{"id":72267,"date":"2020-03-03T08:42:20","date_gmt":"2020-03-03T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kratkij-obzor-i-nastrojka-kata-containers"},"modified":"2020-03-03T16:13:53","modified_gmt":"2020-03-03T13:13:53","slug":"kratkij-obzor-i-nastrojka-kata-containers","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers","title":{"rendered":"Kr\u00e1tky preh\u013ead a konfigur\u00e1cia Kata Containers","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kr\u00e1tky preh\u013ead a konfigur\u00e1cia Kata Containers\" src=\"\/wp-content\/uploads\/2020\/03\/b738fcd40af08167446004e481172a7e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nV tomto \u010dl\u00e1nku sa pozrieme na princ\u00edp fungovania <noindex><a rel=\"nofollow\" href=\"https:\/\/katacontainers.io\/\">Kata Containers<\/a><\/noindex>, ako aj na praktick\u00fa \u010das\u0165 s ich pripojen\u00edm k Dockeru.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>O v\u0161eobecn\u00fdch probl\u00e9moch s Dockerom a mo\u017enostiach ich rie\u0161enia u\u017e <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/434756\/\">bolo nap\u00edsan\u00e9<\/a><\/noindex>, dnes stru\u010dne op\u00ed\u0161em implement\u00e1ciu od Kata Containers. Kata Containers \u2014 bezpe\u010dn\u00e9 prostredie pre sp\u00fa\u0161\u0165anie (runtime) kontajnerov zalo\u017een\u00e9 na \u013eahk\u00fdch virtu\u00e1lnych strojoch. Pr\u00e1ca s nimi prebieha rovnako ako s in\u00fdmi kontajnermi, ale navy\u0161e poskytuj\u00fa vy\u0161\u0161iu \u00farove\u0148 izol\u00e1cie vyu\u017eit\u00edm technol\u00f3gie virtualiz\u00e1cie hardv\u00e9ru. Projekt sa za\u010dal v roku 2017, pri\u010dom rovnomenn\u00e9 spolo\u010denstvo vtedy dokon\u010dilo zl\u00fa\u010denie najlep\u0161\u00edch my\u0161lienok od Intel Clear Containers a Hyper.sh RunV, po \u010dom sa pokra\u010dovalo v podpore r\u00f4znych architekt\u00far, vr\u00e1tane AMD64, ARM, IBM p- a z-s\u00e9rie. \u010ealej sa podporuje pr\u00e1ca v hyperv\u00edzoroch QEMU, Firecracker a taktie\u017e existuje integr\u00e1cia s containerd. K\u00f3d je dostupn\u00fd na <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kata-containers\">GitHub<\/a><\/noindex> pod licenciou MIT.<\/p>\n<p><\/p>\n<h2 id=\"osnovnye-vozmozhnosti\">Z\u00e1kladn\u00e9 funkcie<\/h2>\n<p><\/p>\n<ul>\n<li>Pr\u00e1ca so samostatn\u00fdm jadrom zabezpe\u010duje izol\u00e1ciu siete, pam\u00e4te a oper\u00e1ci\u00ed vstupu-v\u00fdstupu, existuje mo\u017enos\u0165 n\u00faten\u00e9ho pou\u017eitia hardv\u00e9rovej izol\u00e1cie na z\u00e1klade roz\u0161\u00edren\u00ed virtualiz\u00e1cie<\/li>\n<li>Podpora priemyseln\u00fdch \u0161tandardov vr\u00e1tane OCI (form\u00e1t kontajnerov), Kubernetes CRI<\/li>\n<li>Stabiln\u00fd v\u00fdkon be\u017en\u00fdch kontajnerov Linux, zv\u00fd\u0161enie izol\u00e1cie bez n\u00e1kladov, ktor\u00e9 by ovplyvnili v\u00fdkon be\u017en\u00fdch virtu\u00e1lnych strojov<\/li>\n<li>Odstr\u00e1nenie potreby sp\u00fa\u0161\u0165a\u0165 kontajnery vo vn\u00fatri plnohodnotn\u00fdch virtu\u00e1lnych strojov, typov\u00e9 rozhrania u\u013eah\u010duj\u00fa integr\u00e1ciu a spustenie<\/li>\n<\/ul>\n<p><\/p>\n<h2 id=\"ustanovka\">In\u0161tal\u00e1cia<\/h2>\n<p><\/p>\n<p>Existuje <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kata-containers\/documentation\/tree\/master\/install\">mno\u017estvo<\/a><\/noindex> variantov in\u0161tal\u00e1cie, presk\u00famam in\u0161tal\u00e1ciu z repozit\u00e1rov, na z\u00e1klade opera\u010dn\u00e9ho syst\u00e9mu Centos 7.