ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ

ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ

ืžื™ืจ ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื ืึธืš ื“ื™ ื˜ืขืžืข ืคื•ืŸ โ€‹โ€‹ื ื™ืฆืŸ ืกื™ืกื˜ืขืž ืื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ืคึฟืึทืจ ืึท ืœืึทื ื’ ืฆื™ื™ึทื˜. ืฆื•ืจื™ืง ืื™ืŸ 2014, ืื•ื ื“ื–ืขืจ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื™ื ื–ืฉืขื ื™ืจ Daniel Walsh ื’ืขืฉืจื™ื‘ืŸ ืึทืŸ ืึทืจื˜ื™ืงืœ ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ื“ืึธืงืงืขืจ ืงืึทื ื˜ื™ื™ื ืขืจ, ืื•ืŸ ื ืคึผืึธืจ ืคื•ืŸ ื™ืืจ ืฉืคึผืขื˜ืขืจ - ืื ื“ืขืจืŸ, ื•ื•ืึธืก ืื™ื– ื’ืขืจื•ืคืŸ ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ื ื™ื˜-ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืงืึทื ื˜ื™ื™ื ืขืจ, ืื™ ืŸ ืฐืขืœื› ืŸ ืข ืจ ื”ื ื˜ ื’ืขื–ืื’ ื˜ ื ื– ื“ ื™ ืœืื’ ืข ื”ื ื˜ ื–ื™ ืš ื ื™ืฉ ื˜ ืคื™ ืœ ืคืืจื‘ืขืกืขืจื˜ . ื‘ืื–ื•ื ื“ืขืจ ื”ืื˜ ืขืจ ื’ืขืฉืจื™ื‘ืŸ ืื– "ืœื™ื™ื“ืขืจ, ืืคื™ืœื• ืฆื•ื•ื™ื™ ื™ืืจ ืฉืคึผืขื˜ืขืจ, ืื•ื™ื‘ ืื™ืจ ื’ื•ื’ืœ "ื“ืึธืงืงืขืจ ืกื™ืกื˜ืขื", ื“ืขืจ ืขืจืฉื˜ืขืจ ื–ืึทืš ื•ื•ืึธืก ืงื•ืžื˜ ืึทืจื•ื™ืฃ ืื™ื– ื–ื™ื™ืŸ ื–ืขืœื‘ื™ืงืขืจ ืึทืœื˜ ืึทืจื˜ื™ืงืœ. ืึทื–ื•ื™ ืขืก ืื™ื– ืฆื™ื™ื˜ ืฆื• ื˜ื•ื™ืฉืŸ ืขืคึผืขืก. โ€ ืื™ืŸ ื“ืขืจืฆื•, ืžื™ืจ ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื’ืขืจืขื“ื˜ ื•ื•ืขื’ืŸ ืงืึธื ืคืœื™ืงื˜ ืฆื•ื•ื™ืฉืŸ ื“ืึธืงืงืขืจ ืื•ืŸ ืกื™ืกื˜ืขื ื“ืขื•ื•ืขืœืึธืคึผืขืจืก.

ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ

ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ืžื™ืจ ื•ื•ืขืœืŸ ื•ื•ื™ื™ึทื–ืŸ ื•ื•ืึธืก ื”ืื˜ ื’ืขื‘ื™ื˜ืŸ ืื™ื‘ืขืจ ืฆื™ื™ึทื˜ ืื•ืŸ ื•ื•ื™ ืคึผืึธื“ืžืึทืŸ ืงืขื ืขืŸ ื”ืขืœืคืŸ ืื•ื ื“ื– ืื™ืŸ ื“ืขื ืขื ื™ืŸ.

ืขืก ื–ืขื ืขืŸ ืคื™ืœืข ืกื™ื‘ื•ืช ืฆื• ืœื•ื™ืคืŸ ืกื™ืกื˜ืขื ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ, ืึทื–ืึท ื•ื•ื™:

