{"id":476411,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:42","modified_gmt":"2023-09-05T11:12:42","slug":"container-isolation","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/kr\/wiki\/container-isolation\/","title":{"rendered":"\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac"},"content":{"rendered":"<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \uac1c\ubcc4 \ucee8\ud14c\uc774\ub108\ub97c \uc11c\ub85c \ubd84\ub9ac\ud558\uace0 \ud638\uc2a4\ud2b8 \uc2dc\uc2a4\ud15c\uc5d0\uc11c \ubd84\ub9ac\ud558\ub294 \uba54\ucee4\ub2c8\uc998\uc744 \ub098\ud0c0\ub0c5\ub2c8\ub2e4. \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \uae30\ubcf8 \uc2dc\uc2a4\ud15c \ud658\uacbd\uc758 \ubcf4\uc548\uacfc \ubb34\uacb0\uc131\uc744 \ubcf4\uc7a5\ud558\ub294 \ub370 \uc911\uc694\ud569\ub2c8\ub2e4.<\/p>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc758 \uc9c4\ud654\uc640 \uccab \ubc88\uc9f8 \uc5b8\uae09<\/h2>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub77c\ub294 \uc544\uc774\ub514\uc5b4\ub294 \uc6b4\uc601 \uccb4\uc81c\uc758 \ud504\ub85c\uc138\uc2a4 \uaca9\ub9ac \ud544\uc694\uc131\uc5d0\uc11c \ud0c4\uc0dd\ud588\uc2b5\ub2c8\ub2e4. 1982\ub144 Unix \uacc4\uc5f4 \uc2dc\uc2a4\ud15c\uc6a9\uc73c\ub85c \uac1c\ubc1c\ub41c Chroot\ub294 \ucee8\ud14c\uc774\ub108\ud654\ub97c \ud5a5\ud55c \uccab \ubc88\uc9f8 \uc8fc\uc694 \ub2e8\uacc4\uc600\uc9c0\ub9cc \uc81c\ud55c\ub41c \uaca9\ub9ac \uae30\ub2a5\uc744 \uc81c\uacf5\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc5d0 \ub300\ud55c \ud604\ub300\uc801\uc778 \uac1c\ub150\uc740 2000\ub144\ub300 \ucd08\ubc18 FreeBSD Jail\uacfc Solaris Zone\uc774 \ub3c4\uc785\ub418\uba74\uc11c \ub4f1\uc7a5\ud588\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \ucee8\ud14c\uc774\ub108\ud654\uac00 \uc0c1\ub2f9\ud55c \ud0c4\ub825\uc744 \ubc1b\uae30 \uc2dc\uc791\ud55c \uac83\uc740 2008\ub144 Linux \ucee8\ud14c\uc774\ub108(LXC)\uac00 \ub3c4\uc785\ub41c \uc774\ud6c4\uc600\uc2b5\ub2c8\ub2e4. LXC\ub294 \ub2e8\uc77c Linux \ud638\uc2a4\ud2b8\uc5d0\uc11c \uc5ec\ub7ec \uac1c\uc758 \uaca9\ub9ac\ub41c Linux \uc2dc\uc2a4\ud15c(\ucee8\ud14c\uc774\ub108)\uc744 \uc2e4\ud589\ud560 \uc218 \uc788\ub294 \uac00\uc0c1 \ud658\uacbd\uc744 \uc0dd\uc131\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\u201c\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\u201d\ub77c\ub294 \uc6a9\uc5b4\ub294 2013\ub144 Docker\uc758 \ucd9c\ud604\uacfc \ud568\uaed8 \uac01\uad11\uc744 \ubc1b\uc558\uc2b5\ub2c8\ub2e4. Docker\ub294 \uc790\uccb4 \ub77c\uc774\ube0c\ub7ec\ub9ac\uc778 libcontainer\ub85c \ub300\uccb4\ub418\uae30 \uc804\uc5d0 \ucd08\uae30 \ub2e8\uacc4\uc5d0\uc11c LXC\ub97c \ud65c\uc6a9\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc54c\uc544\ubcf4\uae30<\/h2>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc11c\ub85c \uac04\uc12d\ud558\uc9c0 \uc54a\uace0 \uc2e4\ud589\ub420 \uc218 \uc788\ub294 \ub3c5\ub9bd\uc801\uc778 \uacf5\uac04\uc744 \ub9cc\ub4dc\ub294 \uac83\uc785\ub2c8\ub2e4. \uc774\ub294 \ub124\uc784\uc2a4\ud398\uc774\uc2a4, cgroup(\uc81c\uc5b4 \uadf8\ub8f9) \ubc0f \uacc4\uce35\ud654\ub41c \ud30c\uc77c \uc2dc\uc2a4\ud15c\uc744 \ud3ec\ud568\ud55c \uc5ec\ub7ec \uae30\uc220\uacfc Linux \ucee4\ub110 \uae30\ub2a5\uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\ub124\uc784\uc2a4\ud398\uc774\uc2a4:<\/strong> \ub124\uc784\uc2a4\ud398\uc774\uc2a4\ub294 \ud504\ub85c\uc138\uc2a4\uac00 \ubcfc \uc218 \uc788\ub294 \ub0b4\uc6a9\uc744 \uc81c\ud55c\ud558\uc5ec \uc6b4\uc601 \uccb4\uc81c \ud658\uacbd\uc5d0 \ub300\ud55c \ud504\ub85c\uc138\uc2a4\uc758 \uad00\uc810\uc744 \uaca9\ub9ac\ud569\ub2c8\ub2e4. \ub2e4\uc591\ud55c \uc720\ud615\uc758 \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0\ub294 \ud504\ub85c\uc138\uc2a4 ID(PID) \ub124\uc784\uc2a4\ud398\uc774\uc2a4, \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4, \ub9c8\uc6b4\ud2b8 \ub124\uc784\uc2a4\ud398\uc774\uc2a4 \ubc0f \uc0ac\uc6a9\uc790 \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uac00 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>C\uadf8\ub8f9:<\/strong> \uc81c\uc5b4 \uadf8\ub8f9\uc740 \ud504\ub85c\uc138\uc2a4\uac00 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \uac83(\uc608: CPU, \uba54\ubaa8\ub9ac, \ub124\ud2b8\uc6cc\ud06c \ub300\uc5ed\ud3ed \ub4f1)\uc744 \uc81c\ud55c\ud569\ub2c8\ub2e4. \ub610\ud55c \ub9ac\uc18c\uc2a4 \uc0ac\uc6a9\ub7c9\uc758 \uc6b0\uc120 \uc21c\uc704\ub97c \uc9c0\uc815\ud558\uace0 \uacc4\uc0b0\ud558\ub294 \ub370\uc5d0\ub3c4 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uacc4\uce35\ud654\ub41c \ud30c\uc77c \uc2dc\uc2a4\ud15c:<\/strong> \uc774\ub97c \ud1b5\ud574 \uc774\ubbf8\uc9c0 \ub808\uc774\uc5b4\ub97c \ubd84\ub9ac\ud558\uace0 \uc624\ubc84\ub808\uc774\ud560 \uc218 \uc788\uc73c\uba70 Docker \uc774\ubbf8\uc9c0\uc640 \ucee8\ud14c\uc774\ub108\ub97c \uad00\ub9ac\ud558\ub294 \ub370 \uc911\uc694\ud569\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc758 \ub0b4\ubd80 \uad6c\uc870 \ubc0f \uc791\ub3d9 \ubc29\uc2dd<\/h2>\n<p>\uc544\ud0a4\ud14d\ucc98 \uad00\uc810\uc5d0\uc11c \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \ub2e4\uc74c \uad6c\uc131 \uc694\uc18c\ub97c \uc0ac\uc6a9\ud558\uc5ec \ub2ec\uc131\ub429\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\n<p><strong>\ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784:<\/strong> Docker, Containerd, CRI-O \ub4f1 \ucee8\ud14c\uc774\ub108\ub97c \uc2e4\ud589\ud558\uace0 \uad00\ub9ac\ud558\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ucee8\ud14c\uc774\ub108 \uc774\ubbf8\uc9c0:<\/strong> \uc774\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4\ub97c \uc2e4\ud589\ud558\ub294 \ub370 \ud544\uc694\ud55c \ubaa8\ub4e0 \uac83\uc744 \ud3ec\ud568\ud558\ub294 \uacbd\ub7c9\uc758 \ub3c5\ub9bd \uc2e4\ud589\ud615 \uc2e4\ud589 \ud328\ud0a4\uc9c0\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ucee8\ud14c\uc774\ub108 \uc5d4\uc9c4:<\/strong> \uc774\ub294 \ud638\uc2a4\ud2b8 \uc2dc\uc2a4\ud15c\uc758 \ucee4\ub110\uc744 \ud65c\uc6a9\ud558\uc5ec \ucee8\ud14c\uc774\ub108\ub97c \uc0dd\uc131\ud558\ub294 \uae30\ubcf8 \uc18c\ud504\ud2b8\uc6e8\uc5b4\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ol>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac \uc6cc\ud06c\ud50c\ub85c\uc5d0\ub294 \ub2e4\uc74c \ub2e8\uacc4\uac00 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n<ol>\n<li>\ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc740 \ud544\uc694\ud55c \ucee8\ud14c\uc774\ub108 \uc774\ubbf8\uc9c0\ub97c \uac00\uc838\uc635\ub2c8\ub2e4.<\/li>\n<li>\uc774\ubbf8\uc9c0\uac00 \ucee8\ud14c\uc774\ub108 \uc5d4\uc9c4\uc5d0 \ub85c\ub4dc\ub429\ub2c8\ub2e4.<\/li>\n<li>\ucee8\ud14c\uc774\ub108 \uc5d4\uc9c4\uc740 \ub124\uc784\uc2a4\ud398\uc774\uc2a4, cgroup \ubc0f \uc774\ubbf8\uc9c0\uc758 \ud30c\uc77c \uc2dc\uc2a4\ud15c\uc744 \uc0ac\uc6a9\ud558\uc5ec \uaca9\ub9ac\ub41c \ud658\uacbd\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4.<\/li>\n<li>\uadf8\ub7f0 \ub2e4\uc74c \ucee8\ud14c\uc774\ub108 \ub0b4\uc758 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc2e4\ud589\ub418\uace0 \ub2e4\ub978 \ucee8\ud14c\uc774\ub108 \ubc0f \ud638\uc2a4\ud2b8 \uc2dc\uc2a4\ud15c\uacfc \uaca9\ub9ac\ub429\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc758 \uc8fc\uc694 \ud2b9\uc9d5<\/h2>\n<ul>\n<li><strong>\ubcf4\uc548:<\/strong> \ucee8\ud14c\uc774\ub108\ub294 \uc11c\ub85c \uaca9\ub9ac\ub418\uc5b4 \uc788\uc5b4 \ud55c \ucee8\ud14c\uc774\ub108\uc758 \ucde8\uc57d\uc810\uc774\ub098 \ubc84\uadf8\uac00 \ub2e4\ub978 \ucee8\ud14c\uc774\ub108\uc5d0 \uc601\ud5a5\uc744 \ubbf8\uce58\ub294 \uac83\uc744 \ubc29\uc9c0\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\uc790\uc6d0 \uc81c\uc5b4:<\/strong> cgroup\uc744 \ud1b5\ud574 \ucee8\ud14c\uc774\ub108\ub294 \uc2dc\uc2a4\ud15c \ub9ac\uc18c\uc2a4\uc758 \uacf5\uc720\ub97c \uc81c\uc5b4\ud558\uc5ec \ub2e8\uc77c \ucee8\ud14c\uc774\ub108\uac00 \ub9ac\uc18c\uc2a4\ub97c \ub3c5\uc810\ud558\ub294 \uac83\uc744 \ubc29\uc9c0\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\uc774\uc2dd\uc131:<\/strong> \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uacfc \ud574\ub2f9 \uc885\uc18d\uc131\uc744 \ub2e8\uc77c \ub2e8\uc704\ub85c \ucea1\uc290\ud654\ud558\uc5ec \uc18c\ud504\ud2b8\uc6e8\uc5b4\uac00 \ub2e4\uc591\ud55c \ud658\uacbd\uc5d0\uc11c \uc77c\uad00\ub418\uac8c \uc2e4\ud589\ub418\ub3c4\ub85d \ubcf4\uc7a5\ud569\ub2c8\ub2e4.<\/li>\n<li><strong>\ub2a5\ub960:<\/strong> \ucee8\ud14c\uc774\ub108\ub294 \ud638\uc2a4\ud2b8 \ucee4\ub110\uc744 \uacf5\uc720\ud558\ubbc0\ub85c \uac00\ubcbc\uc6b0\uba70 \uae30\uc874 VM\ubcf4\ub2e4 \ud6e8\uc52c \ube60\ub974\uac8c \uc2dc\uc791\ub429\ub2c8\ub2e4.