CVE-2024-21626 취약점 확인 및 조치방법

# 런타임 버전 확인
docker version 2>/dev/null || true
dockerd --version 2>/dev/null || true
containerd --version 2>/dev/null || true
ctr version 2>/dev/null || true
runc --version 2>/dev/null || true
crun --version 2>/dev/null || true
crio --version 2>/dev/null || true

# 서비스와 패키지 확인
systemctl status docker containerd crio kubelet --no-pager 2>/dev/null || true
rpm -qa | grep -Ei 'docker|containerd|runc|crun|cri-o|kubelet' || dpkg -l | grep -Ei 'docker|containerd|runc|crun|cri-o|kubelet' || true

# Kubernetes 노드 런타임 확인
kubectl get nodes -o wide 2>/dev/null || true
kubectl get nodes -o jsonpath='{range .items[*]}{.metadata.name}{"	"}{.status.nodeInfo.containerRuntimeVersion}{"
"}{end}' 2>/dev/null || true

# 위험 노출 확인: Docker socket, privileged container, hostPath, rootless mode
find /var/run -maxdepth 1 -name 'docker.sock' -ls 2>/dev/null || true

# 버전 재확인
containerd --version 2>/dev/null || true
runc --version 2>/dev/null || true
docker version 2>/dev/null || true
crio --version 2>/dev/null || true

# Kubernetes 검증
kubectl get nodes -o wide 2>/dev/null || true
kubectl get pods -A --field-selector=status.phase!=Running 2>/dev/null || true
kubectl get events -A --sort-by=.lastTimestamp | tail -50 2>/dev/null || true
journalctl -u containerd -u docker -u crio -u kubelet --since "2 hours ago" --no-pager 2>/dev/null || true