{"id":64552,"date":"2024-05-31T18:50:56","date_gmt":"2024-05-31T15:20:56","guid":{"rendered":"https:\/\/nabfollower.com\/blog\/%d8%a7%d8%b4%da%a9%d8%a7%d9%84-%d8%b2%d8%af%d8%a7%db%8c%db%8c-%d8%aa%d8%b5%d8%a7%d9%88%db%8c%d8%b1-distroless-%d8%a8%d8%a7-kubectl-%d9%88-cdebug\/"},"modified":"2024-05-31T18:50:56","modified_gmt":"2024-05-31T15:20:56","slug":"%d8%a7%d8%b4%da%a9%d8%a7%d9%84-%d8%b2%d8%af%d8%a7%db%8c%db%8c-%d8%aa%d8%b5%d8%a7%d9%88%db%8c%d8%b1-distroless-%d8%a8%d8%a7-kubectl-%d9%88-cdebug","status":"publish","type":"post","link":"https:\/\/nabfollower.com\/blog\/%d8%a7%d8%b4%da%a9%d8%a7%d9%84-%d8%b2%d8%af%d8%a7%db%8c%db%8c-%d8%aa%d8%b5%d8%a7%d9%88%db%8c%d8%b1-distroless-%d8%a8%d8%a7-kubectl-%d9%88-cdebug\/","title":{"rendered":"\u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u062a\u0635\u0627\u0648\u06cc\u0631 Distroless \u0628\u0627 kubectl \u0648 cdebug"},"content":{"rendered":"

<\/p>\n

\n

\u0627\u06cc\u0648\u0627\u0646 \u0648\u0644\u06cc\u0686\u06a9\u0648<\/a> \u0627\u062e\u06cc\u0631\u0627\u064b \u0645\u0631\u0627 \u0622\u06af\u0627\u0647 \u06a9\u0631\u062f \u0645\u0634\u06a9\u0644\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u0638\u0631\u0648\u0641 \u0628\u062f\u0648\u0646 \u062a\u0648\u0632\u06cc\u0639<\/a> \u062f\u0631 Kubernetes \u0628\u0627 kubectl debug<\/code>. \u0627\u06cc\u0646 \u0648\u0628\u0644\u0627\u06af \u0628\u0647 \u0645\u0634\u06a9\u0644 \u0646\u06af\u0627\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0631\u0627\u06cc \u0627\u0647\u062f\u0627\u0641 \u0627\u0634\u06a9\u0627\u0644\u200c\u0632\u062f\u0627\u06cc\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u06cc\u06a9 \u067e\u0627\u062f \u0628\u062f\u0648\u0646 \u062a\u0648\u0632\u06cc\u0639 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f.<\/p>\n

\u0645\u0634\u06a9\u0644\u06cc \u06a9\u0647 \u0627\u06cc\u0648\u0627\u0646 \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f \u0641\u0642\u062f\u0627\u0646 \u0645\u062c\u0648\u0632 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631\u06cc \u0628\u0648\u062f \u06a9\u0647 \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f. \u0627\u06cc\u0646 \u0628\u0647 \u0628\u0647\u062a\u0631\u06cc\u0646 \u0634\u06a9\u0644 \u0628\u0627 \u0686\u0646\u062f \u0645\u062b\u0627\u0644 \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f. \u0628\u0627 \u06cc\u06a9 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u0645\u0639\u0645\u0648\u0644\u06cc (\u0628\u062f\u0648\u0646 \u062a\u0648\u0632\u06cc\u0639)\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06cc\u06a9 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u0627\u0634\u06a9\u0627\u0644\u200c\u0632\u062f\u0627\u06cc\u06cc \u0632\u0648\u062f\u06af\u0630\u0631 \u06a9\u0647 \u0641\u0636\u0627\u0647\u0627\u06cc \u0646\u0627\u0645 \u0645\u062e\u062a\u0644\u0641\u06cc \u0631\u0627 \u0628\u0627 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u0647\u062f\u0641 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f\u060c \u06a9\u0627\u0631\u0647\u0627\u06cc \u0632\u06cc\u0631 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f:<\/p>\n

\n
