{"id":91364,"date":"2020-08-12T07:42:33","date_gmt":"2020-08-12T05:42:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes"},"modified":"2020-08-12T07:42:33","modified_gmt":"2020-08-12T05:42:33","slug":"izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes","title":{"rendered":"Zkoum\u00e1me (neexistuj\u00edc\u00ed) bezpe\u010dnost typick\u00fdch instalac\u00ed Dockeru a Kubernetes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Zkoum\u00e1me (neexistuj\u00edc\u00ed) bezpe\u010dnost typick\u00fdch instalac\u00ed Dockeru a Kubernetes\" src=\"\/wp-content\/uploads\/2020\/08\/805ed8f509210fcfc4d912092cc540d1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nV IT pracuji v\u00edce ne\u017e 20 let, ale n\u011bjak jsem se k container\u016fm nedostal. V teorii jsem rozum\u011bl, jak funguj\u00ed a jak jsou nastaveny. Ale proto\u017ee jsem s nimi nikdy nepracoval v praxi \u2014 nebyl jsem si jist\u00fd, jak p\u0159esn\u011b to pod kapotou funguje. <\/p>\n<p><\/p>\n<p>Krom\u011b toho jsem nem\u011bl tu\u0161en\u00ed, jak to maj\u00ed se zabezpe\u010den\u00edm. Ale op\u011bt, teorie zn\u00ed hezky a star\u00e1 p\u00edsni\u010dka \u201es rostouc\u00edm zabezpe\u010den\u00edm kles\u00e1 u\u017eivatelsk\u00fd komfort\u201c mi z\u016fstala v hlav\u011b. Tak\u017ee jsem si pomyslel, \u017ee kdy\u017e je pr\u00e1ce s kontejnery tak snadn\u00e1, \u00farove\u0148 bezpe\u010dnosti bude n\u00edzk\u00e1. Jak jsem zjistil, m\u011bl jsem pravdu.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Pro rychl\u00fd start jsem se p\u0159ihl\u00e1sil na kurzy <noindex><a rel=\"nofollow\" href=\"https:\/\/www.neowin.net\/news\/tags\/blackhat\">Black Hat<\/a><\/noindex> 2020 s n\u00e1zvem \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/www.blackhat.com\/us-20\/training\/schedule\/listing.html#from-zero-to-hero---pentesting-and-securing-docker-swarm--kubernetes-environments-19045\">Z bahna do kn\u00ed\u017eec\u00edho stavu: pronik\u00e1n\u00ed a ochrana prost\u0159ed\u00ed Docker Swarm a Kubernetes<\/a><\/noindex>\u00bb. <\/p>\n<p><\/p>\n<p>Kurz, kter\u00fd vedli Sheila A. Berta a Sol Ozzan, okam\u017eit\u011b za\u010dal popisem toho, jak funguj\u00ed kontejnery Docker a jak\u00fd proces podstupuj\u00ed p\u0159i nasazen\u00ed v Kubernetes. Byla to pln\u011b praktick\u00e1 lekce \u2014 studenti m\u011bli p\u0159ed lekcemi nainstalovat Docker a microk8s na sv\u00e9 po\u010d\u00edta\u010de \u2014 skv\u011bl\u00fd zp\u016fsob, jak vid\u011bt interakci n\u00e1stroj\u016f mezi sebou, nal\u00e9zt slab\u00e1 m\u00edsta a co je nejd\u016fle\u017eit\u011bj\u0161\u00ed, vyzkou\u0161et je zabezpe\u010dit.<\/p>\n<p><\/p>\n<p>Bohu\u017eel, a\u010dkoliv kurzy slibovaly, \u017ee budou \u201ekn\u00ed\u017eetem\u201c za dva dny, c\u00edtil jsem, \u017ee v\u0161e teprve za\u010d\u00edn\u00e1 a \u017ee se je\u0161t\u011b m\u00e1m hodn\u011b co u\u010dit.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Zkoum\u00e1me (neexistuj\u00edc\u00ed) bezpe\u010dnost typick\u00fdch instalac\u00ed Dockeru a Kubernetes\" src=\"\/wp-content\/uploads\/2020\/08\/e7afd728bb757ac1e0c14d06c5e03806.