18 KiB
18 KiB
Operační systémy
Přehled Linux distribucí a Microsoft Windows pro serverové, containerové a AI/GPU workloady, včetně support lifecycle, EOL dat a srovnání.
Přehled distribucí
| Distribuce | Rodina | Package manager | Init | Security | Reference platforma |
|---|---|---|---|---|---|
| Ubuntu LTS | Debian | apt (deb) | systemd | AppArmor | NVIDIA DGX, nejširší AI/GPU support |
| Debian | Debian | apt (deb) | systemd | AppArmor | Univerzální server, stabilita |
| RHEL | Red Hat | dnf (rpm) | systemd | SELinux | Enterprise standard, SAP, Oracle DB |
| Rocky Linux | Red Hat | dnf (rpm) | systemd | SELinux | RHEL binary compatible (free) |
| AlmaLinux | Red Hat | dnf (rpm) | systemd | SELinux | RHEL binary compatible (free) |
| SLES | SUSE | zypper (rpm) | systemd | AppArmor | HPC, SAP, mainframe |
| OpenSUSE Leap | SUSE | zypper (rpm) | systemd | AppArmor | Desktop, vývoj |
| OpenSUSE Tumbleweed | SUSE | zypper (rpm) | systemd | AppArmor | Rolling release, bleeding edge |
| Fedora | Red Hat | dnf (rpm) | systemd | SELinux | Desktop, technologický preview |
| Arch Linux | Independent | pacman | systemd | — | Rolling, power users |
| Alpine Linux | Independent | apk | OpenRC | — | Container image, embedded |
| Flatcar Container Linux | Independent | — (image-based) | systemd | — | K8s worker node, minimal footprint |
| Bottlerocket | Independent | — (image-based) | systemd | — | AWS K8s, minimal footprint |
Support lifecycle a EOL data
Standard: základní podpora (bug fixy, security). LTS/ELS: prodloužená podpora (jen security). ESM = Ubuntu Extended Security Maintenance, EUS = RHEL Extended Update Support, LTSS = SUSE Long Term Service Pack Support.
Ubuntu LTS
| Verze | Release | Standard support | ESM / Ubuntu Pro | Poznámka |
|---|---|---|---|---|
| 20.04 LTS (Focal) | 2020-04 | Konec 2025-04 | Konec 2030-04 | Poslední verze s Python 2 |
| 22.04 LTS (Jammy) | 2022-04 | Konec 2027-04 | Konec 2032-04 | NVIDIA DGX standard |
| 24.04 LTS (Noble) | 2024-04 | Konec 2029-04 | Konec 2034-04 | Nejnovější GPU/CUDA support |
| 26.04 LTS (plán) | 2026-04 | Konec 2031-04 | Konec 2036-04 | — |
RHEL
| Verze | Release | Full support | Maintenance support | Extended life cycle |
|---|---|---|---|---|
| 7 | 2014-06 | Konec 2019-08 | Konec 2024-06 | Konec 2028-06 (ELS) |
| 8 | 2019-05 | Konec 2024-05 | Konec 2029-05 | Konec 2034-06 (ELS) |
| 9 | 2022-05 | Konec 2027-05 | Konec 2032-05 | Konec 2037-06 (ELS) |
| 10 (plán) | 2025 | Konec 2029 | Konec 2034 | — |
Rocky Linux / AlmaLinux
| Verze | Release | Support do | Kompatibilní s RHEL | Poznámka |
|---|---|---|---|---|
| 8 | 2021-06 | 2029-05 | Ano (od RHEL 8.4) | Alma/rocky |
| 9 | 2022-07 | 2032-05 | Ano (od RHEL 9.0) | Alma/rocky |
Debian
| Verze | Release | Full support | LTS support | ELTS (paid) |
|---|---|---|---|---|
| 11 (Bullseye) | 2021-08 | 2024-08 | Konec 2026-08 | Konec 2028-08 |
| 12 (Bookworm) | 2023-06 | 2026-06 | Konec 2028-06 | Konec 2030-06 |
| 13 (Trixie) | 2025 (oček.) | ~3 roky po release | ~5 let po release | — |
SLES
| Verze | Release | General support | LTSS | Poznámka |
|---|---|---|---|---|
| 15 SP3 | 2021-06 | Konec 2024-12 | Konec 2027-12 | — |
| 15 SP4 | 2022-06 | Konec 2025-12 | Konec 2028-12 | — |
| 15 SP5 | 2023-06 | Konec 2026-12 | Konec 2029-12 | Aktuální SP |
| 15 SP6 | 2024-10 | Konec 2027-12 | Konec 2030-12 | — |
Fedora
| Verze | Release | EOL | Poznámka |
|---|---|---|---|
| 38 | 2023-04 | 2024-05 | — |
| 39 | 2023-11 | 2024-12 | — |
| 40 | 2024-04 | 2025-05 | — |
| 41 | 2024-11 | 2025-12 | — |
Fedora vydává novou verzi každých ~6 měsíců, EOL ~13 měsíců po release. Slouží jako upstream pro RHEL.
