{"id":94205,"date":"2020-09-13T19:42:49","date_gmt":"2020-09-13T17:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom"},"modified":"2020-09-13T19:42:49","modified_gmt":"2020-09-13T17:42:49","slug":"vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","title":{"rendered":"Vy\u0161iel minimalistick\u00fd Linux distrib\u00facia Bottlerocket pre sp\u00fa\u0161\u0165anie kontajnerov. Najd\u00f4le\u017eitej\u0161ie o \u0148om","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Vy\u0161iel
\n
\nSpolo\u010dnos\u0165 Amazon vyhl\u00e1sila<\/a><\/noindex> o fin\u00e1lnom vydan\u00ed Bottlerocket<\/a><\/noindex> \u2014 \u0161pecializovan\u00e1 distrib\u00facia na sp\u00fa\u0161\u0165anie kontajnerov a efekt\u00edvne ich spravovanie.<\/p>\n

Bottlerocket (in\u00e9 meno pre mal\u00e9 dom\u00e1ce rakety na dymov\u00fd pohon) nie je prv\u00fd opera\u010dn\u00fd syst\u00e9m pre kontajnery, ale pravdepodobne sa \u0161iroko roz\u0161\u00edri v\u010faka predvolenej integr\u00e1cii so slu\u017ebami AWS. Aj ke\u010f je syst\u00e9m zameran\u00fd na cloud Amazon, otvoren\u00fd zdrojov\u00fd k\u00f3d umo\u017e\u0148uje zostavi\u0165 ho kdeko\u013evek: lok\u00e1lne na serveri, na Raspberry Pi, v akomko\u013evek konkuren\u010dnom cloude a dokonca aj v prostred\u00ed bez kontajnerov.<\/p>\n

Je to celkom slu\u0161n\u00e1 n\u00e1hrada distrib\u00facie CoreOS, ktor\u00fa pochovala Red Hat.
\n<\/a><\/noindex>
\nVo v\u0161eobecnosti m\u00e1 div\u00edzia Amazon Web Services u\u017e Amazon Linux, ktor\u00fd ned\u00e1vno vy\u0161iel vo verzii 2: je to distrib\u00facia v\u0161eobecn\u00e9ho \u00fa\u010delu, ktor\u00fa je mo\u017en\u00e9 spusti\u0165 v kontajneri Docker alebo s hyperv\u00edzormi Linux KVM, Microsoft Hyper-V a VMware ESXi. Bol optimalizovan\u00fd na pr\u00e1cu v cloude AWS, ale s vydan\u00edm Bottlerocket sa odpor\u00fa\u010da v\u0161etk\u00fdm prejs\u0165 na nov\u00fd syst\u00e9m, ktor\u00fd je bezpe\u010dnej\u0161\u00ed, modernej\u0161\u00ed a spotrebuje menej zdrojov.<\/p>\n

AWS ozn\u00e1mila Bottlerocket v marci 2020<\/a><\/noindex>. Okam\u017eite uznala, \u017ee to nie je prv\u00fd \u201eLinux pre kontajnery\u201c, pri\u010dom spomenula ako in\u0161pir\u00e1cie CoreOS, Rancher OS a Project Atomic. V\u00fdvoj\u00e1ri uviedli, \u017ee opera\u010dn\u00fd syst\u00e9m je \u201ev\u00fdsledkom sk\u00fasenost\u00ed, ktor\u00e9 sme z\u00edskali z dlhoro\u010dnej pr\u00e1ce na v\u00fdrobn\u00fdch slu\u017eb\u00e1ch v rozsahu Amazon, s oh\u013eadom na poznatky, ktor\u00e9 sme z\u00edskali za posledn\u00fdch \u0161es\u0165 rokov o tom, ako sp\u00fa\u0161\u0165a\u0165 kontajnery\u201c.<\/p>\n

Extr\u00e9mny minimalizmus<\/h1>\n

\nLinux je vy\u010disten\u00fd od v\u0161etk\u00e9ho, \u010do nie je potrebn\u00e9 na sp\u00fa\u0161\u0165anie kontajnerov. Tak\u00fdto dizajn, pod\u013ea spolo\u010dnosti, zni\u017euje \u00fato\u010dn\u00fa plochu.<\/p>\n

To znamen\u00e1, \u017ee v z\u00e1kladnom syst\u00e9me je nain\u0161talovan\u00fdch menej bal\u00edkov, \u010do zjednodu\u0161uje \u00fadr\u017ebu a aktualiz\u00e1ciu OS a zni\u017euje pravdepodobnos\u0165 probl\u00e9mov sp\u00f4soben\u00fdch z\u00e1vislos\u0165ami, pri\u010dom zni\u017euje aj vyu\u017e\u00edvanie zdrojov. V princ\u00edpe tu v\u0161etko funguje v r\u00e1mci samostatn\u00fdch kontajnerov, a z\u00e1kladn\u00fd syst\u00e9m je takmer pr\u00e1zdny.<\/p>\n