  1. ืžื•ืœื˜ื™ืกืขืจื•ื•ื™ืก ืงืึทื ื˜ื™ื™ื ืขืจื– - ืคื™ืœืข ืžืขื ื˜ืฉืŸ ื•ื•ื™ืœืŸ ืฆื• ืฆื™ืขืŸ ื–ื™ื™ืขืจ ืžื•ืœื˜ื™-ื“ื™ื ืกื˜ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคึฟื•ืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืื•ืŸ ืœื•ื™ืคืŸ ื–ื™ื™ ืื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื–. ืขืก ื•ื•ืึธืœื˜ ื–ื™ื™ืŸ ื‘ืขืกืขืจ, ืคื•ืŸ ืงื•ืจืก, ืฆื• ืฆืขื‘ืจืขื›ืŸ ืึทื–ืึท ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื™ืŸ ืžื™ืงืจืึธืกืขืจื•ื•ื™ืกืขืก, ืึธื‘ืขืจ ื ื™ื˜ ืึทืœืขืžืขืŸ ื•ื•ื™ื™ืกื˜ ื•ื•ื™ ืฆื• ื˜ืึธืŸ ื“ืึธืก ื ืึธืš ืึธื“ืขืจ ืคืฉื•ื˜ ื ื™ืฉื˜ ื”ืึธื‘ืŸ ื“ื™ ืฆื™ื™ื˜. ื“ืขืจื™ื‘ืขืจ, ืคืœื™ืกื ื“ื™ืง ืึทื–ืึท ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื•ื•ื™ ืกืขืจื•ื•ื™ืกืขืก ืœืึธื ื˜ืฉื˜ ื“ื•ืจืš ืกื™ืกื˜ืขืž ืคื•ืŸ ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืขืก ืื™ื– ื’ืื ืฅ ื–ื™ื ืขืŸ.
  2. ืกื™ืกื˜ืขื ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืขืก - ืจื•ื‘ึฟ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื•ื•ืึธืก ืœื•ื™ืคืŸ ื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ื–ืขื ืขืŸ ื’ืขื‘ื•ื™ื˜ ืคื•ืŸ ืงืึธื“ ื•ื•ืึธืก ื‘ื™ื– ืึทื”ืขืจ ื’ืขืœืืคืŸ ืื•ื™ืฃ ื•ื•ื™ืจื˜ื•ืึทืœ ืึธื“ืขืจ ื’ืฉืžื™ื•ืช ืžืืฉื™ื ืขืŸ. ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื”ืึธื‘ืŸ ืึท ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ื’ืขืฉืจื™ื‘ืŸ ืคึฟืึทืจ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืื•ืŸ ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื•ื•ื™ ื–ื™ื™ ื–ืึธืœ ื–ื™ื™ืŸ ืœืึธื ื˜ืฉื˜. ืึทื–ื•ื™ ืขืก ืื™ื– ื ืึธืš ื‘ืขืกืขืจ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ืกืขืจื•ื•ื™ืกืขืก ื ื™ืฆืŸ ื’ืขืฉื˜ื™ืฆื˜ ืžืขื˜ื”ืึธื“ืก, ืืœื ื•ื•ื™ ื›ืึทืงื™ื ื’ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื™ื ื™ื˜ ื“ื™ื ืกื˜.
  3. Systemd ืื™ื– ืึท ืคึผืจืึธืฆืขืก ืคืึทืจื•ื•ืึทืœื˜ืขืจ. ืขืก ืคึผืขืจืคืึธืจืžื– ื“ื™ื ืกื˜ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ (ืฉืึทื˜ื“ืึทื•ืŸ, ืจื™ืกื˜ืึทืจื˜ ื‘ืึทื“ื™ื ื•ื ื’ืก ืึธื“ืขืจ ืงื™ืœื– ื–ืึทืžื‘ื™ ืคึผืจืึทืกืขืกืึทื–) ื‘ืขืกืขืจ ื•ื•ื™ ืงื™ื™ืŸ ืื ื“ืขืจืข ื’ืขืฆื™ื™ึทื’.

ื•ื•ื™ ื’ืขื–ืึธื’ื˜, ืขืก ื–ืขื ืขืŸ ืคื™ืœืข ืกื™ื‘ื•ืช ื ื™ืฉื˜ ืฆื• ืœื•ื™ืคืŸ ืกื™ืกื˜ืขื ืื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื–. ื“ื™ ื”ื•ื™ืคึผื˜ ืื™ื– ืึทื– ืกื™ืกื˜ืขืž / ื“ื–ืฉืึธื•ืจื ืึทืœื“ ืงืึธื ื˜ืจืึธืœืก ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ืื•ืŸ ืžื›ืฉื™ืจื™ื ื•ื•ื™ Kubernetes ืึธื“ืขืจ ืึธื•ืคึผืึทื ืฉื™ืคื˜ ื“ืขืจื•ื•ืึทืจื˜ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ืฆื• ืฉืจื™ื™ึทื‘ืŸ ืงืœืึธืฅ ื’ืœื™ื™ึทืš ืฆื• ืกื˜ื“ืึธื•ื˜ ืื•ืŸ ืกื˜ื“ืขืจืจ. ื“ืขืจื™ื‘ืขืจ, ืื•ื™ื‘ ืื™ืจ ื•ื•ืขื˜ ืคื™ืจืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ื“ื•ืจืš ืึธืจืงืขืกื˜ืจืึทื˜ื™ืึธืŸ ืžื›ืฉื™ืจื™ื ื•ื•ื™ ื“ื™ ืื•ื™ื‘ืŸ ื“ืขืจืžืื ื˜, ืื™ืจ ื–ืึธืœ ืขืžืขืก ื‘ืึทื˜ืจืึทื›ื˜ืŸ ื ื™ืฆืŸ ืกื™ืกื˜ืขืž-ื‘ืื–ื™ืจื˜ ืงืึทื ื˜ื™ื™ื ืขืจื–. ืึทื“ื“ื™ื˜ื™ืึธื ืึทืœืœื™, ื“ืึธืงืงืขืจ ืื•ืŸ ืžืึธื‘ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื”ืึธื‘ืŸ ืึธืคื˜ ื’ืขื•ื•ืขืŸ ืฉื˜ืืจืง ืงืขื’ืŸ ืฆื• ื ื•ืฆืŸ ืกื™ืกื˜ืขืž ืื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื–.

