CloudNative Days Winter 2025: 一週間で作る低レイヤコンテナランタイム

Transcript

1. ˜
   -:
   $PSQPSBUJPO ҰिؒͰ࡞Δ௿ϨΠϠίϯςφϥϯλΠϜ -*/&Ϡϑʔגࣜձࣾ ૣࡔ Ҁࢠ
2. ˜
   -:
   $PSQPSBUJPO  "ZBLP
   )BZBTBLB -*/&Ϡϑʔגࣜձࣾ 4PGUXBSF
   &OHJOFFS 
   ೥౓ೖࣾ 48"5
   ͱͯ͠ 8FC
   όοΫΤϯυྖҬͰશࣾԣஅతͳ ٕज़ࢧԉΛ࣮ࢪ ϝΠϯ͸ 4QSJOH
   #PPU
   
   +BWB
   
   ,PUMJO • 3"(
   ٕज़Λར༻ͨ͠ۀ຿ޮ཰Խπʔϧ 4FFL"* ։ൃ • :BIPP஌ܙାͷ "*
   ճ౴ػೳʮΈΜͳͷ஌ܙାʯ։ൃ • ੜ੒
   "*
   Λར༻ͨ͠ 2"
   ྖҬͷੜ࢈ੑ޲্πʔϧ։ൃ • :BIPP͖ͬͣϑΟϧλϦϯάػೳ "*
   ಋೖ ˜
   -:
   $PSQPSBUJPO
3. ˜
   -:
   $PSQPSBUJPO $G1 ʹهࡌͨ͠಺༰
4. ˜
   -:
   $PSQPSBUJPO $G1 ʹهࡌͨ͠಺༰ 
   ߦ͘Β͍ʹͳͬͨ ࡾिؒ͘Β͍͔͔ͬͨ
5. ˜
   -:
   $PSQPSBUJPO $G1 ʹهࡌͨ͠಺༰ ௿ϨΠϠίϯςφϥϯλΠϜͬͯ ԿΛ͢Δͷʁ ,PUMJO/BUJWF
   ͬͯͳΜͩʁ ࡾिؒ͘Β͍͔͔ͬͨ 
   ߦ͘Β͍ʹͳͬͨ
6. ˜
   -:
   $PSQPSBUJPO "HFOEB • ͦ΋ͦ΋ίϯςφͱ͸ʁ • ௿ϨΠϠίϯςφϥϯλΠϜͬͯԿΛ͢Δͷʁ • ,PUMJO/BUJWF
   ͷ֓ཁͱબఆཧ༝ • ࣗ࡞ίϯςφϥϯλΠϜͷ࣮૷঺հ DSFBUF
   TUBSU
   Λத৺ʹ • ֤छ OBNFTQBDF
   ෼཭ΛͲ͏࣮ݱ͢Δ͔ • OBNFTQBDF
   ෼཭ޙͷྲྀΕ
7. ˜
   -:
   $PSQPSBUJPO  ͦ΋ͦ΋ίϯςφͱ͸ʁ ਤ͸ಙӬߤฏ
   ΠϥετͰΘ͔Δ %PDLFS
   ͱ ,VCFSOFUFT
   ٕज़ධ࿦ࣾ 
   Q
   Λݩʹ࡞੒ ϗετ͔Βִ཭͞Εͨɺಠཱ࣮ͨ͠ߦ؀ڥ • ϓϩηεͱ࣮ͯ͠ߦ͞Ε͍ͯΔ • Χʔωϧ͸ϗετͷ΋ͷΛڞ༗͢Δ ϋʔυ΢ΣΞ 04 ϓϩ ηε ϓϩ ηε
8. ˜
   -:
   $PSQPSBUJPO  ίϯςφ͸ී௨ͷϓϩηεͱ͸Ͳ͏ҧ͏ͷʁ ίϯςφ͕ѱ͞Λ͠ͳ͍Α͏ʹɺ৭ʑͳ੍ݶΛ͔͚Δ͜ͱ͕Ͱ͖Δ ଞͷίϯςφ΍ϗετͱ͸ҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭ Ϧιʔεִ͕཭͞Ε͓ͯΓɺίϯςφ಺͔Β ଞͷίϯςφ΍ϗετͷϦιʔε͸ݟ͑ͳ͍
9. ˜
   -:
   $PSQPSBUJPO  ίϯςφ͸ී௨ͷϓϩηεͱ͸Ͳ͏ҧ͏ͷʁ ίϯςφ͕ѱ͞Λ͠ͳ͍Α͏ʹɺ৭ʑͳ੍ݶΛ͔͚Δ͜ͱ͕Ͱ͖Δ ଞͷίϯςφ΍ϗετͱ͸ҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭ Ϧιʔεִ͕཭͞Ε͓ͯΓɺίϯςφ಺͔Β ଞͷίϯςφ΍ϗετͷϦιʔε͸ݟ͑ͳ͍
10. ˜
    -:
    $PSQPSBUJPO  ʮִ཭ʯͬͯͲ͏͍͏͜ͱʁ • ϗετ͔ΒऔΓѻ͑ΔϦιʔεͱɺίϯςφ͔ΒऔΓѻ͑ΔϦιʔεΛ෼͚ͯɺ ผͷ໊લۭؒͰ؅ཧ͢Δ • -JOVY
    ͷ
    OBNFTQBDF
    ػೳ͕༻͍ΒΕΔ • ྫ
    1*%
    OBNFTQBDF
    ϓϩηε *%
    ͷ OBNFTQBDF
    ͦͷίϯςφ಺Ͱಈ࡞͍ͯ͠ΔϓϩηεͷΈ͕ දࣔ͞Εɺϗετͷϓϩηε͸ݟ͑ͳ͍ ϗετ͔Βίϯςφͷϓϩηε͸ݟ͑Δ͕ Pid ͸ҟͳΔ
11. ˜
    -:
    $PSQPSBUJPO  -JOVY
    ʹଘࡏ͢Δ OBNFTQBDF OBNFTQBDF ҙٛ 1*%
    OBNFTQBDF ϓϩηε܈ͷִ཭ 654
    OBNFTQBDF
    ϗετ໊ͳͲͷִ཭ ϗετͱҟͳΔϗετ໊Λ͚ͭΒΕΔΑ͏ʹͳΔ *1$
    OBNFTQBDF ϓϩηεؒ௨৴ʹؔ͢ΔϦιʔεͷִ཭ OFUXPSL
    OBNFTQBDF ωοτϫʔΫؔ࿈ͷϦιʔεͷִ཭ NPVOU
    OBNFTQBDF Ϛ΢ϯτϙΠϯτϦετͷִ཭ VTFS
    OBNFTQBDF Ϣʔβɾάϧʔϓ΍ݖݶͳͲͷִ཭ ϓϨθϯޙ൒Ͱৄड़ DHSPVQ
    OBNFTQBDF ϓϩηε͔Βݟ͑Δ DHSPVQ
    ͷ֊૚Λִ཭ UJNF
    OBNFTQBDF γεςϜىಈ͔Βͷܦա࣌ؒΛִ཭
12. ˜
    -:
    $PSQPSBUJPO  ίϯςφ͸ී௨ͷϓϩηεͱ͸Ͳ͏ҧ͏ͷʁ Ϧιʔεִ͕཭͞Ε͓ͯΓɺίϯςφ಺͔Βଞͷίϯςφ΍ ϗετͷϓϩηε͸ݟ͑ͳ͍ ଞͷίϯςφ΍ϗετͱ͸ҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭ ίϯςφ͕ѱ͞Λ͠ͳ͍Α͏ʹɺ৭ʑͳ੍ݶΛ͔͚Δ͜ͱ͕Ͱ͖Δ
13. ˜
    -:
    $PSQPSBUJPO  ʮҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭʯͬͯ Ͳ͏͍͏͜ͱʁ • ίϯςφ಺͔ΒϗετͷϑΝΠϧγεςϜશମ ͕ݟ͑ͨΓɺૢ࡞͕Ͱ͖ͨΓͨ͠Β·͍ͣ • -JOVY
    Ͱ͸ɺQJWPU@SPPU 
    Λߦ͏ͱɺݱࡏͷ ϓϩηεͷϧʔτσΟϨΫτϦΛมߋͰ͖Δ • ίϯςφ಺෦͔ΒݟΔͱɺͦͷσΟϨΫτϦ͕ ϧʔτσΟϨΫτϦʹݟ͑ΔΑ͏ʹͳΓɺͦΕ ΑΓ্ʹ͸ΞΫηεͰ͖ͳ͍ ϗετ্ͷϑΝΠϧγεςϜ • IPHFGVHBQJZPUFTUUYU • IPHFGVHBFYBNQMFTI • IPHFTBNQMFQZ IPHFGVHB