<br \/>\n<strong>D\u00f4le\u017eit\u00e9<\/strong>: pr\u00e1ca Kata Containers je podporovan\u00e1 iba na hardv\u00e9ri, prechod virtualiz\u00e1cie nefunguje v\u017edy, potrebn\u00e1 je aj <strong>podpora sse4.1<\/strong> z procesora.<\/p>\n<p><\/p>\n<p>In\u0161tal\u00e1cia Kata Containers je dostato\u010dne jednoduch\u00e1:<\/p>\n<p><\/p>\n<p>Nain\u0161talujeme utility pre pr\u00e1cu s repozit\u00e1rmi:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># yum -y install yum-utils<\/code><\/pre>\n<p><\/p>\n<p>Vypneme Selinux (presnej\u0161ie \u2014 nastav\u00edme, ale pre jednoduchos\u0165 ho vyp\u00ednam):<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># setenforce 0\n# sed -i 's\/^SELINUX=enforcing$\/SELINUX=permissive\/' \/etc\/selinux\/config<\/code><\/pre>\n<p><\/p>\n<p>Pripoj\u00edme repozit\u00e1r a vykon\u00e1me in\u0161tal\u00e1ciu<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># source \/etc\/os-release\n# ARCH=$(arch)\n# BRANCH=&quot;${BRANCH:-stable-1.10}&quot;\n# yum-config-manager --add-repo &quot;http:\/\/download.opensuse.org\/repositories\/home:\/katacontainers:\/releases:\/${ARCH}:\/${BRANCH}\/CentOS_${VERSION_ID}\/home:katacontainers:releases:${ARCH}:${BRANCH}.repo&quot;\n# yum -y install kata-runtime kata-proxy kata-shim<\/code><\/pre>\n<p><\/p>\n<h2 id=\"nastroyka\">Nastavenie<\/h2>\n<p><\/p>\n<p>Budeme vykon\u00e1va\u0165 nastavenia pre pr\u00e1cu s dockerom, jeho in\u0161tal\u00e1cia je \u0161tandardn\u00e1, nebudem ju podrobne opisova\u0165:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># rpm -qa | grep docker\ndocker-ce-cli-19.03.6-3.el7.x86_64\ndocker-ce-19.03.6-3.el7.x86_64\n# docker -v\nDocker version 19.03.6, build 369ce74a3c<\/code><\/pre>\n<p><\/p>\n<p>Urob\u00edme \u00fapravy v daemon.json:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># cat &lt;&lt;EOF &gt; \/etc\/docker\/daemon.json\n{\n  &quot;default-runtime&quot;: &quot;kata-runtime&quot;,\n  &quot;runtimes&quot;: {\n    &quot;kata-runtime&quot;: {\n      &quot;path&quot;: &quot;\/usr\/bin\/kata-runtime&quot;\n    }\n  }\n}\nEOF<\/code><\/pre>\n<p><\/p>\n<p>Re\u0161tartujeme docker:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># service docker restart<\/code><\/pre>\n<p><\/p>\n<h2 id=\"proverka-rabotosposobnosti\">Kontrola dostupnosti<\/h2>\n<p><\/p>\n<p>Ak spust\u00edte kontajner pred re\u0161tartom dockera, m\u00f4\u017eete vidie\u0165, \u017ee uname vr\u00e1ti verziu jadra, spusten\u00e9ho na hlavnom syst\u00e9me:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># docker run busybox uname -a\nLinux 19efd7188d06 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64 GNU\/Linux<\/code><\/pre>\n<p><\/p>\n<p>Po re\u0161tarte \u2014 verzia jadra vyzer\u00e1 takto:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\"># docker run busybox uname -a\nLinux 9dd1f30fe9d4 4.19.86-5.container #1 SMP Sat Feb 22 01:53:14 UTC 2020 x86_64 GNU\/Linux<\/code><\/pre>\n<p>\n<b class=\"spoiler_title\">E\u0161te pr\u00edkazy!