{"id":94205,"date":"2020-09-13T19:42:49","date_gmt":"2020-09-13T17:42:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom"},"modified":"2020-09-13T19:42:49","modified_gmt":"2020-09-13T17:42:49","slug":"vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","title":{"rendered":"Doli nj\u00eb distribucion minimalistik Linux, Bottlerocket p\u00ebr t\u00eb nisur konteiner\u00ebt. E gjitha e r\u00ebnd\u00ebsishme p\u00ebr t\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Doli nj\u00eb distribucion minimalistik Linux, Bottlerocket p\u00ebr t\u00eb nisur konteiner\u00ebt. E gjitha e r\u00ebnd\u00ebsishme p\u00ebr t\u00eb\" src=\"\/wp-content\/uploads\/2020\/09\/9855c867e513e12eb89c4e70a2280329.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKompania Amazon <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/blogs\/opensource\/announcing-the-general-availability-of-bottlerocket-an-open-source-linux-distribution-purpose-built-to-run-containers\/\">njoftoi<\/a><\/noindex> p\u00ebr lirimin p\u00ebrfundimtar <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bottlerocket-os\/bottlerocket\">Bottlerocket<\/a><\/noindex> \u2014 nj\u00eb shp\u00ebrndarje e specializuar p\u00ebr ekzekutimin e kontejner\u00ebve dhe menaxhimin efikas t\u00eb tyre.<\/p>\n<p>Bottlerocket (p\u00ebr rastin, k\u00ebshtu quhen raketat e vogla t\u00eb b\u00ebra n\u00eb sht\u00ebpi me barut tymi) \u2014 nuk \u00ebsht\u00eb sistemi i par\u00eb operativ p\u00ebr kontejner\u00eb, por ka shum\u00eb mund\u00ebsi q\u00eb do t\u00eb marr\u00eb p\u00ebrhapje t\u00eb gjer\u00eb p\u00ebr shkak t\u00eb integrimit t\u00eb parazgjedhur me sh\u00ebrbimet AWS. Edhe pse sistemi \u00ebsht\u00eb fokusuar n\u00eb re Amazon, kodi burimor i hapur lejon nd\u00ebrtimin e saj kudo: lokal n\u00eb server, n\u00eb Raspberry Pi, n\u00eb \u00e7do re konkurrente dhe madje edhe n\u00eb nj\u00eb mjedis pa kontejner\u00eb.<\/p>\n<p>Kjo \u00ebsht\u00eb nj\u00eb z\u00ebvend\u00ebsim i denj\u00eb p\u00ebr shp\u00ebrndarjen CoreOS, e cila u varros nga Red Hat.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nN\u00eb t\u00eb v\u00ebrtet\u00eb, departamenti i Amazon Web Services tashm\u00eb ka Amazon Linux, i cili sapo doli n\u00eb versionin e dyt\u00eb: kjo \u00ebsht\u00eb nj\u00eb shp\u00ebrndarje me p\u00ebrdorim t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb cilin mund ta ekzekutoni n\u00eb nj\u00eb kontejner Docker ose me hipervizor\u00ebt Linux KVM, Microsoft Hyper-V dhe VMware ESXi. Ka qen\u00eb optimizuar p\u00ebr pun\u00eb n\u00eb re AWS, por me daljen e Bottlerocket, t\u00eb gjith\u00eb rekomandohet t\u00eb b\u00ebjn\u00eb upgrade n\u00eb sistemin e ri, i cili \u00ebsht\u00eb m\u00eb i sigurt, modern dhe konsumon m\u00eb pak burime.<\/p>\n<p>AWS njoftoi Bottlerocket <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/blogs\/containers\/bottlerocket-a-special-purpose-container-operating-system\/\">n\u00eb mars 2020<\/a><\/noindex>. Menj\u00ebher\u00eb e pranoi se nuk \u00ebsht\u00eb \"Linux p\u00ebr kontejner\u00eb\" i par\u00eb, duke p\u00ebrmendur si burime frym\u00ebzimi CoreOS, Rancher OS dhe Project Atomic. Zhvilluesit shkruajt\u00ebn se sistemi operativ \u00ebsht\u00eb \"rezultati i m\u00ebsimeve q\u00eb kemi nxjerr\u00eb gjat\u00eb nj\u00eb kohe t\u00eb gjat\u00eb pune me sh\u00ebrbimet prodhuese n\u00eb shkall\u00eb Amazon, dhe me p\u00ebrvoj\u00ebn q\u00eb kemi marr\u00eb gjat\u00eb gjasht\u00eb viteve t\u00eb fundit n\u00eb lidhje me se si t\u00eb ekzekutojm\u00eb kontejner\u00ebt.