Amazon tie\u017e odstr\u00e1nila v\u0161etky shell a interpret\u00e1tory, \u010d\u00edm eliminovala riziko ich vyu\u017eitia alebo n\u00e1hodn\u00e9ho zv\u00fd\u0161enia privilegi\u00ed pou\u017e\u00edvate\u013emi. V z\u00e1kladnom obraze, kv\u00f4li minimalizmu a bezpe\u010dnosti, ch\u00fdba pr\u00edkazov\u00fd shell, server SSH a interpretovan\u00e9 jazyky ako Python. N\u00e1stroje pre administr\u00e1torov s\u00fa presunut\u00e9 do samostatn\u00e9ho servisn\u00e9ho kontajnera, ktor\u00fd je predvolene deaktivovan\u00fd.<\/p>\n

Spr\u00e1va syst\u00e9mu je zabezpe\u010den\u00e1 dvoma sp\u00f4sobmi: cez API a orchestr\u00e1ciu.<\/p>\n

Namiesto spr\u00e1vcu bal\u00edkov, ktor\u00fd aktualizuje jednotliv\u00e9 \u010dasti softv\u00e9ru, Bottlerocket s\u0165ahuje kompletn\u00fd obraz s\u00faborov\u00e9ho syst\u00e9mu a re\u0161tartuje sa do neho. V pr\u00edpade zlyhania spustenia sa automaticky vr\u00e1ti sp\u00e4\u0165, a zlyhanie pracovnej z\u00e1\u0165a\u017ee m\u00f4\u017ee spusti\u0165 manu\u00e1lny n\u00e1vrat (pr\u00edkaz cez API).<\/p>\n

R\u00e1mec TUF<\/a><\/noindex> (The Update Framework) s\u0165ahuje aktualiz\u00e1cie na z\u00e1klade obrazov do alternat\u00edvnych alebo \"odpojen\u00fdch\" oddielov. Pre syst\u00e9m s\u00fa vyhraden\u00e9 dva diskov\u00e9 oddiely, z ktor\u00fdch jeden obsahuje akt\u00edvny syst\u00e9m a na druh\u00fd sa pren\u00e1\u0161a aktualiz\u00e1cia. Pri tom je kore\u0148ov\u00fd oddiel pripojen\u00fd v re\u017eime len na \u010d\u00edtanie, a oddiel \/etc<\/code> je pripojen\u00fd so s\u00faborov\u00fdm syst\u00e9mom v opera\u010dnej pam\u00e4ti tmpfs<\/a><\/noindex> a obnovuje p\u00f4vodn\u00fd stav po re\u0161tarte. Priame zmeny konfigura\u010dn\u00fdch s\u00faborov v \/etc<\/code> nie s\u00fa podporovan\u00e9: na uchovanie nastaven\u00ed je potrebn\u00e9 vyu\u017ei\u0165 API alebo presun\u00fa\u0165 funkcionalitu do samostatn\u00fdch kontajnerov.<\/p>\n

\"Vy\u0161iel
\nSch\u00e9ma aktualiz\u00e1cie cez API<\/i><\/p>\n

Bezpe\u010dnos\u0165<\/h1>\n

\nKontajnery s\u00fa vytvoren\u00e9 \u0161tandardn\u00fdmi mechanizmami jadra Linux \u2014 cgroups, menov\u00e9 priestory a seccomp, a ako syst\u00e9m na vynucovanie pr\u00edstupu, teda pre dodato\u010dn\u00fa izol\u00e1ciu, sa pou\u017e\u00edva SELinux<\/a><\/noindex> v re\u017eime \"enforcing\".<\/p>\n

Predvolene s\u00fa zapnut\u00e9 politiky na rozdelenie zdrojov medzi kontajnery a jadrom. Binarne s\u00fa chr\u00e1nen\u00e9 flagmi, aby ich pou\u017e\u00edvatelia alebo programy nemohli vykon\u00e1va\u0165. A ak sa niekto dostane k s\u00faborov\u00e9mu syst\u00e9mu, Bottlerocket pon\u00faka n\u00e1stroj na kontrolu a sledovanie ak\u00fdchko\u013evek vykonan\u00fdch zmien.<\/p>\n