ื“ื™ ืงื•ืžืขืŸ ืคื•ืŸ ืคึผืึธื“ืžืึทืŸ

ืžื™ืจ ื–ืขื ืขืŸ ืฆื•ืคืจื™ื“ืŸ ืฆื• ื‘ืึทืจื™ื›ื˜ ืึทื– ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ืื™ื– ืœืขืกืึธืฃ ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืคืึธืจื•ื™ืก. ื“ื™ ืžืึทื ืฉืึทืคึฟื˜ ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ืคืœื™ืกื ื“ื™ืง ืงืึทื ื˜ื™ื™ื ืขืจื– ืื™ืŸ Red Hat ื‘ืึทืฉืœืึธืกืŸ ืฆื• ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ืงืึทื ื˜ื™ื™ื ืขืจ ืžืึธื˜ืึธืจ. ืขืจ ื”ืื˜ ื’ืขื”ืื˜ ื ื ืืžืขืŸ ืคึผืึธื“ืžืึทืŸ ืื•ืŸ ืึธืคืคืขืจืก ื“ื™ ื–ืขืœื‘ืข ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื” ืฆื•ื‘ื™ื ื“ (CLI) ื•ื•ื™ Docker. ืื•ืŸ ื›ึผืžืขื˜ ืึทืœืข ื“ืึธืงืงืขืจ ืงืึทืžืึทื ื“ื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ืคึผืึธื“ืžืึทืŸ ืื•ื™ืฃ ื“ื™ ื–ืขืœื‘ืข ื•ื•ืขื’. ืžื™ ืจ ืคื™ืจ ืŸ ืืค ื˜ ืกืขืžื™ื ืืจืŸ , ืฐืขืœื› ืข ืฐืขืจ ืŸ ืื™ืฆ ื˜ ืื ื’ืขืจื•ืคืŸ ื˜ืฉืึทื ื’ื™ื ื’ ื“ืึธืงืงืขืจ ืฆื• ืคึผืึธื“ืžืึทืŸ, ืื•ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ืจื•ืง ืจื•ืคื˜ ืฆื• ืฉืจื™ื™ื‘ืŸ: alias docker=podman.

ืคื™ืœืข ืžืขื ื˜ืฉืŸ ื˜ืึธืŸ ื“ืึธืก.

ืžื™ื™ึทืŸ ืคึผืึธื“ืžืึทืŸ ืื•ืŸ ืื™ืš ื–ืขื ืขืŸ ืื™ืŸ ืงื™ื™ืŸ ื•ื•ืขื’ ืงืขื’ืŸ ืกื™ืกื˜ืขื-ื‘ืื–ื™ืจื˜ ืงืึทื ื˜ื™ื™ื ืขืจื–. ื ืึธืš ืึทืœืข, Systemd ืื™ื– ื“ื™ ืžืขืจืกื˜ ืงืึทืžืึทื ืœื™ ื’ืขื•ื•ื™ื™ื ื˜ ืœื™ื ื•ืงืก ื™ื ื™ื˜ ืกืึทื‘ืกื™ืกื˜ืึทื, ืื•ืŸ ื ื™ืฉื˜ ืœืึธื–ืŸ ืขืก ืฆื• ืึทืจื‘ืขื˜ืŸ ืจืขื›ื˜ ืื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ืžื™ื˜ืœ ื™ื’ื ืึธืจื™ื ื’ ื•ื•ื™ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ืžืขื ื˜ืฉืŸ ื–ืขื ืขืŸ ืฆื•ื’ืขื•ื•ื•ื™ื ื˜ ืฆื• ืœื•ื™ืคืŸ ืงืึทื ื˜ื™ื™ื ืขืจื–.

ืคึผืึธื“ืžืึทืŸ ื•ื•ื™ื™ืกื˜ ื•ื•ืึธืก ืฆื• ื˜ืึธืŸ ืฆื• ืžืึทื›ืŸ ืกื™ืกื˜ืขื ืึทืจื‘ืขื˜ ืจืขื›ื˜ ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ. ืขืก ื“ืึทืจืฃ ื–ืื›ืŸ ื•ื•ื™ ืžืึทื•ื ื˜ื™ื ื’ ื˜ืžืคึผืคืก ืื•ื™ืฃ / ืœื•ื™ืคืŸ ืื•ืŸ / ื˜ืžืคึผ. ื–ื™ ืœื™ื™ืงืก ืฆื• ื”ืึธื‘ืŸ ื“ื™ "ืงืึทื ื˜ืึทื™ื ืขืจื™ื–ืขื“" ืกื•ื•ื™ื•ื•ืข ืขื ื™ื™ื‘ืึทืœื“ ืื•ืŸ ื™ืงืกืคึผืขืงืฅ ืฉืจื™ื™ึทื‘ืŸ ืคึผืขืจืžื™ืฉืึทื ื– ืฆื• ืื™ืจ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ cgroup ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืื•ืŸ ืฆื• ื“ื™ /var/log/journald ื˜ืขืงืข.

