{"id":94205,"date":"2020-09-13T19:42:49","date_gmt":"2020-09-13T17:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom"},"modified":"2020-09-13T19:42:49","modified_gmt":"2020-09-13T17:42:49","slug":"vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","title":{"rendered":"Doli distribucioni minimalist i Linux, Bottlerocket, p\u00ebr t\u00eb nisur kontejner\u00ebt. M\u00eb e r\u00ebnd\u00ebsishmja p\u00ebr t\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Doli
\n
\nKompania Amazon njoftoi<\/a><\/noindex> p\u00ebr publikimin p\u00ebrfundimtar Bottlerocket<\/a><\/noindex> \u2014 nj\u00eb distribucion i specializuar p\u00ebr ekzekutimin e kontejner\u00ebve dhe menaxhimin e tyre n\u00eb m\u00ebnyr\u00eb efikase.<\/p>\n

Bottlerocket (p\u00ebr rastin, k\u00ebshtu quhen raketat e vogla t\u00eb b\u00ebra n\u00eb sht\u00ebpi me barut tymi) \u2014 nuk \u00ebsht\u00eb sistemi i par\u00eb operativ p\u00ebr kontejner\u00eb, por ka shum\u00eb gjasa q\u00eb t\u00eb fitoj\u00eb p\u00ebrhapje t\u00eb madhe fal\u00eb integrimit t\u00eb tij t\u00eb paracaktuar me sh\u00ebrbimet AWS. Megjith\u00ebse sistemi \u00ebsht\u00eb orientuar p\u00ebr re Amazon, kodi i hapur lejon q\u00eb t\u00eb nd\u00ebrtohet kudo: lokal n\u00eb server, n\u00eb Raspberry Pi, n\u00eb \u00e7do re konkuruese dhe madje edhe n\u00eb nj\u00eb mjedis pa kontejner\u00eb.<\/p>\n

Kjo \u00ebsht\u00eb nj\u00eb z\u00ebvend\u00ebsim shum\u00eb i denj\u00eb p\u00ebr distribucionin CoreOS, t\u00eb cilin Red Hat e shpalli t\u00eb vdekur.
\n<\/a><\/noindex>
\nN\u00eb fakt, departamenti i Amazon Web Services tashm\u00eb ka Amazon Linux, i cili sapo ka dal\u00eb n\u00eb versionin e tij t\u00eb dyt\u00eb: \u00ebsht\u00eb nj\u00eb distribucion i p\u00ebrgjithsh\u00ebm q\u00eb mund t\u00eb ekzekutohet n\u00eb nj\u00eb kontejner Docker ose me hipervizor\u00ebt Linux KVM, Microsoft Hyper-V dhe VMware ESXi. Ai \u00ebsht\u00eb optimizuar p\u00ebr funksionimin n\u00eb re AWS, por me daljen e Bottlerocket gjithkujt i rekomandohet t\u00eb b\u00ebj\u00eb p\u00ebrdit\u00ebsimin n\u00eb sistemin e ri, i cili \u00ebsht\u00eb m\u00eb i sigurt, modern dhe konsumon m\u00eb pak burime.<\/p>\n

AWS e shpalli Bottlerocket n\u00eb mars 2020<\/a><\/noindex>. Ajo e pranoi menj\u00ebher\u00eb se kjo nuk \u00ebsht\u00eb \"Linux p\u00ebr kontejner\u00eb\" i par\u00eb, duke p\u00ebrmendur si burime frym\u00ebzimi CoreOS, Rancher OS dhe Project Atomic. Zhvilluesit shkruan se sistemi operativ \u00ebsht\u00eb \"rezultati i m\u00ebsimeve q\u00eb kemi nxjerr\u00eb gjat\u00eb nj\u00eb periudhe t\u00eb gjat\u00eb pune me sh\u00ebrbime prodhimi n\u00eb shkall\u00eb t\u00eb madhe n\u00eb Amazon, dhe me p\u00ebrvoj\u00ebn q\u00eb kemi fituar gjat\u00eb gjasht\u00eb viteve t\u00eb fundit mbi se si t\u00eb ekzekutojm\u00eb kontejner\u00eb.\"<\/p>\n

