466 lines
16 KiB
HTML
466 lines
16 KiB
HTML
|
||
<!DOCTYPE html>
|
||
<html lang="zh-CN" class="loading">
|
||
<head>
|
||
<!-- hexo-inject:begin --><!-- hexo-inject:end --><meta charset="UTF-8" />
|
||
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
|
||
<meta name="viewport" content="width=device-width, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
|
||
<title>Category: DevOps - Blog</title>
|
||
<meta name="apple-mobile-web-app-capable" content="yes" />
|
||
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
|
||
<meta name="google" content="notranslate" />
|
||
<meta name="keywords" content="Developer, Python, C++, JavaScript, Java,">
|
||
<meta name="description" content="DavidZ's Blog,">
|
||
<meta name="author" content="DavidZ">
|
||
<link rel="alternative" href="atom.xml" title="Blog" type="application/atom+xml">
|
||
<link rel="icon" href="/img/favicon.png">
|
||
<link href="https://fonts.loli.net/css?family=Roboto+Mono|Rubik&display=swap" rel="stylesheet">
|
||
|
||
<link rel="stylesheet" href="//at.alicdn.com/t/font_1429596_nzgqgvnmkjb.css">
|
||
|
||
|
||
<link rel="stylesheet" href="//cdn.bootcss.com/animate.css/3.7.2/animate.min.css">
|
||
|
||
|
||
<link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/social-share.js/1.0.16/css/share.min.css">
|
||
|
||
|
||
<link rel="stylesheet" href="//cdn.bootcss.com/codemirror/5.48.4/codemirror.min.css">
|
||
|
||
|
||
<link rel="stylesheet" href="//cdn.bootcss.com/codemirror/5.48.4/theme/dracula.css">
|
||
|
||
|
||
<link rel="stylesheet" href="/css/obsidian.css">
|
||
|
||
|
||
<link rel="stylesheet" href="/css/ball-atom.min.css">
|
||
|
||
<meta name="generator" content="Hexo 4.2.0"><!-- hexo-inject:begin --><!-- hexo-inject:end --></head>
|
||
|
||
|
||
<body class="loading">
|
||
<!-- hexo-inject:begin --><!-- hexo-inject:end --><div class="loader">
|
||
<div class="la-ball-atom la-2x">
|
||
<div></div>
|
||
<div></div>
|
||
<div></div>
|
||
<div></div>
|
||
</div>
|
||
</div>
|
||
<span id="config-title" style="display:none">Blog</span>
|
||
<div id="loader"></div>
|
||
<div class="nav">
|
||
<ul id="menu-menu" class="menu">
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/whoami/" title="ABOUT" external="false">ABOUT</a>
|
||
</li>
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/categories/" title="CATEGORIES" external="false">CATEGORIES</a>
|
||
</li>
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/tags/" title="TAGS" external="false">TAGS</a>
|
||
</li>
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/archives/" title="ARCHIVES" external="false">ARCHIVES</a>
|
||
</li>
|
||
|
||
</ul>
|
||
<p class="copyright" id="copyright">
|
||
© 2020 DavidZ.
|
||
Powered by <a href="http://hexo.io/" title="Hexo" target="_blank" rel="noopener">Hexo</a>
|
||
Theme <a href="https://github.com/TriDiamond/hexo-theme-obsidian" title="Obsidian" target="_blank" rel="noopener">Obsidian</a>
|
||
</p>
|
||
</div>
|
||
|
||
<div id="container">
|
||
|
||
<div class="search-box">
|
||
<form class="site-search-form">
|
||
<span class="iconfont icon-search"></span>
|
||
<input type="text" id="local-search-input" class="st-search-input" />
|
||
<div class="iconfont icon-cross search-box-close"></div>
|
||
</form>
|
||
<div class="search-scrollable">
|
||
<div id="local-search-result" class="local-search-result-cls" data-initialise="首次搜索，正在载入索引文件，请稍后……"
|
||
data-start="输入关键词搜索。" data-empty="没有找到内容，请尝试更换检索词。">
|
||
<span>输入关键词搜索。</span>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div id="header">
|
||
<div>
|
||
<div class="logo animated fadeInDown">
|
||
<img src="/img/favicon.png" alt="">
|
||
<a class="image-logo" href="/"></a>
|
||
</div>
|
||
<ul id="menu-menu" class="menu text-menu">
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/whoami/" title="ABOUT" external="false" class="menu-link">ABOUT</a>