$ <\/span>kubectl run nginx-pod --image<\/span> nginx\npod\/nginx-pod created\n$ <\/span>kubectl debug -it<\/span> nginx-pod --image<\/span> alpine --target<\/span> nginx-pod\nTargeting container \"nginx-pod\"<\/span>.<\/span> If you don't see processes from this container it may be because the container runtime doesn'<\/span>t support this feature.\nDefaulting debug container name to debugger-h4fzv.\nIf you don't see a command prompt, try pressing enter.\n\/ # ps\nPID   USER     TIME  COMMAND\n    1 root      0:00 nginx: master process nginx -g daemon off;\n   32 101       0:00 nginx: worker process\n   33 101       0:00 nginx: worker process\n   34 101       0:00 nginx: worker process\n   35 101       0:00 nginx: worker process\n   36 101       0:00 nginx: worker process\n   37 101       0:00 nginx: worker process\n   38 101       0:00 nginx: worker process\n   39 101       0:00 nginx: worker process\n   40 101       0:00 nginx: worker process\n   41 101       0:00 nginx: worker process\n  308 root      0:00 \/bin\/sh\n  317 root      0:00 ps\n<\/span><\/code><\/pre>\n
\n
\n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
(\u0647\u0645\u0686\u0646\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f kubectl exec -it nginx-pod -- \/bin\/sh<\/code>\u060c \u0627\u0645\u0627 \u0627\u0644\u0628\u062a\u0647 \u0627\u06cc\u0646 \u062f\u0631 \u06cc\u06a9 \u0638\u0631\u0641 \u0628\u062f\u0648\u0646 \u062a\u0648\u0632\u06cc\u0639 \u0627\u0645\u06a9\u0627\u0646 \u067e\u0630\u06cc\u0631 \u0646\u06cc\u0633\u062a)<\/p>\n
\u062a\u0648\u062c\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u0641\u0627\u06cc\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0638\u0631\u0641 \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc Alpine \u0627\u0633\u062a\u060c \u0646\u0647 \u0638\u0631\u0641 nginx:<\/p>\n
\n
\/ # cat \/etc\/os-release<\/span>\nNAME<\/span>=<\/span>\"Alpine Linux\"<\/span>\nID<\/span>=<\/span>alpine\nVERSION_ID<\/span>=<\/span>3.19.1\nPRETTY_NAME<\/span>=<\/span>\"Alpine Linux v3.19\"<\/span>\nHOME_URL<\/span>=<\/span>\"https:\/\/alpinelinux.org\/\"<\/span>\nBUG_REPORT_URL<\/span>=<\/span>\"https:\/\/gitlab.alpinelinux.org\/alpine\/aports\/-\/issues\"<\/span>\n<\/code><\/pre>\n
\n
\n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
    \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
\u0627\u0645\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \/proc\/1\/root<\/code> \u0641\u0627\u06cc\u0644 \u0633\u06cc\u0633\u062a\u0645  \u0628\u0631\u0627\u06cc \u062a\u062c\u0632\u06cc\u0647 \u0627\u06cc\u0646:<\/p>\n
    \n
  • \n\/proc<\/code>  \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062c\u0627\u0632\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0647\u0633\u062a\u0647 \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0648 \u062d\u0627\u0648\u06cc \u0645\u062a\u0627\u062f\u06cc\u062a\u0627\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u0627\u0633\u062a <\/li>\n
  • \n1<\/code>  \u0628\u0647 \u0634\u0646\u0627\u0633\u0647 \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u0634\u0627\u0631\u0647 \u062f\u0627\u0631\u062f\u060c \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0648\u0631\u062f \u0641\u0631\u0622\u06cc\u0646\u062f \u0627\u0635\u0644\u06cc nginx \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0645\u0627.  \u0648 <\/li>\n
  • \nroot<\/code>  \u067e\u06cc\u0648\u0646\u062f\u06cc \u0628\u0647 \u0631\u06cc\u0634\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0641\u0631\u0622\u06cc\u0646\u062f \u062f\u0631 \u0622\u0646 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f.<\/li>\n<\/ul>\n
    \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0647 \u0641\u0627\u06cc\u0644 index.html \u062f\u0631 \u062f\u0627\u062e\u0644 \u0638\u0631\u0641 nginx \u0645\u0627\u0646\u0646\u062f \u0627\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u0645:<\/p>\n
    \n
    \/ # cat \/proc\/1\/root\/usr\/share\/nginx\/html\/index.html<\/span>\n<!<\/span>DOCTYPE html>\n\n\u2026\n\/ #<\/span>\n<\/code><\/pre>\n
    \n
    \n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