\"<\/p>\n<h1>Minimalizmi ekstrem<\/h1>\n<p>\nLinux \u00ebsht\u00eb pastruar nga \u00e7do gj\u00eb q\u00eb nuk \u00ebsht\u00eb e nevojshme p\u00ebr ekzekutimin e kontejner\u00ebve. Nj\u00eb dizajn i till\u00eb, sipas kompanis\u00eb, redukton sip\u00ebrfaqen e sulmit.<\/p>\n<p>Kjo do t\u00eb thot\u00eb se n\u00eb sistemin baz\u00eb instalohen m\u00eb pak paketa, \u00e7ka e b\u00ebn m\u00eb t\u00eb leht\u00eb mb\u00ebshtetje dhe p\u00ebrdit\u00ebsimin e sistemit operativ, si dhe ul probabilitetin e problemeve p\u00ebr shkak t\u00eb var\u00ebsive, duke ulur p\u00ebrdorimin e burimeve. N\u00eb parim, k\u00ebtu gjith\u00e7ka funksionon brenda kontejner\u00ebve t\u00eb ve\u00e7ant\u00eb, nd\u00ebrsa sistemi baz\u00eb \u00ebsht\u00eb pothuajse i zbraz\u00ebt.<\/p>\n<p>Amazon gjithashtu e ka hequr \u00e7do shell dhe interpretor, duke eliminuar rrezikun e p\u00ebrdorimit t\u00eb tyre ose rritjes aksidentale t\u00eb privilegjeve nga p\u00ebrdoruesit. N\u00eb imazhin baz\u00eb, p\u00ebr shkak t\u00eb minimalizmit dhe siguris\u00eb, mungon shell-i i komandave, serveri SSH dhe gjuh\u00ebt interpretuese si Python. Veglat p\u00ebr administratorin jan\u00eb vendosur n\u00eb nj\u00eb kontejner t\u00eb ve\u00e7ant\u00eb t\u00eb sh\u00ebrbimit, i cili \u00ebsht\u00eb i \u00e7aktivizuar si parazgjedhje.<\/p>\n<p>Menaxhimi i sistemit ofrohet n\u00eb dy m\u00ebnyra: n\u00ebp\u00ebrmjet API-s\u00eb dhe orkestrimit.<\/p>\n<p>N\u00eb vend t\u00eb menaxherit t\u00eb paketave, i cili p\u00ebrdit\u00ebson pjes\u00eb t\u00eb ve\u00e7anta t\u00eb softuerit, Bottlerocket shkarkon nj\u00eb imazh t\u00eb plot\u00eb t\u00eb sistemit t\u00eb skedar\u00ebve dhe ri-nis n\u00eb t\u00eb. N\u00eb rast d\u00ebshtimi t\u00eb ngarkes\u00ebs, automatikisht rikthehet, nd\u00ebrsa d\u00ebshtimi i ngarkes\u00ebs mund t\u00eb nxis\u00eb rikthimin manual (komanda n\u00ebp\u00ebrmjet API-s\u00eb).<\/p>\n<p>Korniza <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/theupdateframework\/specification\/\">TUF<\/a><\/noindex> (The Update Framework) shkarkon p\u00ebrdit\u00ebsime n\u00eb baza imazhesh n\u00eb pjes\u00ebt alternative ose 't\u00eb shk\u00ebputura'. Nj\u00eb sistem i dedikuar ndan dy pjes\u00eb t\u00eb diskut, nj\u00ebra prej t\u00eb cilave p\u00ebrmban sistemin aktiv, nd\u00ebrsa tjetra kopjon p\u00ebrdit\u00ebsimin. Nd\u00ebrkoh\u00eb, pjesa rr\u00ebnj\u00ebsore montohet n\u00eb m\u00ebnyr\u00eb vet\u00ebm p\u00ebr lexim, nd\u00ebrsa pjesa <code>\/etc<\/code> montohet me sistemin e skedar\u00ebve n\u00eb memorje <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/Documentation\/filesystems\/tmpfs.txt\">tmpfs<\/a><\/noindex> dhe rivendos gjendjen origjinale pas rinisjes. Modifikimi direkt i skedar\u00ebve t\u00eb konfigurimit n\u00eb <code>\/etc<\/code> nuk mb\u00ebshtetet: p\u00ebr t\u00eb ruajtur cil\u00ebsimet, duhet t\u00eb p\u00ebrdoret API ose t\u00eb nxirret funksionaliteti n\u00eb kontejner\u00eb t\u00eb ve\u00e7ant\u00eb.<\/p>\n<p><img decoding=\"async\" alt=\"Doli nj\u00eb distribucion minimalistik Linux, Bottlerocket p\u00ebr t\u00eb nisur konteiner\u00ebt. E gjitha e r\u00ebnd\u00ebsishme p\u00ebr t\u00eb\" src=\"\/wp-content\/uploads\/2020\/09\/df72a3ad1afefd9ec06b7a58483be268.