Minimalizmi ekstrem<\/h1>\n

\nLinux \u00ebsht\u00eb pastruar nga gjith\u00e7ka q\u00eb nuk \u00ebsht\u00eb e nevojshme p\u00ebr ekzekutimin e kontejner\u00ebve. Ky dizajn, sipas kompanis\u00eb, redukton sip\u00ebrfaqen e sulmit.<\/p>\n

Kjo do t\u00eb thot\u00eb se n\u00eb sistemin baz\u00eb instalohen m\u00eb pak paketa, gj\u00eb q\u00eb thjeshton mb\u00ebshtetje dhe p\u00ebrdit\u00ebsimin e sistemit operativ, si dhe ul probabilitetin e ndodhis\u00eb s\u00eb problemeve p\u00ebr shkak t\u00eb var\u00ebsive, duke zvog\u00ebluar p\u00ebrdorimin e burimeve. N\u00eb thelb, gjith\u00e7ka funksionon brenda kontejner\u00ebve t\u00eb ve\u00e7ant\u00eb, nd\u00ebrsa sistemi baz\u00eb \u00ebsht\u00eb pothuajse i zbraz\u00ebt.<\/p>\n

Amazon gjithashtu e ka hequr \u00e7do shell dhe interpretor, duke p\u00ebrjashtuar rrezikun e p\u00ebrdorimit t\u00eb tyre ose rritjen aksidentale t\u00eb privilegjeve nga p\u00ebrdoruesit. N\u00eb imazhin baz\u00eb, p\u00ebr shkak t\u00eb minimalizmit dhe siguris\u00eb, nuk ka nj\u00eb shell komandash, server SSH dhe gjuh\u00eb interpretuese si Python. Mjetet p\u00ebr administratorin jan\u00eb transferuar n\u00eb nj\u00eb kontejner sh\u00ebrbimi t\u00eb ve\u00e7ant\u00eb, i cili \u00ebsht\u00eb i \u00e7aktivizuar nga parazgjedhja.<\/p>\n

Menaxhimi i sistemit parashikohet n\u00eb dy m\u00ebnyra: p\u00ebrmes API-s\u00eb dhe orkestrimit.<\/p>\n

N\u00eb vend t\u00eb menaxherit t\u00eb paketave, i cili p\u00ebrdit\u00ebson pjes\u00eb t\u00eb ve\u00e7anta t\u00eb softuerit, Bottlerocket shkarkon nj\u00eb imazh t\u00eb plot\u00eb t\u00eb sistemit t\u00eb skedar\u00ebve dhe rid\u00ebrrgon n\u00eb t\u00eb. N\u00eb rast t\u00eb d\u00ebshtimit t\u00eb ngarkes\u00ebs, ai automatikisht kthehet pas, dhe d\u00ebshtimi i ngarkes\u00ebs mund t\u00eb inicoj\u00eb rikthimin manual (komand\u00eb p\u00ebrmes API-s\u00eb).<\/p>\n

