{"id":147713,"date":"2025-11-08T17:11:54","date_gmt":"2025-11-08T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-linux-containers-predstavil-atomarno-obnovlyaemyj-distributiv-incusos"},"modified":"2025-11-08T17:11:54","modified_gmt":"2025-11-08T15:11:55","slug":"proekt-linux-containers-predstavil-atomarno-obnovlyaemyj-distributiv-incusos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-linux-containers-predstavil-atomarno-obnovlyaemyj-distributiv-incusos","title":{"rendered":"A Linux Containers projekt bemutatta az atomikusan friss\u00edthet\u0151 IncusOS disztrib\u00faci\u00f3t.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

St\u00e9phane Graber, a Linux Containers project leader, one of the creators of the LXC toolkit, a member of the Ubuntu technical governing board, and a participant in teams responsible for the release of Ubuntu versions, has introduced a new Linux distribution called IncusOS. IncusOS provides an atomically updatable system image for creating servers, which are centrally managed using the Incus toolkit (a fork of LXD). The distribution is developed under the auspices of the Linux Containers project, which is responsible for the development of the LXC and Incus tools. The project's developments are written in Go and are distributed under the Apache 2.0 license. <\/p>\n

The system images are available for x86_64 and ARM64 architectures, and are based on a stripped-down environment of Debian 13 and a Linux kernel from the Zabbly repository, which forms packages with 'vanilla' kernel versions for Debian and Ubuntu, supplemented with patches and configuration changes to optimize the launch of containers in an environment based on the Incus toolkit. The file system used is ZFS. <\/p>\n

Builds are created using the mkosi tool, developed by Lennart Poettering. The base system environment is mounted in read-only mode. Additional applications are installed using the systemd-sysext utility, which allows distributing applications in the form of system extension images, the contents of which overlay the hierarchy \/usr\/ using OverlayFS. Backup and restoration of the main system settings and individual application data are supported, as well as a factory reset for the entire OS or selected applications. <\/p>\n

To update the system, the systemd-sysupdate component is used, which employs an atomic partition replacement mechanism \u2014 two independent partitions are present, one of which contains the working system, while the other is where the latest update is installed, after which the partitions are swapped. To ensure the integrity of the boot environment, loading is done using UEFI Secure Boot and full disk encryption (LUKS) with storage of decryption key information in a TPM 2.0 (Trusted Platform Module). <\/p>\n

A rendszer k\u00f6rnyezete minimaliz\u00e1lva van, \u00e9s csak az Incus futtat\u00e1s\u00e1hoz sz\u00fcks\u00e9ges elemeket tartalmaz. A k\u00f6rnyezetben nincs parancssori fel\u00fclet \u00e9s hagyom\u00e1nyos lehet\u0151s\u00e9gek a parancssoros vez\u00e9rl\u00e9shez vagy SSH-n kereszt\u00fcli t\u00e1voli csatlakoz\u00e1shoz. Ehelyett minden vez\u00e9rl\u00e9si \u00e9s be\u00e1ll\u00edt\u00e1si m\u0171veletet kiz\u00e1r\u00f3lag az Incus rendszer REST API-j\u00e1n kereszt\u00fcl v\u00e9geznek el, \u00fcgyf\u00e9l TLS tan\u00fas\u00edtv\u00e1ny authentik\u00e1ci\u00f3val vagy OIDC (OpenID Connect) seg\u00edts\u00e9g\u00e9vel. Minden szerver k\u00f6zpontos\u00edtottan kezelhet\u0151 a webes Operations Center fel\u00fcleten vagy az Incus CLI fel\u00fcleten. Kont\u00e9nerek \u00e9s virtu\u00e1lis g\u00e9pek \u00e1tvitel\u00e9re m\u00e1s rendszerekb\u0151l, mint p\u00e9ld\u00e1ul VMware vCenter, a Migration Manager \u00e1ll rendelkez\u00e9sre.

\"A<\/center> <\/p>\n

A bootolhat\u00f3 k\u00e9pet online gener\u00e1tor seg\u00edts\u00e9g\u00e9vel k\u00e9sz\u00edtheti el, amely lehet\u0151v\u00e9 teszi a k\u00e9p el\u0151k\u00e9sz\u00edt\u00e9s\u00e9t a megadott param\u00e9terek \u00e9s a seed-arch\u00edvum konfigur\u00e1ci\u00f3i alapj\u00e1n, mint p\u00e9ld\u00e1ul TLS-tan\u00fas\u00edtv\u00e1ny<\/a> for client access, the block device identifier for installation and network configuration (by default, the network is configured via DHCPv4 or SLAAC (Stateless Address Autoconfiguration)). Interactive installation mode is not supported \u2014 all parameters for installation and initial configuration are defined through a built-in configuration block, passed during the first boot. The installation of the IncusOS image is supported both on bare metal and in virtual machines managed by the libvirt, Incus, Proxmox, VirtualBox, and VMware platforms. <\/p>\n

T\u00e1rhelyhez kapcsol\u00f3d\u00f3 lehet\u0151s\u00e9gek: <\/p>\n