구차니의 잡동사니 모음

docker create [이미지 이름]

docker run [컨테이너UUID] -a

docker run [이미지 이름]

[링크 : https://stackoverflow.com/questions/21928691/how-to-continue-a-docker-container-which-has-exited]

$ docker exec --help

Usage: docker exec [OPTIONS] CONTAINER COMMAND [ARG...]

Run a command in a running container

Options:
  -d, --detach               Detached mode: run command in the background
      --detach-keys string   Override the key sequence for detaching a container
  -e, --env list             Set environment variables
  -i, --interactive          Keep STDIN open even if not attached
      --privileged           Give extended privileges to the command
  -t, --tty                  Allocate a pseudo-TTY
  -u, --user string          Username or UID (format: <name|uid>[:<group|gid>])
  -w, --workdir string       Working directory inside the container

$ docker run --help

Usage: docker run [OPTIONS] IMAGE [COMMAND] [ARG...]

Run a command in a new container

Options:
      --add-host list                  Add a custom host-to-IP mapping (host:ip)
  -a, --attach list                    Attach to STDIN, STDOUT or STDERR
      --blkio-weight uint16            Block IO (relative weight), between 10 and 1000, or 0 to disable (default 0)
      --blkio-weight-device list       Block IO weight (relative device weight) (default [])
      --cap-add list                   Add Linux capabilities
      --cap-drop list                  Drop Linux capabilities
      --cgroup-parent string           Optional parent cgroup for the container
      --cidfile string                 Write the container ID to the file
      --cpu-count int                  CPU count (Windows only)
      --cpu-percent int                CPU percent (Windows only)
      --cpu-period int                 Limit CPU CFS (Completely Fair Scheduler) period
      --cpu-quota int                  Limit CPU CFS (Completely Fair Scheduler) quota
      --cpu-rt-period int              Limit CPU real-time period in microseconds
      --cpu-rt-runtime int             Limit CPU real-time runtime in microseconds
  -c, --cpu-shares int                 CPU shares (relative weight)
      --cpus decimal                   Number of CPUs
      --cpuset-cpus string             CPUs in which to allow execution (0-3, 0,1)
      --cpuset-mems string             MEMs in which to allow execution (0-3, 0,1)
  -d, --detach                         Run container in background and print container ID
      --detach-keys string             Override the key sequence for detaching a container
      --device list                    Add a host device to the container
      --device-cgroup-rule list        Add a rule to the cgroup allowed devices list
      --device-read-bps list           Limit read rate (bytes per second) from a device (default [])
      --device-read-iops list          Limit read rate (IO per second) from a device (default [])
      --device-write-bps list          Limit write rate (bytes per second) to a device (default [])
      --device-write-iops list         Limit write rate (IO per second) to a device (default [])
      --disable-content-trust          Skip image verification (default true)
      --dns list                       Set custom DNS servers
      --dns-option list                Set DNS options
      --dns-search list                Set custom DNS search domains
      --entrypoint string              Overwrite the default ENTRYPOINT of the image
  -e, --env list                       Set environment variables
      --env-file list                  Read in a file of environment variables
      --expose list                    Expose a port or a range of ports
      --group-add list                 Add additional groups to join
      --health-cmd string              Command to run to check health
      --health-interval duration       Time between running the check (ms|s|m|h) (default 0s)
      --health-retries int             Consecutive failures needed to report unhealthy
      --health-start-period duration   Start period for the container to initialize before starting health-retries countdown
                                       (ms|s|m|h) (default 0s)
      --health-timeout duration        Maximum time to allow one check to run (ms|s|m|h) (default 0s)
      --help                           Print usage
  -h, --hostname string                Container host name
      --init                           Run an init inside the container that forwards signals and reaps processes
  -i, --interactive                    Keep STDIN open even if not attached
      --io-maxbandwidth bytes          Maximum IO bandwidth limit for the system drive (Windows only)
      --io-maxiops uint                Maximum IOps limit for the system drive (Windows only)
      --ip string                      IPv4 address (e.g., 172.30.100.104)
      --ip6 string                     IPv6 address (e.g., 2001:db8::33)
      --ipc string                     IPC mode to use
      --isolation string               Container isolation technology
      --kernel-memory bytes            Kernel memory limit
  -l, --label list                     Set meta data on a container
      --label-file list                Read in a line delimited file of labels
      --link list                      Add link to another container
      --link-local-ip list             Container IPv4/IPv6 link-local addresses
      --log-driver string              Logging driver for the container
      --log-opt list                   Log driver options
      --mac-address string             Container MAC address (e.g., 92:d0:c6:0a:29:33)
  -m, --memory bytes                   Memory limit
      --memory-reservation bytes       Memory soft limit
      --memory-swap bytes              Swap limit equal to memory plus swap: '-1' to enable unlimited swap
      --memory-swappiness int          Tune container memory swappiness (0 to 100) (default -1)
      --mount mount                    Attach a filesystem mount to the container
      --name string                    Assign a name to the container
      --network string                 Connect a container to a network (default "default")
      --network-alias list             Add network-scoped alias for the container
      --no-healthcheck                 Disable any container-specified HEALTHCHECK
      --oom-kill-disable               Disable OOM Killer
      --oom-score-adj int              Tune host's OOM preferences (-1000 to 1000)
      --pid string                     PID namespace to use
      --pids-limit int                 Tune container pids limit (set -1 for unlimited)
      --platform string                Set platform if server is multi-platform capable
      --privileged                     Give extended privileges to this container
  -p, --publish list                   Publish a container's port(s) to the host
  -P, --publish-all                    Publish all exposed ports to random ports
      --read-only                      Mount the container's root filesystem as read only
      --restart string                 Restart policy to apply when a container exits (default "no")
      --rm                             Automatically remove the container when it exits
      --runtime string                 Runtime to use for this container
      --security-opt list              Security Options
      --shm-size bytes                 Size of /dev/shm
      --sig-proxy                      Proxy received signals to the process (default true)
      --stop-signal string             Signal to stop a container (default "SIGTERM")
      --stop-timeout int               Timeout (in seconds) to stop a container
      --storage-opt list               Storage driver options for the container
      --sysctl map                     Sysctl options (default map[])
      --tmpfs list                     Mount a tmpfs directory
  -t, --tty                            Allocate a pseudo-TTY
      --ulimit ulimit                  Ulimit options (default [])
  -u, --user string                    Username or UID (format: <name|uid>[:<group|gid>])
      --userns string                  User namespace to use
      --uts string                     UTS namespace to use
  -v, --volume list                    Bind mount a volume
      --volume-driver string           Optional volume driver for the container
      --volumes-from list              Mount volumes from the specified container(s)
  -w, --workdir string                 Working directory inside the container