ื•ื•ืขืŸ ืื™ืจ ืึธื ื”ื™ื™ื‘ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ ืื™ืŸ ื•ื•ืึธืก ื“ืขืจ ืขืจืฉื˜ืขืจ ื‘ืึทืคึฟืขืœ ืื™ื– ื™ื ื™ื˜ ืึธื“ืขืจ ืกื™ืกื˜ืขืžื“, ืคึผืึธื“ืžืึทืŸ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืงืึทื ืคื™ื’ื™ืขืจ ื˜ืžืคึผืคืก ืื•ืŸ ืงื’ืจื•ืคึผืก ืฆื• ืขื ืฉื•ืจ ืึทื– ืกื™ืกื˜ืขื ืกื˜ืึทืจืฅ ืึธืŸ ืคืจืื‘ืœืขืžืขืŸ. ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ืขื ืึทื•ื˜ืึธ ืงืึทื˜ืขืจ ืžืึธื“ืข, ื ื•ืฆืŸ ื“ื™ --ืกื™ืกื˜ืขืžื“ = ืคืึทืœืฉ ืึธืคึผืฆื™ืข. ื‘ื™ื˜ืข ื˜ืึธืŸ ืึทื– ืคึผืึธื“ืžืึทืŸ ื ื™ืฆื˜ ื‘ืœื•ื™ื– ืกื™ืกื˜ืขืžืขื“ ืžืึธื“ืข ื•ื•ืขืŸ ืขืก ื–ืขื˜ ืึทื– ืขืก ื“ืึทืจืฃ ืฆื• ืœื•ื™ืคืŸ ืึท systemd ืึธื“ืขืจ init ื‘ืึทืคึฟืขืœ.

ื“ืึธ ืื™ื– ืึทืŸ ืื•ื™ืกืฆื•ื’ ืคื•ืŸ ื“ื™ ืžืึทื ื•ืึทืœ:

ืžืขื ื˜ืฉ ืคึผืึธื“ืžืึทืŸ ืœื•ื™ืคืŸ
...

โ€“ืกื™ืกื˜ืขื=ืืžืช|ืคืึทืœืฉ

ืœื•ื™ืคืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ ืื™ืŸ ืกื™ืกื˜ืขื ืžืึธื“ืข. ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜.

ืื•ื™ื‘ ืื™ืจ ืœื•ื™ืคืŸ ืึท ืกื™ืกื˜ืขื ืึธื“ืขืจ ื™ื ื™ื˜ ื‘ืึทืคึฟืขืœ ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ, ืคึผืึธื“ืžืึทืŸ ื•ื•ืขื˜ ืงืึทื ืคื™ื’ื™ืขืจ ื˜ืžืคึผืคืก ื‘ืืจื’ ืคื•ื ืงื˜ืŸ ืื™ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ื“ื™ื™ืจืขืงื˜ืขืจื™ื–:

/run, /run/lock, /tmp, /sys/fs/cgroup/systemd, /var/lib/journal

ืื•ื™ืš ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ื”ืึทืœื˜ืŸ ืกื™ื’ื ืึทืœ ื•ื•ืขื˜ ื–ื™ื™ืŸ SIGRTMIN +3.

ืึทืœืข ื“ืขื ืึทืœืึทื•ื– ืกื™ืกื˜ืขื ืฆื• ืœื•ื™ืคืŸ ืื™ืŸ ืึท ืคืืจืžืื›ื˜ ืงืึทื ื˜ื™ื™ื ืขืจ ืึธืŸ ืงื™ื™ืŸ ืžืึธื“ื™ืคื™ืงืึทื˜ื™ืึธื ืก.

ื ืื˜ื™ืฅ: ืกื™ืกื˜ืขื ืคืจื•ื•ื•ืŸ ืฆื• ืฉืจื™ื™ึทื‘ืŸ ืฆื• ื“ื™ cgroup ืคื™ืœืขืกื™ืกื˜ืขื. ืึธื‘ืขืจ, SELinux ืคึผืจื™ื•ื•ืขื ืฅ ืงืึทื ื˜ื™ื™ื ืขืจื– ืฆื• ื˜ืึธืŸ ื“ืึธืก ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜. ืฆื• ื’ืขื‘ืŸ ืฉืจื™ื™ื‘ืŸ, ื’ืขื‘ืŸ ื“ื™ container_manage_cgroup ื‘ื•ืœื™ืึทืŸ ืคึผืึทืจืึทืžืขื˜ืขืจ:

setsebool -P container_manage_cgroup ืืžืช

ืื™ืฆื˜ ืงื•ืง ื•ื•ื™ ื“ื™ Dockerfile ืงื•ืงื˜ ื•ื•ื™ ืคึฟืึทืจ ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ ื ื™ืฆืŸ ืคึผืึธื“ืžืึทืŸ:

# cat Dockerfile

FROM fedora

RUN dnf -y install httpd; dnf clean all; systemctl enable httpd

EXPOSE 80

CMD [ "/sbin/init" ]

ืึทื– ืก ืึทืœืข.

