Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Container-Optimized OS dari Google adalah image sistem operasi untuk VM
Compute Engine Anda yang dioptimalkan untuk menjalankan container.
Container-Optimized OS dikelola oleh Google dan didasarkan pada project
Chromium OS open source. Dengan Container-Optimized OS, Anda dapat membuat
container di Google Cloud Platform dengan cepat, efisien, dan aman.
Fitur dan Manfaat
Container-Optimized OS memberikan manfaat berikut:
Menjalankan Container secara Langsung: Instance Container-Optimized OS sudah
diinstal sebelumnya dengan runtime Docker dan containerd serta cloud-init. Dengan instance OS yang Dioptimalkan untuk Container, Anda dapat menampilkan container pada saat yang sama saat membuat VM, tanpa memerlukan penyiapan di host.
Permukaan serangan yang lebih kecil: Container-Optimized OS memiliki jejak yang lebih kecil, sehingga dapat mengurangi potensi permukaan serangan instance Anda.
Terkunci secara default: Instance Container-Optimized OS menyertakan
firewall terkunci dan setelan keamanan lainnya secara default.
Update Otomatis: Instance Container-Optimized OS dikonfigurasi untuk mendownload update mingguan secara otomatis di latar belakang; cukup lakukan mulai ulang untuk menggunakan update terbaru.
Batasan
Container-Optimized OS memiliki dukungan terbatas atau tidak memiliki dukungan untuk beberapa fitur umum
yang mungkin Anda kenal di sistem operasi lain:
Container-Optimized OS tidak menyertakan pengelola paket; sehingga, Anda tidak akan
dapat menginstal paket software langsung di instance. Namun, Anda
dapat menggunakan CoreOS toolbox untuk menginstal dan menjalankan alat debug dan admin di
penampung terisolasi.
Container-Optimized OS tidak mendukung eksekusi aplikasi
tanpa container.
Kernel Container-Optimized OS dikunci; Anda tidak akan dapat menginstal modul atau driver kernel pihak ketiga.
Container-Optimized OS tidak didukung di luar lingkungan Google Cloud Platform.
Menggunakan Container-Optimized OS
Container-Optimized OS adalah Image OS node default di Kubernetes Engine dan deployment Kubernetes lainnya di Google Cloud Platform. Lihat Panduan Memulai Kubernetes Engine untuk mengetahui informasi selengkapnya tentang penggunaan Container-Optimized OS dengan Kubernetes Engine.
Anda juga dapat menggunakan Container-Optimized OS untuk menampilkan container dengan cepat di instance Compute Engine dengan penyiapan minimal. Untuk mengetahui informasi selengkapnya, lihat
Membuat dan Mengonfigurasi Instance.
Anda dapat menjalankan alat seperti ping, Google Cloud CLI, pstree, htop,
emacs, dan lainnya menggunakan utilitas toolbox CoreOS, yang sudah diinstal sebelumnya di
Container-Optimized OS di /usr/bin/toolbox. Lihat Melakukan proses debug dengan toolbox untuk
mengetahui informasi selengkapnya.
Kasus penggunaan untuk Container-Optimized OS
Container-Optimized OS dapat digunakan untuk menjalankan sebagian besar container. Sebaiknya
pertimbangkan untuk menggunakan Container-Optimized OS sebagai sistem operasi untuk
instance Compute Engine jika Anda memiliki kebutuhan berikut:
Anda memerlukan dukungan untuk container atau Kubernetes dengan penyiapan minimal.
Anda memerlukan sistem operasi yang memiliki jejak kecil dan diperkuat keamanannya untuk container.
Anda memerlukan sistem operasi yang telah diuji dan diverifikasi untuk menjalankan
Kubernetes di instance Compute Engine.
Container-Optimized OS mungkin bukan pilihan yang tepat untuk Anda dalam kasus
berikut:
Aplikasi Anda tidak di-containerisasi atau aplikasi yang di-containerisasi
bergantung pada modul kernel, driver, dan paket tambahan lainnya yang
tidak tersedia di Container-Optimized OS.
Anda memerlukan dukungan pelanggan profesional dari penyedia Linux (Canonical,
Core OS, Redhat, SUSE, dll.).