Korniza TUF<\/a><\/noindex> (The Update Framework) shkarkon p\u00ebrdit\u00ebsime t\u00eb bazuara n\u00eb imazhe n\u00eb seksione alternative ose \"t\u00eb shk\u00ebputura\". N\u00eb sistem parashikohet dy seksione t\u00eb diskut, nj\u00ebra prej t\u00eb cilave p\u00ebrmban sistemin aktiv, nd\u00ebrsa tjetra kopjon p\u00ebrdit\u00ebsimin. N\u00eb k\u00ebt\u00eb rast, seksioni rr\u00ebnjor montohet n\u00eb m\u00ebnyr\u00eb vet\u00ebm p\u00ebr lexim, nd\u00ebrsa seksioni \/etc<\/code> montohet me sistemin e skedar\u00ebve n\u00eb memorjen e p\u00ebrkohshme tmpfs<\/a><\/noindex> dhe rikthen gjendjen origjinale pas rifillimit. Ndryshimi direkt i skedar\u00ebve t\u00eb konfigurimit n\u00eb \/etc<\/code> nuk mb\u00ebshtetet: p\u00ebr t\u00eb ruajtur cil\u00ebsimet duhet t\u00eb p\u00ebrdoren API ose t\u00eb transferohet funksionaliteti n\u00eb kontejner\u00eb t\u00eb ve\u00e7ant\u00eb.<\/p>\n

\"Doli
\nShtesa e p\u00ebrdit\u00ebsimit p\u00ebrmes API-s\u00eb<\/i><\/p>\n

Siguria<\/h1>\n

\nKontejner\u00ebt krijohen me mekanizmat standard t\u00eb b\u00ebrtham\u00ebs Linux \u2014 cgroups, hap\u00ebsira emrash dhe seccomp, dhe si sistem t\u00eb kontrollit t\u00eb detyruesh\u00ebm p\u00ebr qasjen, pra p\u00ebr izolim t\u00eb m\u00ebtejsh\u00ebm p\u00ebrdoret SELinux<\/a><\/noindex> n\u00eb modin \"enforcing\".<\/p>\n

Si rregull, politikat p\u00ebr ndarjen e burimeve midis kontejner\u00ebve dhe b\u00ebrtham\u00ebs jan\u00eb t\u00eb aktivizuara. Binar\u00ebt jan\u00eb t\u00eb mbrojtur me flagje, q\u00eb p\u00ebrdoruesit ose programet t\u00eb mos mund t'i ekzekutojn\u00eb. Dhe n\u00ebse dikush arrin t\u00eb hyj\u00eb n\u00eb sistemin e skedar\u00ebve, Bottlerocket ofron nj\u00eb mjet p\u00ebr t\u00eb kontrolluar dhe mbajtur ndjekjen e \u00e7do ndryshimi t\u00eb b\u00ebr\u00eb.<\/p>\n

Rezhimi \"i verifikuar\" zbatohet p\u00ebrmes funksionit device-mapper-verity (dm-verity<\/a><\/noindex>), i cili kontrollon integritetin e seksionit rr\u00ebnjor gjat\u00eb ngarkes\u00ebs. AWS e p\u00ebrshkruan dm-verity si \"nj\u00eb funksion t\u00eb b\u00ebrtham\u00ebs Linux, i cili siguron verifikimin e integritetit p\u00ebr t\u00eb parandaluar ekzekutimin e malware-it n\u00eb sistemin operativ, si rishkrimin e softuerit kryesor t\u00eb sistemit.\"<\/p>\n

Gjithashtu, n\u00eb sistem gjendet nj\u00eb filtrues eBPF<\/a><\/noindex> (extended BPF, zbavitja e Aleksej Starovoitov<\/a><\/noindex>), i cili lejon z\u00ebvend\u00ebsimin e moduleve t\u00eb b\u00ebrtham\u00ebs me programe m\u00eb t\u00eb sigurta BPF p\u00ebr operacione sistemike me nivele t\u00eb ulta.<\/p>\n

Modeli i ekzekutimit
\nCaktohet nga p\u00ebrdoruesi
\nKompilimi
\nSiguria
\nRezhimi i d\u00ebshtimit
\nQasja n\u00eb burime<\/p>\n

P\u00ebrdorues<\/b>
\ndetyra
\npo
\n\u00e7do
\nt\u00eb drejtat e p\u00ebrdoruesve
\nnd\u00ebrprerja e ekzekutimit
\nthirrje sistemore, gabim<\/p>\n

Nuk \u00ebsht\u00eb<\/b>
\ndetyra
\njo
\nstatike
\njo
\npanika e kernel-it
\ndrejt\u00eb<\/p>\n