ืื™ืฆื˜ ืžื™ืจ ืึทืกืขืžื‘ืึทืœ ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ:

# podman build -t systemd .

ืžื™ืจ ื–ืึธื’ืŸ SELinux ืฆื• ืœืึธื–ืŸ systemd ืฆื• ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ื“ื™ Cgroups ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ:

# setsebool -P container_manage_cgroup true

ื“ื•ืจืš ื“ืขื ื•ื•ืขื’, ืคื™ืœืข ืžืขื ื˜ืฉืŸ ืคืึทืจื’ืขืกืŸ ื•ื•ืขื’ืŸ ื“ืขื ืฉืจื™ื˜. ืฆื•ืž ื’ืœื™ืง, ื“ืึธืก ื ืึธืจ ื“ืึทืจืฃ ื–ื™ื™ืŸ ื’ืขื˜ืืŸ ืึทืžืึธืœ ืื•ืŸ ื“ื™ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืื™ื– ื’ืขืจืื˜ืขื•ื•ืขื˜ ื ืึธืš ืจืขื‘ืึธืึธื˜ื™ื ื’ ื“ื™ ืกื™ืกื˜ืขื.

ืื™ืฆื˜ ืžื™ืจ ื ืึธืจ ืึธื ื”ื™ื™ื‘ืŸ ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ:

# podman run -ti -p 80:80 systemd

systemd 239 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid)

Detected virtualization container-other.

Detected architecture x86-64.

Welcome to Fedora 29 (Container Image)!

Set hostname to <1b51b684bc99>.

Failed to install release agent, ignoring: Read-only file system

File /usr/lib/systemd/system/systemd-journald.service:26 configures an IP firewall (IPAddressDeny=any), but the local system does not support BPF/cgroup based firewalling.

Proceeding WITHOUT firewalling in effect! (This warning is only shown for the first loaded unit using IP firewalling.)

[  OK ] Listening on initctl Compatibility Named Pipe.

[  OK ] Listening on Journal Socket (/dev/log).

[  OK ] Started Forward Password Requests to Wall Directory Watch.

[  OK ] Started Dispatch Password Requests to Console Directory Watch.

[  OK ] Reached target Slices.

โ€ฆ

[  OK ] Started The Apache HTTP Server.

ืึทื– ืก ืขืก, ื“ื™ ื“ื™ื ืกื˜ ืื™ื– ืึทืจื•ื™ืฃ ืื•ืŸ ืคืœื™ืกื ื“ื™ืง:

$ curl localhost

<html  xml_lang="en" lang="en">

โ€ฆ

</html>

ื ืึธื˜ื™ืฅ: ื˜ืึธืŸ ื ื™ื˜ ืคึผืจื•ื‘ื™ืจืŸ ื“ืึธืก ืื•ื™ืฃ ื“ืึธืงืงืขืจ! ืขืก ืื™ืจ ื ืึธืš ื“ืึทืจืคึฟืŸ ืฆื• ื˜ืึทื ืฆืŸ ืžื™ื˜ ืึท ื˜ืึทืžื‘ื•ืจื™ืŸ ืฆื• ืงืึทื˜ืขืจ ื“ื™ ืžื™ื ื™ื ืคื•ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ื“ื•ืจืš ื“ื™ ื“ื™ื™ืžืึทืŸ. (ื ืึธืš ืคืขืœื“ืขืจ ืื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคืืจืœืื ื’ื˜ ืฆื• ืžืึทื›ืŸ ื“ืขื ืึทืœืข ืึทืจื‘ืขื˜ ืกื™ืžืœืึทืก ืื™ืŸ ื“ืึธืงืงืขืจ, ืึธื“ืขืจ ืขืก ื•ื•ืขื˜ ื“ืึทืจืคึฟืŸ ืฆื• ื–ื™ื™ืŸ ืœื•ื™ืคืŸ ืื™ืŸ ืึท ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืงืึทื ื˜ื™ื™ื ืขืจ. ืคึฟืึทืจ ื“ืขื˜ืึทื™ืœืก, ื–ืขืŸ ืึทืจื˜ื™ืงืœ.)

