{"id":926,"date":"2026-04-11T13:48:34","date_gmt":"2026-04-11T05:48:34","guid":{"rendered":"http:\/\/charlottezhiend.cn:8080\/?p=926"},"modified":"2026-04-18T16:59:28","modified_gmt":"2026-04-18T08:59:28","slug":"1-6","status":"publish","type":"post","link":"http:\/\/charlottezhiend.cn:8080\/index.php\/2026\/04\/11\/1-6\/","title":{"rendered":"\u4e91\u5b89\u5168"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">\u57fa\u7840\u6982\u5ff5<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">\u865a\u62df\u5316<\/h2>\n\n\n\n<p>\u865a\u62df\u5316\u7b80\u5355\u6765\u8bf4\u5c31\u662f\u628a\u4e00\u53f0\u7269\u7406\u8ba1\u7b97\u673a\uff0c\u62c6\u5206\u6210\u591a\u53f0\u201d\u865a\u62df\u8ba1\u7b97\u673a\u201c\uff0c\u6bcf\u4e00\u53f0\u865a\u62df\u673a\u90fd\u53ef\u4ee5\u8fd0\u884c\u81ea\u5df1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3001\u5b89\u88c5\u81ea\u5df1\u7684\u8f6f\u4ef6\u3001\u6709\u72ec\u7acb\u7684\u7f51\u7edc\u3001\u78c1\u76d8\u3001\u5185\u5b58\u4f46\u5b83\u4eec\u5176\u5b9e\u5171\u7528\u4e00\u53f0\u7269\u7406\u673a\u5668\u7684\u786c\u4ef6\u8d44\u6e90\u3002<br>\u901a\u8fc7\u521b\u5efa\u865a\u62df\u673a\u7684\u65b9\u5f0f\uff0c\u5c06\u786c\u4ef6\u8d44\u6e90\u5206\u914d\u5230\u4e0d\u540c\u7684\u865a\u62df\u673a\uff0c\u8fbe\u5230\u8d44\u6e90\u7684\u6700\u5927\u5316\u5229\u7528\uff0c\u76f8\u6bd4\u76f4\u63a5\u5728\u7269\u7406\u673a\u4e0a\u90e8\u7f72\u5e94\u7528\uff0c\u865a\u62df\u673a\u66f4\u52a0\u5bb9\u6613\u6269\u5c55\u3002\u901a\u8fc7\u865a\u62df\u673a\u865a\u62df\u51fa\u4e0d\u540c\u7684\u7269\u7406\u8d44\u6e90\uff0c\u4ee5\u8fbe\u5230\u5feb\u901f\u642d\u5efa\u4e91\u670d\u52a1\u7684\u76ee\u7684\u3002<\/p>\n\n\n\n<p><strong>\u865a\u62df\u5316\u6838\u5fc3\u7ec4\u4ef6<\/strong><br><strong>Hypervisor\uff08\u865a\u62df\u76d1\u63a7\u5668\uff09\uff1a\u7528\u4e8e\u7ba1\u7406\u865a\u62df\u673a\u3001\u5206\u914d\u786c\u4ef6\u8d44\u6e90\u3001\u9694\u79bb\u4e0d\u540c\u7cfb\u7edf<\/strong><\/p>\n\n\n\n<p><strong>\u4e24\u79cd\u4e3b\u6d41\u865a\u62df\u5316\u7c7b\u578b<\/strong><br><strong>\u88f8\u91d1\u5c5e\u578b\uff1a<\/strong>\u76f4\u63a5\u8fd0\u884c\u5728\u786c\u4ef6\u4e0a\uff0c\u6027\u80fd\u66f4\u5f3a<br><strong>\u5bbf\u4e3b\u578b\uff1a<\/strong>\u8fd0\u884c\u5728\u64cd\u4f5c\u7cfb\u7edf\u4e4b\u4e0a<\/p>\n\n\n\n<p><strong>\u5e38\u89c1\u7684\u865a\u62df\u5316\u6280\u672f<\/strong><br>Xen\u3001KVM\u3001openstak\u3001exsi<\/p>\n\n\n\n<p><strong>\u865a\u62df\u5316\u4f5c\u7528<\/strong><br>1.\u63d0\u9ad8\u8d44\u6e90\u5229\u7528\u7387<br>2.<strong>\u64cd\u4f5c\u7cfb\u7edf\u7ea7\u522b\u7684\u73af\u5883\u9694\u79bb<\/strong><br>3.\u5feb\u7167\u548c\u56de\u6eda\u64cd\u4f5c<br><strong>\u865a\u62df\u5316\u7f3a\u70b9<\/strong><br>\u5f00\u542f\u865a\u62df\u673a\uff0c\u518d\u4e0d\u8fd0\u884c\u4efb\u4f55\u5e94\u7528\u7684\u60c5\u51b5\u4e0b\uff0c\u5c31\u9700\u8981\u5360\u75282~3G\u5185\u5b58\uff0c20~30G\u7684\u78c1\u76d8\u7a7a\u95f4\u3002\u800c\u4e14\u4e3a\u4e86\u5e94\u7528\u7cfb\u7edf\u8fd0\u884c\u7684\u6027\u80fd\uff0c\u5f80\u5f80\u8fd8\u8981\u7ed9\u6bcf\u53f0\u865a\u62df\u673a\u7559\u51fa\u66f4\u591a\u7684\u5185\u5b58\u5bb9\u91cf\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-1024x759.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"759\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-1024x759.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-935\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">docker<\/h2>\n\n\n\n<p>\u5bb9\u5668\u5316\u662f\u5e94\u7528\u7a0b\u5e8f\u7ea7\u522b\u7684\u865a\u62df\u5316\u6280\u672f\u3002\u5bb9\u5668\u63d0\u4f9b\u4e86\u5c06\u5e94\u7528\u7a0b\u5e8f\u7684\u4ee3\u7801\u3001\u7cfb\u7edf\u5de5\u5177\u3001\u7cfb\u7edf\u5e93\u548c\u914d\u7f6e\u6253\u5305\u5230\u4e00\u4e2a\u5b9e\u4f8b\u4e2d\u7684\u6807\u51c6\u65b9\u6cd5\uff0c<strong>\u5bb9\u5668\u5171\u4eab\u4e00\u4e2a\u5185\u6838<\/strong>\uff08\u64cd\u4f5c\u7cfb\u7edf\uff09<\/p>\n\n\n\n<p><strong>\u5bb9\u5668\u6280\u672f\u5177\u5907\u4ee5\u4e0b\u4f18\u70b9\uff1a<\/strong><br>1.\u542f\u52a8\u8fc5\u901f\uff1a\u6ca1\u6709Guest OS\u7684\u542f\u52a8\u8fc7\u7a0b\uff0c\u5f00\u7bb1\u5373\u7528<br>2.\u5360\u7528\u8d44\u6e90\u5c11\uff1a\u6ca1\u6709\u8fd0\u884cGuest OS\u6240\u9700\u7684\u5185\u5b58\u5f00\u9500\uff0c\u65e0\u9700\u4e3a\u865a\u62df\u673a\u9884\u7559\u8fd0\u884c\u5185\u5b58\uff0c\u65e0\u9700\u5b89\u88c5\u3001\u8fd0\u884cApp\u4e0d\u9700\u8981\u7684\u8fd0\u884c\u5e93\/\u64cd\u4f5c\u7cfb\u7edf\u670d\u52a1\uff0c\u5185\u5b58\u5360\u7528\u3001\u5b58\u50a8\u7a7a\u95f4\u5360\u7528\u90fd\u5c0f\u7684\u591a\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u67e5\u770bdocker\u7248\u672c\ndocker -v\n\u67e5\u770bdocker\u7684\u670d\u52a1\u72b6\u6001\nsystemctl status docker<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-1-1024x491.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"491\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-1-1024x491.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-936\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">docker\u5e38\u7528\u547d\u4ee4<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>docker search nginx \u641c\u7d22nginx\u76f8\u5173\u7684\u955c\u50cf\ndocker images \u67e5\u770b\u672c\u5730\u955c\u50cf\ndocker rmi nginx:1.20 \u5220\u9664\u672c\u5730\u955c\u50cf\ndocker ps \u67e5\u770b\u5b58\u6d3b\u7684\u5bb9\u5668\ndocker ps -a\u67e5\u770b\u6240\u6709\u5b58\u6d3b\u7684\u5bb9\u5668\ndocker ps -l\u67e5\u770b\u6700\u65b0\u7684\u5bb9\u5668\ndocker ps -qa\u67e5\u770b\u6240\u6709\u5b58\u6d3b\u5bb9\u5668\u7684ID\ndocker run rockylinux:9.3 \u542f\u52a8\u5bb9\u5668\uff0c\u9ed8\u8ba4\u5bb9\u5668\u7684\u547d\u4ee4\u662f\/bin\/bash\ndocker run -it rockylinux:9.3 #-it \u6253\u5f00\u4e00\u4e2a\u63a7\u5236\u53f0\u4ea4\u4e92\u754c\u9762\uff0c\u5982\u679c\u9047\u5230\u963b\u585e\u4e0d\u4f1a\u9000\u51fa\ndocker run -d centos:7 ping -c 3 qq.com #-d\u540e\u53f0\u8fd0\u884c\ndocker run --rm centos7: ping -c 10 qq.com#--rm \u5f53\u5bb9\u5668\u8fd0\u884c\u7ed3\u675f\u7684\u65f6\u5019\u81ea\u52a8\u5220\u9664\ndocker run -p 8080:80 -d registry.cn-hangzhou.aliyuncs.com\/eagleslab\/games:lipstick #-p 8080:80\u5c06\u5bb9\u5668\u768480\u7aef\u53e3\u6620\u5c04\u5230\u4e3b\u673a\u4e0a\ndocker run -P nginx:1.20 #\u5c06\u5bb9\u5668\u5efa\u8bae\u5f00\u653e\u7684\u7aef\u53e3\u6620\u5c04\u5230\u968f\u673a\u7aef\u53e3\ndocker run --net=host #--net=host\u5f00\u653e\u4e3b\u673a\u4e0a\u6240\u6709\u7684\u7aef\u53e3\u6b38\u5bb9\u5668\u81ea\u52a8\u9009\u62e9\ndocker run -v &lt;\u4e3b\u673a\u4e0a\u7684\u76ee\u5f55&gt;:&lt;\u5bb9\u5668\u91cc\u7684\u76ee\u5f55&gt; \u6302\u8f7d\u76ee\u5f55\u5230\u5bb9\u5668\u4e2d\ndocker run --name \"\u5bb9\u5668\u540d\" \u4fee\u6539\u5bb9\u5668\u540d\ndocker stats &lt;\u5bb9\u5668ID&gt; \u67e5\u770b\u5bb9\u5668\u7684\u8d44\u6e90\u5360\u7528\ndocker rm &lt;\u5bb9\u5668ID&gt; \u5220\u9664\u5bb9\u5668\ndocker rm -f &lt;\u5bb9\u5668ID&gt;\ndocker rm -f  `<span style=\"background-color: initial; font-family: inherit; font-size: inherit; text-align: initial; color: initial;\">docker ps -qa`<\/span> \u5220\u9664\u6240\u6709\u7684\u5bb9\u5668\nwatch -n 1 \"docker ps -q\"\u6bcf\u8fc7\u4e00\u79d2\u67e5\u770b\u4e00\u6b21\ndocker logs &lt;\u5bb9\u5668ID&gt; \u67e5\u770b\u5bb9\u5668\u8fd0\u884c\u65e5\u5fd7\ndocker port &lt;\u5bb9\u5668ID&gt; \u67e5\u770b\u5bb9\u5668\u7684\u6620\u5c04\u7aef\u53e3\ndocker attach &lt;\u5bb9\u5668ID&gt; \u8fdb\u5165\u5bb9\u5668\u7684\u4e3b\u4efb\u52a1\uff0cctrl+p+q\u53ef\u4ee5\u79bb\u5f00\u5374\u4e0d\u5173\u95ed\ndocker exec -it &lt;\u5bb9\u5668ID&gt; bash \u8fdb\u5165\u5bb9\u5668\uff0c\u5e76\u4e14\u8fdb\u5165\u5230bash\u4e2d\ndocker start &lt;\u5bb9\u5668ID&gt; \u542f\u52a8\u4e00\u4e2a\u5df2\u7ecf\u9000\u51fa\u7684\u5bb9\u5668\ndocker stpp &lt;\u5bb9\u5668ID&gt; \u7ed9\u5bb9\u5668\u53d1\u51fa\u9000\u51fa\u6307\u4ee4\ndocker kill &lt;\u5bb9\u5668ID&gt; \u5f3a\u5236\u7ed3\u675f\u5bb9\u5668(\u6709\u6570\u636e\u4e22\u5931\u7684\u98ce\u9669)\ndocker inspect &lt;\u5bb9\u5668ID&gt; \u67e5\u770b\u5bb9\u5668\u8be6\u7ec6\u4fe1\u606f<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u5b89\u5168\u7684\u751f\u547d\u5468\u671f<\/h3>\n\n\n\n<p>1.<strong>\u5bb9\u5668Build\uff1a<\/strong>\u5728\u6301\u7eed\u96c6\u6210\u5de5\u4f5c\u6d41\u5f00\u53d1\u6784\u4ef6\u4e2d\uff0c\u96c6\u6210\u6f0f\u6d1e\u5408\u89c4\u6027\u5b89\u5168\u626b\u63cf<br>2.<strong>\u5bb9\u5668Ship\uff1a<\/strong>\u5728\u955c\u50cf\u51fa\u5165\u5e93\u7684\u6301\u7eed\u4ea4\u4ed8\u6d41\u7a0b\u4e2d\uff0c\u65e0\u7f1d\u96c6\u6210\u5b89\u5168\u52a0\u56fa\u7b56\u7565<br>3.<strong>\u5bb9\u5668Run\uff1a<\/strong>\u5728\u751f\u6210\u8fd0\u884c\u73af\u5883\u4e2d\u6301\u7eed\u68c0\u6d4b\u5e76\u4fee\u590d\u5b89\u5168\u9690\u60a3\uff0c\u6700\u5c0f\u5316\u964d\u4f4e\u5b89\u5168\u5a01\u80c1\uff0c\u4fdd\u8bc1\u4e1a\u52a1\u7a33\u5b9a\u8fd0\u884c<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-2-1024x392.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"392\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-2-1024x392.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-937\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u57fa\u672c\u67b6\u6784<\/h3>\n\n\n\n<p>C\/S\u67b6\u6784\uff1aDocker\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u7aef\u65e2\u53ef\u4ee5\u8fd0\u884c\u5728\u4e00\u4e2a\u673a\u5668\u4e0a\uff0c\u4e5f\u53ef\u4ee5\u901a\u8fc7Socket\u6216\u8005API\u8fdb\u884c\u901a\u4fe1<br>Docker\u5b88\u62a4\u8fdb\u7a0b\uff1a\u4e00\u822c\u5728\u5bbf\u4e3b\u673a\u540e\u53f0\u8fd0\u884c\uff0c\u4f5c\u4e3a\u670d\u52a1\u7aef\u63a5\u6536\u6765\u81ea\u5ba2\u6237\u7aef\u7684\u8bf7\u6c42\u5e76\u5904\u7406\u3002\u4f8b\u5982\u521b\u5efa\u3001\u8fd0\u884c\u3001\u5206\u53d1\u5bb9\u5668\u3002<br>Docker\u5ba2\u6237\u7aef\u5219\u4e3a\u7528\u6237\u63d0\u4f9b\u4e00\u7cfb\u5217\u53ef\u6267\u884c\u547d\u4ee4\uff0c\u5982Docker Run\uff0c\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u8fd9\u4e9b\u547d\u4ee4\u8ddfDocker\u5b88\u62a4\u8fdb\u7a0b\u8fdb\u884c\u4ea4\u4e92<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u7279\u70b9<\/h3>\n\n\n\n<p><strong>\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u5305\u62ec\u5185\u6838\u3001\u6587\u4ef6\u7cfb\u7edf\u3001\u7f51\u7edc\u3001PID\u3001UID\u3001IPC\u3001\u5185\u5b58\u3001\u786c\u76d8\u3001CPU\u7b49\u6240\u6709\u8d44\u6e90\u90fd\u662f\u5e94\u7528\u7a0b\u5e8f\u76f4\u63a5\u5171\u4eab\u7684\u3002<\/strong>\u4f8b\u5982\uff1aDocker\u4e2d\u7684Root\u7528\u6237\u548c\u5bbf\u4e3b\u673a\u4e2d\u7684Root\u7528\u6237\u5176\u5b9e\u662f\u540c\u4e00\u4e2a\uff0c\u4f46\u662f\u7531\u4e8e\u5bb9\u5668\u7684\u9650\u5236\uff0c\u5373\u4f7f\u83b7\u5f97\u4e86\u8fd9\u4e2aRoot\u7528\u6237\u7684\u6743\u9650\uff0c\u4e5f\u53ea\u662f\u88ab\u5bb9\u5668\u9650\u5236\u5176\u4e2d\u3002\u540c\u6837\u8fdb\u7a0b\u4e5f\u662f\u5982\u6b64\uff0c\u5728\u5bb9\u5668\u4e2d\u8fd0\u884c\u7684\u6bcf\u4e00\u4e2a\u8fdb\u7a0b\u90fd\u53ef\u4ee5\u5728\u5bbf\u4e3b\u673a\u4e2d\u67e5\u8be2\u5230\u3002<\/p>\n\n\n\n<p><strong>Memory\u673a\u5236-OOME\uff1a<\/strong>\u5728Linux\u7cfb\u7edf\u4e2d\uff0c\u5982\u679ckernel\u76d1\u6d4b\u5230\u5f53\u524d\u5bbf\u4e3b\u673a\u6ca1\u6709\u8db3\u591f\u7684\u5185\u5b58\u6765\u5b9e\u73b0\u7cfb\u7edf\u67d0\u4e9b\u91cd\u8981\u7684\u529f\u80fd\uff0c\u5c31\u4f1a\u629b\u51faOOME\u5f02\u5e38\u3002\u4e00\u65e6\u53d1\u751fOOME\u4efb\u4f55\u8fdb\u7a0b\u90fd\u6709\u53ef\u80fd\u88ab\u6740\u6b7b\uff0c\u5305\u62ecDocker Daemon\u5728\u5185\uff0c\u4e3a\u6b64Docker\u7279\u5b9a\u8c03\u6574Docker Daemon\u7684\u4f18\u5148\u7ea7\u5c06\u8fdb\u7a0b\u503c\u8bbe\u7f6e\u4e3a-500\/-1000\u4ee5\u514d\u88ab\u8bef\u6740\uff0c\u800c\u5bb9\u5668\u4e2d\u7684\u8fdb\u7a0b\u9ed8\u8ba4\u4e0d\u505a\u8be5\u8c03\u6574\uff0c\u56e0\u6b64\u5728\u5185\u5b58\u4e0d\u8db3\u65f6\u66f4\u5bb9\u6613\u88ab\u6740\u6b7b\uff0c\u751a\u81f3\u5bfc\u81f4\u5bb9\u5668\u9000\u51fa\u3002\u5982\u679c\u6709\u4e9b\u5bb9\u5668\u4e0d\u60f3\u88abkill\u6389\uff0c\u5219\u9700\u8981\u5728\u5bb9\u5668\u521d\u59cb\u5316\u7684\u65f6\u5019\u6307\u5b9a\uff08&#8211;oom-kill-disable\/&#8211;oom-score-adj int\uff09<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u547d\u540d\u7a7a\u95f4<\/h3>\n\n\n\n<p>NameSpace\u7684\u4f5c\u7528\u662f\u9694\u79bb\uff0c\u8ba9\u5e94\u7528\u8fdb\u7a0b\u53ea\u80fd\u770b\u5230\u8be5NameSpace\u5185\u7684\u201c\u4e16\u754c\u201d\u3002\u547d\u540d\u7a7a\u95f4\u662fLinux\u5185\u6838\u4e00\u4e2a\u5f3a\u5927\u7684\u7279\u6027\u3002\u6bcf\u4e2a\u5bb9\u5668\u90fd\u6709\u81ea\u5df1\u5355\u72ec\u7684\u547d\u540d\u7a7a\u95f4\uff0c\u8fd0\u884c\u5728\u5176\u4e2d\u7684\u5e94\u7528\u90fd\u50cf\u662f\u5728\u72ec\u7acb\u7684\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u8fd0\u884c\u4e00\u6837\u3002<strong>\u660e\u660e\u7a7a\u95f4\u4fdd\u8bc1\u4e86\u5bb9\u5668\u76f4\u63a5\u5f7c\u6b64\u4e92\u4e0d\u5f71\u54cd\u3002<\/strong><br><strong>Linux\u516d\u5927\u547d\u540d\u7a7a\u95f4\uff1aPIDNS\u3001NETNS\u3001IPCNS\u3001MNTNS\u3001UTSNS\u3001USERNS\uff0c\u5206\u522b\u6765\u9694\u79bb\u8fdb\u7a0b\u3001\u7f51\u7edc\u3001\u8fdb\u7a0b\u4ea4\u4e92\u3001\u76ee\u5f55\u6302\u8f7d\u3001\u4e3b\u673a\u548c\u7528\u6237\u540d<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u8f93\u51fa\u5bbf\u4e3b\u673a\u7ec8\u7aef\u5bf9\u5e94\u7684NameSpace\u4fe1\u606f\uff0c$$\u8868\u793a\u5f53\u524dshell\u672c\u8eab\u7684PID\n\u250c\u2500\u2500(root\u327fkali)-&#91;~]\n\u2514\u2500# ls -l \/proc\/$$\/ns\ntotal 0\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 cgroup -&gt; 'cgroup:&#91;4026531835]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 ipc -&gt; 'ipc:&#91;4026531839]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 mnt -&gt; 'mnt:&#91;4026531841]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 net -&gt; 'net:&#91;4026531840]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 pid -&gt; 'pid:&#91;4026531836]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 pid_for_children -&gt; 'pid:&#91;4026531836]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 time -&gt; 'time:&#91;4026531834]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 time_for_children -&gt; 'time:&#91;4026531834]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 user -&gt; 'user:&#91;4026531837]'\nlrwxrwxrwx 1 root root 0 Apr 13 01:18 uts -&gt; 'uts:&#91;4026531838]'<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">UserNameSpace<\/h4>\n\n\n\n<p>UserNS\u628a\u5bbf\u4e3b\u673a\u4e2d\u7684\u4e00\u4e2a\u666e\u901a\u7528\u6237\uff08\u53ea\u6709\u666e\u901a\u6743\u9650\u7684\u7528\u6237\uff09\u6620\u5c04\u5230\u5bb9\u5668\u4e2d\u7684root\u7528\u6237\u3002\u4f46\u5bb9\u5668\u4e2d\uff0c\u8be5\u7528\u6237\u5728\u81ea\u5df1\u7684user namespace\u4e2d\u4f1a\u8ba4\u4e3a\u81ea\u5df1\u5c31\u662froot\uff0c\u4e5f\u5177\u6709root\u7684\u5404\u79cd\u6743\u9650\uff0c\u4f46\u662f\u5bf9\u4e8e\u5bbf\u4e3b\u673a\u4e0a\u7684\u8d44\u6e90\uff0c\u5b83\u53ea\u6709\u5f88\u6709\u9650\u7684\u8bbf\u95ee\u6743\u9650\uff08\u666e\u901a\u7528\u6237\uff09<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u250c\u2500\u2500(root\u327fkali)-&#91;~]\n\u2514\u2500# su deepmountains \n$ whoami\ndeepmountains\n$ unshare --fork --user -r bash #\u8fd9\u91cc\u5c06deepmountains\u7528\u6237\u8fdb\u884c\u6620\u5c04\uff0cfork\u7684\u4e00\u77ac\u95f4\uff0cdeepmountians\u7684\u547d\u4ee4\u63d0\u793a\u7b26\u53d8\u6210\u4e86root\uff0cwhoami\u663e\u793a\u7684\u7528\u6237\u4e5f\u662froot\uff0c\u4f46\u662f\u8fd9\u4e2aroot\u7528\u6237\u5374\u53ea\u662f\u4e3b\u673a\u4e2d\u7684deepmountians\u7528\u6237\u7684\u6620\u5c04\nroot@kali:\/root# whoami\nroot\nroot@kali:\/root# useradd dpm\nuseradd: cannot lock \/etc\/passwd; try again later. #\u5b9e\u8d28\u7684\u6743\u9650\u53ea\u6709deepmountians\u6743\u9650\u800c\u4e0d\u662froot\u7684\u6743\u9650<\/code><\/pre>\n\n\n\n<p>\u5728\u672a\u5f00\u542f\u547d\u540d\u7a7a\u95f4\u7684\u65f6\u5019\u5f00\u4e2a\u5bb9\u5668\u5c06\/root\u76ee\u5f55\u8fdb\u884c\u6302\u8f7d\uff0croot\u76ee\u5f55\u4e0b\u7684flag.txt\u7684\u654f\u611f\u6587\u4ef6\uff0c\u8fdb\u5165\u5bb9\u5668\u4e2d\u53d1\u73b0\u662froot\u6743\u9650\u56e0\u4e3a\u6ca1\u6709\u4f7f\u7528\u547d\u540d\u7a7a\u95f4\u6240\u4ee5\u5bb9\u5668\u4e2d\u7684root\u5728\u5bbf\u4e3b\u673a\u770b\u6765\u4e5f\u662froot\uff0c\u67e5\u770bflag.txt\u53d1\u73b0\u4e5f\u80fd\u591f\u67e5\u770b\uff0c\u9020\u6210\u4e86\u654f\u611f\u4fe1\u606f\u6cc4\u9732\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-4-1024x714.