\u3082\u3061\u308d\u3093 ping \u30b3\u30de\u30f3\u30c9\u306a\u3089 CAP_NET_RAW \u306e capability \u304c\u8a2d\u5b9a\u3055\u308c\u3066\u308b\u306e\u3067\u6253\u3066\u308b\u3093\u3067\u3059\u304c\u3001\u305d\u3046\u3067\u306a\u3044\u30b1\u30fc\u30b9\u3001\u4f8b\u3048\u3070 prometheus-smokeping-prober \u3092\u305d\u306e\u307e\u307e\u4f7f\u3063\u3066\u3044\u305f\u308a\u3059\u308b\u3068\u6253\u3066\u307e\u305b\u3093\u3002smokeping \u306b capability \u304c\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u306a\u3044\u306e\u3082\u8b0e\u3067\u306f\u3042\u308a\u307e\u3059\u304c\u2026\u3002<\/p>\n
<\/p>\n
\u306a\u3093\u3067\u305d\u3046\u3044\u3046\u52d5\u4f5c\u306b\u306a\u308b\u306e\u304b\u3068\u3044\u3046\u3068\u300122.04 \u3067\u306f \/usr\/lib\/sysctl.d\/50-default.conf \u306b\u4ee5\u4e0b\u306e\u8a18\u8ff0\u304c\u3042\u308b\u306e\u306b\u5bfe\u3057\u300124.04 \u306b\u306f\u306a\u3044\u304b\u3089\u3067\u3059\u3002<\/p>\n
\n\r\n# ping(8) without CAP_NET_ADMIN and CAP_NET_RAW\r\n# The upper limit is set to 2^31-1. Values greater than that get rejected by\r\n# the kernel because of this definition in linux\/include\/net\/ping.h:\r\n# #define GID_T_MAX (((gid_t)~0U) >> 1)\r\n# That's not so bad because values between 2^31 and 2^32-1 are reserved on\r\n# systemd-based systems anyway: https:\/\/systemd.io\/UIDS-GIDS#summary\r\n-net.ipv4.ping_group_range = 0 2147483647\r\n<\/pre>\n<\/blockquote>\n\u306a\u304f\u306a\u3063\u305f\u7406\u7531\u306f\u8b0e\u3067\u3059\u304c\u3001\u8ffd\u52a0\u3059\u308c\u3070\u4ee5\u524d\u306e\u52d5\u4f5c\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n
\n\r\n# echo '-net.ipv4.ping_group_range = 0 2147483647' > \/etc\/sysctl.d\/99-local.conf\r\n# systemctl restart systemd-sysctl\r\n<\/pre>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"\u3082\u3061\u308d\u3093 ping \u30b3\u30de\u30f3\u30c9\u306a\u3089 CAP_NET_RAW \u306e capability \u304c\u8a2d\u5b9a\u3055\u308c\u3066\u308b\u306e\u3067\u6253\u3066\u308b\u3093\u3067\u3059\u304c\u3001\u305d\u3046\u3067\u306a\u3044\u30b1\u30fc\u30b9\u3001\u4f8b\u3048\u3070 prometheus-smokeping-prober \u3092\u305d\u306e\u307e\u307e\u4f7f\u3063\u3066\u3044\u305f […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[],"class_list":["post-8594","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/8594","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8594"}],"version-history":[{"count":1,"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/8594\/revisions"}],"predecessor-version":[{"id":8595,"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/8594\/revisions\/8595"}],"wp:attachment":[{"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8594"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8594"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/umezawa.dyndns.info\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}