Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-contain...
Search
KONDO Uchio
February 17, 2018
Technology
18k
33
Share
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch
Hacker Tackle 2018 発表資料
KONDO Uchio
February 17, 2018
More Decks by KONDO Uchio
See All by KONDO Uchio
大規模レガシーテストを 倒すための CI基盤の作り方 / #CICD2023
udzura
5
2.5k
Ruby x BPF in Action / RubyKaigi 2022
udzura
0
300
Narrative of Ruby & Rust
udzura
0
260
開発者生産性指標の可視化 / pepabo-four-keys
udzura
3
1.8k
Talk of RBS
udzura
0
490
Re: みなさん最近どうですか? / FGN tech meetup in 2021
udzura
0
850
Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -
udzura
2
810
Device access filtering in cgroup v2
udzura
1
1k
"Story of Rucy" on RubyKaigi takeout 2021
udzura
0
910
Other Decks in Technology
See All in Technology
No Types Needed, Just Callable Method Check
dak2
1
1.2k
実践ハーネスエンジニアリング:TAKTで実現するAIエージェント制御 / Practical Harness Engineering: AI Agent Control Enabled by TAKT
nrslib
10
4.5k
AI駆動1on1〜AIに自分を育ててもらう〜
yoshiakiyasuda
0
120
#jawsugyokohama 100 LT11, "My AWS Journey 2011-2026 - kwntravel"
shinichirokawano
0
350
AWS Agent Registry の基礎・概要を理解する/aws-agent-registry-intro
ren8k
3
370
インターネットの技術 / Internet technology
ks91
PRO
0
210
Introduction to Sansan, inc / Sansan Global Development Center, Inc.
sansan33
PRO
0
3.1k
ぼくがかんがえたさいきょうのあうとぷっと
yama3133
0
190
Contract One Engineering Unit 紹介資料
sansan33
PRO
0
16k
名刺メーカーDevグループ 紹介資料
sansan33
PRO
0
1.1k
ARIA Notifyについて
ryokatsuse
1
120
生成AIが変える SaaS の競争原理と弁護士ドットコムのプロダクト戦略
bengo4com
0
410
Featured
See All Featured
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
194
17k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
32
2.8k
エンジニアに許された特別な時間の終わり
watany
106
240k
Facilitating Awesome Meetings
lara
57
6.8k
Bash Introduction
62gerente
615
210k
What’s in a name? Adding method to the madness
productmarketing
PRO
24
4k
The MySQL Ecosystem @ GitHub 2015
samlambert
251
13k
How People are Using Generative and Agentic AI to Supercharge Their Products, Projects, Services and Value Streams Today
helenjbeal
1
160
A designer walks into a library…
pauljervisheath
211
24k
The Mindset for Success: Future Career Progression
greggifford
PRO
0
310
Measuring Dark Social's Impact On Conversion and Attribution
stephenakadiri
1
190
Being A Developer After 40
akosma
91
590k
Transcript
ۙ౻Ӊஐ࿕(.01FQBCP *OD !)BDLFS5BDLMF શવΘ͔Βͳ͍ɻ ԶͨͪงғؾͰ ίϯςφΛͬͯ ͍Δ
ۙ౻Ӊஐ࿕!VE[VSB &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉΑ ΓԬࢢʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛΈ ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ ͰͷτʔΫ͕࠾͞Εɺ·ͨιϑτΣΞ ͰୈճԬ3VCZେΛडɻݱࡏɺ)BDPOJXB Λϕʔεͱͨ͠ΫϥυαʔϏεͰ͋ΔʮϩϦϙο
ϓʂϚωʔδυΫϥυʯʹٕࣾज़ސ ͱ͠ ͯࢀՃ͍ͯ͠Δɻ
ࠓͷ͓ w งғؾͰίϯςφͷதΛཧղ͢Δ w งғؾͰίϯςφͷΤίγεςϜΛཧղɹ w งғؾͰίϯςφΛࣗ࡞͢Δʹ w ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ
งғؾͰίϯ ςφͷதΛ ཧղ͢Δ
ίϯςφԾԽ
ίϯςφɺ ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
͡Ό͋࡞ͬͯΈ·͠ΐ͏͔
%PDLFSΛྫʹ͠·͢ wී௨ͷ-JOVY 6CVOUV#JPOJD ʹ%PDLFSΛೖΕͯɺෳݸίϯςφΛ ࡞ͬͯΈΔɻ $ docker run --rm -d
debian:latest /bin/sleep 99 d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...
