{"id":72267,"date":"2020-03-03T08:42:20","date_gmt":"2020-03-03T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kratkij-obzor-i-nastrojka-kata-containers"},"modified":"2020-03-03T16:13:53","modified_gmt":"2020-03-03T13:13:53","slug":"kratkij-obzor-i-nastrojka-kata-containers","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers","title":{"rendered":"R\u00f6vid \u00e1ttekint\u00e9s \u00e9s a Kata Containers be\u00e1ll\u00edt\u00e1sa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"R\u00f6vid \u00e1ttekint\u00e9s \u00e9s a Kata Containers be\u00e1ll\u00edt\u00e1sa\" src=\"\/wp-content\/uploads\/2020\/03\/b738fcd40af08167446004e481172a7e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nEbben a cikkben a m\u0171k\u00f6d\u00e9si elvet fogjuk megvizsg\u00e1lni <noindex><a rel=\"nofollow\" href=\"https:\/\/katacontainers.io\/\">Kata Containers<\/a><\/noindex>, valamint gyakorlati r\u00e9szt is bemutatok, amely azokat Dockerhez val\u00f3 csatlakoztat\u00e1sra vonatkozik.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>A Docker \u00e1ltal\u00e1nos probl\u00e9m\u00e1ir\u00f3l \u00e9s a megold\u00e1si lehet\u0151s\u00e9gekr\u0151l m\u00e1r <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/434756\/\">\u00edrva volt<\/a><\/noindex>, ma r\u00f6viden ismertetem a Kata Containers megval\u00f3s\u00edt\u00e1s\u00e1t. A Kata Containers egy biztons\u00e1gos k\u00f6rnyezet (runtime) kont\u00e9nerekhez, amely k\u00f6nny\u00edtett virtu\u00e1lis g\u00e9peken alapul. A haszn\u00e1latuk hasonl\u00f3 a t\u00f6bbi kont\u00e9nerhez, de kieg\u00e9sz\u00edt\u0151, megb\u00edzhat\u00f3bb elszigetel\u00e9st biztos\u00edt a hardvervirtualiz\u00e1ci\u00f3s technol\u00f3gia alkalmaz\u00e1s\u00e1val. A projekt 2017-ben indult, az azonos nev\u0171 k\u00f6z\u00f6ss\u00e9g akkor z\u00e1rta le a legjobb \u00f6tletek egyes\u00edt\u00e9s\u00e9t az Intel Clear Containers \u00e9s a Hyper.sh RunV k\u00f6z\u00f6tt, majd elkezd\u0151d\u00f6tt a k\u00fcl\u00f6nb\u00f6z\u0151 architekt\u00far\u00e1k t\u00e1mogat\u00e1s\u00e1ra ir\u00e1nyul\u00f3 munkafolyamat, bele\u00e9rtve az AMD64, ARM, IBM p- \u00e9s z-sorozatokat. Tov\u00e1bb\u00e1 t\u00e1mogatott a m\u0171k\u00f6d\u00e9s a QEMU \u00e9s Firecracker hipervizorok alatt, \u00e9s van integr\u00e1ci\u00f3 a containerd-vel. A k\u00f3d el\u00e9rhet\u0151 a <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kata-containers\">GitHub<\/a><\/noindex> MIT licenc alatt \u00e1ll.<\/p>\n<p><\/p>\n<h2 id=\"osnovnye-vozmozhnosti\">F\u0151bb lehet\u0151s\u00e9gek<\/h2>\n<p><\/p>\n<ul>\n<li>K\u00fcl\u00f6n kernel haszn\u00e1lata r\u00e9v\u00e9n a h\u00e1l\u00f3zati, mem\u00f3ria- \u00e9s bemeneti-kimeneti m\u0171veletek elszigetel\u00e9se biztos\u00edthat\u00f3, lehet\u0151s\u00e9g van a hardveres elszigetel\u00e9s k\u00e9nyszer\u00edtett alkalmaz\u00e1s\u00e1ra a virtualiz\u00e1ci\u00f3s kiterjeszt\u00e9sek alapj\u00e1n.<\/li>\n<li>Ipari szabv\u00e1nyok t\u00e1mogat\u00e1sa, bele\u00e9rtve az OCI-t (kont\u00e9nerform\u00e1tum), Kubernetes CRI.