请选择 进入手机版 | 继续访问电脑版

技术控

    今日:182| 主题:57533
收藏本版 (1)
最新软件应用技术尽在掌握

[其他] Introducing Google Container-VM Image

[复制链接]
Forever雅殇 投递于 2016-10-1 06:14:02
192 2
This spring, we announced    Container-VM Image as a beta product under    Google Cloud Platform (GCP). If you're a developer interested in deploying your application or a service provider on    Google Compute Engine , we recommend taking a few moments to understand how it can help you.  
   Linux containers help developers to focus on their application without worrying about the underlying infrastructure. A secure and up-to-date base image is a critical building block of any container-based infrastructure. Container-VM Image represents the best practices we here at Google have learned over the past decade running containers at scale.
   Container-VM Image design philosophy

   Container-VM Image is designed from the ground up to be a modern operating system for running containers on GCP. Read on for more information about the design choices behind Container-VM Image and its attributes.
   Build environment

   Container-VM Image is based on the open-source Chromium OS project. Chromium OS is a reliable and vetted source code base for this new operating system. In addition, its allows us to use the powerful build and test infrastructure built by the ChromeOS team.
   Designed for containers  

   The Docker container runtime is pre-installed on Container-VM Image. A key feature of containers is that the software dependencies can be packaged in the container image along with the application. With this in mind, Container-VM Image’s root file system is kept to a minimum by only including the software that's necessary to run containers.
   More secure by design

   Container-VM Image is designed with security in mind, rather than as an afterthought. The minimal root file system keeps the attack surface small. The root file system is mounted as read-only, and its integrity is verified by the kernel during boot up. Such hardening features make it difficult for attackers to permanently exploit the system.
   Software updates

   Having full control over the build infrastructure combined with a minimal root file system allows us to patch vulnerabilities and ship updated software versions very quickly. Container-VM Image also ships with an optional “in-place update” feature that allows users to stay up-to-date with minimal manual intervention.
   Getting started

   The Container-VM Images are available in the “google-containers” GCP project. Here are a few commands to get you started:
   Here’s how to list currently available images:
  
  1. $ gcloud compute images list --project google-containers --no-standard-images
复制代码
  Note: All new Container-VM Images have “gci-” prefix in their names.
   Here’s how to start a new instance:
  
  1. $ gcloud compute instances create
  2.   \
  3. --zone us-central1-a \
  4. --image-family gci-stable --image-project google-containers
复制代码
  Once the instance is ready, you can ssh into it:
  
  1. $ gcloud compute ssh
  2.   --zone us-central1-a
复制代码
  You can also start an instance using Cloud-Config, the primary API for configuring an instance running Container-VM Image. You can create users, configure firewalls, start Docker containers and even run arbitrary commands required to configure your instance from the Cloud-Config file.
   You can specify Cloud-Config as Compute Engine metadata at the time of instance creation with the special `user-data` key:
  
  1. $ gcloud compute instances create
  2.   \
  3. --zone us-central1-a \
  4. --image-family gci-stable --image-project google-containers \
  5. --metadata-from-file user-data=
复制代码
  What’s next

    We're working hard on improving and adding new features to Container-VM Image to make it the best way to run containers on GCP.  Stay tuned for future blogs and announcements. In the meantime, you can find more documentation and examples at the    Container-VM Image homepage , and send us your feedback at    [email protected] .



上一篇:AI generates abstract diagrams of IQ tests as good as 10th grade student
下一篇:两端对齐布局与text-align:justify
如果爱 投递于 2016-10-8 21:17:28
看一漂亮MM,苦无搭讪办法,路旁一砖头,拣起,上前,“同学,这是你掉的吧?”
回复 支持 反对

使用道具 举报

teary889 投递于 2016-10-8 21:45:22
明星脱一点就能更出名,我脱的光光的却被抓起来了
回复 支持 反对

使用道具 举报

我要投稿

推荐阅读


回页顶回复上一篇下一篇回列表
手机版/CoLaBug.com ( 粤ICP备05003221号 | 文网文[2010]257号 | 粤公网安备 44010402000842号 )

© 2001-2017 Comsenz Inc.

返回顶部 返回列表