<\/b><\/p>\n<pre><code class=\"plaintext\"># time docker run busybox mount\nkataShared on \/ type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nproc on \/proc type proc (rw,nosuid,nodev,noexec,relatime)\ntmpfs on \/dev type tmpfs (rw,nosuid,size=65536k,mode=755)\ndevpts on \/dev\/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=666)\nsysfs on \/sys type sysfs (ro,nosuid,nodev,noexec,relatime)\ntmpfs on \/sys\/fs\/cgroup type tmpfs (ro,nosuid,nodev,noexec,relatime,mode=755)\ncgroup on \/sys\/fs\/cgroup\/systemd type cgroup (ro,nosuid,nodev,noexec,relatime,xattr,name=systemd)\ncgroup on \/sys\/fs\/cgroup\/cpu,cpuacct type cgroup (ro,nosuid,nodev,noexec,relatime,cpu,cpuacct)\ncgroup on \/sys\/fs\/cgroup\/blkio type cgroup (ro,nosuid,nodev,noexec,relatime,blkio)\ncgroup on \/sys\/fs\/cgroup\/memory type cgroup (ro,nosuid,nodev,noexec,relatime,memory)\ncgroup on \/sys\/fs\/cgroup\/devices type cgroup (ro,nosuid,nodev,noexec,relatime,devices)\ncgroup on \/sys\/fs\/cgroup\/perf_event type cgroup (ro,nosuid,nodev,noexec,relatime,perf_event)\ncgroup on \/sys\/fs\/cgroup\/net_cls,net_prio type cgroup (ro,nosuid,nodev,noexec,relatime,net_cls,net_prio)\ncgroup on \/sys\/fs\/cgroup\/freezer type cgroup (ro,nosuid,nodev,noexec,relatime,freezer)\ncgroup on \/sys\/fs\/cgroup\/pids type cgroup (ro,nosuid,nodev,noexec,relatime,pids)\ncgroup on \/sys\/fs\/cgroup\/cpuset type cgroup (ro,nosuid,nodev,noexec,relatime,cpuset)\nmqueue on \/dev\/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)\nshm on \/dev\/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=65536k)\nkataShared on \/etc\/resolv.conf type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nkataShared on \/etc\/hostname type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nkataShared on \/etc\/hosts type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)\nproc on \/proc\/bus type proc (ro,relatime)\nproc on \/proc\/fs type proc (ro,relatime)\nproc on \/proc\/irq type proc (ro,relatime)\nproc on \/proc\/sys type proc (ro,relatime)\ntmpfs on \/proc\/acpi type tmpfs (ro,relatime)\ntmpfs on \/proc\/timer_list type tmpfs (rw,nosuid,size=65536k,mode=755)\ntmpfs on \/sys\/firmware type tmpfs (ro,relatime)\n\nreal    0m2.381s\nuser    0m0.066s\nsys 0m0.039s<\/code><\/pre>\n<p><\/p>\n<pre><code class=\"plaintext\"># time docker run busybox free -m\n              total        used        free      shared  buff\/cache   available\nMem:           1993          30        1962           0           1        1946\nSwap:             0           0           0\n\nreal    0m3.297s\nuser    0m0.086s\nsys 0m0.050s<\/code><\/pre>\n<p><\/p>\n<h2 id=\"bystroe-nagruzochnoe-testirovanie\">R\u00fdchle z\u00e1\u0165a\u017eov\u00e9 testovanie<\/h2>\n<p><\/p>\n<p>Na vyhodnotenie str\u00e1t sp\u00f4soben\u00fdch virtualiz\u00e1ciou sp\u00fa\u0161\u0165am sysbench, ako hlavn\u00e9 pr\u00edklady <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/ljishen\/sysbench\">beriem t\u00fato mo\u017enos\u0165<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h3 id=\"zapusk-sysbench-s-ispolzovaniem-dockercontainerd\">Spustenie sysbench s pou\u017eit\u00edm Docker+containerd<\/h3>\n<p>\n<b class=\"spoiler_title\">Test procesora<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: multi-threaded syst\u00e9mov\u00fd hodnotiaci benchmark\n\nSp\u00fa\u0161\u0165am test s nasleduj\u00facimi mo\u017enos\u0165ami:\nPo\u010det vl\u00e1kien: 1\nInicializ\u00e1cia gener\u00e1tora n\u00e1hodn\u00fdch \u010d\u00edsel z aktu\u00e1lneho \u010dasu\n\nLimit prvo\u010d\u00edsel: 20000\n\nInicializ\u00e1cia pracovn\u00edckych vl\u00e1kien...