{"id":94205,"date":"2020-09-13T19:42:49","date_gmt":"2020-09-13T17:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom"},"modified":"2020-09-13T19:42:49","modified_gmt":"2020-09-13T17:42:49","slug":"vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","title":{"rendered":"V\u00e4lja tuli minimalistlik Linuxi jaotur Bottlerocket konteinerite k\u00e4itamiseks. K\u00f5ige olulisem sellest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"V\u00e4lja tuli minimalistlik Linuxi jaotur Bottlerocket konteinerite k\u00e4itamiseks. K\u00f5ige olulisem sellest\" src=\"\/wp-content\/uploads\/2020\/09\/9855c867e513e12eb89c4e70a2280329.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAmazoni ettev\u00f5te <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/blogs\/opensource\/announcing-the-general-availability-of-bottlerocket-an-open-source-linux-distribution-purpose-built-to-run-containers\/\">teatas<\/a><\/noindex> l\u00f5ppversiooni kohta <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bottlerocket-os\/bottlerocket\">Bottlerocket<\/a><\/noindex> \u2014 spetsialiseeritud distributsioon konteinerite k\u00e4ivitamiseks ja t\u00f5husaks haldamiseks.<\/p>\n<p>Bottlerocket (muide, seda nime kasutatakse v\u00e4ikeste koduste rakettide jaoks, mis t\u00f6\u00f6tavad suitsupulberel) ei ole esimene konteinerite ops\u00fcsteem, kuid on suure t\u00f5en\u00e4osusega laialdaselt levinud t\u00e4nu vaikimisi integratsioonile AWS teenustega. Kuigi s\u00fcsteem on suunatud Amazon'i pilvele, v\u00f5imaldab avatud l\u00e4htekood selle koguda igal pool: kohapeal serveris, Raspberry Pi-l, igas konkurentsiv\u00f5imelises pilves ning isegi konteineriteta keskkondades.<\/p>\n<p>See on t\u00e4iendav v\u00e4\u00e4rikas alternatiiv CoreOS distributsioonile, mille likvideeris Red Hat.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nTegelikult on Amazon Web Services divisionil juba olemas Amazon Linux, mis hiljuti ilmus teises versioonis: see on universaalne distributsioon, mida saab k\u00e4ivitada Docker konteineris v\u00f5i Linux KVM, Microsoft Hyper-V ja VMware ESXi h\u00fcperviisoritega. See on optimeeritud AWS pilves t\u00f6\u00f6tamiseks, kuid Bottlerocketi turuletoomisega soovitatakse k\u00f5igil uue s\u00fcsteemi versioonile \u00fcle minna, mis on turvalisem, kaasaegsem ja tarbib v\u00e4hem ressursse.<\/p>\n<p>AWS kuulutas Bottlerocketi v\u00e4lja <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/blogs\/containers\/bottlerocket-a-special-purpose-container-operating-system\/\">2020. aasta m\u00e4rtsis<\/a><\/noindex>. Ta tunnustas kohe, et see ei ole esimene \u00abLinux konteineritele\u00bb, tuues inspiratsiooniallikatena v\u00e4lja CoreOS, Rancher OS ja Project Atomic. Arendajad kirjutasid, et operatsioonis\u00fcsteem on \u00abtulemuseks \u00f5pitust, mille oleme saanud pikka aega tootmist\u00f6\u00f6dega Amazonis, ja kogemustest, mida oleme viimase kuue aasta jooksul omandanud konteinerite k\u00e4itamise osas\u00bb.<\/p>\n<h1>Ekstreenne minimalism<\/h1>\n<p>\nLinux on puhastatud k\u00f5igest, mis ei ole konteinerite k\u00e4itamiseks vajalik. Selline disain v\u00e4hendab, ettev\u00f5tte s\u00f5nul r\u00fcnnakupinda.<\/p>\n<p>See t\u00e4hendab, et baiss\u00fcsteemi installitakse v\u00e4hem pakette, mis lihtsustab operatsioonis\u00fcsteemi hooldust ja uuendamist ning v\u00e4hendab probleemide tekkimise t\u00f5en\u00e4osust s\u00f5ltuvuste t\u00f5ttu, samuti v\u00e4hendab ressursikasutust. P\u00f5him\u00f5tteliselt t\u00f6\u00f6tab siin k\u00f5ik eraldi konteinerite sees, samas kui baiss\u00fcsteem on peaaegu t\u00fchi.