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ne\u017e se pono\u0159\u00edm do sv\u00fdch vysok\u00fdch \u00favah, je d\u016fle\u017eit\u00e9 vysv\u011btlit, co to container vlastn\u011b je. V oblasti v\u00fdvoje je norm\u00e1ln\u00ed, \u017ee k\u00f3d napsan\u00fd na va\u0161em osobn\u00edm po\u010d\u00edta\u010di funguje dokonale, ale kdy\u017e se pokus\u00edte spustit ho na serveru \u2014 prost\u011b nefunguje. Kontejnery se sna\u017e\u00ed p\u0159ekonat tento probl\u00e9m t\u00edm, \u017ee poskytuj\u00ed autonomn\u00ed stroje, kter\u00e9 m\u016f\u017eete snadno p\u0159en\u00e1\u0161et z jednoho serveru na druh\u00fd, p\u0159i\u010dem\u017e v\u00edte, \u017ee v\u017edy budou fungovat. Jak nazna\u010duje n\u00e1zev, obsahuj\u00ed k\u00f3d, knihovny a dal\u0161\u00ed software nezbytn\u00fd pro jejich provoz. Kubernetes je na druhou stranu <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/overview\/what-is-kubernetes\/\">platforma pro orchestraci kontejner\u016f<\/a><\/noindex>. Princip\u00e1ln\u011b s jeho pomoc\u00ed lze bezprobl\u00e9mov\u011b spravovat stovky nebo tis\u00edce r\u016fzn\u00fdch kontejner\u016f.<\/p>\n<p><\/p>\n<p>N\u00ed\u017ee jsou uvedeny n\u011bkter\u00e9 m\u00e9 post\u0159ehy z pohledu \u010derven\u00e9ho a modr\u00e9ho t\u00fdmu.<\/p>\n<p><\/p>\n<h2 id=\"krasnaya-komanda\">\u010cerven\u00fd t\u00fdm<\/h2>\n<p><\/p>\n<p><strong>V\u011bt\u0161ina obsahu kontejner\u016f se spou\u0161t\u00ed pod root<\/strong>: to znamen\u00e1, \u017ee pokud dojde k naru\u0161en\u00ed kontejneru, z\u00edsk\u00e1te pln\u00fd p\u0159\u00edstup k n\u011bmu. To n\u00e1sledn\u00e9 kroky v\u00fdrazn\u011b usnad\u0148uje.<\/p>\n<p><\/p>\n<p><strong>P\u0159ipojov\u00e1n\u00ed docker.sock uvnit\u0159 kontejneru je nebezpe\u010dn\u00e9<\/strong>: pokud z\u00edsk\u00e1te root uvnit\u0159 kontejneru a tak\u00e9 jste nainstalovali Docker uvnit\u0159 kontejneru, kter\u00fd m\u00e1 socket Docker ( \/var\/run\/docker.sock), m\u00e1te potenci\u00e1ln\u00ed mo\u017enost prozkoumat cel\u00fd klastr, v\u010detn\u011b p\u0159\u00edstupu k jak\u00e9mukoli jin\u00e9mu kontejneru. Takov\u00fd p\u0159\u00edstup nelze \u017e\u00e1dn\u00fdm zp\u016fsobem zabr\u00e1nit ani s\u00ed\u0165ovou izolac\u00ed.<\/p>\n<p><\/p>\n<p><strong>Prom\u011bnn\u00e9 prost\u0159ed\u00ed \u010dasto obsahuj\u00ed tajn\u00e9 \u00fadaje<\/strong>: ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f lid\u00e9 zas\u00edlaj\u00ed hesla do kontejneru pomoc\u00ed b\u011b\u017en\u00fdch prom\u011bnn\u00fdch prost\u0159ed\u00ed. Tak\u017ee pokud m\u00e1te p\u0159\u00edstup k \u00fa\u010dtu, m\u016f\u017eete tyto prom\u011bnn\u00e9 prost\u0159ed\u00ed nahl\u00e9dnout a pozd\u011bji roz\u0161\u00ed\u0159it sv\u00e9 opr\u00e1vn\u011bn\u00ed.<\/p>\n<p><\/p>\n<p><strong>Docker API m\u016f\u017ee poskytnout spoustu informac\u00ed<\/strong>: Docker API, kdy\u017e je nastaveno na v\u00fdchoz\u00ed, funguje bez autorizace a m\u016f\u017ee poskytnout spoustu informac\u00ed. Pomoc\u00ed Shodanu m\u016f\u017eete snadno naj\u00edt seznam otev\u0159en\u00fdch port\u016f, pot\u00e9 z\u00edskat podrobn\u00e9 informace o klastru \u2014 a p\u0159ej\u00edt k \u00fapln\u00e9mu p\u0159evzet\u00ed. TrendMicro o tom napsali <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/exposed-docker-control-api-and-community-image-abused-to-deliver-cryptocurrency-mining-malware\/\">zaj\u00edmav\u00fd \u010dl\u00e1nek<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h2 id=\"sinyaya-komanda\">Modr\u00fd t\u00fdm<\/h2>\n<p><\/p>\n<p><strong>Nespou\u0161t\u011bjte obsah kontejner\u016f pod rootem<\/strong>: i kdy\u017e je spu\u0161t\u011bn\u00ed pod rootem jednodu\u0161\u0161\u00ed, nem\u011bli byste to d\u011blat. M\u00edsto toho spus\u0165te aplikace s odebran\u00fdmi pr\u00e1vy, a\u0165 u\u017e zobrazen\u00edm uid, nebo pomoc\u00ed parametru \u2014user p\u0159i pr\u00e1ci s CLI, nebo ur\u010den\u00edm USER v Dockerfile.