在rkt容器中执行命令，输出结果，然后退出
Execute command in rkt container, output results, then exit
我正在寻找等同于以下 docker 命令的 rkt 命令：
docker run nginx:1.11.5 find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
docker命令从nginx:1.11.5创建一个新容器，在容器内执行find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null（将所有具有setuid和setgid权限的二进制文件打印到stdout），然后杀死容器。结果看起来像这样：
root@localhost:~# docker run nginx:1.11.5 find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
-rwsr-xr-x 1 root root 40168 Nov 18 2015 /bin/su
-rwsr-xr-x 1 root root 40000 Mar 29 2015 /bin/mount
-rwsr-xr-x 1 root root 27416 Mar 29 2015 /bin/umount
-rwsr-xr-x 1 root root 61392 Oct 28 2014 /bin/ping6
-rwsr-xr-x 1 root root 70576 Oct 28 2014 /bin/ping
-rwsr-xr-x 1 root root 53616 Nov 18 2015 /usr/bin/chfn
-rwsr-xr-x 1 root root 39912 Nov 18 2015 /usr/bin/newgrp
-rwxr-sr-x 1 root tty 27232 Mar 29 2015 /usr/bin/wall
-rwsr-xr-x 1 root root 54192 Nov 18 2015 /usr/bin/passwd
-rwxr-sr-x 1 root shadow 22744 Nov 18 2015 /usr/bin/expiry
-rwsr-xr-x 1 root root 75376 Nov 18 2015 /usr/bin/gpasswd
-rwsr-xr-x 1 root root 44464 Nov 18 2015 /usr/bin/chsh
-rwxr-sr-x 1 root shadow 62272 Nov 18 2015 /usr/bin/chage
-rwxr-sr-x 1 root shadow 35408 Jan 28 2016 /sbin/unix_chkpwd
这是我目前尝试过的方法：
rkt run --insecure-options=image --net=host docker://nginx find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
和
rkt run --insecure-options=image --net=host docker://nginx --exec find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
两者都return没有输出。
我可以通过使用 --exec /bin/bash 覆盖初始命令并添加 --interactive 标志来获取我想要的信息，如下所示：
root@localhost:~# rkt run --interactive --insecure-options=image --net=host docker://nginx --exec /bin/bash
root@rkt-b5452809-0253-4da4-8026-d678c9bf7929:/# find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
-rwxr-sr-x 1 root shadow 35408 Jan 28 2016 /sbin/unix_chkpwd
-rwsr-xr-x 1 root root 40000 Mar 29 2015 /bin/mount
-rwsr-xr-x 1 root root 61392 Oct 28 2014 /bin/ping6
-rwsr-xr-x 1 root root 40168 Nov 18 2015 /bin/su
-rwsr-xr-x 1 root root 27416 Mar 29 2015 /bin/umount
-rwsr-xr-x 1 root root 70576 Oct 28 2014 /bin/ping
-rwxr-sr-x 1 root tty 27232 Mar 29 2015 /usr/bin/wall
-rwsr-xr-x 1 root root 75376 Nov 18 2015 /usr/bin/gpasswd
-rwsr-xr-x 1 root root 44464 Nov 18 2015 /usr/bin/chsh
-rwsr-xr-x 1 root root 53616 Nov 18 2015 /usr/bin/chfn
-rwsr-xr-x 1 root root 54192 Nov 18 2015 /usr/bin/passwd
-rwxr-sr-x 1 root shadow 62272 Nov 18 2015 /usr/bin/chage
-rwxr-sr-x 1 root shadow 22744 Nov 18 2015 /usr/bin/expiry
-rwsr-xr-x 1 root root 39912 Nov 18 2015 /usr/bin/newgrp
root@rkt-b5452809-0253-4da4-8026-d678c9bf7929:/# exit
exit
root@localhost:~#
我如何在一个命令中执行此操作？
您需要使用 -- 将参数传递给图像。
root@localhost:~# rkt run --insecure-options=image --net=host docker://nginx --exec find -- / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
[ 4356.161333] nginx[5]: -rwxr-sr-x 1 root shadow 62272 Feb 24 08:09 /usr/bin/chage
