{"id":99456,"date":"2021-03-17T10:22:52","date_gmt":"2021-03-17T08:22:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail"},"modified":"2021-03-17T10:22:52","modified_gmt":"2021-03-17T08:22:52","slug":"runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","title":{"rendered":"Runj \u2014 OCI-kompatibiln\u00fd n\u00e1stroj na spr\u00e1vu kontajnerov zalo\u017een\u00fd na FreeBSD jail","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Samuel Karp, in\u017einier z firmy Amazon, ktor\u00fd sa zaober\u00e1 v\u00fdvojom Linux distrib\u00facie Bottlerocket a technol\u00f3gi\u00ed kontajnerovej izol\u00e1cie pre AWS, rozv\u00edja na z\u00e1klade jail prostred\u00ed FreeBSD nov\u00fd runtime runj na zabezpe\u010denie izolovan\u00e9ho spustenia kontajnerov, ktor\u00e9 s\u00fa vyhotoven\u00e9 pod\u013ea \u0161pecifik\u00e1cie OCI (Open Container Initiative). Projekt je prezentovan\u00fd ako experiment\u00e1lny, vyv\u00edjan\u00fd vo vo\u013enom \u010dase od hlavnej pr\u00e1ce a zatia\u013e sa nach\u00e1dza vo f\u00e1ze prototypu. K\u00f3d je nap\u00edsan\u00fd v Go a je \u0161\u00edren\u00fd pod licenciou BSD. <\/p>\n

Po zlep\u0161en\u00ed v\u00fdvoja na po\u017eadovan\u00fa \u00farove\u0148 m\u00f4\u017ee projekt potenci\u00e1lne vyr\u00e1s\u0165 na \u00farove\u0148, ktor\u00e1 umo\u017en\u00ed pou\u017ei\u0165 runj ako n\u00e1hradu za \u0161tandardn\u00fd runtime v syst\u00e9moch Docker a Kubernetes, pri\u010dom na spustenie kontajnerov sa pou\u017eije FreeBSD namiesto Linuxu. V r\u00e1mci OCI runtime s\u00fa moment\u00e1lne implementovan\u00e9 pr\u00edkazy na vytv\u00e1ranie, odstra\u0148ovanie, sp\u00fa\u0161\u0165anie, n\u00faten\u00e9 ukon\u010denie a hodnotenie stavu kontajnerov. Obsah kontajnera sa vytv\u00e1ra na z\u00e1klade \u0161tandardn\u00e9ho alebo obmedzen\u00e9ho prostredia FreeBSD. <\/p>\n

Ke\u010f\u017ee v \u0161pecifik\u00e1cii OCI dosia\u013e ch\u00fdba podpora FreeBSD, v r\u00e1mci projektu bola vyvinut\u00e1 s\u00e9ria dodato\u010dn\u00fdch parametrov s\u00favisiacich s nastaven\u00edm jail a FreeBSD, ktor\u00e9 sa pl\u00e1nuj\u00fa predlo\u017ei\u0165 na zaradenie do z\u00e1kladnej \u0161pecifik\u00e1cie OCI. Na spr\u00e1vu jail sa pou\u017e\u00edvaj\u00fa n\u00e1stroje jail, jls, jexec, kill a ps z bal\u00edka FreeBSD, bez priameho volania syst\u00e9mov\u00fdch volan\u00ed. Medzi bud\u00face pl\u00e1ny patr\u00ed pridanie podpory spr\u00e1vy obmedzenia zdrojov prostredn\u00edctvom rozhrania RCTL v jadre. <\/p>\n

Okrem vlastn\u00e9ho runtime sa v repozit\u00e1ri projektu vyv\u00edja aj experiment\u00e1lna vrstva pre pou\u017eitie spolu s runtime containerd (pou\u017e\u00edvan\u00fd v Dockeri), upraven\u00e1 na podporu FreeBSD. Na transform\u00e1ciu rootfs FreeBSD na OCI-kompatibiln\u00fd obraz kontajnera sa navrhuje \u0161peci\u00e1lny n\u00e1stroj. N\u00e1sledne m\u00f4\u017ee by\u0165 vytvoren\u00fd obraz importovan\u00fd do containerd.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime runj \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 OCI (Open Container Initiative). \u041f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u043e\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432\u0440\u0435\u043c\u044f \u0438 \u043f\u043e\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99456","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Runj \u2014 OCI-kompatibiln\u00fd n\u00e1stroj na spr\u00e1vu kontajnerov zalo\u017een\u00fd na FreeBSD jail | ProHoster","description":"Samuel Karp, in\u017einier z firmy Amazon, ktor\u00fd sa zaober\u00e1 v\u00fdvojom Linux distrib\u00facie Bottlerocket a technol\u00f3gi\u00ed kontajnerovej izol\u00e1cie pre AWS, rozv\u00edja na z\u00e1klade jail prostred\u00ed FreeBSD nov\u00fd runtime.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Runj \u2014 OCI-\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 FreeBSD jail | ProHoster","og:description":"\u0421\u0430\u043c\u0443\u044d\u043b\u044c \u041a\u0430\u0440\u043f (Samuel Karp), \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Amazon, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Bottlerocket \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0434\u043b\u044f AWS, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 jail-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 FreeBSD \u043d\u043e\u0432\u044b\u0439 runtime.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/runj-oci-sovmestimyj-instrumentarij-dlya-upravleniya-kontejnerami-na-baze-freebsd-jail","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-17T08:22:52+00:00","article:modified_time":"2021-03-17T08:22:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99456","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-17 08:25:25","updated":"2022-09-30 19:17:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=99456"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99456\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=99456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=99456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=99456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}