    ΛϧʔτσΟϨΫτϦʹ มߋͨ͠ϓϩηε͔Β͸͜͏ݟ͑Δ • QJZPUFTUUYU • FYBNQMFTI
14. ˜
    -:
    $PSQPSBUJPO  ʮҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭʯͬͯ Ͳ͏͍͏͜ͱʁ • ίϯςφ಺͔ΒϗετͷϑΝΠϧγεςϜશମ ͕ݟ͑ͨΓɺૢ࡞͕Ͱ͖ͨΓͨ͠Β·͍ͣ • -JOVY
    Ͱ͸ɺQJWPU@SPPU 
    Λߦ͏ͱɺݱࡏͷ ϓϩηεͷϧʔτσΟϨΫτϦΛมߋͰ͖Δ • ίϯςφ಺෦͔ΒݟΔͱɺͦͷσΟϨΫτϦ͕ ϧʔτσΟϨΫτϦʹݟ͑ΔΑ͏ʹͳΓɺͦΕ ΑΓ্ʹ͸ΞΫηεͰ͖ͳ͍ ϗετ্ͷϑΝΠϧγεςϜ • IPHFGVHBQJZPUFTUUYU • IPHFGVHBFYBNQMFTI • IPHFTBNQMFQZ IPHFGVHB
    ΛϧʔτσΟϨΫτϦʹ มߋͨ͠ϓϩηε͔Β͸͜͏ݟ͑Δ • QJZPUFTUUYU • FYBNQMFTI
15. ˜
    -:
    $PSQPSBUJPO ίϯςφ಺෦͔ΒϑΝΠϧγεςϜΛ֬ೝͯ͠ΈΑ͏ • ίϯςφ಺෦͔ΒϧʔτσΟϨΫτϦΛݟΔͱ ˡ
    ͷΑ͏ͳײ͡ • ಉ͡΋ͷ͕ϗετ্ͷϑΝΠϧγεςϜ͔Β΋ ݟ͑Δɻ͜ͷ
    NFSHFE
    ҎԼΛίϯςφͷ ϧʔτσΟϨΫτϦʹࢦఆ͍ͯ͠Δܗˣ ͜ͷ WBSMJCEPDLFSNFSHFE
    σΟϨΫτϦ͸Ͳ͏΍ͬͯ࡞ΒΕͨͷ͔ʁ
16. ˜
    -:
    $PSQPSBUJPO ίϯςφͷϧʔτϑΝΠϧγεςϜ͕࡞ΒΕΔྲྀΕ ίϯςφͷϑΝΠϧγεςϜؚ͕·Ε͍ͯΔ ˞ ίϯςφΠϝʔδ ίϯςφϥϯλΠϜ͕ల։ͯ͠ϗετͷϑΝΠϧγεςϜʹϚ΢ϯτ WBSMJCEPDLFSPWFSMBZNFSHFE ͜ͷσΟϨΫτϦҎԼΛ ίϯςφͷϧʔτσΟϨΫτϦͱͯ͠ࢦఆ ˞
    ίϯςφΠϝʔδʹϑΝΠϧγεςϜ͕ͦͷ··ؚ·ΕΔΘ͚Ͱ͸ͳ͘ɺ࣮ࡍ͸ίϯςφΠϝʔδʹؚ·ΕΔ ΠϝʔδϨΠϠͱίϯςφϨΠϠΛ PWFSMBZ
    ϑΝΠϧγεςϜͰॏͶ߹Θͤͨ΋ͷ͕Ϛ΢ϯτ͞Ε͍ͯ·͢
17. ˜
    -:
    $PSQPSBUJPO  ίϯςφ͸ී௨ͷϓϩηεͱ͸Ͳ͏ҧ͏ͷʁ ίϯςφ͕ѱ͞Λ͠ͳ͍Α͏ʹɺ৭ʑͳ੍ݶΛ͔͚Δ͜ͱ͕Ͱ͖Δ ଞͷίϯςφ΍ϗετͱ͸ҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭ Ϧιʔεִ͕཭͞Ε͓ͯΓɺίϯςφ಺͔Β ଞͷίϯςφ΍ϗετͷϦιʔε͸ݟ͑ͳ͍
18. ˜
    -:
    $PSQPSBUJPO ίϯςφ͕ѱ͞Λ͢ΔͱࠔΔʂ • ίϯςφ಺ͰɺϗετͷϦιʔεΛރׇͤ͞ΔΑ͏ͳૢ࡞͕ߦΘΕΔͱࠔΔ • ΊͪΌͪ͘ΌେྔͷϝϞϦΛ࢖͏ͱ͔ • ίϯςφ಺ͰɺϗετʹӨڹΛ༩͑ΔΑ͏ͳૢ࡞͕ߦΘΕΔͱࠔΔ • 4IVUEPXO
    ૢ࡞ͱ͔
19. ˜
    -:
    $PSQPSBUJPO ίϯςφ͕ѱ͞Λ͢ΔͱࠔΔʂ • ίϯςφ಺ͰɺϗετͷϦιʔεΛރׇͤ͞ΔΑ͏ͳૢ࡞͕ߦΘΕΔͱࠔΔ • ΊͪΌͪ͘ΌେྔͷϝϞϦΛ࢖͏ͱ͔ • ίϯςφ಺ͰɺϗετʹӨڹΛ༩͑ΔΑ͏ͳૢ࡞͕ߦΘΕΔͱࠔΔ • 4IVUEPXO
    ૢ࡞ͱ͔
20. ˜
    -:
    $PSQPSBUJPO DHSPVQ
    ʹ͍ͭͯ஌Ζ͏ʂ • ϓϩηε͕ར༻ՄೳͳϦιʔεʹ੍͍ͭͯݶΛઃఆͰ͖Δػೳ • $16
    ͷ੍ݶɺϝϞϦ࢖༻ྔͷ੍ݶɺϓϩηε਺ͷ੍ݶͳͲ • ίϯςφ͸ϓϩηεͳͷͰɺDHSPVQ
    Λར༻੍ͯ͠ݶΛ͔͚ΒΕΔ • LT
    ʹ͓͚Δ SFTPVSDFTMJNJUTNFNPSZ ͳͲͰؒ઀తʹར༻ͨ͜͠ͱͷ ͋Δਓ͸ଟͦ͏ • TZTGTDHSPVQ
    ʹଘࡏ͢ΔٖࣅϑΝΠϧγεςϜΛ௨ͯ͡ઃఆ͕؅ཧ͞Εͯ ͍Δ
21. ˜
    -:
    $PSQPSBUJPO DHSPVQ
    ʹΑΔ੍ݶ͸ͲͷΑ͏ʹઃఆͰ͖Δͷʁ [Ubuntu2404-template:/sys/fs/cgroup] $ tree . ├── test │ ├── cgroup.procs │ ├── cgroup.controllers │ ├── cgroup.subtree_control │ ├── cpu.max │ ├── memory.max │ $ cat cgroup.controllers cpuset cpu io memory hugetlb pids rdma misc ͜ͷάϧʔϓͰ੍ݶՄೳͳϦιʔεͷछྨͷҰཡ $ cat cgroup.procs 3200627 3201166 ੍ݶΛద༻ͤ͞Δର৅ͷϓϩηε *%
    ͷཏྻ ͜ͷԼͷαϒσΟϨΫτϦͰ੍ޚΛ༗ޮʹ͢Δ ϦιʔεΛࢦఆ͢ΔͨΊͷϑΝΠϧ ͜͜Ͱ͸ػೳ͍ͯ͠ͳ͍ $ cat cpu.max 50000 100000 $ cat memory.max 536870912 1SPDFTT
    ɺ
    ͓Αͼͦͷࢠϓϩηεશ෦ͷ߹ܭʹ͍ͭͯ $16
    N
    NFNPSZ
    .#
    ੍ݶΛద༻͍ͯ͠Δ
22. ˜
    -:
    $PSQPSBUJPO ྫ͑͹ίϯςφʹ NFNPSZ
    ͷ੍ݶΛ ͔͚͍ͨͱ͖͸Ͳ͏͢Δͷʁ • ϗετ͸ɺTZTGTDHSPVQDHSPVQTVCUSFF@DPOUSPM ʹ l NFNPSZz
    Λॻ͖ࠐΉ • ͦͷޙɺTZTGTDHSPVQ
    ʹ UFTU
    ͳͲద౰ͳ໊લͰσΟϨΫτϦΛ੾Δ • TZTGTDHSPVQUFTUDHSPVQQSPDT ʹίϯςφͷϓϩηε *%
    Λهೖ • TZTGTDHSPVQUFTUNFNPSZNBY ʹ .#
    
