{"id":94205,"date":"2020-09-13T19:42:49","date_gmt":"2020-09-13T17:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom"},"modified":"2020-09-13T19:42:49","modified_gmt":"2020-09-13T17:42:49","slug":"vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","title":{"rendered":"Byl vyd\u00e1n minimalistick\u00fd Linuxov\u00fd distribuce Bottlerocket pro spu\u0161t\u011bn\u00ed kontejner\u016f. To nejd\u016fle\u017eit\u011bj\u0161\u00ed o n\u011bm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Byl
\n
\nSpole\u010dnost Amazon ozn\u00e1mila<\/a><\/noindex> o fin\u00e1ln\u00ed verzi Bottlerocket<\/a><\/noindex> \u2014 speci\u00e1ln\u00ed distribuce pro spu\u0161t\u011bn\u00ed kontejner\u016f a jejich efektivn\u00ed spr\u00e1vu.<\/p>\n

Bottlerocket (mimochodem, tak se naz\u00fdvaj\u00ed mal\u00e9 dom\u00e1c\u00ed rakety na d\u00fdmov\u00fd pr\u00e1\u0161ek) nen\u00ed prvn\u00edm opera\u010dn\u00edm syst\u00e9mem pro kontejnery, ale je pravd\u011bpodobn\u00e9, \u017ee se roz\u0161\u00ed\u0159\u00ed d\u00edky v\u00fdchoz\u00ed integraci se slu\u017ebami AWS. I kdy\u017e je syst\u00e9m orientov\u00e1n na cloud Amazonu, otev\u0159en\u00fd zdroj umo\u017e\u0148uje jeho sestaven\u00ed kdekoli: lok\u00e1ln\u011b na serveru, na Raspberry Pi, v jak\u00e9mkoli konkuren\u010dn\u00edm cloudu a dokonce i v prost\u0159ed\u00ed bez kontejner\u016f.<\/p>\n

Je to zcela d\u016fstojn\u00e1 n\u00e1hrada za distribuci CoreOS, kterou zru\u0161ila spole\u010dnost Red Hat.
\n<\/a><\/noindex>
\nV z\u00e1sad\u011b m\u00e1 divize Amazon Web Services u\u017e Amazon Linux, kter\u00fd ned\u00e1vno vy\u0161el ve verzi 2: je to distribuce v\u0161eobecn\u00e9ho ur\u010den\u00ed, kterou lze spustit v kontejneru Docker nebo s hypervizory Linux KVM, Microsoft Hyper-V a VMware ESXi. Byla optimalizov\u00e1na pro pr\u00e1ci v cloudu AWS, ale s uveden\u00edm Bottlerocketu se v\u0161em doporu\u010duje prov\u00e9st upgrade na nov\u00fd syst\u00e9m, kter\u00fd je bezpe\u010dn\u011bj\u0161\u00ed, modern\u011bj\u0161\u00ed a spot\u0159ebov\u00e1v\u00e1 m\u00e9n\u011b zdroj\u016f.<\/p>\n

AWS ozn\u00e1mila Bottlerocket v b\u0159eznu 2020<\/a><\/noindex>. Okam\u017eit\u011b uznala, \u017ee to nen\u00ed prvn\u00ed \"Linux pro kontejnery\", p\u0159i\u010dem\u017e jako zdroje inspirace zm\u00ednila CoreOS, Rancher OS a Project Atomic. V\u00fdvoj\u00e1\u0159i uvedli, \u017ee opera\u010dn\u00ed syst\u00e9m je \"v\u00fdsledkem lekc\u00ed, kter\u00e9 jsme se nau\u010dili po dlouh\u00fdch letech provozov\u00e1n\u00ed v\u00fdrobn\u00edch slu\u017eeb v m\u011b\u0159\u00edtku Amazonu, a s ohledem na zku\u0161enosti, kter\u00e9 jsme z\u00edskali za posledn\u00edch \u0161est let o tom, jak spou\u0161t\u011bt kontejnery.\"<\/p>\n