࠷ۙ DF ͷ%PDLFS w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷQTίϚϯυΛൃߦͯ͠Έ·͠ΐ͏ w;Ή;Ή
ίϯςφͷTMFFQίϚϯυ ϗετϚγϯ͔Β ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢
ͭ·Γ
ίϯςφϓϩηεͳΜ ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ ʂʂʂʂʂʂʂʂʂʂ
ίϯςφʮԾԽʯͬͯݴ͏͚ΕͲ wίϯςφͷ࣮ݱʹ͓͍ͯɺϋʔυΣΞͷԾԽʢ$16ɺϝϞϦͳ Ͳʣߦ͍ͬͯͳ͍͜ͱʹҙɻ wEPDLFSSVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷڥʹೖΔʯ͜ͱ͕ग़དྷ ΔɻͦͷΑ͏ʹಠཱͨ͠ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾԽʯ ͱݺΜͰ͍Δͱݴ͑Δɻ wٯʹϓϩηεͳͷͰɺͦͷଞͷԾԽख๏ΑΓܰྔͩ͠ɺΑΓࡉ͔ ੍͍ޚ͕ՄೳʹͳΔଆ໘͋Δɻ
DGͦͷଞͷԾԽ wϗετܕ͋Δ04ʹɺઐ༻ͷιϑτΣΞΛೖΕͯԾԽ͢Δ wϋΠύʔόΠβܕԾԽઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ wͳͲͳͲɺ࣮ݱͷํࣜز͔ͭ͋Δ͕ɺಛͱͯ͠ɺϋʔυΣΞͷ ԾԽΛߦ͏ɻͦͷͨΊ04ͷछྨࣗ༝ʹͳΔ͕ɺίϯςφΑΓ Φʔόʔϔου͕େ͖͘ͳΔɻ
None
None
ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐΔ wΈΜͳ/procͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ w/proc/PID/*ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷͷ ͱʮίϯςφԽͨ͠ʯͷͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ ͍Δ͜ͱ͕Θ͔Δɻ w/proc/PID/ns, /proc/PID/cgroup, /proc/PID/status,
ʮίϯςφԽʯ͢ΔͨΊͷ -JOVYͷػೳ
-JOVY/BNFTQBDF
QSPD1*%OT͕ҧ͏ wΑ͘ݟΔͱҧ͏ wVUTͱ͔JQDͱ͔NOUͱ͔ ͍Ζ͍Ζ͋Δ w͜ΕΒɺάϩʔόϧͳ໊લۭؒͱผͷ04ϦιʔεΛׂΓͯΒ Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY/BNFTQBDFͱ ݺΜͰ͍Δɻ wྫ͑654/BNFTQBDFάϩʔόϧͳϗετ໊ͱಠཱͨ͠ϗετ໊Λ࣋ͯΔ
None
ίϯςφͷωοτϫʔΫʹʮೖΔʯ wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY/BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ wEPDLFSFYFDͱൺֱͯ͠ΈΑ͏ $ sudo nsenter \ --net=/proc/$( \ docker
inspect hackertackle_1 -f ‘{{.State.Pid}}' \ )/ns/net
EPDLFSFYFD OTFOUFS
DHSPVQ
DHSPVQͱ wDHSPVQ $POUSPM(SPVQ ͱɺҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ υΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍౷ܭใΛऔಘͰ͖Δɻ wྫ w$16ͷ੍ݶάϧʔϓશମͷ$16ར༻Λ/ʹԡ͑ͨ͞ΓɺίΞΛ ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭΘ͔Δ wϝϞϦͷ੍ݶάϧʔϓશମͰ͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖
Δɻݶքʹୡͨ࣌͠ͷڍಈબΔ
QJETαϒγεςϜ wͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ੍ݶͰ͖Δɻ wDHSPVQಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ͑Δɻ ݸʹ੍ݶ
ͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ ੍ݶͰ͖Δ ʹ GPSLCPNCରࡦ͕Ͱ͖Δ
ࢼͯ͠Έ·͠ΐ͏ w˞ࣦഊ͢Δͱɺ؋͝ͱམͪ·͢ term1:~$ echo $$ #=> 5849 term2:~$ echo 5849
| \ sudo tee /sys/fs/cgroup/pids/hackertackle/tasks term1:~$ cat /proc/self/cgroup | grep pids 3:pids:/hackertackle term1:~$ #... doing fork bomb ...
