDͱൺֱͯ͠ΈΑ͏ $ sudo nsenter \ --net=/proc/$( \ docker
inspect hackertackle_1 -f ‘{{.State.Pid}}' \ )/ns/net
EPDLFSFYFD OTFOUFS
DHSPVQ
DHSPVQͱ wDHSPVQ $POUSPM(SPVQ ͱɺҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ υΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍౷ܭใΛऔಘͰ͖Δɻ wྫ w$16ͷ੍ݶάϧʔϓશମͷ$16ར༻Λ/ʹԡ͑ͨ͞ΓɺίΞΛ ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭΘ͔Δ wϝϞϦͷ੍ݶάϧʔϓશମͰ͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖
Δɻݶքʹୡͨ࣌͠ͷڍಈબΔ
QJETαϒγεςϜ wͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ੍ݶͰ͖Δɻ wDHSPVQಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ͑Δɻ ݸʹ੍ݶ
ͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ ੍ݶͰ͖Δ ʹ GPSLCPNCରࡦ͕Ͱ͖Δ
ࢼͯ͠Έ·͠ΐ͏ w˞ࣦഊ͢Δͱɺ؋͝ͱམͪ·͢ term1:~$ echo $$ #=> 5849 term2:~$ echo 5849
| \ sudo tee /sys/fs/cgroup/pids/hackertackle/tasks term1:~$ cat /proc/self/cgroup | grep pids 3:pids:/hackertackle term1:~$ #... doing fork bomb ...
ੜؐ
ͦͷଞͷػೳ wDISPPUQJWPU@SPPU͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ wSMJNJUVMJNJUͷͭ w,FSOFM$BQBCJMJUZSPPUͷݖݶΛׂͯ͠Ұ෦Λ༩ɺୣ͏ wTFDDPNQγεςϜίʔϧͷϑΟϧλϦϯά w."$ BQQBSNPS4&-JOVY50.0:0ଞ
TFDDPNQͷྫ wίϯςφ෦ͰɺNLEJSίϚϯυͰ͏γεςϜίʔϧ ʢmkdir(2)ʣDIPXOίϚϯυͰ͏ͭʢchownat(2)ʣͷݺͼ ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ֘ૢ࡞͕ෆՄ ೳʹɻ͖ͳίϚϯυΛstrace(1)Ͱௐͯ෧ҹ͠Α͏ʂ ➡ ➡
ং൫ͷ·ͱΊ wίϯςφಛघͳϓϩηεͱߟ͑Ε0, wϓϩηεΛϗετ͔ΒִɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱڥͱ͢Δͷ͕جຊతͳߟ͑ํ wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗͰݺͼग़ͤɺί ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱͰ͖Δ
งғؾ௫Ί͔ͨͳʁ
งғؾͰίϯ ςφͷΤίγ εςϜΛཧղ
ίϯςφ༻ޠ
ίϯςφ༻ޠ %PDLFS -9$ -9% .PCZ ,VCFSOFUFT 'MBOOFM SVOD (,& &$4
"$* 0$* 5FDUPOJD $PSF04 )BDPOJXB SLU SBJMDBS $BMJDP /PNBE 4XBSN
ଟ͘ͳ͍ʁ
આ໌Ͱ͖·͔͢ʁ
ϨΠϠͰߟ͑ͯΈΔ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE
ิॿઢΛҾ͜͏ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3*
0$* 0QFO$POUBJOFS*OJUJBUJWF
0$*ͱ wίϯςφͷ৭ʑͳنɾن֨Λඪ४Խ͍ͯ͠Δஂମ w0$*ͷنʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε͍ճ͠Ͱ͖Δ w04͝ͱʹඞཁͳύϥϝʔλ͕ཧ͞ΕͯࣗͰඞཁͳϥϯλΠϜΛ ࣮Ͱ͖ͨΓ͢Δ w࣮ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ༰қʹͳΔ
ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏ EPDLFSίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ໊͍લ ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ
SVODͷϨΠϠʔՄͰ͋Δ w0$*ͷنͲ͓Γͷ࣮Λͨ͠ίϯςφϥϯλΠϜͰ͋Εɺ ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS ͰEPDLFSDPOUBJOFSETIJNͱ͍ ͏ϓϩάϥϜ͕୲͍ͬͯΔ