<\/li>\n<\/ul>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac \uc720\ud615<\/h2>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc758 \uae30\ubcf8 \uc544\uc774\ub514\uc5b4\ub294 \ub3d9\uc77c\ud558\uac8c \uc720\uc9c0\ub418\uc9c0\ub9cc \ub2e4\uc591\ud55c \ud50c\ub7ab\ud3fc\uc774 \ub2e4\uc591\ud55c \ubc29\uc2dd\uc73c\ub85c \uaca9\ub9ac\ub97c \uc81c\uacf5\ud558\ub3c4\ub85d \ubc1c\uc804\ud588\uc2b5\ub2c8\ub2e4. \uc544\ub798 \ud45c\uc5d0\ub294 \uba87 \uac00\uc9c0 \uc8fc\uc694 \ucee8\ud14c\uc774\ub108 \ud50c\ub7ab\ud3fc\uacfc \uace0\uc720\ud55c \uce21\uba74\uc774 \uc694\uc57d\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<table>\n<thead>\n<tr>\n<th>\ucee8\ud14c\uc774\ub108 \ud50c\ub7ab\ud3fc<\/th>\n<th>\uc124\uba85<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\ub3c4\ucee4<\/td>\n<td>\ud504\ub85c\uc138\uc2a4\ub97c \uaca9\ub9ac\ud558\uc5ec \uc2e4\ud589\ud558\ub294 \uacbd\ub7c9 \ucee8\ud14c\uc774\ub108\ub97c \uc81c\uacf5\ud558\uae30 \uc704\ud574 \ub192\uc740 \uc218\uc900\uc758 API\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>LXC(\ub9ac\ub205\uc2a4 \ucee8\ud14c\uc774\ub108)<\/td>\n<td>\ubcc4\ub3c4\uc758 \ucee4\ub110\uc774 \ud544\uc694 \uc5c6\uc774 \ud45c\uc900 Linux \uc124\uce58\uc5d0 \ucd5c\ub300\ud55c \uac00\uae4c\uc6b4 \ud658\uacbd\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>Rkt (\ub85c\ucf13)<\/td>\n<td>\ubcf4\uc548, \ub2e8\uc21c\uc131 \ubc0f \uad6c\uc131 \uac00\ub2a5\uc131\uc5d0 \uc911\uc810\uc744 \ub450\uace0 \uc11c\ubc84 \ud658\uacbd\uc744 \uc704\ud574 \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\ucee8\ud14c\uc774\ub108<\/td>\n<td>\uc2a4\ud1a0\ub9ac\uc9c0, \uc774\ubbf8\uc9c0 \ubc30\ud3ec, \ub124\ud2b8\uc6cc\ud06c \uc778\ud130\ud398\uc774\uc2a4\ub97c \ud3ec\ud568\ud558\uc5ec \uc804\uccb4 \ucee8\ud14c\uc774\ub108 \uc218\uba85\uc8fc\uae30\ub97c \uad00\ub9ac\ud558\ub294 \uc0c1\uc704 \uc218\uc900 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc785\ub2c8\ub2e4.<\/td>\n<\/tr>\n<tr>\n<td>\ud06c\ub9ac\uc624<\/td>\n<td>Kubernetes\uc6a9\uc73c\ub85c \ud2b9\ubcc4\ud788 \uc81c\uc791\ub41c \uacbd\ub7c9 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc73c\ub85c, \ubca0\uc5b4\uba54\ud0c8 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc18d\ub3c4\uc640 microVM \ucd94\uc0c1\ud654 \uac04\uc758 \uade0\ud615\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac \uc0ac\uc6a9: \ubb38\uc81c \ubc0f \ud574\uacb0 \ubc29\ubc95<\/h2>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 CI\/CD(\uc9c0\uc18d\uc801 \ud1b5\ud569\/\uc9c0\uc18d\uc801 \uc804\ub2ec), \ub9c8\uc774\ud06c\ub85c\uc11c\ube44\uc2a4 \uc544\ud0a4\ud14d\ucc98, \ud074\ub77c\uc6b0\ub4dc \ub124\uc774\ud2f0\ube0c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ud3ec\ud568\ud558\uc5ec \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uac1c\ubc1c \ubc0f \ubc30\ud3ec\uc5d0\uc11c \ub2e4\uc591\ud55c \ubaa9\uc801\uc73c\ub85c \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n<p>\uadf8\ub7ec\ub098 \ub2e4\uc74c\uacfc \uac19\uc740 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<ol>\n<li><strong>\ubcf4\uc548 \ubb38\uc81c:<\/strong> \uaca9\ub9ac\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0 \ucee8\ud14c\uc774\ub108\ub294 \ud638\uc2a4\ud2b8\uc758 \ucee4\ub110\uc744 \uacf5\uc720\ud558\ubbc0\ub85c \uc7a0\uc7ac\uc801\uc778 \uacf5\uaca9 \ud45c\uba74\uc774 \ub429\ub2c8\ub2e4. \uc194\ub8e8\uc158\uc5d0\ub294 \uc815\uae30\uc801\uc778 \uc5c5\ub370\uc774\ud2b8\uc640 \ud328\uce58, Seccomp, AppArmor \ub610\ub294 SELinux\uc640 \uac19\uc740 \ucd94\uac00 \ubcf4\uc548 \ub3c4\uad6c \uc0ac\uc6a9\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/li>\n<li><strong>\uc131\ub2a5 \uc624\ubc84\ud5e4\ub4dc:<\/strong> \ucee8\ud14c\uc774\ub108\uac00 \ub108\ubb34 \ub9ce\uc73c\uba74 \uc2dc\uc2a4\ud15c \ub9ac\uc18c\uc2a4 \uacbd\ud569\uc774 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud6a8\uc728\uc801\uc778 \ub9ac\uc18c\uc2a4 \uad00\ub9ac\uc640 \ub85c\ub4dc \ubc38\ub7f0\uc2f1\uc740 \uc774 \ubb38\uc81c\ub97c \uc644\ud654\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<li><strong>\ubcf5\uc7a1\uc131:<\/strong> \ud2b9\ud788 \ub9c8\uc774\ud06c\ub85c\uc11c\ube44\uc2a4 \uc544\ud0a4\ud14d\ucc98\uc5d0\uc11c \ub9ce\uc740 \ucee8\ud14c\uc774\ub108\ub97c \uad00\ub9ac\ud558\ub294 \uac83\uc740 \ubcf5\uc7a1\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. Kubernetes \ub610\ub294 Docker Swarm\uacfc \uac19\uc740 \ucee8\ud14c\uc774\ub108 \uc624\ucf00\uc2a4\ud2b8\ub808\uc774\uc158 \ub3c4\uad6c\ub294 \uc774\ub7ec\ud55c \ubcf5\uc7a1\uc131\uc744 \uad00\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub97c \uc720\uc0ac\ud55c \uc6a9\uc5b4\uc640 \ube44\uad50<\/h2>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc640 \uac00\uc0c1\ud654\ub97c \ud63c\ub3d9\ud574\uc11c\ub294 \uc548 \ub429\ub2c8\ub2e4. \ub458 \ub2e4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc2e4\ud589\uc744 \uc704\ud55c \uaca9\ub9ac\ub41c \ud658\uacbd\uc744 \uc81c\uacf5\ud558\ub354\ub77c\ub3c4 \ub9c8\ucc2c\uac00\uc9c0\uc785\ub2c8\ub2e4.<\/p>\n<ul>\n<li><strong>\uac00\uc0c1 \uba38\uc2e0(VM)<\/strong>: VM\uc740 \uac01\uac01 \uc790\uccb4 \uc6b4\uc601 \uccb4\uc81c\ub97c \uac16\ucd98 \uc644\uc804\ud55c \ud638\uc2a4\ud2b8\ub97c \uc5d0\ubbac\ub808\uc774\uc158\ud558\ub294 \uac83\uc744 \uae30\ubc18\uc73c\ub85c \ud569\ub2c8\ub2e4. VM\uc740 \ucee8\ud14c\uc774\ub108\uc5d0 \ube44\ud574 \ub354 \ubb34\uac81\uace0 \ubd80\ud305 \uc2dc\uac04\uc774 \ub354 \uae41\ub2c8\ub2e4.