|
||
</li>
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/categories/" title="CATEGORIES" external="false" class="menu-link">CATEGORIES</a>
|
||
</li>
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/tags/" title="TAGS" external="false" class="menu-link">TAGS</a>
|
||
</li>
|
||
|
||
<li class="animated fadeInDown menu-item menu-item-type-post_type menu-item-object-page">
|
||
<a href="/archives/" title="ARCHIVES" external="false" class="menu-link">ARCHIVES</a>
|
||
</li>
|
||
|
||
|
||
<li class="animated fadeInDown search-bar iconfont icon-search"></li>
|
||
|
||
</ul>
|
||
<div class="iconfont icon-menu switchmenu gradient-text animated fadeInDown"></div>
|
||
</div>
|
||
</div>
|
||
<div id="screen">
|
||
<div id="mark">
|
||
<div class="cover animated fadeIn" style="
|
||
animation-delay: 900ms;
|
||
animation-duration: 2.8s;
|
||
background-image:
|
||
radial-gradient(ellipse closest-side, rgba(0, 0, 0, 0.56), #100e17),
|
||
url(//davidz.cn/static/blog/2020-02-10-kinsing-virus/cover.jpg);">
|
||
</div>
|
||
</div>
|
||
|
||
<div id="post0" class="else">
|
||
<p class="animated fadeInDown">
|
||
|
||
<a href="/categories/DevOps"><b>「
|
||
</b>DEVOPS<b> 」</b></a>
|
||
|
||
二月 10, 2020
|
||
</p>
|
||
<h3 class="post-title animated fadeInDown">
|
||
<a href="/kinsing-virus/" title="Kinsing - "寄生"于 Docker 的病毒" class="posttitle">Kinsing - "寄生"于 Docker 的病毒</a></h3>
|
||
|
||
<p class="post-count animated fadeInDown">
|
||
|
||
<span>
|
||
<b class="iconfont icon-text2"></b> <i>文章字数</i>
|
||
2.1k
|
||
</span>
|
||
|
||
|
||
<span>
|
||
<b class="iconfont icon-timer__s"></b> <i>阅读约需</i>
|
||
2 mins.
|
||
</span>
|
||
|
||
|
||
</p>
|
||
|
||
|
||
<ul class="animated fadeInDown post-tags-list" itemprop="keywords"><li class="animated fadeInDown post-tags-list-item"><a class="animated fadeInDown post-tags-list-link" href="/tags/Docker/" rel="tag">Docker</a></li><li class="animated fadeInDown post-tags-list-item"><a class="animated fadeInDown post-tags-list-link" href="/tags/Linux/" rel="tag">Linux</a></li><li class="animated fadeInDown post-tags-list-item"><a class="animated fadeInDown post-tags-list-link" href="/tags/Shell/" rel="tag">Shell</a></li></ul>
|
||
|
||
<div class="md-content animated fadeIn">
|
||
|
||
|
||
<p>2020 年开年不顺，2019 新型冠状病毒肺炎爆发，从年三十居家隔离到了正月十五，没想到自己的服务器也”感染“上了病毒 - Kinsing(进程的名字，姑且这样称呼)。</p>
|
||
|
||
<p></p>
|
||
<p>偶然看了看服务器状态，发现 CPU 占用一直保持在 100%上下，有些蹊跷。</p>
|
||
<p>难道是我的博客访问量<s>暴增</s>？？？那是当然不可能的，然后我去看了看<a href="https://github.com/portainer/portainer" target="_blank" rel="noopener">Portainer</a>看了看，果然，</p>
|
||
<p></p>
|
||
<p>这个随机名称的容器就是 Kinsing 基于 Ubuntu 的容器，CPU 占用 100%。</p>
|
||
<p></p>
|
||
<p>简单看了看容器里面的进程表，第一个运行了一个 shell 脚本，这个病毒就是这个脚本下载启动的关键，我打开看了看，<s>也没看懂</s>，大概是下载了几个可执行文件...</p>
|
||
|
||
<span class="read-more"><a href="/kinsing-virus/" title="查看全文" class="posttitle">查看全文</a>
|
||
<b class="iconfont icon-arrow-right- gradient-text"></b></span>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
|
||
<div class="screen-gradient-after">
|
||
<div class="screen-gradient-content">
|
||
<div class="screen-gradient-content-inside">
|
||
<div class="bold-underline-links screen-gradient-sponsor">
|
||
<p>
|
||
<span class="typed-text"></span>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
<div id="primary">
|
||
|
||
</div>
|
||
|
||
</div>
|
||
<div id="preview"></div>
|
||
|
||
<div id="back-to-top" class="animated fadeIn faster">
|
||
<div class="flow"></div>
|
||
<span class="percentage animated fadeIn faster">0%</span>
|
||
<span class="iconfont icon-top02 animated fadeIn faster"></span>
|
||
</div><!-- hexo-inject:begin --><!-- hexo-inject:end -->
|
||
</body>
|
||
<footer>
|
||
<p class="copyright" id="copyright">
|
||
© 2020
|
||
<span class="gradient-text">
|
||
DavidZ
|
||
</span>.
