Docker에서 lsof를 교체하는 방법(LXC 기반이 아닌 기본)

제가 조금 혼란스러워하는 점은 lsof -iDocker 컨테이너 내부에서는 출력이 생성되지 않는다는 것입니다.

예(컨테이너 내부의 모든 명령/출력):

[1] root@ec016481cf5f:/# lsof -i
[1] root@ec016481cf5f:/# netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -
tcp6       0      0 :::22                   :::*                    LISTEN      -

또한 PID나 프로그램 이름이 어떻게 표시되지 않는지 확인하십시오 netstat. fuser또한 혼란스러운 출력을 제공했으며 PID도 정확히 찾아낼 수 없었습니다.

누구든지 이것에 대해 밝힐 수 있습니까?

• 어떻게 대체할 수 있습니까 lsof -i(보기 위해)프로세스 이름게다가! )
• 왜 출력 netstat도 깨졌나요?

알아채다:컨테이너 런타임은 "ExecDriver": "native-0.1"LXC 대신 Docker의 자체 실행 계층을 사용합니다.

---

[1] root@ec016481cf5f:/# fuser -a4n tcp 22
Cannot stat file /proc/1/fd/0: Permission denied
Cannot stat file /proc/1/fd/1: Permission denied
Cannot stat file /proc/1/fd/2: Permission denied
Cannot stat file /proc/1/fd/3: Permission denied
Cannot stat file /proc/1/fd/255: Permission denied
Cannot stat file /proc/6377/fd/0: Permission denied
Cannot stat file /proc/6377/fd/1: Permission denied
Cannot stat file /proc/6377/fd/2: Permission denied
Cannot stat file /proc/6377/fd/3: Permission denied
Cannot stat file /proc/6377/fd/4: Permission denied
22/tcp:

(나는 숫자이기 때문에 그것에 집착하지 않습니다 Permission denied. 나를 혼란스럽게 하는 것은 끝에 있는 빈 PID 목록입니다 22/tcp.)

---

# lsof|awk '$1 ~ /^sshd/ && $3 ~ /root/ {print}'
sshd    6377      root  cwd   unknown                        /proc/6377/cwd (readlink: Permission denied)
sshd    6377      root  rtd   unknown                        /proc/6377/root (readlink: Permission denied)
sshd    6377      root  txt   unknown                        /proc/6377/exe (readlink: Permission denied)
sshd    6377      root    0   unknown                        /proc/6377/fd/0 (readlink: Permission denied)
sshd    6377      root    1   unknown                        /proc/6377/fd/1 (readlink: Permission denied)
sshd    6377      root    2   unknown                        /proc/6377/fd/2 (readlink: Permission denied)
sshd    6377      root    3   unknown                        /proc/6377/fd/3 (readlink: Permission denied)
sshd    6377      root    4   unknown                        /proc/6377/fd/4 (readlink: Permission denied)
sshd    6442      root  cwd   unknown                        /proc/6442/cwd (readlink: Permission denied)
sshd    6442      root  rtd   unknown                        /proc/6442/root (readlink: Permission denied)
sshd    6442      root  txt   unknown                        /proc/6442/exe (readlink: Permission denied)
sshd    6442      root    0   unknown                        /proc/6442/fd/0 (readlink: Permission denied)
sshd    6442      root    1   unknown                        /proc/6442/fd/1 (readlink: Permission denied)
sshd    6442      root    2   unknown                        /proc/6442/fd/2 (readlink: Permission denied)
sshd    6442      root    3   unknown                        /proc/6442/fd/3 (readlink: Permission denied)
sshd    6442      root    4   unknown                        /proc/6442/fd/4 (readlink: Permission denied)
sshd    6442      root    5   unknown                        /proc/6442/fd/5 (readlink: Permission denied)

연결된 사용자로부터 일부 출력이 있는데, 이 역시 정확하게 식별되지만 그게 전부입니다. lsof -i특정 "객체"(인터넷 소켓에만 해당)의 유형을 말하는 것은 분명히 불가능합니다 .