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"714\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-4-1024x714.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-939\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u56de\u5230\u5bbf\u4e3b\u673a\u5f00\u542fUserNS\u91cd\u542fdocker\u91cd\u65b0\u62c9\u4e2a\u5bb9\u5668\u6302\u8f7d\/root\uff0c\u53d1\u73b0\u8fd9\u6b21\u8fderoot\u76ee\u5f55\u90fd\u65e0\u6cd5\u6253\u5f00\uff0c\u8fd9\u91cc\u5c31\u662f\u547d\u540d\u7a7a\u95f4\u8d77\u6548\u679c\u4e86\uff0c\u6b64\u65f6\u5bb9\u5668\u7684root\u662f\u5bbf\u4e3b\u673a\u4e2d\u7684\u666e\u901a\u7528\u6237\u6620\u5c04\u7684\uff0c\u6240\u4ee5\u5728\u5bbf\u4e3b\u673a\u770b\u6765\u5bb9\u5668root\u5c31\u53ea\u662f\u4e2a\u666e\u901a\u7528\u6237\u65e0\u6743\u9650\u67e5\u770broot\u6587\u4ef6\u5939\u3002\u4f46\u662f\u5982\u679c\u6302\u5728\u76ee\u5f55\u6743\u9650\u914d\u7f6e\u6709\u8bef666\u6216\u8005777UserNS\u5f00\u542f\u4e0e\u5426\u90fd\u65e0\u6cd5\u963b\u6b62\u653b\u51fb\u8005\u8fdb\u884c\u4e0b\u4e00\u6b65\u5229\u7528\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-7.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"783\" height=\"36\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-7.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-942\"  sizes=\"auto, (max-width: 783px) 100vw, 783px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-6-1024x188.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"188\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-6-1024x188.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-941\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5bbf\u4e3b\u673a\u4e5f\u53ef\u4ee5\u770b\u5230\u5bb9\u5668\u8fdb\u7a0b\u6240\u5bf9\u5e94\u7684UID\u5e76\u975e0\u7684root\u7528\u6237\u800c\u662f10000+\u4ee5\u4e0a\u7684\u666e\u901a\u7528\u6237<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-8-1024x325.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"325\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-8-1024x325.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-943\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">MNT NameSpace<\/h4>\n\n\n\n<p>MntNS \u7528\u4e8e\u9694\u79bb\u4e0d\u540c\u8fdb\u7a0b\u7684\u6302\u8f7d\u70b9\u89c6\u56fe\uff08mount\u8868\u4e2d\u7684\u5185\u5bb9\uff09\uff0c\u4e5f\u5c31\u662f\u8bf4\u6bcf\u4e2a\u5bb9\u5668\u5bf9\u5e94\u4e00\u4e2a\u72ec\u7acb\u7684MntNS\u4e0d\u540c\u7684MntNS\u6302\u8f7d\u4e0d\u540c\u7684mount\u8868\uff0c\u5e76\u4e14\u5f7c\u6b64\u770b\u4e0d\u5230\u6302\u8f7d\u70b9\uff0c\u5728\u5bb9\u5668\u5185\u7684\u6302\u8f7d\u64cd\u4f5c\u4e0d\u4f1a\u5f71\u54cd\u5bbf\u4e3b\u673a\u7684\u6302\u8f7d\u76ee\u5f55\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-11-1024x722.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"722\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-11-1024x722.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-946\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u521b\u5efa\u4e00\u4e2a\u6587\u4ef6\u5939\uff0c\u7136\u540e\u8fdb\u5165MntNS\u4e2d\uff0c\u5c06tmpfs\u5185\u5b58\u6587\u4ef6\u7cfb\u7edf\u6302\u8f7d\u5230\u65b0\u5efa\u6587\u4ef6\u5939\u4e2d\uff0c\u6b64\u540e\u6240\u6709\u5bf9\u8be5\u76ee\u5f55\u7684\u64cd\u4f5c\u90fd\u6307\u5411\u5185\u5b58\u6587\u4ef6\u7cfb\u7edf\u800c\u975e\u76ee\u5f55\u672c\u8eab\uff0c\u91cd\u62c9\u4e00\u4e2a\u7ec8\u7aef\u65e0\u6cd5\u770b\u5230\u65b0\u5efa\u7684\u6587\u4ef6\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-9-1024x390.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"390\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-9-1024x390.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-944\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-10.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"645\" height=\"209\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-10.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-945\"  sizes=\"auto, (max-width: 645px) 100vw, 645px\" \/><\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">PID NameSpace<\/h4>\n\n\n\n<p>PIDNS\u53ef\u4ee5\u7528\u6765\u9694\u79bb\u8fdb\u7a0b\uff0c\u4e14\u4e0d\u540c\u547d\u540d\u7a7a\u95f4\u4e2d\u53ef\u4ee5\u6709\u76f8\u540cpid\u3002\u5728\u540c\u4e00\u4e2aNameSpace\u4e2d\u53ea\u80fd\u770b\u5230\u5f53\u524d\u547d\u540d\u7a7a\u95f4\u7684\u8fdb\u7a0b\u3002<\/p>\n\n\n\n<p>\u8fdb\u5165\u65b0\u521b\u5efa\u7684\u547d\u540d\u7a7a\u95f4\u4e2d\u6ca1\u6709\u591a\u5c11\u8fdb\u7a0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-12.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"948\" height=\"228\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-12.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-947\"  sizes=\"auto, (max-width: 948px) 100vw, 948px\" \/><\/div><\/figure>\n\n\n\n<p>\u5bbf\u4e3b\u673a\u4e0a\u5219\u6709\u5f88\u591a\u7684\u8fdb\u7a0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-13-1024x826.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"826\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-13-1024x826.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-948\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">IPC NameSpace<\/h4>\n\n\n\n<p>IPCNS\u7528\u4e8e\u9694\u79bb\u8fdb\u7a0b\u95f4\u901a\u4fe1\u8d44\u6e90\uff0c\u4f7f\u4e0d\u540c namespace \u7684\u8fdb\u7a0b\u65e0\u6cd5\u901a\u8fc7 IPC \u673a\u5236\uff08\u5982\u5171\u4eab\u5185\u5b58\u3001\u6d88\u606f\u961f\u5217\u3001\u4fe1\u53f7\u91cf\uff09\u8fdb\u884c\u4ea4\u4e92\u3002\u6bcf\u4e2aIPCNS\u62e5\u6709\u72ec\u7acb\u7684 IPC \u8d44\u6e90\u8868\uff0c\u5728\u65b0\u5efa\u7684\u547d\u540d\u7a7a\u95f4\u4e2dIPC\u8868\u9ed8\u8ba4\u4e3a\u7a7a\uff0c\u56e0\u6b64\u4e0e\u5bbf\u4e3b\u673a\u53ca\u5176\u4ed6 namespace \u5b8c\u5168\u9694\u79bb\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-14-1024x692.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"692\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-14-1024x692.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-949\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Net NameSpace<\/h4>\n\n\n\n<p>NetNS\u5b9e\u73b0\u4e86\u7f51\u7edc\u7684\u9694\u79bb\uff0c\u6bcf\u4e2anet\u547d\u540d\u7a7a\u95f4\u6709\u72ec\u7acb\u7684\u7f51\u7edc\u8bbe\u5907\u3001IP\u5730\u5740\u3001\u8def\u7531\u8868\u3001\/proc\/net\u76ee\u5f55\u3002\u8fd9\u6837\u6bcf\u4e2a\u5bb9\u5668\u7684\u7f51\u7edc\u5c31\u80fd\u9694\u79bb\u5f00\u6765\u3002Docker \u9ed8\u8ba4\u4f7f\u7528 veth pair\uff08\u6210\u5bf9\u7684\u865a\u62df\u7f51\u7edc\u63a5\u53e3\uff0c\u4e00\u7aef\u53d1\u9001\u7684\u6570\u636e\u4f1a\u4ece\u53e6\u4e00\u7aef\u63a5\u6536\uff09\u5b9e\u73b0\u5bb9\u5668\u7f51\u7edc\u3002\u521b\u5efa\u5bb9\u5668\u65f6\uff0c\u4f1a\u751f\u6210\u4e00\u5bf9 veth\uff0c\u5c06\u5bb9\u5668\u5185\u7684\u865a\u62df\u7f51\u5361\uff08eth0\uff09\u4e0e\u5bbf\u4e3b\u673a\u4e0a\u7684 veth \u63a5\u53e3\u76f8\u8fde\uff0c\u5e76\u5c06\u8be5\u5bbf\u4e3b\u673a\u7aef\u63a5\u53e3\u52a0\u5165\u5230 Linux \u7f51\u6865 docker0 \u4e2d\u3002docker0 \u4f5c\u4e3a\u865a\u62df\u4ea4\u6362\u673a\uff0c\u5b9e\u73b0\u5bb9\u5668\u4e0e\u5bbf\u4e3b\u673a\u4ee5\u53ca\u5bb9\u5668\u4e4b\u95f4\u7684\u7f51\u7edc\u901a\u4fe1\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u5bb9\u56681 \u2500\u2510\n\u5bb9\u56682 \u2500\u253c\u2500\u2500 docker0\uff08\u4ea4\u6362\u673a\uff09\u2500\u2500 \u5bbf\u4e3b\u673a\n\u5bb9\u56683 \u2500\u2518<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-15-1024x840.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"840\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-15-1024x840.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-950\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">UTS NameSpace<\/h4>\n\n\n\n<p>UTSNS\u547d\u540d\u7a7a\u95f4\u5141\u8bb8\u6bcf\u4e2a\u5bb9\u5668\u62e5\u6709\u72ec\u7acb\u7684hostname\u548cdomain name\uff0c\u4f7f\u5176\u5728\u7f51\u7edc\u4e0a\u53ef\u4ee5\u88ab\u89c6\u4f5c\u4e00\u4e2a\u72ec\u7acb\u7684\u8282\u70b9\u800c\u975e\u4e3b\u673a\u4e0a\u7684\u4e00\u4e2a\u8fdb\u7a0b\u3002\uff08\u7f51\u7edc\u73af\u5883\u4e2d\u4e00\u53f0\u4e3b\u673a\u5e38\u7528hostname\u548cIP\u5730\u5740\u6765\u6807\u8bc6\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-16-1024x166.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"166\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-16-1024x166.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-953\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Docker\u8054\u5408\u6587\u4ef6\u7cfb\u7edf<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">UnionFS<\/h4>\n\n\n\n<p>Union \u6587\u4ef6\u7cfb\u7edf\u662f\u4e00\u79cd\u652f\u6301\u591a\u5c42\u53e0\u52a0\u7684\u6587\u4ef6\u7cfb\u7edf\u673a\u5236\uff0c\u53ef\u4ee5\u5c06\u591a\u4e2a\u76ee\u5f55\u5408\u5e76\u4e3a\u4e00\u4e2a\u7edf\u4e00\u7684\u6587\u4ef6\u7cfb\u7edf\u89c6\u56fe\u3002\u5b83\u91c7\u7528\u5199\u65f6\u590d\u5236\u673a\u5236\uff0c\u5bf9\u6587\u4ef6\u7684\u4fee\u6539\u4f1a\u5728\u65b0\u7684\u53ef\u5199\u5c42\u4e2d\u8fdb\u884c\uff0c\u800c\u4e0d\u4f1a\u5f71\u54cd\u5e95\u5c42\u53ea\u8bfb\u5c42\uff0c\u4ece\u800c\u5b9e\u73b0\u8f7b\u91cf\u3001\u9ad8\u6548\u7684\u5b58\u50a8\u548c\u7ba1\u7406\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-17.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1008\" height=\"328\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-17.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-956\"  sizes=\"auto, (max-width: 1008px) 100vw, 1008px\" \/><\/div><\/figure>\n\n\n\n<p>bootfs\u4e3b\u8981\u5305\u62ecbootloader\u548ckernel\uff0c\u662fDocker\u955c\u50cf\u7684\u6700\u5e95\u5c42\u3002Linux\u521a\u521a\u542f\u52a8\u7684\u65f6\u5019\u4f1a\u52a0\u8f7dbootfs\u6587\u4ef6\u7cfb\u7edf\u3002\u5f53boot\u52a0\u8f7d\u5b8c\u6bd5\u4e4b\u540e\uff0c\u6574\u4e2a\u7cfb\u7edf\u7684\u5185\u6838\u5c31\u5728\u5185\u5b58\u91cc\u9762\u8dd1\u8d77\u6765\u4e86\uff0c\u6b64\u65f6\u5185\u5b58\u7684\u4f7f\u7528\u6743\u7531bootf\u8f6c\u4ea4\u7ed9\u5185\u6838\uff0c\u7cfb\u7edf\u4e5f\u4f1a\u5378\u8f7dbootfs\u3002<br>\u5927\u90e8\u5206\u64cd\u4f5c\u7cfb\u7edf\u5e95\u5c42\u6240\u4f7f\u7528\u7684\u5185\u6838\u57fa\u672c\u4e0a\u90fd\u662f\u4e00\u81f4\u7684\uff0crootfs\u4f1a\u6709\u5dee\u522b\u3002\u5e38\u89c1\u7684Docker\u955c\u50cf\u4e2drootfs\u6709\u8c03\u8d77\u5185\u6838\u7684\u57fa\u672c\u547d\u4ee4\u5de5\u5177\uff0c\u800c\u5185\u6838\u4f7f\u7528\u7684\u662f\u5bbf\u4e3b\u673a\u7684\u5185\u6838\u3002<\/p>\n\n\n\n<p>\u5f53pull\u4e00\u4e2a\u7eaf\u51c0\u7684Centos:7\u955c\u50cf\uff0c\u90a3\u4e48\u5176Layers\u5c31\u53ea\u6709\u4e00\u5c42\uff0c\u5c31\u662frootfs\u5c42<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-18-1024x143.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"143\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-18-1024x143.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-957\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-19.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"943\" height=\"107\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-19.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-958\"  sizes=\"auto, (max-width: 943px) 100vw, 943px\" \/><\/div><\/figure>\n\n\n\n<p>\u6240\u6709\u7684Docker\u955c\u50cf\u90fd\u8d77\u59cb\u4e8e\u4e00\u4e2a\u57fa\u7840\u955c\u50cf\uff0c\u5f53\u8fdb\u884c\u4fee\u6539\u6216\u589e\u52a0\u65b0\u7684\u5185\u5bb9\u65f6\uff0c\u5c31\u4f1a\u5728\u5f53\u524d\u955c\u50cf\u5c42\u4e4b\u4e0a\uff0c\u521b\u5efa\u65b0\u7684\u955c\u50cf\u5c42\u3002<strong>\u6240\u6709\u7684\u57fa\u7840\u955c\u50cf\u90fd\u662f\u53ea\u8bfb\u7684<\/strong>\uff0c\u65e0\u6cd5\u5199\u5165\uff0c\u5982\u679c\u6b64\u65f6\u5b89\u88c5\u4e86\u4e00\u4e2apython\uff0c\u5bb9\u5668\u4f1a\u521b\u5efa\u65b0\u7684\u4e00\u5c42\u8fdb\u884c\u5199\u5165\uff0c\u5199\u5165\u5b8c\u6210\u6253\u5305\u955c\u50cf\uff0c\u6b64\u65f6\u8fd9\u4e00python\u5c42\u4e5f\u53d8\u6210\u4e86\u53ea\u8bfb\u65e0\u6cd5\u5199\u5165\u3002<br>Docker\u955c\u50cf\u90fd\u662f\u53ea\u8bfb\u7684\uff0c\u5f53\u5bb9\u5668\u542f\u52a8\u65f6\uff0c\u4e00\u4e2a\u65b0\u7684\u53ef\u5199\u5c42\u88ab\u52a0\u8f7d\u5230\u955c\u50cf\u7684\u9876\u90e8\u3002<br>\u5f53Docker\u8fdb\u884c\u8f6f\u4ef6\u5347\u7ea7\uff0c\u5b83\u65b0\u7684\u6587\u4ef6\u662f\u8986\u76d6\u4e86\u65e7\u6587\u4ef6\u5417\uff1f\u5728Docker\u4e2d\u8f6f\u4ef6\u5347\u7ea7\u7684\u65f6\u5019\uff0cDocker\u4f1a\u628a\u65e7\u7684\u6587\u4ef6\u590d\u5236\u5230\u53ef\u5199\u5c42\uff0c\u5728\u590d\u5236\u7684\u6587\u4ef6\u4e0a\u8fdb\u884c\u4fee\u6539\uff0c\u7136\u540e\u4e0a\u5c42\u6587\u4ef6\u4f1a\u8986\u76d6\u4e0b\u5c42\u7684\u663e\u793a\uff0c\u6b64\u65f6\u4e0a\u5c42\u5c31\u662f\u66f4\u65b0\u597d\u7684\u8f6f\u4ef6\uff0c\u4e0b\u5c42\u65e7\u7248\u672c\u7684\u8f6f\u4ef6\u4f9d\u65e7\u5b58\u5728\u4f46\u662f\u88ab\u4e0a\u5c42\u906e\u4f4f\u4e86\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Docker\u5b58\u50a8\u9a71\u52a8<\/h3>\n\n\n\n<p>Docker\u6700\u5f00\u59cb\u91c7\u7528AUFS\u4f5c\u4e3a\u6587\u4ef6\u7cfb\u7edf\uff0c\u4e5f\u5f97\u76ca\u4e8eAUFS\u5206\u5c42\u7684\u6982\u5ff5\uff0c\u5b9e\u73b0\u4e86\u591a\u4e2aContainer\u53ef\u4ee5\u5171\u4eab\u540c\u4e00\u4e2aimage\u3002\u4f8b\u5982\u6709\u4e00\u4e2a\u955c\u50cf\uff1aUbuntu + Python\uff0c\u542f\u52a8\u4e09\u4e2a\u5bb9\u5668A\u3001\u5bb9\u5668B\u3001\u5bb9\u5668C\uff0c\u4e09\u4e2a\u5bb9\u5668\u90fd\u4f1a\u65b0\u589e\u4e00\u4e2a\u53ef\u5199\u5c42\uff0c\u6b64\u65f6\u7684\u5e95\u5c42\u53ea\u9700\u8981\u5b58\u50a8\u4e00\u4efdUbuntu + Python\u7684\u53ea\u8bfb\u5c42\u5373\u53ef\u3002<\/p>\n\n\n\n<p>Docker\u652f\u6301\u7684\u5b58\u50a8\u9a71\u52a8\u7c7b\u578b\u6709AUFS\u3001Btrfs\u3001Device mapper\u3001Overlay FS\u3001ZFS\u7b49\u5b58\u50a8\u9a71\u52a8\u3002\u6240\u6709\u7684\u9a71\u52a8\u90fd\u91c7\u7528\u5199\u65f6\u590d\u5236\u6280\u672f\uff08Cow\uff09\u3002<br>\u5199\u65f6\u590d\u5236\uff1a\u6240\u6709\u7684\u6570\u636e\u90fd\u4eceimage\u4e2d\u8fdb\u884c\u8bfb\u53d6\uff0c\u53ea\u6709\u5f53\u8981\u5bf9\u6587\u4ef6\u8fdb\u884c\u5199\u64cd\u4f5c\u65f6\uff0c\u624d\u4eceimage\u91cc\u628a\u8981\u5199\u7684\u6587\u4ef6\u590d\u5236\u5230\u81ea\u5df1\u7684\u6587\u4ef6\u7cfb\u7edf\u8fdb\u884c\u4fee\u6539\u3002<br>\u7528\u65f6\u590d\u5236\uff1a\u53ea\u6709\u5728\u8981\u5199\u65b0\u5199\u5165\u4e00\u4e2a\u6587\u4ef6\u65f6\u624d\u5206\u914d\u7a7a\u95f4\uff0c\u8fd9\u6837\u53ef\u4ee5\u63d0\u9ad8\u5b58\u50a8\u8d44\u6e90\u7684\u5229\u7528\u7387\uff0c\u6bd4\u5982\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668\uff0c\u5e76\u4e0d\u4f1a\u4e3a\u8fd9\u4e2a\u5bb9\u5668\u9884\u5206\u914d\u4e00\u4e9b\u78c1\u76d8\u7a7a\u95f4\uff0c\u800c\u662f\u5f53\u6709\u65b0\u6587\u4ef6\u5199\u5165\u65f6\uff0c\u624d\u6309\u9700\u5206\u914d\u65b0\u7a7a\u95f4\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">AUFS<\/h4>\n\n\n\n<p>AUFS\u662f\u4e00\u79cdUnion FS\uff0c\u6587\u4ef6\u7ea7\u7684\u5b58\u50a8\u9a71\u52a8\u3002AUFS\u53ef\u4ee5\u4e00\u5c42\u4e00\u5c42\u7684\u53e0\u52a0\u4fee\u6539\u6587\u4ef6\uff0c\u4f46\u662f\u65e0\u8bba\u5e95\u4e0b\u591a\u5c11\u5c42\u90fd\u662fread only\uff0c<strong>\u53ea\u6709\u6700\u4e0a\u4e00\u5c42\u7684\u6587\u4ef6\u7cfb\u7edf\u662f\u53ef\u4ee5\u8bfb\u5199\u7684<\/strong>\u3002\u5f53\u9700\u8981\u4fee\u6539\u4e00\u4e2a\u6587\u4ef6\u65f6\uff0cAUFS\u521b\u5efa\u8be5\u6587\u4ef6\u7684\u526f\u672c\uff0c\u4f7f\u7528CoW\u5c06\u6587\u4ef6\u4ece\u53ea\u8bfb\u5c42\u590d\u5236\u5230\u53ef\u5199\u5c42\u8fdb\u884c\u4fee\u6539\uff0c\u7ed3\u679c\u4e5f\u4fdd\u5b58\u5728\u53ef\u5199\u5c42\u3002<br><strong>Docker\u4e2d\u6240\u8c13\u7684\u53ea\u8bfb\u5c42\u5c31\u662f\u6211\u4eecpull\u4e0b\u6765\u7684image\uff0c\u800c\u53ef\u5199\u5c42\u5c31\u662f\u6211\u4eec\u8fd0\u884c\u7684Container\u3002<\/strong><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Overlay FS<\/h4>\n\n\n\n<p>Overlay\u662fLinux\u5185\u68383.18\u4e4b\u540e\u652f\u6301\u7684\uff0c\u5b83\u4e5f\u662f\u4e00\u79cdUnionFS\u4e0eAUFS\u4e0d\u540c\u7684\u662fOverlay\u53ea\u6709\u4e24\u5c42\uff0c<strong>upper\u6587\u4ef6\u7cfb\u7edf<\/strong>\u548c<strong>lower\u6587\u4ef6\u7cfb\u7edf<\/strong>\uff0c\u5206\u522b\u4ee3\u8868Docker\u7684\u955c\u50cf\u5c42\u548c\u5bb9\u5668\u5c42\u3002\u5f53\u9700\u8981\u4fee\u6539\u4e00\u4e2a\u6587\u4ef6\u65f6\uff0c\u4f7f\u7528CoW\u5c06\u6587\u4ef6\u4ece\u53ea\u8bfb\u7684Lower\u590d\u5236\u5230\u53ef\u5199\u7684upper\u8fdb\u884c\u4fee\u6539\uff0c\u7ed3\u679c\u4e5f\u4fdd\u5b58\u5728upper\u5c42\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-20.