<\/li>\n<li><strong>\ucee8\ud14c\uc774\ub108<\/strong>: \ucee8\ud14c\uc774\ub108\ub294 \ud638\uc2a4\ud2b8\uc758 OS \ucee4\ub110\uc744 \uacf5\uc720\ud558\ubbc0\ub85c \uac00\ubccd\uace0 \ubd80\ud305 \uc18d\ub3c4\uac00 \ube60\ub985\ub2c8\ub2e4. VM\uc5d0\uc11c\ucc98\ub7fc \uc2dc\uc2a4\ud15c \uc218\uc900 \uaca9\ub9ac\uac00 \uc544\ub2cc \ud504\ub85c\uc138\uc2a4 \uc218\uc900 \uaca9\ub9ac\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/li>\n<\/ul>\n<h2>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc758 \ubbf8\ub798 \uc804\ub9dd\uacfc \uae30\uc220<\/h2>\n<p>\uc55e\uc73c\ub85c \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac \uae30\uc220\uc740 \ud2b9\ud788 \ubcf4\uc548 \uce21\uba74\uc5d0\uc11c \ub354\uc6b1 \ubc1c\uc804\ud560 \uac83\uc73c\ub85c \uc608\uc0c1\ub429\ub2c8\ub2e4. WebAssembly(Wasm) \ubc0f eBPF(extended Berkeley Packet Filter)\ub97c \ucc44\ud0dd\ud558\uba74 \ub354 \uc791\uace0 \ube60\ub974\uba70 \uc548\uc804\ud55c \ucc28\uc138\ub300 \ucee8\ud14c\uc774\ub108\ub97c \ubcfc \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>microVM\uc758 \uac1c\ub150\ub3c4 \uc8fc\ubaa9\uc744 \ubc1b\uace0 \uc788\uc2b5\ub2c8\ub2e4. Firecracker\uc640 \uac19\uc740 MicroVM\uc740 \uae30\uc874 VM\uc758 \ubcf4\uc548 \uc774\uc810\uacfc \ucee8\ud14c\uc774\ub108\uc758 \ub9ac\uc18c\uc2a4 \ud6a8\uc728\uc131\uc744 \uc81c\uacf5\ud558\ubbc0\ub85c \ub2e4\uc911 \ud14c\ub10c\ud2b8 \ud658\uacbd\uc5d0 \uc774\uc0c1\uc801\uc785\ub2c8\ub2e4.<\/p>\n<h2>\ud504\ub85d\uc2dc \uc11c\ubc84 \ubc0f \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac<\/h2>\n<p>\ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub97c \ud1b5\ud574 \uc0c1\ub2f9\ud55c \uc774\uc810\uc744 \uc5bb\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. OneProxy\uc640 \uac19\uc740 \ud504\ub85d\uc2dc \uacf5\uae09\uc790\ub294 \uc5ec\ub7ec \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \ub370\uc774\ud130\ub97c \ucc98\ub9ac\ud558\ubbc0\ub85c \ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \uac01 \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc791\uc5c5\uc744 \ubd84\ub9ac\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud55c \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \ud65c\ub3d9\uc774 \uc190\uc0c1\ub418\ub354\ub77c\ub3c4 \ub2e4\ub978 \ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uc601\ud5a5\uc744 \ubc1b\uc9c0 \uc54a\uc73c\ubbc0\ub85c \ubcf4\uc548\uc774 \uac15\ud654\ub429\ub2c8\ub2e4.<\/p>\n<p>\ucee8\ud14c\uc774\ub108 \uc624\ucf00\uc2a4\ud2b8\ub808\uc774\uc158 \ud50c\ub7ab\ud3fc\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85d\uc2dc \uacf5\uae09\uc790\ub294 \ucee8\ud14c\uc774\ub108\ub85c \ubc30\ud3ec\ub41c \uc218\ucc9c \ub300\uc758 \ud504\ub85d\uc2dc \uc11c\ubc84\uc758 \uc218\uba85\uc8fc\uae30\ub97c \ud6a8\uc728\uc801\uc73c\ub85c \uad00\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc811\uadfc \ubc29\uc2dd\uc740 \ud655\uc7a5\uc131, \uc720\uc9c0 \uad00\ub9ac\uc131 \ubc0f \ub0b4\uacb0\ud568\uc131\uc744 \ud5a5\uc0c1\uc2dc\ud0b5\ub2c8\ub2e4.<\/p>\n<h2>\uad00\ub828\ub41c \ub9c1\ud06c\ub4e4<\/h2>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2e4\uc74c \ub9ac\uc18c\uc2a4\ub97c \ucc38\uc870\ud558\uc138\uc694.