        \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
    \u062d\u0627\u0644\u0627 \u0628\u06cc\u0627\u06cc\u06cc\u062f \u0622\u0646 \u0631\u0627 \u0628\u0627 cgr.dev\/chainguard\/nginx<\/code> \u062a\u0635\u0648\u06cc\u0631\u060c \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u062a\u0635\u0627\u0648\u06cc\u0631 \u0628\u062f\u0648\u0646 \u062a\u0648\u0632\u06cc\u0639 Chainguard \u0627\u0633\u062a:<\/p>\n
    \n
    $ <\/span>kubectl run nginx-distroless --image<\/span> cgr.dev\/chainguard\/nginx\npod\/nginx-distroless created\n$ <\/span>kubectl debug -it<\/span> nginx-distroless --image<\/span> alpine --target<\/span> nginx-distroless\nTargeting container \"nginx-distroless\"<\/span>.<\/span> If you don't see processes from this container it may be because the container runtime doesn'<\/span>t support this feature.\nDefaulting debug container name to debugger-bcr26.\nIf you don't see a command prompt, try pressing enter.\n\/ # cat \/proc\/1\/root\/usr\/share\/nginx\/html\/index.html\ncat: can'<\/span>t open '\/proc\/1\/root\/usr\/share\/nginx\/html\/index.html'<\/span>: Permission denied\n\/ # whoami<\/span>\nroot\n<\/code><\/pre>\n
    \n
    \n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
        \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
    \u0645\u0627 \u06af\u0631\u0641\u062a\u06cc\u0645 Permission denied<\/code>. <\/p>\n
    \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc \u0631\u0633\u062f \u06a9\u0647 \u0645\u0634\u06a9\u0644 \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0638\u0631\u0641 nginx \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06a9\u0627\u0631\u0628\u0631 \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0627\u0633\u062a nonroot<\/code> \u0628\u0627 UID 65532 \u06a9\u0647 \u0639\u0644\u06cc\u0631\u063a\u0645 \u0648\u062c\u0648\u062f \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0622\u0646 \u0631\u0627 \u0646\u062f\u0627\u0631\u06cc\u0645 root<\/code> (\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0643\u0631\u062f\u0646 --profile<\/code> \u062a\u0646\u0638\u06cc\u0645 \u06cc\u06a9 \u0646\u0645\u0627\u06cc\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062a\u0641\u0627\u0648\u062a \u0646\u06cc\u0632 \u06a9\u0645\u06a9\u06cc \u0646\u06a9\u0631\u062f\u060c \u0627\u0645\u0627 \u0645\u0646 \u06af\u0645\u0627\u0646 \u0645\u06cc\u200c\u06a9\u0646\u0645 \u06a9\u0647 \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0627\u0634\u062f).  \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u060c \u0645\u0627 \u0628\u0647 \u0645\u062d\u0641\u0638\u0647 \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u06cc\u0645 \u062a\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0634\u0627\u0628\u0647 \u0638\u0631\u0641 nginx \u0627\u062c\u0631\u0627 \u0634\u0648\u062f.  \u0645\u062a\u0627\u0633\u0641\u0627\u0646\u0647 \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f --user<\/code> \u067e\u0631\u0686\u0645 \u0628\u0631\u0627\u06cc kubectl<\/code>\u060c \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0628\u0627\u06cc\u062f \u062a\u0635\u0648\u06cc\u0631\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u0645 \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0634\u0648\u062f.  \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0628\u0627 \u06cc\u06a9 Dockerfile \u0645\u0627\u0646\u0646\u062f:<\/p>\n
    \n
    FROM<\/span> alpine<\/span>\nUSER<\/span> 65532<\/span>\n<\/code><\/pre>\n
    \n
    \n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
        \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