Extr\u00e9mn\u00ed minimalismus<\/h1>\n

\nLinux je o\u010di\u0161t\u011bn od v\u0161eho, co nen\u00ed pot\u0159eba k spu\u0161t\u011bn\u00ed kontejner\u016f. Tento design, podle spole\u010dnosti, zmen\u0161uje \u00fato\u010dnou plochu.<\/p>\n

To znamen\u00e1, \u017ee v z\u00e1kladn\u00edm syst\u00e9mu je nainstalov\u00e1no m\u00e9n\u011b bal\u00ed\u010dk\u016f, co\u017e usnad\u0148uje \u00fadr\u017ebu a aktualizaci opera\u010dn\u00edho syst\u00e9mu, a tak\u00e9 sni\u017euje pravd\u011bpodobnost vzniku probl\u00e9m\u016f kv\u016fli z\u00e1vislostem, \u010d\u00edm\u017e se sni\u017euje vyu\u017eit\u00ed zdroj\u016f. V z\u00e1sad\u011b zde v\u0161echno funguje uvnit\u0159 odd\u011blen\u00fdch kontejner\u016f, zat\u00edmco z\u00e1kladn\u00ed syst\u00e9m je prakticky hol\u00fd.<\/p>\n

Amazon tak\u00e9 odstranila v\u0161echny shell a interpretery, \u010d\u00edm\u017e eliminuje riziko jejich vyu\u017eit\u00ed nebo n\u00e1hodn\u00e9ho zv\u00fd\u0161en\u00ed opr\u00e1vn\u011bn\u00ed u\u017eivateli. V z\u00e1kladn\u00edm obraze pro minimalismus a bezpe\u010dnost chyb\u00ed p\u0159\u00edkazov\u00fd shell, server SSH a interpretably jako Python. N\u00e1stroje pro administr\u00e1tora byly p\u0159esunuty do samostatn\u00e9ho servisn\u00edho kontejneru, kter\u00fd je ve v\u00fdchoz\u00edm nastaven\u00ed deaktivov\u00e1n.<\/p>\n

Spr\u00e1va syst\u00e9mu je zaji\u0161t\u011bna dv\u011bma zp\u016fsoby: p\u0159es API a orchestrace.<\/p>\n

M\u00edsto spr\u00e1vce bal\u00ed\u010dk\u016f, kter\u00fd aktualizuje jednotliv\u00e9 \u010d\u00e1sti softwaru, Bottlerocket na\u010d\u00edt\u00e1 cel\u00fd obraz souborov\u00e9ho syst\u00e9mu a restartuje do n\u011bj. V p\u0159\u00edpad\u011b selh\u00e1n\u00ed spu\u0161t\u011bn\u00ed se automaticky vrac\u00ed zp\u011bt, a selh\u00e1n\u00ed pracovn\u00edho zat\u00ed\u017een\u00ed m\u016f\u017ee ru\u010dn\u011b vyvolat n\u00e1vrat (p\u0159\u00edkaz p\u0159es API).<\/p>\n

R\u00e1mec TUF<\/a><\/noindex> (The Update Framework) na\u010d\u00edt\u00e1 aktualizace na z\u00e1klad\u011b obraz\u016f do alternativn\u00edch nebo \u201eodpojen\u00fdch\u201c odd\u00edl\u016f. Pro syst\u00e9m jsou vyhrazeny dva diskov\u00e9 odd\u00edly, z nich\u017e jeden obsahuje aktivn\u00ed syst\u00e9m a na druh\u00e9m se kop\u00edruje aktualizace. P\u0159i\u010dem\u017e ko\u0159enov\u00fd odd\u00edl je namontov\u00e1n v re\u017eimu pouze pro \u010dten\u00ed, a odd\u00edl \/etc<\/code> je namontov\u00e1n s filesystemem v opera\u010dn\u00ed pam\u011bti tmpfs<\/a><\/noindex> a obnovuje v\u00fdchoz\u00ed stav po restartu. P\u0159\u00edm\u00e9 zm\u011bny konfigura\u010dn\u00edch soubor\u016f v \/etc<\/code> nejsou podporov\u00e1ny: pro zachov\u00e1n\u00ed nastaven\u00ed je t\u0159eba vyu\u017e\u00edvat API nebo p\u0159esunout funk\u010dnost do samostatn\u00fdch kontejner\u016f.<\/p>\n