<\/p>\n<ol>\n<li><a href=\"https:\/\/docs.docker.com\/compose\/\" target=\"_new\" rel=\"noopener nofollow\">Docker: Docker Compose \uac1c\uc694<\/a><\/li>\n<li><a href=\"https:\/\/kubernetes.io\/what-is-kubernetes\/\" target=\"_new\" rel=\"noopener nofollow\">\ucfe0\ubc84\ub124\ud2f0\uc2a4: \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub780 \ubb34\uc5c7\uc778\uac00?<\/a><\/li>\n<li><a href=\"https:\/\/linuxcontainers.org\/lxc\/introduction\/\" target=\"_new\" rel=\"noopener nofollow\">LXC: Linux \ucee8\ud14c\uc774\ub108<\/a><\/li>\n<li><a href=\"https:\/\/cri-o.io\/\" target=\"_new\" rel=\"noopener nofollow\">CRI-O: Kubernetes\uc6a9 \uacbd\ub7c9 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784<\/a><\/li>\n<li><a href=\"https:\/\/firecracker-microvm.github.io\/\" target=\"_new\" rel=\"noopener nofollow\">Firecracker: \uc11c\ubc84\ub9ac\uc2a4 \ucef4\ud4e8\ud305\uc744 \uc704\ud55c \uc548\uc804\ud558\uace0 \ube60\ub978 microVM<\/a><\/li>\n<\/ol>\n<p>\ucee8\ud14c\uc774\ub108 \uaca9\ub9ac\ub294 \ud604\uc7ac \ud074\ub77c\uc6b0\ub4dc \ub124\uc774\ud2f0\ube0c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubb3c\uacb0\uc758 \ud575\uc2ec\uc774\uba70 \uac15\ub825\ud558\uace0 \ud655\uc7a5 \uac00\ub2a5\ud558\uba70 \uc548\uc804\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc30\ud3ec\ub97c \uc57d\uc18d\ud569\ub2c8\ub2e4. \uae30\uc220 \uc0b0\uc5c5, \ud2b9\ud788 \ud504\ub85d\uc2dc \uc11c\ubc84 \uc81c\uacf5\uc5c5\uccb4\uc640 \uac19\uc740 \ubd84\uc57c\uc5d0\uc11c\uc758 \uad00\ub828\uc131\uc740 \uacc4\uc18d\ud574\uc11c \ucee4\uc9c8 \uac83\uc785\ub2c8\ub2e4.<\/p>","protected":false},"featured_media":476412,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476411","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Container Isolation: A Comprehensive Analysis<\/mark>","faq_items":[{"question":"What is Container Isolation?","answer":"<p>Container Isolation refers to the method by which individual containers are kept separate from each other and the host system. This isolation is crucial in ensuring the security and integrity of both software applications and the underlying system environment.<\/p>"},{"question":"When did the concept of Container Isolation emerge?","answer":"<p>The concept of container isolation originated from the necessity for process isolation in operating systems, with the first step towards containerization being Chroot, developed in 1982 for Unix-like systems. Modern container isolation, as we know it today, started gaining significant attention with the introduction of Linux Containers (LXC) in 2008 and later with Docker in 2013.