    \u0627\u0645\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f Chainguard Images \u0631\u0627\u0647 \u062d\u0644 \u0628\u0633\u06cc\u0627\u0631 \u0633\u0627\u062f\u0647 \u062a\u0631\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.  \u0627\u06a9\u062b\u0631 \u062a\u0635\u0627\u0648\u06cc\u0631 \u0645\u0627 \u0647\u0645\u0631\u0627\u0647 \u0647\u0633\u062a\u0646\u062f -dev<\/code> \u0627\u0646\u0648\u0627\u0639\u06cc \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u0646\u062f \u0627\u0645\u0627 \u0634\u0627\u0645\u0644 \u06cc\u06a9 \u067e\u0648\u0633\u062a\u0647 \u0646\u06cc\u0632 \u0645\u06cc \u0634\u0648\u0646\u062f \u0648 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u0646\u062f\u060c \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646 \u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u0645 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u0645:<\/p>\n
    \n
    $ <\/span>kubectl debug -it<\/span> nginx-distroless --image<\/span> cgr.dev\/chainguard\/nginx:latest-dev --target<\/span> nginx-distroless --<\/span> \/bin\/sh\nTargeting container \"nginx-distroless\"<\/span>.<\/span> If you don't see processes from this container it may be because the container runtime doesn'<\/span>t support this feature.\nDefaulting debug container name to debugger-nbvjt.\nIf you don't see a command prompt, try pressing enter.\n\/ $\n\/ $ cat \/proc\/1\/root\/usr\/share\/nginx\/html\/index.html\n\n\n\u2026\n<\/span><\/code><\/pre>\n
    \n
    \n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
        \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
    \u0648 \u0647\u0645\u0647 \u0686\u06cc\u0632 \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0627\u0646\u062a\u0638\u0627\u0631 \u0645\u06cc \u0631\u0648\u062f \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f.<\/p>\n
    \u062f\u0631 \u0648\u0627\u0642\u0639 \u06cc\u06a9 \u0686\u06cc\u0646 \u0648 \u0686\u0631\u0648\u06a9 \u062f\u0648\u0645 \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0627 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0627\u0631\u0628\u0631 \u062d\u0644 \u0645\u06cc \u0634\u0648\u062f – \u0627\u06af\u0631 \u063a\u0644\u0627\u0641 \u0634\u0645\u0627 \u0628\u0627 \u0622\u0646 \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f runAsNonRoot<\/code> \u0633\u06cc\u0627\u0633\u062a\u060c \u0634\u0645\u0627 \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u06cc\u06a9 \u0645\u062d\u0641\u0638\u0647 \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u0631\u0627 \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 root \u0628\u0627 \u0646\u0645\u0627\u06cc\u0647 \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n
    \u0627\u06cc\u0646 \u0628\u0647 \u0631\u0627\u0647 \u0647\u0627\u06cc\u06cc \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 kubectl debug<\/code> \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647\u0628\u0648\u062f \u06cc\u0627\u0628\u062f:<\/p>\n
      \n
    • a \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f --user<\/code> \u06af\u0632\u06cc\u0646\u0647 \u0627\u06cc \u0628\u0631\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0627\u0631\u0628\u0631 \u062f\u0631 \u0638\u0631\u0641 \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc <\/li>\n
    • \u06cc\u06a9 \u0631\u0627\u0647 \u0631\u0633\u0645\u06cc \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u0645\u0648\u0631\u062f \u0646\u0638\u0631 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f.  \u0631\u0641\u062a\u0646 \u0627\u0632 \u0637\u0631\u06cc\u0642 \/proc\/1\/root<\/code> \u06a9\u0645\u06cc \u0647\u06a9 \u0648 \u063a\u06cc\u0631 \u0634\u0647\u0648\u062f\u06cc \u0628\u0647 \u0646\u0638\u0631 \u0645\u06cc \u0631\u0633\u062f<\/li>\n