|
||
Powered by <a href="http://hexo.io/" title="Hexo" target="_blank" rel="noopener">Hexo</a>
|
||
Theme
|
||
<span class="gradient-text">
|
||
<a href="https://github.com/TriDiamond/hexo-theme-obsidian" title="Obsidian" target="_blank" rel="noopener">Obsidian</a>
|
||
</span>
|
||
<small><a href="https://github.com/TriDiamond/hexo-theme-obsidian/blob/master/CHANGELOG.md" title="v1.4.3" target="_blank" rel="noopener">v1.4.3</a></small>
|
||
</p>
|
||
</footer>
|
||
|
||
<script type="text/javascript" src="https://cdn.bootcss.com/mathjax/2.7.6/MathJax.js?config=TeX-AMS-MML_HTMLorMML">
|
||
</script>
|
||
<script>
|
||
MathJax.Hub.Config({
|
||
"HTML-CSS": {
|
||
preferredFont: "TeX",
|
||
availableFonts: ["STIX", "TeX"],
|
||
linebreaks: {
|
||
automatic: true
|
||
},
|
||
EqnChunk: (MathJax.Hub.Browser.isMobile ? 10 : 50)
|
||
},
|
||
tex2jax: {
|
||
inlineMath: [
|
||
["$", "$"],
|
||
["\\(", "\\)"]
|
||
],
|
||
processEscapes: true,
|
||
ignoreClass: "tex2jax_ignore|dno",
|
||
skipTags: ['script', 'noscript', 'style', 'textarea', 'pre', 'code']
|
||
},
|
||
TeX: {
|
||
noUndefined: {
|
||
attributes: {
|
||
mathcolor: "red",
|
||
mathbackground: "#FFEEEE",
|
||
mathsize: "90%"
|
||
}
|
||
},
|
||
Macros: {
|
||
href: "{}"
|
||
}
|
||
},
|
||
messageStyle: "none"
|
||
});
|
||
</script>
|
||
<script>
|
||
function initialMathJax() {
|
||
MathJax.Hub.Queue(function () {
|
||
var all = MathJax.Hub.getAllJax(),
|
||
i;
|
||
// console.log(all);
|
||
for (i = 0; i < all.length; i += 1) {
|
||
all[i].SourceElement().parentNode.className += ' has-jax';
|
||
}
|
||
});
|
||
}
|
||
|
||
function reprocessMathJax() {
|
||
if (typeof MathJax !== 'undefined') {
|
||
MathJax.Hub.Queue(["Typeset", MathJax.Hub]);
|
||
}
|
||
}
|
||
</script>
|
||
|
||
|
||
|
||
|
||
<link rel="stylesheet" href="//cdn.bootcss.com/gitalk/1.5.0/gitalk.min.css">
|
||
|
||
|
||
<script src="//cdn.bootcss.com/gitalk/1.5.0/gitalk.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>
|
||
<script src="/js/plugin.js"></script>
|
||
<script src="/js/obsidian.js"></script>
|
||
<script src="/js/jquery.truncate.js"></script>
|
||
<script src="/js/search.js"></script>
|
||
|
||
|
||
<script src="//cdn.bootcss.com/typed.js/2.0.10/typed.min.js"></script>
|
||
|
||
|
||
<script src="//cdn.bootcss.com/blueimp-md5/2.12.0/js/md5.min.js"></script>
|
||
|
||
|
||
<script src="//cdnjs.cloudflare.com/ajax/libs/social-share.js/1.0.16/js/social-share.min.js"></script>
|
||
|
||
|
||
<script src="https://cdn.bootcss.com/codemirror/5.48.4/codemirror.min.js"></script>
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/javascript/javascript.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/css/css.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/xml/xml.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/htmlmixed/htmlmixed.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/clike/clike.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/php/php.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/shell/shell.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/python/python.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/cmake/cmake.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/powershell/powershell.min.js"></script>
|
||
|
||
|
||
|
||
<script src="//cdn.bootcss.com/codemirror/5.48.4/mode/yaml/yaml.min.js"></script>
|
||
|
||
|
||
|
||
|
||
|
||
<script src="/js/busuanzi.min.js"></script>
|
||
|
||
<script>
|
||
$(document).ready(function () {
|
||
if ($('span[id^="busuanzi_"]').length) {
|
||
initialBusuanzi();
|
||
}
|
||
});
|
||
</script>
|
||
|
||
|
||
|
||
<link rel="stylesheet" href="//cdn.bootcss.com/photoswipe/4.1.3/photoswipe.min.css">
|
||
<link rel="stylesheet" href="//cdn.bootcss.com/photoswipe/4.1.3/default-skin/default-skin.min.css">
|
||
|
||
|
||
<script src="//cdn.bootcss.com/photoswipe/4.1.3/photoswipe.min.js"></script>
|
||
<script src="//cdn.bootcss.com/photoswipe/4.1.3/photoswipe-ui-default.min.js"></script>
|
||
|
||
|
||
<!-- Root element of PhotoSwipe. Must have class pswp. -->
|
||
<div class="pswp" tabindex="-1" role="dialog" aria-hidden="true">
|
||
<!-- Background of PhotoSwipe.