ੜؐ
ͦͷଞͷػೳ wDISPPUQJWPU@SPPU͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ wSMJNJUVMJNJUͷͭ w,FSOFM$BQBCJMJUZSPPUͷݖݶΛׂͯ͠Ұ෦Λ༩ɺୣ͏ wTFDDPNQγεςϜίʔϧͷϑΟϧλϦϯά w."$ BQQBSNPS4&-JOVY50.0:0ଞ
TFDDPNQͷྫ wίϯςφ෦ͰɺNLEJSίϚϯυͰ͏γεςϜίʔϧ ʢmkdir(2)ʣDIPXOίϚϯυͰ͏ͭʢchownat(2)ʣͷݺͼ ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ֘ૢ࡞͕ෆՄ ೳʹɻ͖ͳίϚϯυΛstrace(1)Ͱௐͯ෧ҹ͠Α͏ʂ ➡ ➡
ং൫ͷ·ͱΊ wίϯςφಛघͳϓϩηεͱߟ͑Ε0, wϓϩηεΛϗετ͔ΒִɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱڥͱ͢Δͷ͕جຊతͳߟ͑ํ wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗͰݺͼग़ͤɺί ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱͰ͖Δ
งғؾ௫Ί͔ͨͳʁ
งғؾͰίϯ ςφͷΤίγ εςϜΛཧղ
ίϯςφ༻ޠ
ίϯςφ༻ޠ %PDLFS -9$ -9% .PCZ ,VCFSOFUFT 'MBOOFM SVOD (,& &$4
"$* 0$* 5FDUPOJD $PSF04 )BDPOJXB SLU SBJMDBS $BMJDP /PNBE 4XBSN
ଟ͘ͳ͍ʁ
આ໌Ͱ͖·͔͢ʁ
ϨΠϠͰߟ͑ͯΈΔ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE
ิॿઢΛҾ͜͏ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3*
0$* 0QFO$POUBJOFS*OJUJBUJWF
0$*ͱ wίϯςφͷ৭ʑͳنɾن֨Λඪ४Խ͍ͯ͠Δஂମ w0$*ͷنʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε͍ճ͠Ͱ͖Δ w04͝ͱʹඞཁͳύϥϝʔλ͕ཧ͞ΕͯࣗͰඞཁͳϥϯλΠϜΛ ࣮Ͱ͖ͨΓ͢Δ w࣮ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ༰қʹͳΔ
ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏ EPDLFSίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ໊͍લ ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ
SVODͷϨΠϠʔՄͰ͋Δ w0$*ͷنͲ͓Γͷ࣮Λͨ͠ίϯςφϥϯλΠϜͰ͋Εɺ ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS ͰEPDLFSDPOUBJOFSETIJNͱ͍ ͏ϓϩάϥϜ͕୲͍ͬͯΔ
͍֮͑ͯ·͔͢ɺSBJMDBS w0SBDMFͷίϯςφϥϯλΠϜɺࠓͷτʔΫେگɾ3VTU w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ͏Α͏ʹࢦఆՄೳ wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ FEHFͷͰ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠ ExecStart=/usr/bin/dockerd -H fd:// --experimental \
--add-runtime "rc=/usr/local/bin/railcar"
SBJMDBSΛ%PDLFSͰ͑Δ
$3* $POUBJOFS3VOUJNF*OUFSGBDF
͜ͷ ,VCFSOFUFT ʹؔͯ͠ wૉਓͳΜͰ͕͢ w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢ wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ 8BSOJOH
