Mu Toolkit for Isolated Linux Docker Containers kusatetezeka (), zomwe, pansi pazifukwa zina, zimakulolani kuti mufike kumalo osungira alendo kuchokera ku chidebe ngati muli ndi mphamvu yotsegulira zithunzi zanu pa dongosolo kapena ndi mwayi wopita ku chidebe chothamanga. Vuto limapezeka m'mitundu yonse ya Docker ndipo silinakhazikitsidwe (lomwe likufuna, koma silinavomerezedwebe, , yomwe imagwiritsa ntchito kuyimitsidwa kwa chidebecho pamene ikugwira ntchito ndi FS).
Chiwopsezocho chimalola kuti mafayilo achotsedwe mu chidebe kupita kugawo losasinthika la fayilo ya wolandila akamatsatira lamulo la "docker cp". Kuchotsa mafayilo kumachitidwa ndi ufulu wa mizu, zomwe zimapangitsa kuti zitheke kuwerenga kapena kulemba mafayilo aliwonse m'malo osungira, zomwe zimakhala zokwanira kuti muzitha kuyang'anira makina osungira (mwachitsanzo, mukhoza kulemba /etc/shadow).
Kuwukiraku kumatha kuchitika pomwe woyang'anira apereka lamulo la "docker cp" kukopera mafayilo kupita kapena kuchokera pachidebecho. Chifukwa chake, wowukirayo amayenera kutsimikizira woyang'anira Docker kufunikira kochita izi ndikulosera njira yomwe imagwiritsidwa ntchito pokopera. Kumbali ina, kuukira kungathe kuchitika, mwachitsanzo, pamene mautumiki amtambo amapereka zida zokopera mafayilo osinthika mu chidebe, chomangidwa pogwiritsa ntchito lamulo la "docker cp".
Vutoli limadza chifukwa cha kulephera kugwiritsa ntchito bwino ntchitoyo , yomwe imawerengera njira yokwanira mu fayilo yayikulu yotengera njira yachibale, poganizira kuyika kwa chidebecho. Ndikuchita lamulo la "docker cp", kwakanthawi kochepa , momwe njirayo yatsimikiziridwa kale, koma ntchitoyo sinachitikebe. Popeza kukopera kumachitidwa molingana ndi dongosolo lalikulu la fayilo la osungira, mkati mwa nthawi yodziwika, mutha kusintha ulalowo ndi njira ina ndikuyamba kukopera deta kumalo osagwirizana ndi fayilo kunja kwa fayilo. chotengera.
Popeza nthawi zenera kuti mpikisano chikhalidwe kuchitika ndi yochepa kwambiri mu kukonzekera Mukamagwiritsa ntchito kukopera kuchokera mumtsuko, zinali zotheka kuukiridwa bwino m'malo ochepera 1% mutasintha ulalo wophiphiritsa m'njira yomwe imagwiritsidwa ntchito pojambula (kuwukira kopambana kunachitika pambuyo pa masekondi pafupifupi 10 akuyesera. kukopera fayilo mosalekeza ndi lamulo la "docker cp").
Pochita kukopera mu chidebe, mutha kukwaniritsa fayilo yobwerezabwereza yobwerezabwereza pamakina osungiramo mobwerezabwereza pang'ono. Kuthekera kwa kuwukira ndi chifukwa chakuti pokopera mu chidebe, lingaliro la "chrootarchive" limagwiritsidwa ntchito, molingana ndi momwe archive.go process imatulutsira zosungidwazo osati muzu wa chidebe, koma mu chroot. chikwatu cha makolo cha njira yomwe chandamale, yoyendetsedwa ndi wowukirayo, ndipo siyimitsa chidebecho (chroot imagwiritsidwa ntchito ngati chikwangwani kugwiritsa ntchito mipikisano).
Source: opennet.ru