ื ืคึผืึธืจ ืžืขืจ ืงื™ืœ ื–ืื›ืŸ ื•ื•ืขื’ืŸ ืคึผืึธื“ืžืึทืŸ ืื•ืŸ ืกื™ืกื˜ืขืž

ืคึผืึธื“ืžืึทืŸ ืึทืจื‘ืขื˜ ื‘ืขืกืขืจ ื•ื•ื™ ื“ืึธืงืงืขืจ ืื™ืŸ ืกื™ืกื˜ืขื ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืขืก

ืื•ื™ื‘ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ื•ื•ืขืŸ ื“ื™ ืกื™ืกื˜ืขื ืฉื™ืš, ืื™ืจ ืงืขื ืขืŸ ืคืฉื•ื˜ ืึทืจื™ื™ึทื ืœื™ื™ื’ืŸ ื“ื™ ืฆื•ื ืขืžืขืŸ ืคึผืึธื“ืžืึทืŸ ืงืึทืžืึทื ื“ื– ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข, ื•ื•ืึธืก ื•ื•ืขื˜ ืึธื ื”ื™ื™ื‘ืŸ ื“ื™ ื“ื™ื ืกื˜ ืื•ืŸ ืžืึธื ื™ื˜ืึธืจ ืขืก. ืคึผืึธื“ืžืึทืŸ ื ื™ืฆื˜ ื“ื™ ื ืึธืจืžืึทืœ ื’ืึธืคึผืœ-ืขืงืกืขืง ืžืึธื“ืขืœ. ืื™ืŸ ืื ื“ืขืจืข ื•ื•ืขืจื˜ืขืจ, ืงืึทื ื˜ื™ื™ื ืขืจ ืคึผืจืึทืกืขืกืึทื– ื–ืขื ืขืŸ ืงื™ื ื“ืขืจ ืคื•ืŸ ื“ื™ ืคึผืึธื“ืžืึทืŸ ืคึผืจืึธืฆืขืก, ืึทื–ื•ื™ ืกื™ืกื˜ืขืž ืงืขื ืขืŸ ืœื™ื™ื›ื˜ ืžืึธื ื™ื˜ืึธืจ ื–ื™ื™.

Docker ื ื™ืฆื˜ ืึท ืงืœื™ืขื ื˜-ืกืขืจื•ื•ืขืจ ืžืึธื“ืขืœ, ืื•ืŸ Docker CLI ืงืึทืžืึทื ื“ื– ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ื’ืขืฉื˜ืขืœื˜ ื’ืœื™ื™ึทืš ืื™ืŸ ืึท ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข. ืึธื‘ืขืจ, ืึทืžืึธืœ ื“ืขืจ ื“ืึธืงืงืขืจ ืงืœื™ืขื ื˜ ืงืึทื ืขืงืฅ ืฆื• ื“ื™ ื“ืึธืงืงืขืจ ื“ื™ื™ืžืึทืŸ, ืขืก (ื“ืขืจ ืงืœื™ืขื ื˜) ื•ื•ืขืจื˜ ื ืึธืจ ืืŸ ืื ื“ืขืจ ืคึผืจืึธืฆืขืก ืคึผืจืึทืกืขืกื™ื ื’ ืกื˜ื“ื™ืŸ ืื•ืŸ ืกื˜ื“ืึธื•ื˜. ืื™ืŸ ืงืขืจ, systemd ื”ืื˜ ืงื™ื™ืŸ ื’ืขื“ืึทื ืง ื•ื•ืขื’ืŸ ื“ื™ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืฆื•ื•ื™ืฉืŸ ื“ื™ ื“ืึธืงืงืขืจ ืงืœื™ืขื ื˜ ืื•ืŸ ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ ื•ื•ืึธืก ืœื•ื™ืคื˜ ืื•ื ื˜ืขืจ ื“ื™ ืงืึธื ื˜ืจืึธืœ ืคื•ืŸ ื“ื™ ื“ืึธืงืงืขืจ ื“ื™ื™ืžืึทืŸ, ืื•ืŸ ื“ืขืจื™ื‘ืขืจ, ืื™ืŸ ื“ืขื ืžืึธื“ืขืœ, ืกื™ืกื˜ืขื ืคืึทื ื“ืึทืžืขื ื˜ืึทืœื™ ืงืขื ืขืŸ ื ื™ืฉื˜ ืžืึธื ื™ื˜ืึธืจ ื“ื™ ื“ื™ื ืกื˜.

ืึทืงื˜ืึทื•ื•ื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื ื“ื•ืจืš ื›ืึธืœืขืœ

ืคึผืึธื“ืžืึทืŸ ื›ืึทื ื“ืึทืœื– ืึทืงื˜ืึทื•ื•ื™ื™ืฉืึทืŸ ื“ื•ืจืš ื›ืึธืœืขืœ ืจื™ื›ื˜ื™ืง. ื•ื•ื™ื™ึทืœ ืคึผืึธื“ืžืึทืŸ ื ื™ืฆื˜ ื“ื™ ื’ืึธืคึผืœ-ืขืงืกืขืง ืžืึธื“ืขืœ, ืขืก ืงืขื ืขืŸ ืคืึธืจื•ื™ืก ื“ื™ ื›ืึธืœืขืœ ืฆื• ื–ื™ื™ืŸ ืงื™ื ื“ ืงืึทื ื˜ื™ื™ื ืขืจ ืคึผืจืึทืกืขืกืึทื–. ื“ืึธืงืขืจ ืงืขืŸ ื ื™ืฉื˜ ื˜ืึธืŸ ื“ืึธืก ื•ื•ื™ื™ึทืœ ืขืก ื ื™ืฆื˜ ืึท ืงืœื™ืขื ื˜-ืกืขืจื•ื•ืขืจ ืžืึธื“ืขืœ.