    • \u0628\u0631\u0627\u06cc \u062a\u0648\u0636\u06cc\u062d \u0647\u0645\u0647 \u0627\u06cc\u0646\u0647\u0627 \u0686\u0646\u062f \u0633\u0646\u062f \u062f\u06cc\u06af\u0631 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f (\u06a9\u0647 \u062c\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0645\u0646 \u0642\u0635\u062f \u06a9\u0645\u06a9 \u0628\u0647 \u0622\u0646 \u0631\u0627 \u062f\u0627\u0631\u0645).<\/li>\n<\/ul>\n
      (\u0645\u0646 \u0645\u06cc \u0628\u06cc\u0646\u0645 \u06a9\u0647 \u0628\u0631\u062e\u06cc \u0627\u0632 \u067e\u06cc\u0634\u0631\u0641\u062a \u0647\u0627\u06cc \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0646\u0645\u0627\u06cc\u0647 \u0647\u0627 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0628\u0647 \u0634\u0645\u0627 \u06a9\u0645\u06a9 \u06a9\u0646\u062f)<\/p>\n
      \u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u0627\u06cc\u062f \u0627\u0634\u0627\u0631\u0647 \u06a9\u0646\u0645 \u06a9\u0647 \u0627\u06cc\u0648\u0627\u0646 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u0627\u062a \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0628\u0627 \u0627\u0628\u0632\u0627\u0631 cdebug \u062e\u0648\u062f \u0628\u0631\u0637\u0631\u0641 \u0645\u06cc \u06a9\u0646\u062f.  \u0634\u0645\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f cdebug<\/code> \u0628\u0631\u0627\u06cc \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 \u06cc\u06a9 \u067e\u0627\u062f:<\/p>\n
      \n
      $ <\/span>cdebug exec<\/span> -it<\/span> --privileged<\/span> pod\/nginx-distroless\/nginx-distroless\nDebugger container name: cdebug-20ba5985\nStarting debugger container...\nWaiting for <\/span>debugger container...\nAttaching to debugger container...\nIf you don't see a command prompt, try pressing enter.\n\/ # cat \/proc\/1\/root\/usr\/share\/nginx\/html\/index.html\n\n\n\u2026\n<\/span><\/code><\/pre>\n
      \n
      \n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
          \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
      cdebug<\/code>  \u0627\u0632 a \u0646\u06cc\u0632 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0646\u062f --user<\/code> \u067e\u0631\u0686\u0645 \u0627\u06af\u0631 \u062f\u0627\u0631\u06cc\u062f runAsNonRoot<\/code> \u0633\u06cc\u0627\u0633\u062a \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644:<\/p>\n
      \n
      cdebug exec<\/span> -it<\/span> --user<\/span> 65532 pod\/nginx-distroless\/nginx-distroless\n\u2026\n<\/code><\/pre>\n
      \n
      \n    \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n
          \u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    \n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n
      \u0627\u06cc\u0646 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0646 \u0627\u0633\u062a.  \u0627\u062c\u0631\u0627\u06cc \u0628\u0627\u0631\u0647\u0627\u06cc \u06a9\u0627\u0631\u06cc \u062a\u0648\u0644\u06cc\u062f \u062f\u0631 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631\u0647\u0627\u06cc \u0628\u062f\u0648\u0646 \u062a\u0648\u0632\u06cc\u0639 \u06cc\u06a9 \u067e\u06cc\u0634\u0631\u0641\u062a \u0628\u0632\u0631\u06af \u0627\u0632 \u0646\u0638\u0631 \u0627\u0645\u0646\u06cc\u062a \u0627\u0633\u062a.  \u0628\u0627 \u06a9\u0645\u06cc \u062f\u0627\u0646\u0634\u060c \u0627\u06cc\u0646 \u0638\u0631\u0648\u0641 \u0647\u0646\u0648\u0632 \u0647\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0631\u0627\u062d\u062a\u06cc \u0627\u0634\u06a9\u0627\u0644 \u0632\u062f\u0627\u06cc\u06cc \u06a9\u0646\u0646\u062f.<\/p>\n<\/p><\/div>\n