Re\u017eim \"overenej sp\u00fa\u0161\u0165ania\" je realizovan\u00fd cez funkciu device-mapper-verity (dm-verity<\/a><\/noindex>), ktor\u00e1 kontroluje integritu kore\u0148ov\u00e9ho oddielu po\u010das sp\u00fa\u0161\u0165ania. AWS opisuje dm-verity ako \"funkciu jadra Linux, zabezpe\u010duj\u00facu kontrolu integrity na zabr\u00e1nenie sp\u00fa\u0161\u0165aniu malware v OS, ako je prep\u00edsanie z\u00e1kladn\u00e9ho syst\u00e9mov\u00e9ho softv\u00e9ru\".<\/p>\n

V syst\u00e9me je pr\u00edtomn\u00fd filter eBPF<\/a><\/noindex> (roz\u0161\u00edren\u00e9 BPF, v\u00fdvoj Alexeja Starovoitova<\/a><\/noindex>), ktor\u00fd umo\u017e\u0148uje nahr\u00e1dza\u0165 jadrov\u00e9 moduly bezpe\u010dnej\u0161\u00edmi BPF programami pre n\u00edzko\u00farov\u0148ov\u00e9 syst\u00e9mov\u00e9 oper\u00e1cie.<\/p>\n

Model vykon\u00e1vania
\nUr\u010duje pou\u017e\u00edvate\u013e
\nKompil\u00e1cia
\nBezpe\u010dnos\u0165
\nM\u00f3d zlyhania
\nPr\u00edstup k zdrojom<\/p>\n

Pou\u017e\u00edvate\u013e<\/b>
\n\u00faloha
\n\u00e1no
\nak\u00fdko\u013evek
\npr\u00e1va pou\u017e\u00edvate\u013eov
\npreru\u0161enie vykon\u00e1vania
\nsyst\u00e9mov\u00e9 volanie, chyba<\/p>\n

Jadro<\/b>
\n\u00faloha
\nnie
\nstatick\u00e1
\nnie
\npanika jadra
\npriamy<\/p>\n

BPF<\/b>
\nudalost
\n\u00e1no
\nJIT, CO-RE
\nverifik\u00e1cia, JIT
\nhl\u00e1senie o chybe
\nobmedzen\u00e9 pomocn\u00edci<\/p>\n

\nRozdiel medzi BPF a be\u017en\u00fdm pou\u017e\u00edvate\u013esk\u00fdm alebo jadrov\u00fdm k\u00f3dom, zdroj<\/a><\/noindex><\/i><\/p>\n

AWS ozn\u00e1milo, \u017ee Bottlerocket \u201eaplikuje prev\u00e1dzkov\u00fd model, ktor\u00fd e\u0161te viac zvy\u0161uje bezpe\u010dnos\u0165, zabra\u0148uj\u00fac pripojeniu k produk\u010dn\u00fdm serverom s administr\u00e1torsk\u00fdmi pr\u00e1vami\u201c, a \u201eje vhodn\u00fd pre ve\u013ek\u00e9 distribuovan\u00e9 syst\u00e9my, v ktor\u00fdch je obmedzen\u00e1 kontrola nad ka\u017ed\u00fdm jednotliv\u00fdm hostite\u013eom\u201c.<\/p>\n

Pre syst\u00e9mov\u00fdch administr\u00e1torov je pr\u00edtomn\u00fd administr\u00e1torsk\u00fd kontajner. Ale AWS si nemysl\u00ed, \u017ee admin bude \u010dasto musie\u0165 pracova\u0165 v Bottlerocket: \u201eAkt prihl\u00e1senia do samostatn\u00e9ho in\u0161tancie Bottlerocket je ur\u010den\u00fd pre zriedkav\u00e9 oper\u00e1cie: roz\u0161\u00edren\u00e9 ladenie a odstra\u0148ovanie probl\u00e9mov\u201c, \u2014 p\u00ed\u0161u<\/a><\/noindex> v\u00fdvoj\u00e1ri.<\/p>\n

Jazyk Rust<\/h1>\n

\nN\u00e1stroje OS nad jadrom s\u00fa preva\u017ene nap\u00edsan\u00e9 v Rust. Tento jazyk vo svojej podstate zmen\u0161uje pravdepodobnos\u0165 nebezpe\u010dn\u00e9ho pr\u00edstupu k pam\u00e4ti<\/a><\/noindex>, ako aj eliminuj\u00fa podmienky pretekov medzi vl\u00e1knami<\/a><\/noindex>.<\/p>\n

Pri v\u00fdstavbe sa predvolene aplikuj\u00fa flagy --enable-default-pie<\/code> a --enable-default-ssp<\/code> na povolenie n\u00e1hodnosti adresn\u00e9ho priestoru vykon\u00e1vac\u00edch s\u00faborov (position-independent executable<\/a><\/noindex>, PIE) a ochrany proti prete\u010deniu z\u00e1sobn\u00edka.<\/p>\n