<\/li>\n<li>Stabil teljes\u00edtm\u00e9ny a hagyom\u00e1nyos Linux kont\u00e9nerek eset\u00e9n, n\u00f6velt elszigetel\u00e9s, amely nem befoly\u00e1solja a hagyom\u00e1nyos virtu\u00e1lis g\u00e9pek teljes\u00edtm\u00e9ny\u00e9t.<\/li>\n<li>Megsz\u0171nik a sz\u00fcks\u00e9glet a kont\u00e9nerek teljes virtu\u00e1lis g\u00e9pek belsej\u00e9ben val\u00f3 futtat\u00e1s\u00e1ra, a szabv\u00e1nyos interf\u00e9szek megk\u00f6nny\u00edtik az integr\u00e1ci\u00f3t \u00e9s a telep\u00edt\u00e9st.<\/li>\n<\/ul>\n<p><\/p>\n<h2 id=\"ustanovka\">Telep\u00edt\u00e9s<\/h2>\n<p><\/p>\n<p>Van <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kata-containers\/documentation\/tree\/master\/install\">t\u00f6bb<\/a><\/noindex> telep\u00edt\u00e9si lehet\u0151s\u00e9g k\u00f6z\u00fcl, a Centos 7 oper\u00e1ci\u00f3s rendszer alap\u00fa telep\u00edt\u00e9st fogom megvizsg\u00e1lni.<br \/>\n<strong>Fontos<\/strong>: a Kata Containers m\u0171k\u00f6d\u00e9se csak hardveren t\u00e1mogatott, a virtualiz\u00e1ci\u00f3s pass-through nem mindig m\u0171k\u00f6dik, szint\u00e9n <strong>sse4.1 t\u00e1mogat\u00e1sra van sz\u00fcks\u00e9g<\/strong> a processzort\u00f3l.<\/p>\n<p><\/p>\n<p>A Kata Containers telep\u00edt\u00e9se meglehet\u0151sen egyszer\u0171:<\/p>\n<p><\/p>\n<p>Telep\u00edtj\u00fck a t\u00e1rol\u00f3k kezel\u00e9s\u00e9hez sz\u00fcks\u00e9ges eszk\u00f6z\u00f6ket:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># yum -y install yum-utils<\/code><\/pre>\n<p><\/p>\n<p>Letiltjuk a Selinuxot (helyesebb lenne konfigur\u00e1lni, de az egyszer\u0171s\u00e9g kedv\u00e9\u00e9rt letiltom):<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># setenforce 0\n# sed -i 's\/^SELINUX=enforcing$\/SELINUX=permissive\/' \/etc\/selinux\/config<\/code><\/pre>\n<p><\/p>\n<p>Hozz\u00e1adjuk a t\u00e1rol\u00f3t, \u00e9s elv\u00e9gezz\u00fck a telep\u00edt\u00e9st<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># source \/etc\/os-release\n# ARCH=$(arch)\n# BRANCH=&quot;${BRANCH:-stable-1.10}&quot;\n# yum-config-manager --add-repo &quot;http:\/\/download.opensuse.org\/repositories\/home:\/katacontainers:\/releases:\/${ARCH}:\/${BRANCH}\/CentOS_${VERSION_ID}\/home:katacontainers:releases:${ARCH}:${BRANCH}.repo&quot;\n# yum -y install kata-runtime kata-proxy kata-shim<\/code><\/pre>\n<p><\/p>\n<h2 id=\"nastroyka\">Be\u00e1ll\u00edt\u00e1s<\/h2>\n<p><\/p>\n<p>A Dockerrel val\u00f3 egy\u00fcttm\u0171k\u00f6d\u00e9shez v\u00e9gzem a konfigur\u00e1l\u00e1st, a telep\u00edt\u00e9se tipikus, ezt nem r\u00e9szletezem:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># rpm -qa | grep docker\ndocker-ce-cli-19.03.6-3.el7.x86_64\ndocker-ce-19.03.6-3.el7.x86_64\n# docker -v\nDocker version 19.03.6, build 369ce74a3c<\/code><\/pre>\n<p><\/p>\n<p>M\u00f3dos\u00edtjuk a daemon.json f\u00e1jlt:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># cat &lt;&lt;EOF &gt; \/etc\/docker\/daemon.json\n{\n  &quot;default-runtime&quot;: &quot;kata-runtime&quot;,\n  &quot;runtimes&quot;: {\n    &quot;kata-runtime&quot;: {\n      &quot;path&quot;: &quot;\/usr\/bin\/kata-runtime&quot;\n    }\n  }\n}\nEOF<\/code><\/pre>\n<p><\/p>\n<p>\u00dajraind\u00edtjuk a dockert:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># service docker restart<\/code><\/pre>\n<p><\/p>\n<h2 id=\"proverka-rabotosposobnosti\">Szervizellen\u0151rz\u00e9s<\/h2>\n<p><\/p>\n<p>Ha a kont\u00e9nert a Docker \u00fajraind\u00edt\u00e1sa el\u0151tt ind\u00edtjuk, l\u00e1thatjuk, hogy az uname a f\u0151 rendszer kernel verzi\u00f3j\u00e1t adja vissza:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># docker run busybox uname -a\nLinux 19efd7188d06 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64 GNU\/Linux<\/code><\/pre>\n<p><\/p>\n<p>Az \u00fajraind\u00edt\u00e1s ut\u00e1n a kernel verzi\u00f3 \u00edgy n\u00e9z ki:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># docker run busybox uname -a\nLinux 9dd1f30fe9d4 4.19.86-5.container #1 SMP Sat Feb 22 01:53:14 UTC 2020 x86_64 GNU\/Linux<\/code><\/pre>\n<p>\n<b class=\"spoiler_title\">Tov\u00e1bbi parancsok!<\/b><\/p>\n<pre><code class=\"plaintext\"># time docker run busybox mount\nkataShared on \/ type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nproc on \/proc type proc (rw,nosuid,nodev,noexec,relatime)\ntmpfs on \/dev type tmpfs (rw,nosuid,size=65536k,mode=755)\ndevpts on \/dev\/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=666)\nsysfs on \/sys type sysfs (ro,nosuid,nodev,noexec,relatime)\ntmpfs on \/sys\/fs\/cgroup type tmpfs (ro,nosuid,nodev,noexec,relatime,mode=755)\ncgroup on \/sys\/fs\/cgroup\/systemd type cgroup (ro,nosuid,nodev,noexec,relatime,xattr,name=systemd)\ncgroup on \/sys\/fs\/cgroup\/cpu,cpuacct type cgroup (ro,nosuid,nodev,noexec,relatime,cpu,cpuacct)\ncgroup on \/sys\/fs\/cgroup\/blkio type cgroup (ro,nosuid,nodev,noexec,relatime,blkio)\ncgroup on \/sys\/fs\/cgroup\/memory type cgroup (ro,nosuid,nodev,noexec,relatime,memory)\ncgroup on \/sys\/fs\/cgroup\/devices type cgroup (ro,nosuid,nodev,noexec,relatime,devices)\ncgroup on \/sys\/fs\/cgroup\/perf_event type cgroup (ro,nosuid,nodev,noexec,relatime,perf_event)\ncgroup on \/sys\/fs\/cgroup\/net_cls,net_prio type cgroup (ro,nosuid,nodev,noexec,relatime,net_cls,net_prio)\ncgroup on \/sys\/fs\/cgroup\/freezer type cgroup (ro,nosuid,nodev,noexec,relatime,freezer)\ncgroup on \/sys\/fs\/cgroup\/pids type cgroup (ro,nosuid,nodev,noexec,relatime,pids)\ncgroup on \/sys\/fs\/cgroup\/cpuset type cgroup (ro,nosuid,nodev,noexec,relatime,cpuset)\nmqueue on \/dev\/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)\nshm on \/dev\/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=65536k)\nkataShared on \/etc\/resolv.conf type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nkataShared on \/etc\/hostname type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nkataShared on \/etc\/hosts