Alpine Linux
| Verze | Release | EOL |
|---|---|---|
| 3.18 | 2023-05 | 2025-05 |
| 3.19 | 2023-12 | 2025-12 |
| 3.20 | 2024-05 | 2026-05 |
| 3.21 | 2024-12 | 2026-12 |
Kernel verze per distribuce
| Distribuce | Kernel (default) | Kernel (HWE/enhanced) | Poznámka |
|---|---|---|---|
| Ubuntu 22.04 LTS | 5.15 (GA) | 6.5+ (HWE) | HWE od 22.04.2 |
| Ubuntu 24.04 LTS | 6.8 | — | — |
| RHEL 8 | 4.18 | — | Backportované featur |
| RHEL 9 | 5.14 | — | Backportované featur |
| RHEL 10 | 6.11+ (oček.) | — | — |
| Rocky/Alma 8 | 4.18 | — | Stejný jako RHEL 8 |
| Rocky/Alma 9 | 5.14 | — | Stejný jako RHEL 9 |
| Debian 11 | 5.10 | 6.1 (backports) | — |
| Debian 12 | 6.1 | — | — |
| SLES 15 SP5 | 5.14 | — | — |
| SLES 15 SP6 | 6.4 | — | — |
| Fedora 40 | 6.8+ | — | Rolling upstream |
| Alpine 3.20 | 6.6 | — | — |
Srovnání dle use case
| Use case | Doporučená distribuce | Zdůvodnění |
|---|---|---|
| AI/GPU cluster (DGX) | Ubuntu 22.04 LTS / DGX OS | NVIDIA standard, CUDA, MLNX_OFED |
| Enterprise K8s (OpenShift) | RHEL 9 / RHCOS | Red Hat support, GPU Operator |
| Vanilla K8s (on-prem) | Ubuntu 22.04 LTS + Flatcar (workers) | Community support, minimal worker image |
| HPC cluster (Slurm) | Rocky Linux 9 / Ubuntu 22.04 | EL ekosystém + Lustre, nebo Ubuntu |
| Traditional enterprise DB (Oracle, SAP) | RHEL 9 / SLES 15 | Vendor certifikace |
| Container host | Ubuntu 22.04 / Alpine | Široká image kompatibilita / min size |
| Vývoj / desktop | Fedora / Ubuntu 24.04 / OpenSUSE Tumbleweed | Aktuální balíčky, HW support |
| Embedded / IoT | Debian / Alpine / Yocto | Minimal footprint, stabilita |
| Edge inference | Ubuntu (ARM) / NVIDIA JetPack | Jetson, GPU support |
| Mainframe (IBM z/Arch) | SLES 15 / RHEL 9 | IBM certifikace |
Package management srovnání
| Vlastnost | apt (Debian/Ubuntu) | dnf (RHEL/Rocky/Alma/Fedora) | zypper (SUSE) | pacman (Arch) | apk (Alpine) |
|---|---|---|---|---|---|
| Formát balíčků | .deb | .rpm | .rpm | .pkg.tar.zst | .apk |
| Repo management | /etc/apt/sources.list | /etc/yum.repos.d/ | /etc/zypp/repos.d/ | /etc/pacman.conf | /etc/apk/repositories |
| Lock file | — (apt-mark hold) | — (exclude) | — (lock) | — (IgnorePkg) | — |
| Transactional update | Ne | Ano (dnf history) | Ano (zypper history) | Ne | Ne |
| Rollback | Ne (manual) | Ano (dnf history rollback) | Ano (snapper + zypper) | Ne | Ne |
| Delta updates | Ano (apt-xapian) | Ano (deltarpm) | Ano (zsync) | Ne | Ne |