NJOJDVCFͳͲͰαΫοͱLTڥΛ w࡞ͬͯΈΔ wNJOJLVCFTTIͰೖΔͱɺવEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ wຬͨ͠ͷͰ ͜ͷڥফ͠·͢
ࠓɺΦϓγϣϯΛม͑Δ wҎԼͷΦϓγϣϯͰNJOJLVCFTUBSU͢Δ wʢ্ख͘ಈ͔ͳ͍࣌Ұ୴NJOJLVCFTUPQΦϓγϣϯແ͠Ͱ NJOJLVCFTUBSUʣ $ minikube start \ --network-plugin=cni \
--container-runtime=cri-o \ --bootstrapper=kubeadm
DSJP ͍ͬͯ͏ͭʁ w͕͍Δ w͍ͭ͜୭ͩ
DSJPSLUMFUͳͲͳͲ w$3*ͱɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ ༷ͷࣄͰɺH31$Λ͍ͬͯΔ w$3*ϓϩτίϧΛΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ ࣮ʹؔͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ wDSJPίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ͏ wSLUMFUίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ͏
͜͜·Ͱͷ·ͱΊ w0$*ͱ͍͏ஂମͷ࡞ͬͨنʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ ར w$3*ͱ͍͏نʹԊ࣮ͬͨͰίϯςφϥϯλΠϜΛ࡞Δͱศར w͜ΕΒͷنͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷׂ͔ҙࣝ͢Δͱ٢
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM %PDLFS͜͜Λ ·ͱΊͯར༻͢ΔԿ͔
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE ,FSOFMTZTDBMM -9$-9%ʹؔͯ͠ɺ0$*ͱ·ͨผ͕ͩɺ ͬ͘͟Γ-9$͕ΧʔωϧΓͱΓɺ-9%͕)551"1*Λ୲ )BDPOJXB͜Ε͔Β)551 5$1 JOUFSGBDFΛ࡞Γ·͢
࠷ޙͷϨΠϠʔ͚ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ίϯςφͷωοτϫʔΫઃఆ wز͔ͭઓུ͕͋Δɻ w ΫϥελϦϯά͠ͳ͍ wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍ w ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ wίϯςφ͕͏ϒϦοδͳͲࣗͰҾͬுͬͯؤுͬͯؤுΔ w $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ
$/* $POUBJOFS/FUXPSL*OUFSGBDF
$/*ͱ w͜Ε·ͨɺ0QFO$POUBJOFS*OJUJBUJWFͷఆΊͨίϯςφͷωοτ ϫʔΫͷن w,VCFSOFUFTͰར༻Ͱ͖Δ wOFUXPSLQMVHJODOJͰىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ/etc/cni/net.dʹઃఆ͕ೖ ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ
qBOOFMͷྫ wqBOOFMWYMBO -PWFS- Λ࣮ݱ͢ΔσʔϞϯ wࣗͰΜͰ͍͍͚Ͳɺ $/*ϓϥάΠϯ͕͋Δ $ kubectl apply -f
kube-flannel.yml ʮqBOOFMΛͬͯ-JOVYͰ࣮ݱ͢ΔWYMBOͷ͞ΘΓΛΔʯ IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG
DBMJDPͷྫ w1SPKFDU$BMJDP-ͷΈͰ࣮ݱ͍ͯ͠Δ εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ w ʮ:BIPP+"1"/.FFU6QʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ $ kubectl apply
-f calico.yaml