\"Byl
\nSch\u00e9ma aktualizace p\u0159es API<\/i><\/p>\n

Bezpe\u010dnost<\/h1>\n

\nKontejnery jsou vytv\u00e1\u0159eny standardn\u00edmi mechanismy j\u00e1dra Linuxu \u2014 cgroups, namespaces a seccomp, a jako syst\u00e9m donucovac\u00ed kontroly p\u0159\u00edstupu, tedy pro dodate\u010dnou izolaci, je pou\u017eito SELinux<\/a><\/noindex> v re\u017eimu \"enforcing\".<\/p>\n

Ve v\u00fdchoz\u00edm nastaven\u00ed jsou zahrnuty politiky pro d\u011blen\u00ed zdroj\u016f mezi kontejnery a j\u00e1drem. Bin\u00e1rky jsou chr\u00e1n\u011bny flagy, aby je u\u017eivatel\u00e9 nebo programy nemohli vykon\u00e1vat. A pokud se n\u011bkdo dostal k souborov\u00e9mu syst\u00e9mu, Bottlerocket nab\u00edz\u00ed n\u00e1stroj pro kontrolu a sledov\u00e1n\u00ed jak\u00fdchkoli proveden\u00fdch zm\u011bn.<\/p>\n

Re\u017eim \u201eov\u011b\u0159en\u00e9ho spou\u0161t\u011bn\u00ed\u201c je realizov\u00e1n prost\u0159ednictv\u00edm funkce device-mapper-verity (dm-verity<\/a><\/noindex>), kter\u00e1 kontroluje integritu ko\u0159enov\u00e9ho odd\u00edlu b\u011bhem zav\u00e1d\u011bn\u00ed. AWS popisuje dm-verity jako \u201efunkci j\u00e1dra Linuxu, kter\u00e1 zaji\u0161\u0165uje kontrolu integrity, aby zabr\u00e1nila fungov\u00e1n\u00ed \u0161kodliv\u00e9ho softwaru v OS, jako je p\u0159episov\u00e1n\u00ed z\u00e1kladn\u00edho syst\u00e9mov\u00e9ho softwaru.\u201c<\/p>\n

Tak\u00e9 v syst\u00e9mu je p\u0159\u00edtomn\u00fd filtr eBPF<\/a><\/noindex> (roz\u0161\u00ed\u0159en\u00fd BPF, v\u00fdvoj Alexeje Starovoitova<\/a><\/noindex>), kter\u00fd umo\u017e\u0148uje nahrazovat moduly j\u00e1dra bezpe\u010dn\u011bj\u0161\u00edmi BPF programy pro n\u00edzko\u00farov\u0148ov\u00e9 syst\u00e9mov\u00e9 operace.<\/p>\n

Model prov\u00e1d\u011bn\u00ed
\nUr\u010deno u\u017eivateli
\nKompilace
\nBezpe\u010dnost
\nRe\u017eim selh\u00e1n\u00ed
\nP\u0159\u00edstup k prost\u0159edk\u016fm<\/p>\n

U\u017eivatel<\/b>
\n\u00fakol
\nano
\njak\u00fdkoli
\nu\u017eivatelsk\u00e1 pr\u00e1va
\np\u0159eru\u0161en\u00ed prov\u00e1d\u011bn\u00ed
\nsyst\u00e9mov\u00fd vol\u00e1n\u00ed, fault<\/p>\n

J\u00e1dro<\/b>
\n\u00fakol
\nne
\nstatick\u00e9
\nne
\npanika j\u00e1dra
\np\u0159\u00edm\u00e9<\/p>\n