<\/p>\n<p>Amazon on eemaldanud k\u00f5ik kestad ja t\u00f5lgendajad, v\u00e4listades nende kasutamise v\u00f5i kasutajate juhusliku privileegide suurendamise riski. Minimaalsuse ja turvalisuse huvides ei sisalda p\u00f5hifaili keel, SSH-server ega interpreteeritavad keeled nagu Python. Administratiivsed t\u00f6\u00f6riistad on viidud eraldi teeninduskonteinerisse, mis on vaikimisi keelatud.<\/p>\n<p>S\u00fcsteemi haldamiseks on ette n\u00e4htud kaks viisi: API kaudu ja orkestreerimise kaudu.<\/p>\n<p>Pakkemoodulite haldamise asemel, mis uuendab tarkvara \u00fcksikuid komponente, laadib Bottlerocket t\u00e4ieliku failis\u00fcsteemi pildi ja taask\u00e4ivitub sellesse. K\u00e4ivitamish\u00e4da korral tagurdatakse see automaatselt ja t\u00f6\u00f6koormuse eba\u00f5nnestumine v\u00f5ib k\u00e4ivitada tagasip\u00f6\u00f6rdumise k\u00e4sitsi (API kaudu k\u00e4sk).<\/p>\n<p>Raamistik <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/theupdateframework\/specification\/\">TUF<\/a><\/noindex> (The Update Framework) laadib uuendusi piltide p\u00f5hjal alternatiivsetesse v\u00f5i \"lahti\u00fchendatud\" osakondadesse. S\u00fcsteemile on ette n\u00e4htud kaks kettaosa, millest \u00fcks sisaldab aktiivset s\u00fcsteemi ja teisele kopeeritakse uuendus. Selle k\u00e4igus mountitakse juurdeteek ainult lugemisre\u017eiimis, samas kui osa <code>\/etc<\/code> mountitakse RAM-i failis\u00fcsteemi pildina. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/Documentation\/filesystems\/tmpfs.txt\">tmpfs<\/a><\/noindex> ja taastab algse oleku p\u00e4rast taask\u00e4ivitamist. Konfiguratsioonifailide otse muutmine ei <code>\/etc<\/code> ole toetatud: seadete s\u00e4ilitamiseks tuleks kasutada API-d v\u00f5i funktsionaalsust viia eraldi konteineritesse.<\/p>\n<p><img decoding=\"async\" alt=\"V\u00e4lja tuli minimalistlik Linuxi jaotur Bottlerocket konteinerite k\u00e4itamiseks. K\u00f5ige olulisem sellest\" src=\"\/wp-content\/uploads\/2020\/09\/df72a3ad1afefd9ec06b7a58483be268.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>API kaudu uuendamise skeem<\/i><\/p>\n<h1>Ohutus<\/h1>\n<p>\nKonteinerid luuakse Linuxi ega osade mehhanismide abil \u2014 cgroups, nimespordid ja seccomp, ning sundkontrollimiseks kasutatakse t\u00e4iendava isoleerimise s\u00fcsteemi <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SELinuxProject\">SELinux<\/a><\/noindex> \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 &quot;enforcing&quot;.<\/p>\n<p>Vaikimisi on lubatud poliitikad ressursside jagamiseks konteinerite ja tuuma vahel. Binaarfailid on kaitstud lipukestega, et kasutajad v\u00f5i programmid ei saaks neid k\u00e4ivitada. Ja kui keegi p\u00e4\u00e4seb faili s\u00fcsteemi, pakub Bottlerocket t\u00f6\u00f6riista muudatuste kontrollimiseks ja j\u00e4lgimiseks.<\/p>\n<p>Kontrollitud k\u00e4ivitamise re\u017eiim on rakendatud funktsiooni device-mapper-verity abil (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/admin-guide\/device-mapper\/verity.html\">dm-verity<\/a><\/noindex>), mis kontrollib juurepartitsiooni terviklikkust k\u00e4ivitamise ajal. AWS kirjeldab dm-verity't kui \"Linuxi tuuma funktsiooni, mis tagab terviklikkuse kontrollimise, et takistada pahavara k\u00e4ivitamist ops\u00fcsteemis, n\u00e4iteks p\u00f5hisisene tarkvara \u00fcle kirjutamist\".<\/p>\n<p>Samuti on s\u00fcsteemis olemas filter <noindex><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/740157\/\">eBPF<\/a><\/noindex> (laiendatud BPF, <noindex><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/598545\/\">Aleksandr Starovoitovi areng<\/a><\/noindex>), mis v\u00f5imaldab asendada tuumamooduleid ohutumate BPF-programmidega madala taseme s\u00fcsteemitoimingute jaoks.