ͦͷଞͷબࢶ wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO OFUXPSLJOH w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυڥݻ༗ͷઃఆ͋ ΔΑ͏ͩʁ
࣮ϕʔεͳϨΠϠΘ͚·ͱΊ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM $/* $MVTUFSFE/PEF1PPM
ଟ ͜͜·ͰͰ
0OFNPSFUIJOH
งғؾͰίϯ ςφΛࣗ࡞͠ ͯΈͨ
ࣗ࡞Ұཡ wίϯςφϥϯλΠϜ)BDPOJXB wίϯςφઓུ ΦʔέετϨʔγϣϯ 'BTU$POUBJOFSXJUI/)).TUBDL
)BDPOJXB wίϯςφϥϯλΠϜɻNSVCZݴޠΛΈࠐΜͰ͍ͯɺίʔυͰίϯς φͷઃఆৼΔ͍ͳͲΛهड़Ͱ͖Δɻ wྫ͑ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ͢Δ͔ɺ*1ԿΛͭ ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ w͋Δ͍ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺɻ w͕࡞ͬͨɻ
'BTU$POUBJOFS wͬ͘͟ΓߦͰ wϦΫΤετ͕͋Δ·Ͱ ىಈ͠ͳ͍ wىಈޙɺҰఆ࣌ؒޙʹఀࢭ wͲΜͲΜίϯςφ͕॥͢Δ wDG1IPFOJY4FSWFST1BUUFSO wDG'BTU$(* ˞ʮҰาઌߦ͘ίϯςφཧΞʔΩςΫνϟʯ8&# %#13&447PM
ΦʔέετϨʔγϣϯΞʔΩςΫνϟ w$.%# $POUFOUT.BOBHFNFOU%BUBCBTF ͷঢ়ଶʹऩଋ͢Δ ˞ʮ'BTU$POUBJOFS࣮ߦڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ
,VCFTUBDLͱͷൺֱ SVOD ,VCFSOFUFT 'MBOOFM $BMJDP $3*0 $POUBJOFSE ,FSOFMTZTDBMM $MVTUFSFE/PEF1PPM )BDPOJXB
OHY@NSVCZ CBTFE TFSWJDFNFTI OHY@NSVCZ )551"1* +BSEJO #SJEHF WFUI $.%# FUDE
࠙ձ Ͱ
ऴΘΓʹ
ίϯςφɺͬͯ·͔͢ʁ wԿͷͨΊʹ͍ͬͯ·͔͢ʁ w࣮ΘΕ͍ͯΔͷͰʁ wίϯςφͰ͋ͳͨͷղܾ͠·͔͢ʁ w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠
ίϯςφͷ ʮงғؾʯ
ίϯςφͷ ֓೦Ϟσϧ
௨ৗ͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ ͏ಈ͔͘ͷઆ໌ʢʣɻ ͜Εɺʹཱ͍ͬͯΔݶΓɺશͳͷ Ͱͳͯ͘Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ ʰ୭ͷͨΊͷσβΠϯʁʱ%"ϊʔϚϯɺ༁վగ൛
ίϯςφͷ֓೦Ϟσϧʁ wͦΕίϯςφͰ͢Ͷ w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ Ξε͕͋ΔͷͰͳ͍ͩΖ͏͔ɻ w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૾Ͱ͖Δʁ w͔͠͠7.ͷΑ͏ʹԿ͔ԾԽ͞Ε͍ͯΔΘ͚Ͱͳ͍͠ɺϗε τʹΑΔ੍େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ
ίϯςφΛͪΌΜͱӡ༻͢Δʹ ʢ·ͩ·ͩʣதΛ͍͔͚ͯ ཧղ͢Δ͜ͱ͕ॏཁɻ
ͦΕʹ தΛ͔ͬ͠Γཧղ͢Δ͜ͱ ָ͍͠ʢͣʣ
&OKPZ5BDLMJOH $POUBJOFS&DPTZTUFN
ࢀߟࢿྉ w0$* IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD w1SPUPUZQJOH,VCFSOFUFT$3*CZ!SFNPSF͞Μ IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ XJUISVCZBOEHSQD
4QFDJBM5IBOLT wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓၟӽͳ͕Βʣ w!UONU w!S@UBLBJTIJ