BPF<\/b>
\nud\u00e1lost
\nano
\nJIT, CO-RE
\nov\u011b\u0159ov\u00e1n\u00ed, JIT
\nchybov\u00e1 zpr\u00e1va
\nomezen\u00e9 pomocn\u00e9 n\u00e1stroje<\/p>\n

\nRozd\u00edl BPF od b\u011b\u017en\u00e9ho u\u017eivatelsk\u00e9ho nebo j\u00e1drov\u00e9ho k\u00f3du, zdroj<\/a><\/noindex><\/i><\/p>\n

AWS uvedla, \u017ee Bottlerocket \u201eaplikuje provozn\u00ed model, kter\u00fd je\u0161t\u011b v\u00edce zvy\u0161uje bezpe\u010dnost t\u00edm, \u017ee zabra\u0148uje p\u0159ipojen\u00ed k produk\u010dn\u00edm server\u016fm s privilegii administr\u00e1tora\u201c, a \u201eje vhodn\u00fd pro velk\u00e9 distribuovan\u00e9 syst\u00e9my, kde je omezen\u00e1 kontrola nad ka\u017ed\u00fdm jednotliv\u00fdm hostitelem.\u201c<\/p>\n

Pro syst\u00e9mov\u00e9 administr\u00e1tory je k dispozici kontejner spr\u00e1vce. Ale AWS si nemysl\u00ed, \u017ee by spr\u00e1vce \u010dasto pot\u0159eboval pracovat uvnit\u0159 Bottlerocket: \u201eAktivita p\u0159ihl\u00e1\u0161en\u00ed se do jednotliv\u00e9ho instance Bottlerocket je ur\u010dena pro nezvykle prov\u00e1d\u011bn\u00e9 operace: pokro\u010dil\u00e9 lad\u011bn\u00ed a odstra\u0148ov\u00e1n\u00ed probl\u00e9m\u016f,\u201c p\u00ed\u0161ou<\/a><\/noindex> v\u00fdvoj\u00e1\u0159i.<\/p>\n

Jazyk Rust<\/h1>\n

\nN\u00e1stroje OS nad j\u00e1drem jsou v\u011bt\u0161inou naps\u00e1ny v jazyce Rust. Tento jazyk z podstaty sni\u017euje pravd\u011bpodobnost nebezpe\u010dn\u00e9ho p\u0159\u00edstupu k pam\u011bti<\/a><\/noindex>, a tak\u00e9 odstra\u0148uje z\u00e1vody mezi vl\u00e1kny<\/a><\/noindex>.<\/p>\n

P\u0159i sestaven\u00ed se v\u00fdchoz\u00edm zp\u016fsobem pou\u017e\u00edvaj\u00ed vlajky --enable-default-pie<\/code> a --enable-default-ssp<\/code> pro povolen\u00ed randomizace adresn\u00edho prostoru spustiteln\u00fdch soubor\u016f (position-independent executable<\/a><\/noindex>, PIE) a ochranu proti p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku.<\/p>\n

Pro bal\u00ed\u010dky v C\/C++ se nav\u00edc p\u0159id\u00e1vaj\u00ed vlajky -Wall<\/code>, -Werror=format-security<\/code>, -Wp,-D_FORTIFY_SOURCE=2<\/code>, -Wp,-D_GLIBCXX_ASSERTIONS<\/code> a -fstack-clash-protection<\/code>.<\/p>\n

Krom\u011b Rust a C\/C++ jsou n\u011bkter\u00e9 bal\u00ed\u010dky naps\u00e1ny v jazyce Go.<\/p>\n

Integrace s AWS slu\u017ebami<\/h1>\n

\nRozd\u00edl od obdobn\u00fdch kontejnerov\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f spo\u010d\u00edv\u00e1 v tom, \u017ee Amazon optimalizoval Bottlerocket pro pr\u00e1ci na AWS a integraci s dal\u0161\u00edmi AWS slu\u017ebami.<\/p>\n