Anda ingin aplikasi OS dan gambar Anda didukung sepenuhnya di luar
Google Cloud.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-19 UTC."],[[["\u003cp\u003eContainer-Optimized OS is a Google-maintained operating system image for Compute Engine VMs, specifically designed for running containers efficiently and securely.\u003c/p\u003e\n"],["\u003cp\u003eThis OS comes pre-installed with Docker, containerd runtimes, and \u003ccode\u003ecloud-init\u003c/code\u003e, allowing users to deploy containers concurrently with VM creation, without needing additional on-host configurations.\u003c/p\u003e\n"],["\u003cp\u003eContainer-Optimized OS is security-focused, featuring a smaller attack surface, a locked-down firewall, and weekly automatic background updates.\u003c/p\u003e\n"],["\u003cp\u003eWhile optimized for containers and Kubernetes, Container-Optimized OS has limitations, including the absence of a package manager, no support for non-containerized applications, and the inability to install third-party kernel modules.\u003c/p\u003e\n"],["\u003cp\u003eContainer-Optimized OS is the default OS for Kubernetes Engine and other deployments on the Google Cloud platform, but may not be suitable for applications that require custom kernel modules, non-containerized applications, or professional Linux provider support.\u003c/p\u003e\n"]]],[],null,["# Container-Optimized OS Overview\n\nContainer-Optimized OS from Google is an operating system image for your\n[Compute Engine](/compute) VMs that is optimized for running containers.\nContainer-Optimized OS is maintained by Google and based on the open source\nChromium OS project. With Container-Optimized OS, you can bring up your\ncontainers on Google Cloud Platform quickly, efficiently, and securely.\n\nFeatures and Benefits\n---------------------\n\nContainer-Optimized OS provides the following benefits:\n\n- **Run Containers Out of the Box** : Container-Optimized OS instances come pre-installed with the Docker and containerd runtimes and `cloud-init`. With a Container-Optimized OS instance, you can bring up your container at the same time you create your VM, with no on-host setup required.\n- **Smaller attack surface**: Container-Optimized OS has a smaller footprint, reducing your instance's potential attack surface.\n- **Locked-down by default**: Container-Optimized OS instances include a locked-down firewall and other security settings by default.\n- **Automatic Updates**: Container-Optimized OS instances are configured to automatically download weekly updates in the background; only a reboot is necessary to use the latest updates.\n\nLimitations\n-----------\n\nContainer-Optimized OS has limited or no support for some of the common\nfeatures you may be familiar with on other operating systems:\n\n- Container-Optimized OS does not include a package manager; as such, you'll be unable to install software packages directly on an instance. However, you can use [CoreOS toolbox](/container-optimized-os/docs/how-to/toolbox) to install and run debugging and admin tools in an isolated container.\n- Container-Optimized OS does not support execution of non-containerized applications.\n- The Container-Optimized OS kernel is locked down; you'll be unable to install third-party kernel modules or drivers.\n- Container-Optimized OS is not supported outside of the Google Cloud Platform environment.\n\nUsing Container-Optimized OS\n----------------------------\n\nContainer-Optimized OS is the default node OS Image in [Kubernetes Engine](/kubernetes-engine) and\nother [Kubernetes](https://kubernetes.io/) deployments on Google Cloud Platform. See the [Kubernetes\nEngine Quickstart](/kubernetes-engine/docs/deploy-app-cluster) for more information on using Container-Optimized OS with\nKubernetes Engine.\n\nYou can also use Container-Optimized OS to quickly bring up a container\non a Compute Engine instance with minimal setup. For more information, see\n[Creating and Configuring Instances](/container-optimized-os/docs/how-to/create-configure-instance).\n\nYou can run tools like `ping`, the Google Cloud CLI, `pstree`, `htop`,\n`emacs` and more using the [CoreOS toolbox](/container-optimized-os/docs/how-to/toolbox) utility, which is pre-installed in\nContainer-Optimized OS at `/usr/bin/toolbox`. See [Debugging with toolbox](/container-optimized-os/docs/how-to/toolbox) for\nmore information.\n\nUse cases for Container-Optimized OS\n------------------------------------\n\nContainer-Optimized OS can be used to run most containers. You should\nconsider using Container-Optimized OS as the operating system for your\nCompute Engine instance if you have the following needs:\n\n- You need support for containers or Kubernetes with minimal setup.\n- You need an operating system that has a small footprint and is [security\n hardened](/container-optimized-os/docs/concepts/security) for containers.\n- You need an operating system that is tested and verified for running Kubernetes on your Compute Engine instances.\n\nContainer-Optimized OS may not be the right choice for you in the following\ncases:\n\n- Your application is not containerized or your containerized application depends on kernel modules, drivers and other additional packages that are not available in Container-Optimized OS.\n- You need professional customer support from a Linux provider (Canonical, Core OS, Redhat, SUSE, etc).\n- You want your image and OS application to be fully supported outside Google Cloud.\n\nSee [Containers on Google Cloud](/compute/docs/containers) to learn about\nother operating systems you can use to\nrun containerized applications on Google Cloud. Compute Engine\n[provides images](/compute/docs/images) for other popular operating systems, including images that are\n[optimized for containers](/compute/docs/containers#container_images)."]]
