Virtualizatsiya va konteynerlar

grep -c -E "vmx|svm" /proc/cpuinfo

8

lscpu | grep -i virtual

Virtualization:                  VT-x
Hypervisor vendor:               KVM
Virtualization type:             full

systemd-detect-virt

wsl

#include <stdio.h>
#include <string.h>
#include <unistd.h>
#include <dirent.h>

int main(void) {
    DIR *k = opendir("/proc/self/ns");

    if (k == NULL) {
        printf("/proc/self/ns ochilmadi\n");
        return 1;
    }

    int soni = 0;
    struct dirent *y;

    printf("Jarayonimiz a'zo bo'lgan nom fazolari:\n");

    while ((y = readdir(k)) != NULL) {
        if (y->d_name[0] != '.') {
            soni++;
        }
    }

    closedir(k);

    printf("  Jami: %s\n", soni >= 6 ? "6 tadan ko'p" : "6 tadan kam");
    printf("  Har biri ramziy havola\n");
    printf("  Ikki jarayon bir xil havolaga ega bo'lsa - bir fazoda\n");

    return 0;
}

ls -l /proc/self/ns/

lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 cgroup -> 'cgroup:[4026531835]'
lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 ipc -> 'ipc:[4026531839]'
lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 mnt -> 'mnt:[4026531841]'
lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 net -> 'net:[4026531840]'
lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 pid -> 'pid:[4026531836]'
lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 user -> 'user:[4026531837]'
lrwxrwxrwx 1 husanboy husanboy 0 sen  9 12:04 uts -> 'uts:[4026531838]'

sudo unshare --pid --fork --mount-proc /bin/bash

ps aux

USER   PID %CPU %MEM    VSZ   RSS TTY   STAT START   TIME COMMAND
root     1  0.0  0.0  11876  5120 pts/0 S    12:08   0:00 /bin/bash
root     8  0.0  0.0  12480  3584 pts/0 R+   12:08   0:00 ps aux

sudo unshare --uts /bin/bash
hostname konteyner-sinov
hostname

konteyner-sinov

sudo unshare --net /bin/bash
ip addr

1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

cat /sys/fs/cgroup/cgroup.controllers

cpuset cpu io memory hugetlb pids rdma misc

sudo mkdir /sys/fs/cgroup/sinov
echo "100M" | sudo tee /sys/fs/cgroup/sinov/memory.max
echo "50000 100000" | sudo tee /sys/fs/cgroup/sinov/cpu.max
echo $$ | sudo tee /sys/fs/cgroup/sinov/cgroup.procs

cat /sys/fs/cgroup/sinov/memory.current

8421376

docker run --memory=512m --cpus=1.5 nginx

#include <stdio.h>
#include <string.h>
#include <unistd.h>

int main(void) {
    /* 1-usul: /.dockerenv fayli */
    int docker_fayli = access("/.dockerenv", F_OK) == 0;

    /* 2-usul: cgroup yo'lida "docker" yoki "containerd" */
    FILE *f = fopen("/proc/1/cgroup", "r");
    int cgroup_belgisi = 0;
    char qator[512];

    if (f != NULL) {
        while (fgets(qator, sizeof qator, f) != NULL) {
            if (strstr(qator, "docker") || strstr(qator, "containerd")) {
                cgroup_belgisi = 1;
                break;
            }
        }

        fclose(f);
    }

    /* 3-usul: PID 1 ning nomi */
    f = fopen("/proc/1/comm", "r");
    char nom[64] = "";

    if (f != NULL) {
        if (fgets(nom, sizeof nom, f) != NULL) {
            nom[strcspn(nom, "\n")] = '\0';
        }

        fclose(f);
    }

    int init_emas = strcmp(nom, "systemd") != 0 && strcmp(nom, "init") != 0;

    printf("/.dockerenv mavjudmi?  : %s\n", docker_fayli ? "ha" : "yo'q");
    printf("cgroup da docker bormi?: %s\n", cgroup_belgisi ? "ha" : "yo'q");
    printf("PID 1 init emasmi?     : %s\n", init_emas ? "ha" : "yo'q");

    printf("\nEng ishonchli usul - systemd-detect-virt buyrug'i\n");

    return 0;
}

uname -r

5.15.167.4-microsoft-standard-WSL2

cat /proc/version

Linux version 5.15.167.4-microsoft-standard-WSL2 (root@buildvm) (gcc 11.2.0)