{"id":76911,"date":"2020-04-06T07:42:08","date_gmt":"2020-04-06T05:42:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0"},"modified":"2020-04-06T07:42:08","modified_gmt":"2020-04-06T05:42:08","slug":"vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0","title":{"rendered":"Konteinerite haldust\u00f6\u00f6riistade LXC ja LXD 4.0 v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Canonical ettev\u00f5te <noindex><a rel=\"nofollow\" href=\"https:\/\/ubuntu.com\/blog\/lxd-4-0-lts-stable-release-is-now-available\">avalikustas<\/a><\/noindex> t\u00f6\u00f6riistade v\u00e4ljaanne isoleeritud konteinerite haldamiseks <noindex><a rel=\"nofollow\" href=\"https:\/\/linuxcontainers.org\/lxc\/\">LXC 4.0<\/a><\/noindex>, konteinerihaldur <noindex><a rel=\"nofollow\" href=\"https:\/\/linuxcontainers.org\/lxd\/\">LXD 4.0<\/a><\/noindex> ja virtuaalne FS <noindex><a rel=\"nofollow\" href=\"https:\/\/linuxcontainers.org\/lxcfs\/\">LXCFS 4.0<\/a><\/noindex> konteinerite simuleerimiseks \/proc, \/sys ning virtuaalse cgroupfs esitluse jaoks jaotustes, mis ei toeta nimiruume cgroup. 4.0 haru on klassifitseeritud pikaajalise toe v\u00e4ljaanneteks, mille uuendused kestavad 5 aastat<\/p>\n<p>LXC on runtime nii s\u00fcsteemi konteinerite kui ka eraldi rakenduste konteinerite (OCI) k\u00e4itamiseks. LXC-sse kuulub liblxc raamatukogu, t\u00f6\u00f6riistade komplekt (lxc-create, lxc-start, lxc-stop, lxc-ls jne), konteinerite loomise mallid ja sidumisv\u00f5imalused erinevatesse programmeerimiskeeltesse. Isolatsioon saavutatakse l\u00e4bi Linuxi tuuma sisseehitatud mehhanismide. Protsesside, v\u00f5rgu, ipc, uts, kasutajatunnuste ja liidestepunktide isoleerimiseks kasutatakse nimiruumide (namespaces) mehhanismi. Resursi piiramiseks kasutatakse cgroup-e. Privileegide v\u00e4hendamiseks ja ligip\u00e4\u00e4su piiramiseks rakendatakse selliseid tuuma v\u00f5imekusi nagu Apparmor ja SELinux profiilid, Seccomp poliitikad, Chroots (pivot_root) ning capabilities. LXC kood <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lxc\/lxc\">on kirjutatud<\/a><\/noindex> on kirjutatud C keeles ja levitatakse GPLv2 litsentsi all.<\/p>\n<p>LXD on LXC, CRIU ja QEMU pealispind, mida kasutatakse konteinerite ja virtuaalmasinate keskseks haldamiseks \u00fchel v\u00f5i mitmel \u0441\u0435\u0440\u0432\u0435\u0440il. Kui LXC on madala taseme t\u00f6\u00f6riist konteinerite tasemel manipuleerimiseks, siis LXD on rakendatud taustprotsessina, mis v\u00f5tab vastu p\u00e4ringuid \u00fcle v\u00f5rgu REST API kaudu, v\u00f5imaldades luua skaleeritavaid konfiguratsioone, mis on paigaldatud mitmest serverist koosnevale klastrile.<br \/>\nToetatakse erinevaid salvestuslahenduste backende (kaustade puu, ZFS, Btrfs, LVM), olekute snapshot\u2019e, t\u00f6\u00f6protsesside live-migratsiooni \u00fchest masinast teise ja vahendeid piltide salvestamise korraldamiseks. LXD kood <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lxc\/lxd\">on kirjutatud<\/a><\/noindex> on kirjutatud Go keeles ja levitatakse Apache 2.0 litsentsi all.<\/p>\n<p>Peamised <noindex><a rel=\"nofollow\" href=\"https:\/\/discuss.linuxcontainers.org\/t\/lxc-4-0-lts-has-been-released\/7182\">parandused<\/a><\/noindex> LXC 4.0-s:<\/p>\n<ul>\n<li class=\"l\"> Kogu cgroup t\u00f6\u00f6tlemise draiver on t\u00e4ielikult \u00fcmber kirjutatud. Lisatud tugi \u00fchtsele cgroup hierarhiale (cgroup2). Lisatud on freezer kontrolleri funktsionaalsus, millega saab peatada cgroupis toimimise ja ajutiselt vabastada m\u00f5ned ressursid (CPU, sisendi\/v\u00e4lja ja isegi potentsiaalselt m\u00e4lu) teiste \u00fclesannete t\u00e4itmiseks;\n<li class=\"l\"> Kasutusele on v\u00f5etud infrastruktuur s\u00fcsteemik\u00f5nede p\u00fc\u00fcdmise teostamiseks;\n<li class=\"l\"> Lisatud toetus kernelisubsystemile \u00abpidfd\u00bb, mis on m\u00f5eldud PID (pidfd on seotud konkreetse protsessiga ja ei muutu, samas kui PID v\u00f5ib p\u00e4rast k\u00e4imasoleva protsessi l\u00f5ppemist olla seotud teise protsessiga) taaskasutamise olukordade k\u00e4sitlemiseks.\n<li class=\"l\"> Parendatud on v\u00f5rgu seadmete loomist ja kustutamist ning nende liigutamist v\u00f5rgu alams\u00fcsteemi nimesse;\n<li class=\"l\"> Kindlustatud on v\u00f5imalus juhtmevabade v\u00f5rgu seadmete (nl80211) liigutamiseks konteineritesse.