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1019\" height=\"289\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-20.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-959\"  sizes=\"auto, (max-width: 1019px) 100vw, 1019px\" \/><\/div><\/figure>\n\n\n\n<p>\u57fa\u7840\u67b6\u6784<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-21-1024x662.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"662\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-21-1024x662.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-960\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-22.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"702\" height=\"348\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-22.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-961\"  sizes=\"auto, (max-width: 702px) 100vw, 702px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fdb\u884c\u6302\u8f7d<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>mount -t overlay overlay -o lowerdir=lower1:lower2:lower3,upperdir=upper,workdir=work merged<\/code><\/pre>\n\n\n\n<p>\u6b64\u65f6\u53d1\u751f\u53d8\u5316\uff0cupper\u5c42\u663e\u793a\u8986\u76d6\u4e86lower\u5c42\u7684\u663e\u793a\u56e0\u6b64\u5728merged\u6302\u8f7d\u5c42\u6211\u4eec\u53ef\u4ee5\u770b\u5230\uff0c\u663e\u793a\u7684description.txt\u5185\u5bb9\u662fthisislower2\uff0clower2.sh\u5219\u662fdeepmountains\uff0c\u800cupper\u5c42\u4e0d\u5b58\u5728lower1.sh\u548clower3.sh\u6240\u4ee5\u76f4\u63a5\u663e\u793alower\u5c42\u4e2d\u7684lower1.sh\u548clower3.sh\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-23.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"806\" height=\"518\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-23.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-962\"  sizes=\"auto, (max-width: 806px) 100vw, 806px\" \/><\/div><\/figure>\n\n\n\n<p>\u6b64\u65f6\u5982\u679c\u5220\u9664upper\u76ee\u5f55\u4e0b\u7684upper.txt\uff0c\u90a3\u4e48merged\u6302\u8f7d\u70b9\u4e0b\u7684up.txt\u4e5f\u4f1a\u76f4\u63a5\u88ab\u5220\u9664\uff0c\u56e0\u4e3alower\u5c42\u4e0d\u5b58\u5728upper.txt\uff1b<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-24.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"938\" height=\"807\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-24.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-963\"  sizes=\"auto, (max-width: 938px) 100vw, 938px\" \/><\/div><\/figure>\n\n\n\n<p><br>\u6b64\u65f6\u5982\u679c\u5220\u9664\u4e86lower2.sh\u548clower3.sh\u6b64\u65f6\u4f1a\u5148\u5220\u9664upper\u5c42\u4e2d\u5bf9\u5e94\u7684lower2.sh\u548clower3.sh\u4f46\u662flower\u5c42\u8fd8\u5b58\u5728lower2.sh\u548clower3.sh\u90a3\u4e48upper\u5c42\u5c31\u4f1a\u521b\u5efawhiteout\u7279\u6b8a\u6587\u4ef6\u6807\u8bb0\u544a\u8bc9\u7cfb\u7edf\u8fd9\u4e2a\u6587\u4ef6\u5728merged\u91cc\u5e94\u8be5\u770b\u4e0d\u5230\uff08\u88ab\u5c4f\u853d\uff09\u3002\u5728 Docker \u4e2d\uff0c\u5bb9\u5668\u7684\u6587\u4ef6\u7cfb\u7edf\u57fa\u4e8e\u5206\u5c42\u7ed3\u6784\uff0c\u5e95\u5c42\u955c\u50cf\u5c42\u662f\u53ea\u8bfb\u7684\u3002\u5f53\u5728\u5bb9\u5668\u4e2d\u6267\u884c\u5220\u9664\u64cd\u4f5c\u65f6\uff0c\u5e76\u4e0d\u4f1a\u771f\u6b63\u5220\u9664\u955c\u50cf\u5c42\u4e2d\u7684\u6587\u4ef6\uff0c\u800c\u662f\u5728\u5bb9\u5668\u7684\u53ef\u5199\u5c42\uff08container layer\uff09\u4e2d\u521b\u5efa whiteout \u6587\u4ef6\uff0c\u4ece\u800c\u5728\u5408\u5e76\u89c6\u56fe\uff08merged\uff09\u4e2d\u5c4f\u853d\u5bf9\u5e94\u7684\u5e95\u5c42\u6587\u4ef6\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-25.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"926\" height=\"804\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-25.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-964\"  sizes=\"auto, (max-width: 926px) 100vw, 926px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-26.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"965\" height=\"228\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-26.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-965\"  sizes=\"auto, (max-width: 965px) 100vw, 965px\" \/><\/div><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">BtrFS<\/h4>\n\n\n\n<p>BtrFS\u88ab\u79f0\u4e3a\u4e0b\u4e00\u4ee3\u6587\u4ef6\u7cfb\u7edf\uff0c\u867d\u7136\u5b83\u7684\u5b58\u5728\u5df2\u7ecf\u6709\u5341\u591a\u5e74\u4e86\uff0c\u5b83\u5177\u5907\u666e\u901a\u6587\u4ef6\u7cfb\u7edf\u7684\u6240\u6709\u7279\u6027\uff0c\u8fd8\u56ca\u62ec\u4e86\u5377\u7ba1\u7406\u7684\u7279\u6027\uff0c\u53ef\u4ee5\u5b9e\u73b0\u5bf9\u591a\u4e2a\u78c1\u76d8\u7684\u7ba1\u7406\u3001\u53ef\u4ee5\u521b\u5efa\u5b50\u5377\u3001\u6253\u5feb\u7167\u7b49\u7b49\uff0c\u540c\u65f6\u8fd8\u80fd\u591f\u5bf9\u6570\u636e\u8fdb\u884c\u52a0\u5bc6\u548c\u538b\u7f29\u3002Btrfs\u6587\u4ef6\u7cfb\u7edf\u51e0\u4e4e\u662f\u65e0\u6240\u4e0d\u80fd\uff0c\u4f46\u662f\u6b63\u56e0\u4e3a\u529f\u80fd\u592a\u591a\u6240\u4ee5\u76f8\u5bf9\u800c\u8a00\u7684\u7a33\u5b9a\u6027\u5c31\u4e0d\u662f\u5f88\u597d\u3002<br>Btrfs\u628a\u4e00\u4e2a\u6253\u7684\u6587\u4ef6\u7cfb\u7edf\u5f53\u6210\u4e00\u4e2a\u8d44\u6e90\u6c60\uff0c\u5f62\u6210\u591a\u4e2a\u5b8c\u6574\u7684\u5b50\u6587\u4ef6\u7cfb\u7edf<br>\u5f53\u5199\u5165\u4e00\u4e2a\u65b0\u6587\u4ef6\u65f6\u4f1a\u5728\u5bb9\u5668\u7684\u5feb\u7167\u91cc\u5206\u914d\u4e00\u4e2a\u65b0\u7684\u6570\u636e\u5757\uff0c\u6587\u4ef6\u5199\u5728\u8fd9\u4e2a\u7a7a\u95f4\u91cc\uff0c\u91c7\u7528\u7528\u65f6\u5206\u914d\u673a\u5236<br>\u5f53\u8981\u4fee\u6539\u5df2\u6709\u6587\u4ef6\u65f6\uff0c\u4f7f\u7528CoW\u590d\u5236\u5206\u914d\u4e00\u4e2a\u65b0\u7684\u539f\u59cb\u6570\u636e\u548c\u5feb\u7167\uff0c\u539f\u6765\u7684\u539f\u59cb\u6570\u636e\u548c\u5feb\u7167\u6ca1\u6709\u6307\u9488\u6307\u5411\u88ab\u8986\u76d6\u3002<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Docker\u7f51\u7edc\u5e95\u5c42<\/h4>\n\n\n\n<p>Docker\u7684\u7f51\u7edc\u5b9e\u73b0\u5176\u5b9e\u5c31\u662f\u5229\u7528\u4e86Linux\u4e0a\u7684\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u548c\u865a\u62df\u7f51\u7edc\u8bbe\u5907veth\uff0c<strong>veth\u7684\u4e3b\u8981\u529f\u80fd\u662f\u5b9e\u73b0\u8de8NerNS\u4e4b\u95f4\u63d0\u4f9b\u4e00\u79cd\u7c7b\u4f3c\u4e8eLinux\u8fdb\u7a0b\u901a\u4fe1\u7684\u6280\u672f<\/strong>\uff0cveth-pair\u8bbe\u5907\u63a5\u53e3\u5728\u672c\u5730\u4e3b\u673a\u548c\u5bb9\u5668\u5185\u5206\u522b\u521b\u5efa\u4e00\u4e2a\u865a\u62df\u63a5\u53e3\uff0c\u8fd9\u4e24\u4e2a\u63a5\u53e3\u4e4b\u95f4\u53ef\u4ee5\u5f7c\u6b64\u4e4b\u95f4\u5b9e\u73b0\u6570\u636e\u5305\u7684\u8f6c\u53d1\uff0c\u5e76\u4e14\u5728\u8f6c\u53d1\u7684\u8fc7\u7a0b\u4e2d\u4e0d\u4f1a\u7be1\u6539\u6570\u636e\u5305\u7684\u5185\u5bb9\u3002<\/p>\n\n\n\n<p><strong>\u5bb9\u5668\u7f51\u7edc\u521d\u59cb\u5316\u6d41\u7a0b<\/strong><br>1.Docker\u4f1a\u521b\u5efa\u4e00\u5bf9\u865a\u62df\u63a5\u53e3\uff0c\u5206\u522b\u653e\u5728\u672c\u5730\u4e3b\u673a\u548c\u65b0\u5bb9\u5668\u4e0a<br>2.\u63a5\u53e3\u4e00\u7aef\u5728\u672c\u5730\u4e3b\u673a\u6865\u63a5\u5230\u9ed8\u8ba4\u7684docker0\u4e0a\u6216\u5b9a\u5236\u7f51\u6865\u4e0a\uff0c\u5e76\u5177\u6709\u4e00\u4e2a\u552f\u4e00\u7684\u540d\u5b57\u4f8b\u5982\uff1avethfc27151@if4<br>3.\u63a5\u53e3\u53e6\u4e00\u7aef\u653e\u5230\u65b0\u5bb9\u5668\u4e2d\uff0c\u5e76\u4fee\u6539\u540d\u5b57\u4f5c\u4e3aeth0\uff0c\u8fd9\u4e2a\u63a5\u53e3\u53ea\u5728\u5bb9\u5668\u7684\u547d\u540d\u7a7a\u95f4\u53ef\u89c1<br>4.\u6b64\u65f6Docker\u4ece\u7f51\u6865\u53ef\u7528\u5730\u5740\u6bb5\u4e2d\u83b7\u53d6\u4e00\u4e2a\u7a7a\u95f2\u5730\u5740\u5206\u914d\u7ed9\u5bb9\u5668\u7684eth0@if5\u7f51\u5361\uff0c\u5e76\u914d\u7f6e\u9ed8\u8ba4\u8def\u7531\u5230\u5bbf\u4e3b\u673a\u7684\u6865\u63a5\u7f51\u5361\uff1avethfc27151@if4<\/p>\n\n\n\n<p>\u5bb9\u5668\u4e2d\u7f51\u5361eth0@if59\u662f\u865a\u62df\u63a5\u53e3\u4e00\u7aef\uff0c\u53e6\u4e00\u7aefvethc0c1ea1@if58\u63a5\u5728docker0\u4e0a\uff0cdocker0\u53c8\u901a\u8fc7\u4e3b\u673aeth0\u8fdb\u884c\u4e0a\u7f51\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-28-1024x905.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"905\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-28-1024x905.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-967\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-27-1024x296.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"296\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-27-1024x296.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-966\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>&#91;Container Namespace]\n    eth0@if59\n        \u2502\n        \u2502  veth pair\n        \u25bc\n&#91;Host Namespace]\n    vethc0c1ea1@if58\n        \u2502\n        \u25bc\n    docker0 (bridge)\n        \u2502\n        \u25bc\n   eth0 (host NIC)\n        \u2502\n        \u25bc\n     Internet<\/code><\/pre>\n\n\n\n<p>docker\u4e2d\u7f51\u7edc\u63d0\u4f9b\u4e86\u4e94\u79cd\u6a21\u5f0f\uff1aBridge\u3001Host\u3001Container\u3001None\u3001Overtly<br>\u901a\u8fc7docker run\u547d\u4ee4\u4e2d\u7684&#8211;net\u53c2\u6570\u80fd\u591f\u914d\u7f6e\u7684\u7f51\u5361\u6a21\u5f0f\u6709\u4ee5\u4e0b\u56db\u79cd<br>1.&#8211;net=bridge\uff1a\u8fd9\u4e2a\u662f\u9ed8\u8ba4\u503c\uff0c\u8fde\u63a5\u5230\u9ed8\u8ba4\u7f51\u6865<br>2.&#8211;net=host\uff1a\u544a\u8bc9Docker\u4e0d\u8981\u5c06\u5bb9\u5668\u7f51\u7edc\u653e\u5230\u9694\u79bb\u7684\u547d\u540d\u7a7a\u95f4\u4e2d<br>3.&#8211;net=container:NAME_or_ID\uff1a\u8ba9Docker\u5c06\u65b0\u5efa\u5bb9\u5668\u7684\u8fdb\u7a0b\u653e\u5230\u4e00\u4e2a\u5df2\u5b58\u5728\u5bb9\u5668\u7684\u7f51\u7edc\u6808\u4e2d\uff0c\u65b0\u5bb9\u5668\u8fdb\u7a0b\u6709\u81ea\u5df1\u7684\u6587\u4ef6\u7cfb\u3001\u8fdb\u7a0b\u5217\u8868\u548c\u8d44\u6e90\u9650\u5236\uff0c\u4f46\u4f1a\u548c\u5df2\u5b58\u5728\u7684\u5bb9\u5668\u5171\u4eabIP\u5730\u5740\u548c\u7aef\u53e3\u7b49\u7f51\u7edc\u8d44\u6e90\uff0c\u4e24\u8005\u8fdb\u7a0b\u53ef\u4ee5\u76f4\u63a5\u901a\u8fc7lo\u73af\u56de\u63a5\u53e3\u901a\u4fe1\u3002<br>4.&#8211;net=none\uff1a\u8ba9Docker\u5c06\u65b0\u5bb9\u5668\u653e\u5230\u9694\u79bb\u7684\u7f51\u7edc\u6808\u4e2d\uff0c\u4f46\u662f\u4e0d\u8fdb\u884c\u7f51\u7edc\u914d\u7f6e\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">K8s<\/h2>\n\n\n\n<h1 class=\"wp-block-heading\">\u5bb9\u5668\u9003\u9038<\/h1>\n\n\n\n<p>\u5728Windows\u548cLInux\u4e2d\uff0c\u4e0d\u540c\u7684\u8fdb\u7a0b\u548c\u670d\u52a1\u7531\u4e0d\u540c\u7528\u6237\u6743\u9650\u6216\u670d\u52a1\u6743\u9650\u8fd0\u884c<br>Linux\u4e2d\uff1aApache2 -&gt; www-data\uff1bsystemd -&gt; root<br>Windows\u4e2d\uff1aSQL Server -&gt; NETWORK SERVICE\uff1blsass.exe -&gt;  SYSTEM<br>Linux\u4e2d\u62ff\u5230root\u6743\u9650\uff0cWindows\u4e2d\u62ff\u5230Administrator\u6216SYSTEM\u6743\u9650\u5373\u6743\u9650\u63d0\u5347<\/p>\n\n\n\n<p>\u5982\u679c\u83b7\u53d6\u4e86\u5bb9\u5668\u7684\u63a7\u5236\u6743\u9650\uff0c\u5f53\u524d\u7684\u6743\u9650\u662froot\u5417\uff1f<br>\u547d\u540d\u7a7a\u95f4\u63d0\u4f9b\u4e86\u6700\u57fa\u7840\u4e5f\u662f\u6700\u76f4\u63a5\u7684\u9694\u79bb\uff0c\u5728\u5bb9\u5668\u4e2d\u8fd0\u884c\u7684\u8fdb\u7a0b\u4e0d\u4f1a\u88ab\u8fd0\u884c\u5728\u4e3b\u673a\u4e0a\u7684\u8fdb\u7a0b\u548c\u5176\u4ed6\u5bb9\u5668\u53d1\u73b0\u3002\u968f\u7740Linux\u7cfb\u7edf\u5bf9\u4e8e\u547d\u540d\u7a7a\u95f4\u529f\u80fd\u7684\u5b8c\u5584\u5b9e\u73b0\uff0c\u8fdb\u7a0b\u4f1a\u5728\u5f7c\u6b64\u9694\u79bb\u7684\u547d\u540d\u7a7a\u95f4\u4e2d\u8fd0\u884c\u3002\u5927\u5bb6\u867d\u7136\u90fd\u516c\u7528\u540c\u4e00\u4e2a\u5185\u6838\u548c\u67d0\u4e9b\u8fd0\u884c\u65f6\u73af\u5883\uff0c\u4f46\u662f\u5f7c\u6b64\u770b\u4e0d\u5230\u90fd\u4ee5\u4e3a\u7cfb\u7edf\u4e2d\u53ea\u6709\u81ea\u5df1\u7684\u5b58\u5728\u3002<br>\u5728\u5bb9\u5668\u5b89\u5168\u673a\u5236\u4e2d\uff0cUser Namespace\uff08\u7528\u6237\u547d\u540d\u7a7a\u95f4\uff09\u7684\u5f15\u5165\uff0c\u4f7f\u5f97\u5bb9\u5668\u5185\u90e8\u7684\u7528\u6237\u4e0e\u5bbf\u4e3b\u673a\u7528\u6237\u4e4b\u95f4\u5f62\u6210\u4e86\u4e00\u79cd\u201c\u6620\u5c04\u5173\u7cfb\u201d\u3002\u901a\u5e38\u60c5\u51b5\u4e0b\uff0c\u5bb9\u5668\u5185\u7684 root \u7528\u6237\uff08UID 0\uff09\u5e76\u4e0d\u7b49\u540c\u4e8e\u5bbf\u4e3b\u673a\u4e0a\u7684 root\uff0c\u800c\u662f\u88ab\u6620\u5c04\u4e3a\u5bbf\u4e3b\u673a\u4e0a\u7684\u4e00\u4e2a\u666e\u901a\u7528\u6237 UID\uff08\u4f8b\u5982 100000 \u4ee5\u4e0a\u7684\u533a\u95f4\uff09\u3002\u8fd9\u610f\u5473\u7740\uff1a\u5373\u4f7f\u653b\u51fb\u8005\u83b7\u53d6\u4e86\u5bb9\u5668\u7684\u63a7\u5236\u6743\u9650\uff0c\u5e76\u6210\u529f\u63d0\u6743\u4e3a\u5bb9\u5668\u5185\u7684 root \u7528\u6237\uff0c\u5176\u6743\u9650\u5b9e\u9645\u4e0a\u4ecd\u7136\u53d7\u5230\u5bbf\u4e3b\u673a\u7528\u6237\u6743\u9650\u7684\u9650\u5236\u3002\u56e0\u6b64\uff0c\u5bb9\u5668\u5185\u7684 root \u5e76\u4e0d\u5177\u5907\u771f\u6b63\u7684\u201c\u8d85\u7ea7\u7528\u6237\u201d\u80fd\u529b\uff0c\u5177\u4f53\u4f53\u73b0\u5728\u4ee5\u4e0b\u51e0\u4e2a\u65b9\u9762<br>\u9996\u5148\uff0c\u5728\u6587\u4ef6\u8bbf\u95ee\u6743\u9650\u4e0a\uff0c\u5bb9\u5668 root \u53ea\u80fd\u8bbf\u95ee\u5176\u6620\u5c04 UID \u5728\u5bbf\u4e3b\u673a\u4e0a\u6709\u6743\u9650\u8bbf\u95ee\u7684\u6587\u4ef6\u3002\u5982\u679c\u67d0\u4e9b\u76ee\u5f55\u6216\u6587\u4ef6\u662f\u4ee5\u5bbf\u4e3b\u673a root\uff08UID 0\uff09\u6743\u9650\u521b\u5efa\uff0c\u5e76\u4e14\u6ca1\u6709\u5bf9\u6620\u5c04 UID \u5f00\u653e\u6743\u9650\uff0c\u90a3\u4e48\u5373\u4f7f\u5728\u5bb9\u5668\u4e2d\u662f root \u7528\u6237\uff0c\u4e5f\u65e0\u6cd5\u8bfb\u53d6\u6216\u4fee\u6539\u8fd9\u4e9b\u6587\u4ef6\u3002\u5176\u6b21\uff0c\u5bf9\u4e8e\u6302\u8f7d\u5230\u5bb9\u5668\u4e2d\u7684\u76ee\u5f55\uff08\u4f8b\u5982\u901a\u8fc7 bind mount \u6302\u8f7d\u7684\u5bbf\u4e3b\u673a\u8def\u5f84\uff09\uff0c\u5176\u8bbf\u95ee\u63a7\u5236\u4f9d\u7136\u9075\u5faa\u5bbf\u4e3b\u673a\u7684\u6743\u9650\u6a21\u578b\u3002\u5982\u679c\u8be5\u76ee\u5f55\u5728\u5bbf\u4e3b\u673a\u4e0a\u4ec5\u5141\u8bb8 root \u8bbf\u95ee\uff0c\u90a3\u4e48\u5bb9\u5668\u4e2d\u7684 root\uff08\u6620\u5c04\u4e3a\u666e\u901a\u7528\u6237\uff09\u540c\u6837\u65e0\u6cd5\u8bbf\u95ee\u3002\u6700\u540e\uff0c\u5728\u7cfb\u7edf\u64cd\u4f5c\u5c42\u9762\uff0c\u5bb9\u5668 root \u4e5f\u65e0\u6cd5\u6267\u884c\u9700\u8981\u771f\u6b63 root \u6743\u9650\u7684\u64cd\u4f5c\uff0c\u4f8b\u5982\u52a0\u8f7d\u5185\u6838\u6a21\u5757\u3001\u4fee\u6539\u5bbf\u4e3b\u673a\u5185\u6838\u53c2\u6570\u6216\u76f4\u63a5\u64cd\u4f5c\u5bbf\u4e3b\u673a\u8bbe\u5907\u7b49\u3002<br><strong>\u6240\u8c13\u7684Docker\u9003\u9038\u5176\u5b9e\u5c31\u662f\u6253\u7834\u8fd9\u9053\u865a\u62df\u5c4f\u969c\uff0c\u901a\u8fc7\u5bb9\u5668\u6765\u83b7\u5f97\u5177\u5907\u5b9e\u8d28\u6027\u6743\u9650\u7684\u5bbf\u4e3b\u673a\u7684root\u8d26\u53f7<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Dockers API\u672a\u6388\u6743\u8bbf\u95ee\u9003\u9038<\/h2>\n\n\n\n<p>Swarm behavior\u662f\u6307\u52a8\u7269\u7684\u7fa4\u96c6\u884c\u4e3a\u3002\u6bd4\u5982\u6211\u4eec\u5e38\u89c1\u7684\u8702\u7fa4\u3001\u9c7c\u7fa4\uff0c\u79cb\u5929\u5f80\u5357\u98de\u7684\u71d5\u7fa4\u90fd\u53ef\u4ee5\u79f0\u4e3aSwarm behavior\u3002Swarm\u9879\u76ee\u6b63\u662f\u5982\u6b64\uff0c\u901a\u8fc7\u628a\u591a\u4e2aDocker Engine\u805a\u96c6\u5728\u4e00\u8d77\uff0c\u5f62\u6210\u4e00\u4e2a\u5927\u7684Docker Engine\uff0c\u5bf9\u5916\u63d0\u4f9b\u5bb9\u5668\u7684\u96c6\u7fa4\u670d\u52a1\u3002Swarm\u662f\u975e\u5e38\u8f7b\u91cf\u7ea7\u7684Docker\u5bb9\u5668\u7ba1\u7406\u5de5\u5177\uff0c\u7f3a\u70b9\u5c31\u662f\u592a\u8f7b\u91cf\u4e86\u5f88\u591a\u529f\u80fd\u90fd\u6ca1\u6709\u3002<\/p>\n\n\n\n<p>\u5728docker.service\u7684ExecStart\u542f\u52a8\u9879\u4e2d\u589e\u52a0-H tcp:\/\/0.0.0.0:2375\uff0c\u91cd\u8f7d\u670d\u52a1\u91cd\u542fdocker\u521d\u59cb\u5316docker swarm init<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-30-1024x372.