阿里云启动docker，出现 minergate-cli ，CPU占用100%
问题描述：
阿里云启动docker，出现 minergate-cli ，CPU占用100%
[root@ecs2018 ~]# top
top - 21:10:49 up 5:43, 2 users, load average: 2.24, 2.17, 2.16
Tasks: 89 total, 1 running, 88 sleeping, 0 stopped, 0 zombie
%Cpu(s): 0.0 us, 0.2 sy, 99.8 ni, 0.0 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
KiB Mem : 3881936 total, 2428492 free, 118584 used, 1334860 buff/cache
KiB Swap: 0 total, 0 free, 0 used. 3486784 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
5609 root 20 0 8600 5912 224 S 199.3 0.2 124:59.87 kworker_0:1H
2186 root 20 0 290256 7376 3972 S 0.3 0.2 0:00.49 docker-containe
1 root 20 0 43208 3472 2288 S 0.0 0.1 0:01.51 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root 20 0 0 0 0 S 0.0 0.0 0:00.02 ksoftirqd/0
5 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/0:0H
7 root rt 0 0 0 0 S 0.0 0.0 0:00.06 migration/0
8 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_bh
9 root 20 0 0 0 0 S 0.0 0.0 0:01.20 rcu_sched
10 root rt 0 0 0 0 S 0.0 0.0 0:00.06 watchdog/0
11 root rt 0 0 0 0 S 0.0 0.0 0:00.05 watchdog/1
12 root rt 0 0 0 0 S 0.0 0.0 0:00.07 migration/1
13 root 20 0 0 0 0 S 0.0 0.0 0:00.04 ksoftirqd/1
15 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/1:0H
17 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 khelper
18 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kdevtmpfs
19 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 netns
20 root 20 0 0 0 0 S 0.0 0.0 0:00.00 khungtaskd
21 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 writeback
22 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kintegrityd
23 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 bioset
24 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kblockd
25 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 md
32 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kswapd0
33 root 25 5 0 0 0 S 0.0 0.0 0:00.00 ksmd
34 root 39 19 0 0 0 S 0.0 0.0 0:00.08 khugepaged
35 root 20 0 0 0 0 S 0.0 0.0 0:00.00 fsnotify_mark
问题分析
重启系统
[root@ecs2018 ~]# top
top - 21:25:12 up 3 min, 2 users, load average: 0.06, 0.23, 0.12
Tasks: 75 total, 1 running, 74 sleeping, 0 stopped, 0 zombie
%Cpu(s): 0.2 us, 0.2 sy, 0.0 ni, 99.7 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st
KiB Mem : 3881604 total, 3505956 free, 70084 used, 305564 buff/cache
KiB Swap: 0 total, 0 free, 0 used. 3584952 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2034 root 20 0 126860 12008 7820 S 0.7 0.3 0:01.04 AliYunDun
1091 root 20 0 31416 2400 1852 S 0.3 0.1 0:00.16 AliYunDunUpdate
10165 root 20 0 146028 1936 1392 R 0.3 0.0 0:00.02 top
1 root 20 0 43204 3588 2456 S 0.0 0.1 0:00.75 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root 20 0 0 0 0 S 0.0 0.0 0:00.03 ksoftirqd/0
4 root 20 0 0 0 0 S 0.0 0.0 0:00.02 kworker/0:0
5 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/0:0H
6 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kworker/u4:0
7 root rt 0 0 0 0 S 0.0 0.0 0:00.00 migration/0
8 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_bh
9 root 20 0 0 0 0 S 0.0 0.0 0:00.07 rcu_sched
10 root rt 0 0 0 0 S 0.0 0.0 0:00.00 watchdog/0
11 root rt 0 0 0 0 S 0.0 0.0 0:00.00 watchdog/1
12 root rt 0 0 0 0 S 0.0 0.0 0:00.00 migration/1
13 root 20 0 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/1
14 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kworker/1:0
15 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/1:0H
17 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kdevtmpfs
18 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 netns
19 root 20 0 0 0 0 S 0.0 0.0 0:00.00 khungtaskd
20 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 writeback
21 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kintegrityd
22 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 bioset
23 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kblockd
24 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 md
25 root 20 0 0 0 0 S 0.0 0.0 0:00.02 kworker/1:1
重启系统后，回归正常。
启动docker
启动命令：service docker start
启动docker后，发现minergate-cli进程
变动状态 进程名 进程路径 启动参数 启动时间 运行用户 运行权限 PID 父进程 文件MD5 发生变动时间
停止 minergate-cli minergate-cli -user [email protected] -xmr 2018-02-27 16:23:06 root 13246 docker-containerd-shim-current N/A 2018-03-12 21:58:23
停止 minergate-cli minergate-cli -user [email protected] -xmr 2018-02-27 14:00:08 root 8205 docker-containerd-shim-current N/A 2018-03-12 21:58:23
原因分析
Docker暴露出2375端口，开启远程连接，引起了安全漏洞。
解决问题
/lib/systemd/system/docker.service
修改 2375端口为2376