Tag: 提升特权

为什么docker容器中的shell会显示来自主机的dmesg内容?

我有一个在Ubuntu yakkety上运行Debian jessie的docker容器。 在Docker中(例如通过ssh连接),我与主机隔离(这是预期的)。 然而,我意识到, dmesg向我显示了主机的信息,而不是容器的信息。 如何获取主机的信息? docker容器的configuration不是特别的(除了它使用一个特定的桥,不同于docker0 ),特别是它不能以任何特权模式运行(下面的"Privileged": false ): root@srv ~# docker inspect minecraft-1-8 [ { "Id": "748cfdfbf3fb5526cb7151cbc0857117af3c7bd8ab9e086c4f2efb897290d66e", "Created": "2016-12-01T15:35:05.287672787Z", "Path": "/usr/bin/supervisord", "Args": [], "State": { "Status": "running", "Running": true, "Paused": false, "Restarting": false, "OOMKilled": false, "Dead": false, "Pid": 28650, "ExitCode": 0, "Error": "", "StartedAt": "2016-12-15T18:37:08.409564695Z", "FinishedAt": "2016-12-15T18:37:07.457274028Z" }, "Image": "sha256:78a2f88d47e29523503c2196ed2faaa3d1039d948d73987edc03b2abd338595d", "ResolvConfPath": "/var/lib/docker/containers/748cfdfbf3fb5526cb7151cbc0857117af3c7bd8ab9e086c4f2efb897290d66e/resolv.conf", […]