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Skema e p\u00ebrdit\u00ebsimit n\u00ebp\u00ebrmjet API-s\u00eb<\/i><\/p>\n<h1>Siguria<\/h1>\n<p>\nKontejner\u00ebt krijohen nga mekanizmat e brendsh\u00ebm t\u00eb b\u00ebrthames Linux \u2014 cgroups, hap\u00ebsirat em\u00ebrore dhe seccomp, nd\u00ebrsa si nj\u00eb sistem i kontrollit t\u00eb aksesit, p\u00ebr t\u00eb siguruar izolim shtes\u00eb, p\u00ebrdoret <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/SELinuxProject\">SELinux<\/a><\/noindex> n\u00eb modalitetin 'enforcing'.<\/p>\n<p>Si parazgjedhje jan\u00eb p\u00ebrfshir\u00eb politika p\u00ebr ndarjen e burimeve midis kontejner\u00ebve dhe b\u00ebrtham\u00ebs. Binar\u00ebt jan\u00eb t\u00eb mbrojtur me flamuj, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrdoruesit apo programet t\u00eb mos mund t'i ekzekutojn\u00eb. Dhe n\u00ebse dikush arrin n\u00eb sistemin e skedar\u00ebve, Bottlerocket ofron nj\u00eb mjet p\u00ebr t\u00eb verifikuar dhe ndjekur \u00e7do ndryshim t\u00eb b\u00ebr\u00eb.<\/p>\n<p>Modaliteti 'i ngarkes\u00ebs s\u00eb verifikuar' \u00ebsht\u00eb realizuar p\u00ebrmes funksionit device-mapper-verity (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/admin-guide\/device-mapper\/verity.html\">dm-verity<\/a><\/noindex>), e cila kontrollon integritetin e seksionit rr\u00ebnj\u00ebs gjat\u00eb ngarkimit. AWS e p\u00ebrshkruan dm-verity si \u00abnj\u00eb funksion i b\u00ebrtham\u00ebs Linux, i cili siguron kontrollin e integritetit p\u00ebr t\u00eb parandaluar funksionimin e malware n\u00eb OS, si\u00e7 \u00ebsht\u00eb rip\u00ebrshkrimi i softuerit t\u00eb sistemit t\u00eb baz\u00ebs\u00bb.<\/p>\n<p>Po ashtu, n\u00eb sistem ka nj\u00eb filt\u00ebr <noindex><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/740157\/\">eBPF<\/a><\/noindex> (extended BPF, <noindex><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/598545\/\">zhvillimi i Aleksej Starovoytova<\/a><\/noindex>), i cili lejon z\u00ebvend\u00ebsimin e modul\u00ebve t\u00eb b\u00ebrtham\u00ebs me programe m\u00eb t\u00eb sigurta BPF p\u00ebr operacione sistemore me nivel t\u00eb ul\u00ebt.<\/p>\n<p>Modeli i ekzekutimit<br \/>\nCaktuar nga p\u00ebrdoruesi<br \/>\nKompilimi<br \/>\nSiguria<br \/>\nM\u00ebnyra e d\u00ebshtimit<br \/>\nQasje n\u00eb burime<\/p>\n<p><b>P\u00ebrdoruesi<\/b><br \/>\nnj\u00eb detyr\u00eb<br \/>\npo<br \/>\n\u00e7do<br \/>\nt\u00eb drejtat e p\u00ebrdoruesve<br \/>\nnd\u00ebrprerje e ekzekutimit<br \/>\nthirrje sistemore, gabim<\/p>\n<p><b>B\u00ebrthama<\/b><br \/>\nnj\u00eb detyr\u00eb<br \/>\njo<br \/>\nstatike<br \/>\njo<br \/>\npanika e b\u00ebrtham\u00ebs<br \/>\ndirekte<\/p>\n<p><b>BPF<\/b><br \/>\nngjarje<br \/>\npo<br \/>\nJIT, CO-RE<br \/>\nverifikimi, JIT<br \/>\nmesazh gabimi<br \/>\nasistent\u00eb t\u00eb kufizuar<\/p>\n<p>\n<i>Dallimi i BPF nga kodi normal i nivelit t\u00eb p\u00ebrdoruesit ose b\u00ebrtham\u00ebs, <noindex><a rel=\"nofollow\" href=\"https:\/\/d1.awsstatic.com\/events\/reinvent\/2019\/REPEAT_1_BPF_performance_analysis_at_Netflix_OPN303-R1.pdf\">burimi<\/a><\/noindex><\/i><\/p>\n<p>AWS tha se Bottlerocket \u00abzbarton nj\u00eb model operativ q\u00eb p\u00ebrmir\u00ebson akoma m\u00eb shum\u00eb sigurin\u00eb, duke penguar lidhjen me serverat prodhues me privilegje administrator\u00ebsh\u00bb, dhe \u00ab\u00ebsht\u00eb e p\u00ebrshtatshme p\u00ebr sisteme t\u00eb m\u00ebdha t\u00eb shp\u00ebrndara, ku kontrolli mbi \u00e7do host t\u00eb ve\u00e7ant\u00eb \u00ebsht\u00eb i kufizuar\u00bb.