    Λॻ͖ࠐΉ • ͜ΕΒͷϑΝΠϧૢ࡞͕׬ྃ͢Ε͹ɺ੍ݶ͸༗ޮͳঢ়ଶʂ • ίϯςφ಺෦͔Βࣗ਎ʹ͔͚ΒΕ͍ͯΔϦιʔε੍ݶΛ஌Δʹ͸ʁ • DHSPVQ
    OBNFTQBDF
    Λར༻͢Δઃఆʹࢦఆ͞Ε͍ͯΕ͹ͦΕΛ෼཭͢Δ͔ɺ ͋Δ͍͸TZTGTDHSPVQUFTU
    ͷ಺༰Λίϯςφ಺ͷTZTGTDHSPVQ
    ʹ CJOE
    NPVOU
    ͢Δඞཁ͕͋Δ
23. ˜
    -:
    $PSQPSBUJPO • ίϯςφ಺ͰɺϗετͷϦιʔεΛ ރׇͤ͞ΔΑ͏ͳૢ࡞͕ߦΘΕΔͱࠔΔ • ΊͪΌͪ͘ΌେྔͷϝϞϦΛ࢖͏ͱ͔ • ίϯςφ಺ͰɺϗετʹӨڹΛ༩͑ΔΑ͏ͳ ૢ࡞͕ߦΘΕΔͱࠔΔ • 4IVUEPXO
    ૢ࡞ͱ͔ DHSPVQ
    Λ࢖͑͹ ੍ݶΛ͔͚ΒΕΔ DBQBCJMJUZ
    ͷ੍ݶ
    TFDDPNQ
    "QQ"SNPS
    4&-JOVY ͳͲͷ ࢓૊Έ͕ଘࡏ͢Δ ຊϓϨθϯͷޙ൒Ͱ͜ͷ͏ͪ TFDDPNQ
    ʹ GPDVT
    ͢Δ༧ఆ ίϯςφ͕ѱ͞Λ͢ΔͱࠔΔʂ
24. ˜
    -:
    $PSQPSBUJPO ͜͜·Ͱͷ·ͱΊ • ίϯςφ͸ϓϩηε͕ͩɺී௨ͷϓϩηεͱ͸Ұຯҧ͏ • ϗετͱִ཭͞Ε࣮ͨߦ؀ڥΛ࣋ͭ
    -JOVY
    ͷ OBNFTQBDF
    ػೳΛ༻͍࣮ͯݱ • ϗετͱҟͳΔϧʔτϑΝΠϧγεςϜΛ࣋ͭ
    QJWPU@SPPU Λ͢Ε͹ ίϯςφ͔Βݟ͑ΔϧʔτσΟςΫτϦΛม͑ΒΕΔ • Ϧιʔεͷ࢖͍͗͢Λ༧๷Ͱ͖Δ
    DHSPVQ
    ͷػೳΛ༻͍࣮ͯݱ • ֤छηΩϡϦςΟͷద༻
    ίϯςφʹ࣮ߦ͞Εͨ͘ͳ͍ૢ࡞Λ੍ݶͰ͖Δ
25. ˜
    -:
    $PSQPSBUJPO ௿ϨΠϠίϯςφϥϯλΠϜͬͯ Կʁ 
26. ˜
    -:
    $PSQPSBUJPO  ௿ϨΠϠίϯςφϥϯλΠϜͬͯԿʁ ߴϨΠϠϥϯλΠϜ (CRI ϥϯλΠϜ) ௿ϨΠϠϥϯλΠϜ (OCI ϥϯλΠϜ) ࢦࣔ ίϯςφͷ DSFBUF
    TUBSU
    LJMM
    EFMFUF
    TUBUF ίϯςφɾΠϝʔδɾωοτϫʔΫ౳ͷ શൠతͳ؅ཧΛߦ͏ɻEPDLFS
    DPOUBJOFSE ͳͲ Ϣʔβɾkubelet ͳͲʹΑΔࢦࣔ ಙӬߤฏ, ΠϥετͰΘ͔Δ Docker ͱ Kubernetes, ٕज़ධ࿦ࣾ (2020), p97 ͷਤΛࢀߟʹ࡞੒ ϗετ͔Βִ཭͞Ε࣮ͨߦ؀ڥΛ ίϯςφͱͯ͠࡞Γग़͠ɺૢ࡞Մೳʹ͢Δ SVOD
    ZPVLJ
    H7JTPS ͳͲ
27. ˜
    -:
    $PSQPSBUJPO  ௿ϨΠϠίϯςφϥϯλΠϜͬͯԿʁ ߴϨΠϠϥϯλΠϜ (CRI ϥϯλΠϜ) ௿ϨΠϠϥϯλΠϜ (OCI ϥϯλΠϜ) ࢦࣔ ίϯςφͷ DSFBUF
    TUBSU
    LJMM
    EFMFUF
    TUBUF ίϯςφɾΠϝʔδɾωοτϫʔΫ౳ͷ શൠతͳ؅ཧΛߦ͏ɻEPDLFS
    DPOUBJOFSE ͳͲ Ϣʔβɾkubelet ͳͲʹΑΔࢦࣔ ಙӬߤฏ, ΠϥετͰΘ͔Δ Docker ͱ Kubernetes, ٕज़ධ࿦ࣾ (2020), p97 ͷਤΛࢀߟʹ࡞੒ ϗετ͔Βִ཭͞Ε࣮ͨߦ؀ڥΛ ίϯςφͱͯ͠࡞Γग़͠ɺૢ࡞Մೳʹ͢Δ SVOD
    ZPVLJ
    H7JTPS ͳͲ
28. ˜
    -:
    $PSQPSBUJPO ௿ϨΠϠϥϯλΠϜ͸ͲͷΑ͏ͳࢦࣔΛड͚Δʁ • ߴϨΠϠϥϯλΠϜ͸ɺ௿ϨΠϠϥϯλΠϜͷόΠφϦΛ࣮ߦ͢Δ͜ͱʹΑΓ ίϯςφૢ࡞ͷࢦࣔΛग़͢ • ͜ͷ JOUFSGBDF
    ࢓༷͸ɺ0QFO
    $POUBJOFS
    *OJUJBUJWF
    ʹΑΓ 0QFO
    $POUBJOFS
    *OUFSGBDF
    0$*
    3VOUJNF
    4QFDJGJDBUJPO
    ͱͯ͠ఆΊΒΕ͍ͯΔ • DSFBUF
    TUBSU
    LJMM
    EFMFUF
    TUBUF
    ͷ
    