͍֮͑ͯ·͔͢ɺSBJMDBS w0SBDMFͷίϯςφϥϯλΠϜɺࠓͷτʔΫେگɾ3VTU w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ͏Α͏ʹࢦఆՄೳ wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ FEHFͷͰ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠ ExecStart=/usr/bin/dockerd -H fd:// --experimental \
--add-runtime "rc=/usr/local/bin/railcar"
SBJMDBSΛ%PDLFSͰ͑Δ
$3* $POUBJOFS3VOUJNF*OUFSGBDF
͜ͷ ,VCFSOFUFT ʹؔͯ͠ wૉਓͳΜͰ͕͢ w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢ wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ 8BSOJOH
NJOJDVCFͳͲͰαΫοͱLTڥΛ w࡞ͬͯΈΔ wNJOJLVCFTTIͰೖΔͱɺવEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ wຬͨ͠ͷͰ ͜ͷڥফ͠·͢
ࠓɺΦϓγϣϯΛม͑Δ wҎԼͷΦϓγϣϯͰNJOJLVCFTUBSU͢Δ wʢ্ख͘ಈ͔ͳ͍࣌Ұ୴NJOJLVCFTUPQΦϓγϣϯແ͠Ͱ NJOJLVCFTUBSUʣ $ minikube start \ --network-plugin=cni \
--container-runtime=cri-o \ --bootstrapper=kubeadm
DSJP ͍ͬͯ͏ͭʁ w͕͍Δ w͍ͭ͜୭ͩ
DSJPSLUMFUͳͲͳͲ w$3*ͱɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ ༷ͷࣄͰɺH31$Λ͍ͬͯΔ w$3*ϓϩτίϧΛΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ ࣮ʹؔͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ wDSJPίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ͏ wSLUMFUίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ͏
͜͜·Ͱͷ·ͱΊ w0$*ͱ͍͏ஂମͷ࡞ͬͨنʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ ར w$3*ͱ͍͏نʹԊ࣮ͬͨͰίϯςφϥϯλΠϜΛ࡞Δͱศར w͜ΕΒͷنͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷׂ͔ҙࣝ͢Δͱ٢
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM %PDLFS͜͜Λ ·ͱΊͯར༻͢ΔԿ͔
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE ,FSOFMTZTDBMM -9$-9%ʹؔͯ͠ɺ0$*ͱ·ͨผ͕ͩɺ ͬ͘͟Γ-9$͕ΧʔωϧΓͱΓɺ-9%͕)551"1*Λ୲ )BDPOJXB͜Ε͔Β)551 5$1 JOUFSGBDFΛ࡞Γ·͢
࠷ޙͷϨΠϠʔ͚ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ίϯςφͷωοτϫʔΫઃఆ wز͔ͭઓུ͕͋Δɻ w ΫϥελϦϯά͠ͳ͍ wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍ w ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ wίϯςφ͕͏ϒϦοδͳͲࣗͰҾͬுͬͯؤுͬͯؤுΔ w $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ
$/* $POUBJOFS/FUXPSL*OUFSGBDF
$/*ͱ w͜Ε·ͨɺ0QFO$POUBJOFS*OJUJBUJWFͷఆΊͨίϯςφͷωοτ ϫʔΫͷن w,VCFSOFUFTͰར༻Ͱ͖Δ wOFUXPSLQMVHJODOJͰىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ/etc/cni/net.dʹઃఆ͕ೖ ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ
qBOOFMͷྫ wqBOOFMWYMBO -PWFS- Λ࣮ݱ͢ΔσʔϞϯ wࣗͰΜͰ͍͍͚Ͳɺ $/*ϓϥάΠϯ͕͋Δ $ kubectl apply -f
