{"id":2424,"date":"2021-01-03T14:46:04","date_gmt":"2021-01-03T06:46:04","guid":{"rendered":"http:\/\/39.97.231.10\/?p=2424"},"modified":"2021-01-03T14:46:04","modified_gmt":"2021-01-03T06:46:04","slug":"linux-namespace%e5%91%bd%e5%90%8d%e7%a9%ba%e9%97%b4","status":"publish","type":"post","link":"http:\/\/www.weijing.co\/?p=2424","title":{"rendered":"Linux namespace\u547d\u540d\u7a7a\u95f4"},"content":{"rendered":"
\nnamespace\u63d0\u4f9b\u4e00\u79cd\u9694\u79bb\u673a\u5236\uff0c\u8ba9\u4e0d\u540c\u7684namespace\u4e0b\u7684\u8fdb\u7a0b\u770b\u5230\u7684\u5168\u5c40\u8d44\u6e90\u4e0d\u540c\uff0c\u6bcf\u4e00\u4e2anamespace\u6709\u4e00\u4e2a\u81ea\u5df1\u72ec\u7acb\u7684\u5168\u5c40\u8d44\u6e90\u5b9e\u4f8b\u3002
\nnamespace\u7684\u4e00\u4e2a\u7528\u9014\u662f\u5b9e\u73b0\u5bb9\u5668\u3002<\/p>\n
\n
\n
<\/div>\n
<\/div>\n<\/div>\n
<\/div>\n<\/div>\n

Linux\u7cfb\u7edf\u4e0b\u7684namespace\u7c7b\u578b<\/h2>\n\n\n\n\n\n\n\n\n\n\n\n\n
\u540d\u79f0<\/th>\nAPI\u4e2d\u4f7f\u7528\u7684\u6807\u8bc6<\/th>\n\u624b\u518c<\/th>\n\u9694\u79bb\u7684\u8d44\u6e90<\/th>\n<\/tr>\n<\/thead>\n
Cgroup<\/td>\nCLONE_NEWCGROUP<\/td>\ncgroup_namespaces(7)<\/td>\nCgroup root directory<\/td>\n<\/tr>\n
IPC<\/td>\nCLONE_NEWIPC<\/td>\nipc_namespaces(7)<\/td>\nSystem V IPC, POSIX message queues<\/td>\n<\/tr>\n
Network<\/td>\nCLONE_NEWNET<\/td>\nnetwork_namespaces(7)<\/td>\nNetwork devices,stacks,ports,etc.<\/td>\n<\/tr>\n
Mount<\/td>\nCLONE_NEWNS<\/td>\nmount_namespaces(7)<\/td>\nMount points<\/td>\n<\/tr>\n
PID<\/td>\nCLONE_NEWPID<\/td>\npid_namespaces(7)<\/td>\nProcess IDs<\/td>\n<\/tr>\n
Time<\/td>\nCLONE_NEWTIME<\/td>\ntime_namespaces(7)<\/td>\nBoot and monotonic clocks<\/td>\n<\/tr>\n
User<\/td>\nCLONE_NEWUSER<\/td>\nuser_namespaces(7)<\/td>\nUser and group IDs<\/td>\n<\/tr>\n
UTS<\/td>\nCLONE_NEWUTS<\/td>\nuts_namespaces(7)<\/td>\nHostname and NIS domain name<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

namespace\u76f8\u5173\u7cfb\u7edf\u8c03\u7528<\/h2>\n

clone<\/strong> \u521b\u5efa\u65b0\u8fdb\u7a0b\uff0cflags\u53c2\u6570\u53ef\u4ee5\u7528\u6765\u521b\u5efa\u65b0\u7684namespace
\nsetns<\/strong> \u8ba9\u8fdb\u7a0b\u52a0\u5165\u5b58\u5728\u7684namespace
\nunshare<\/strong> \u5c06\u8c03\u7528\u8fdb\u7a0b\u79fb\u52a8\u5230\u65b0\u7684namespace\u4e2d
\nioctl_ns<\/strong> \u67e5\u770bnamespace\u7684\u4fe1\u606f<\/p>\n

\u8fdb\u7a0bnamespace\u76ee\u5f55<\/h2>\n

\/proc\/[pid]\/ns\/cgroup \u8fdb\u7a0bcgroup\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/ipc \u8fdb\u7a0bIPC\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/mnt \u8fdb\u7a0bmount\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/net \u8fdb\u7a0b\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/pid \u8fdb\u7a0bPID\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/pid_for_children \u8be5\u8fdb\u7a0b\u7684\u5b50\u8fdb\u7a0b\u7684PID\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/time \u8fdb\u7a0btime\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/user \u8fdb\u7a0buser\u547d\u540d\u7a7a\u95f4\u53e5\u67c4
\n\/proc\/[pid]\/ns\/uts \u8fdb\u7a0bUTS\u547d\u540d\u7a7a\u95f4\u53e5\u67c4<\/p>\n

namespace limit<\/h2>\n

\/proc\/sys\/user\u76ee\u5f55
\nmax_cgroup_namespaces
\nmax_inotify_instances
\nmax_inotify_watches
\nmax_ipc_namespaces
\nmax_mnt_namespaces
\nmax_net_namespaces
\nmax_pid_namespaces
\nmax_user_namespaces
\nmax_uts_namespaces<\/p>\n

namespace\u751f\u547d\u5468\u671f<\/h2>\n

namespace\u4e2d\u7684\u6700\u540e\u4e00\u4e2a\u8fdb\u7a0b\u7ed3\u675f\u6216\u79bb\u5f00namespace\uff0c\u8be5namespace\u751f\u547d\u5468\u671f\u7ed3\u675f<\/p>\n

<\/div>\n

\u76f8\u5173\u547d\u4ee4<\/h2>\n

lsns \u547d\u4ee4\u53ef\u4ee5\u67e5\u770b\u7cfb\u7edf\u4e0b\u6240\u6709\u7684namespace
\n\/proc\/[pid]\/ns \u4f2a\u6587\u4ef6\u7cfb\u7edf\u4e0b\u8bb0\u5f55\u4e86\u8fdb\u7a0b\u7684\u6240\u6709namespace\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

namespace\u63d0\u4f9b\u4e00\u79cd\u9694\u79bb\u673a\u5236\uff0c\u8ba9\u4e0d\u540c\u7684namespace\u4e0b\u7684\u8fdb\u7a0b\u770b\u5230\u7684\u5168\u5c40\u8d44\u6e90\u4e0d\u540c\uff0c\u6bcf\u4e00\u4e2anamespa …<\/p>\n

Linux namespace\u547d\u540d\u7a7a\u95f4<\/span> \u67e5\u770b\u5168\u6587 »<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[102,124],"tags":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"mailpoet_newsletter_max":false,"woocommerce_thumbnail":false,"woocommerce_single":false,"woocommerce_gallery_thumbnail":false,"shop_catalog":false,"shop_single":false,"shop_thumbnail":false},"uagb_author_info":{"display_name":"weijing","author_link":"http:\/\/www.weijing.co\/?author=4"},"uagb_comment_info":0,"uagb_excerpt":"namespace\u63d0\u4f9b\u4e00\u79cd\u9694\u79bb\u673a\u5236\uff0c\u8ba9\u4e0d\u540c\u7684namespace\u4e0b\u7684\u8fdb\u7a0b\u770b\u5230\u7684\u5168\u5c40\u8d44\u6e90\u4e0d\u540c\uff0c\u6bcf\u4e00\u4e2anamespa…","_links":{"self":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/2424"}],"collection":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2424"}],"version-history":[{"count":0,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/2424\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2424"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}