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"372\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-30-1024x372.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-972\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>API\u63a5\u53e3\uff1a\u8bbf\u95eehttp:\/\/192.168.75.133:2375\/containers\/json\uff0c\u5c31\u53ef\u4ee5\u5f97\u5230\u8be5Docker\u670d\u52a1\u5668\u4e0a\u8fd0\u884c\u7684docker\u5bb9\u5668\u5217\u8868\u4ee5\u53ca\u5bb9\u5668\u7684\u914d\u7f6e\u4fe1\u606f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-32-1024x553.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"553\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-32-1024x553.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-977\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5728\u54cd\u5e94\u7684\u6570\u636e\u5305\u4e2d\u4f1a\u5305\u542b\u4e00\u4e2aID\u901a\u8fc7\u8be5ID\u7684\u503c\u53ef\u4ee5\u5bf9\u8bf7\u6c42\u547d\u4ee4\u6267\u884c\u7684\u7ed3\u679c\uff0c\u8fd9\u91cc\u6267\u884c\u4e00\u4e2a\u521b\u5efa\/tmp\/deepmountains\u76ee\u5f55\u7684\u64cd\u4f5c\uff0c\u663e\u793a201\u5e76\u4e14\u8fd4\u56de\u4e00\u4e2a\u5bb9\u5668ID\u5373\u6210\u529f\u6d3e\u53d1\u4efb\u52a1\uff0c\u9700\u8981\u62ff\u7740\u8fd9\u4e2a\u5bb9\u5668ID\u53bbstart\u6fc0\u6d3b\u4efb\u52a1<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>POST \/exec\/64aab56dd6e0d8919a77bdabb99efffefe281509061c88b3928cf74b66a45de9\/exec \n{\n\"AttachStdin\":true,\n\"AttachStdout\":true,\n\"AttachStderr\":true,\n\"Cmd\":&#91;\n\"touch\",\n\"\/tmp\/deepmontains\"\n],\n\"DetachKeys\":\"ctrl-p,ctrl-q\",\n\"Privileged\":true,\n\"Tty\":true\n}<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-35-1024x751.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"751\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-35-1024x751.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-983\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>\/exec\/ffbf7ff8b0d714d178383664731acf3a91340c2dc90a0dedcd3e02ce67a22daa\/start \n{\n  \"Detach\": false,\n  \"Tty\": false\n}<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-36-1024x751.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"751\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-36-1024x751.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-984\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-37.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"869\" height=\"258\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-37.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-985\"  sizes=\"auto, (max-width: 869px) 100vw, 869px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e0a\u9762\u73af\u5883\u7684\u6d4b\u8bd5\u8fc7\u7a0b\u4e2d\uff0c\u6211\u4eec\u53ef\u4ee5\u53d1\u73b0\u901a\u8fc7Swarm API\u63a5\u53e3\u53ef\u4ee5\u5bf9docker\u670d\u52a1\u5bb9\u5668\u7b49\u76f8\u5173\u5185\u5bb9\u8fdb\u884c\u64cd\u7eb5\u3002\u901a\u8fc7\u53d1\u9001\u6570\u636e\u5305\u662f\u4e00\u79cd\u65b9\u5f0f\uff0c\u66f4\u7b80\u5355\u7684\u53ef\u4ee5\u76f4\u63a5\u901a\u8fc7docker  Client\u6765\u5b8c\u6210\u64cd\u4f5c\uff08Client\u662f\u6307\u88c5\u6709docker\u7684\u4efb\u610f\u4e00\u53f0\u8bbe\u5907\uff09<\/p>\n\n\n\n<p>\u901a\u8fc7API\u76f4\u63a5\u67e5\u770bdocker\u670d\u52a1\u5668\u4e0a\u7684\u955c\u50cf\u5217\u8868<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-39-1024x617.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"617\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-39-1024x617.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-987\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u901a\u8fc7API\u62c9\u8d77\u4e00\u4e2a\u5bb9\u5668\u6302\u8f7d\u6839\u76ee\u5f55\u5230\u5bb9\u5668\u4e2d\u8fdb\u884c\u67e5\u770b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-40-1024x537.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"537\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-40-1024x537.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-992\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-41-1024x182.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"182\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-41-1024x182.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-993\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5728\u5bb9\u5668\u6302\u8f7d\u7684\u6839\u76ee\u5f55\u7684\/etc\u4e0b\u8bbe\u7f6e\u5b9a\u65f6\u4efb\u52a1\u4fee\u6539bash\u7684\u8f6f\u94fe\u63a5\u4e3a\/bin\/sh\u786e\u4fdd\u540e\u7eed\u83b7\u53d6\u7684shell\u90fd\u662fbash\u800c\u975esh\uff0c\u7136\u540e\u5199\u5165\u53cd\u5f39shell<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-42-1024x101.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"101\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-42-1024x101.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-995\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>\u52a0\u56fa\u65b9\u6cd5<\/strong><\/p>\n\n\n\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0bdocker\u5b88\u62a4\u8fdb\u7a0b\u7ed1\u5b9a\u5230\u975e\u8054\u7f51\u7684\u5957\u63a5\u5b57\uff0c\u5e76\u4ee5root\u6743\u9650\u8fd0\u884c\u3002\u4f46\u662f\u5982\u679c\u5c06\u9ed8\u8ba4\u7684docker\u5b88\u62a4\u8fdb\u7a0b\u66f4\u6539\u4e3a\u7ed1\u5b9a\u5230TCP\u7aef\u53e3\u6216\u8005\u5176\u4ed6\u4efb\u4f55Unix\u5957\u63a5\u5b57\u3002\u90a3\u4e48\u4efb\u4f55\u6709\u8bbf\u95ee\u8be5\u7aef\u53e3\u6216\u5957\u63a5\u5b57\u7684\u4eba\u90fd\u53ef\u4ee5\u5b8c\u5168\u8bbf\u95eedocker\u5b88\u62a4\u8fdb\u7a0b\uff0c\u4ece\u6e90\u5934\u4e0a\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0c\u5982\u679c\u5fc5\u987b\u901a\u8fc7\u7f51\u7edc\u5957\u63a5\u5b57\u66b4\u9732docker\u5b88\u62a4\u8fdb\u7a0b\uff0c\u5efa\u8bae\u4e3a\u5b88\u62a4\u8fdb\u7a0b\u548cdocker swarm api\u914d\u7f6eTLS\u8eab\u4efd\u9a8c\u8bc1\u3002<\/p>\n\n\n\n<p><strong>\u53ef\u4ee5\u9009\u62e9\u53bb\u9664swarm\u7684\u529f\u80fd\u82e5\u4e00\u5b9a\u8981\u5f00\u542f\u5219\u8fdb\u884c\u4ee5\u4e0b\u914d\u7f6e<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-43-1024x344.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"344\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-43-1024x344.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-996\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-44.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"933\" height=\"255\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-44.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-997\"  sizes=\"auto, (max-width: 933px) 100vw, 933px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Docker\u914d\u7f6e\u9879\u9519\u8bef\u5bfc\u81f4\u9003\u9038<\/h2>\n\n\n\n<p>\u5f53\u7ba1\u7406\u5458\u6267\u884c<strong>docker run &#8211;privileged<\/strong>\u6216\u8005\u5728docker -compose\u914d\u7f6e\u6587\u4ef6\u4e2d<strong>\u914d\u7f6e&#8221;privileged:true&#8221;<\/strong>\uff0cDocker\u5bb9\u5668\u5c06\u88ab\u5141\u8bb8\u8bbf\u95ee\u4e3b\u673a\u4e0a\u7684\u6240\u6709\u8bbe\u5907\uff0c\u5e76\u53ef\u4ee5\u6267\u884cmount\u547d\u4ee4\u8fdb\u884c\u6302\u8f7d\u3002\u8fd9\u91cc\u901a\u8fc7fdisk -l\u67e5\u770b\u78c1\u76d8\u5927\u5c0f\u3001\u5206\u533a\u683c\u5f0f\u5224\u65ad\u51fa\u5bbf\u4e3b\u673a\u6839\u76ee\u5f55\u7684\u5206\u533a\u7136\u540e\u5c06\u5bbf\u4e3b\u673a\u7684\u6839\u5206\u533a\u6302\u8f7d\u5f53deepmountains\u6587\u4ef6\u5939\u4e0b\u5373\u53ef\u83b7\u53d6\u5bbf\u4e3b\u673a\u7269\u7406\u8bbf\u95ee\u6743\u9650\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-45-1024x734.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"734\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-45-1024x734.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-998\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>Docker\u5bb9\u5668\u88ab\u5141\u8bb8\u6302\u8f7d\u5bbf\u4e3b\u673a\u7684cgroup\u4f1a\u5bfc\u81f4\u547d\u4ee4\u6267\u884c\u7684\u53d1\u751f\uff08cgroup\u7684rdma\u5b50\u7cfb\u7edf\u6302\u8f7d\u4e0d\u4e0a\u5f85\u9a8c\u8bc1\uff09<\/p>\n\n\n\n<p><strong>Docker \u7279\u6743\u5bb9\u5668\u9003\u9038\u4e2d\u7ecf\u5178\u7684 <code>cgroup release_agent<\/code> \u6f0f\u6d1e\u5229\u7528<\/strong><br>1.<code>notify_on_release<\/code>: \u5f53\u4e00\u4e2a cgroup\uff08\u63a7\u5236\u7ec4\uff09\u4e2d\u7684\u6700\u540e\u4e00\u4e2a\u8fdb\u7a0b\u9000\u51fa\u65f6\uff0c\u5982\u679c\u8fd9\u4e2a\u5f00\u5173\u662f <code>1<\/code>\uff0c\u5185\u6838\u5c31\u4f1a\u6536\u5230\u901a\u77e5\u3002<br><code>2.release_agent<\/code>: \u8fd9\u662f\u4e00\u4e2a\u8def\u5f84\u914d\u7f6e\u3002\u5f53\u4e0a\u8ff0\u901a\u77e5\u89e6\u53d1\u65f6\uff0c\u5bbf\u4e3b\u673a\u5185\u6838\u4f1a\u81ea\u52a8\u8fd0\u884c\u8fd9\u4e2a\u8def\u5f84\u4e0b\u7684\u7a0b\u5e8f\u6765\u201c\u6e05\u7406\u73b0\u573a\u201d\u3002<br>3.<code>release_agent<\/code> \u91cc\u7684\u811a\u672c\u662f\u7531\u5bbf\u4e3b\u673a\u5185\u6838\u76f4\u63a5\u8c03\u7528\u7684\uff0c\u62e5\u6709\u5bbf\u4e3b\u673a\u7684 root \u6743\u9650\u3002<\/p>\n\n\n\n<p>\u4e0b\u4e0b\u9762\u6267\u884c\u547d\u4ee4\u4e2d<code>notify_on_release<\/code>\uff1a\u544a\u8bc9\u5185\u6838\uff0c\u201cx\u201d\u8fd9\u4e2a\u7ec4\u6ca1\u4eba\u4e86\u5c31\u53eb\u6211\u3002\u5bb9\u5668\u5185\u7684\u6587\u4ef6 <code>\/cmd<\/code>\uff0c\u5728\u5bbf\u4e3b\u673a\u770b\u6765\u8def\u5f84\u662f\u4e0d\u4e00\u6837\u7684\uff08\u6bd4\u5982\u5728\u5bbf\u4e3b\u673a\u7684 <code>\/var\/lib\/docker\/overlay2\/...\/diff\/cmd<\/code>\uff09\u3002\u901a\u8fc7 <code>sed<\/code> \u547d\u4ee4\u4ece <code>mtab<\/code> \u6620\u5c04\u4e2d\u627e\u51fa\u8fd9\u4e2a\u201c\u5bbf\u4e3b\u673a\u89c6\u89d2\u201d\u7684\u771f\u5b9e\u8def\u5f84\u3002\u5199\u5165 <code>release_agent<\/code>\uff1a\u544a\u8bc9\u5185\u6838\uff0c\u201c\u6e05\u7406\u73b0\u573a\u201d\u65f6\u8bf7\u6267\u884c\u5bbf\u4e3b\u673a\u8def\u5f84\u4e0b\u7684\u90a3\u4e2a <code>cmd<\/code>\u3002\u8fd9\u91cc\u7684\u547d\u4ee4 <code>ps aux<\/code> \u5728\u88ab\u5185\u6838\u8c03\u7528\u6267\u884c\u65f6\uff0c\u770b\u5230\u7684\u5c06\u662f\u5bbf\u4e3b\u673a\u7684\u6240\u6709\u8fdb\u7a0b\uff08&#8211;privileged\u53c2\u6570\u8ba9release_agent\u88ab\u4fee\u6539\uff0crelease_agent\u672c\u8eab\u6ca1\u6709NameSpace\u7ea6\u675f\u4e0d\u4f1a\u6743\u9650\u964d\u7ea7\uff0c\u5185\u6838\u4e00\u5b9a\u4f1a\u4ee5root\u8eab\u4efd\u8c03\u7528release_agent\uff09\u7ed3\u679c\u4f1a\u5199\u56de\u5230\u5bb9\u5668\u5185\u7684 <code>\/output<\/code>\u3002\u6700\u540e\u70b9\u706b\u5904\u5411 <code>x<\/code> \u7ec4\u5199\u5165\u4e00\u4e2a\u8fdb\u7a0b ID\uff08\u5373\u5f53\u524d\u7684 <code>sh<\/code> \u8fdb\u7a0b\uff09\uff0c\u7531\u4e8e\u8fd9\u4e2a <code>sh<\/code> \u6267\u884c\u5b8c <code>echo<\/code> \u5c31\u7acb\u5373\u9000\u51fa\u4e86\uff0c\u8be5 cgroup \u77ac\u95f4\u53d8\u4e3a\u7a7a\u3002\u8fde\u9501\u53cd\u5e94\uff1a\u8fdb\u7a0b\u9000\u51fa -&gt; \u89e6\u53d1 <code>notify_on_release<\/code> -&gt; \u5185\u6838\u67e5\u627e <code>release_agent<\/code> -&gt; \u5bbf\u4e3b\u673a\u6267\u884c <code>\/cmd<\/code>\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-46-1024x406.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"406\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-46-1024x406.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1001\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5f53\u7ba1\u7406\u5458\u6302\u5728\u4e86docker.sock\u81f3\u5bb9\u5668\u7684\u76ee\u5f55\u4e2d\uff0c\u90a3\u4e48\u53ef\u4ee5\u76f4\u63a5\u5728\u5bb9\u5668\u4e2d\u6267\u884c\u5bb9\u5668\u7684\u547d\u4ee4\u3002daemon\u9ed8\u8ba4\u76d1\u542c\u7684\u662f\/var\/run\/docker.sock\u8fd9\u4e2a\u5957\u63a5\u5b57\u6587\u4ef6\uff0c\u6240\u4ee5docker\u5ba2\u6237\u7aef\u53ea\u8981\u628a\u8bf7\u6c42\u53d1\u5f80\u8fd9\u91cc\uff0cdaemon\u5c31\u80fd\u6536\u5230\u5e76\u505a\u51fa\u54cd\u5e94\uff0c\u6bd4\u5982\u5b9e\u73b0docker ps\uff0cdocker images\u8fd9\u6837\u7684\u6548\u679c\u3002<\/p>\n\n\n\n<p>\u5728 Docker \u67b6\u6784\u91cc\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u7ec4\u4ef6<\/th><th>\u672c\u8d28<\/th><\/tr><\/thead><tbody><tr><td>docker CLI<\/td><td>\u5ba2\u6237\u7aef\u5de5\u5177\uff08\u53ef\u6709\u53ef\u65e0\uff09<\/td><\/tr><tr><td>docker daemon\uff08dockerd\uff09<\/td><td>\u771f\u6b63\u63a7\u5236\u5bb9\u5668\u7684\u670d\u52a1<\/td><\/tr><tr><td>docker.sock<\/td><td>dockerd \u7684 API \u63a5\u53e3<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>docker CLI\u672c\u8d28\u53ea\u662f\u628a\u547d\u4ee4\u7ffb\u8bd1\u6210 HTTP API \u8bf7\u6c42\uff0cdocker ps = GET \/containers\/json\uff0c\u8fd9\u91cc\u5c06\/usr\/bin\/docker\u4e00\u5e76\u6302\u8f7d\u4e86\u4e5f\u5c31\u662f\u8bf4\u5c06Docker CLI\u4e00\u5e76\u6302\u8f7d\u8fdb\u53bb\u4e86\u3002\u4f46\u662f\u5176\u5b9e\u6709docker.sock\u5c31\u8db3\u591f\u53ef\u4ee5\u7b49\u4ef7\u53d1\u9001curl &#8211;unix-socket \/var\/run\/docker.sock http:\/\/localhost\/containers\/json\u8bf7\u6c42\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-47-1024x348.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"348\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-47-1024x348.