type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nproc on \/proc\/bus type proc (ro,relatime)\nproc on \/proc\/fs type proc (ro,relatime)\nproc on \/proc\/irq type proc (ro,relatime)\nproc on \/proc\/sys type proc (ro,relatime)\ntmpfs on \/proc\/acpi type tmpfs (ro,relatime)\ntmpfs on \/proc\/timer_list type tmpfs (rw,nosuid,size=65536k,mode=755)\ntmpfs on \/sys\/firmware type tmpfs (ro,relatime)\n\nreal    0m2.381s\nuser    0m0.066s\nsys 0m0.039s<\/code><\/pre>\n<p><\/p>\n<pre><code class=\"plaintext\"># time docker run busybox free -m\n              total        used        free      shared  buff\/cache   available\nMem:           1993          30        1962           0           1        1946\nSwap:             0           0           0\n\nreal    0m3.297s\nuser    0m0.086s\nsys 0m0.050s<\/code><\/pre>\n<p><\/p>\n<h2 id=\"bystroe-nagruzochnoe-testirovanie\">Gyors terhel\u00e9ses tesztel\u00e9s<\/h2>\n<p><\/p>\n<p>A virtualiz\u00e1ci\u00f3val j\u00e1r\u00f3 vesztes\u00e9gek \u00e9rt\u00e9kel\u00e9s\u00e9re \u2014 sysbench-et ind\u00edtok, mint f\u0151 p\u00e9ld\u00e1k <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/ljishen\/sysbench\">ezt a v\u00e1ltozatot v\u00e1lasztom<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h3 id=\"zapusk-sysbench-s-ispolzovaniem-dockercontainerd\">Sysbench ind\u00edt\u00e1sa Docker+containerd haszn\u00e1lat\u00e1val<\/h3>\n<p>\n<b class=\"spoiler_title\">Processzor teszt<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: t\u00f6bb sz\u00e1las rendszer\u00e9rt\u00e9kel\u0151 benchmark\n\nA teszt futtat\u00e1sa a k\u00f6vetkez\u0151 be\u00e1ll\u00edt\u00e1sokkal:\nSz\u00e1lak sz\u00e1ma: 1\nV\u00e9letlensz\u00e1m-gener\u00e1tor inicializ\u00e1l\u00e1sa a jelenlegi id\u0151b\u0151l\n\nPr\u00edmsz\u00e1mok hat\u00e1ra: 20000\n\nMunkafolyamatok inicializ\u00e1l\u00e1sa...\n\nSz\u00e1lak ind\u00edtva!\n\n\u00c1ltal\u00e1nos statisztik\u00e1k:\n    \u00f6sszes id\u0151:                          36.7335s\n    esem\u00e9nyek \u00f6sszes sz\u00e1ma:              10000\n    esem\u00e9ny v\u00e9grehajt\u00e1s\u00e1hoz sz\u00fcks\u00e9ges \u00f6sszes id\u0151: 36.7173s\n    v\u00e1laszid\u0151:\n         min:                                  3.43ms\n         avg:                                  3.67ms\n         max:                                  8.34ms\n         k\u00f6r\u00fclbel\u00fcl  95. percentilis:               3.79ms\n\nSz\u00e1lak m\u00e9lt\u00e1nyoss\u00e1ga:\n    esem\u00e9nyek (avg\/stddev):           10000.0000\/0.00\n    v\u00e9grehajt\u00e1si id\u0151 (avg\/stddev):   36.7173\/0.00<\/code><\/pre>\n<p>\n<b class=\"spoiler_title\">Mem\u00f3ria teszt<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: t\u00f6bb sz\u00e1las rendszer\u00e9rt\u00e9kel\u0151 benchmark\n\nA teszt futtat\u00e1sa a k\u00f6vetkez\u0151 be\u00e1ll\u00edt\u00e1sokkal:\nSz\u00e1lak sz\u00e1ma: 1\nV\u00e9letlensz\u00e1m-gener\u00e1tor inicializ\u00e1l\u00e1sa a jelenlegi id\u0151b\u0151l\n\nMunkafolyamatok inicializ\u00e1l\u00e1sa...