[ 4356.163359] nginx[5]: -rwsr-xr-x 1 root root 53616 Feb 24 08:09 /usr/bin/chfn
[ 4356.165202] nginx[5]: -rwsr-xr-x 1 root root 44464 Feb 24 08:09 /usr/bin/chsh
[ 4356.167506] nginx[5]: -rwxr-sr-x 1 root shadow 22744 Feb 24 08:09 /usr/bin/expiry
[ 4356.169553] nginx[5]: -rwsr-xr-x 1 root root 75376 Feb 24 08:09 /usr/bin/gpasswd
[ 4356.171651] nginx[5]: -rwsr-xr-x 1 root root 39912 Feb 24 08:09 /usr/bin/newgrp
[ 4356.173452] nginx[5]: -rwsr-xr-x 1 root root 54192 Feb 24 08:09 /usr/bin/passwd
[ 4356.175704] nginx[5]: -rwxr-sr-x 1 root tty 27232 Mar 29 2015 /usr/bin/wall
[ 4356.229841] nginx[5]: -rwsr-xr-x 1 root root 40000 Mar 29 2015 /bin/mount
[ 4356.231914] nginx[5]: -rwsr-xr-x 1 root root 70576 Oct 28 2014 /bin/ping
[ 4356.234003] nginx[5]: -rwsr-xr-x 1 root root 61392 Oct 28 2014 /bin/ping6
[ 4356.235932] nginx[5]: -rwsr-xr-x 1 root root 40168 Feb 24 08:09 /bin/su
[ 4356.237872] nginx[5]: -rwsr-xr-x 1 root root 27416 Mar 29 2015 /bin/umount
[ 4356.250513] nginx[5]: /usr/bin/find: `/proc/5/task/5/fd/5': No such file or directory
[ 4356.250812] nginx[5]: /usr/bin/find: `/proc/5/task/5/fdinfo/5': No such file or directory
[ 4356.251120] nginx[5]: /usr/bin/find: `/proc/5/fd/5': No such file or directory
[ 4356.251355] nginx[5]: /usr/bin/find: `/proc/5/fdinfo/5': No such file or directory
[ 4356.254186] nginx[5]: -rwxr-sr-x 1 root shadow 35408 Nov 12 07:43 /sbin/unix_chkpwd
有关详细信息，请参阅 https://coreos.com/rkt/docs/latest/subcommands/run.html#passing-arguments。
我正在寻找等同于以下 docker 命令的 rkt 命令：
docker run nginx:1.11.5 find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
docker命令从nginx:1.11.5创建一个新容器，在容器内执行find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null（将所有具有setuid和setgid权限的二进制文件打印到stdout），然后杀死容器。结果看起来像这样：
root@localhost:~# docker run nginx:1.11.5 find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
-rwsr-xr-x 1 root root 40168 Nov 18 2015 /bin/su
-rwsr-xr-x 1 root root 40000 Mar 29 2015 /bin/mount
-rwsr-xr-x 1 root root 27416 Mar 29 2015 /bin/umount
-rwsr-xr-x 1 root root 61392 Oct 28 2014 /bin/ping6
-rwsr-xr-x 1 root root 70576 Oct 28 2014 /bin/ping
-rwsr-xr-x 1 root root 53616 Nov 18 2015 /usr/bin/chfn
-rwsr-xr-x 1 root root 39912 Nov 18 2015 /usr/bin/newgrp
-rwxr-sr-x 1 root tty 27232 Mar 29 2015 /usr/bin/wall
-rwsr-xr-x 1 root root 54192 Nov 18 2015 /usr/bin/passwd
-rwxr-sr-x 1 root shadow 22744 Nov 18 2015 /usr/bin/expiry
-rwsr-xr-x 1 root root 75376 Nov 18 2015 /usr/bin/gpasswd
-rwsr-xr-x 1 root root 44464 Nov 18 2015 /usr/bin/chsh
-rwxr-sr-x 1 root shadow 62272 Nov 18 2015 /usr/bin/chage
-rwxr-sr-x 1 root shadow 35408 Jan 28 2016 /sbin/unix_chkpwd
这是我目前尝试过的方法：
rkt run --insecure-options=image --net=host docker://nginx find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
和
rkt run --insecure-options=image --net=host docker://nginx --exec find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
两者都return没有输出。