<\/p>\n<p>P\u00ebr administrator\u00ebt e sistemeve \u00ebsht\u00eb parapar\u00eb nj\u00eb kontejner administratori. Por AWS nuk mendon se admini do t\u2019i duhet shpesh t\u00eb punoj\u00eb brenda Bottlerocket: \u00abAktiviteti i hyrjes n\u00eb nj\u00eb instanc\u00eb t\u00eb ve\u00e7ant\u00eb Bottlerocket \u00ebsht\u00eb i destinuar p\u00ebr operacione t\u00eb pakta: mb\u00ebshtetje dhe zgjidhje t\u00eb problemeve t\u00eb avancuara\u00bb, <noindex><a rel=\"nofollow\" href=\"https:\/\/aws.amazon.com\/blogs\/opensource\/announcing-the-general-availability-of-bottlerocket-an-open-source-linux-distribution-purpose-built-to-run-containers\/\">shkruajn\u00eb<\/a><\/noindex> zhvilluesit.<\/p>\n<h1>Gjuha Rust<\/h1>\n<p>\nMjetet e OS mbi b\u00ebrtham\u00eb kryesisht shkruhen n\u00eb Rust. Kjo gjuh\u00eb natyrsh\u00ebm <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/438288\/\">ul probabilitetin e akseseve t\u00eb pasigurta n\u00eb kujtes\u00eb<\/a><\/noindex>, si dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/441370\/\">eliminon kushtet e gar\u00ebs mes proceseve<\/a><\/noindex>.<\/p>\n<p>N\u00eb nd\u00ebrtimin p\u00ebr default aplikohen flamujt <code>--enable-default-pie<\/code> dhe <code>--enable-default-ssp<\/code> p\u00ebr aktivizimin e rast\u00ebsis\u00eb s\u00eb adresave t\u00eb skedar\u00ebve ekzekutues (<noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Position-independent_code\">position-independent executable<\/a><\/noindex>, PIE) dhe mbrojtjes nga mbingarkesa e grumbullit.<\/p>\n<p>P\u00ebr paketat n\u00eb C\/C++ gjithashtu aktivizohen flamujt <code>-Wall<\/code>, <code>-Werror=format-security<\/code>, <code>-Wp,-D_FORTIFY_SOURCE=2<\/code>, <code>-Wp,-D_GLIBCXX_ASSERTIONS<\/code> dhe <code>-fstack-clash-protection<\/code>.<\/p>\n<p>P\u00ebrve\u00e7 Rust dhe C\/C++, disa paketa jan\u00eb shkruar n\u00eb gjuh\u00ebn Go.<\/p>\n<h1>Integrimi me sh\u00ebrbimet AWS<\/h1>\n<p>\nDallimi nga sistemet operuese t\u00eb ngjashme me konteiner \u00ebsht\u00eb se Amazon e ka optimizuar Bottlerocket p\u00ebr t\u00eb punuar n\u00eb AWS dhe p\u00ebr integrim me sh\u00ebrbime t\u00eb tjera t\u00eb AWS.<\/p>\n<p>Orkestratori m\u00eb i njohur i kontejner\u00ebve \u00ebsht\u00eb Kubernetes, prandaj AWS ka wdj\u00ebdhur integrimin me sh\u00ebrbimin e saj t\u00eb Enterprise Kubernetes (EKS). Mjetet p\u00ebr orkestrimin vijn\u00eb n\u00eb nj\u00eb konteiner menaxhues t\u00eb ve\u00e7ant\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bottlerocket-os\/bottlerocket-control-container\">bottlerocket-control-container<\/a><\/noindex>, i cili p\u00ebrfshihet si parazgjedhje dhe menaxhohet p\u00ebrmes API-s\u00eb dhe AWS SSM Agent.<\/p>\n<p>Do t\u00eb jet\u00eb interesante t\u00eb shohim n\u00ebse Bottlerocket do t\u00eb arrij\u00eb sukses, duke marr\u00eb parasysh d\u00ebshtimin e disa iniciativave t\u00eb ngjashme n\u00eb t\u00eb kaluar\u00ebn. P\u00ebr shembull, PhotonOS nga Vmware rezultoi e pap\u00ebrdorur, dhe RedHat bleu CoreOS dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/coreos.com\/os\/eol\/\">ndali projektin<\/a><\/noindex>, i cili ishte konsideruar pionier n\u00eb k\u00ebt\u00eb fush\u00eb.<\/p>\n<p>Integrimi i Bottlerocket n\u00eb sh\u00ebrbimet AWS e b\u00ebn k\u00ebt\u00eb sistem unikal n\u00eb llojin e tij. Ndoshta, kjo \u00ebsht\u00eb arsyeja kryesore pse disa p\u00ebrdorues mund t\u00eb preferojn\u00eb Bottlerocket ndaj shp\u00ebrndarjeve t\u00eb tjera, si CoreOS ose Alpine. Sistemi \u00ebsht\u00eb projektuar n\u00eb fillim p\u00ebr t\u00eb punuar me EKS dhe ECS, por p\u00ebrs\u00ebrisim, kjo nuk \u00ebsht\u00eb e detyrueshme. S\u00eb pari, Bottlerocket mund t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/bottlerocket-os\/bottlerocket\/blob\/develop\/BUILDING.md\">nd\u00ebrtohet vet\u00eb<\/a><\/noindex> dhe t\u00eb p\u00ebrdoret, p\u00ebr shembull, si nj\u00eb zgjidhje t\u00eb hostuar. S\u00eb dyti, p\u00ebrdoruesit e EKS dhe ECS ende do t\u00eb ruajn\u00eb mund\u00ebsin\u00eb e zgjedhjes s\u00eb OS.