\n\nSz\u00e1lak ind\u00edtva!\n\nV\u00e9grehajtott m\u0171veletek: 104857600 (2172673.64 ops\/sec)\n\n102400.00 MiB tov\u00e1bb\u00edtva (2121.75 MiB\/sec)\n\n\u00c1ltal\u00e1nos statisztik\u00e1k:\n    \u00f6sszes id\u0151:                          48.2620s\n    esem\u00e9nyek \u00f6sszes sz\u00e1ma:              104857600\n    esem\u00e9ny v\u00e9grehajt\u00e1s\u00e1hoz sz\u00fcks\u00e9ges \u00f6sszes id\u0151: 17.4161s\n    v\u00e1laszid\u0151:\n         min:                                  0.00ms\n         avg:                                  0.00ms\n         max:                                  0.17ms\n         k\u00f6r\u00fclbel\u00fcl  95. percentilis:               0.00ms\n\nSz\u00e1lak m\u00e9lt\u00e1nyoss\u00e1ga:\n    esem\u00e9nyek (avg\/stddev):           104857600.0000\/0.00\n    v\u00e9grehajt\u00e1si id\u0151 (avg\/stddev):   17.4161\/0.00<\/code><\/pre>\n<p><\/p>\n<h3 id=\"zapusk-sysbench-s-ispolzovaniem-dockerkata-containers\">Sysbench ind\u00edt\u00e1sa Docker+Kata Containers haszn\u00e1lat\u00e1val<\/h3>\n<p>\n<b class=\"spoiler_title\">Processzor teszt<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: t\u00f6bb sz\u00e1las rendszer\u00e9rt\u00e9kel\u0151 benchmark\n\nA teszt futtat\u00e1sa a k\u00f6vetkez\u0151 be\u00e1ll\u00edt\u00e1sokkal:\nSz\u00e1lak sz\u00e1ma: 1\nV\u00e9letlensz\u00e1m-gener\u00e1tor inicializ\u00e1l\u00e1sa a jelenlegi id\u0151b\u0151l\n\nPr\u00edmsz\u00e1mok hat\u00e1ra: 20000\n\nMunkafolyamatok inicializ\u00e1l\u00e1sa...\n\nSz\u00e1lak ind\u00edtva!\n\n\u00c1ltal\u00e1nos statisztik\u00e1k:\n    \u00f6sszes id\u0151:                          36.5747s\n    esem\u00e9nyek \u00f6sszes sz\u00e1ma:              10000\n    esem\u00e9ny v\u00e9grehajt\u00e1s\u00e1hoz sz\u00fcks\u00e9ges \u00f6sszes id\u0151: 36.5594s\n    v\u00e1laszid\u0151:\n         min:                                  3.43ms\n         avg:                                  3.66ms\n         max:                                  4.93ms\n         k\u00f6r\u00fclbel\u00fcl  95. percentilis:               3.77ms\n\nSz\u00e1lak m\u00e9lt\u00e1nyoss\u00e1ga:\n    esem\u00e9nyek (avg\/stddev):           10000.0000\/0.00\n    v\u00e9grehajt\u00e1si id\u0151 (avg\/stddev):   36.5594\/0.00<\/code><\/pre>\n<p>\n<b class=\"spoiler_title\">Mem\u00f3ria teszt<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: t\u00f6bb sz\u00e1las rendszer\u00e9rt\u00e9kel\u0151 benchmark\n\nA teszt futtat\u00e1sa a k\u00f6vetkez\u0151 be\u00e1ll\u00edt\u00e1sokkal:\nSz\u00e1lak sz\u00e1ma: 1\nV\u00e9letlensz\u00e1m-gener\u00e1tor inicializ\u00e1l\u00e1sa a jelenlegi id\u0151b\u0151l\n\nMunkafolyamatok inicializ\u00e1l\u00e1sa...\n\nSz\u00e1lak ind\u00edtva!