<\/p>"},{"question":"How does Container Isolation work?","answer":"<p>Container isolation creates independent spaces where applications can run without interfering with each other or the host system. It employs several techniques and Linux kernel features, including namespaces, control groups (cgroups), and layered file systems.<\/p>"},{"question":"What are the key features of Container Isolation?","answer":"<p>Container Isolation is characterized by several key features such as security, resource control, portability, and efficiency. The isolation between containers enhances security, while resource control ensures no single container monopolizes system resources. The encapsulation of an application and its dependencies into a single unit provides portability, and the lightweight nature of containers enhances efficiency.<\/p>"},{"question":"What are some types of Container Isolation?","answer":"<p>Different platforms have evolved to provide isolation in various ways, some of which include Docker, Linux Containers (LXC), Rocket (Rkt), Containerd, and CRI-O.<\/p>"},{"question":"What are some common issues with Container Isolation and their solutions?","answer":"<p>Some challenges associated with Container Isolation include security concerns, performance overhead, and management complexity. Solutions include regular system updates, patches, using additional security tools, efficient resource management, load balancing, and container orchestration tools.<\/p>"},{"question":"How does Container Isolation compare to similar concepts like Virtual Machines?","answer":"<p>Unlike virtual machines (VMs) that emulate a complete host with its own operating system, containers provide process-level isolation and share the host's OS kernel. This makes containers lightweight and faster to boot compared to VMs.<\/p>"},{"question":"How is Container Isolation expected to evolve in the future?","answer":"<p>Container Isolation technology is expected to improve further, especially in the area of security. Future trends point towards the adoption of WebAssembly (Wasm), eBPF (extended Berkeley Packet Filter), and the concept of microVMs like Firecracker that combine the security advantages of traditional VMs and the resource efficiency of containers.<\/p>"},{"question":"What is the relationship between Proxy Servers and Container Isolation?","answer":"<p>In the context of proxy servers, container isolation can segregate each client's operations, thereby enhancing security. Container orchestration platforms also enable proxy providers to manage thousands of proxy servers deployed as containers effectively, improving scalability, maintainability, and fault tolerance.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/476411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/476411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media\/476412"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media?parent=476411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}