|
||
It's a separate element as animating opacity is faster than rgba(). -->
|
||
<div class="pswp__bg"></div>
|
||
<!-- Slides wrapper with overflow:hidden. -->
|
||
<div class="pswp__scroll-wrap">
|
||
<!-- Container that holds slides.
|
||
PhotoSwipe keeps only 3 of them in the DOM to save memory.
|
||
Don't modify these 3 pswp__item elements, data is added later on. -->
|
||
<div class="pswp__container">
|
||
<div class="pswp__item"></div>
|
||
<div class="pswp__item"></div>
|
||
<div class="pswp__item"></div>
|
||
</div>
|
||
<!-- Default (PhotoSwipeUI_Default) interface on top of sliding area. Can be changed. -->
|
||
<div class="pswp__ui pswp__ui--hidden">
|
||
<div class="pswp__top-bar">
|
||
<!-- Controls are self-explanatory. Order can be changed. -->
|
||
<div class="pswp__counter"></div>
|
||
<button class="pswp__button pswp__button--close" title="Close (Esc)"></button>
|
||
<button class="pswp__button pswp__button--share" title="Share"></button>
|
||
<button class="pswp__button pswp__button--fs" title="Toggle fullscreen"></button>
|
||
<button class="pswp__button pswp__button--zoom" title="Zoom in/out"></button>
|
||
<!-- Preloader demo http://codepen.io/dimsemenov/pen/yyBWoR -->
|
||
<!-- element will get class pswp__preloader--active when preloader is running -->
|
||
<div class="pswp__preloader">
|
||
<div class="pswp__preloader__icn">
|
||
<div class="pswp__preloader__cut">
|
||
<div class="pswp__preloader__donut"></div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="pswp__share-modal pswp__share-modal--hidden pswp__single-tap">
|
||
<div class="pswp__share-tooltip"></div>
|
||
</div>
|
||
<button class="pswp__button pswp__button--arrow--left" title="Previous (arrow left)">
|
||
</button>
|
||
<button class="pswp__button pswp__button--arrow--right" title="Next (arrow right)">
|
||
</button>
|
||
<div class="pswp__caption">
|
||
<div class="pswp__caption__center"></div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
|
||
<!-- Global site tag (gtag.js) - Google Analytics -->
|
||
<script async src="//www.googletagmanager.com/gtag/js?id=UA-157733505-1"></script>
|
||
<script>
|
||
window.dataLayer = window.dataLayer || [];
|
||
function gtag(){dataLayer.push(arguments);}
|
||
gtag('js', new Date());
|
||
|
||
gtag('config', 'UA-157733505-1');
|
||
</script>
|
||
|
||
|
||
|
||
|
||
|
||
<script>
|
||
function initialTyped () {
|
||
var typedTextEl = $('.typed-text');
|
||
if (typedTextEl && typedTextEl.length > 0) {
|
||
var typed = new Typed('.typed-text', {
|
||
strings: ["凡事都要留几分", "颜值是第一生产力"],
|
||
typeSpeed: 90,
|
||
loop: true,
|
||
loopCount: Infinity,
|
||
backSpeed: 20,
|
||
});
|
||
}
|
||
}
|
||
|
||
if ($('.article-header') && $('.article-header').length) {
|
||
$(document).ready(function () {
|
||
initialTyped();
|
||
});
|
||
}
|
||
</script>
|
||
|
||
|
||
|
||
|
||
</html>
|