{"id":106211,"date":"2022-12-21T15:37:51","date_gmt":"2022-12-21T13:37:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vtoroj-prototip-platformy-alp-idushhej-na-smenu-suse-linux-enterprise"},"modified":"2022-12-21T15:37:51","modified_gmt":"2022-12-21T13:37:51","slug":"vtoroj-prototip-platformy-alp-idushhej-na-smenu-suse-linux-enterprise","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vtoroj-prototip-platformy-alp-idushhej-na-smenu-suse-linux-enterprise","title":{"rendered":"Druh\u00fd prototyp platformy ALP, kter\u00e1 nahrazuje SUSE Linux Enterprise","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost SUSE zve\u0159ejnila druh\u00fd prototyp platformy ALP \u201ePunta Baretti\u201c (Adaptable Linux Platform), kter\u00e1 je prezentov\u00e1na jako pokra\u010dov\u00e1n\u00ed v\u00fdvoje distribuce SUSE Linux Enterprise. Kl\u00ed\u010dov\u00fdm rozd\u00edlem ALP je rozd\u011blen\u00ed z\u00e1kladn\u00ed struktury distribuce na dv\u011b \u010d\u00e1sti: zkr\u00e1cenou \u201ehost OS\u201c pro provoz nad hardwarem a vrstvu pro podporu aplikac\u00ed, zam\u011b\u0159enou na spu\u0161t\u011bn\u00ed v kontejnerech a virtu\u00e1ln\u00edch stroj\u00edch. Sestavy jsou p\u0159ipraveny pro architekturu x86_64. ALP se od po\u010d\u00e1tku vyv\u00edj\u00ed pomoc\u00ed otev\u0159en\u00e9ho v\u00fdvojov\u00e9ho procesu, kdy jsou mezi verzemi a v\u00fdsledky testov\u00e1n\u00ed ve\u0159ejn\u011b dostupn\u00e9 pro v\u0161echny z\u00e1jemce. <\/p>\n

Architektura ALP je zalo\u017eena na v\u00fdvoji v \u201ehost OS\u201c prost\u0159ed\u00ed, kter\u00e9 je minim\u00e1ln\u011b pot\u0159ebn\u00e9 pro podporu a spr\u00e1vu hardware. V\u0161echny aplikace a komponenty u\u017eivatelsk\u00e9ho prostoru se doporu\u010duje spou\u0161t\u011bt ne v sm\u00ed\u0161en\u00e9m prost\u0159ed\u00ed, ale v samostatn\u00fdch kontejnerech nebo v virtual machines<\/a>, prov\u00e1d\u011bn\u00fdch nad \u201ehost OS\u201c a izolovan\u00fdch od sebe. Takov\u00e1 organizace umo\u017en\u00ed u\u017eivatel\u016fm zam\u011b\u0159it se na aplikace a abstrahovat pracovn\u00ed procesy, odd\u011bluj\u00edc\u00ed je od n\u00edzko\u00farov\u0148ov\u00e9ho syst\u00e9mov\u00e9ho prost\u0159ed\u00ed a hardware. <\/p>\n

Jako z\u00e1klad pro \u201ehost OS\u201c byl pou\u017eit produkt SLE Micro, zalo\u017een\u00fd na zku\u0161enostech z projektu MicroOS. Pro centralizovan\u00e9 \u0159\u00edzen\u00ed jsou nab\u00edzeny syst\u00e9my spr\u00e1vy konfigurac\u00ed Salt (p\u0159edinstalov\u00e1no) a Ansible (volba). Pro spu\u0161t\u011bn\u00ed izolovan\u00fdch kontejner\u016f jsou k dispozici n\u00e1stroje Podman a K3s (Kubernetes). Mezi syst\u00e9mov\u00fdmi komponentami, kter\u00e9 byly p\u0159esunuty do kontejner\u016f, se nach\u00e1zej\u00ed yast2, podman, k3s, cockpit, GDM (GNOME Display Manager) a KVM. <\/p>\n