我可以通过使用 --exec /bin/bash 覆盖初始命令并添加 --interactive 标志来获取我想要的信息，如下所示：
root@localhost:~# rkt run --interactive --insecure-options=image --net=host docker://nginx --exec /bin/bash
root@rkt-b5452809-0253-4da4-8026-d678c9bf7929:/# find / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
-rwxr-sr-x 1 root shadow 35408 Jan 28 2016 /sbin/unix_chkpwd
-rwsr-xr-x 1 root root 40000 Mar 29 2015 /bin/mount
-rwsr-xr-x 1 root root 61392 Oct 28 2014 /bin/ping6
-rwsr-xr-x 1 root root 40168 Nov 18 2015 /bin/su
-rwsr-xr-x 1 root root 27416 Mar 29 2015 /bin/umount
-rwsr-xr-x 1 root root 70576 Oct 28 2014 /bin/ping
-rwxr-sr-x 1 root tty 27232 Mar 29 2015 /usr/bin/wall
-rwsr-xr-x 1 root root 75376 Nov 18 2015 /usr/bin/gpasswd
-rwsr-xr-x 1 root root 44464 Nov 18 2015 /usr/bin/chsh
-rwsr-xr-x 1 root root 53616 Nov 18 2015 /usr/bin/chfn
-rwsr-xr-x 1 root root 54192 Nov 18 2015 /usr/bin/passwd
-rwxr-sr-x 1 root shadow 62272 Nov 18 2015 /usr/bin/chage
-rwxr-sr-x 1 root shadow 22744 Nov 18 2015 /usr/bin/expiry
-rwsr-xr-x 1 root root 39912 Nov 18 2015 /usr/bin/newgrp
root@rkt-b5452809-0253-4da4-8026-d678c9bf7929:/# exit
exit
root@localhost:~#
我如何在一个命令中执行此操作？
您需要使用 -- 将参数传递给图像。
root@localhost:~# rkt run --insecure-options=image --net=host docker://nginx --exec find -- / -perm +6000 -type f -exec ls -ld {} \; 2> /dev/null
[ 4356.161333] nginx[5]: -rwxr-sr-x 1 root shadow 62272 Feb 24 08:09 /usr/bin/chage
[ 4356.163359] nginx[5]: -rwsr-xr-x 1 root root 53616 Feb 24 08:09 /usr/bin/chfn
[ 4356.165202] nginx[5]: -rwsr-xr-x 1 root root 44464 Feb 24 08:09 /usr/bin/chsh
[ 4356.167506] nginx[5]: -rwxr-sr-x 1 root shadow 22744 Feb 24 08:09 /usr/bin/expiry
[ 4356.169553] nginx[5]: -rwsr-xr-x 1 root root 75376 Feb 24 08:09 /usr/bin/gpasswd
[ 4356.171651] nginx[5]: -rwsr-xr-x 1 root root 39912 Feb 24 08:09 /usr/bin/newgrp
[ 4356.173452] nginx[5]: -rwsr-xr-x 1 root root 54192 Feb 24 08:09 /usr/bin/passwd
[ 4356.175704] nginx[5]: -rwxr-sr-x 1 root tty 27232 Mar 29 2015 /usr/bin/wall
[ 4356.229841] nginx[5]: -rwsr-xr-x 1 root root 40000 Mar 29 2015 /bin/mount
[ 4356.231914] nginx[5]: -rwsr-xr-x 1 root root 70576 Oct 28 2014 /bin/ping
[ 4356.234003] nginx[5]: -rwsr-xr-x 1 root root 61392 Oct 28 2014 /bin/ping6
[ 4356.235932] nginx[5]: -rwsr-xr-x 1 root root 40168 Feb 24 08:09 /bin/su
[ 4356.237872] nginx[5]: -rwsr-xr-x 1 root root 27416 Mar 29 2015 /bin/umount
[ 4356.250513] nginx[5]: /usr/bin/find: `/proc/5/task/5/fd/5': No such file or directory
[ 4356.250812] nginx[5]: /usr/bin/find: `/proc/5/task/5/fdinfo/5': No such file or directory
[ 4356.251120] nginx[5]: /usr/bin/find: `/proc/5/fd/5': No such file or directory
[ 4356.251355] nginx[5]: /usr/bin/find: `/proc/5/fdinfo/5': No such file or directory
[ 4356.254186] nginx[5]: -rwxr-sr-x 1 root shadow 35408 Nov 12 07:43 /sbin/unix_chkpwd
有关详细信息，请参阅 https://coreos.com/rkt/docs/latest/subcommands/run.html#passing-arguments。