\n\nV\u00e9grehajtott m\u0171veletek: 104857600 (2450366.94 ops\/sec)\n\n102400.00 MiB tov\u00e1bb\u00edtva (2392.94 MiB\/sec)\n\n\u00c1ltal\u00e1nos statisztik\u00e1k:\n    \u00f6sszes id\u0151:                          42.7926s\n    esem\u00e9nyek \u00f6sszes sz\u00e1ma:              104857600\n    esem\u00e9ny v\u00e9grehajt\u00e1s\u00e1hoz sz\u00fcks\u00e9ges \u00f6sszes id\u0151: 16.1512s\n    v\u00e1laszid\u0151:\n         min:                                  0.00ms\n         avg:                                  0.00ms\n         max:                                  0.43ms\n         k\u00f6r\u00fclbel\u00fcl  95. percentilis:               0.00ms\n\nSz\u00e1lak m\u00e9lt\u00e1nyoss\u00e1ga:\n    esem\u00e9nyek (avg\/stddev):           104857600.0000\/0.00\n    v\u00e9grehajt\u00e1si id\u0151 (avg\/stddev):   16.1512\/0.00<\/code><\/pre>\n<p><\/p>\n<p>L\u00e9nyeg\u00e9ben a helyzet m\u00e1r vil\u00e1gos, de optimaliz\u00e1ltabb, ha a teszteket t\u00f6bbsz\u00f6r futtatjuk, elt\u00e1vol\u00edtva az elt\u00e9r\u00e9seket \u00e9s \u00e1tlagolva az eredm\u00e9nyeket, ez\u00e9rt egyel\u0151re nem v\u00e9gzek t\u00f6bb tesztet.<\/p>\n<p><\/p>\n<h2 id=\"vyvody\">K\u00f6vetkeztet\u00e9sek<\/h2>\n<p><\/p>\n<p>Annak ellen\u00e9re, hogy az ilyen kont\u00e9nerek ind\u00edt\u00e1sa k\u00f6r\u00fclbel\u00fcl \u00f6tsz\u00f6r-t\u00edzszer t\u00f6bb id\u0151t vesz ig\u00e9nybe (tipikus ind\u00edt\u00e1si id\u0151 hasonl\u00f3 parancsok eset\u00e9n containerd haszn\u00e1latakor - kevesebb mint egy harmadik m\u00e1sodperc) - m\u00e9g mindig el\u00e9g gyorsan m\u0171k\u00f6dnek, ha az abszol\u00fat ind\u00edt\u00e1si id\u0151t n\u00e9zz\u00fck (feljebb p\u00e9ld\u00e1k tal\u00e1lhat\u00f3k, a parancsok \u00e1tlagosan h\u00e1rom m\u00e1sodperc alatt futnak). A CPU \u00e9s RAM gyors teszt legjobb eredm\u00e9nyei pedig gyakorlatilag azonos eredm\u00e9nyeket mutatnak, ami nem lehet m\u00e1s, mint \u00f6r\u00f6mteli, k\u00fcl\u00f6n\u00f6sen figyelembe v\u00e9ve, hogy az elszigetel\u00e9st egy j\u00f3l bev\u00e1lt mechanizmus, mint a kvm biztos\u00edtja.<\/p>\n<p><\/p>\n<h2 id=\"anons\">Bejelent\u00e9s<\/h2>\n<p><\/p>\n<p>Ez egy \u00e1ttekint\u0151 cikk, de lehet\u0151s\u00e9get ad az alternat\u00edv futtat\u00e1si k\u00f6rnyezetek megismer\u00e9s\u00e9re. Sok alkalmaz\u00e1si ter\u00fclet nincs lefedve, p\u00e9ld\u00e1ul a cikkben le van \u00edrva, hogy a Kubernetes ind\u00edthat\u00f3 a Kata Containers felett. Tov\u00e1bb\u00e1, t\u00f6bb tesztet is lehet v\u00e9gezni, amelyek a biztons\u00e1gi probl\u00e9m\u00e1k keres\u00e9s\u00e9re, megszor\u00edt\u00e1sok bevezet\u00e9s\u00e9re \u00e9s m\u00e1s \u00e9rdekes dolgokra \u00f6sszpontos\u00edtanak.<\/p>\n<p><\/p>\n<p>K\u00e9rem, hogy mindenki, aki ide\u00e9rt, vegyen r\u00e9szt a szavaz\u00e1sban, amely a j\u00f6v\u0151beli publik\u00e1ci\u00f3k t\u00e9m\u00e1j\u00e1t fogja meghat\u00e1rozni.<\/p>\n<p class=\"for_users_only_msg\">Csak a regisztr\u00e1lt felhaszn\u00e1l\u00f3k vehetnek r\u00e9szt a szavaz\u00e1son. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">K\u00e9rem, jelentkezzen be.<\/a><\/noindex>, k\u00e9rem.