Google의 Container-Optimized OS는 컨테이너를 실행하는 데 최적화된 Compute Engine VM용 운영체제 이미지입니다.
Container-Optimized OS는 Google이 유지관리하며 오픈소스 Chromium OS 프로젝트를 기반으로 합니다. Container-Optimized OS를 사용하면 Google Cloud Platform에서 컨테이너를 빠르고 효율적으로 안전하게 가져올 수 있습니다.
기능 및 장점
Container-Optimized OS는 다음과 같은 이점을 제공합니다.
컨테이너 즉시 실행: Container-Optimized OS 인스턴스는 Docker 및 containerd 런타임과 cloud-init가 미리 설치된 상태로 제공됩니다. Container-Optimized OS 인스턴스를 사용하면 호스트에서 설정 작업을 할 필요 없이 VM을 생성하는 동시에 컨테이너를 가져올 수 있습니다.
공격에 노출되는 영역 축소: Container-Optimized OS는 공간을 적게 차지하므로 인스턴스에서 공격에 노출될 만한 영역이 줄어듭니다.
기본적으로 잠김: Container-Optimized OS 인스턴스에는 잠긴 방화벽과 기타 보안 설정이 기본적으로 포함됩니다.
자동 업데이트: Container-Optimized OS 인스턴스는 주간 업데이트를 백그라운드에서 자동으로 다운로드하도록 구성되며, 재부팅만 하면 최신 업데이트를 사용할 수 있습니다.
제한사항
Container-Optimized OS는 다른 운영체제에서 흔히 제공하는 몇 가지 일반적인 기능을 제한적으로만 지원하거나 전혀 지원하지 않습니다.
Container-Optimized OS에는 패키지 관리자가 포함되어 있지 않으므로 소프트웨어 패키지를 인스턴스에 곧바로 설치할 수 없습니다. 하지만 CoreOS 도구 상자를 사용하면 격리된 컨테이너에서 디버깅 및 관리 도구를 설치하고 실행할 수 있습니다.
Container-Optimized OS는 컨테이너화되지 않은 애플리케이션의 실행을 지원하지 않습니다.
Container-Optimized OS 커널은 잠겨 있으므로 타사 커널 모듈이나 드라이버를 설치할 수 없습니다.
Container-Optimized OS는 Google Cloud Platform 환경 외부에서 지원되지 않습니다.
또한 Container-Optimized OS를 사용하여 최소한의 설정으로 Compute Engine 인스턴스에서 컨테이너를 신속하게 가져올 수 있습니다. 자세한 내용은 인스턴스 만들기 및 구성을 참조하세요.
ping, Google Cloud CLI, pstree, htop, emacs와 같은 도구를 실행하고 /usr/bin/toolbox에서 Container-Optimized OS에 사전 설치된 CoreOS 도구 상자를 사용할 수 있습니다. 자세한 내용은 도구 상자로 디버깅을 참조하세요.
Container-Optimized OS의 사용 사례
Container-Optimized OS는 대부분의 컨테이너를 실행하는 데 사용할 수 있습니다. 다음 요구 사항이 있는 경우 Container-Optimized OS를 Compute Engine 인스턴스의 운영체제로 사용하는 것이 좋습니다.
Compute Engine 인스턴스에서 Kubernetes 실행 검증과 테스트가 완료된 운영체제가 필요한 경우
다음과 같은 경우에는 Container-Optimized OS가 부적절할 수 있습니다.
