{"id":94205,"date":"2020-09-13T19:42:49","date_gmt":"2020-09-13T17:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom"},"modified":"2020-09-13T19:42:49","modified_gmt":"2020-09-13T17:42:49","slug":"vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","title":{"rendered":"A ap\u0103rut o distribu\u021bie Linux minimalist\u0103 Bottlerocket pentru rularea containerelor. Tot ce trebuie s\u0103 \u0219ti\u021bi despre ea.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"A
\n
\nCompania Amazon a anun\u021bat<\/a><\/noindex> despre lansarea final\u0103 Bottlerocket<\/a><\/noindex> \u2014 o distribu\u021bie specializat\u0103 pentru rularea containerelor \u0219i gestionarea eficient\u0103 a acestora.<\/p>\n

Bottlerocket (de altfel, a\u0219a se numesc rachetele mici f\u0103cute acas\u0103 pe baz\u0103 de pulbere) \u2014 nu este primul sistem de operare pentru containere, dar este foarte posibil s\u0103 ob\u021bin\u0103 o popularitate larg\u0103 datorit\u0103 integr\u0103rii sale implicite cu serviciile AWS. De\u0219i sistemul este orientat c\u0103tre cloud-ul Amazon, codul surs\u0103 deschis permite construirea acestuia oriunde: local pe un server, pe Raspberry Pi, \u00een orice cloud concurent \u0219i chiar \u00eentr-un mediu f\u0103r\u0103 containere.<\/p>\n

Este o \u00eenlocuire demn\u0103 pentru distribu\u021bia CoreOS, pe care Red Hat a \u00eengropat-o.
\n<\/a><\/noindex>
\n\u00cen general, divizia Amazon Web Services are deja Amazon Linux, care a fost recent lansat \u00een a doua versiune: aceasta este o distribu\u021bie de uz general, care poate fi rulat\u0103 \u00eentr-un container Docker sau cu hipervizoare Linux KVM, Microsoft Hyper-V \u0219i VMware ESXi. A fost optimizat\u0103 pentru a func\u021biona \u00een cloud-ul AWS, dar odat\u0103 cu lansarea Bottlerocket, tuturor li se recomand\u0103 s\u0103 fac\u0103 upgrade la noul sistem, care este mai sigur, modern \u0219i consum\u0103 mai pu\u021bine resurse.<\/p>\n

AWS a anun\u021bat Bottlerocket \u00een martie 2020<\/a><\/noindex>. A recunoscut imediat c\u0103 nu este primul \u201eLinux pentru containere\u201d, men\u021bion\u00e2nd ca surse de inspira\u021bie CoreOS, Rancher OS \u0219i Project Atomic. Dezvoltatorii au scris c\u0103 sistemul de operare este \u201erezultatul lec\u021biilor pe care le-am \u00eenv\u0103\u021bat \u00een timpul lucrului \u00een servicii de produc\u021bie la scar\u0103 Amazon \u0219i \u021bin\u00e2nd cont de experien\u021ba pe care am dob\u00e2ndit-o \u00een ultimii \u0219ase ani despre cum s\u0103 rul\u0103m containere\u201d.<\/p>\n

Minimalism extrem<\/h1>\n

\nLinux-ul este cur\u0103\u021bat de tot ce nu este necesar pentru rularea containerelor. Acest design, potrivit companiei, reduce suprafa\u021ba de atac.<\/p>\n

Aceasta \u00eenseamn\u0103 c\u0103 \u00een sistemul de baz\u0103 sunt instalate mai pu\u021bine pachete, ceea ce simplific\u0103 \u00eentre\u021binerea \u0219i actualizarea sistemului de operare, \u0219i reduce probabilitatea apari\u021biei problemelor din cauza dependen\u021belor, reduc\u00e2nd utilizarea resurselor. \u00cen principiu, totul func\u021bioneaz\u0103 \u00een interiorul unor containere separate, iar sistemul de baz\u0103 este practic gol.<\/p>\n

Amazon a eliminat, de asemenea, toate shell-urile \u0219i interpretoarele, elimin\u00e2nd riscul utiliz\u0103rii lor sau al cre\u0219terii accidentale a privilegiilor de c\u0103tre utilizatori. \u00cen imaginea de baz\u0103, din motive de minimalism \u0219i securitate, lipsesc shell-ul de comand\u0103, serverul SSH \u0219i limbajele interpretate precum Python. Instrumentele pentru administratori sunt scoase \u00eentr-un container de service separat, care este dezactivat implicit.<\/p>\n

Gestionarea sistemului este prev\u0103zut\u0103 \u00een dou\u0103 moduri: prin API \u0219i orchestrare.<\/p>\n

\u00cen loc de un manager de pachete care actualizeaz\u0103 p\u0103r\u021bi individuale ale software-ului, Bottlerocket descarc\u0103 o imagine complet\u0103 a sistemului de fi\u0219iere \u0219i reporne\u0219te \u00een aceasta. \u00cen cazul unei erori la \u00eenc\u0103rcare, acesta revine automat, iar o eroare a sarcinii de lucru poate ini\u021bia o revenire manual\u0103 (comand\u0103 prin API).<\/p>\n