<\/p>\n<p>Kodi burimor i Bottlerocket \u00ebsht\u00eb publikuar n\u00eb GitHub n\u00ebn licenc\u00ebn Apache 2.0. Zhvilluesit tashm\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/orgs\/bottlerocket-os\/projects\/1\">po reagojn\u00eb ndaj raporteve t\u00eb defekteve dhe k\u00ebrkesave p\u00ebr funksione<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h4>SOF6<\/h4>\n<p>\n<b>VDSina<\/b> ofron <noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr96\">VDS me pages\u00eb ditore<\/a><\/noindex>. Mund t\u00eb instalohet \u00e7do sistem operativ, p\u00ebrfshir\u00eb nga imazhi juaj. \u00c7do server \u00ebsht\u00eb i lidhur me nj\u00eb kanal interneti prej 500 Megabit dhe \u00ebsht\u00eb i mbrojtur falas nga sulmet DDoS! <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr96\"><img decoding=\"async\" alt=\"Doli nj\u00eb distribucion minimalistik Linux, Bottlerocket p\u00ebr t\u00eb nisur konteiner\u00ebt. E gjitha e r\u00ebnd\u00ebsishme p\u00ebr t\u00eb\" src=\"\/wp-content\/uploads\/2020\/09\/2a9ea401c77026c05482ed0640ed56e2.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/518290\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Amazon \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 Bottlerocket \u2014 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043c\u0438. Bottlerocket (\u043a\u0441\u0442\u0430\u0442\u0438, \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043c\u0435\u043b\u043a\u0438\u0435 \u0441\u0430\u043c\u043e\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u0434\u044b\u043c\u043d\u043e\u043c \u043f\u043e\u0440\u043e\u0445\u0435) \u2014 \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u041e\u0421 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043d\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 AWS. \u0425\u043e\u0442\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u043a\u043e Amazon, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-13T17:42:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-13T17:42:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7oi distribucioni minimaliste t\u00eb Linux-it Bottlerocket p\u00ebr t\u00eb drejtuar kontejner\u00eb. Gjith\u00e7ka m\u00eb e r\u00ebnd\u00ebsishme rreth tij | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u0448\u0435\u043b \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u043d\u044b\u0439 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Bottlerocket \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u0421\u0430\u043c\u043e\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e \u043d\u0451\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vyshel-minimalistichnyj-linux-distributiv-bottlerocket-dlya-zapuska-kontejnerov-samoe-glavnoe-o-nyom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-13T17:42:49+00:00","article:modified_time":"2020-09-13T17:42:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94205","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:31:27","updated":"2022-10-03 07:42:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94205"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94206"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}