<\/p>\n<h2 class=\"default-block__polling-title\">\u00c9rdemes volna tov\u00e1bb publik\u00e1lni a Kata Containers-r\u0151l sz\u00f3l\u00f3 cikkeket?<\/h2>\n<ul class=\"poll-result\">\n<li class=\"poll-result__item\">\n<p>                <strong class=\"poll-result__data-percent  poll-result__data-percent_winner\">80,0%<\/strong>Igen, \u00edrj m\u00e9g!28<\/p>\n<\/li>\n<li class=\"poll-result__item\">\n<p>                <strong class=\"poll-result__data-percent\">20,0%<\/strong>Nem, nem \u00e9rdemes\u20267<\/p>\n<\/li>\n<\/ul>\n<p>    35 felhaszn\u00e1l\u00f3 szavazott. 7 felhaszn\u00e1l\u00f3 tart\u00f3zkodott.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/southbridge\/blog\/489940\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b Kata Containers, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0441 \u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043a Docker. \u041f\u0440\u043e \u043e\u0431\u0449\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 Docker \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 \u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e, \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u043a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0448\u0443 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043e\u0442 Kata Containers. Kata Containers \u2014 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (runtime) \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u043d\u0438\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72268,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72267","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0440\u0430\u0442\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Kata Containers | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-03T05:42:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:13:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47R\u00f6vid \u00e1ttekint\u00e9s \u00e9s be\u00e1ll\u00edt\u00e1s a Kata Containers-r\u0151l | ProHoster","description":"Ebben a cikkben a m\u0171k\u00f6d\u00e9si elvet fogjuk \u00e1ttekinteni.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0430\u0442\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Kata Containers | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b.","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-03T05:42:20+00:00","article:modified_time":"2020-03-03T13:13:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72267","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:47:23","updated":"2022-09-30 10:53:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/72267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=72267"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/72267\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/72268"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=72267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=72267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=72267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}