The invention provides a container environment
anomaly detection method and device, a medium and
computer equipment, and the method comprises the steps: obtaining the historical process data of all business containers in each
host machine node during normal operation for the
host machine nodes in a container cluster; for each
mirror image, establishing a detection model based on historical processdata in each service container corresponding to the
mirror image; when the current process data of each service container is received, detecting the current process data based on the corresponding detection model, and judging whether the environment of each service container is abnormal or not; according to the method and the device, for each
mirror image, the number of the containers created bythe mirror image is multiple, so that the process data is diversified, and the detection precision of the detection model can be ensured; moreover, in the container cluster, the number of the mirror images is far smaller than that of the service containers, so that compared with the mode of modeling each container in the prior art, the mirror images are modeled, and the modeling cost can be greatly reduced.