<\/p>\n<p>T\u00e4ideviimise mudel<br \/>\nKasutaja m\u00e4\u00e4rab<br \/>\nKompileerimine<br \/>\nOhutus<br \/>\nVeare\u017eiim<br \/>\nRessurssidele juurdep\u00e4\u00e4s<\/p>\n<p><b>Kasutaja<\/b><br \/>\n\u00fclesanne<br \/>\njah<br \/>\niga<br \/>\nkasutaja \u00f5igused<br \/>\nt\u00e4itmise katkestamine<br \/>\ns\u00fcsteemik\u00f5ne, fault<\/p>\n<p><b>Tuuma<\/b><br \/>\n\u00fclesanne<br \/>\nei<br \/>\nstaatiline<br \/>\nei<br \/>\ntuuma panic<br \/>\notse<\/p>\n<p><b>BPF<\/b><br \/>\ns\u00fcndmus<br \/>\njah<br \/>\nJIT, CO-RE<br \/>\nverifitseerimine, JIT<br \/>\nveateade<br \/>\npiiratud abid<\/p>\n<p>\n<i>BPF erineb tavalisest kasutaja- v\u00f5i tuumataseme koodist, <noindex><a rel=\"nofollow\" href=\"https:\/\/d1.awsstatic.com\/events\/reinvent\/2019\/REPEAT_1_BPF_performance_analysis_at_Netflix_OPN303-R1.pdf\">allikas<\/a><\/noindex><\/i><\/p>\n<p>AWS on teatanud, et Bottlerocket \"rakendab tegevusmudelit, mis suurendab veelgi turvalisust, takistades juurdep\u00e4\u00e4su tootmisserveritele administraATORi \u00f5igustega\" ning \"sobib suurte jaotatud s\u00fcsteemide jaoks, kus iga eraldi hosti \u00fcle kontroll piiratud.\"<\/p>\n<p>S\u00fcsteemiadministraatorite jaoks on ette n\u00e4htud administraatori konteiner. Kuid AWS ei arva, et administraator peab sageli Bottlerocketi sees t\u00f6\u00f6tama: \"Sisenemine eraldi Bottlerocketi instantsi on m\u00f5eldud haruldaste toimingute jaoks: p\u00f5hjalikuks t\u00f5rkeotsinguks ja veaotsinguks,\" \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/blogs\/opensource\/announcing-the-general-availability-of-bottlerocket-an-open-source-linux-distribution-purpose-built-to-run-containers\/\">kirjutavad<\/a><\/noindex> arendajad.<\/p>\n<h1>Rust keel<\/h1>\n<p>\nKernelil t\u00f6\u00f6tav OS-i t\u00f6\u00f6riist on peamiselt kirjutatud Rustis. See keel v\u00e4hendab loomulikult <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/438288\/\">m\u00e4lu ohutusse juurdep\u00e4\u00e4su t\u00f5en\u00e4osust<\/a><\/noindex>, samuti <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/441370\/\">eliminates the race conditions between threads<\/a><\/noindex>.<\/p>\n<p>Vaikimisi koostamisel rakendatakse lippusid <code>--enable-default-pie<\/code> ja <code>--enable-default-ssp<\/code> et lubada t\u00e4itmisfailide aadressi ruumi randomiseerimist (<noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Position-independent_code\">position-independent executable<\/a><\/noindex>, PIE) ja virna \u00fclevoolu kaitset.<\/p>\n<p>C\/C++ paketina lisatakse t\u00e4iendavad lipud <code>-Wall<\/code>, <code>-Werror=format-security<\/code>, <code>-Wp,-D_FORTIFY_SOURCE=2<\/code>, <code>-Wp,-D_GLIBCXX_ASSERTIONS<\/code> ja <code>-fstack-clash-protection<\/code>.<\/p>\n<p>Lisaks Rustile ja C\/C++-le on m\u00f5ned paketid kirjutatud Go keeles.<\/p>\n<h1>AWS teenustega integreerimine<\/h1>\n<p>\nErinevus sarnaste konteinerite operatsioonis\u00fcsteemide seas on see, et Amazon on optimeerinud Bottlerocketi AWS-is t\u00f6\u00f6tamiseks ja teiste AWS teenustega integreerimiseks.<\/p>\n<p>K\u00f5ige populaarsem konteinerite orkestreerija on Kubernetes, mist\u00f5ttu AWS rakendab integratsiooni omaenda Enterprise Kubernetes Service (EKS) teenusega. Orkestreerimist\u00f6\u00f6riistad toimivad eraldi juhtimiskonteineris <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bottlerocket-os\/bottlerocket-control-container\">bottlerocket-control-container<\/a><\/noindex>, mis on vaikimisi sisse l\u00fclitatud ja mida haldab API ja AWS SSM Agent.