[B! docker][kernel] udzuraã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

udzura id:udzura

dockerã¨kernelã«é–¢ã™ã‚‹udzuraã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚«ãƒ¼ãƒãƒ«ã®è¦³ç‚¹ã‹ã‚‰è¦‹ãŸLinuxKit - Qiita
ã¯ã˜ã‚ã« Dockerç¤¾ã¯DockerCon2017ã«ãŠã„ã¦ã€Dockerã‚³ãƒ³ãƒ†ãƒŠã®å®Ÿè¡Œã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ãŸè»½é‡Linuxã§ã‚ã‚‹ã€LinuxKitã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ ä»¥ä¸‹é–¢é€£URLã§ã™ã€‚ Dockerã€ã€ŒLinuxKitã€ã‚’ç™ºè¡¨ã€‚ã‚³ãƒ³ãƒ†ãƒŠãƒ©ãƒ³ã‚¿ã‚¤ãƒ ã®ãŸã‚ã ã‘ã«ã‚¼ãƒã‹ã‚‰é–‹ç™ºã•ã‚ŒãŸã‚»ã‚ãƒ¥ã‚¢ãªLinux Subsystemã€‚DockerCon 2017 ANNOUNCING LINUXKIT: A TOOLKIT FOR BUILDING SECURE, LEAN AND PORTA BLE LINUX SUBSYSTEMS æœ¬è¨˜äº‹ã¯LinuxKitã«ã¤ã„ã¦ç¶²ç¾…çš„ãªèª¬æ˜Žã‚’ã™ã‚‹ã“ã¨ã§ã¯ãªãã¦ã€LinuxKitã«åŒæ¢±ã•ã‚Œã¦ã„ã‚‹ã‚«ãƒ¼ãƒãƒ«ãŒã©ã®ã‚ˆã†ãªã‚‚ã®ã‹ã‚’ã–ã£ã¨çœºã‚ã‚‹ã“ã¨ã§ã™ã€‚ãªãœã‚«ãƒ¼ãƒãƒ«ã ã‘ãªã®ã‹ã¨ã„ã†ã¨ã€å˜ã«ç§ãŒã‚«ãƒ¼ãƒãƒ«å±‹ã•ã‚“ãªã®ã§ã‚«ãƒ¼ãƒãƒ«ã«èˆˆå‘³ãŒã‚ã£ãŸã ã‘ã§ã™ã€‚ æœ¬è¨˜äº‹ã®LinuxKitã®å¯¾è±¡ãƒãƒ¼ã‚¸
udzura 2017/04/19
ã“ã†ã„ã†ã‚«ãƒ¼ãƒãƒ«ã‚’ã‚·ãƒ¥ãƒƒã¨ä½œã£ã¦ã„ãã‚ãŸã‚Šã™ã”ã„ã‚ˆãªã‚

docker

kernel

linux
ãƒªãƒ³ã‚¯
Seccomp security profiles for Docker
{ const container = $el; // The div with overflow const it em = document.getElementById('sidebar-current-page') if (it em) { const containerTop = container.scrollTop; const containerBottom = containerTop + container.clientHeight; const it em Top = it em.offsetTop - container.offsetTop; const it emBottom = it em Top + it em.offsetHeight; // Scroll only if the it em is out of view if (it emBottom > containerBo
udzura 2016/11/15
çµæ§‹ã„ã‚ã„ã‚ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§è¹´ã‚‰ã‚Œã¦ã‚‹ã®ã§ã‚ã‚‹ãªã‚

seccomp

docker

linux

kernel
ãƒªãƒ³ã‚¯
Flannelã®VXLANãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®ä»•çµ„ã¿ - ã‚ã‚‚ã‚ã‚‚
ä½•ã®è©±ã‹ã¨ã„ã†ã¨ Kubernetesã®ç’°å¢ƒã‚’ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã™ã‚‹éš›ã¯ã€ã‚³ãƒ³ãƒ†ãƒŠé–“ã§é€šä¿¡ã™ã‚‹ãŸã‚ã®å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ç”¨æ„ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã€ã“ã®ãŸã‚ã®ãƒ„ãƒ¼ãƒ«ã¨ã—ã¦ã€FlannelãŒã‚ˆãåˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ã“ã®æ™‚ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã«VXLANã‚’æŒ‡å®šã™ã‚‹ã¨ã€ç‰©ç†ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ä¸Šã«VXLANã«ã‚ˆã‚‹Overlayæ–¹å¼ã§å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãŒæ§‹æˆã•ã‚Œã¾ã™ã€‚ ã“ã“ã§ã¯ã€FlannelãŒæ§‹æˆã™ã‚‹å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ä»•çµ„ã¿ã‚’è§£èª¬ã—ã¤ã¤ã€VXLANã«ã¤ã„ã¦å¦ã‚“ã§ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚RHEL7.1ã§Kubernetes+Flannelã®ç’°å¢ƒã‚’æ§‹ç¯‰ã™ã‚‹æ‰‹é †ã¯ã€ä¸‹è¨˜ã‚’å‚ç…§ãã ã•ã„ã€‚ RHEL7.1ã§Kubernetesã‚’å®Ÿä½“é¨“ï¼ˆæ§‹ç¯‰ç·¨ï¼‰ FlannelãŒæ§‹æˆã™ã‚‹å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ä¸Šè¨˜ã®æ‰‹é †ã§ç’°å¢ƒæ§‹ç¯‰ã™ã‚‹ã¨ã€ä¸‹å›³ã®ã‚ˆã†ã«å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãŒç”¨æ„ã•ã‚Œã¾ã™ã€‚å„ãƒŽãƒ¼ãƒ‰ï¼ˆMinionï¼‰ã«ã¯ã€VXLANãƒ‡ãƒã‚¤ã‚¹ã€Œflannel.1ã€ãŒä½œæˆã•ã‚Œã¦ã€VXL
udzura 2016/07/27
æ”¹ã‚ã¦ã‚ã£ã¡ã‚ƒçœºã‚ã¦ç†è§£ãŒé€²ã‚“ã ï¼ˆç†è§£ã—ãŸã¨ã¯è¨€ã£ã¦ã„ãªã„...

kernel

docker

network

vxlan
ãƒªãƒ³ã‚¯
PID1 ã¯ã€ã‚«ãƒ¼ãƒãƒ«ã‹ã‚‰â€¨ç‰¹åˆ¥æ‰±ã„ã•ã‚Œã¦ã‚‹ã£ã¦æœ¬å½“ã§ã™ã‹ï¼Ÿ
Docker Meetup Tokyo #6 - connpass http://dockerjp.connpass.com/event/26538/ https://zlab.co.jp/ ã‚‚ã¿ã¦ãï¼ï¼ï¼
udzura 2016/03/07
èªã¿ç›´ã—ã¦ã„ã‚‹

docker

kernel
ãƒªãƒ³ã‚¯
/proc/1/environ is unavailable in a container that is not priviledged Â· Issue #6607 Â· moby/moby
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
udzura 2014/10/21
â€œIt seems to me that CAP_SYS_PTRACE is a large thing and for just reading /proc/1/environ adding such a large capability is :( â€ u...

docker

kernel
ãƒªãƒ³ã‚¯
1