Moby: ๋„์ปค ์‚ฌ์šฉ์ž ์ด๋ฆ„์œผ๋กœ ldap ์‚ฌ์šฉ์ž

์— ๋งŒ๋“  2014๋…„ 07์›” 16์ผ  ยท  3์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: moby/moby

-u/--user ๋Œ€ํ•œ ์˜ต์…˜ docker run ๋‹จ์ง€์— ๋‚˜์—ด๋œ ๋กœ์ปฌ ๊ณ„์ •์— ๋Œ€ํ•œ ์œ ์šฉ /etc/passwd . ํ˜ธ์ŠคํŠธ ์‹œ์Šคํ…œ์ด ldap๊ณผ ํ†ตํ•ฉ๋œ ๊ฒฝ์šฐ ์‚ฌ์šฉ์ž๋Š” ์ด ํŒŒ์ผ์— ํ•ญ๋ชฉ์ด ์—†์Šต๋‹ˆ๋‹ค. Docker ์‹คํ–‰์€ ํ•ด๋‹น ์‚ฌ์šฉ์ž๋ฅผ ์ฐพ์„ ์ˆ˜ ์—†๊ธฐ ๋•Œ๋ฌธ์— ์‹คํŒจํ•ฉ๋‹ˆ๋‹ค.

์•„๋ž˜ ์˜ˆ์—์„œ bhuvan ๋Š” ldap์— ์žˆ์ง€๋งŒ docker run์€ ์ด ๊ณ„์ •์„ ์‚ฌ์šฉํ•˜๋„๋ก ํ—ˆ์šฉํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. Docker๋Š” ํ˜ธ์ŠคํŠธ ์‹œ์Šคํ…œ ์ธ์ฆ ๋ฉ”์ปค๋‹ˆ์ฆ˜์„ ์‚ฌ์šฉํ•  ์ˆ˜ ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

$ docker run --user=bhuvan --rm -i -t --net host centos:centos6 /bin/bash
2014/07/16 16:45:54 Error response from daemon: Cannot start container 95ef5ab02d7471b509fcaa37c22afe48b04af3c57db5b72264f84136c97bec39: finalize namespace setup user get supplementary groups Unable to find user bhuvan

๊ฐ€์žฅ ์œ ์šฉํ•œ ๋Œ“๊ธ€

bhuvan ๊ณ„์ •์—์„œ docker๋ฅผ ์‹คํ–‰ ์ค‘์ธ ๊ฒฝ์šฐ -u ํ”Œ๋ž˜๊ทธ๋ฅผ ๋‹ค์Œ๊ณผ ๊ฐ™์ด ์„ค์ •ํ•˜์—ฌ bhuvan ์‚ฌ์šฉ์ž๋กœ ์ปจํ…Œ์ด๋„ˆ์— ๋“ค์–ด๊ฐˆ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

-u=$(id -u $(whoami)):$(id -g $(whoami))

์ปจํ…Œ์ด๋„ˆ ๋‚ด๋ถ€์—๋Š” ์ด๋ฆ„์ด ์•„๋‹ˆ๋ผ ์‹ค์ œ UID ๋ฐ GID๊ฐ€ ํ‘œ์‹œ๋ฉ๋‹ˆ๋‹ค.

๋ชจ๋“  3 ๋Œ“๊ธ€

bhuvan ๊ณ„์ •์—์„œ docker๋ฅผ ์‹คํ–‰ ์ค‘์ธ ๊ฒฝ์šฐ -u ํ”Œ๋ž˜๊ทธ๋ฅผ ๋‹ค์Œ๊ณผ ๊ฐ™์ด ์„ค์ •ํ•˜์—ฌ bhuvan ์‚ฌ์šฉ์ž๋กœ ์ปจํ…Œ์ด๋„ˆ์— ๋“ค์–ด๊ฐˆ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

-u=$(id -u $(whoami)):$(id -g $(whoami))

์ปจํ…Œ์ด๋„ˆ ๋‚ด๋ถ€์—๋Š” ์ด๋ฆ„์ด ์•„๋‹ˆ๋ผ ์‹ค์ œ UID ๋ฐ GID๊ฐ€ ํ‘œ์‹œ๋ฉ๋‹ˆ๋‹ค.

@bhuvaneswaran ์ปจํ…Œ์ด๋„ˆ ๋‚ด์—์„œ ์„ค์ •ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ์ง€๊ธˆ์€ ldap๊ณผ ํ†ตํ•ฉํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.

Docker์— ๋Œ€ํ•œ Ldap ํ†ตํ•ฉ์€ ํ–ฅํ›„ ๊ฐ€๋Šฅํ•ด์งˆ ์ˆ˜ ์žˆ์ง€๋งŒ ์ง€๊ธˆ์€ ์ง€์›๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ํ”Œ๋Ÿฌ๊ทธ์ธ์ด ์ง€์›๋˜๋ฉด ๊ฐ€๋Šฅํ•ด์งˆ ๊ฒƒ์ž…๋‹ˆ๋‹ค.

@louden ๋ช‡ ๋…„ ํ›„์— ๋™์ผํ•œ ๋ฌธ์ œ๊ฐ€ ๋ฐœ์ƒํ–ˆ์œผ๋ฉฐ ์‚ฌ์šฉ์ž๋ฅผ ์ „๋‹ฌํ•˜๋ ค๊ณ  ํ•˜๋ฉด LDAP์—๋งŒ ์ €์žฅ๋˜๊ณ  /etc/passwd์—๋Š” ์ €์žฅ๋˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ์ฝ”๋“œ ์Šค๋‹ˆํŽซ์ด ์žˆ์–ด๋„ ์ปจํ…Œ์ด๋„ˆ ๋‚ด๋ถ€์—์„œ ์‚ฌ์šฉํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค. .

์Šฌํ”„๊ฒŒ๋„ ๋„คํŠธ์›Œํฌ ๊ด€๋ฆฌ์ž๊ฐ€ ๋กœ์ปฌ ์‚ฌ์šฉ์ž๋ฅผ ๋งŒ๋“ค๊ณ (๊ถŒํ•œ์ด ์žˆ๋Š” ๊ฒฝ์šฐ) ํ•ด๋‹น ์‚ฌ์šฉ์ž์™€ ํ•จ๊ป˜ docker๋ฅผ ์‹คํ–‰ํ•˜์—ฌ " /etc/passwd์— ๋”ฐ๋ผ ์‹œ์Šคํ…œ์— "์กด์žฌ"ํ•ฉ๋‹ˆ๋‹ค.

์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