{"id":99456,"date":"2021-03-17T10:22:52","date_gmt":"2021-03-17T08:22:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail"},"modified":"2021-03-17T10:22:52","modified_gmt":"2021-03-17T08:22:52","slug":"runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","title":{"rendered":"Runj \u2014 outil compatible OCI pour la gestion de conteneurs bas\u00e9 sur FreeBSD jail","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Samuel Karp, ing\u00e9nieur chez Amazon, sp\u00e9cialis\u00e9 dans le d\u00e9veloppement de la distribution Linux Bottlerocket et des technologies d'isolation des conteneurs pour AWS, d\u00e9veloppe un nouveau runtime runj bas\u00e9 sur des environnements jail de FreeBSD pour assurer le lancement isol\u00e9 de conteneurs conformes \u00e0 la sp\u00e9cification OCI (Open Container Initiative). Ce projet est positionn\u00e9 comme exp\u00e9rimental, d\u00e9velopp\u00e9 lors de temps libre en dehors de son travail principal et est actuellement \u00e0 l'\u00e9tat de prototype. Le code est \u00e9crit en Go et distribu\u00e9 sous licence BSD. <\/p>\n

Une fois que le d\u00e9veloppement atteindra un niveau satisfaisant, le projet pourrait \u00e9voluer vers une solution permettant d'utiliser runj pour remplacer le runtime par d\u00e9faut dans les syst\u00e8mes Docker et Kubernetes, en utilisant FreeBSD pour ex\u00e9cuter des conteneurs au lieu de Linux. \u00c0 partir du runtime OCI, des commandes pour cr\u00e9er, supprimer, lancer, forcer l'arr\u00eat et \u00e9valuer l'\u00e9tat des conteneurs sont actuellement mises en \u0153uvre. Le contenu du conteneur est cr\u00e9\u00e9 \u00e0 partir d'un environnement standard ou r\u00e9duit de FreeBSD. <\/p>\n

\u00c9tant donn\u00e9 que la sp\u00e9cification OCI ne prend pas encore en charge FreeBSD, un certain nombre de param\u00e8tres suppl\u00e9mentaires li\u00e9s \u00e0 la configuration de jail et de FreeBSD ont \u00e9t\u00e9 d\u00e9velopp\u00e9s dans le cadre du projet, qui seront sugg\u00e9r\u00e9s pour inclusion dans la sp\u00e9cification principale d'OCI. Pour g\u00e9rer les jails, les utilitaires jail, jls, jexec, kill et ps de FreeBSD sont utilis\u00e9s, sans appeler directement aux appels syst\u00e8me. Parmi les projets futurs, on note l'ajout de la gestion de la limitation des ressources via l'interface RCTL du noyau. <\/p>\n

En plus de son propre runtime, le d\u00e9p\u00f4t du projet d\u00e9veloppe \u00e9galement une couche exp\u00e9rimentale \u00e0 utiliser avec le runtime containerd (utilis\u00e9 dans Docker), modifi\u00e9e pour prendre en charge FreeBSD. Pour convertir le rootfs de FreeBSD en une image de conteneur compatible OCI, un utilitaire sp\u00e9cial est propos\u00e9. Par la suite, l'image cr\u00e9\u00e9e pourra \u00eatre import\u00e9e dans containerd.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime runj \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 OCI (Open Container Initiative). \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043e\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0440\u0435\u043c\u044f \u0438 \u043f\u043e\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99456","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Runj \u2014 Outil compatible OCI pour la gestion des conteneurs sur la base de jail FreeBSD | ProHoster","description":"Samuel Karp, ing\u00e9nieur chez Amazon, sp\u00e9cialis\u00e9 dans le d\u00e9veloppement de la distribution Linux Bottlerocket et des technologies d'isolation des conteneurs pour AWS, d\u00e9veloppe un nouveau runtime bas\u00e9 sur des environnements jail de FreeBSD.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Runj \u2014 OCI-\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 FreeBSD jail | ProHoster","og:description":"\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-17T08:22:52+00:00","article:modified_time":"2021-03-17T08:22:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99456","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-17 08:25:25","updated":"2022-09-30 19:17:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=99456"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99456\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=99456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=99456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=99456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}