+

2019.06.12

-dit

[링크 : https://stackoverflow.com/.../practically-what-is-the-difference-between-docker-run-dit-itd-vs-docker-run]

$ file *
cdccdf50922d90e847e097347de49119be0f17c18b4a2d98da9919fa5884479d:      directory
fce289e99eb9bca977dae136fbe2a82b6b7d4c372474c9235adc1741675f587e.json: ASCII text, with very long lines, with no line terminators

manifest.json:                                                         ASCII text
repositories:                                                          ASCII text

$ file *
VERSION:   ASCII text, with no line terminators
hello:     ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, BuildID[sha1]=1db23291fc8346e8622488be91d4c5438b760315, strippedjson:      ASCII text, with very long lines, with no line terminators
layer.tar: POSIX tar archive

$ cat fce289e99eb9bca977dae136fbe2a82b6b7d4c372474c9235adc1741675f587e.json 
{"architecture":"amd64","config":{"Hostname":"","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Cmd":["/hello"],"ArgsEscaped":true,"Image":"sha256:a6d1aaad8ca65655449a26146699fe9d61240071f6992975be7e720f1cd42440","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":null},"container":"8e2caa5a514bb6d8b4f2a2553e9067498d261a0fd83a96aeaaf303943dff6ff9","container_config":{"Hostname":"8e2caa5a514b","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Cmd":["/bin/sh","-c","#(nop) ","CMD [\"/hello\"]"],"ArgsEscaped":true,"Image":"sha256:a6d1aaad8ca65655449a26146699fe9d61240071f6992975be7e720f1cd42440","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":{}},"created":"2019-01-01T01:29:27.650294696Z","docker_version":"18.06.1-ce","history":[{"created":"2019-01-01T01:29:27.416803627Z","created_by":"/bin/sh -c #(nop) COPY file:f77490f70ce51da25bd21bfc30cb5e1a24b2b65eb37d4af0c327ddc24f0986a6 in / "},{"created":"2019-01-01T01:29:27.650294696Z","created_by":"/bin/sh -c #(nop)  CMD [\"/hello\"]","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:af0b15c8625bb1938f1d7b17081031f649fd14e6b233688eea3c5483994a66a3"]}}

$ cat manifest.json 
[{"Config":"fce289e99eb9bca977dae136fbe2a82b6b7d4c372474c9235adc1741675f587e.json","RepoTags":["hello-world:latest"],"Layers":["cdccdf50922d90e847e097347de49119be0f17c18b4a2d98da9919fa5884479d/layer.tar"]}]

$ cat repositories 
{"hello-world":{"latest":"cdccdf50922d90e847e097347de49119be0f17c18b4a2d98da9919fa5884479d"}}

$ cat VERSION 
1.0

$ cat json 
{"id":"cdccdf50922d90e847e097347de49119be0f17c18b4a2d98da9919fa5884479d","created":"2019-01-01T01:29:27.650294696Z","container":"8e2caa5a514bb6d8b4f2a2553e9067498d261a0fd83a96aeaaf303943dff6ff9","container_config":{"Hostname":"8e2caa5a514b","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Cmd":["/bin/sh","-c","#(nop) ","CMD [\"/hello\"]"],"ArgsEscaped":true,"Image":"sha256:a6d1aaad8ca65655449a26146699fe9d61240071f6992975be7e720f1cd42440","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":{}},"docker_version":"18.06.1-ce","config":{"Hostname":"","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Cmd":["/hello"],"ArgsEscaped":true,"Image":"sha256:a6d1aaad8ca65655449a26146699fe9d61240071f6992975be7e720f1cd42440","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":null},"architecture":"amd64","os":"linux"}