    छྨͷૢ࡞ͱͦͷ ೖग़ྗ࢓༷Λఆٛ • ௿ϨΠϠϥϯλΠϜ͸͜ͷ࢓༷ʹ४ڌͨ͠ JOUFSGBDF
    Λఏڙ͢Δඞཁ͕͋Δͷ Ͱɺ0$*
    3VOUJNF
    ͱ΋ݺ͹ΕΔ IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD 
29. ˜
    -:
    $PSQPSBUJPO ௿ϨΠϠϥϯλΠϜ͸ͲͷΑ͏ͳࢦࣔΛड͚Δʁ • ίϯςφ࡞੒࣌ͷ࣮ߦํ๏Λৄ͘͠ݟͯΈΑ͏ $ sudo runc create --bundle test-bundle test-container ௿ϨΠϠϥϯλΠϜͷ όΠφϦ ࣮ߦ͍ͨ͠ૢ࡞ ࡞Γ͍ͨίϯςφ໊ σΟϨΫτϦΛ ࢦఆ • #VOEMF
    ʹ͸ɺҎԼͷ΋ͷؚ͕·ΕΔ • ίϯςφͷϧʔτϑΝΠϧγεςϜ • ίϯςφͷઃఆ͕ೖͬͨ
    DPOGJHKTPO ϑΝΠϧ
30. ˜
    -:
    $PSQPSBUJPO ௿ϨΠϠϥϯλΠϜ͸ͲͷΑ͏ͳࢦࣔΛड͚Δʁ • ίϯςφ࡞੒࣌ͷ࣮ߦํ๏Λৄ͘͠ݟͯΈΑ͏ $ sudo runc create --bundle test-bundle test-container ௿ϨΠϠϥϯλΠϜͷ όΠφϦ ࣮ߦ͍ͨ͠ૢ࡞ ࡞Γ͍ͨίϯςφ໊ σΟϨΫτϦΛ ࢦఆ • #VOEMF
    ʹ͸ɺҎԼͷ΋ͷؚ͕·ΕΔ • ίϯςφͷϧʔτϑΝΠϧγεςϜ • ίϯςφͷઃఆ͕ೖͬͨ
    DPOGJHKTPO ϑΝΠϧ
31. ˜
    -:
    $PSQPSBUJPO ௿ϨΠϠϥϯλΠϜ͸ͲͷΑ͏ͳࢦࣔΛड͚Δʁ • ίϯςφ࡞੒࣌ͷ࣮ߦํ๏Λৄ͘͠ݟͯΈΑ͏ $ sudo runc create --bundle test-bundle test-container ௿ϨΠϠϥϯλΠϜͷ όΠφϦ ࣮ߦ͍ͨ͠ૢ࡞ ࡞Γ͍ͨίϯςφ໊ σΟϨΫτϦΛ ࢦఆ • #VOEMF
    ʹ͸ɺҎԼͷ΋ͷؚ͕·ΕΔ • ίϯςφͷϧʔτϑΝΠϧγεςϜ • ίϯςφͷઃఆ͕ೖͬͨ
    DPOGJHKTPO ϑΝΠϧ
32. ˜
    -:
    $PSQPSBUJPO DPOGJHKTPO ͷத਎ͬͯͲΜͳͷʁ IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFDCMPCNBJOTDIFNBUFTUDPOGJHHPPETQFDFYBNQMFKTPO • ίϯςφͷઃఆશൠؚ͕·ΕΔɻ͜ͷ࢓༷΋
    0$*
    3VOUJNF
    4QFD
    ʹఆٛ͞Ε͍ͯΔ Ͳͷ
    OBNFTQBDF
    Λ ੾Δ͔Λࢦఆ ϧʔτϑΝΠϧγεςϜ͕ ଘࡏ͢Δ QBUI ىಈ࣌ʹͲΜͳίϚϯυΛ ࣮ߦ͢Δ͔
33. ˜
    -:
    $PSQPSBUJPO DSFBUF
    ͨ͠ޙʹ
    TUBSU
    ͕ඞཁʂ $ sudo runc start test-container ௿ϨΠϠϥϯλΠϜͷ όΠφϦ ࣮ߦ͍ͨ͠ૢ࡞ ىಈ͍ͨ͠ίϯςφ໊ • ͨͩ
    DSFBUF
    ͚ͨͩ͠Ͱ͸ɺίϯςφʹͳΔϓϩηεͷ४උ͕Ͱ͖͚ͨͩͰɺ ·ͩίϯςφ͸࣮ߦ͞Ε͍ͯͳ͍ • ίϯςφىಈ࣌ʹ࣮ߦ͢ΔίϚϯυΛͦͷϓϩηε಺Ͱ࣮ߦ͢Δ͜ͱͰɺॳΊͯ ίϯςφͱͯ͠ىಈ͢Δ • ͦΕΛࢦࣔ͢Δͷ͕ TUBSU
    ίϚϯυ
34. ˜
    -:
    $PSQPSBUJPO ίϯςφ͕ DSFBUF
    
