{"id":170754,"date":"2026-05-15T18:24:38","date_gmt":"2026-05-15T16:24:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/red-hat-predstavil-hummingbird-zashhishhyonnuyu-redakcziyu-fedora-na-baze-kontejnerov"},"modified":"2026-05-15T18:24:38","modified_gmt":"2026-05-15T16:24:38","slug":"red-hat-predstavil-hummingbird-zashhishhyonnuyu-redakcziyu-fedora-na-baze-kontejnerov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/red-hat-predstavil-hummingbird-zashhishhyonnuyu-redakcziyu-fedora-na-baze-kontejnerov","title":{"rendered":"Red Hat has introduced Hummingbird, a secure container-based edition of Fedora.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Red Hat has introduced the Fedora Hummingbird project at the Red Hat Summit 2026 conference, offering a new continuously updated edition of Fedora Linux, built in the form of a collection of containers. To reduce the attack surface, the containers include only the minimal set of components necessary to address specific tasks. Software versions are promptly updated, as soon as possible after release by the main projects. The update installation process is automated. The tools used in the project are open under the MIT license. <\/p>\n
Container images are published for amd64 and arm64 architectures. Currently, the catalog offers 49 container variants (including FIPS editions and multi-arch\u2014157), allowing the deployment of working environments with Python, Go, Node.js, Rust, Ruby, OpenJDK, .NET, PostgreSQL, nginx, and other open projects. Images are built following the 'Distroless' principle, meaning they do not include a package manager or a shell, but only contain the target application and the necessary components for it to function. <\/p>\n
95% of the packages used in the Hummingbird container images are built from the Fedora Rawhide repository, while the remaining 5% are downloaded and built directly from the upstream repositories. These 5% include applications that are absent in Rawhide or have outdated releases in Rawhide. To build Hummingbird independently of Fedora, separate RPM packages are maintained, built in a separate infrastructure from the standard Fedora SPEC files, which allows for the addition of project-specific optimizations and modifications when necessary. <\/p>\n
The provided builds are compatible with images from Docker Hub, Red Hat UBI, and other registries, which simplifies the migration of existing systems to Hummingbird. Unlike the CoreOS project, which provides minimalist host builds for container orchestration, Hummingbird is aimed at developers who need to use different versions of runtime simultaneously (Python 3.11-3.14, Go 1.25-1.26, Node.js 20-25, etc.) and separately manage the lifecycle of each version. <\/p>\n
Unlike traditional containers, most Hummingbird options operate by default under an unprivileged user without root access. Containers support reproducible builds and can be rebuilt by the user from the provided source code to ensure that the images created by the project match exactly. For ease of verification, source containers are provided with all the necessary code and source RPM packages. To ensure security, the contents of the containers are built in an isolated environment with no network access. <\/p>\n
In addition to containers for running end applications, the project develops the bootable host image bootc-os, built using container boot technology and suitable for installation on disk. The system image combines Hummingbird components, Linux kernel packages from the CKI (Continuous Kernel Integration) project, a bootloader, and system services from Fedora. The entire system is packaged as an OCI container. The bootc-os is automatically updated with each reboot. The tools Podman and Skopeo are used to run containers from the bootc-os environment. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"