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1004\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>\u6302\u8f7d\u7ea0\u6b63\uff1a<\/strong>\u4e0d\u5e94\u5141\u8bb8\u5c06\u654f\u611f\u7684\u4e3b\u673a\u7cfb\u7edf\u76ee\u5f55\uff08\/boot \/dev \/etc \/lib \/proc \/sys \/usr\uff09\u4f5c\u4e3a\u5bb9\u5668\u5377\u8fdb\u884c\u6302\u8f7d\uff0c\u7279\u522b\u662f\u5728\u8bfb\u5199\u6a21\u5f0f\u4e0b\u3002\u5982\u679c\u654f\u611f\u76ee\u5f55\u4ee5\u8bfb\u5199\u65b9\u5f0f\u6302\u8f7d\uff0c\u5219\u53ef\u4ee5\u5bf9\u8fd9\u4e9b\u654f\u611f\u76ee\u5f55\u4e2d\u7684\u6587\u4ef6\u8fdb\u884c\u66f4\u6539\u3002\u8fd9\u4e9b\u66f4\u6539\u53ef\u80fd\u4f1a\u964d\u4f4e\u5b89\u5168\u6027\u751a\u81f3\u53ef\u80fd\u9020\u6210docker\u9003\u9038\u3002<\/p>\n\n\n\n<p><strong>\u4f46\u662f\u5bb9\u5668\u4e2d\u67d0\u4e9b\u547d\u4ee4\u6267\u884c\u5fc5\u987b\u8981privilege\u7684\u6743\u9650\u5c31\u6bd4\u5982\u8def\u7531\u7684\u5220\u9664\u7b49<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CVE-2019-5736 runc\u6f0f\u6d1e\u9003\u9038<\/h2>\n\n\n\n<p>RunC\u662f\u4e00\u4e2a\u8f7b\u91cf\u7ea7\u7684\u5de5\u5177\uff0c\u5b83\u662f\u7528\u6765\u8fd0\u884c\u5bb9\u5668\u7684\uff0c\u53ea\u7528\u6765\u505a\u8fd9\u4e00\u4ef6\u4e8b\u3002\u5b83\u662f\u4e00\u4e2a\u547d\u4ee4\u884c\u5c0f\u5de5\u5177\uff0c\u53ef\u4ee5\u4e0d\u540c\u901a\u8fc7docker\u5f15\u64ce\u76f4\u63a5\u8fd0\u884c\u5bb9\u5668\u3002\u76ee\u524ddocker\u5f15\u64ce\u5185\u90e8\u4e5f\u662f\u5c45\u4e8erunc\u6784\u5efa\u7684\u3002\u8be5\u6f0f\u6d1e\u5141\u8bb8\u6076\u610f\u5bb9\u5668\uff08\u4ee5\u6700\u5c11\u7684\u4ea4\u4e92\uff09\u8986\u76d6host\u4e0a\u7684runc\u6587\u4ef6\uff0c\u4ece\u800c\u5728host\u4e0a\u4ee5root\u6743\u9650\u8fd0\u884c\u4ee3\u7801<br><strong>docker version &lt;= 18.09.2<\/strong><br><strong>Runc version &lt;=1.0-rc6<\/strong><\/p>\n\n\n\n<p>Runc\u662fdocker\u5e95\u5c42\u6267\u884c\u5668\u8d1f\u8d23\u521b\u5efa\u5bb9\u5668namesapce\u6267\u884cdocker exec\u4e14runc\u662f\u8fd0\u884c\u5728\u5bbf\u4e3b\u673a\u4e0a\u7684root\u8fdb\u7a0b\uff0c\u8be5\u6f0f\u6d1e\u7684\u6838\u5fc3\u5728\u4e8e runc \u5728\u6267\u884c\u5bb9\u5668\u8fdb\u7a0b\uff08create\/exec\uff09\u65f6\uff0c\u4f1a\u4e34\u65f6\u4ee5\u5bbf\u4e3b\u673a\u6743\u9650\u64cd\u4f5c\u81ea\u8eab\u53ef\u6267\u884c\u6587\u4ef6\uff08\/usr\/bin\/runc\uff09\uff0cLinux \u7684 <code>\/proc\/self\/exe<\/code> \u5141\u8bb8\u8fdb\u7a0b\u8bbf\u95ee\u201c\u5f53\u524d\u6b63\u5728\u6267\u884c\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u201d\u3002\u653b\u51fb\u53d1\u751f\u5728\u5bbf\u4e3b\u673a runc \u6267\u884c\u5bb9\u5668 create\/exec \u751f\u547d\u5468\u671f\u8fc7\u7a0b\u4e2d\uff0c\u5229\u7528\u8fd9\u4e2a\u65f6\u95f4\u7a97\u53e3\uff0c\u4ee5\u5199\u65b9\u5f0f\u6253\u5f00 <code>\/proc\/self\/exe<\/code>\uff0c\u800c\u8be5\u8def\u5f84\u5728\u8be5\u4e0a\u4e0b\u6587\u4e2d\u5b9e\u9645\u6307\u5411\u5bbf\u4e3b\u673a\u4e0a\u7684 runc \u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u4ece\u800c\u53d1\u751f\u7ade\u6001\u6761\u4ef6\u8986\u76d6\uff0c\u5c06\u5bbf\u4e3b\u673a runc \u66ff\u6362\u4e3a\u6076\u610f\u4ee3\u7801\u3002\u4e4b\u540e\u5bbf\u4e3b\u673a\u518d\u6b21\u8c03\u7528 runc \u65f6\uff0c\u5c31\u4f1a\u6267\u884c\u88ab\u690d\u5165\u7684 payload\uff0c\u4ece\u800c\u5b9e\u73b0\u4ece\u5bb9\u5668\u9003\u9038\u5230\u5bbf\u4e3b\u673a root \u6743\u9650\u6267\u884c\u3002<\/p>\n\n\n\n<p>\u5b9e\u9a8c\u73af\u5883<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-50-1024x622.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"622\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-50-1024x622.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1009\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e0b\u8f7dPOC<a href=\"https:\/\/github.com\/Frichetten\/CVE-2019-5736-PoC\">https:\/\/github.com\/Frichetten\/CVE-2019-5736-PoC<\/a>\u66f4\u6539payload<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-53-1024x187.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"187\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-53-1024x187.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1012\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>payload\u8fdb\u884cgo\u7f16\u8bd1\uff0c<a href=\"https:\/\/www.jianshu.com\/p\/c43ebab25484\">https:\/\/www.jianshu.com\/p\/c43ebab25484<\/a>\u53c2\u8003\u94fe\u63a5\uff0c\u62c9\u8d77\u4e00\u4e2adocker\u5c06payload\u8fdb\u884c\u6302\u8f7d<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-52-1024x410.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"410\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-52-1024x410.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1011\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u9700\u8981\u5f15\u8bf1root\u7528\u6237\u53bb\u8fdb\u5165\u6076\u610f\u5bb9\u5668\u4e2d\uff0c\u91cd\u65b0\u8c03\u7528runc\u5bfc\u81f4\u6f0f\u6d1e\u89e6\u53d1\u53cd\u5f39shell<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-54-1024x120.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"120\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-54-1024x120.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1013\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u4f46\u662f\u6211\u8fd9\u91cc\u4e0d\u77e5\u9053\u4e3a\u4ec0\u4e48\u4e00\u76f4\u6ca1\u6709\u80fd\u591f\u53cd\u5f39shell<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-55-1024x447.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"447\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-55-1024x447.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1014\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">CVE-2020-15257 Containerd\u9003\u9038<\/h2>\n\n\n\n<p>Docker\uff1a\u5ba2\u6237\u7aef\u5de5\u5177\uff0c\u7528\u6765\u628a\u7528\u6237\u7684\u8bf7\u6c42\u53d1\u9001\u7ed9docker daemon\uff08dockerd\uff09<br>Dockerd\uff1a\u4e5f\u79f0\u4e3adocker engine\uff0cdockerd\u542f\u52a8\u65f6\u4f1a\u542f\u52a8containerd\u5b50\u8fdb\u7a0b\u3002<br>Containerd\uff1a\u5728\u5bbf\u4e3b\u673a\u4e2d\u7ba1\u7406\u5bb9\u5668\u751f\u547d\u5468\u671f\uff0c\u5982\u5bb9\u5668\u955c\u50cf\u7684\u4f20\u8f93\u548c\u5b58\u50a8\u3001\u5bb9\u5668\u7684\u6267\u884c\u548c\u7ba1\u7406\u3001\u5b58\u50a8\u548c\u7f51\u7edc\u7b49<br>1.\u7ba1\u7406\u5bb9\u5668\u7684\u751f\u547d\u5468\u671f\uff08\u4ece\u521b\u5efa\u5bb9\u5668\u5230\u9500\u6bc1\u5bb9\u5668\uff09<br>2.\u62c9\u53d6\/\u63a8\u9001\u5bb9\u5668\u955c\u50cf<br>3.\u5b58\u50a8\u7ba1\u7406\uff08\u7ba1\u7406\u955c\u50cf\u53ca\u5bb9\u5668\u6570\u636e\u7684\u5b58\u50a8\uff09<br>4.\u8c03\u7528runC\u8fd0\u884c\u5bb9\u5668\uff08\u4e0erunC\u7b49\u5bb9\u5668\u8fd0\u884c\u65f6\u4ea4\u4e92\uff09<br>5.\u7ba1\u7406\u5bb9\u5668\u7f51\u7edc\u63a5\u53e3\u53ca\u7f51\u7edc<br>Containerd-shim\uff1acontainerd\u5185\u90e8\u4f7f\u7528containerd-shim\uff0c\u6ca1\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668\u90fd\u4f1a\u521b\u5efa\u4e00\u4e2a\u65b0\u7684containerd-shim\u8fdb\u7a0b\uff0c\u6307\u5b9a\u5bb9\u5668ID\uff0cBundle\u76ee\u5f55\uff0c\u8fd0\u884c\u65f6\u7684\u4e8c\u8fdb\u5236\uff08\u6bd4\u5982runc\uff09<br>RunC\uff1a\u8f7b\u91cf\u7ea7\u7684\u5de5\u5177\uff0c\u7528\u6765\u8fd0\u884c\u5bb9\u5668\u7684\uff0c\u6211\u4eec\u53ef\u4ee5\u4e0d\u7528\u901a\u8fc7docker\u5f15\u64ce\uff0c\u76f4\u63a5\u8fd0\u884c\u5bb9\u5668\u3002\u4e8b\u5b9e\u4e0a\uff0crunC\u65f6\u6807\u51c6\u5316\u7684\u4ea7\u7269\uff0c\u5b83\u6839\u636eOCI\u6807\u51c6\u6765\u521b\u5efa\u548c\u8fd0\u884c\u5bb9\u5668\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-48.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"557\" height=\"459\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-48.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1007\"  sizes=\"auto, (max-width: 557px) 100vw, 557px\" \/><\/div><\/figure>\n\n\n\n<p><strong>Docker\u5185\u90e8\u901a\u4fe1\u56fe<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-61-1024x483.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"483\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-61-1024x483.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1022\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>CVE-2020-15257 \u662f\u7531\u4e8e containerd-shim \u7684 TTRPC socket \u88ab\u9519\u8bef\u66b4\u9732\u5230\u5bb9\u5668\u53ef\u8bbf\u95ee\u7684 namespace \u4e2d\uff0c\u5bfc\u81f4\u5bb9\u5668\u5185\u8fdb\u7a0b\u53ef\u4ee5\u76f4\u63a5\u8fde\u63a5 shim IPC \u63a5\u53e3\u3002\u7531\u4e8e shim \u8fd0\u884c\u5728 host \u4e0a\u5e76\u4ee5 root \u6743\u9650\u6267\u884c\uff0c\u4e14\u672a\u5bf9\u8c03\u7528\u65b9\u8fdb\u884c\u8eab\u4efd\u8ba4\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u4f2a\u9020 containerd \u8c03\u7528 shim \u7684 RPC\uff08\u51fd\u6570\u540d+\u53c2\u6570\u6253\u5305\u5e8f\u5217\u5316\u53d1\u9001\u7ed9\u53e6\u4e00\u4e2a\u8fdb\u7a0b\u6267\u884c\uff09 \u63a5\u53e3\uff08\u5982 task\/exec\/process start\uff09\uff0c\u4ece\u800c\u5728 host namespace \u4e2d\u521b\u5efa\u8fdb\u7a0b\uff0c\u5b9e\u73b0\u5bf9\u5bbf\u4e3b\u673a\u7684\u4ee3\u7801\u6267\u884c\uff0c\u6700\u7ec8\u5bfc\u81f4\u5bb9\u5668\u9003\u9038\u3002<\/strong><\/p>\n\n\n\n<p><strong>\u5229\u7528\u6761\u4ef6\uff1a\u5f53\u4e00\u4e2a\u6076\u610f\u5bb9\u5668\u540c\u6837\u5904\u4e8e\u4e3b\u673a\u7684\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u4e2d\uff0c\u8be5\u5bb9\u5668\u5185\u7684root\u7528\u6237\uff0c\u53ef\u4ee5\u901a\u8fc7\u8b6c\u5982netstat -xl\u6216\u8005\/proc\/net\/unix\u6765\u626b\u63cf\uff0c\u627e\u5230containerd-shim\u7684\u5957\u63a5\u5b57\uff0c\u7136\u540e\u8fde\u63a5containerd-shim\u7684API\u4ee5\u6267\u884c\u547d\u4ee4\u3002<\/strong><br><strong>docker\u5bb9\u5668\u4ee5<code>--net=host<\/code>&nbsp;\u542f\u52a8<strong>\u4f1a\u66b4\u9732containerd-shim \u76d1\u542c\u7684<\/strong>Unix\u5957\u63a5\u5b57<\/strong><\/p>\n\n\n\n<p>cat \/proc\/net\/unix | grep &#8216;containerd-shim&#8217; | grep &#8220;@&#8221;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-62-1024x154.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"154\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-62-1024x154.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1023\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5bb9\u5668\u4ee5&#8211;net=host\u6253\u5f00\u53d1\u73b0contained-shim API\u66b4\u9732<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-63-1024x182.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"182\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-63-1024x182.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1024\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u5229\u7528POC\u8fdb\u884c\u5bb9\u5668\u9003\u9038<a href=\"https:\/\/github.com\/Xyntax\/CDK\/releases\/download\/0.1.6\/cdk_v0.1.6_release.tar.gz\">https:\/\/github.com\/Xyntax\/CDK\/releases\/download\/0.1.6\/cdk_v0.1.6_release.tar.gz<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-65-1024x451.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"451\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-65-1024x451.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1026\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u53ef\u4ee5\u770b\u5230\u53cd\u5f39shell\u6210\u529f\u62ff\u5230\u5bbf\u4e3b\u673aroot<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-64-1024x664.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"664\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-64-1024x664.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1025\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">\u5bb9\u5668\u52a0\u56fa<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">Docker\u4e3b\u673a\u4fa7\u52a0\u56fa<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">\u5ba1\u8ba1Docker\u5b88\u62a4\u8fdb\u7a0b<\/h3>\n\n\n\n<p>\u7531\u4e8eDocker\u5b88\u62a4\u8fdb\u7a0b\u662f\u4ee5root\u6743\u9650\u8fd0\u884c\uff0c\u56e0\u6b64\u6709\u5fc5\u8981\u5ba1\u8ba1\u5176\u6d3b\u52a8\u548c\u4f7f\u7528\u60c5\u51b5\u3002\u5ba1\u8ba1\u4fe1\u606f\u4f1a\u5728\/var\/log\/audit\u4e0b\u4ea7\u751f\u5927\u91cf\u7684\u65e5\u5fd7\u6587\u4ef6\u3002\u9700\u8981\u4fdd\u8bc1\u8fd9\u4e9b\u65e5\u5fd7\u6587\u4ef6\u80fd\u591f\u88ab\u5b9a\u671f\u7684\u8f6e\u6362\u548c\u5b58\u6863\u3002\u6b64\u5916\u8fd8\u9700\u8981\u521b\u5efa\u4e00\u4e2a\u5355\u72ec\u7684\u5ba1\u8ba1\u5206\u533a\uff0c\u4ee5\u907f\u514d\u586b\u5145\u6839\u6587\u4ef6\u7cfb\u7edf\u3002<\/p>\n\n\n\n<p>yum\u4e0b\u8f7daudit\u7136\u540e\u8fdb\u884c\u914d\u7f6e\u6dfb\u52a0\u5185\u5bb9\u91cd\u542fauditd<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-73-1024x393.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"393\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-73-1024x393.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1040\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>\u8be5\u89c4\u5219\u7528\u4e8e\u76d1\u63a7\u5bbf\u4e3b\u673a\u4e0a\u5bf9 docker CLI\uff08\u4e8c\u8fdb\u5236\u6587\u4ef6\uff09\u7684\u6267\u884c\u884c\u4e3a\uff0c\u53ef\u4ee5\u8bb0\u5f55\u7528\u6237\u6267\u884c docker \u547d\u4ee4\u7684\u60c5\u51b5<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-74-1024x595.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"595\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-74-1024x595.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1041\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5ba1\u8ba1docker\u6587\u4ef6\u53ca\u76ee\u5f55<\/h3>\n\n\n\n<p>\u9664\u4e86\u5ba1\u8ba1\u5e38\u89c4\u7684Linux\u6587\u4ef6\u7cfb\u7edf\u548c\u7cfb\u7edf\u8c03\u7528\uff0c\u5ba1\u8ba1\u6240\u6709\u4e0eDocker\u76f8\u5173\u7684\u6587\u4ef6\u548c\u76ee\u5f55\u3002Docker\u5b88\u62a4\u8fdb\u7a0b\u4ee5\u201croot\u201d\u6743\u9650\u8fd0\u884c\u5176\u884c\u4e3a\u4f1a\u5173\u8054\u4e00\u4e9b\u6587\u4ef6\u548c\u76ee\u5f55\uff0c\u4f8b\u5982\/var\/lib\/docker\u5305\u542b\u4e86\u6709\u5173\u5bb9\u5668\u7684\u6240\u6709\u4fe1\u606f\u3002<\/p>\n\n\n\n<p><strong>audit\u7684\u4e00\u4e9b\u89c4\u5219\u914d\u7f6e<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-75-1024x482.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"482\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-75-1024x482.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1042\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Docket\u5b88\u62a4\u8fdb\u7a0b\u52a0\u56fa<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u4e0e\u5bb9\u5668\u4e4b\u95f4\u7684\u6d41\u91cf\u9694\u79bb<\/h3>\n\n\n\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5728\u540c\u4e00\u4e3b\u673a\u4e0a\u7684\u6240\u6709\u5bb9\u5668\u4e4b\u95f4\u6d41\u91cf\u4e0d\u53d7\u9650\u5236\u3002\u56e0\u6b64\uff0c\u6bcf\u4e2a\u5bb9\u5668\u90fd\u5177\u6709\u5728\u540c\u4e00\u4e3b\u673a\u4e0a\u8de8\u5bb9\u5668\u7f51\u8def\u8bfb\u53d6\u6240\u6709\u6570\u636e\u5305\u7684\u80fd\u529b\u3002\u8fd9\u53ef\u80fd\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u3002\u6bd4\u5982\u4e00\u4e2a\u5bb9\u5668\u4e2d\u8dd1\u7740redis\uff0credis\u7ecf\u5178\u7684\u672a\u6388\u6743\u8bbf\u95ee\u5c31\u4f1a\u5bfc\u81f4\u6574\u4e2aredis\u6570\u636e\u5e93\u6cc4\u9732\uff1b\u751a\u81f3\u5982\u679credis\u8fd0\u884c\u5728\u5bbf\u4e3b\u673a\u800c\u4e14\u9519\u8bef\u914d\u7f6e\u5c06redis\u7ed1\u5b9a\u5230\u4e860.0.0.0\u90a3\u4e48\u672c\u5730\u73af\u56de\u63a5\u53e3\u3001eth\u3001docker0\uff1a172.17.0.1:6379\u90fd\u53ef\u4ee5\u8bbf\u95ee\uff0c\u62ff\u4e0b\u5bb9\u5668\u6743\u9650\u540e\u76f4\u63a5\u901a\u8fc7Redis\u672a\u6388\u6743\u8bbf\u95ee\u83b7\u53d6\u654f\u611f\u6570\u636e\uff0cRedis \u672a\u8fdb\u884c\u5b89\u5168\u9650\u5236\uff08\u5982\u672a\u7981\u7528\u6587\u4ef6\u5199\u5165\u3001\u76ee\u5f55\u53ef\u63a7\u7b49\uff09\u7684\u60c5\u51b5\u4e0b\u53ef\u4ee5\u8fdb\u4e00\u6b65\u5bf9\u5bbf\u4e3b\u673a\u8fdb\u884cSSH\u516c\u94a5\u5199\u5165\u3001Webshell\u5199\u5165\u7b49\u64cd\u4f5c\u3002<\/p>\n\n\n\n<p><strong>\u7f16\u8f91\/usr\/bin\/systemd\/system\/docker.service\u6587\u4ef6\uff0c\u6587\u4ef6\u4e2d\u7684ExecStart\u53c2\u6570\u6dfb\u52a0&#8211;icc=false\u9009\u9879\uff0c\u7136\u540e\u91cd\u542fdocker\u670d\u52a1\u3002\u901a\u8fc7\u8fd9\u79cd\u65b9\u5f0f\u52a0\u56fa\u540e\uff0c\u4efb\u4f55\u5bb9\u5668\u90fd\u65e0\u6cd5\u4e0e\u540c\u4e00\u4e3b\u673a\u4e0a\u7684\u53e6\u4e00\u4e2a\u5bb9\u5668\u8fdb\u884c\u901a\u4fe1\u3002\u5982\u679c\u9700\u8981\u540c\u4e00\u4e3b\u673a\u4e0a\u7684\u5bb9\u5668\u4e4b\u95f4\u901a\u4fe1\uff0c\u5219\u9700\u8981\u4f7f\u7528\u5bb9\u5668\u8fde\u63a5\u663e\u793a\u7684\u5b9a\u4e49\u901a\u4fe1\u5173\u7cfb\u3002<\/strong><\/p>\n\n\n\n<p>\u5f00\u4e24\u53f0docker\u7136\u540e\u67e5\u770b\u5f7c\u6b64\u7684IP\u5730\u5740<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-67-1024x370.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"370\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-67-1024x370.