Framework TUF<\/a><\/noindex> (The Update Framework) \u00eencarc\u0103 actualiz\u0103ri pe baza imaginilor \u00een parti\u021bii alternative sau \"de-c\u0103ptu\u0219ite\". Sistemul este alocat pe dou\u0103 parti\u021bii de disc, dintre care una con\u021bine sistemul activ, iar pe cealalt\u0103 se copiaz\u0103 actualizarea. \u00cen timpul acestui proces, parti\u021bia r\u0103d\u0103cin\u0103 este montat\u0103 \u00een modul doar pentru citire, iar parti\u021bia \/etc<\/code> este montat\u0103 cu un sistem de fi\u0219iere \u00een memoria operativ\u0103 tmpfs<\/a><\/noindex> \u0219i revine la starea ini\u021bial\u0103 dup\u0103 repornire. Modific\u0103rile directe ale fi\u0219ierelor de configurare \u00een \/etc<\/code> nu sunt acceptate: pentru a salva set\u0103rile, trebuie utilizat API-ul sau s\u0103 se externalizeze func\u021bionalit\u0103\u021bile \u00een containere separate.<\/p>\n

\"A
\nSchema de actualizare prin API<\/i><\/p>\n

Securitate<\/h1>\n

\nContainerele sunt create prin mecanismele standard ale nucleului Linux \u2014 cgroups, spa\u021bii de nume \u0219i seccomp, iar ca sistem de control al accesului obligatoriu, adic\u0103 pentru izolare suplimentar\u0103 este utilizat SELinux<\/a><\/noindex> \u00een modul "enforcing".<\/p>\n

Implicit, politicile sunt activate pentru a separa resursele \u00eentre containere \u0219i nucleu. Binarele sunt protejate cu steaguri, astfel \u00eenc\u00e2t utilizatorii sau programele s\u0103 nu le poat\u0103 executa. \u0218i, dac\u0103 cineva a ajuns la sistemul de fi\u0219iere, Bottlerocket ofer\u0103 un instrument pentru a verifica \u0219i urm\u0103ri orice modific\u0103ri efectuate.<\/p>\n

Modul \u201e\u00eenc\u0103rc\u0103rii verificate\u201d este implementat prin func\u021bia device-mapper-verity (dm-verity<\/a><\/noindex>), care verific\u0103 integritatea parti\u021biei r\u0103d\u0103cin\u0103 \u00een timpul \u00eenc\u0103rc\u0103rii. AWS descrie dm-verity ca \u201eo func\u021bie a nucleului Linux care asigur\u0103 verificarea integrit\u0103\u021bii, pentru a preveni func\u021bionarea programelor mali\u021bioase \u00een sistemul de operare, cum ar fi rescrierea software-ului de baz\u0103 al sistemului\u201d.<\/p>\n

Exist\u0103 de asemenea un filtru \u00een sistem eBPF<\/a><\/noindex> (BPF extins, dezvoltarea lui Alexei Starovoitov<\/a><\/noindex>), care permite \u00eenlocuirea modulelor nucleului cu programe BPF mai sigure pentru opera\u021biuni sistemice de nivel jos.<\/p>\n

Model de execu\u021bie
\nDefinit de utilizator
\nCompilare
\nSecuritate
\nMod de e\u0219ec
\nAcces la resurse<\/p>\n

Utilizator<\/b>
\no sarcin\u0103
\nda
\noricare
\ndrepturile utilizatorilor
\ninterruperea execu\u021biei
\napel de sistem, fault<\/p>\n

Nucleu<\/b>
\no sarcin\u0103
\nnu
\nstatic
\nnu
\npanic\u0103 de nucleu
\ndirect<\/p>\n

BPF<\/b>
\neveniment
\nda
\nJIT, CO-RE
\nverificare, JIT
\nmesaj de eroare
\nhelperi restric\u021biona\u021bi<\/p>\n

\nDiferen\u021ba dintre BPF \u0219i codul obi\u0219nuit de nivel utilizator sau nucleu, sursa<\/a><\/noindex><\/i><\/p>\n

AWS a declarat c\u0103 Bottlerocket \u201eaplic\u0103 un model opera\u021bional care spore\u0219te \u0219i mai mult securitatea, \u00eempiedic\u00e2nd conectarea la serverele de produc\u021bie cu privilegii de administrator\u201d, \u0219i \u201eeste potrivit pentru sisteme distribuite mari, \u00een care controlul asupra fiec\u0103rui gazd\u0103 este limitat\u201d.<\/p>\n

