28 Docker Design and Implementation of Program Evaluation System Using Docker Virtualized Environment

Size: px

Start display at page:

Download "28 Docker Design and Implementation of Program Evaluation System Using Docker Virtualized Environment"

あいりふじした
5 years ago
Views:

1 28 Docker Design and Implementation of Program Evaluation System Using Docker Virtualized Environment

2 Docker,.,,.,,.,,.,. Docker.,..,., Web, Web.,.,.,, CPU,,. i

3 ., OS..,, OS, VirtualBox,., VirtualBox. OS,. Docker,,, ii

4 Abstract Design and Implementation of Program Evaluation System Using Docker Virtualized Environment Michiko IWAMOTO Teachers often assign programming tasks to students in computer science classes. Students write programs and submit them to the teacher. However, if a student submits a malicious program to the teacher, the teacher s computer infects the malicious program when the teacher execute the program to evaluate it. In this research, in order to prevent teacher s computers from infection of such malicious programs, we developed a program evaluation system that execute programs in virtualized environment. By executing programs in virtualized environment, we can enclose the effect of the malware in virtualized environment. We used Docker to construct the virtualized environment. To make requirements to our program evaluation system clear, we developed a prototype system. This prototype system simply has a function to evaluate programs in a virtualized environment. Using this prototype, we evaluated programs that are submitted from students in a real class. We also developed a web application with this prototype system and provided it to the students of the class. Afterward, we surveyed by questioning the students usefulness of this system and malicious behaviors of programs that the students could submit. After considering the result of the preliminary research, we developed a program iii

5 evaluation system that does not only executes programs in a virtualized environment but also restricts usage of computational resources, namely memory and CPU and execution time, and restricts network access. We evaluated the system to make sure that these limiting functions work properly. As a result, we confirmed that the system limits resource usage, CPU, and execution time and prevents programs from rewriting files on the host. We also confirmed that the system prevented programs from accessing to the external network. In addition, we compared the elapsed time taken to evaluate programs using our system with the time taken to evaluate on VirtualBox and the time taken to evaluate directly on the host OS. We found that our system was faster than VirtualBox. However, our system was slower than the host OS. key words Docker, virtualized environment, program test, security iv

6 Docker Docker Docker Docker v

7 OS CPU Java Docker vi

8 2.1 Docker, Dockerfile vii

9 CPU CPU OS VirtualBox viii

10 1 1.1,.,.,.,.,.,.,.,.,. CPU 1

11 ,.,., Docker. Docker [1]. Docker,,..,.,.,. 2

12 2 Docker, Docker. 2.1 Docker Docker. OS,. OS, OS. 2.2 Docker Docker. [2]. namespace cgroups Union File System namespace,. Linux, OS. 3

13 2.3 Docker cgroups, CPU. cgroups namespace Linux,. Union File System,, [1]. 2.3 Docker Docker, Dockerfile. Dockerfile.,. Dockerfile,.,, Docker Hub[3] Dockerfile. Docker Hub, [4]. Docker, OS test.txt Docker. test.txt HelloWorld!. 1, 2, Dockerfile. 1 Ubuntu. 2 OS test.txt , test.txt. 4

14 2.3 Docker 2.1 Docker, FROM ubuntu : latest COPY./ text. txt. CMD cat test. txt 2.2 Dockerfile Dockerfile.. $docker build.,., Dockerfile 3, test.txt. $docker run Hello World! 5

15 2.3 Docker,. 6

16 3,, ,

17 3.1,. OS, OS,., ,,.,.. compile prepare run validate 8

18 ,. compile, prepare, run, validate 4, ,,,., ,.... 9

19 Dockerfile.,., Dockerfile.,. 1 Dockerfile,,., ,,., Dockerfile., Dockerfile. 10

20 , 3., Web,.,. Web Web, CGI

21 ( ) CGI , 2, 4,, 2., 2, 3, 4, 5., 3, 4, ,.,,., Web.,, 3.1.,,, 3. 12

22 ,, CPU,,. 1,. 3.1,, 3.,., 2., CPU, 3., 2..,. 4,.,., 13

24 4, 3,. 4.1, 3.1., , CPU 1, error. error,,. 2, 3, 4,.. 15

25 CPU CPU. 4. CPU CPU. 2 CPU. CPU. CP U = CP U CP U ,.,. 4.2,.,

26 Dockerfile. Dockerfile,, , Dockerfile. Dockerfile , MB. 3. CPU CPU 0. 17

27 4.3 5.,. 6., ,.. 6 7, 8 error.. 1. Dockerfile. Dockerfile,,. 2.,.,. 3..,.,,

28 Dockerfile. Dockerfile ,,., error.. Dockerfile. 19

29 5,. OS CPU,,, Ubuntu Docker VirtualBox javac

30 (s) 2 (s) 3 (s) ,, OS,.,, OS. OS,., OS., ,. 10.,, ,.,

31 (MB) 2 (MB) 3 (MB) , 14.7, ,.,.,, , 50MB, 50MB., CPU CPU,., CPU 20% CPU CPU. CPU,., CPU,

32 CPU CPU CPU 1 (%) 2 (%) 3 (%) , 20% CPU, 20% CPU ,. IP ping,.,,. 5.5., ping.,,. 23

33 , OS, VirtualBox[5],,. VurtualBox., ,, 1 1., 1 3., Docker, 2 4., 1 4., VirtualBox,. VirtualBox, OS 2.,,. 24

34 (s) OS (s) VirtualBox,, 1 3.,. OS, , 5.8, , 5.8, VirtualBox, 5.8 VirtualBox (s) (s) (s) OS OS OS

35 ,., VirtualBox, 4. OS, OS

36 6. 6.1, Linux [6]., 2.,,.,. 6.2 Java, Java [7].,, API,., JavaVM.,., Java,, 27

37 6.3 Docker Java. 6.3 Docker paiza.io[9],. Java C 26,. paiza.io Docker, [8]. paiza.io Docker, Docker., CPU,,. 28

38 7 7.1, Docker,.,.,, CPU,.,.,.,, OS. 7.2,,., CPU,. OS, OS,. 29

39 ,.,,.,. 30

40 [1]. Docker,, [2] Adrian Mouat. Docker,, [3] Docker Hub, ). [4]. Docker &,, [5] Oracle VM VirtualBox, ). [6],,,,,. Linux, 2014, pp , [7],,., CE, pp , [8]. Docker,, [9] paiza.io, ). 31

SNS ( ) SNS(Social Networking Service) SNS SNS i

22 SNS Job-Hunting Activities situation Understanding Support System Using SNS 1110252 2011 03 01 SNS ( ) SNS(Social Networking Service) SNS SNS i Abstract Job-Hunting Activities situation Understanding