ื“ื™ ื•ื•ืึทืจืœื™ื ืง ืกืขืจื•ื•ื™ืก ื•ื•ืึธืก ืคึผืึธื“ืžืึทืŸ ื ื™ืฆื˜ ืฆื• ื™ื‘ืขืจื’ืขื‘ืŸ ืžื™ื˜ ื•ื•ื™ื™ึทื˜ ืงืœื™ื™ืึทื ืฅ ืฆื• ืงืึทื ื˜ื™ื™ื ืขืจื– ืื™ื– ืึทืงื˜ืฉืึทื•ื•ืึทืœื™ ืึทืงื˜ื™ื•ื•ื™ื™ื˜ื™ื“ ื“ื•ืจืš ืึท ื›ืึธืœืขืœ. ื“ื™ ืงืึทืงืคึผื™ื˜-ืคึผืึธื“ืžืึทืŸ ืคึผืขืงืœ, ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ Node.js ืื•ืŸ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืงืึทืงืคึผื™ื˜ ืคึผืจื•ื™ืขืงื˜, ืึทืœืึทื•ื– ืžืขื ื˜ืฉืŸ ืฆื• ื™ื ื˜ืขืจืึทืงื˜ ืžื™ื˜ ืคึผืึธื“ืžืึทืŸ ืงืึทื ื˜ื™ื™ื ืขืจื– ื“ื•ืจืš ืึท ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“. ื“ื™ ื•ื•ืขื‘ ื“ื™ื™ืžืึทืŸ ืคืœื™ืกื ื“ื™ืง ืงืึทืงืคึผื™ื˜-ืคึผืึธื“ืžืึทืŸ ืกืขื ื“ื– ืึทืจื˜ื™ืงืœืขืŸ ืฆื• ืึท ื•ื•ืึทืจืœื™ื ืง ื›ืึธืœืขืœ ื•ื•ืึธืก ืกื™ืกื˜ืขื ืœื™ืกืึทื ื– ืื•ื™ืฃ. Systemd ื“ืขืžืึธืœื˜ ืึทืงื˜ืึทื•ื•ื™ื™ืฅ ื“ื™ ืคึผืึธื“ืžืึทืŸ ืคึผืจืึธื’ืจืึทื ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึทืจื˜ื™ืงืœืขืŸ ืื•ืŸ ืึธื ื”ื™ื™ื‘ืŸ ืึธื ืคื™ืจื•ื ื’ ืงืึทื ื˜ื™ื™ื ืขืจื–. ืึทืงื˜ืึทื•ื•ื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืื“ ืื™ื‘ืขืจ ืึท ื›ืึธืœืขืœ ื™ืœื™ืžืึทื ื™ื™ืฅ ื“ื™ ื ื•ื™ื˜ ืคึฟืึทืจ ืึท ืงืขืกื™ื™ื“ืขืจ ืคืœื™ืกื ื“ื™ืง ื“ื™ื™ืžืึทืŸ ื•ื•ืขืŸ ื™ืžืคึผืœืึทืžืขื ื™ื ื’ ื•ื•ื™ื™ึทื˜ ืึทืคึผื™ืก.

ืื™ืŸ ื“ืขืจืฆื•, ืžื™ืจ ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ืืŸ ืื ื“ืขืจ ืคึผืึธื“ืžืึทืŸ ืงืœื™ืขื ื˜ ื’ืขืจื•ืคืŸ ืคึผืึธื“ืžืึทืŸ-ื•ื•ื™ื™ึทื˜, ื•ื•ืึธืก ื™ืžืคึผืœืึทืžืึทื ืฅ ื“ื™ ื–ืขืœื‘ืข ืคึผืึธื“ืžืึทืŸ CLI ืึธื‘ืขืจ ืจื•ืคื˜ ื•ื•ืึทืจืœื™ื ืง ืฆื• ืœื•ื™ืคืŸ ืงืึทื ื˜ื™ื™ื ืขืจื–. ืคึผืึธื“ืžืึทืŸ-ื•ื•ื™ื™ึทื˜ ืงืขื ืขืŸ ืœื•ื™ืคืŸ ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ SSH ืกืขืฉืึทื ื–, ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืกื™ืงื™ื•ืจืœื™ ื™ื ื˜ืขืจืึทืงื˜ ืžื™ื˜ ืงืึทื ื˜ื™ื™ื ืขืจื– ืื•ื™ืฃ ืคืึทืจืฉื™ื“ืขื ืข ืžืืฉื™ื ืขืŸ. ืžื™ื˜ ืฆื™ื™ื˜, ืžื™ืจ ืคึผืœืึทื ื™ืจืŸ ืฆื• ื’ืขื‘ืŸ ืคึผืึธื“ืžืึทืŸ ืจื™ืžืึธื•ื˜ ืฆื• ืฉื˜ื™ืฆืŸ ืžืึทืงืึธืก ืื•ืŸ ื•ื•ื™ื ื“ืึธื•ื– ืฆื•ื–ืืžืขืŸ ืœื™ื ื•ืงืก, ืึทื–ื•ื™ ืึทื– ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืื•ื™ืฃ ื“ื™ ืคึผืœืึทื˜ืคืึธืจืžืก ืงืขื ืขืŸ ืœื•ื™ืคืŸ ืึท ืœื™ื ื•ืงืก ื•ื•ื™ืจื˜ื•ืึทืœ ืžืึทืฉื™ืŸ ืžื™ื˜ ืคึผืึธื“ืžืึทืŸ ื•ื•ืึทืจืœื™ื ืง ืคืœื™ืกื ื“ื™ืง ืื•ืŸ ื”ืึธื‘ืŸ ื“ื™ ืคื•ืœ ื“ืขืจืคืึทืจื•ื ื’ ืึทื– ืงืึทื ื˜ื™ื™ื ืขืจื– ืœื•ื™ืคืŸ ืื•ื™ืฃ ื“ื™ ื”ื™ื’ืข ืžืึทืฉื™ืŸ.

