貌似可能的原因很多,kernel 4.11 解决了一些: https://github.com/coreos/bugs/issues/254 Another source of leakage has been fixed by torvalds/linux@f647821, which is part of 4.11. torvalds/linux@b7c8487 is in the same batch of commits, is also in 4.11, and fixes another possible cause