| Verze (k 2025) | apt 2.7+ | dnf 4.18+ | zypper 1.14+ | pacman 6.1+ | apk 2.14+ |
Security model porovnání
| Vlastnost | SELinux (RHEL deriváty) | AppArmor (Ubuntu/Debian/SUSE) |
|---|---|---|
| Typ | Mandatory Access Control (MAC) | Mandatory Access Control (MAC) |
| Labelování | Kontextové (user:role:type) | Path-based (profil k executable) |
| Konfigurace | Policy (moduly, booleany) | Profily (textové, v /etc/apparmor.d/) |
| Režimy | Enforcing / Permissive / Disabled | Enforce / Complain / Disabled |
| Křivka učení | Strmá (politiky komplexní) | Mírná (profily jednodušší) |
| Default v | RHEL, Rocky, Alma, Fedora | Ubuntu, Debian, SLES, OpenSUSE |
| Use case | Enterprise multiclient, regulované prostředí | Univerzální server, containment aplikací |
| Container integrace | SELinux labels na kontejner | AppArmor profile na kontejner |
Další vrstvy:
- seccomp — syscall filtering (default v containerd, Docker)
- Capabilities — Linux capabilities (drop vše kromě nutných)
- cgroups v2 — resource isolation (CPU, memory, IO, PID)
- User namespaces — rootless kontejnery (Podman, Docker rootless)
Doporučená migrační cesta pro EOL distribuce
| Ze staré verze | Na | Doporučený postup |
|---|---|---|
| Ubuntu 20.04 (EOL 2025) | Ubuntu 22.04 nebo 24.04 | do-release-upgrade nebo fresh install |
| RHEL 7 (EOL 2024) | RHEL 8 nebo 9 | leapp upgrade, nebo fresh install |
| Rocky/Alma 8 | Rocky/Alma 9 | dnf upgrade --releasever=9 |
| Debian 11 (EOL LTS 2026) | Debian 12 | apt full-upgrade + nové sources.list |
| SLES 15 SP4 (EOL 2025) | SLES 15 SP6 | zypper migration |
| Fedora 40 (EOL 2025) | Fedora 42+ | dnf system-upgrade |
Microsoft Windows
Windows Server — edice
| Edice | Cena (approx) | Core limity | VM rights | Use case |
|---|---|---|---|---|
| Datacenter | ~$6 155 (2025) | Neomezen | Neomezené Windows VM na hostiteli | Virtualizace, SDDC, S2D, HCI |
| Standard | ~$1 069 (2025) | 2 CPU, neomezen jader | 2 Windows VM + Hyper-V host | Běžný server, AD, file server |
| Essentials | ~$501 (2025) | 1 CPU, max 10 uživatelů | — | Malé firmy (do 25 uživatelů) |
| Azure Edition | Pay-as-you-go | Dle Azure VM | Dle Azure | Azure-only, hotpatching |
Licencování: Windows Server Standard a Datacenter se licencují per core (min 16 core/server + 8 core/VM).
Windows Server — support lifecycle
Mainstream: běžné aktualizace (bug fixy, security, feature). Extended: jen security aktualizace (zdarma). ESU: Extended Security Updates (placená vrstva navíc, cca $45–300/core/rok).