SD_NOTIFY

Systemd ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืึธืคึผืœื™ื™ื’ืŸ ื“ื™ ืงืึทื˜ืขืจ ืคื•ืŸ ืึทื’ื–ื™ืœื™ืขืจื™ ื‘ืึทื“ื™ื ื•ื ื’ืก ื‘ื™ื– ื“ื™ ืงืึทื ื˜ืึทืžืึทื ื™ื™ื–ื“ ื“ื™ื ืกื˜ ื–ื™ื™ ื“ืึทืจืคืŸ ืกื˜ืึทืจืฅ. ืคึผืึธื“ืžืึทืŸ ืงืขื ืขืŸ ืคืึธืจื•ื•ืขืจื“ื™ื“ ื“ื™ SD_NOTIFY ื›ืึธืœืขืœ ืฆื• ื“ื™ ืงืึทื ื˜ื™ื™ื ืขืจื™ื™ื–ื“ ื“ื™ื ืกื˜ ืึทื–ื•ื™ ืึทื– ื“ื™ ืกืขืจื•ื•ื™ืก ื ืึธื•ื˜ืึทืคื™ื™ื– ืกื™ืกื˜ืขื ืึทื– ืขืก ืื™ื– ื’ืจื™ื™ื˜ ืฆื• ืึทืจื‘ืขื˜ืŸ. ืื•ืŸ ื•ื•ื™ื“ืขืจ, ื“ืึธืงืขืจ, ื•ื•ืึธืก ื ื™ืฆื˜ ืึท ืงืœื™ืขื ื˜-ืกืขืจื•ื•ืขืจ ืžืึธื“ืขืœ, ืงืขืŸ ื ื™ืฉื˜ ื˜ืึธืŸ ื“ืึธืก.

ืื™ืŸ ื“ื™ ืคึผืœืึทื ื–

ืžื™ืจ ืคึผืœืึทื ื™ืจืŸ ืฆื• ืœื™ื™ื’ืŸ ื“ื™ ื‘ืึทืคึฟืขืœ ืคึผืึธื“ืžืึทืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืกื™ืกื˜ืขื“ CONTAINERID, ื•ื•ืึธืก ื•ื•ืขื˜ ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืึท ืกื™ืกื˜ืขื ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข ืฆื• ืคื™ืจืŸ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืงืึทื ื˜ื™ื™ื ืขืจ ืกืคึผืขืกื™ืคื™ืขื“. ื“ืึธืก ื–ืึธืœ ืึทืจื‘ืขื˜ืŸ ืื™ืŸ ื‘ื™ื™ื“ืข ื•ื•ืึธืจืฆืœ ืื•ืŸ ื•ื•ืึธืจืฆืœ ืžืึธื“ืขืก ืคึฟืึทืจ ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ืงืึทื ื˜ื™ื™ื ืขืจื–. ืžื™ืจ ื”ืึธื‘ืŸ ืืคื™ืœื• ื’ืขื–ืขืŸ ืึท ื‘ืงืฉื” ืคึฟืึทืจ ืึท OCI-ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ systemd-nspawn ืจื•ื ื˜ื™ืžืข.

ืกืึธืฃ

ืคืœื™ืกื ื“ื™ืง ืกื™ืกื˜ืขื ืื™ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ ืื™ื– ืึท ืคืึทืจืฉื˜ื™ื™ื™ืง ื ื•ื™ื˜. ืื•ืŸ ื“ืึทื ืง ืฆื• ืคึผืึธื“ืžืึทืŸ, ืžื™ืจ ืœืขืกืึธืฃ ื”ืึธื‘ืŸ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ ืจื•ื ื˜ื™ืžืข ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ืงืึธื ืคืœื™ืงื˜ ืžื™ื˜ ืกื™ืกื˜ืขืž, ืึธื‘ืขืจ ืžืื›ื˜ ืขืก ื’ืจื™ื ื’ ืฆื• ื ื•ืฆืŸ.

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’