[링크 : https://serverfault.com/questions/701248/downloading-docker-image-for-transfer-to-non-internet-connected-machine]

[링크 : https://code-maze.com/docker-hub-vs-creating-docker-registry/]

$ sudo docker pull hello-world

$ sudo docker save -o hello-world  hello-world

-rw-------  1 root     root      13K  5월 16 19:04 hello-world

$ sudo file hello-world 
hello-world: POSIX tar archive

[링크 : https://serverfault.com/.../downloading-docker-image-for-transfer-to-non-internet-connected-machine]

이 명령어는 시리얼 콘솔을 연결해 주는 듯

[링크 : http://inux.systemv.pe.kr/가상-머신에-콘솔-접속하기/]

단순하게(?) 전체 힙 사이즈와, 새로운 힙 사이즈에 대한 설정만 있는 것으로 보이는데

아래가 기본값인듯 하고.. docker를 통해 실행한 카산드라는 기본 4G의 메모리를 먹을 것으로 보인다.

일단 찾을건.. 최대 메모리 설정을 줄이는 것과

GC를 가동할 시간을 좀 짧게 가져가는 것

그리고 spring에서 카산드라 DB의 메모리를 GC 시키는 것 정도일려나?

[링크 : http://theeye.pe.kr/archives/1375]

[링크 : https://knight76.tistory.com/entry/cassandra-compaction-관련]

+

2019.05.16

[링크 : https://stackoverflow.com/questions/34745419/how-to-set-cassandra-2-0-jvm-heap-size-of-8gb]

[링크 : https://tobert.github.io/pages/als-cassandra-21-tuning-guide.html]

datastax

[링크 : https://docs.datastax.com/en/cassandra/3.0/cassandra/operations/opsTuneJVM.html]

데이터분석용인데 몇개 검색해보니 로그 분석용으로 더 쓰이는 느낌

ElasticSearch, LogStash, Kibana

[링크 : https://sanghaklee.tistory.com/51]

[링크 : https://heowc.tistory.com/49]

[링크 : http:// https://www.inflearn.com/course/elk-스택-데이터-분석/#]

예전에 찾아 놓은 Web GUI 로 된 kvm 관리자를 해보는데

[링크 : https://github.com/retspen/webvirtmgr/wiki/Install-WebVirtMgr]

libvirtd를 구동하면 에러가 나는데 기본이 TLS 인증이라 그런듯.

아무튼 libvirtd에 설정을 바꾸어주면 되긴하는데.. 인증이 안되네..

[링크 : https://libvirt.org/remote.html]

위에처럼 하면 접속은 되는데 인증이 안된다.

일단은 과감하게(?) 보안무시하고 실행을 위주로 ㄱㄱ!

[링크 : https://libvirt.org/auth.html]

[링크 : https://computingforgeeks.com/use-virt-manager-as-non-root-user/]

일단은 이미지 업로드가 안되서(해당 UI가 깨진건지..) 일단은 사용은 실패

KVM을 통해서 하는데 노트북이 1280x1024 밖에 안되다 보니

SPICE를 통해 보면 잘려서 어떻게 해야 하려나?

[링크 : https://www.linux-kvm.org/page/SPICE]

[링크 : https://patchwork.ozlabs.org/patch/484821/]

[링크 : https://www.linux-kvm.org/images/b/b2/01x10b-QEMUGfraphics.pdf]

예전에 본.. VT-d 활성화 해주어야 하는건가..

대충 설정들을 보니.. 가상 머신에다가 물리 장치를 물리는걸 패스쓰루라고 하는데

guest가 Windows면은 그래픽 카드를 iommu를 통해 혹은 vt-d를 통해서

직접 가상 머신에 물려주는걸 의미하는 듯?

[링크 : https://heiko-sieger.info/running-windows-10-on-linux-using-kvm-with-vga-passthrough/]

[링크 : https://davidyat.es/2016/09/08/gpu-passthrough/]

[링크 : https://blog.zerosector.io/2018/07/28/kvm-qemu-windows-10-gpu-passthrough/]

vt-d는 인텔

iommu는 amd 계열 기술이름인듯

[링크 : http://jowon.blogspot.com/2010/01/linux-pci-passthrough.html]

+

vt-d/iommu는 카드를 공유하거나 일부만 잘라서 쓰지는 못하는 듯.

(즉, 하나의 게스트에 할당하면 다른 게스트는 해당 gpu를 쓰지 못한다거나?)

[링크 : https://www.whitehatvirtual.com/vgpu-101-passthrough-vs-vgpu-why-it-matters/]

Nvidia GRID 제품군으로는 위의 방법이 가능한것으로 보임

(위에 글들은 과거 내용이니 좀 달라진건가?)

[링크 : https://kr.nvidia.com/object/tesla-m60-kr.html]

[링크 : https://docs.nvidia.com/grid/latest/grid-vgpu-release-notes-generic-linux-kvm/index.html]