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1032\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fdb\u884c\u8fde\u901a\u4fe1\u68c0\u67e5\uff0c\u53d1\u73b0\u5bb9\u5668\u4e4b\u95f4\u662f\u53ef\u4ee5\u4e92\u76f8\u901a\u4fe1\u7684<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-68-1024x345.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"345\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-68-1024x345.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1033\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fdb\u884c\u5bb9\u5668\u52a0\u56fa<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-69-1024x162.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"162\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-69-1024x162.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1034\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u91cd\u542fdocker\u670d\u52a1\u91cd\u542fdocker\u53d1\u73b0\u65e0\u6cd5ping\u901a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-70-1024x212.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"212\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-70-1024x212.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1035\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u6d41\u91cf\u9694\u79bb\u540e\uff0c\u53ef\u4ee5\u901a\u8fc7\u94fe\u63a5\u5bb9\u5668\u7684\u65b9\u5f0f\u8fbe\u5230\u7279\u5b9a\u5bb9\u5668\u4e4b\u95f4\u7684\u76f8\u4e92\u901a\u4fe1\u3002\u5176\u5b9e\u8fd9\u91cc\u6240\u8c13\u7684\u6d41\u91cf\u9694\u79bb\uff0c\u5176\u5b9e\u5c31\u9694\u79bb\u4e86\u9ed8\u8ba4\u7f51\u5361docker0\u4e0b\u7684\u6d41\u91cf\u3002\u53ea\u8981\u65b0\u5efa\u4e00\u5f20\u7f51\u5361\u5c31\u53ef\u4ee5\u89c4\u5212\u5bb9\u5668\u4e4b\u95f4\u7684IP\u5730\u5740\u5c31\u53ef\u4ee5\u5b9e\u73b0\u6240\u8c13\u7684\u5bb9\u5668\u5efa\u94fe\u3002vim \/usr\/lib\/systemd\/system\/docker.service<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-71-1024x663.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"663\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-71-1024x663.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1038\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u65e5\u5fd7\u7b49\u7ea7\u8bbe\u7f6e<\/h3>\n\n\n\n<p>\u8bbe\u7f6e\u9002\u5f53\u7684\u65e5\u5fd7\u7ea7\u522b\uff0c\u8ba9docker\u5b88\u62a4\u8fdb\u7a0b\u914d\u7f6e\u4e3a\u8bb0\u5f55\u6211\u4eec\u5e0c\u671b\u67e5\u770b\u7684\u4e8b\u4ef6\u5185\u5bb9\u3002\u5efa\u8bae\u8bbe\u7f6edocker\u7684\u65e5\u5fd7\u8bb0\u5f55\u7ea7\u522b\u4e3ainfo\u3002\u5728\u9ed8\u8ba4\u7684\u60c5\u51b5\u4e0b\u65e5\u5fd7\u7684\u7ea7\u522b\u5c31\u662finfo<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-76-1024x313.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"313\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-76-1024x313.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1045\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u955c\u50cf\u4ed3\u5e93\u914d\u7f6eTLS\u52a0\u5bc6<\/h3>\n\n\n\n<p>docker\u5728\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u79c1\u6709\u7684\u955c\u50cf\u4ed3\u5e93\u90fd\u88ab\u8ba4\u4e3a\u662f\u76f8\u5bf9\u5b89\u5168\u7684\uff0c\u6240\u4ee5\u9700\u8981\u4fdd\u8bc1\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u5b89\u5168\u6027\uff0c\u53ef\u4ee5\u7ed9\u955c\u50cf\u4ed3\u5e93\u4f7f\u7528TLS\u52a0\u5bc6\uff0c\u4fdd\u8bc1\u955c\u50cf\u4f20\u8f93\u8fc7\u7a0b\u4e2d\u7684\u5b89\u5168\u6027\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-77.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"896\" height=\"657\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-77.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1046\"  sizes=\"auto, (max-width: 896px) 100vw, 896px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u914d\u7f6e\u5408\u9002\u7684ulimit\u8d44\u6e90\u63a7\u5236<\/h3>\n\n\n\n<p>ulimit\u547d\u4ee4\u53ef\u4ee5\u5bf9Docker Container shell\u751f\u6210\u7684\u8fdb\u7a0b\u8d44\u6e90\u8fdb\u884c\u9650\u5236\u3002\u901a\u5e38\u4f1a\u7528\u201c\u6253\u5f00\u6587\u4ef6\u53e5\u67c4\u6570\u201d\u3001\u201c\u8bbe\u7f6e\u8fdb\u7a0b\u80fd\u591f\u6d88\u8017\u7684\u865a\u62df\u5185\u5b58\u201d\u3001\u201c\u8bbe\u7f6e\u7528\u6237\u80fd\u591f\u6253\u5f00\u7684\u8fdb\u7a0b\u6570\u76ee\u201d\u7b49\u3002\u5728Ulimit\u4e2d\u6709\u4e24\u4e2a\u9608\u503c\uff0c\u4e00\u4e2a\u662fSoft Limit\u4e00\u4e2a\u662fHard Limit\uff0c\u5f53\u52a8\u4f5c\u5230\u8fbe\u4e86Soft\u9608\u503c\u5219\u544a\u8b66\uff0c\u5982\u679c\u8fbe\u5230\u4e86Hard\u9608\u503c\u5219\u5bf9\u5185\u5b58\u8fdb\u884c\u5f3a\u5236\u9650\u5236\u3002<br><strong>\u8bbe\u7f6e\u7cfb\u7edf\u8d44\u6e90\u63a7\u5236\u53ef\u4ee5\u9632\u6b62\u8d44\u6e90\u8017\u5c3d\u5e26\u6765\u7684\u95ee\u9898\uff0c\u5982fork\u70b8\u5f39\u3002\u6709\u65f6\u5019\u5408\u6cd5\u7684\u7528\u6237\u548c\u8fdb\u7a0b\u4e5f\u53ef\u80fd\u8fc7\u5ea6\u4f7f\u7528\u7cfb\u7edf\u8d44\u6e90\uff0c\u5bfc\u81f4\u7cfb\u7edf\u8d44\u6e90\u8017\u5c3d\u3002<\/strong>\u4e3aDocker\u5b88\u62a4\u8fdb\u7a0b\u8bbe\u7f6e\u9ed8\u8ba4ulimit\u5c06\u5f3a\u5236\u6267\u884c\u6240\u6709\u5bb9\u5668\u7684ulimit\uff0c\u4e0d\u9700\u8981\u5355\u72ec\u4e3a\u6bcf\u4e2a\u5bb9\u5668\u8bbe\u7f6eulimit\u3002\u4f46\u9ed8\u8ba4\u7684ulimit\u53ef\u80fd\u518d\u5bb9\u5668\u8fd0\u884c\u65f6\u88ab\u8986\u76d6\u3002\u56e0\u6b64\uff0c\u8981\u63a7\u5236\u7cfb\u7edf\u8d44\u6e90\uff0c\u9700\u8981\u81ea\u5b9a\u4e49\u9ed8\u8ba4\u7684ulimit\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\"default-ulimits\":{\n        \"nofile\":{\n                \"Name\":\"nofile\",\n                \"Hard\": 1024000,\n                \"Soft\": 1024000\n                },\n        \"nproc\":{\n                \"Name\":\"nproc\",\n                \"Hard\":10,\n                \"Soft\":10\n                },\n        \"core\":{\n                \"Name\":\"core\",\n                \"Hard\":-1,\n                \"Soft\":-1\n        }\n}<\/code><\/pre>\n\n\n\n<p><strong>nproc\uff1a\u8bbe\u7f6e\u7528\u6237\u53ef\u7528\u7684\u6700\u5927\u8fdb\u7a0b\u6570\uff0c\u800c\u4e0d\u662f\u5bb9\u5668\uff0c\u542f\u52a8\u5bb9\u5668\u7684\u65f6\u5019\u5fc5\u987b\u8981\u6307\u5b9a\u7528\u6237\u7684UID\u624d\u80fd\u751f\u6548\uff0c\u56e0\u4e3aroot\u7528\u6237\u4e0d\u53d7nproc\u7684\u9650\u5236<\/strong><br>\u8fdb\u5165\u5bb9\u5668\u4e2d\u6267\u884cfork\u70b8\u5f39\uff0c\u53d1\u73b0\u547d\u4e2d\u4e86nproc\u9650\u5236\u7cfb\u7edf\u4e0d\u4f1a\u518d\u521b\u5efa\u65b0\u7684\u8fdb\u7a0b\u4e86\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-78-1024x707.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"707\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-78-1024x707.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1049\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u975eroot\u7528\u6237\u542f\u52a8<\/h3>\n\n\n\n<p>\u5728\u9ed8\u8ba4\u672a\u5f00\u542f User Namespace \u7684\u60c5\u51b5\u4e0b\uff0cDocker \u5bb9\u5668\u5185\u7684\u8fdb\u7a0b\u901a\u5e38\u4ee5 root\uff08UID 0\uff09\u8fd0\u884c\u3002\u7531\u4e8e\u5bb9\u5668\u4e0e\u5bbf\u4e3b\u673a\u5171\u4eab\u540c\u4e00\u5185\u6838\uff0c\u800c Linux \u5185\u6838\u57fa\u4e8e UID\/GID \u8fdb\u884c\u6743\u9650\u63a7\u5236\uff0c\u56e0\u6b64\u5bb9\u5668\u5185\u7684 UID 0 \u5728\u5185\u6838\u5c42\u9762\u76f4\u63a5\u5bf9\u5e94\u5bbf\u4e3b\u673a\u7684 UID 0\u3002\u8fd9\u610f\u5473\u7740\u5bb9\u5668\u5185 root \u62e5\u6709\u4e0e\u5bbf\u4e3b\u673a root \u7b49\u4ef7\u7684\u6743\u9650\u3002Docker \u5e76\u975e\u5b8c\u5168\u865a\u62df\u5316\u6280\u672f\uff0c\u5176\u901a\u8fc7 namespace \u548c cgroup \u5b9e\u73b0\u9694\u79bb\uff0c\u4f46\u9ed8\u8ba4\u4e0d\u4f1a\u5bf9 UID\/GID \u8fdb\u884c\u6620\u5c04\uff0c\u56e0\u6b64\u5bb9\u5668\u4e0e\u5bbf\u4e3b\u673a\u5171\u4eab\u540c\u4e00\u5957 UID\/GID \u6570\u503c\u7a7a\u95f4\uff0c\u4f46\u7528\u6237\u7a7a\u95f4\uff08\u5982 \/etc\/passwd\uff09\u4ecd\u7136\u662f\u9694\u79bb\u7684\u3002\uff08\u7b80\u5355\u6765\u8bf4\u6ca1\u5f00\u542fUserNS\uff0c\u5bb9\u5668\u4e2d\u7684root=\u5bbf\u4e3b\u673aroot\u62e5\u6709\u76f8\u540c\u6743\u9650\uff09<\/p>\n\n\n\n<p>\u6bd4\u5982\u8fd9\u91cc\u6267\u884csleep infinity\u547d\u4ee4\u7684\u5c31\u662froot\uff0c\u5982\u679c\u62ff\u5230\u5bb9\u5668root\u7684\u63a7\u5236\u6743\uff0c\u5c31\u53ef\u4ee5\u5bf9\u5bb9\u5668\u5185\u6240\u6709\u6587\u4ef6\u8fdb\u884c\u64cd\u7eb5\uff0c\u5982\u679c\u5b58\u5728\u6587\u4ef6\u6302\u8f7d\u5c31\u53ef\u4ee5\u76f4\u63a5\u5bf9\u5bbf\u4e3b\u673a\u7684\u6587\u4ef6\u8fdb\u884c\u64cd\u7eb5\uff0c\u8fd8\u53ef\u80fd\u5b58\u5728\u5bb9\u5668\u9003\u9038\u98ce\u9669\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-79-1024x373.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"373\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-79-1024x373.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1050\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u90a3\u4e48\u901a\u8fc7\u975eroot\u7528\u6237\u542f\u52a8\u5bb9\u5668\u7684\u65b9\u5f0f\uff0c\u5c06\u5bb9\u5668\u7684\u6267\u884c\u6743\u9650\u964d\u5230\u53ef\u63a7\u8303\u56f4\u5185\u5c31\u53ef\u4ee5\u5c06\u5bb9\u5668\u7684\u6267\u884c\u6743\u9650\u964d\u5230\u53ef\u63a7\u8303\u56f4\u5185<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-80-1024x243.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"243\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-80-1024x243.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1051\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u7684\u547d\u540d\u7a7a\u95f4\u8bbe\u7f6e<\/h3>\n\n\n\n<p>\u524d\u9762Docker\u57fa\u7840\u8bb2\u5230\u7684\u5bb9\u5668\u9694\u79bb\u6700\u4e3b\u8981\u7684\u65b9\u5f0f\u5c31\u662f\u901a\u8fc7Namespace\u8fdb\u884c\u9694\u79bb\uff0c\u5b83\u8ba9\u5e94\u7528\u8fdb\u7a0b\u53ea\u80fd\u770b\u5230Namespace\u5185\u7684\u4e16\u754c\u3002\u8ba9\u6bcf\u4e2a\u5bb9\u5668\u90fd\u6709\u81ea\u5df1\u5355\u72ec\u7684\u547d\u540d\u7a7a\u95f4\uff0c\u8fd0\u884c\u5728\u5176\u4e2d\u7684\u5e94\u7528\u90fd\u50cf\u662f\u5728\u72ec\u7acb\u7684\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u8fd0\u884c\u4e00\u6837\u7684\u3002\u547d\u540d\u7a7a\u95f4\u4fdd\u8bc1\u4e86\u5bb9\u5668\u4e4b\u95f4\u5f7c\u6b64\u4e92\u4e0d\u5f71\u54cd\u3002<\/p>\n\n\n\n<p>\u6bd4\u5982\u8fd9\u91cc\u5f00\u542fUserNS\u7684\u547d\u540d\u7a7a\u95f4\uff0cDocker \u4f1a\u4e3a\u8be5\u6620\u5c04\u7528\u6237\u521b\u5efa\u72ec\u7acb\u7684\u6570\u636e\u5b58\u50a8\u76ee\u5f55\uff0c\u4ece\u800c\u5728\u6587\u4ef6\u6743\u9650\u5c42\u9762\u5b9e\u73b0\u9694\u79bb\uff0c\u4f7f\u5bb9\u5668\u8fdb\u7a0b\u65e0\u6cd5\u76f4\u63a5\u4ee5\u5bbf\u4e3b\u673a root \u6743\u9650\u8bbf\u95ee\u539f\u6709\u6570\u636e\u3002\u4e5f\u5c31\u65e0\u6cd5\u770b\u5230root\u7528\u6237\u7684images<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-81-1024x460.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"460\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-81-1024x460.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1054\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668cgroup\u8bbe\u7f6e<\/h3>\n\n\n\n<p>control groups\u63a7\u5236\u7ec4\uff0c\u4e0d\u4ec5\u53ef\u4ee5\u9650\u5236\u88abNameSpace\u9694\u79bb\u8d77\u6765\u7684\u8d44\u6e90\uff0c\u8fd8\u53ef\u4ee5\u4e3a\u8d44\u6e90\u8bbe\u7f6e\u6743\u91cd\uff0c\u8ba1\u7b97\u7528\u91cf\u7b49\u3002\u5b83\u628a\u8fdb\u7a0b\u653e\u5230\u7ec4\u4e2d\uff0c\u5bf9\u7ec4\u8bbe\u7f6e\u6743\u9650\u4ece\u800c\u5bf9\u8fdb\u7a0b\u8fdb\u884c\u63a7\u5236\u3002cgroup\u8fd8\u80fd\u591f\u63a7\u5236\u3001\u9650\u5236\u3001\u9694\u79bb\u8fdb\u7a0b\u6240\u9700\u8981\u7684\u7269\u7406\u8d44\u6e90\u5305\u62ecCPU\u3001\u5185\u5b58\u3001IO\u3002<br>\u8d44\u6e90\u63a7\u5236\uff1acgroup\u901a\u8fc7\u8fdb\u7a0b\u7ec4\u5bf9\u8d44\u6e90\u603b\u989d\u8fdb\u884c\u9650\u5236\u3002\u5982\uff1a\u7a0b\u5e8f\u4f7f\u7528\u5185\u5b58\u65f6\uff0c\u8981\u4e3a\u7a0b\u5e8f\u8bbe\u5b9a\u53ef\u4ee5\u4f7f\u7528\u4e3b\u673a\u591a\u5c11\u5185\u5b58\uff0c\u4e5f\u53eb\u505a\u9650\u989d\u3002<br>\u4f18\u5148\u7ea7\u5206\u914d\uff1a\u8bbe\u7f6e\u4f7f\u7528\u786c\u4ef6\u7684\u6743\u91cd\u503c\u3002\u5f53\u4e24\u4e2a\u7a0b\u5e8f\u90fd\u9700\u8981\u8fdb\u7a0b\u8bfb\u53d6cpu\uff0c\u54ea\u4e2a\u5148\u54ea\u4e2a\u540e\uff0c\u901a\u8fc7\u4f18\u5148\u7ea7\u6765\u8fdb\u884c\u533a\u522b\u3002<br>\u8d44\u6e90\u7edf\u8ba1\uff1a\u53ef\u4ee5\u7edf\u8ba1\u786c\u4ef6\u8d44\u6e90\u7684\u7528\u91cf\uff0c\u5982\uff1aCPU\u3001\u5185\u5b58\u4f7f\u7528\u4e86\u591a\u957f\u65f6\u95f4\u3002<br>\u8fdb\u7a0b\u63a7\u5236\uff1a\u53ef\u4ee5\u5bf9\u8fdb\u7a0b\u7ec4\u5b9e\u73b0\u6302\u8d77\/\u6062\u590d\u7684\u64cd\u4f5c\u3002<\/p>\n\n\n\n<p>\u7cfb\u7edf\u7ba1\u7406\u5458\u53ef\u4ee5\u901a\u8fc7 cgroup \u4e3a\u5bb9\u5668\u8bbe\u7f6e\u8d44\u6e90\u9650\u5236\uff08\u5982 CPU\u3001\u5185\u5b58\u3001\u8fdb\u7a0b\u6570\u7b49\uff09\u3002Docker \u5728\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4f1a\u4e3a\u6bcf\u4e2a\u5bb9\u5668\u521b\u5efa\u72ec\u7acb\u7684 cgroup\uff0c\u4f46\u5982\u679c\u672a\u663e\u5f0f\u914d\u7f6e\u8d44\u6e90\u9650\u5236\uff0c\u8fd9\u4e9b\u5bb9\u5668\u4ecd\u7136\u53ef\u4ee5\u65e0\u9650\u5236\u5730\u4f7f\u7528\u5bbf\u4e3b\u673a\u8d44\u6e90\uff0c\u4ece\u800c\u53ef\u80fd\u5bfc\u81f4\u8d44\u6e90\u8017\u5c3d\u3002\u56e0\u6b64\uff0c\u5408\u7406\u914d\u7f6e cgroup \u9650\u5236\u5bf9\u4e8e\u9632\u6b62\u5bb9\u5668\u6ee5\u7528\u8d44\u6e90\u81f3\u5173\u91cd\u8981\u3002<\/p>\n\n\n\n<p>docker run -itd &#8211;name centos &#8211;cpu-shares 512 centos:7\u62c9\u8d77docker\u53ef\u4ee5\u67e5\u770b\u5206\u914d\u7684CPU\u6743\u91cd\uff08\u8fd9\u91cccgroup v1\u662fcpu.shares\u800ccgroup v2\u662f\u4ee5cpu.weight\u6765\u8868\u793a\u5206\u914d\u7684\u6743\u91cd\uff0cv2\u4f1a\u5bf9shares\u7684\u6570\u503c\u8fdb\u884c\u8ba1\u7b97\u8f6c\u6362\u4e3aweight\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-82-1024x734.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"734\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-82-1024x734.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1055\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u5b9e\u65f6\u6062\u590d\u8bbe\u7f6e<\/h3>\n\n\n\n<p>\u53ef\u7528\u6027\u4f5c\u4e3a\u5b89\u5168\u4e00\u4e2a\u91cd\u8981\u5c5e\u6027\uff0c\u5728Docker\u5b88\u62a4\u8fdb\u7a0b\u4e2d\u8bbe\u7f6e&#8211;live-restore\u6807\u5fd7\u53ef\u786e\u4fdd\u5f53docker\u5b88\u62a4\u8fdb\u7a0b\u4e0d\u53ef\u7528\u65f6\u5bb9\u5668\u6267\u884c\u4e0d\u4f1a\u4e2d\u65ad\uff0c\u8fd9\u4e5f\u610f\u5473\u7740\u5f53\u66f4\u65b0\u548c\u4fee\u590ddocker\u5b88\u62a4\u8fdb\u7a0b\u800c\u4e0d\u4f1a\u5bfc\u81f4\u5bb9\u5668\u505c\u6b62\u5de5\u4f5c\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-83-1024x245.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"245\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-83-1024x245.