{"id":99456,"date":"2021-03-17T10:22:52","date_gmt":"2021-03-17T08:22:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail"},"modified":"2021-03-17T10:22:52","modified_gmt":"2021-03-17T08:22:52","slug":"runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","title":{"rendered":"Runj \u2014 n\u00e1stroj kompatibiln\u00ed s OCI pro spr\u00e1vu kontejner\u016f na z\u00e1klad\u011b FreeBSD jail","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Samuel Karp, in\u017een\u00fdr z Amazonu, kter\u00fd se zab\u00fdv\u00e1 v\u00fdvojem Linuxov\u00e9 distribuce Bottlerocket a technologi\u00ed kontejnerov\u00e9 izolace pro AWS, vyv\u00edj\u00ed na z\u00e1klad\u011b jail prost\u0159ed\u00ed FreeBSD nov\u00fd runtime runj pro zaji\u0161t\u011bn\u00ed izolovan\u00e9ho spou\u0161t\u011bn\u00ed kontejner\u016f, kter\u00e9 odpov\u00eddaj\u00ed specifikaci OCI (Open Container Initiative). Projekt je ozna\u010dov\u00e1n jako experiment\u00e1ln\u00ed, vyv\u00edj\u00ed se ve voln\u00e9m \u010dase od hlavn\u00ed pr\u00e1ce a je zat\u00edm ve f\u00e1zi prototypu. K\u00f3d je naps\u00e1n v jazyce Go a je distribuov\u00e1n pod licenc\u00ed BSD. <\/p>\n

Jakmile bude v\u00fdvoj posunut na odpov\u00eddaj\u00edc\u00ed \u00farove\u0148, projekt by mohl dosp\u011bt do st\u00e1dia, kdy bude mo\u017en\u00e9 pou\u017e\u00edvat runj jako n\u00e1hradu v\u00fdchoz\u00edho runtime v syst\u00e9mech Docker a Kubernetes, p\u0159i\u010dem\u017e pro spou\u0161t\u011bn\u00ed kontejner\u016f by se pou\u017eil FreeBSD m\u00edsto Linuxu. Z p\u0159\u00edkaz\u016f OCI runtime jsou v sou\u010dasn\u00e9 dob\u011b implementov\u00e1ny p\u0159\u00edkazy pro vytv\u00e1\u0159en\u00ed, odstra\u0148ov\u00e1n\u00ed, spou\u0161t\u011bn\u00ed, nucen\u00e9 ukon\u010den\u00ed a vyhodnocen\u00ed stavu kontejner\u016f. Obsah kontejneru je vytv\u00e1\u0159en na z\u00e1klad\u011b v\u00fdchoz\u00edho nebo omezen\u00e9ho prost\u0159ed\u00ed FreeBSD. <\/p>\n

Jeliko\u017e v specifikaci OCI v sou\u010dasnosti chyb\u00ed podpora FreeBSD, v r\u00e1mci projektu byl vyvinut soubor dal\u0161\u00edch parametr\u016f spojen\u00fdch s konfigurac\u00ed jail a FreeBSD, kter\u00e9 se pl\u00e1nuj\u00ed p\u0159edat pro zahrnut\u00ed do hlavn\u00ed specifikace OCI. Pro spr\u00e1vu jail se pou\u017e\u00edvaj\u00ed n\u00e1stroje jail, jls, jexec, kill a ps z FreeBSD, bez p\u0159\u00edm\u00e9ho vol\u00e1n\u00ed syst\u00e9mov\u00fdch funkc\u00ed. V budoucnosti se pl\u00e1nuje p\u0159id\u00e1n\u00ed podpory pro \u0159\u00edzen\u00ed omezen\u00ed zdroj\u016f prost\u0159ednictv\u00edm RCTL rozhran\u00ed j\u00e1dra. <\/p>\n

Krom\u011b vlastn\u00edho runtime se v repozit\u00e1\u0159i projektu tak\u00e9 vyv\u00edj\u00ed experiment\u00e1ln\u00ed vrstva pro pou\u017eit\u00ed spolu s runtime containerd (pou\u017e\u00edvan\u00fdm v Dockeru), modifikovan\u00fdm pro podporu FreeBSD. Pro transformaci rootfs FreeBSD na OCI-kompatibiln\u00ed kontejnerov\u00fd obraz je navr\u017eena speci\u00e1ln\u00ed utilita. Vytvo\u0159en\u00fd obraz m\u016f\u017ee b\u00fdt n\u00e1sledn\u011b importov\u00e1n do containerd.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime runj \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 OCI (Open Container Initiative). \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043e\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0440\u0435\u043c\u044f \u0438 \u043f\u043e\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99456","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Runj \u2014 OCI-kompatibiln\u00ed n\u00e1stroj pro spr\u00e1vu kontejner\u016f na b\u00e1zi FreeBSD jail | ProHoster","description":"Samuel Karp, in\u017een\u00fdr z Amazonu, kter\u00fd se zab\u00fdv\u00e1 v\u00fdvojem Linuxov\u00e9 distribuce Bottlerocket a technologi\u00ed kontejnerov\u00e9 izolace pro AWS, vyv\u00edj\u00ed na z\u00e1klad\u011b jail prost\u0159ed\u00ed FreeBSD nov\u00fd runtime.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Runj \u2014 OCI-\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 FreeBSD jail | ProHoster","og:description":"\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-17T08:22:52+00:00","article:modified_time":"2021-03-17T08:22:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99456","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-17 08:25:25","updated":"2022-09-30 19:17:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=99456"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99456\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=99456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=99456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=99456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}