\n\nVl\u00e1kna spusten\u00e9!\n\nGener\u00e1lne \u0161tatistiky:\n    celkov\u00fd \u010das:                          36.7335s\n    celkov\u00fd po\u010det udalost\u00ed:              10000\n    celkov\u00fd \u010das str\u00e1ven\u00fd vykonan\u00edm udalosti: 36.7173s\n    \u010das reakcie:\n         min:                                  3.43ms\n         avg:                                  3.67ms\n         max:                                  8.34ms\n         pribli\u017ene  95 percentil:               3.79ms\n\nSpravodlivos\u0165 vl\u00e1kien:\n    udalosti (avg\/stddev):           10000.0000\/0.00\n    \u010das vykonania (avg\/stddev):   36.7173\/0.00<\/code><\/pre>\n<p>\n<b class=\"spoiler_title\">Test opera\u010dnej pam\u00e4te<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: multi-threaded syst\u00e9mov\u00fd hodnotiaci benchmark\n\nSp\u00fa\u0161\u0165am test s nasleduj\u00facimi mo\u017enos\u0165ami:\nPo\u010det vl\u00e1kien: 1\nInicializ\u00e1cia gener\u00e1tora n\u00e1hodn\u00fdch \u010d\u00edsel z aktu\u00e1lneho \u010dasu\n\nInicializ\u00e1cia pracovn\u00edckych vl\u00e1kien...\n\nVl\u00e1kna spusten\u00e9!\n\nVykonan\u00e9 oper\u00e1cie: 104857600 (2172673.64 ops\/sec)\n\n102400.00 MiB prenesen\u00fdch (2121.75 MiB\/sec)\n\nGener\u00e1lne \u0161tatistiky:\n    celkov\u00fd \u010das:                          48.2620s\n    celkov\u00fd po\u010det udalost\u00ed:              104857600\n    celkov\u00fd \u010das str\u00e1ven\u00fd vykonan\u00edm udalosti: 17.4161s\n    \u010das reakcie:\n         min:                                  0.00ms\n         avg:                                  0.00ms\n         max:                                  0.17ms\n         pribli\u017ene  95 percentil:               0.00ms\n\nSpravodlivos\u0165 vl\u00e1kien:\n    udalosti (avg\/stddev):           104857600.0000\/0.00\n    \u010das vykonania (avg\/stddev):   17.4161\/0.00<\/code><\/pre>\n<p><\/p>\n<h3 id=\"zapusk-sysbench-s-ispolzovaniem-dockerkata-containers\">Spustenie sysbench s pou\u017eit\u00edm Docker+Kata Containers<\/h3>\n<p>\n<b class=\"spoiler_title\">Test procesora<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: multi-threaded syst\u00e9mov\u00fd hodnotiaci benchmark\n\nSp\u00fa\u0161\u0165am test s nasleduj\u00facimi mo\u017enos\u0165ami:\nPo\u010det vl\u00e1kien: 1\nInicializ\u00e1cia gener\u00e1tora n\u00e1hodn\u00fdch \u010d\u00edsel z aktu\u00e1lneho \u010dasu\n\nLimit prvo\u010d\u00edsel: 20000\n\nInicializ\u00e1cia pracovn\u00edckych vl\u00e1kien...\n\nVl\u00e1kna spusten\u00e9!\n\nGener\u00e1lne \u0161tatistiky:\n    celkov\u00fd \u010das:                          36.5747s\n    celkov\u00fd po\u010det udalost\u00ed:              10000\n    celkov\u00fd \u010das str\u00e1ven\u00fd vykonan\u00edm udalosti: 36.5594s\n    \u010das reakcie:\n         min:                                  3.43ms\n         avg:                                  3.66ms\n         max:                                  4.93ms\n         pribli\u017ene  95 percentil:               3.77ms\n\nSpravodlivos\u0165 