Pre bal\u00ed\u010dky v C\/C++ sa dodato\u010dne zap\u00ednaj\u00fa flagy -Wall<\/code>, -Werror=format-security<\/code>, -Wp,-D_FORTIFY_SOURCE=2<\/code>, -Wp,-D_GLIBCXX_ASSERTIONS<\/code> a -fstack-clash-protection<\/code>.<\/p>\n

Okrem Rust a C\/C++ s\u00fa niektor\u00e9 bal\u00ed\u010dky nap\u00edsan\u00e9 v jazyku Go.<\/p>\n

Integr\u00e1cia so slu\u017ebami AWS<\/h1>\n

\nRozdiel od podobn\u00fdch kontajnerov\u00fdch opera\u010dn\u00fdch syst\u00e9mov spo\u010d\u00edva v tom, \u017ee Amazon optimalizoval Bottlerocket pre prev\u00e1dzku na AWS a integr\u00e1ciu s in\u00fdmi slu\u017ebami AWS.<\/p>\n

Najpopul\u00e1rnej\u0161\u00edm orchestr\u00e1torom kontajnerov je Kubernetes, tak\u017ee AWS zaviedlo integr\u00e1ciu s vlastnou slu\u017ebou Enterprise Kubernetes Service (EKS). N\u00e1stroje na orchestr\u00e1ciu id\u00fa v samostatnom riadiacom kontajneri bottlerocket-control-container<\/a><\/noindex>, ktor\u00fd je predvolene zahrnut\u00fd a spravovan\u00fd cez API a AWS SSM Agent.<\/p>\n

Bude zauj\u00edmav\u00e9 sledova\u0165, \u010di Bottlerocket vzlet\u00ed, ke\u010f\u017ee niektor\u00e9 podobn\u00e9 iniciat\u00edvy v minulosti zlyhali. Napr\u00edklad PhotonOS od VMWare sa uk\u00e1zala ako nepou\u017eite\u013en\u00e1 a RedHat odk\u00fapila CoreOS a uzavrela projekt<\/a><\/noindex>, ktor\u00fd bol pova\u017eovan\u00fd za priekopn\u00edka v tejto oblasti.<\/p>\n

Integr\u00e1cia Bottlerocket do slu\u017eieb AWS rob\u00ed tento syst\u00e9m jedine\u010dn\u00fdm. Mo\u017eno to je hlavn\u00fd d\u00f4vod, pre\u010do niektor\u00ed pou\u017e\u00edvate\u013eia m\u00f4\u017eu uprednostni\u0165 Bottlerocket pred in\u00fdmi distrib\u00faciami, ako s\u00fa CoreOS alebo Alpine. Syst\u00e9m bol p\u00f4vodne navrhnut\u00fd na fungovanie s EKS a ECS, ale opakujeme, \u017ee to nie je nutn\u00e9. Po prv\u00e9, Bottlerocket m\u00f4\u017eeme vytvori\u0165 sami<\/a><\/noindex> pou\u017ei\u0165 aj ako hostovan\u00e9 rie\u0161enie. Po druh\u00e9, pou\u017e\u00edvatelia EKS a ECS si aj na\u010falej zachovaj\u00fa mo\u017enos\u0165 v\u00fdberu OS.<\/p>\n

Zdrojov\u00fd k\u00f3d Bottlerocket bol zverejnen\u00fd na GitHub pod licenciou Apache 2.0. V\u00fdvoj\u00e1ri u\u017e reaguj\u00fa na hl\u00e1senia ch\u00fdb a po\u017eiadavky na funkcie<\/a><\/noindex>.<\/p>\n

<\/p>\n

Na z\u00e1klade reklamy<\/h4>\n

\nVDSina<\/b> pon\u00faka VDS s platen\u00edm na de\u0148<\/a><\/noindex>. Je mo\u017en\u00e9 nain\u0161talova\u0165 ak\u00fdko\u013evek opera\u010dn\u00fd syst\u00e9m, vr\u00e1tane vlastn\u00e9ho obrazu. Ka\u017ed\u00fd server je pripojen\u00fd na internetov\u00fd kan\u00e1l s r\u00fdchlos\u0165ou 500 Megabit a bezplatne chr\u00e1nen\u00fd pred DDoS \u00fatokmi! <\/p>\n

\"Vy\u0161iel<\/a><\/noindex>
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vy\u0161iel minimalistick\u00fd linuxov\u00fd distrib\u00fator Bottlerocket na sp\u00fa\u0161\u0165anie kontajnerov. To najd\u00f4le\u017eitej\u0161ie o \u0148om | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-13T17:42:49+00:00","article:modified_time":"2020-09-13T17:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94205","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:31:27","updated":"2022-10-03 07:42:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=94205"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/94206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=94205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=94205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=94205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}