{"id":99456,"date":"2021-03-17T10:22:52","date_gmt":"2021-03-17T08:22:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail"},"modified":"2021-03-17T10:22:52","modified_gmt":"2021-03-17T08:22:52","slug":"runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","title":{"rendered":"Runj \u2014 strumento compatibile con OCI per la gestione dei contenitori basato su FreeBSD jail","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Samuel Karp, ingegnere di Amazon che lavora allo sviluppo della distribuzione Linux Bottlerocket e delle tecnologie di isolamento dei contenitori per AWS, sta sviluppando un nuovo runtime runj basato su ambienti jail di FreeBSD per garantire l'esecuzione isolata dei contenitori conformi alla specifica OCI (Open Container Initiative). Il progetto \u00e8 posizionato come sperimentale, in fase di sviluppo nel tempo libero e attualmente in fase prototipale. Il codice \u00e8 scritto in Go e distribuito sotto licenza BSD. <\/p>\n

Una volta raggiunto un livello adeguato di sviluppo, il progetto potrebbe arrivare a un punto in cui runj pu\u00f2 sostituire il runtime standard nei sistemi Docker e Kubernetes, utilizzando FreeBSD al posto di Linux per l'esecuzione dei contenitori. Attualmente, le funzionalit\u00e0 del runtime OCI implementano comandi per la creazione, la rimozione, l'avvio, l'arresto forzato e la valutazione dello stato dei contenitori. Il contenuto del contenitore \u00e8 creato sulla base di un ambiente standard o limitato di FreeBSD. <\/p>\n

Poich\u00e9 la specifica OCI attualmente non supporta FreeBSD, il progetto ha sviluppato una serie di parametri aggiuntivi relativi alla configurazione delle jail e di FreeBSD, che si prevede di presentare per l'inclusione nella specifica principale di OCI. Per gestire le jail, vengono utilizzati gli strumenti jail, jls, jexec, kill e ps disponibili in FreeBSD, senza chiamare direttamente le syscall. Tra i piani futuri c'\u00e8 l'aggiunta del supporto per la gestione delle limitazioni delle risorse tramite l'interfaccia RCTL del kernel. <\/p>\n

Oltre al proprio runtime, nel repository del progetto \u00e8 in fase di sviluppo anche un'interfaccia sperimentale da utilizzare con il runtime containerd (usato in Docker), modificato per supportare FreeBSD. Per convertire il rootfs di FreeBSD in un'immagine di contenitore compatibile con OCI, \u00e8 disponibile un'utility speciale. Successivamente, l'immagine creata pu\u00f2 essere importata in containerd.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime runj \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 OCI (Open Container Initiative). \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043e\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0440\u0435\u043c\u044f \u0438 \u043f\u043e\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99456","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Runj \u2014 strumento compatibile con OCI per la gestione dei contenitori basato su FreeBSD jail | ProHoster","description":"Samuel Karp, ingegnere di Amazon che lavora allo sviluppo della distribuzione Linux Bottlerocket e delle tecnologie di isolamento dei contenitori per AWS, sta sviluppando un nuovo runtime basato su ambienti jail di FreeBSD.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Runj \u2014 OCI-\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 FreeBSD jail | ProHoster","og:description":"\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-17T08:22:52+00:00","article:modified_time":"2021-03-17T08:22:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99456","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-17 08:25:25","updated":"2022-09-30 19:17:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=99456"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/99456\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=99456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=99456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=99456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}