<\/p>\n<p><\/p>\n<p><strong>Nedovolte instalaci program\u016f v kontejnerech<\/strong>: t\u00e9m\u011b\u0159 ka\u017ed\u00fd \u00fatok za\u010d\u00edn\u00e1 instalac\u00ed n\u011b\u010deho. Od nmapu po ifconfig a samotn\u00fd Docker (uvnit\u0159 kontejneru) byla instalace n\u011b\u010deho v kontejneru b\u011b\u017enou prax\u00ed. Z tohoto d\u016fvodu by m\u011bly b\u00fdt v\u017edy blokov\u00e1ny v\u0161echny nepou\u017e\u00edvan\u00e9 porty. To tak\u00e9 pom\u00e1h\u00e1 zabr\u00e1nit p\u0159enosu \u0159\u00eddic\u00edch p\u0159\u00edkaz\u016f p\u0159i infikov\u00e1n\u00ed va\u0161\u00ed ma\u0161iny. Krom\u011b zabr\u00e1n\u011bn\u00ed instalaci program\u016f je dobr\u00e9 se ujistit, \u017ee v samotn\u00e9m kontejneru je nainstalov\u00e1no minim\u00e1ln\u00ed mno\u017estv\u00ed aplikac\u00ed pot\u0159ebn\u00fdch k proveden\u00ed \u00fakolu.<\/p>\n<p><\/p>\n<p><strong>Chra\u0148te docker.sock<\/strong>: mus\u00ed b\u00fdt chr\u00e1n\u011bn, proto\u017ee skrze tento socket prob\u00edh\u00e1 komunikace mezi kontejnerem a klastrem. Proto\u017ee se nechci v t\u00e9to kapitole zab\u00fdvat detaily, p\u0159e\u010dt\u011bte si <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.docker.com\/engine\/security\/https\/\">pozn\u00e1mku od Dockeru<\/a><\/noindex>, co se m\u016f\u017ee st\u00e1t, a jak to v\u0161echno zablokovat.<\/p>\n<p><\/p>\n<p><strong>Pou\u017e\u00edvejte tajemstv\u00ed Docker m\u00edsto prom\u011bnn\u00fdch prost\u0159ed\u00ed<\/strong>: Tajemstv\u00ed existuj\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/www.docker.com\/blog\/docker-secrets-management\/\">p\u0159ibli\u017en\u011b od roku 2017<\/a><\/noindex>. A\u010dkoliv to nen\u00ed bezpe\u010dn\u00e9, je to lep\u0161\u00ed ne\u017e prom\u011bnn\u00e9 prost\u0159ed\u00ed pro p\u0159enos citliv\u00fdch dat do kontejneru.<\/p>\n<p><\/p>\n<p>Pokud v\u00e1s \u010dl\u00e1nek zaujal a m\u00e1te z\u00e1jem o kontejnery, Docker nebo microk8s (mal\u00e1 verze Kubernetes) si m\u016f\u017eete nainstalovat relativn\u011b snadno. <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.docker.com\/engine\/install\/\">Zde<\/a><\/noindex> existuj\u00ed pokyny k instalaci Dockeru pro Linux a MacOS, a <noindex><a rel=\"nofollow\" href=\"https:\/\/microk8s.io\/\">zde<\/a><\/noindex> \u2014 pokyny k instalaci microk8s pro Windows, Linux a MacOS.<\/p>\n<p><\/p>\n<p>Po instalaci m\u016f\u017eete proj\u00edt <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.docker.com\/get-started\/\">t\u00edmto pr\u016fvodcem pro rychl\u00fd start<\/a><\/noindex> od Dockeru, podobn\u00e1 varianta <noindex><a rel=\"nofollow\" href=\"https:\/\/microk8s.io\/docs\">je nab\u00edzena<\/a><\/noindex> a pro microk8s.<\/p>\n<p><\/p>\n<p>Pokud m\u00e1te chu\u0165 nebo pot\u0159ebu proj\u00edt komplexn\u00edm kurzem o Dockeru, kde odborn\u00edci z praxe rozeb\u00edraj\u00ed v\u0161echny jeho n\u00e1stroje: od z\u00e1kladn\u00edch abstrakc\u00ed po parametrick\u00e9 s\u00edt\u011b, nuance pr\u00e1ce s r\u016fzn\u00fdmi opera\u010dn\u00edmi syst\u00e9my a programovac\u00edmi jazyky, zkuste \"<noindex><a rel=\"nofollow\" href=\"http:\/\/to.slurm.io\/t2D-uA\">Videokurz o Dockeru<\/a><\/noindex>\". Sezn\u00e1m\u00edte se s technologi\u00ed a pochop\u00edte, kde a jak nejl\u00e9pe pou\u017e\u00edvat Docker. A z\u00e1rove\u0148 z\u00edsk\u00e1te best practice p\u0159\u00edpady \u2014 nejlep\u0161\u00ed je u\u010dit se bezpe\u010dn\u011b a s podporou praktik\u016f na p\u0159\u00edb\u011bz\u00edch o p\u00e1dech, ne\u017e osobn\u011b za\u017e\u00edvat p\u00e1dy se \u0161pi\u010dat\u00fdmi rukama.