Docker宿主机如何查看程序运行在哪个docker上

今天好朋友的NAS发现不幸中了XMRig挖矿病毒...

原因出现在OpenVSCode页面没有做任何鉴权操作，任何人都可以直接访问...
所以还是一定要做好鉴权工作!所以还是一定要做好鉴权工作!所以还是一定要做好鉴权工作!

那么怎样通过PID查询到具体是哪个容器运行的呢?

好朋友提供的解决方案

1. 使用cat /proc/{pid}/cgroup能够获取到容器ID信息, 如下
   
   Default

   12:blkio:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 11:memory:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 10:hugetlb:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 9:cpuset:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 8:devices:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 7:net_cls,net_prio:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 6:pids:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 5:perf_event:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 4:cpu,cpuacct:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 3:rdma:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 2:freezer:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 1:name=systemd:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 0::/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b

   1 2 3 4 5 6 7 8 9 10 11 12 13

   12:blkio:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 11:memory:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 10:hugetlb:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 9:cpuset:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 8:devices:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 7:net_cls,net_prio:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 6:pids:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 5:perf_event:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 4:cpu,cpuacct:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 3:rdma:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 2:freezer:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 1:name=systemd:/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b 0::/docker/bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b

2. docker/后面的bce034706d8fef47bda4605f3133708b7324b4de4d606c97a54e12124edfa78b就是dockerID信息了，取前面的12位，即bce034706d8f, 使用docker ps | grep bce034706d8f就能查看到具体属于哪个docker