Pentru administratorii sistemului este prev\u0103zut un container de administrator. Totu\u0219i, AWS nu crede c\u0103 administratorul va trebui s\u0103 lucreze frecvent \u00een Bottlerocket: \u201eActul de conectare la o instan\u021b\u0103 separat\u0103 de Bottlerocket este destinat opera\u021biunilor rare: depanare avansat\u0103 \u0219i diagnosticare\u201d \u2014 scriu<\/a><\/noindex> dezvoltatori.<\/p>\n

Limbajul Rust<\/h1>\n

\nInstrumentele OS deasupra nucleului sunt \u00een principal scrise \u00een Rust. Acest limbaj, prin natura sa, reduce probabilitatea accesului nesigur la memorie<\/a><\/noindex>, dar \u0219i pentru elimin\u0103 condi\u021biile de curs\u0103 \u00eentre fire<\/a><\/noindex>.<\/p>\n

La compilare se aplic\u0103 \u00een mod implicit steaguri --enable-default-pie<\/code> \u0219i --enable-default-ssp<\/code> pentru a activa randomizarea spa\u021biului de adresare al fi\u0219ierelor executabile (executable independent de pozi\u021bie<\/a><\/noindex>, PIE) \u0219i protec\u021bia \u00eempotriva overflow-ului stivei.<\/p>\n

Pentru pachetele \u00een C\/C++ se adaug\u0103 \u00een plus steaguri -Wall<\/code>, -Werror=format-security<\/code>, -Wp,-D_FORTIFY_SOURCE=2<\/code>, -Wp,-D_GLIBCXX_ASSERTIONS<\/code> \u0219i -fstack-clash-protection<\/code>.<\/p>\n

Pe l\u00e2ng\u0103 Rust \u0219i C\/C++, unele pachete sunt scrise \u00een limbajul Go.<\/p>\n

Integrarea cu serviciile AWS<\/h1>\n

\nDiferen\u021ba fa\u021b\u0103 de sistemele de operare containerizate similare este c\u0103 Amazon a optimizat Bottlerocket pentru a func\u021biona pe AWS \u0219i pentru a se integra cu alte servicii AWS.<\/p>\n

Cel mai popular orchestrator de containere este Kubernetes, motiv pentru care AWS a implementat integrarea cu propriul s\u0103u Serviciu Kubernetes Enterprise (EKS). Instrumentele pentru orchestration sunt \u00eentr-un container de control separat, bottlerocket-control-container<\/a><\/noindex>, care este inclus \u00een mod implicit \u0219i gestionat prin API \u0219i AWS SSM Agent.<\/p>\n

Va fi interesant de v\u0103zut dac\u0103 Bottlerocket va avea succes, av\u00e2nd \u00een vedere e\u0219ecul unor ini\u021biative similare din trecut. De exemplu, PhotonOS de la Vmware s-a dovedit a fi nereu\u0219it\u0103, iar RedHat a achizi\u021bionat CoreOS \u0219i a \u00eenchis proiectul<\/a><\/noindex>, care a fost considerat un pionier \u00een acest domeniu.<\/p>\n

Integrarea Bottlerocket \u00een serviciile AWS face ca acest sistem s\u0103 fie unic \u00een felul s\u0103u. Posibil, acesta este motivul principal pentru care unii utilizatori ar putea prefera Bottlerocket altor distribu\u021bii, precum CoreOS sau Alpine. Sistemul a fost proiectat ini\u021bial pentru a func\u021biona cu EKS \u0219i ECS, dar s\u0103 repet\u0103m, aceasta nu este o cerin\u021b\u0103 obligatorie. \u00cen primul r\u00e2nd, Bottlerocket poate fi construit de sine st\u0103t\u0103tor<\/a><\/noindex> \u0219i utilizat, de exemplu, ca solu\u021bie g\u0103zduit\u0103. \u00cen al doilea r\u00e2nd, utilizatorii EKS \u0219i ECS vor continua s\u0103 aib\u0103 op\u021biunea de a alege sistemul de operare.<\/p>\n

Codul surs\u0103 Bottlerocket este publicat pe GitHub sub licen\u021ba Apache 2.0. Dezvoltatorii deja reac\u021bioneaz\u0103 la rapoartele de erori \u0219i cererile de func\u021bii<\/a><\/noindex>.<\/p>\n

<\/p>\n

\u00cen numele publicit\u0103\u021bii<\/h4>\n

\nVDSina<\/b> ofer\u0103 VDS cu plat\u0103 zilnic\u0103<\/a><\/noindex>. Este posibil\u0103 instalarea oric\u0103rui sistem de operare, inclusiv din imaginea proprie. Fiecare server este conectat la un canal de internet de 500 Megabi\u021bi \u0219i este protejat gratuit \u00eempotriva atacurilor DDoS! <\/p>\n

\"A<\/a><\/noindex>
\n
Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A fost lansat un sistem de operare Linux minimalistic, Bottlerocket, pentru rularea containerelor. Cele mai importante detalii despre el | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-13T17:42:49+00:00","article:modified_time":"2020-09-13T17:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94205","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:31:27","updated":"2022-10-03 07:42:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=94205"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/94206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=94205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=94205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=94205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}