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/southbridge\/blog\/514528\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u042f \u0440\u0430\u0431\u043e\u0442\u0430\u044e \u0432 IT \u0431\u043e\u043b\u044c\u0448\u0435 20 \u043b\u0435\u0442, \u043d\u043e \u043a\u0430\u043a-\u0442\u043e \u0440\u0443\u043a\u0438 \u043d\u0435 \u0434\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0434\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0412 \u0442\u0435\u043e\u0440\u0438\u0438 \u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043b, \u043a\u0430\u043a \u043e\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0438 \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442. \u041d\u043e \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044f \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u0441 \u043d\u0438\u043c\u0438 \u043d\u0435 \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u2014 \u044f \u043d\u0435 \u0431\u044b\u043b \u0443\u0432\u0435\u0440\u0435\u043d \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u043a\u0440\u0443\u0442\u044f\u0442\u0441\u044f-\u0432\u0435\u0440\u0442\u044f\u0442\u0441\u044f \u0443 \u043d\u0438\u0445 \u0448\u0435\u0441\u0442\u0435\u0440\u0451\u043d\u043a\u0438 \u043f\u043e\u0434 \u043a\u0430\u043f\u043e\u0442\u043e\u043c. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u044f \u0431\u044b\u043b \u0431\u0435\u0437 \u043f\u043e\u043d\u044f\u0442\u0438\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91365,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-91364","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u042f \u0440\u0430\u0431\u043e\u0442\u0430\u044e \u0432 IT.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u0437\u0443\u0447\u0430\u0435\u043c (\u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e) \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a Docker \u0438 Kubernetes | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u042f \u0440\u0430\u0431\u043e\u0442\u0430\u044e \u0432 IT.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-12T05:42:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-12T05:42:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zkoum\u00e1me (neexistuj\u00edc\u00ed) bezpe\u010dnost typick\u00fdch instalac\u00ed Dockeru a Kubernetes | ProHoster","description":"Pracuji v IT.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437\u0443\u0447\u0430\u0435\u043c (\u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e) \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a Docker \u0438 Kubernetes | ProHoster","og:description":"\u042f \u0440\u0430\u0431\u043e\u0442\u0430\u044e \u0432 IT.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/izuchaem-otsutstvuyushhuyu-bezopasnost-tipichnyh-ustanovok-docker-i-kubernetes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-12T05:42:33+00:00","article:modified_time":"2020-08-12T05:42:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91364","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:29:22","updated":"2022-09-28 18:39:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/91364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=91364"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/91364\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/91365"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=91364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=91364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=91364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}