    TUBSU
    ͞ΕΔྲྀΕ 
    ϢʔβɾLVCFMFU ͳͲʹΑΔࢦࣔ 
    ίϯςφΠϝʔδΛల։ͯ͠ ϧʔτϑΝΠϧγεςϜͷ४උɾ DPOGJHKTPO ͷ࡞੒ 
    CVOEMF
    Λࢦఆͯ͠ SVOD DSFBUF
    Λ࣮ߦ 
    DPOGJHKTPO ʹैͬͯ OBNFTQBDF
    ෼཭΍ QJWPU@SPPU ͳͲΛ ߦ͍ίϯςφϓϩηεΛ࡞੒ 
    ωοτϫʔΫͷઃఆͳͲΛ ࣮ࢪ 
    SVOD TUBSU
    Λ࣮ߦ  ࡞੒͞Ε͍ͯͨίϯςφϓϩηεͰ ىಈ࣌ͷίϚϯυΛ࣮ߦ 
    ίϯςφ্ཱ͕͕ͪΔ ߴϨΠϠϥϯλΠϜ $3*
    ϥϯλΠϜ ௿ϨΠϠϥϯλΠϜ 0$*
    ϥϯλΠϜ DSFBUF
    ίϚϯυ࣮ߦ͕੒ޭ
35. ˜
    -:
    $PSQPSBUJPO ,PUMJO/BUJWF
    ͷ֓ཁͱબఆཧ༝ 
36. ˜
    -:
    $PSQPSBUJPO  ,PUMJO
    .VMUJQMBUGPSN IUUQTXXXKFUCSBJOTDPNKBKQLPUMJONVMUJQMBUGPSN
37. ˜
    -:
    $PSQPSBUJPO  IUUQTLPUMJOMBOHPSHEPDTOBUJWFPWFSWJFXIUNM ,PUMJO
    ίʔυΛωΠςΟϒόΠφϦʹͯ͠ɺ 7.
    +7.
    ΍ "35
    ͳ͠Ͱಈ͘Α͏ʹ͢ΔςΫϊϩδ
38. ˜
    -:
    $PSQPSBUJPO  ࣮͸γεςϜϓϩάϥϛϯάʹ΋࢖͑ΔͷͰ͸ʁ IUUQTLPUMJOMBOHPSHEPDTOBUJWFPWFSWJFXIUNM $
    ͱͷ
    *OUFSPQFSBCJMJUZ
    ૬ޓӡ༻ੑ
    ͕͋Γɺ ,PUMJO
    ͔Β $
    ͷؔ਺Λݺͼग़ͤΔ
39. ˜
    -:
    $PSQPSBUJPO ,PUMJO/BUJWF
    ͸Ͳ͏ಈ͍͍ͯΔͷ͔ .kt Frontend Kotlin IR Backend LLVM IR LLVM .kexe • --7.
    ΛόοΫΤϯυͱͯ͠ར༻͠ɺωΠςΟϒόΠφϦ ͭ·Γ +7.
    ͕ͳͯ͘΋ಈ͘ʂ
    Λੜ੒͢Δ
40. ˜
    -:
    $PSQPSBUJPO ,PUMJO/BUJWF
    ͸Ͳ͏ಈ͍͍ͯΔͷ͔ .kt Frontend Kotlin IR Backend LLVM IR LLVM .kexe • --7.
    ΛόοΫΤϯυͱͯ͠ར༻͠ɺωΠςΟϒόΠφϦ ͭ·Γ +7.
    ͕ͳͯ͘΋ಈ͘ʂ
    Λੜ੒͢Δ • ϥϯλΠϜͷੑ࣭ • όΠφϦ͕࣮ߦ͞ΕΔͱɺϝΠϯεϨου͚ͩͰͳ͘ ($
    ༻εϨου΋ ্ཱ͕ͪΓɺϚϧνεϨουͰಈ࡞͢Δ • (P
    ͱಉ͡Α͏ͳ࢓૊Έ
41. ˜
    -:
    $PSQPSBUJPO  $
    *OUFSPQFSBCJMJUZ
    ͷ༷ࢠ import kotlinx.cinterop.ExperimentalForeignApi import platform.linux.__NR_getpid import platform.posix.getpid import platform.posix.syscall @OptIn(ExperimentalForeignApi::class) fun basicExample() { // Using POSIX getpid() println(getpid()) // Using syscall to invoke getpid() val pid = syscall(__NR_getpid.toLong()) println("pid = $pid") } libc ͷؔ਺͕ී௨ʹݺ΂Δ syscall ௚ݺͼ΋Ͱ͖Δ IUUQTHJUIVCDPNUFSOCVTUZLPUMJOOBUJWFQMBZHSPVOECMPCNBJOTSDOBUJWF.BJOLPUMJOFYBNQMFT$*OUFSPQ&YBNQMFLU
42. ˜
    -:
    $PSQPSBUJPO  NFN4DPQFE
    ͷར༻ ͜͜Ͱ $
    ͷؔ਺ʹ ϙΠϯλΛ౉͍ͯ͠Δ @OptIn(ExperimentalForeignApi::class) fun memScopedFileWriteExample() { memScoped { val path = /tmp/memscoped_example.txt val content = Hello from Kotlin/Native! val fd = open(path, O_WRONLY or O_CREAT or O_TRUNC, (S_IRUSR or S_IWUSR).toUInt()) if (fd < 0) { perror(open) return } val cContent = content.cstr.getPointer(this) val written = write(fd, cContent, content.length.toULong()) if (written < 0) { // ޙུ ྫ͑͹ ,PUMJO
    ͷ 4USJOH
    Λ $
    ʹ͸ ͦͷ··౉ͤͳ͍ $
    ͱ΍ΓऔΓ͢ΔࡍʹҰ࣌తͳωΠςΟϒ ϝϞϦྖҬΛ֬อ͍ͨ͠ͱ͖ʹ࢖͏ ͜ͷϒϩοΫΛൈ͚ͨ࣌఺Ͱɺ֬อͨ͠ ϝϞϦ͸ղ์͞ΕΔ
43. ˜
    -:
    $PSQPSBUJPO  MJCD
    ʹͳ͍΋ͷ΋ݺ΂Δ ,PUMJO
    ίʔυ಺͔Β ͦͷϥΠϒϥϦͷؔ਺Λ ݺͼग़ͤΔΑ͏ʹͳΔ headers = seccomp.h headerFilter = seccomp.h package = libseccomp compilerOpts = -I/usr/include -I/usr/include/x86_64-linux- gnu linkerOpts = -L/usr/lib/x86_64-linux-gnu -lseccomp libseccomp.def import libseccomp.* // தུ val ctx = seccomp_init(defaultAction) ?: run { IUUQTHJUIVCDPNUFSOCVTUZLPOUBJOFSSVOUJNFCMPCNBJOTSDOBUJWF.BJOLPUMJOTFDDPNQ4FDDPNQLU ར༻͍ͨ͠ $
    ϥΠϒϥϦͷ )FBEFS
    ౳Λ EFG
    ϑΝΠϧʹهࡌ͢Δ
44. ˜
    -:
    $PSQPSBUJPO ࣗ࡞ϥϯλΠϜͷ࣮૷঺հ 
45. ˜
    -:
    $PSQPSBUJPO ࣗ࡞ίϯςφϥϯλΠϜͷ঺հ • ,PUMJO/BUJWF
    ੡ࣗ࡞ίϯςφϥϯλΠϜ LPOUBJOFSSVOUJNF • IUUQTHJUIVCDPNUFSOCVTUZLPOUBJOFSSVOUJNF • Y@
    ͷ -JOVY
    Ͱ͔͠ಈ͖·ͤΜ • ݱ࣌఺Ͱɺ0$*
    3VOUJNF
    4QFD
    ׬શ४ڌͰ͸͋Γ·ͤΜ • ஫ҙ • DHSPVQ
    OBNFTQBDF
    UJNF
    OBNFTQBDF
    ະରԠ • 3PPUMFTT
    ࣮ߦͰ͖·ͤΜ TZTUFNE ࿈ܞͳ͠ • ίϯςφ΁ͷϑΝΠϧ 
    σΟϨΫτϦϚ΢ϯτະରԠ • )PPLT
    ະରԠ • DHSPVQ
    DQV
    NFNPSZ
    ͷ੍ݶͷΈ 
    DHSPVQ
    QBUI
    ͕֊૚తʹͳΔͱ DHSPVQ
    ͕ਖ਼͘͠ػೳ͠ͳ͍ • "QQ"SNPS
    4&-JOVY ະରԠ
46. ˜
    -:
    $PSQPSBUJPO ίϯςφͷ DSFBUF
    TUBSU
    LJMM
    EFMFUF
    TUBUF
    Λࢼ͍ͯ͠Δ༷ࢠ
47. ˜
    -:
    $PSQPSBUJPO ߴϨΠϠίϯςφϥϯλΠϜͱ૊Έ߹ΘͤͨσϞ $POUBJOSFE ͸σϑΥϧτͰ͸௿ϨΠϠϥϯλΠϜͱͯ͠
    SVOD Λར༻͢ΔͷͰɺ ࣗ࡞ίϯςφϥϯλΠϜΛར༻ͤ͞ΔͨΊ SVOD CJOBSZ
    QBUI
    ͷࢦఆ͕ඞཁ DUS
    ͸ DPOUBJOFSE Λ ݺͼग़͢༻ͷ $-* ࣗ࡞ίϯςφϥϯλΠϜͷ όΠφϦΛࢦఆ ͏·͍͚͘͹ BMQJOF
    ͷ ৘ใ͕ग़ྗ͞ΕΔ͸ͣ
48. ˜
    -:
    $PSQPSBUJPO DPOUBJOFSE ܦ༝Ͱ࣮ߦͯ͠ΈΔσϞ
49. ˜
    -:
    $PSQPSBUJPO ֤छ OBNFTQBDF
    ෼཭Λ Ͳ͏࣮ݱ͢Δ͔ 
50. ˜
    -:
    $PSQPSBUJPO /BNFTQBDF
    ෼཭ͬͯͲ͏΍Δͷʁ VOTIBSF VTFS
    NPVOU
    QJE JQD rVUT  ͜Μͳײ͡Ͱ΍Ε͹্ख͍͖ͦ͘͏ʂ
51. ˜
    -:
    $PSQPSBUJPO /BNFTQBDF
    ෼཭ͬͯͲ͏΍Δͷʁ VOTIBSF VTFS
    NPVOU
    QJE JQD rVUT 
    ͜Μͳײ͡Ͱ΍Ε͹্ख͍͖ͦ͘͏ʂ ίτ͸ͦ͏୯७Ͱ͸ͳ͍ʂ
52. ˜
    -:
    $PSQPSBUJPO • લఏ
    ઌड़ͷ௨Γɺ,PUMJO/BUJWF
    ͸ ($
    εϨου΋ؚΊͨϚϧνεϨουͰىಈ͢Δ • ໊લۭؒ෼཭ͷͨΊ
    VOTIBSF 
    Λୟ͘ͱͲ͏ͳΔʜʜʁ • ྫ͑͹ VTFS
    OBNFTQBDF
    Λ෼཭͠Α͏ͱ͢ΔͱΤϥʔʹͳΔ  ,PUMJO/BUJWF
    ͷϚϧνεϨουੑʹΑΔ໰୊  ී௨ʹ͸ VOTIBSF 
    ͕Ͱ͖ͳ͍ʂ IUUQTNBOPSHMJOVYNBOQBHFTNBOVOTIBSFIUNM
53. ˜
    -:
    $PSQPSBUJPO • લఏ
    ઌड़ͷ௨Γɺ,PUMJO/BUJWF
    ͸ ($
    εϨου΋ؚΊͨϚϧνεϨουͰىಈ͢Δ • ໊લۭؒ෼཭ͷͨΊ
    VOTIBSF 
    Λୟ͘ͱͲ͏ͳΔʜʜʁ  ,PUMJO/BUJWF
    ͷϚϧνεϨουੑʹΑΔ໰୊  VOTIBSF 
    ͰΤϥʔʹͳΔέʔε͕͋Δʂ IUUQTHJUIVCDPNUFSOCVTUZLPUMJOOBUJWFQMBZHSPVOE • ΤϥʔʹͳΒͳ͍·Ͱ΋ɺݺͼग़ͨ͠ εϨουͷΈ͕৽͍͠
    OBNFTQBDF
    ʹೖΓɺ ଞͷεϨου͸ݩͷ OBNFTQBDF
    ʹ࢒ͬͨ ··ͱ͍͏͓͔͠ͳঢ়ଶʹͳΔέʔε͕͋Δ • ӈਤ
    OFUXPSL
    OBNFTQBDF
    ෼཭ޙʹ ֤εϨουͷ OBNFTQBDF
    Λදࣔͨ͠΋ͷ ͜ͷεϨου͚ͩ ҧ͏ OBNFTQBDF
    ʹ Ҡಈ͍ͯ͠Δ
54. ˜
    -:
    $PSQPSBUJPO • લఏ
    QJE OBNFTQBDF
    ͸ɺ୯ʹ VOTIBSF ͚ͨͩ͠Ͱ͸ OBNFTQBDF
    Ҡಈ͸ൃੜͤͣɺͦͷ ޙʹ GPSL
    ͨ͠ޙͷϓϩηε͕৽͍͠
    OBNFTQBDF
    ʹೖΔɻͭ·Γ
    GPSL
    ͕ඞਢ • ,PUMJO/BUJWF
    ্Ͱ GPSL
    