| Verze | Release | Mainstream support | Extended support | ESU | Poznámka |
|---|---|---|---|---|---|
| 2012 R2 | 2013-11 | 2018-10 | 2023-10 | Konec 2026-10 (3. rok) | ESU placená, poslední rok |
| 2016 | 2016-10 | 2022-01 | 2027-01 | — | Poslední s Desktop Experience |
| 2019 | 2019-01 | 2024-01 | 2029-01 | — | Poslední s Nano Server (jen 1803) |
| 2022 | 2021-09 | 2026-10 | 2031-10 | — | Aktuální, TPM 2.0, Credential Guard |
| 2025 | 2024-11 | 2029-10 | 2034-10 | — | Hotpatching, PowerShell 7, SMB over QUIC |
Windows Server — verze vs edice grid
| Verze | Hyper-V | Storage Spaces Direct | Software-defined networking | Containers | GPU DDA / vGPU | WSL2 |
|---|---|---|---|---|---|---|
| 2016 Standard | Ano | Ne (jen Datacenter) | Ne (jen Datacenter) | Jen Windows | Ano | Ne |
| 2016 Datacenter | Ano | Ano | Ano | Windows | Ano | Ne |
| 2019 Standard | Ano | Ne | Ne | Windows | Ano | Ne |
| 2019 Datacenter | Ano | Ano | Ano | Windows | Ano | Ne |
| 2022 Standard | Ano | Ne | Ne | Windows + Linux | Ano | Ne |
| 2022 Datacenter | Ano | Ano | Ano | Windows + Linux (2022.2+) | Ano | Ne |
| 2025 Datacenter | Ano | Ano | Ano | Windows + Linux | Ano | Ano |
Windows Desktop — support lifecycle
E = Enterprise, Pro = Professional, Home = Consumer LTSC = Long Term Servicing Channel (stabilní, bez feature updatů)
| Verze | Release | EOL (Home/Pro) | EOL (Enterprise) | LTSC EOL | Poznámka |
|---|---|---|---|---|---|
| 10 21H2 | 2021-11 | — | 2024-06 | — | |
| 10 22H2 | 2022-10 | 2025-10 | 2025-10 | — | Poslední Windows 10 |
| 10 LTSC 2021 | 2021-11 | — | — | 2032-01 | IoT Enterprise LTSC |
| 11 22H2 | 2022-09 | 2024-10 | 2025-10 | — | |
| 11 23H2 | 2023-10 | 2025-11 | 2026-11 | — | |
| 11 24H2 | 2024-10 | 2026-10 | 2027-10 | — | První s Recall, Copilot+ |
| 11 LTSC 2024 | 2024-10 | — | — | 2029-10 | Enterprise LTSC |
Podpora Windows 10 skončila 2025-10-14 — poslední verze s klasickým ovládacím panelem.
Windows vs Linux — srovnání
| Vlastnost | Windows Server | RHEL / Ubuntu |
|---|---|---|
| Licence (server) | $500–6 000 (per core) + CAL | $0–800 (per node subscription) |
| Licence (desktop) | $100–200 (OEM/retail) | Zdarma |
| Cena za support | Zahrnuto v licenci (SA/ESU) | $200–1 300/node/rok (RHEL) |
| Package management | MSI, AppX, winget, NuGet | APT, DNF, Zypper |
| Package count | ~10 000 (chocolatey) | ~60 000+ (Ubuntu repo) |
| Desktop GUI | Windows Shell (mandatory) | Volitelný (GNOME, KDE, XFCE…) |
| Server GUI | Windows Shell (od 2022 Core only) | CLI-only (standard) |
| Kernel | NT hybrid kernel (kernel-mode Win32) | Monolithic Linux kernel |
| Device support | OEM driver model (WHQL) | Open source + vendor drivers |
| Container types | Windows + Linux (WSL2) | Linux (Docker, Podman, containerd) |
| Container registry | Docker Hub, ACR, Nexus | Docker Hub, Quay, GHCR, Nexus… |
| Container image size | ~4–8 GB (Windows Server Core) | ~100 MB – 1 GB (Alpine/Ubuntu) |
| GPU passthrough | DDA (Discrete Device Assignment) | GPU Direct, VFIO, SR-IOV |
| AI/ML support | WSL2 (CUDA), Azure ML | Native CUDA, ROCm, oneAPI |
| CUDA support | Ano (přes WSL2 nebo Docker) | Native (nvidia-container-toolkit) |
| Orchestration | AD / GPO / SCCM / WAC | Ansible, Puppet, Salt, Foreman |
| RBAC/AAA | Active Directory (+ Kerberos) | LDAP, FreeIPA, SSSD, AD |
| Remote management | RDP, WinRM, PowerShell Remoting | SSH, Cockpit, Webmin |
| Filesystem | NTFS, ReFS, CSVFS | ext4, XFS, Btrfs, ZFS |