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1056\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5bb9\u5668\u7981\u7528userland\u4ee3\u7406<\/h3>\n\n\n\n<p>docker\u5f15\u64ce\u63d0\u4f9b\u4e86\u4e24\u79cd\u673a\u5236\u5c06\u4e3b\u673a\u7aef\u53e3\u8f6c\u53d1\u5230\u5bb9\u5668\uff0cDNAT\u548cuserland-proxy\u3002\u5728\u5927\u591a\u6570\u60c5\u51b5\u4e0b\uff0cDNAT\u6a21\u5f0f\u662f\u9996\u9009\uff0c\u56e0\u4e3a\u5b83\u63d0\u9ad8\u4e86\u6027\u80fd\uff0c\u5e76\u4f7f\u7528\u672c\u5730Linux iptables\u529f\u80fd\u800c\u9700\u8981\u9644\u52a0\u7ec4\u4ef6\u3002\u5982\u679cDNAT\u53ef\u7528\uff0c\u5219\u5e94\u5728\u542f\u52a8\u65f6\u7981\u7528userland-proxy\u4ee5\u51cf\u5c11\u5b89\u5168\u98ce\u9669\u3002userland-proxy \u662f Docker \u5728\u7528\u6237\u6001\u5b9e\u73b0\u7684\u7aef\u53e3\u8f6c\u53d1\u673a\u5236\uff0c\u4f1a\u4e3a\u6bcf\u4e2a\u7aef\u53e3\u6620\u5c04\u542f\u52a8\u4e00\u4e2a\u4ee3\u7406\u8fdb\u7a0bdocker-proxy\u3002<br>\u5355\u4e2a\u5bb9\u5668\u9700\u8981\u548c\u5bbf\u4e3b\u673a\u6709\u591a\u4e2a\u7aef\u53e3\u7684\u6620\u5c04\u3002\u6b64\u573a\u666f\u4e0b\uff0c\u82e5\u5bb9\u5668\u9700\u8981\u6620\u5c041000\u4e2a\u7aef\u53e3\u751a\u81f3\u66f4\u591a\uff0c\u90a3\u4e48\u5bbf\u4e3b\u673a\u4e0a\u5c31\u4f1a\u521b\u5efa1000\u4e2a\u751a\u81f3\u66f4\u591a\u7684docker-proxy\u8fdb\u7a0b\u3002\u636e\u4e0d\u5b8c\u5168\u6d4b\u8bd5\uff0c\u6bcf\u4e00\u4e2adocker-proxy\u5360\u7528\u7684\u5185\u5b58\u662f4-10MB\u4e0d\u7b49\u3002\u5982\u6b64\u4e00\u6765\uff0c\u76f4\u63a5\u6d88\u8017\u81f3\u5c114-10GB\u5185\u5b58\uff0c\u4ee5\u53ca\u81f3\u5c111000\u4e2a\u8fdb\u7a0b\uff0c\u65e0\u8bba\u662f\u4ece\u7cfb\u7edf\u5185\u5b58\uff0c\u8fd8\u662f\u4ece\u7cfb\u7edfCPU\u8d44\u6e90\u6765\u5206\u6790\uff0c\u8fd9\u90fd\u4f1a\u662f\u5f88\u5927\u7684\u8d1f\u62c5\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dockerd --userland-proxy=false\u4fee\u6539docker.service\n\"userland-proxy\":false\u4fee\u6539daemon.json<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Docker Runtime\u5b89\u5168<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">\u5b9a\u5236\u7531AppArmor\u4fdd\u62a4\u7684\u5bb9\u5668<\/h3>\n\n\n\n<p>AppArmor\u5e94\u7528\u7a0b\u5e8f\u4fdd\u62a4\u662f\u4e00\u4e2aLinux\u5b89\u5168\u6a21\u5757\uff08ubuntu\u4e0b\u7684\uff09\u53ef\u4ee5\u4fdd\u62a4\u64cd\u4f5c\u7cfb\u7edf\u4ee5\u53ca\u5e94\u7528\u7a0b\u5e8f\u514d\u53d7\u5b89\u5168\u5a01\u80c1\u3002docker\u53ef\u4ee5\u52a0\u8f7d\u5e76\u6267\u884capparmor\u4e2d\u7684\u7b56\u7565\uff0cdocker\u81ea\u52a8\u4e3a\u5bb9\u5668\u751f\u6210\u5e76\u52a0\u8f7d\u540d\u4e3adocker-default\u7684\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6\uff0cDocker\u751f\u6210\u7684\u6587\u4ef6\u7c7b\u578b\u662f\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u5e76\u5728\u5bb9\u5668\u542f\u52a8\u540e\u52a0\u8f7d\u5185\u6838\u4e2d\u3002<br>\u8fd0\u884c\u5bb9\u5668\u65f6\u4f1a\u4f7f\u7528docker-default\u7b56\u7565\uff0c\u9664\u975e\u901a\u8fc7security-opt\u9009\u9879\u8986\u76d6<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-84.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1005\" height=\"180\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-84.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1057\"  sizes=\"auto, (max-width: 1005px) 100vw, 1005px\" \/><\/div><\/figure>\n\n\n\n<p>Apparmor\u6709\u4e24\u79cd\u5de5\u4f5c\u6a21\u5f0f\uff1aenforcement\u3001complain\/learning<br><strong>Enforcement\uff1a<\/strong>\u8fd9\u79cd\u6a21\u5f0f\u4e0b\u914d\u7f6e\u6587\u4ef6\u91cc\u5217\u51fa\u7684\u9650\u5236\u6761\u4ef6\u90fd\u4f1a\u5f97\u5230\u6267\u884c\uff0c\u5e76\u4e14\u5bf9\u4e8e\u8fdd\u53cd\u8fd9\u4e9b\u9650\u5236\u6761\u4ef6\u7684\u7a0b\u5e8f\u4f1a\u8fdb\u884c\u65e5\u5fd7\u8bb0\u5f55\u3002<br><strong>Complain\uff1a<\/strong>\u8fd9\u79cd\u6a21\u5f0f\u4e0b\uff0c\u914d\u7f6e\u6587\u4ef6\u91cc\u7684\u9650\u5236\u6761\u4ef6\u4e0d\u4f1a\u5f97\u5230\u6267\u884c\uff0cApparmor\u53ea\u662f\u5bf9\u7a0b\u5e8f\u7684\u884c\u4e3a\u8fdb\u884c\u8bb0\u5f55\u3002\u4f8b\u5982\u7a0b\u5e8f\u53ef\u4ee5\u5199\u4e00\u4e2a\u5728\u914d\u7f6e\u6587\u4ef6\u91cc\u6ce8\u660e\u53ea\u8bfb\u7684\u6587\u4ef6\uff0c\u4f46Apparmor\u4e0d\u4f1a\u5bf9\u7a0b\u5e8f\u7684\u884c\u4e3a\u8fdb\u884c\u9650\u5236\uff0c\u53ea\u662f\u8fdb\u884c\u8bb0\u5f55\u3002\u53ef\u4ee5\u901a\u8fc7Complain\u6a21\u5f0f\u5f97\u5230\u65e5\u5fd7\u4f5c\u4e3a\u53c2\u8003\uff0c\u7136\u540e\u8bbe\u7f6eEnfocement\u3002<br><strong>Apparmor\u53ef\u4ee5\u5bf9\u67d0\u4e00\u4e2a\u6587\u4ef6\uff0c\u6216\u8005\u67d0\u4e00\u4e2a\u76ee\u5f55\u4e0b\u7684\u6587\u4ef6\u8fdb\u884c\u8bbf\u95ee\u63a7\u5236\uff0c\u5305\u62ec\u4ee5\u4e0b\u51e0\u79cd\u8bbf\u95ee\u6a21\u5f0f\uff1ar\uff0c\u53ea\u8bfb\u6a21\u5f0f\uff1bW\uff0c\u53ef\u5199\u6a21\u5f0f\uff0c\u4f46\u662f\u4e0e\u53c2\u6570a\u51b2\u7a81\uff1ba\uff0c\u8ffd\u52a0\u6a21\u5f0f\uff0c\u4f46\u662f\u4e0e\u53c2\u6570w\u51b2\u7a81\uff1bk\uff0c\u6587\u4ef6\u9501\u6a21\u5f0f\uff1bl\uff0c\u94fe\u63a5\u6a21\u5f0f\uff1bx\uff0c\u53ef\u6267\u884c\u6a21\u5f0f\uff1bm\uff0c\u5185\u5b58\u6620\u5c04\u7684\u53ef\u6267\u884c\u6587\u4ef6\u3002<\/strong><\/p>\n\n\n\n<p>\u6839\u636e\u9700\u6c42\u5b9a\u5236\u5316\u5bb9\u5668\u7684AppArmor\u7b56\u7565<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-85.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"845\" height=\"596\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-85.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1058\"  sizes=\"auto, (max-width: 845px) 100vw, 845px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u5b9a\u5236\u53d7\u9650\u7684Linux\u5185\u6838\u7279\u6027\u5bb9\u5668<\/h3>\n\n\n\n<p>\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cDocker\u4f7f\u7528\u4e00\u7ec4\u53d7\u9650\u7684Linux\u5185\u6838\u7279\u6027\u542f\u52a8\u5bb9\u5668\uff0c\u8fd9\u610f\u5473\u7740\u53ef\u4ee5\u5c06\u4efb\u4f55\u8fdb\u7a0b\u6388\u4e88\u201d\u4ec5\u201c\u6240\u9700\u7684\u529f\u80fd\uff0c\u800c\u4e0d\u5fc5\u4ee5root\u6743\u9650\u8fd0\u884c\u3002Docker\u652f\u6301\u6dfb\u52a0\u6216\u8005\u5220\u9664Linux\u5185\u6838\u7684\u529f\u80fd\uff0c\u6700\u5c0f\u5316Docker\u5bb9\u5668\u7684\u6743\u9650\u3002\u56e0\u6b64\u53ef\u4ee5\u9664\u53bb\u5bb9\u5668\u8fdb\u7a0b\u6240\u9700\u7684\u529f\u80fd\u4ee5\u5916\u7684\u6240\u6709\u529f\u80fd\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-86-1024x343.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"343\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-86-1024x343.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1059\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-87.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"749\" height=\"476\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-87.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1060\"  sizes=\"auto, (max-width: 749px) 100vw, 749px\" \/><\/div><\/figure>\n\n\n\n<p><code>capsh --print<\/code> \u7528\u4e8e\u67e5\u770b\u5f53\u524d\u8fdb\u7a0b\u7684 Linux capabilities \u72b6\u6001\uff0c\u5305\u62ec\u5f53\u524d\u80fd\u529b\u96c6\u3001\u80fd\u529b\u8fb9\u754c\uff08Bounding set\uff09\u4ee5\u53ca\u7ee7\u627f\u80fd\u529b\uff08Ambient set\uff09\u3002\u5728\u5bb9\u5668\u73af\u5883\u4e2d\uff0c\u8be5\u547d\u4ee4\u5e38\u7528\u4e8e\u5206\u6790\u5bb9\u5668\u5bf9 root \u6743\u9650\u7684\u88c1\u526a\u60c5\u51b5\uff0c\u4ece\u800c\u5224\u65ad\u5176\u5b89\u5168\u9694\u79bb\u7a0b\u5ea6\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-88-1024x455.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"455\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-88-1024x455.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1061\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">\u5bb9\u5668\u955c\u50cf\u5b89\u5168\u6784\u5efa<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">DockerFile\u57fa\u7840<\/h2>\n\n\n\n<p>dockerfile\u662f\u4e00\u4e2a\u7279\u5b9a\u683c\u5f0f\u7279\u5b9a\u6307\u4ee4\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u7528\u4e8e\u6784\u5efa\u4e00\u4e2adocker\u955c\u50cf\u3002\u6bcf\u4e00\u6761\u6307\u4ee4\u7684\u5185\u5bb9\u7528\u4e8e\u63cf\u8ff0\u8be5\u5c42\u5e94\u8be5\u5982\u4f55\u6784\u5efa\u3002\u6587\u672c\u5316\u955c\u50cf\u751f\u6210\u64cd\u4f5c\u8ba9\u5176\u65b9\u4fbf\u7248\u672c\u7684\u7ba1\u7406\u548c\u81ea\u52a8\u5316\u90e8\u7f72\u3002<br>\u4e00\u4e2a\u955c\u50cf\u6784\u5efa\u65f6\u4e0d\u80fd\u8d85\u8fc7127\u5c42<br><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-89.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"501\" height=\"354\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-89.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1064\"  sizes=\"auto, (max-width: 501px) 100vw, 501px\" \/><\/div><\/figure>\n\n\n\n<p>Dockerfile\u5206\u4e3a\u56db\u4e2a\u90e8\u5206<br><strong>\u57fa\u7840\u955c\u50cf\u4fe1\u606f\uff1aFROM &lt;image>\u6216\u8005FROM &lt;image>:&lt;tag><\/strong><br><strong>\u955c\u50cf\u6807\u7b7e\u4fe1\u606f\uff1aLABEL<\/strong><br><strong>\u955c\u50cf\u64cd\u4f5c\u6307\u4ee4\uff1aRUN<\/strong><br><strong>\u5bb9\u5668\u542f\u52a8\u65f6\u6267\u884c\u547d\u4ee4\uff1aCMD<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-90.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"609\" height=\"505\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-90.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1065\"  sizes=\"auto, (max-width: 609px) 100vw, 609px\" \/><\/div><\/figure>\n\n\n\n<p><strong>FROM\u57fa\u7840\u955c\u50cf\u4fe1\u606f<\/strong>\uff1a\u5728\u8bbe\u7f6e\u57fa\u7840\u955c\u50cf\u7684\u65f6\u5019\uff0c\u5c3d\u53ef\u80fd\u4f7f\u7528\u5b98\u65b9\u955c\u50cf\u6216\u8005\u4fe1\u4efb\u7684\u955c\u50cf\u3002\u63a8\u8350\u4f7f\u7528AIpine\u955c\u50cf\uff0c\u5b83\u88ab\u4e25\u683c\u63a7\u5236\u5e76\u4fdd\u5b58\u6700\u5c0f\u5c3a\u5bf8\uff08&lt; 6MB\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-91.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"240\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-91.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1066\"  sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/div><\/figure>\n\n\n\n<p><strong>RUN\u955c\u50cf\u64cd\u4f5c\u547d\u4ee4\uff1a<\/strong>\u4e3a\u4e86\u4fdd\u6301Dockerfile\u6587\u4ef6\u7684\u53ef\u8bfb\u6027\u4ee5\u53ca\u53ef\u7ef4\u62a4\u6027\uff0c\u5efa\u8bae\u5c06\u957f\u7684\u6216\u590d\u6742\u7684RUN\u6307\u4ee4\u7528\u53cd\u659c\u6760\u5206\u5272\u6210\u591a\u884c\u3002RUN\u6307\u4ee4\u6700\u5e38\u89c1\u7684\u5c31\u662f\u901a\u8fc7apt-get\u6216\u8005yum\u8fdb\u884c\u73af\u5883\u7684\u5b89\u88c5<strong>\u3002<\/strong><br>\u4e0d\u8981\u4f7f\u7528RUN apt-get upgrade\u6216\u8005dist-upgrade\uff0c\u8fd9\u4f1a\u5f88\u5927\u7a0b\u5ea6\u4e0a\u589e\u52a0\u4f60\u7684\u955c\u50cf\u7684\u5927\u5c0f<br>\u5982\u679c\u786e\u5b9a\u4e00\u4e2a\u5305\u9700\u8981\u5347\u7ea7\uff0c\u5e94\u5f53\u4f7f\u7528apt-get install -y\u7684\u65b9\u5f0f\u8fdb\u884c\u5347\u7ea7<br>\u6700\u597d\u5c06RUN\u591a\u6761\u8bed\u53e5\u6c47\u96c6\u6210\u4e00\u6761<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-92.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"996\" height=\"516\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-92.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1067\"  sizes=\"auto, (max-width: 996px) 100vw, 996px\" \/><\/div><\/figure>\n\n\n\n<p><strong>ENTRYPOINT\u914d\u7f6e\u5bb9\u5668\u542f\u52a8\u8fdb\u5165\u540e\u6267\u884c\u7684\u547d\u4ee4\uff1a<\/strong>\u8be5\u6307\u4ee4\u662f\u8bbe\u7f6e\u955c\u50cf\u7684\u4e3b\u547d\u4ee4\uff0c\u5176\u4f5c\u7528\u662f\u5141\u8bb8\u5c06\u955c\u50cf\u5f53\u4f5c\u547d\u4ee4\u672c\u8eab\u6765\u8fd0\u884c\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-99.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"964\" height=\"617\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-99.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1074\"  sizes=\"auto, (max-width: 964px) 100vw, 964px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-100.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"972\" height=\"468\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-100.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1075\"  sizes=\"auto, (max-width: 972px) 100vw, 972px\" \/><\/div><\/figure>\n\n\n\n<p><strong>CMD\u5bb9\u5668\u542f\u52a8\u65f6\u6267\u884c\u547d\u4ee4\uff1a<\/strong>CMD\u547d\u4ee4\u7528\u4e8e\u6267\u884c\u76ee\u6807\u955c\u50cf\u4e2d\u5305\u542b\u7684\u8f6f\u4ef6\u548c\u4efb\u4f55\u53c2\u6570\uff0c\u5b9e\u9645\u4e0a\u4e3a\u5bb9\u5668\u63d0\u4f9b\u4e00\u4e2a\u9ed8\u8ba4\u7684\u6267\u884c\u547d\u4ee4\u3002<br>\u5728Dockerfile\u4e2dCMD\u88ab\u7528\u6765\u4e3aENTRYPOINT\u6307\u4ee4\u63d0\u4f9b\u53c2\u6570\uff0c\u5219CMD\u548cENTRTYPOINT\u6307\u4ee4\u90fd\u5e94\u8be5\u4f7f\u7528exec\u683c\u5f0f<br>\u5f53\u57fa\u4e8e\u955c\u50cf\u7684\u5bb9\u5668\u8fd0\u884c\u65f6\u5c06\u4f1a\u81ea\u52a8\u6267\u884cCMD\u6307\u4ee4\uff0c\u5e76\u4e14\u5982\u679c\u5728docker run\u547d\u4ee4\u4e2d\u6307\u5b9a\u4e86\u53c2\u6570\uff0c\u8fd9\u4e9b\u53c2\u6570\u5c06\u4f1a\u8986\u76d6\u5728CMD\u6307\u4ee4\u4e2d\u8bbe\u7f6e\u7684\u53c2\u6570<br>\u591a\u6570\u60c5\u51b5\u4e0bCMD\u90fd\u9700\u8981\u4e00\u4e2a\u4ea4\u4e92\u5f0f\u7684SHELL\uff0cbash\uff0cpython\u3001perl\u7b49<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-93.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"688\" height=\"357\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-93.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1068\"  sizes=\"auto, (max-width: 688px) 100vw, 688px\" \/><\/div><\/figure>\n\n\n\n<p><strong>EXPOSE\u7aef\u53e3\u6620\u5c04\u6307\u4ee4\uff1a<\/strong>EXPOSE\u6307\u4ee4\u7528\u4e8e\u6307\u5b9a\u5bb9\u5668\u5c06\u8981\u76d1\u542c\u7684\u7aef\u53e3\u5373\u9ed8\u8ba4\u5411\u5916\u90e8\u66b4\u9732\u7684\u670d\u52a1\u7aef\u53e3<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-94.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"985\" height=\"372\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-94.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1069\"  sizes=\"auto, (max-width: 985px) 100vw, 985px\" \/><\/div><\/figure>\n\n\n\n<p><strong>ENV\u4fee\u6539\u73af\u5883\u53d8\u91cf\u6307\u4ee4\uff1a<\/strong>\u4e3a\u4e86\u65b9\u4fbf\u7a0b\u5e8f\u8fd0\u884c\uff0c\u53ef\u4ee5\u901a\u8fc7ENV\u53c2\u6570\u6765\u4e3a\u5bb9\u5668\u4e2d\u5b89\u88c5\u7684\u5e94\u7528\u7a0b\u5e8f\u66f4\u65b0PATH\u73af\u5883\u53d8\u91cf\u3002\u5728\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u4f20\u5165\u4e00\u4e9b\u5bc6\u7801\u7684\u60c5\u51b5\u4e0b\uff0c\u6700\u597d\u4e0d\u8981\u5728dockerfile\u4e2d\u6709\u76f4\u63a5\u4f53\u73b0\u5bc6\u7801\u7684\u5185\u5bb9\uff0c\u800c\u662f\u5728dockerfile\u4e2d\u5b9a\u4e49\u597d\u53d8\u91cf\u540d\u7136\u540e\u901a\u8fc7docker run -e \u7684\u65b9\u5f0f\u8fdb\u884c\u4f20\u503c\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-95-1024x471.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"471\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-95-1024x471.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1070\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>ARG\u6784\u5efa\u53c2\u6570\uff1a<\/strong>\u548cENV\u4e00\u6837\u90fd\u662f\u8bbe\u7f6e\u73af\u5883\u53d8\u91cf\uff0c\u4e0d\u540c\u7684\u662fARG\u5728\u73af\u5883\u6784\u5efa\u5b8c\u6210\u540e\u5c31\u5931\u8d25\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-96.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"474\" height=\"162\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-96.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1071\"  sizes=\"auto, (max-width: 474px) 100vw, 474px\" \/><\/div><\/figure>\n\n\n\n<p><strong>ADD\u6dfb\u52a0\u6307\u5b9a\u76ee\u5f55\u6587\u4ef6\u5230\u955c\u50cf\uff1a<\/strong>\u8be5\u547d\u4ee4\u5c06\u590d\u5236\u6307\u5b9a\u7684\u6e90\u6587\u4ef6&lt;src>\u5230\u955c\u50cf\u4e2d\u7684\u76ee\u6807\u6587\u4ef6&lt;dest>\uff0c\u5176\u4e2d&lt;src>\u53ef\u4ee5\u662f\u5728dockerfile\u6240\u5728\u7684\u76ee\u5f55\u7684\u4e00\u4e2a\u76f8\u5bf9\u8def\u5f84<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-97.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"906\" height=\"316\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-97.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1072\"  sizes=\"auto, (max-width: 906px) 100vw, 906px\" \/><\/div><\/figure>\n\n\n\n<p><strong>COPY\u590d\u5236\u6307\u5b9a\u6587\u4ef6\u6216\u76ee\u5f55\u5230\u5bb9\u5668\u4e2d\uff1a<\/strong>\u76f8\u8f83\u4e0eADD\uff0cCOPY\u53ea\u652f\u6301\u7b80\u5355\u7684\u672c\u5730\u6587\u4ef6\u62f7\u8d1d\u5230\u955c\u50cf\u4e2d\u3002\u5f53\u76ee\u6807\u8def\u5f84\u4e0d\u5b58\u5728\u65f6\u81ea\u52a8\u521b\u5efa\u3002\u5728\u4e0d\u9700\u8981ADD\u7684\u7279\u6b8a\u529f\u80fd\uff08\u81ea\u52a8\u89e3\u538b\u3001URL\u4e0b\u8f7d\uff09\u65f6\u5e94\u8be5\u4f18\u5148\u4f7f\u7528COPY<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-98.