BPF<\/b>
\nngjarje
\npo
\nJIT, CO-RE
\nverifikimi, JIT
\nmesazh gabimi
\nndihm\u00ebs t\u00eb kufizuar<\/p>\n

\nDallimi midis BPF dhe kodit t\u00eb zakonsh\u00ebm t\u00eb nivelit t\u00eb p\u00ebrdoruesit ose kernel-it, burimi<\/a><\/noindex><\/i><\/p>\n

AWS deklaroi se Bottlerocket \"aplikon nj\u00eb model operativ q\u00eb e rrit edhe m\u00eb shum\u00eb sigurin\u00eb, duke penguar lidhjet me server\u00ebt e prodhimit me privilegje administratori\", dhe \"\u00ebsht\u00eb e p\u00ebrshtatshme p\u00ebr sisteme t\u00eb m\u00ebdha t\u00eb shp\u00ebrndara, ku kontrolli mbi \u00e7do streho t\u00eb ve\u00e7ant\u00eb \u00ebsht\u00eb i kufizuar\".<\/p>\n

P\u00ebr administrator\u00ebt e sistemeve, \u00ebsht\u00eb parashikuar nj\u00eb kontenier administratori. Por AWS nuk mendon se administratori do t\u00eb punoj\u00eb shpesh brenda Bottlerocket: \"Aktiviteti i lidhjes me nj\u00eb instanc\u00eb t\u00eb ve\u00e7ant\u00eb Bottlerocket \u00ebsht\u00eb i destinuar p\u00ebr operacione t\u00eb pakta: debuggim t\u00eb avancuar dhe \u00e7montim t\u00eb problemeve\", \u2014 shkruajn\u00eb<\/a><\/noindex> zhvilluesit.<\/p>\n

Gjuha Rust<\/h1>\n

\nInstrumenti i OS mbi kernel kryesisht \u00ebsht\u00eb shkruar n\u00eb Rust. Ky gjuh\u00eb natyrisht i zvog\u00eblon mund\u00ebsit\u00eb p\u00ebr qasje t\u00eb pasigurt n\u00eb memorie<\/a><\/noindex>, dhe gjithashtu eliminojn\u00eb kushtet e garat\u00ebs midis thread-eve<\/a><\/noindex>.<\/p>\n

Gjat\u00eb nd\u00ebrtimit t\u00eb parazgjedhur aplikohen flamujt --enable-default-pie<\/code> dhe --enable-default-ssp<\/code> p\u00ebr t\u00eb aktivizuar rast\u00ebsimin e hap\u00ebsir\u00ebs adresore t\u00eb skedar\u00ebve ekzekutiv\u00eb (ekzekutiv i pavarur nga pozita<\/a><\/noindex>, PIE) dhe mbrojtjen nga mbip\u00ebrmbajtja e stack-ut.<\/p>\n

P\u00ebr paketat n\u00eb C\/C++ gjithashtu aktivizohen flamujt -Wall<\/code>, -Werror=format-security<\/code>, -Wp,-D_FORTIFY_SOURCE=2<\/code>, -Wp,-D_GLIBCXX_ASSERTIONS<\/code> dhe -fstack-clash-protection<\/code>.<\/p>\n

P\u00ebrve\u00e7 Rust dhe C\/C++, disa paketa jan\u00eb shkruar n\u00eb gjuh\u00ebn Go.<\/p>\n

Integrimi me sh\u00ebrbimet AWS<\/h1>\n

\nDallimi nga sistemet operative t\u00eb ngjashme t\u00eb kontenier\u00ebve \u00ebsht\u00eb se Amazon e optimizoi Bottlerocket p\u00ebr ta b\u00ebr\u00eb at\u00eb t\u00eb punoj\u00eb me AWS dhe t\u00eb integrohet me sh\u00ebrbime t\u00eb tjera AWS.<\/p>\n

