Namespace查看容器状态

查看网络状态

docker inspect <容器名/容器id> |grep Pid    #过滤容器pid
nsenter -t <pid> -n ip a    #查看网络状态

Namespace练习

unshare  -n    #进入新的namespace
unshare -fn sleep 60    #睡眠60秒
root@disallow:~# ps -ef |grep  sleep    #在另外开一个终端查看进程信息
root      542490  541873  0 14:47 pts/5    00:00:00 unshare -fn sleep 60
root      542491  542490  0 14:47 pts/5    00:00:00 sleep 60root@disallow:~# lsns -t net    #查看网络namespace
4026532927 net       1 532336 root  unassigned                                bash
4026532983 net       1 541873 root  unassigned                                -bash
4026533039 net       2 543117 root  unassigned                                └─unsharoot@disallow:~# nsenter  -t 541873 -n ip a    #进入改进程所在的namespace查看网络配置，与主机不一致
1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN group default qlen 1000link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00