Nejpopul\u00e1rn\u011bj\u0161\u00edm orchestrace kontejner\u016f je Kubernetes, a proto AWS zavedla integraci se sv\u00fdm vlastn\u00edm Enterprise Kubernetes Service (EKS). N\u00e1stroje pro orchestrace jsou um\u00edst\u011bny v samostatn\u00e9m \u0159\u00edd\u00edc\u00edm kontejneru bottlerocket-control-container<\/a><\/noindex>, kter\u00fd je zapnut\u00fd ve v\u00fdchoz\u00edm nastaven\u00ed a spravuje se p\u0159es API a AWS SSM Agent.<\/p>\n

Bude zaj\u00edmav\u00e9 sledovat, zda Bottlerocket usp\u011bje, vzhledem k ne\u00fasp\u011bchu n\u011bkter\u00fdch podobn\u00fdch iniciativ v minulosti. Nap\u0159\u00edklad PhotonOS od Vmware se uk\u00e1zala jako nevyu\u017eit\u00e1, zat\u00edmco RedHat koupil CoreOS a uzav\u0159el projekt<\/a><\/noindex>, kter\u00fd byl pova\u017eov\u00e1n za pr\u016fkopn\u00edka v t\u00e9to oblasti.<\/p>\n

Integrace Bottlerocket do slu\u017eeb AWS \u010din\u00ed tento syst\u00e9m v jist\u00e9m smyslu unik\u00e1tn\u00ed. Mo\u017en\u00e1 pr\u00e1v\u011b to je hlavn\u00ed d\u016fvod, pro\u010d mohou n\u011bkte\u0159\u00ed u\u017eivatel\u00e9 preferovat Bottlerocket p\u0159ed jin\u00fdmi distribucemi, jako jsou CoreOS nebo Alpine. Syst\u00e9m byl p\u016fvodn\u011b navr\u017een pro pr\u00e1ci s EKS a ECS, ale opakujeme, \u017ee to nen\u00ed nutn\u00e9. Za prv\u00e9, Bottlerocket lze sestavit samostatn\u011b<\/a><\/noindex> a pou\u017e\u00edt nap\u0159\u00edklad jako hosted \u0159e\u0161en\u00ed. Za druh\u00e9, u\u017eivatel\u00e9 EKS a ECS si st\u00e1le zachov\u00e1vaj\u00ed mo\u017enost volby OS.<\/p>\n

Zdrojov\u00fd k\u00f3d Bottlerocket je zve\u0159ejn\u011bn na GitHubu pod licenc\u00ed Apache 2.0. V\u00fdvoj\u00e1\u0159i ji\u017e reaguj\u00ed na bug reporty a po\u017eadavky na funkce<\/a><\/noindex>.<\/p>\n

<\/p>\n

Na z\u00e1klad\u011b reklamy<\/h4>\n

\nVDSina<\/b> nab\u00edz\u00ed VDS s denn\u00ed platbou<\/a><\/noindex>. Je mo\u017en\u00e9 nainstalovat jak\u00fdkoli opera\u010dn\u00ed syst\u00e9m, v\u010detn\u011b ze sv\u00e9ho obrazu. Ka\u017ed\u00fd server je p\u0159ipojen k internetov\u00e9mu kan\u00e1lu s rychlost\u00ed 500 Mbit a zdarma chr\u00e1n\u011bn p\u0159ed DDoS \u00fatoky! <\/p>\n

\"Byl<\/a><\/noindex>
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vy\u0161la minimalistick\u00e1 linuxov\u00e1 distribuce Bottlerocket pro spu\u0161t\u011bn\u00ed kontejner\u016f. To nejd\u016fle\u017eit\u011bj\u0161\u00ed o n\u011bm | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-13T17:42:49+00:00","article:modified_time":"2020-09-13T17:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94205","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:31:27","updated":"2022-10-03 07:42:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=94205"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/94206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=94205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=94205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=94205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}