\n<\/ul>\n<p>Peamised  <noindex><a rel=\"nofollow\" href=\"https:\/\/discuss.linuxcontainers.org\/t\/lxd-4-0-lts-has-been-released\/7231\/\">parandused<\/a><\/noindex> LXD 4.0:<\/p>\n<ul>\n<li class=\"l\"> Lisatud on tugi mitte ainult konteinerite, vaid ka virtuaalsete masinate k\u00e4ivitamiseks;\n<li class=\"l\"> LXD-serverite segmentimiseks on ette pandud projektide kontseptsioon, mis lihtsustab konteinerite ja virtuaalsete masinate gruppide haldamist. Iga projekt v\u00f5ib sisaldada oma konteinerite, virtuaalsete masinate, piltide, profiilide ja salvestusruumide komplekti. Projektide seotuse kontekstis on v\u00f5imalik m\u00e4\u00e4rata oma piirangud ja muuta seadeid;\n<li class=\"l\"> Lisatud on tugi s\u00fcsteemik\u00f5nede p\u00fc\u00fcdmise jaoks konteinerites;\n<li class=\"l\"> Teostatud on keskkondade varundamise ja taastamise v\u00f5imalus;\n<li class=\"l\"> Tagatud on automatiseeritud keskkondade ja salvestusruumide sn\u00e4ppide loomine koos v\u00f5imalusega m\u00e4\u00e4rata sn\u00e4ppide kehtivusaeg;\n<li class=\"l\"> Lisatud on API v\u00f5rguseisundi j\u00e4lgimiseks (lxc network info);\n<li class=\"l\"> Lisatud tugi   <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/linuxkit\/linuxkit\/tree\/master\/projects\/shiftfs\">shiftfs<\/a><\/noindex>, virtuaalne FS, et siduda monteerimispunktid kasutaja identifikaatorite nimesse (user namespace);\n<li class=\"l\"> Pakutakse uusi t\u00fc\u00fcpe v\u00f5rguadaptereid \u00abipvlan\u00bb ja \u00abrouted\u00bb;\n<li class=\"l\"> Lisatud on backend CephFS-p\u00f5histe salvestuste kasutamiseks;\n<li class=\"l\"> Klastrite jaoks on kindlustatud piltide replikatsiooni ja mitme arhitektuuri konfiguratsioonide tugi;\n<li class=\"l\"> Lisatud on rollip\u00f5hise juurdep\u00e4\u00e4su haldamise (RBAC) v\u00f5imalus;\n<li class=\"l\"> Lisatud on CGroup2 tugi;\n<li class=\"l\"> Lisatud on MAC-aadressi konfigureerimise ja NAT-i allika adressi m\u00e4\u00e4ramise v\u00f5imalus;\n<li class=\"l\"> Lisatud on API DHCP sidemete (leases) haldamiseks;\n<li class=\"l\"> Lisatud on Nftablesi tugi.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52679\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Canonical \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 LXC 4.0, \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 LXD 4.0 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0424\u0421 LXCFS 4.0 \u0434\u043b\u044f \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 \/proc, \/sys \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f cgroupfs \u0434\u043b\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0431\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432 \u0438\u043c\u0451\u043d \u0434\u043b\u044f cgroup. \u0412\u0435\u0442\u043a\u0430 4.0 \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u0430 \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 5 \u043b\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76911","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Canonical \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 LXC \u0438 LXD 4.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Canonical \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-04-06T05:42:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-04-06T05:42:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LXC ja LXD 4.0 konteinerihalduse t\u00f6\u00f6riistade v\u00e4ljaanne | ProHoster","description":"Ettev\u00f5te Canonical avaldas t\u00f6\u00f6riistade komplekti isoleeritud t\u00f6\u00f6 korraldamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 LXC \u0438 LXD 4.0 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Canonical \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-instrumentariya-upravleniya-kontejnerami-lxc-i-lxd-4-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-06T05:42:08+00:00","article:modified_time":"2020-04-06T05:42:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76911","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:27:22","updated":"2022-10-07 03:12:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/76911","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=76911"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/76911\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=76911"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=76911"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=76911"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}