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"904\" height=\"591\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-98.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1073\"  sizes=\"auto, (max-width: 904px) 100vw, 904px\" \/><\/div><\/figure>\n\n\n\n<p><strong>VOLUME\u5b9a\u4e49\u533f\u540d\u5377\uff1a<\/strong>\u5bb9\u5668\u8fd0\u884c\u65f6\u5e94\u8be5\u5c3d\u91cf\u4fdd\u6301\u5bb9\u5668\u5b58\u50a8\u5c42\u4e0d\u53d1\u751f\u5199\u64cd\u4f5c\uff0c\u5bf9\u4e8e\u6570\u636e\u5e93\u7c7b\u9700\u8981\u4fdd\u5b58\u52a8\u6001\u6570\u636e\u7684\u5e94\u7528\uff0c\u5176\u6570\u636e\u5e93\u6587\u4ef6\u5e94\u8be5\u4fdd\u5b58\u4e8e\u5377\u4e2d\u3002\u5728Dockerfile\u4e2d\uff0c\u53ef\u4ee5\u4e8b\u5148\u6307\u5b9a\u67d0\u4e9b\u76ee\u5f55\u6302\u8f7d\u4e3a\u533f\u540d\u5377\uff0c\u8fd9\u6837\u5728\u8fd0\u884c\u662f\u5982\u679c\u7528\u6237\u4e0d\u6307\u5b9a\u6302\u8f7d\u70b9\uff0c\u5176\u5e94\u7528\u7a0b\u5e8f\u4e5f\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\uff0c\u53ea\u4e0d\u8fc7\u65e0\u6cd5\u5411\u5bb9\u5668\u5b58\u50a8\u5c42\u4e2d\u5199\u5165\u6570\u636e\u5e93\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-101-1024x224.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"224\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-101-1024x224.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1076\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>USER\u6307\u5b9a\u5bb9\u5668\u8fd0\u884c\u65f6\u7684UID\uff1a<\/strong>\u5982\u679c\u67d0\u4e2a\u670d\u52a1\u4e0d\u9700\u8981\u7279\u6743\u6267\u884c\uff0c\u5efa\u8bae\u4f7f\u7528USER\u6307\u4ee4\u5207\u6362\u5230\u975eroot\u7528\u6237<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-102-1024x223.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"223\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-102-1024x223.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1077\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><strong>WORKDIR\u914d\u7f6e\u5de5\u4f5c\u76ee\u5f55<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-103.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"980\" height=\"267\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-103.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1078\"  sizes=\"auto, (max-width: 980px) 100vw, 980px\" \/><\/div><\/figure>\n\n\n\n<p><strong>ONBUILD\uff1a<\/strong>ONBUILD\u662f\u4e00\u4e2a\u7279\u6b8a\u7684\u6307\u4ee4\uff0c\u5b83\u540e\u9762\u8ddf\u7684\u662f\u5176\u4ed6\u6307\u4ee4\uff0c\u6bd4\u5982RUN\uff0cCOPY\u7b49\uff0c\u800c\u8fd9\u4e9b\u6307\u4ee4\uff0c\u5728\u5f53\u524d\u955c\u50cf\u6784\u5efa\u65f6\u4e0d\u4f1a\u88ab\u6267\u884c\u3002\u53ea\u6709\u5f53\u4ee5\u5f53\u524d\u955c\u50cf\u4e3a\u57fa\u7840\uff0c\u53bb\u6784\u5efa\u4e0b\u4e00\u7ea7\u955c\u50cf\u7684\u65f6\u5019\u624d\u4f1a\u88ab\u6267\u884c\u3002ONBUILD\u7684\u4f5c\u7528\u4e3b\u8981\u5c31\u662f\u6765\u89e3\u51b3\u6307\u4ee4\u91cd\u590d\u4f7f\u7528\u7684\u95ee\u9898\uff0c\u5c31\u50cf\u7f16\u7a0b\u91cc\u9762\u7684\u51fd\u6570\u4e00\u6837\uff0c\u4e00\u4e9b\u5197\u4f59\u7684\u52a8\u4f5c\u53ef\u4ee5\u653e\u5230\u955c\u50cfA\u4e0a\uff0c\u540e\u7eed\u7684\u955c\u50cf\u5728\u6784\u9020\u7684\u65f6\u5019\u53ef\u4ee5\u76f4\u63a5\u8c03\u7528\u955c\u50cfA\u4e2dONBUILD\u89c4\u5b9a\u7684\u6b65\u9aa4\u6765\u6267\u884c\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-104.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"265\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-104.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1079\"  sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/div><\/figure>\n\n\n\n<p><strong>SHELL\u6307\u5b9a\u9ed8\u8ba4\u7684shell\u7c7b\u578b\uff1a<\/strong>\u8be5\u6307\u4ee4\u5141\u8bb8\u4f7f\u7528shell\u5f62\u5f0f\u8986\u76d6\u547d\u4ee4\uff0cLinux\u4e2d\u9ed8\u8ba4\u7684Shell\u662f[&#8220;\/bin\/sh&#8221;\uff0c&#8221;-c&#8221;]\uff0c\u800c\u5728Windows\u4e2d\u9ed8\u8ba4\u7684Shell\u662f[&#8220;cmd&#8221;,&#8221;\/S&#8221;,&#8221;\/C&#8221;]\u5982\u679cLinux\u4e2d\u8fd8\u5b58\u5728\u5907\u7528\u7684shell\u5982\uff08zsh\u3001csh\u3001tcsh\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-105.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"696\" height=\"283\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-105.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1080\"  sizes=\"auto, (max-width: 696px) 100vw, 696px\" \/><\/div><\/figure>\n\n\n\n<p><strong>HEALTHCHECK\u5065\u5eb7\u68c0\u67e5\uff1a<\/strong>\u8be5\u547d\u4ee4\u662f\u8fdb\u884c\u68c0\u67e5\u5bb9\u5668\u5065\u5eb7\u72b6\u51b5\u7684\u547d\u4ee4\u3002\u5728\u6ca1\u6709healthcheck\u6307\u4ee4\u524ddocker\u5f15\u64ce\u53ea\u53ef\u4ee5\u901a\u8fc7\u5bb9\u5668\u5185\u4e3b\u8fdb\u7a0b\u662f\u5426\u9000\u51fa\u6765\u5224\u65ad\u5bb9\u5668\u662f\u5426\u72b6\u6001\u5f02\u5e38\u3002\u5f88\u591a\u60c5\u51b5\u4e0b\u8fd9\u6ca1\u95ee\u9898\uff0c\u4f46\u662f\u5982\u679c\u7a0b\u5e8f\u8fdb\u5165\u6b7b\u9501\u72b6\u6001\uff0c\u6216\u8005\u6b7b\u5faa\u73af\u72b6\u6001\uff0c\u5e94\u7528\u8fdb\u7a0b\u5e76\u4e0d\u9000\u51fa\uff0c\u4f46\u662f\u8be5\u5bb9\u5668\u5df2\u7ecf\u65e0\u6cd5\u63d0\u4f9b\u670d\u52a1\u4e86\u3002<br>\u5f53\u5728\u4e00\u4e2a\u955c\u50cf\u6307\u5b9a\u4e86HEALTHCHECK\u6307\u4ee4\u540e\uff0c\u7528\u5176\u542f\u52a8\u5bb9\u5668\uff0c\u521d\u59cb\u72b6\u6001\u4f1a\u53d8\u4e3astarting\uff0c\u5728HEALTHCHECK\u6307\u4ee4\u68c0\u67e5\u6210\u529f\u540e\u53d8\u4e3ahealth\uff0c\u5982\u679c\u8fde\u7eed\u4e00\u5b9a\u6b21\u6570\u5931\u8d25\uff0c\u5219\u4f1a\u53d8\u4e3aunheathy\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-106-1024x321.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"321\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-106-1024x321.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1081\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Dockerfile\u53cd\u67e5<\/h2>\n\n\n\n<p>\u5f53\u6765\u5230\u76ee\u6807\u7f51\u7edc\uff0c\u53d1\u73b0\u4e86\u5185\u7f51\u7684\u955c\u50cf\u4ed3\u5e93\uff0c\u5982\u4f55\u901a\u8fc7\u4e0b\u8f7d\u7684\u4e00\u4e2a\u955c\u50cf\u6216\u8005\u8bf4\u8f6c\u6362\u8fd9\u4e2a\u955c\u50cf\u53d8\u6210dockerfile\uff1f\u5982\u679c\u62e5\u6709\u4e86dockerfile\u4e4b\u540e\u5c31\u53ef\u4ee5\u77e5\u9053\u8fd9\u4e2a\u5bb9\u5668\u662f\u600e\u4e48\u6784\u5efa\u7684\uff0c\u5728\u6784\u5efa\u8fc7\u7a0b\u4e2d\u4e00\u4e9b\u53d8\u91cf\u4e00\u4e9b\u5bc6\u7801\u7b49\u91cd\u8981\u4fe1\u606f\u5c31\u53ef\u4ee5\u83b7\u53d6\u5230\u3002<\/p>\n\n\n\n<p>docker save -o\u547d\u4ee4\u53ef\u4ee5\u5bfc\u51fa\u4e00\u4e2a\u955c\u50cf\u6587\u4ef6\u4e3atar\u5305<br>tar\u7684\u5185\u5bb9\u6587\u4ef6\u901a\u5e38\u7531\u4ee5\u4e0b\u4e09\u90e8\u5206\u7ec4\u6210<br>1.image Manifest<br>2.image layer FilesystemChangest<br>3.image Configuration<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">image Manifest<\/h3>\n\n\n\n<p>\u8fd9\u4e2a\u5185\u5bb9\u5bf9\u5e94\u7740manifest.json\u8fd9\u4e2a\u6587\u4ef6\u3002\u8be5json\u6587\u4ef6\u4e2d\u5199\u660e\u767d\u4e86\u8fd9\u4e2a\u5bb9\u5668\u4e00\u5171\u662f\u6709\u54ea\u4e9b\u5c42\u6784\u9020\u7684\uff0c\u5b83\u4eec\u7684\u6784\u9020\u987a\u5e8f\u662f\u4ec0\u4e48\u3002\u8fd9\u91cc\u5c55\u793a\u7684\u53ea\u6709\u4e00\u5c42\uff0c\u5f53\u5b58\u5728\u591a\u5c42\u7684\u65f6\u5019\u6700\u4e0b\u5c42\u662f\u6700\u65b0\u5c01\u88c5\u7684\u4e00\u5c42\uff0c\u6700\u4e0a\u4e00\u5c42\u662f\u6700\u5e95\u5c42\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-107-1024x691.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"691\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-107-1024x691.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1084\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e3e\u4e2a\u5b9e\u5728\u7684\u4f8b\u5b50<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-109-1024x509.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"509\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-109-1024x509.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1086\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">image Configuration<\/h3>\n\n\n\n<p>Docker \u955c\u50cf\u7531\u591a\u4e2a layer \u7ec4\u6210\uff0c\u6bcf\u4e00\u5c42\u672c\u8d28\u4e0a\u662f\u76f8\u5bf9\u4e8e\u524d\u4e00\u5c42\u6587\u4ef6\u7cfb\u7edf\u7684\u589e\u91cf\u53d8\u5316\uff08diff\uff09\u3002\u5728\u5b58\u50a8\u548c\u5206\u53d1\u8fc7\u7a0b\u4e2d\uff0c\u8fd9\u4e9b layer \u901a\u5e38\u4ee5 tar \u5305\u5f62\u5f0f\u5b58\u5728\uff0c\u4f46\u5176\u672c\u8d28\u5e76\u4e0d\u662f\u5b8c\u6574\u7684\u6587\u4ef6\u7cfb\u7edf\uff0c\u800c\u662f\u6587\u4ef6\u7cfb\u7edf\u7684\u5dee\u5f02\u6570\u636e\u3002\u5728tar\u5305\u4e2dimage Configuration\u5219\u4ee3\u8868\u7684\u662f\u955c\u50cf\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u901a\u8fc7manifest\u5c42\u7ea7\u53ef\u4ee5\u770b\u5230\u5bf9\u5e94\u7684config\u6587\u4ef6\u6240\u5728\u4f4d\u7f6e<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-110-1024x154.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"154\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-110-1024x154.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1087\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u67e5\u770b\u8be5json\u7684\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-111-1024x659.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"659\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-111-1024x659.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1088\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">history\u53cd\u67e5<\/h3>\n\n\n\n<p>history\u662fdocker\u5185\u7f6e\u7684\u9ed8\u8ba4\u547d\u4ee4\uff0c\u901a\u8fc7\u8be5\u547d\u4ee4\u53ef\u4ee5\u770b\u5230\u5bb9\u5668\u7684\u6784\u5efa\u8fc7\u7a0b<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-113-1024x261.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"261\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-113-1024x261.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1090\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-114-1024x671.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"671\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-114-1024x671.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1091\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">dfimage\u53cd\u67e5<\/h3>\n\n\n\n<p>dfimage \u7684\u53cd\u67e5\u539f\u7406\u662f\u57fa\u4e8e Docker \u955c\u50cf config \u4e2d\u7684 history \u4fe1\u606f\uff0c\u901a\u8fc7\u63d0\u53d6\u6bcf\u4e00\u5c42\u7684 created_by \u5b57\u6bb5\uff0c\u89e3\u6790\u5176\u5bf9\u5e94\u7684\u6784\u5efa\u547d\u4ee4\uff08\u5982 RUN\u3001CMD\u3001ENV \u7b49\uff09\uff0c\u5e76\u6309\u987a\u5e8f\u7ec4\u5408\uff0c\u4ece\u800c\u81ea\u52a8\u751f\u6210\u8fd1\u4f3c\u7684 Dockerfile\u3002\u4f46\u8be5\u8fc7\u7a0b\u4f9d\u8d56 history \u4fe1\u606f\u7684\u5b8c\u6574\u6027\uff0c\u56e0\u6b64\u5728\u4f7f\u7528 OCI \u683c\u5f0f\u6216 BuildKit \u6784\u5efa\u7684\u955c\u50cf\u4e2d\uff0c\u53ef\u80fd\u65e0\u6cd5\u5b8c\u5168\u8fd8\u539f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker pull alpine\/dfimage\nalias dfimage=\"docker run -v \/var\/run\/docker.sock:\/var\/run\/docker.sock --rm alpine\/dfimage\"\ndfimage -sV=1.40 eeb6ee3f44bd<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-112-1024x442.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"442\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-112-1024x442.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1089\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">dive\u53cd\u67e5<\/h3>\n\n\n\n<p>dive \u53ef\u4ee5\u8be6\u7ec6\u5c55\u793a\u955c\u50cf\u5404\u5c42\u7684\u6587\u4ef6\u7cfb\u7edf\u53d8\u5316\uff08diff\uff09\uff0c\u901a\u8fc7\u5206\u6790\u8fd9\u4e9b\u53d8\u5316\u53ef\u4ee5\u8f85\u52a9\u63a8\u65ad Dockerfile \u7684\u6784\u5efa\u8fc7\u7a0b\uff0c\u4f46\u7531\u4e8e\u5176\u4e0d\u5305\u542b\u539f\u59cb\u6784\u5efa\u547d\u4ee4\u4fe1\u606f\uff0c\u56e0\u6b64\u65e0\u6cd5\u50cf dfimage \u90a3\u6837\u76f4\u63a5\u8fd8\u539f Dockerfile\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker pull wagoodman\/dive\nalias dive=\"docker run -it --rm -v \/var\/run\/docker.sock:\/var\/run\/doc\nker.sock wagoodman\/dive\"\ndive eeb6ee3f44bd<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-115-1024x611.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"611\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-115-1024x611.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1092\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u6076\u610fdockerfile<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-116-1024x271.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"271\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-116-1024x271.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1093\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fd9\u91cc\u662f\u5c06\u5bb9\u5668\u7684\/etc\/passwd\u8fdb\u884c\u4e86\u8fd4\u56de\uff0c\u5f53\u7136\u4e5f\u53ef\u4ee5\u6307\u5b9a\u5c06\u5bbf\u4e3b\u673a\u7684\u6839\u76ee\u5f55\u8fdb\u884c\u6302\u8f7d\u7136\u540e\u8fd4\u56de\u5bbf\u4e3b\u673a\u7684\u654f\u611f\u6587\u4ef6\u63d0\u9ad8\u5229\u7528\u529b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-117-1024x611.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"611\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-117-1024x611.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1094\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-118-1024x611.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"611\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-118-1024x611.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1095\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u8fd8\u6709\u4e00\u4e9b\u76f4\u63a5\u8fdc\u7a0b\u4e0b\u8f7d\u811a\u672c\u7684\u5229\u7528\u65b9\u6cd5<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-119-1024x372.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"372\" data-original=\"http:\/\/charlottezhiend.cn:8080\/wp-content\/uploads\/2026\/04\/image-119-1024x372.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-1096\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u57fa\u7840\u6982\u5ff5 \u865a\u62df\u5316 \u865a\u62df\u5316\u7b80\u5355\u6765\u8bf4\u5c31\u662f\u628a\u4e00\u53f0\u7269\u7406\u8ba1\u7b97\u673a\uff0c\u62c6\u5206\u6210\u591a\u53f0\u201d\u865a\u62df\u8ba1\u7b97\u673a\u201c\uff0c\u6bcf\u4e00\u53f0\u865a\u62df\u673a\u90fd\u53ef\u4ee5\u8fd0\u884c\u81ea\u5df1\u7684\u64cd [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":929,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,1],"tags":[21],"class_list":["post-926","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-security","category-lern","tag-cloud-security"],"_links":{"self":[{"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/posts\/926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/comments?post=926"}],"version-history":[{"count":23,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/posts\/926\/revisions"}],"predecessor-version":[{"id":1097,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/posts\/926\/revisions\/1097"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/media\/929"}],"wp:attachment":[{"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/media?parent=926"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/categories?post=926"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/charlottezhiend.cn:8080\/index.php\/wp-json\/wp\/v2\/tags?post=926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}