vl\u00e1kien:\n    udalosti (avg\/stddev):           10000.0000\/0.00\n    \u010das vykonania (avg\/stddev):   36.5594\/0.00<\/code><\/pre>\n<p>\n<b class=\"spoiler_title\">Test opera\u010dnej pam\u00e4te<\/b><\/p>\n<pre><code class=\"plaintext\">sysbench 1.0: multi-threaded syst\u00e9mov\u00fd hodnotiaci benchmark\n\nSp\u00fa\u0161\u0165am test s nasleduj\u00facimi mo\u017enos\u0165ami:\nPo\u010det vl\u00e1kien: 1\nInicializ\u00e1cia gener\u00e1tora n\u00e1hodn\u00fdch \u010d\u00edsel z aktu\u00e1lneho \u010dasu\n\nInicializ\u00e1cia pracovn\u00edckych vl\u00e1kien...\n\nVl\u00e1kna spusten\u00e9!\n\nVykonan\u00e9 oper\u00e1cie: 104857600 (2450366.94 ops\/sec)\n\n102400.00 MiB prenesen\u00fdch (2392.94 MiB\/sec)\n\nGener\u00e1lne \u0161tatistiky:\n    celkov\u00fd \u010das:                          42.7926s\n    celkov\u00fd po\u010det udalost\u00ed:              104857600\n    celkov\u00fd \u010das str\u00e1ven\u00fd vykonan\u00edm udalosti: 16.1512s\n    \u010das reakcie:\n         min:                                  0.00ms\n         avg:                                  0.00ms\n         max:                                  0.43ms\n         pribli\u017ene  95 percentil:               0.00ms\n\nSpravodlivos\u0165 vl\u00e1kien:\n    udalosti (avg\/stddev):           104857600.0000\/0.00\n    \u010das vykonania (avg\/stddev):   16.1512\/0.00<\/code><\/pre>\n<p><\/p>\n<p>Situ\u00e1cia je u\u017e v podstate jasn\u00e1, ale optim\u00e1lnej\u0161ie je testy spusti\u0165 viackr\u00e1t, odstr\u00e1ni\u0165 odch\u00fdlky a priemern\u00e9 v\u00fdsledky, preto zatia\u013e nerob\u00edm viac testov.<\/p>\n<p><\/p>\n<h2 id=\"vyvody\">Zhrnutie<\/h2>\n<p><\/p>\n<p>Napriek tomu, \u017ee spustenie tak\u00fdchto kontajnerov trv\u00e1 pribli\u017ene p\u00e4\u0165 a\u017e desa\u0165kr\u00e1t dlh\u0161ie (typick\u00fd \u010das spustenia podobn\u00fdch pr\u00edkazov pri pou\u017eit\u00ed containerd je menej ako tretina sekundy) - st\u00e1le funguj\u00fa dostato\u010dne r\u00fdchlo, ak berieme do \u00favahy absol\u00fatny \u010das spustenia (pr\u00edklady vy\u0161\u0161ie, pr\u00edkazy sa vykon\u00e1vaj\u00fa v priemere za tri sekundy). No a v\u00fdsledky r\u00fdchleho testu CPU a RAM ukazuj\u00fa prakticky rovnak\u00e9 v\u00fdsledky, \u010do nem\u00f4\u017ee ne\u017e te\u0161i\u0165, najm\u00e4 vzh\u013eadom na to, \u017ee izol\u00e1cia sa zabezpe\u010duje pomocou dobre preveren\u00e9ho mechanizmu ako kvm.<\/p>\n<p><\/p>\n<h2 id=\"anons\">Ozn\u00e1menie<\/h2>\n<p><\/p>\n<p>\u010cl\u00e1nok je preh\u013eadn\u00fd, ale umo\u017e\u0148uje presk\u00fama\u0165 alternat\u00edvny runtime. Mnoh\u00e9 oblasti pou\u017eitia nie s\u00fa pokryt\u00e9, napr\u00edklad na str\u00e1nke je op\u00edsan\u00e1 mo\u017enos\u0165 spustenia Kubernetes nad Kata Containers. Okrem toho je mo\u017en\u00e9 vykona\u0165 aj nieko\u013eko testov zameran\u00fdch na h\u013eadanie probl\u00e9mov so zabezpe\u010den\u00edm, nastavenie obmedzen\u00ed a \u010fal\u0161ie zauj\u00edmav\u00e9 veci.<\/p>\n<p><\/p>\n<p>Pros\u00edm v\u0161etk\u00fdch, ktor\u00ed do\u010d\u00edtali alebo presko\u010dili sem, aby sa z\u00fa\u010dastnili ankety, od ktorej bud\u00fa z\u00e1visie\u0165 bud\u00face publik\u00e1cie na t\u00fato t\u00e9mu.