    ͦͷλΠϛϯάͰӡѱ͘ ($
    ͕ൃੜ͢ΔͱͲ͏ͳΔʜʜʁ • GPSL
    ࣌ͷڍಈ • ਌ϓϩηεͷϝϞϦ͸શͯίϐʔ • ਌ϓϩηε͕ϚϧνεϨουͩͬͨ৔߹͸ɺݺͼग़͠ݩεϨουͷΈ͕ίϐʔ • ͭ·Γɺࢠϓϩηε͔Β͢Δͱɺ($
    ͷ࣌ʹऔΒΕͨϩοΫঢ়ଶ͸ίϐʔ͞ΕΔ͕ɺ ͦͷϩοΫΛղআ͢Δ͸ͣͷ ($
    εϨου͸΋͸΍ଘࡏ͠ͳ͍ঢ়ଶʹͳͬͯ͠·͏ • ݁ՌతʹɺӬٱʹϩοΫΛղআͰ͖ͣʹ IBOH
    ͯ͠͠·͏  ,PUMJO/BUJWF
    ͷϚϧνεϨουੑʹΑΔ໰୊  GPSL
    ͢Δͱ IBOH
    ͯ͠͠·͏Մೳੑ͕͋Δʂ IUUQTHJUIVCDPNUFSOCVTUZLPUMJOOBUJWFQMBZHSPVOE
55. ˜
    -:
    $PSQPSBUJPO • OBNFTQBDF
    ෼཭͓Αͼ GPSL
    ෦෼͸ ,PUMJO/BUJWF
    Ͱ΍ΔͷΛܿ͘ఘΊΑ͏ʂ • ,PUMJO
    ϥϯλΠϜ͕ىಈ͢Δલʹɺ$
    ͷϓϩάϥϜ͕ىಈ͢ΔΑ͏ʹઃఆ͓ͯ͘͠ • @@BUUSJCVUF@@ DPOTUSVDUPS Λ෇༩ͨ͠ $
    ͷؔ਺͸ɺ FMG
    όΠφϦͷ JOJU@BSSBZ ͱ͍͏ηΫγϣϯʹ഑ஔ͞ΕɺϓϩάϥϜͷ ϝΠϯؔ਺Λݺͼग़͢લʹ࣮ߦ͞ΕΔ • ͭ·ΓɺγϯάϧεϨουঢ়ଶͰ࣮ߦ͢Δ͜ͱ͕Մೳ • ͕ͩɺDPOGJHKTPO ͷ QBSTF
    ͳͲ
    JOJUJBM
    ͳॲཧΛ $
    Ͱॻ͘ͷ͸ઈରʹආ͚͍ͨ • ·ͣ͸ී௨ʹ ,PUMJO
    ϥϯλΠϜΛىಈͨ͠ͷͪɺࣗ෼ࣗ਎Λࢦఆͯ͠࠶࣮ߦͤ͞Δ ͜ͱʹΑΓ $
    ͷϓϩάϥϜ͕ಈ͘Α͏ʹ޻෉ͨ͠  ,PUMJO/BUJWF
    ͷϚϧνεϨουੑʹΑΔ໰୊ 5SJDLZ
    ͳղܾࡦ
56. ˜
    -:
    $PSQPSBUJPO • ࣮͸
    (P
    Ͱॻ͔Εͨ SVOD Ͱ΋ಉ͡໰୊ʹۤ͠ΜͰ͍Δ • (P
    ΋σϑΥϧτͰϚϧνεϨουͰಈ࡞͢ΔͨΊ • ಉ༷ʹҰ෦Λ $
    Ͱ࣮૷͢Δ͜ͱʹΑΓϚϧνεϨου໰୊Λճආ͍ͯ͠Δ  ,PUMJO/BUJWF
    ͷϚϧνεϨουੑʹΑΔ໰୊ ࣮͸ SVOD Ͱ΋ಉ͡໰୊ʹۤ͠ΜͰ͍Δ IUUQTHJUIVCDPNPQFODPOUBJOFSTSVODCMPCGDGGEFFEGMJCDPOUBJOFSOTFOUFSOTFYFDD
57. ˜
    -:
    $PSQPSBUJPO $SFBUF
    ͷྲྀΕ ུ֓൛ɺ్த·Ͱ .BJO
    1SPDFTT 4UBHF
     4UBHF
     $POGJH
    ͷύʔεͳͲ DMPOF
    ͯ͠ ࣗ෼ࣗ਎Λ࠶࣮ߦ ֤छ
    OBNFTQBDF
    ͷ෼཭ QJE OBNFTQBDF
    ෼཭ޙ ΋͏Ұ౓ DMPOF ϗετଆͰ ࣮ߦ͢΂͖͋Ε͜Ε ίϯςφϓϩηεଆͰ ࣮ߦ͢΂͖͋Ε͜Ε 4UBSU
    γάφϧ଴ͪ Stage1 ͸ C Ͱॻ͔Ε͍ͯΔ Parse ݁Ռ͸؀ڥม਺ʹ ॻ͖ࠐΜͰ͓͘
58. ˜
    -:
    $PSQPSBUJPO $SFBUF
    ͷྲྀΕ ུ֓൛ɺ్த·Ͱ .BJO
    1SPDFTT 4UBHF
     4UBHF
     $POGJH
    ͷύʔεͳͲ DMPOF
    ͯ͠ ࣗ෼ࣗ਎Λ࠶࣮ߦ ֤छ
    OBNFTQBDF
    ͷ෼཭ QJE OBNFTQBDF
    ෼཭ޙ ΋͏Ұ౓ DMPOF ϗετଆͰ ࣮ߦ͢΂͖͋Ε͜Ε ίϯςφϓϩηεଆͰ ࣮ߦ͢΂͖͋Ε͜Ε 4UBSU
    γάφϧ଴ͪ Stage1 ͸ C Ͱॻ͔Ε͍ͯΔ ͜ΕΒʹؔΘͬͯ͘Δ User Namespace ʹ͍ͭͯ Ұൠ࿦͔Βਂ۷Γ͍͖ͯ͠·͢ Parse ݁Ռ͸؀ڥม਺ʹ ॻ͖ࠐΜͰ͓͘
59. ˜
    -:
    $PSQPSBUJPO • ྫ͑͹ී௨ʹ
    OHJOY
    Λ্ཱͪ͛ͨ࣌ɺίϯςφ಺ͷϓϩηεΛ࣮ߦ͍ͯ͠ΔϢʔβ͸୭ʁ  ίϯςφΛ࣮ߦ͍ͯ͠ΔϢʔβͬͯ୭ʜʜʁ 6TFS
    /BNFTQBDF
    ͸ͳͥඞཁ͔ $ docker run -d --name nginx-test nginx $ docker top nginx-test UID PID CMD root 3151279 nginx: master process nginx -g daemon off; • ϗετଆ͔Βݟͯ SPPU
    Ͱ࣮ߦ͞Εͯ͠·͍ͬͯΔʂ • OBNFTQBDF
    ִ཭͕͋ΔͷͰ௨ৗ͸໰୊ʹͳΒͳ͍͕ɺ੬ऑੑΛಥ͍ͯίϯςφΤεέʔϓ ͞Εͨ৔߹ɺͦͷϓϩηε͸ϗετͷϦιʔεΛ SPPU
    ݖݶͰૢ࡞Ͱ͖ͯ͠·͏ݖݶΛ ࣋ͭ͜ͱʹͳΓɺةͳ͍ʂ
60. ˜
    -:
    $PSQPSBUJPO • ίϯςφͷϓϩηεΛ SPPU
    Ͱ͸ͳ͘ɺҰൠϢʔβͷ
    JE
    Λࢦఆ࣮ͯ͠ߦͤ͞Ε͹͍͍ͷͰ͸ʁ  ͡Ό͋ҰൠϢʔβΛར༻ͨ͠Β͍͍ͷͰ͸ʁ • 3PPU
    ࣮ߦ͕લఏͷΠϝʔδͳͷͰɺࠓ౓͸ίϯςφ಺Ͱݖݶ͕଍Γͣɺ্ཱͪ͛ʹࣦഊ 😭 • ͜Μͳ࢓૊Έ͕͋ͬͨΒ͍͍ͷʹʜʜ • ϗετଆ͔ΒݟΔͱɺͦͷϓϩηεͷ VJE ͸ҰൠϢʔβ ϗετଆͰͷಛݖͳ͠ • ίϯςφ಺Ͱ͸ɺͦͷϓϩηε͸ SPPU
    ͱͯ͠ৼΔ෣͑Δ
    ίϯςφ಺Ͱͷಛݖ͋Γ $ docker run --rm -u 10000 nginx # தུ nginx: [emerg] mkdir() "/var/cache/nginx/client_temp" failed (13: Permission denied) 6TFS
    /BNFTQBDF
    ͸ͳͥඞཁ͔
61. ˜
    -:
    $PSQPSBUJPO • ϓϩηε͕Ϣʔβ͓Αͼάϧʔϓ *%
    ͷಠࣗͷϏϡʔΛ࣋ͯΔΑ͏ʹ͢Δ࢓૊Έ • ྫ͑͹ɺίϯςφ಺ͷ
    SPPU
    Ϣʔβ
    *%
    
