umi-gitrce/251123-biz-ml-px
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

-

Browse Source
This commit is contained in:
Wang Sen Di
2025-11-27 14:17:01 +08:00
parent 5b64f772b0
commit d71909074d
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
netflow/iptables.sh
View File

@@ -4,17 +4,20 @@
# if [[ -d "/host/proc/1/" ]]; then source /apps/gitrce/hook/singleton.sh "$0"; fi
# find /sys/fs/cgroup/ -name net_cls.classid -exec sh -c 'echo -n "{} -> "; cat {}' \;
# cat /sys/fs/cgroup/net_cls,net_prio/docker/b45932ef28ad33bf2315e7e47a7b44fc0f3f2db2cbcd8c0ac4f4f4c40ab71d9a/net_cls.classid
__get_mount_paths_cgroup_id() {
docker ps -q --no-trunc | while read -r cid; do
_path=$(docker inspect "$cid" --format '{{range .Mounts}}{{.Source}}{{"\n"}}{{end}}' 2>/dev/null)
if grep -q "$CACHE/$FILE_PATH_START" <<<"$_path"; then
_cgroup_path=$(find /sys/fs/cgroup/ -type d -name "$cid" | grep net_cls 2>/dev/null)
_cgroup_id=$(cat "$_cgroup_path/net_cls.classid" 2>/dev/null)
_cmd="find /sys/fs/cgroup/ -type d -name $cid | grep net_cls 2>/dev/null"
_cgroup_path=$(nsenter --mount=/host/proc/1/ns/mnt --net=/host/proc/1/ns/net sh -c "$_cmd")
_cmd_classid="cat $_cgroup_path/net_cls.classid 2>/dev/null"
_cgroup_id=$(nsenter --mount=/host/proc/1/ns/mnt --net=/host/proc/1/ns/net sh -c "$_cmd_classid")
echo "$_cgroup_id"
fi
done
}
__get_mount_paths_cgroup_id
__main() {
update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null