<\/p>\n<p class=\"for_users_only_msg\">Len registrovan\u00ed pou\u017e\u00edvatelia sa m\u00f4\u017eu z\u00fa\u010dastni\u0165 prieskumu. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">Prihl\u00e1ste sa<\/a><\/noindex>, pros\u00edm.<\/p>\n<h2 class=\"default-block__polling-title\">M\u00e1me pokra\u010dova\u0165 v publikovan\u00ed \u010dl\u00e1nkov o Kata Containers?<\/h2>\n<ul class=\"poll-result\">\n<li class=\"poll-result__item\">\n<p>                <strong class=\"poll-result__data-percent  poll-result__data-percent_winner\">80,0%<\/strong>\u00c1no, p\u00ed\u0161 \u010falej!28<\/p>\n<\/li>\n<li class=\"poll-result__item\">\n<p>                <strong class=\"poll-result__data-percent\">20,0%<\/strong>Nie, nie je to potrebn\u00e9\u20267<\/p>\n<\/li>\n<\/ul>\n<p>    Hlasovalo 35 pou\u017e\u00edvate\u013eov. Zdr\u017eali sa 7 pou\u017e\u00edvate\u013eov.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/southbridge\/blog\/489940\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b Kata Containers, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0441 \u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043a Docker. \u041f\u0440\u043e \u043e\u0431\u0449\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 Docker \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 \u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e, \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u043a\u0440\u0430\u0442\u043a\u043e \u043e\u043f\u0438\u0448\u0443 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043e\u0442 Kata Containers. Kata Containers \u2014 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (runtime) \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u043d\u0438\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72268,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72267","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0440\u0430\u0442\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Kata Containers | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-03T05:42:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:13:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kr\u00e1tky preh\u013ead a nastavenie Kata Containers | ProHoster","description":"V tomto \u010dl\u00e1nku sa bude sk\u00fama\u0165 princ\u00edp fungovania.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0430\u0442\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Kata Containers | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u0440\u0430\u0431\u043e\u0442\u044b.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kratkij-obzor-i-nastrojka-kata-containers","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-03T05:42:20+00:00","article:modified_time":"2020-03-03T13:13:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72267","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:47:23","updated":"2022-09-30 10:53:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/72267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=72267"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/72267\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/72268"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=72267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=72267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=72267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}