kube-flannel.yml ʮqBOOFMΛͬͯ-JOVYͰ࣮ݱ͢ΔWYMBOͷ͞ΘΓΛΔʯ IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG
DBMJDPͷྫ w1SPKFDU$BMJDP-ͷΈͰ࣮ݱ͍ͯ͠Δ εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ w ʮ:BIPP+"1"/.FFU6QʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ $ kubectl apply
-f calico.yaml
ͦͷଞͷબࢶ wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO OFUXPSLJOH w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυڥݻ༗ͷઃఆ͋ ΔΑ͏ͩʁ
࣮ϕʔεͳϨΠϠΘ͚·ͱΊ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM $/* $MVTUFSFE/PEF1PPM
ଟ ͜͜·ͰͰ
0OFNPSFUIJOH
งғؾͰίϯ ςφΛࣗ࡞͠ ͯΈͨ
ࣗ࡞Ұཡ wίϯςφϥϯλΠϜ)BDPOJXB wίϯςφઓུ ΦʔέετϨʔγϣϯ 'BTU$POUBJOFSXJUI/)).TUBDL
)BDPOJXB wίϯςφϥϯλΠϜɻNSVCZݴޠΛΈࠐΜͰ͍ͯɺίʔυͰίϯς φͷઃఆৼΔ͍ͳͲΛهड़Ͱ͖Δɻ wྫ͑ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ͢Δ͔ɺ*1ԿΛͭ ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ w͋Δ͍ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺɻ w͕࡞ͬͨɻ
'BTU$POUBJOFS wͬ͘͟ΓߦͰ wϦΫΤετ͕͋Δ·Ͱ ىಈ͠ͳ͍ wىಈޙɺҰఆ࣌ؒޙʹఀࢭ wͲΜͲΜίϯςφ͕॥͢Δ wDG1IPFOJY4FSWFST1BUUFSO wDG'BTU$(* ˞ʮҰาઌߦ͘ίϯςφཧΞʔΩςΫνϟʯ8&# %#13&447PM
ΦʔέετϨʔγϣϯΞʔΩςΫνϟ w$.%# $POUFOUT.BOBHFNFOU%BUBCBTF ͷঢ়ଶʹऩଋ͢Δ ˞ʮ'BTU$POUBJOFS࣮ߦڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ
,VCFTUBDLͱͷൺֱ SVOD ,VCFSOFUFT 'MBOOFM $BMJDP $3*0 $POUBJOFSE ,FSOFMTZTDBMM $MVTUFSFE/PEF1PPM )BDPOJXB
OHY@NSVCZ CBTFE TFSWJDFNFTI OHY@NSVCZ )551"1* +BSEJO #SJEHF WFUI $.%# FUDE
࠙ձ Ͱ
ऴΘΓʹ
ίϯςφɺͬͯ·͔͢ʁ wԿͷͨΊʹ͍ͬͯ·͔͢ʁ w࣮ΘΕ͍ͯΔͷͰʁ wίϯςφͰ͋ͳͨͷղܾ͠·͔͢ʁ w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠
ίϯςφͷ ʮงғؾʯ
ίϯςφͷ ֓೦Ϟσϧ
௨ৗ͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ ͏ಈ͔͘ͷઆ໌ʢʣɻ ͜Εɺʹཱ͍ͬͯΔݶΓɺશͳͷ Ͱͳͯ͘Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ ʰ୭ͷͨΊͷσβΠϯʁʱ%"ϊʔϚϯɺ༁վగ൛
ίϯςφͷ֓೦Ϟσϧʁ wͦΕίϯςφͰ͢Ͷ w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ Ξε͕͋ΔͷͰͳ͍ͩΖ͏͔ɻ w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૾Ͱ͖Δʁ w͔͠͠7.ͷΑ͏ʹԿ͔ԾԽ͞Ε͍ͯΔΘ͚Ͱͳ͍͠ɺϗε τʹΑΔ੍େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ
ίϯςφΛͪΌΜͱӡ༻͢Δʹ ʢ·ͩ·ͩʣதΛ͍͔͚ͯ ཧղ͢Δ͜ͱ͕ॏཁɻ
ͦΕʹ தΛ͔ͬ͠Γཧղ͢Δ͜ͱ ָ͍͠ʢͣʣ
&OKPZ5BDLMJOH $POUBJOFS&DPTZTUFN
ࢀߟࢿྉ w0$* IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD w1SPUPUZQJOH,VCFSOFUFT$3*CZ!SFNPSF͞Μ IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ XJUISVCZBOEHSQD
4QFDJBM5IBOLT wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓၟӽͳ͕Βʣ w!UONU w!S@UBLBJTIJ