<\/p>\n<p>Huvitav on vaadata, kas Bottlerocket t\u00f5useb \u00fcles, arvestades, et m\u00f5ned sarnased algatused on minevikus eba\u00f5nnestunud. N\u00e4iteks osutus VMware'i PhotonOS n\u00f5udlusele vastavaks, ja RedHat ostis CoreOS-i ja <noindex><a rel=\"nofollow\" href=\"https:\/\/coreos.com\/os\/eol\/\">sulges projekti<\/a><\/noindex>, mis peeti antud valdkonnas pioneeriks.<\/p>\n<p>Bottlerocketi integreerimine AWS-i teenustega teeb sellest s\u00fcsteemist omamoodi ainulaadse. V\u00f5ib-olla on see peamine p\u00f5hjus, miks m\u00f5ned kasutajad v\u00f5ivad eelistada Bottlerocketit teistele distributsioonidele, nagu CoreOS v\u00f5i Alpine. S\u00fcsteem on algselt projekteeritud EKS-i ja ECS-i jaoks, kuid kordame, et see ei ole tingimata vajalik. Esiteks, Bottlerocketit saab <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bottlerocket-os\/bottlerocket\/blob\/develop\/BUILDING.md\">ise kokku panna<\/a><\/noindex> kasutada n\u00e4iteks hosted-lahendusena. Teiseks, EKS-i ja ECS-i kasutajad s\u00e4ilitavad endiselt v\u00f5imaluse OS-i valimiseks.<\/p>\n<p>Bottlerocketi algkood on avaldatud GitHubis Apache 2.0 litsentsi all. Arendajad reageerivad juba <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/orgs\/bottlerocket-os\/projects\/1\">veaparandustele ja funktsioonide taotlustele<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h4>Reklaami \u00f5igustes<\/h4>\n<p>\n<b>VDSina<\/b> pakub <noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr96\">VDS \u00f6\u00f6p\u00e4evaringses tasus<\/a><\/noindex>. Saate installida mis tahes operatsioonis\u00fcsteemi, sealhulgas oma pildi. Iga server on \u00fchendatud 500 megabiti internetikanaliga ja on tasuta kaitstud DDoS-r\u00fcnnakute eest! <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr96\"><img decoding=\"async\" alt=\"V\u00e4lja tuli minimalistlik Linuxi jaotur Bottlerocket konteinerite k\u00e4itamiseks. K\u00f5ige olulisem sellest\" src=\"\/wp-content\/uploads\/2020\/09\/2a9ea401c77026c05482ed0640ed56e2.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/518290\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-13T17:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-13T17:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47V\u00e4lja on tulnud minimalistlik Linux-distro Bottlerocket konteinerite k\u00e4itamiseks. K\u00f5ige olulisem info selle kohta | ProHoster","description":"Amazon teatas Bottlerocketi l\u00f5ppversiooni v\u00e4ljaandmisest \u2014 spetsialiseerunud distributsioon konteinerite k\u00e4itamiseks ja t\u00f5husaks haldamiseks. Bottlerocket (muide, nii nimetatakse v\u00e4ikesi koduseid rakette suitsupuhujatel) ei ole esimene konteinerite operatsioonis\u00fcsteem, kuid t\u00f5en\u00e4oliselt saavutab see laialdase leviku t\u00e4nu vaikimisi integreerimisele AWS teenustega. Kuigi s\u00fcsteem on suunatud Amazon Cloudile, on avatud l\u00e4htekoodiga.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-13T17:42:49+00:00","article:modified_time":"2020-09-13T17:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94205","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:31:27","updated":"2022-10-03 07:42:47"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=94205"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/94206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=94205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=94205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=94205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}