    Λɺϗετ্ͷඇ
    SPPU
    Ϣʔβ
    ྫ͑͹ *%
    
    ʹ NBQQJOH ͢Δͱ • ίϯςφ͔ΒݟΔͱ VJE ɺϗετ͔Βݟ͑Δͱ VJE  • ͭ·Γɺίϯςφ಺Ͱ͸
    SPPU
    ͱͯ͠ৼΔ෣͍ɺ͕ͩϗετ͔ΒݟΔͱҰൠϢʔβɺ ͱ͍͏ঢ়ଶΛ࣮ݱͰ͖Δʂ 6TFS
    /BNFTQBDF
    Λಋೖͯ͠ΈΔ
62. ˜
    -:
    $PSQPSBUJPO • NBQQJOH
    ઃఆ͸ QSPDQJEVJE@NBQ ʹଘࡏ͠ɺϗετͷ
    SPPU
    ݖݶͰฤूͰ͖Δ ྫ
    ίϯςφ্ͷ 
    r 
    Λ ϗετ্ͷ 
    r 
    ʹ NBQQJOH
    ͢Δઃఆ  6TFS
    /BNFTQBDF
    Λಋೖͯ͠ΈΔ Ͳ͏΍ͬͯઃఆ͢Δͷʁ 0 100000 65536 ࢠϓϩηε͔Βݟͨ NBQQJOH
    ͢Δ࠷খ *% ϗετ্Ͱ NBQQJOH ͞ΕΔ΂͖࠷খ *% NBQQJOH ͞ΕΔ *%
    ͷ਺ • ৽ن 6TFS
    /BNFTQBDF
    Λ੾ͬͨͷͪɺ্هϑΝΠϧΛॻ͖ࠐΉ͜ͱʹΑΓ NBQQJOH
    ͕ ઃఆ͞ΕΔ ͡Ό͋ɺVTFS
    OBNFTQBDF
    ͷ VOTIBSF Λͨ͋͠ͱ ϑΝΠϧॻ͖ࠐΈΛ͢Ε͹͍͍ΜͩͶʂ
63. ˜
    -:
    $PSQPSBUJPO • ৽͍͠
    6TFS
    /BNFTQBDF
    ʹೖͬͨϓϩηε͕ࣗ਎ͷ VJEHJE
    NBQQJOH
    Λ ॻ͖ࠐΉࣄ͸Ͱ͖ͳ͍ɻͦͷͨΊϗετʹॻ͍ͯ΋Β͏ඞཁ͕͋Δ • ͕ɺTUBHF
    ϓϩηε͕ VTFS
    OBNFTQBDF
    ͷ෼཭Λߦ͏ΑΓલͷλΠϛϯάͰ ϗετ͕ NBQQJOH
    Λهೖ͠Α͏ͱ͢ΔͱɺΤϥʔʹͳΔ • ҎԼͷॱংΛकΒͤΔʹ͸ .BJO
    ͱ 4UBHF
    
    ͰڠௐΛ͢Δ͔͠ͳ͍  .BJO
    DMPOF
    ͯ͠ 4UBHF
    
    ϓϩηεΛ࡞੒  4UBHF
    
    VTFS
    OBNFTQBDF
    ෼཭  .BJO
    
    VJEHJE
    NBQQJOH
    ॻ͖ࠐΈ  6TFS
    /BNFTQBDF
    Λಋೖͯ͠ΈΔ ͍ͭ୭͕ͦͷ NBQQJOH
    Λॻ͖ࠐΉͷ͔ʁ
64. ˜
    -:
    $PSQPSBUJPO $SFBUF
    ͷྲྀΕ ུ֓൛ɺ్த·Ͱ .BJO
    1SPDFTT 4UBHF
     4UBHF
     $POGJH
    ͷύʔεͳͲ DMPOF
    ͯ͠ ࣗ෼ࣗ਎Λ࠶࣮ߦ ͦͷଞ OBNFTQBDF
    ͷ෼཭ QJE OBNFTQBDF
    ෼཭ޙ ΋͏Ұ౓ DMPOF VJEHJE
    NBQQJOH
    Λ ॻ͖ࠐΉ ίϯςφϓϩηεଆͰ ࣮ߦ͢΂͖͋Ε͜Ε 4UBSU
    γάφϧ଴ͪ 6TFS
    6TFS
    OBNFTQBDF
    ͷ෼཭ VJEHJE
    NBQQJOH
    SFRVFTU
    Λૹ৴ NBQQJOH
    ׬ྃ௨஌ DHSPVQ
    ͷઃఆͳͲ
65. ˜
    -:
    $PSQPSBUJPO  OBNFTQBDF
    ෼཭Λ֬ೝͯ͠ΈΑ͏ ϗετଆ͔ΒݟΔͱɺVJE 
    1*%
    ͸ 
    ʹͳ͍ͬͯΔ ίϯςφ಺Ͱ QT BVY VJENBQ lz
    Λઃఆ͠ίϯςφΛىಈ ίϯςφ಺͔ΒΈΔͱ 64&3
    ͸ SPPU
    1*%
    ͸  VJE QJE
66. ˜
    -:
    $PSQPSBUJPO /BNFTQBDF
    ෼཭ޙͷྲྀΕ 
67. ˜
    -:
    $PSQPSBUJPO $SFBUF
    4UBSU
    ͷྲྀΕ ్த͔Β࠷ޙ·Ͱ .BJO
    1SPDFTT 4UBHF
     4UBHF
     ͦͷଞ OBNFTQBDF
    ͷ෼཭ QJE OBNFTQBDF
    ෼཭ޙ ΋͏Ұ౓ DMPOF ίϯςφϓϩηεଆͰ ࣮ߦ͢΂͖͋Ε͜Ε QJWPU@SPPU
    ݖݶͷ์غͳͲ 4UBSU
    γάφϧ଴ͪ 4UBHF
    