Mezi charakteristikami syst\u00e9mov\u00e9ho prost\u0159ed\u00ed se uv\u00e1d\u00ed v\u00fdchoz\u00ed pou\u017eit\u00ed \u0161ifrov\u00e1n\u00ed disku (FDE, Full Disk Encryption) s mo\u017enost\u00ed ukl\u00e1d\u00e1n\u00ed kl\u00ed\u010d\u016f v TPM. Ko\u0159enov\u00e1 partition je p\u0159ipojena v re\u017eimu pouze pro \u010dten\u00ed a b\u011bhem provozu se nem\u011bn\u00ed. V prost\u0159ed\u00ed se pou\u017e\u00edv\u00e1 mechanismus atom\u00e1rn\u00edch instalac\u00ed aktualizac\u00ed. Na rozd\u00edl od atom\u00e1rn\u00edch aktualizac\u00ed zalo\u017een\u00fdch na ostree a snap, kter\u00e9 se pou\u017e\u00edvaj\u00ed ve Fedo\u0159e a Ubuntu, v ALP nam\u00edsto budov\u00e1n\u00ed jednotliv\u00fdch atom\u00e1rn\u00edch obraz\u016f a nasazen\u00ed dal\u0161\u00ed infrastruktury pro dod\u00e1n\u00ed se pou\u017e\u00edv\u00e1 standardn\u00ed spr\u00e1vce bal\u00ed\u010dk\u016f a mechanismus snapshot\u016f v syst\u00e9mu Btrfs. <\/p>\n

Je zaji\u0161t\u011bn konfigurovateln\u00fd re\u017eim automatick\u00e9 instalace aktualizac\u00ed (nap\u0159\u00edklad je mo\u017en\u00e9 povolit automatickou instalaci pouze oprav kritick\u00fdch zranitelnost\u00ed nebo se vr\u00e1tit k ru\u010dn\u00edmu potvrzen\u00ed instalace aktualizac\u00ed). Pro aktualizaci j\u00e1dra Linux bez restartu a p\u0159eru\u0161en\u00ed provozu jsou podporov\u00e1ny live patche. Pro udr\u017een\u00ed odolnosti syst\u00e9mu (self-healing) se prov\u00e1d\u00ed z\u00e1znam posledn\u00edho stabiln\u00edho stavu pomoc\u00ed snapshot\u016f Btrfs (v p\u0159\u00edpad\u011b zji\u0161t\u011bn\u00ed anom\u00e1li\u00ed po aplikaci aktualizac\u00ed nebo zm\u011bn\u00e1ch nastaven\u00ed se syst\u00e9m automaticky p\u0159epne do p\u0159edchoz\u00edho stavu). <\/p>\n

V platform\u011b se pou\u017e\u00edv\u00e1 v\u00edceverzn\u00ed softwarov\u00fd stack \u2014 d\u00edky pou\u017eit\u00ed kontejner\u016f je mo\u017en\u00e9 sou\u010dasn\u011b pou\u017e\u00edvat r\u016fzn\u00e9 verze n\u00e1stroj\u016f a aplikac\u00ed. Nap\u0159\u00edklad je mo\u017en\u00e9 spou\u0161t\u011bt aplikace, kter\u00e9 maj\u00ed v z\u00e1vislostech r\u016fzn\u00e9 verze Pythonu, Javy a Node.js, a to p\u0159i odd\u011blov\u00e1n\u00ed navz\u00e1jem inkompatibiln\u00edch z\u00e1vislost\u00ed. Z\u00e1kladn\u00ed z\u00e1vislosti jsou dod\u00e1v\u00e1ny ve form\u011b sad BCI (Base Container Images). U\u017eivatel m\u016f\u017ee vytv\u00e1\u0159et, aktualizovat a odstra\u0148ovat softwarov\u00e9 stacky, ani\u017e by se dotkl jin\u00fdch prost\u0159ed\u00ed. <\/p>\n

Hlavn\u00ed zm\u011bny ve druh\u00e9m prototypu ALP: <\/p>\n