Orkestratori m\u00eb i popullarizuar i kontenier\u00ebve \u00ebsht\u00eb Kubernetes, prandaj AWS implementoi integrimin me sh\u00ebrbimin e vet Enterprise Kubernetes (EKS). Veglat p\u00ebr orkestrimin vijn\u00eb n\u00eb nj\u00eb kontenier administrues t\u00eb ve\u00e7ant\u00eb bottlerocket-control-container<\/a><\/noindex>, i cili p\u00ebrfshihet si parazgjedhje dhe menaxhohet p\u00ebrmes API dhe AWS SSM Agent.<\/p>\n

Do t\u00eb jet\u00eb interesante t\u00eb shihet n\u00ebse Bottlerocket do t\u00eb ngrihet, duke marr\u00eb parasysh d\u00ebshtimin e disa iniciativave t\u00eb ngjashme n\u00eb t\u00eb kaluar\u00ebn. P\u00ebr shembull, PhotonOS nga Vmware u pa si e pap\u00ebrjetuar, dhe RedHat bleu CoreOS dhe mbylli projektin<\/a><\/noindex>, i cili konsiderohej si pionier n\u00eb k\u00ebt\u00eb fush\u00eb.<\/p>\n

Integrimi i Bottlerocket me sh\u00ebrbimet AWS e b\u00ebn k\u00ebt\u00eb sistem unik n\u00eb llojin e tij. Ndoshta kjo \u00ebsht\u00eb arsyeja kryesore pse disa p\u00ebrdorues mund t\u00eb preferojn\u00eb Bottlerocket ndaj distribucioneve t\u00eb tjera, si CoreOS ose Alpine. Sistemi \u00ebsht\u00eb projektuar fillimisht p\u00ebr t\u00eb punuar me EKS dhe ECS, por ta p\u00ebrs\u00ebrisim, kjo nuk \u00ebsht\u00eb e domosdoshme. S\u00eb pari, Bottlerocket mund t\u00eb t\u00eb nd\u00ebrtohet vet\u00eb<\/a><\/noindex> p\u00ebrdoret gjithashtu, p\u00ebr shembull, si nj\u00eb zgjidhje t\u00eb hostuar. S\u00eb dyti, p\u00ebrdoruesit e EKS dhe ECS prap\u00eb do t\u00eb ruajn\u00eb mund\u00ebsin\u00eb p\u00ebr zgjedhjen e OS-s\u00eb.<\/p>\n

Kodi burimor i Bottlerocket \u00ebsht\u00eb publikuar n\u00eb GitHub n\u00ebn licenc\u00ebn Apache 2.0. Zhvilluesit tashm\u00eb po reagojn\u00eb ndaj raportimeve t\u00eb gabimeve dhe k\u00ebrkesave p\u00ebr ve\u00e7ori<\/a><\/noindex>.<\/p>\n

<\/p>\n

Si reklam\u00eb<\/h4>\n

\nVDSina<\/b> ofron VDS me pages\u00eb ditore<\/a><\/noindex>. Sht\u00eb e mundur t\u00eb instaloni \u00e7do sistem operativ, p\u00ebrfshir\u00eb nga imazhi juaj. \u00c7do server \u00ebsht\u00eb i lidhur me nj\u00eb kanal interneti prej 500 Megabit dhe \u00ebsht\u00eb falas i mbrojtur nga sulmet DDoS! <\/p>\n

\"Doli<\/a><\/noindex>
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Doli nj\u00eb distribuon minimalistik Linux-d p\u00ebrcaktuar p\u00ebr t\u00eb ekzekutuar kontenier\u00ebt. \u00c7far\u00eb \u00ebsht\u00eb m\u00eb e r\u00ebnd\u00ebsishme p\u00ebr t\u00eb | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-13T17:42:49+00:00","article:modified_time":"2020-09-13T17:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94205","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:31:27","updated":"2022-10-03 07:42:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94205"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}