    QJE Λ௨஌ TFDDPNQ/PUJGZ3FRVFTU TFDDPNQ/PUJGZ%POF *OJU
    3FBEZ ίϯςφͷঢ়ଶΛ KTPO ʹॻ͖ग़͢ FYFDWF 4UBSU
    γάφϧ Ҏ߱͸ ίϯςφͷΞϓϦέʔγϣϯʹ ஔ͖׵ΘΔ
68. ˜
    -:
    $PSQPSBUJPO  ίϯςφϓϩηεଆͰ΍Δ΂͖͜ͱ͸ʁ LPOUBJOFSSVOUJNF
    Ͱ࣮૷ࡁΈͷॲཧͷΈ࣌ܥྻॱʹྻڍ͠·ͨ͠ ൈਮ ॲཧ આ໌ ϋϚͬͨϙΠϯτ QJWPU@SPPU ϧʔτϑΝΠϧγεςϜͷ੾Γସ͑ Ϛ΢ϯτ఻೻ͷมߋ͕ඞਢͩͬͨ TFUIPTUOBNF ϗετ໊Λมߋ͢Δ $"1@4:4@"%.*/
    Λ ESPQ
    ͢Δલ ʹ΍Βͳ͍ͱࣦഊ͢Δ OP
    OFX
    QSJWJMFHF
    ઃఆ TFUTJE ܦ༝౳Ͱͷݖݶঢ֨ېࢭ ͜ΕΛ΍Βͳ͍ͱޙͷ TFDDPNQ
    Ͱ ࣦഊ DBQBCJMJUZ
    CPVOEJOH
    TFU ϓϩηε͕ࠓޙઈରʹอ࣋͠ͳ͍ DBQBCJMJUZ
    Λ ESPQ TFUVJE ΑΓલʹ࣮ߦ͢Δඞཁ͋Γ TFUVJE VJE ͕ࢦఆ͞Ε͍ͯΔ৔߹ͷΈ࣮ࢪ ಛݖΛ૕ࣦ͢ΔͷͰॱংʹ஫ҙ DBQBCJMJUZ
    CPVOEJOH
    TFU
    Ҏ֎ อ࣋͢Δ DBQBCJMJUZ
    Λઃఆ 13@4&5@,&&1$"14
    ͷ͋Γ͕ͨΈ Λײͨ͡ TFDDPNQ
    GJMUFS
    ద༻ ࣮ߦͰ͖Δ TZTDBMM Λ੍ݶ SPPU
    ͷঢ়ଶ͔ΒݖݶΛࣺͯଓ͚Δ ਖ਼͍͠ॱংͰݖݶΛࣺͯͳ͍ͱɺݖݶΛࣺͯΔݖݶ͕ͳࣦͯ͘ഊɺͳͲ͕ੜ͡ΔͷͰ஫ҙ
69. ˜
    -:
    $PSQPSBUJPO • ϓϩηε͕࣮ߦ͢ΔγεςϜίʔϧΛ੍ݶ͢Δػೳ • ͦͷγεςϜίʔϧ͕࣮ߦ͞Εͨ࣌ɺ୯ʹΤϥʔΛฦ͚ͩ͢Ͱͳ͘ ʮϓϩηεΛऴྃͤ͞ΔʯʮτϨʔαʔΛݺͼग़͢ʯͳͲͷΞΫγϣϯ͕Մೳ • ࠓճͷ࣮૷ͱͯ͠͸ MJCTFDDPNQ ͷؔ਺Λݺͼग़͠·͘Δܗ • Ϧετʹ͋Δ֤ TZTDBMM ʹ͍ͭͯ TFDDPNQ@SVMF@BEE 
    Λݺͼग़͢ • ࠷ޙʹ TFDDPNQ@MPBE 
    ͯ͠ద༻ • ͜ΕʹΑΓɺ͢΂ͯͷϧʔϧ͕
    #1'
    ϓϩάϥϜͱͯ͠ίϯύΠϧ͞ΕɺΧʔωϧʹϩʔυ ͞Εͯ
    TZTDBMM ؂ࢹ͕։࢝͞ΕΔ  TFDDPNQ
    ͱ͸ʁ
70. ˜
    -:
    $PSQPSBUJPO • ϓϩηε͕࣮ߦ͢ΔγεςϜίʔϧΛ੍ݶ͢Δػೳ • ͦͷγεςϜίʔϧ͕࣮ߦ͞Εͨ࣌ɺ୯ʹΤϥʔΛฦ͚ͩ͢Ͱͳ͘ ʮϓϩηεΛऴྃͤ͞ΔʯʮτϨʔαʔΛݺͼग़͢ʯͳͲͷΞΫγϣϯ͕Մೳ • ࠓճͷ࣮૷ͱͯ͠͸ MJCTFDDPNQ ͷؔ਺Λݺͼग़͠·͘Δܗ • Ϧετʹ͋Δ֤ TZTDBMM ʹ͍ͭͯ TFDDPNQ@SVMF@BEE 
    Λݺͼग़͢ • ࠷ޙʹ TFDDPNQ@MPBE 
    ͯ͠ద༻ • ͜ΕʹΑΓɺ͢΂ͯͷϧʔϧ͕
    #1'
    ϓϩάϥϜͱͯ͠ίϯύΠϧ͞ΕɺΧʔωϧʹϩʔυ ͞Εͯ
    TZTDBMM ؂ࢹ͕։࢝͞ΕΔ  TFDDPNQ
    ͱ͸ʁ
71. ˜
    -:
    $PSQPSBUJPO • ͋Δ TZTDBMM ͕ݺ͹Εͨ࣌ʹɺϢʔβۭؒʹ͋ΔτϨʔαʔΛಈ࡞͍ͤͨ࣌͞ʹ༻͍Δ • τϨʔαʔ͸ɺίϯςφ্ཱͪ͛࣌ʹ͋Β͔͡Ί DPOGJHKTPO ͷ MJTUFOFS1BUI ʹ ࢦఆͨ͠ιέοτΛ MJTUFO
    ͓ͯ͘͠ • 4UBHF
    
    ϓϩηε͸ɺTFDDPNQ
    ϑΟϧλΛϩʔυͨ࣌͠఺ͰɺΧʔωϧ͔Β௨஌Λ ड͚औΔͨΊͷ OPUJGZ'E ΛऔಘͰ͖Δ  ʮτϨʔαʔΛݺͼग़͢ʯʜʜʁ ͡Ό͋ɺ଴ػ͍ͯ͠ΔτϨʔαʔʹ ͜ͷ OPUJGZ'E Λڭ͑ͯ͋͛Ε͹ྑͦ͞͏ʂ ྫ
    SVONZUSBDFSTPDLFU
72. ˜
    -:
    $PSQPSBUJPO  OPUJGZ'E ΛͲ͏సૹ͢Δʁ • 4UBHF
    
    ϓϩηε͔Β௚઀τϨʔαʹ OPJUGZ'E Λసૹ͢Δ͜ͱ͸Ͱ͖ͳ͍ • ྫ͑͹ϑΝΠϧσΟεΫϦϓλύογϯάͷ࢓૊ΈΛ༻͍ͯ GE Λసૹ͠Α͏ʹ΋ɺ TUBHF
    
    ϓϩηε͸ MJTUFOFS1BUI ʹΞΫηεͰ͖Δͱ͸ݶΒͳ͍ • QJWPU@SPPU ޙͷ TUBHF
    
    ϓϩηε͸ྫ͑͹ϗετͷ SVONZUSBDFSTPDLFU ʹΞΫηεͰ͖ͳ͍ • ࢓ํ͕ͳ͍ͷͰ GE ͷసૹΛ .BJO
    1SPDFTT
    ͕஥հ͢Δඞཁ͕͋Δ ਤ͸࠶ܝ .BJO
    1SPDFTT 4UBHF
    
    1SPDFTT
73. ˜
    -:
    $PSQPSBUJPO ௨ৗڐՄ͞ΕΔΑ͏ͳ
    TZTDBMM ΛΘ͟ͱېࢭͯ͠Έͯɺ ࣦഊ͢Δ͜ͱΛ֬ೝͰ͖ͨ  TFDDPNQ
    ͱ͸ʁ ػೳ͍ͯ͠Δ͜ͱΛ֬ೝͯ͠ΈΑ͏ʂ
74. ˜
    -:
    $PSQPSBUJPO ͦͷଞ OBNFTQBDF
    ͷ෼཭ QJE OBNFTQBDF
    ෼཭ޙ ΋͏Ұ౓ DMPOF QJWPU@SPPU
    ݖݶͷ์غͳͲ 4UBSU
    γάφϧ଴ͪ *OJU
    3FBEZ ίϯςφͷঢ়ଶΛ KTPO ʹॻ͖ग़͢ FYFDWF 4UBSU γάφϧ .BJO
    1SPDFTT 4UBHF
     4UBHF
     $POGJH
    ͷύʔεͳͲ DMPOF
    ͯ͠ ࣗ෼ࣗ਎Λ࠶࣮ߦ VJEHJE
    NBQQJOH
    Λ ॻ͖ࠐΉ 6TFS
    6TFS
    OBNFTQBDF
    ͷ෼཭ VJEHJE
    NBQQJOH
    SFRVFTU
    Λૹ৴ NBQQJOH
    ׬ྃ௨஌ DHSPVQ
    ͷઃఆͳͲ TFDDPNQ
    OPUJGZ'E ͷड͚౉͠
75. ˜
    -:
    $PSQPSBUJPO • ,PUMJO/BUJWF
    Ͱࣗ࡞ͨ͠௿ϨΠϠίϯςφϥϯλΠϜʹ͍ͭͯɺ࣮૷தʹ௚໘ͨ͠՝୊΍ ͦͷղܾࡦʹ͍ͭͯڞ༗ͨ͠ • /BNFTQBDF
    ෼཭ॲཧͰ͸ ,PUMJO/BUJWF
    ͷϚϧνεϨουಛੑʹɺ෼཭Ҏ߱Ͱ͸ ݖݶΛࣺͯΔॲཧͷෳࡶࣗ͞ମʹۤ͠ΊΒΕͨ • ,PUMJO/BUJWF
    ͰγεςϜϓϩάϥϛϯάΛ͢Δ͜ͱʹ͍ͭͯ • ݁࿦
    ҙ֎ͱͰ͖Δ • ,PUMJO
    ͷϞμϯͳݴޠػೳΛ࢖͍ͳ͕Βɺطଘ࣮૷ͷ 3VTU
    ΍
    (P
    Ͱॻ͔Ε͍ͯΔػೳ͕ ࣮૷ՄೳͰ͋Δ͜ͱ͕Θ͔ͬͨ • ,PUMJO
    ͸͓ͦΒ͘ 3VTU
    ΍
    $
    ΑΓ͸ଟ͘ͷਓʹͱͬͯಡΈ΍͘͢ɾॻ͖΍͍͢ݴޠͳͷͰɺ γεςϜϓϩάϥϛϯά΁ͷϋʔυϧΛԼ͛ΔҙຯͰ͸ྑ͍͔΋͠Εͳ͍  ·ͱΊ
76. ˜
    -:
    $PSQPSBUJPO 5IBOL
    :PV