애플리케이션이 컨테이너화되지 않았거나 컨테이너화된 애플리케이션이 Container-Optimized OS에서 사용할 수 없는 커널 모듈, 드라이버, 기타 추가 패키지에 의존하는 경우
Linux 제공업체(Canonical, Core OS, Redhat, SUSE 등)의 전문 고객지원이 필요한 경우
이미지와 OS 애플리케이션이Google Cloud외부에서 완전하게 지원되기를 원하는 경우
Google Cloud에서 컨테이너화된 애플리케이션을 실행하는 데 사용할 수 있는 다른 운영체제에 대해 알아보려면 Google Cloud의 컨테이너를 참고하세요. Compute Engine은 다른 주요 운영체제를 위한 컨테이너 최적화 이미지를 포함한 이미지를 제공합니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eContainer-Optimized OS is a Google-maintained operating system image for Compute Engine VMs, specifically designed for running containers efficiently and securely.\u003c/p\u003e\n"],["\u003cp\u003eThis OS comes pre-installed with Docker, containerd runtimes, and \u003ccode\u003ecloud-init\u003c/code\u003e, allowing users to deploy containers concurrently with VM creation, without needing additional on-host configurations.\u003c/p\u003e\n"],["\u003cp\u003eContainer-Optimized OS is security-focused, featuring a smaller attack surface, a locked-down firewall, and weekly automatic background updates.\u003c/p\u003e\n"],["\u003cp\u003eWhile optimized for containers and Kubernetes, Container-Optimized OS has limitations, including the absence of a package manager, no support for non-containerized applications, and the inability to install third-party kernel modules.\u003c/p\u003e\n"],["\u003cp\u003eContainer-Optimized OS is the default OS for Kubernetes Engine and other deployments on the Google Cloud platform, but may not be suitable for applications that require custom kernel modules, non-containerized applications, or professional Linux provider support.\u003c/p\u003e\n"]]],[],null,["# Container-Optimized OS Overview\n\nContainer-Optimized OS from Google is an operating system image for your\n[Compute Engine](/compute) VMs that is optimized for running containers.\nContainer-Optimized OS is maintained by Google and based on the open source\nChromium OS project. With Container-Optimized OS, you can bring up your\ncontainers on Google Cloud Platform quickly, efficiently, and securely.\n\nFeatures and Benefits\n---------------------\n\nContainer-Optimized OS provides the following benefits:\n\n- **Run Containers Out of the Box** : Container-Optimized OS instances come pre-installed with the Docker and containerd runtimes and `cloud-init`. With a Container-Optimized OS instance, you can bring up your container at the same time you create your VM, with no on-host setup required.\n- **Smaller attack surface**: Container-Optimized OS has a smaller footprint, reducing your instance's potential attack surface.\n- **Locked-down by default**: Container-Optimized OS instances include a locked-down firewall and other security settings by default.\n- **Automatic Updates**: Container-Optimized OS instances are configured to automatically download weekly updates in the background; only a reboot is necessary to use the latest updates.\n\nLimitations\n-----------\n\nContainer-Optimized OS has limited or no support for some of the common\nfeatures you may be familiar with on other operating systems:\n\n- Container-Optimized OS does not include a package manager; as such, you'll be unable to install software packages directly on an instance. However, you can use [CoreOS toolbox](/container-optimized-os/docs/how-to/toolbox) to install and run debugging and admin tools in an isolated container.\n- Container-Optimized OS does not support execution of non-containerized applications.\n- The Container-Optimized OS kernel is locked down; you'll be unable to install third-party kernel modules or drivers.\n- Container-Optimized OS is not supported outside of the Google Cloud Platform environment.\n\nUsing Container-Optimized OS\n----------------------------\n\nContainer-Optimized OS is the default node OS Image in [Kubernetes Engine](/kubernetes-engine) and\nother [Kubernetes](https://kubernetes.io/) deployments on Google Cloud Platform. See the [Kubernetes\nEngine Quickstart](/kubernetes-engine/docs/deploy-app-cluster) for more information on using Container-Optimized OS with\nKubernetes Engine.\n\nYou can also use Container-Optimized OS to quickly bring up a container\non a Compute Engine instance with minimal setup. For more information, see\n[Creating and Configuring Instances](/container-optimized-os/docs/how-to/create-configure-instance).\n\nYou can run tools like `ping`, the Google Cloud CLI, `pstree`, `htop`,\n`emacs` and more using the [CoreOS toolbox](/container-optimized-os/docs/how-to/toolbox) utility, which is pre-installed in\nContainer-Optimized OS at `/usr/bin/toolbox`. See [Debugging with toolbox](/container-optimized-os/docs/how-to/toolbox) for\nmore information.\n\nUse cases for Container-Optimized OS\n------------------------------------\n\nContainer-Optimized OS can be used to run most containers. You should\nconsider using Container-Optimized OS as the operating system for your\nCompute Engine instance if you have the following needs:\n\n- You need support for containers or Kubernetes with minimal setup.\n- You need an operating system that has a small footprint and is [security\n hardened](/container-optimized-os/docs/concepts/security) for containers.\n- You need an operating system that is tested and verified for running Kubernetes on your Compute Engine instances.\n\nContainer-Optimized OS may not be the right choice for you in the following\ncases:\n\n- Your application is not containerized or your containerized application depends on kernel modules, drivers and other additional packages that are not available in Container-Optimized OS.\n- You need professional customer support from a Linux provider (Canonical, Core OS, Redhat, SUSE, etc).\n- You want your image and OS application to be fully supported outside Google Cloud.\n\nSee [Containers on Google Cloud](/compute/docs/containers) to learn about\nother operating systems you can use to\nrun containerized applications on Google Cloud. Compute Engine\n[provides images](/compute/docs/images) for other popular operating systems, including images that are\n[optimized for containers](/compute/docs/containers#container_images)."]]