| Max file system size | 256 TB (NTFS), 1.2 YB (ReFS) | 1 EB (XFS), 16 EB (ZFS) |
| Hypervisor | Hyper-V (Type 1) | KVM (Type 2-ish), Xen |
| Dynamic memory | Hyper-V Dynamic Memory | KSM, virtio-balloon (KVM) |
| Live migration | Hyper-V Live Migration | KVM Live Migration, vMotion |
Windows specific features
| Feature | Popis | Lze nahradit na Linuxu? |
|---|---|---|
| Active Directory | Identity, auth, GPO, DNS, DHCP | FreeIPA, Samba AD DC, 389-ds, SSSD |
| Group Policy | Centrální konfigurace desktopů/serverů | Ansible, Puppet, Salt (agent-based) |
| Hyper-V + S2D | Hyper-converged storage a virtualizace (HCI) | Proxmox Ceph / oVirt + Gluster |
| Failover Clustering | Cluster-aware aplikace (SQL, File Server) | Pacemaker + Corosync + DRBD |
| IIS | Web server, ASP.NET host | Nginx, Apache (bez ASP.NET, nebo .NET host) |
| PowerShell | Scripting, Desired State Configuration | Bash, Python, Ansible |
| Windows Admin Center | GUI management | Cockpit, Webmin |
| BitLocker | Full disk encryption | LUKS + cryptsetup |
| Windows Defender | Antivirus + EDR | ClamAV, Wazuh, Osquery |
| SQL Server | Relační DB | PostgreSQL, MySQL, MariaDB |
Doporučený OS dle use case (včetně Windows)
| Use case | OS | Zdůvodnění |
|---|---|---|
| Active Directory / GPO / hybrid ID | Windows Server 2022/2025 | AD jen na Windows |
| SQL Server (failover cluster) | Windows Server Datacenter + SQL EE | Always On FCI, ReFS |
| Exchange / SharePoint | Windows Server 2022 | Jen na Windows |
| Enterprise desktop management | Windows 11 Enterprise + Intune/SCCM | GPO, AD, enterprise MDM |
| .NET / ASP.NET aplikace | Windows Server / Linux (.NET Core) | .NET 6+ běží na Linuxu |
| HCI (Microsoft stack) | Windows Server Datacenter + S2D + Hyper-V | Azure Stack HCI |
| Virtualizace (mixed workload) | Windows Server Datacenter (Hyper-V) | Linux i Windows VM pod jedním |
| AI/GPU inference | Linux (Ubuntu) + CUDA | NVIDIA optimální; WSL2 alternativa |
| Container orchestration (Windows nodes) | Windows Server 2022/2025 + containerd | Windows Pods v AKS on-prem |
| Tier 2 aplikace / web / API | Ubuntu nebo RHEL (Linux) | Nižší TCO, menší footprint |
Windows Server migrační cesty
| Ze staré verze | Na | Doporučený postup |
|---|---|---|
| Windows Server 2012 R2 (EOL 2023) | Windows Server 2022/2025 | In-place upgrade nebo fresh + migration |
| Windows Server 2016 (EOL 2027) | Windows Server 2022/2025 | In-place upgrade nebo fresh |
| Windows Server 2019 | Windows Server 2022/2025 | In-place upgrade (Setup.exe /auto upgrade) |
| Windows Server 2022 | Windows Server 2025 | In-place upgrade nebo fresh |
| Windows Server → Cloud | Azure VM / Azure Stack HCI | Azure Migrate, Storage Migration Service |
| Windows Server → Linux | Ubuntu / RHEL (re-platform) | Migrace aplikace na .NET Core nebo alternativu |
Windows — API a provozní limity
| Limit | Windows Server | Windows Desktop |
|---|---|---|
| Max RAM | 24 TB (2025 Datacenter) | 2 TB (Pro/Enterprise), 128 GB (Home) |
| Max CPU sockets | 64 (Datacenter), 2 (Standard) | 2 |
| Max CPU cores | Neomezen | 128 (Pro), 64 (Home) |
| Max file size (NTFS) | 256 TB | 256 TB |
| Max file size (ReFS) | 18.4 EB (2025) | — |
| Max volume size (NTFS) | 256 TB | 256 TB |
| Max volume size (ReFS) | 1.2 YB (teoreticky) | — |
| Max dedup volume | 64 TB (Data Deduplication) | — |
| Max cluster nodes | 64 (Failover Cluster) | — |
| Max VM per host | Neomezen (Datacenter) | — |
| VM memory per VM | 12 TB (2022+) | — |
| VM vCPU per VM | 240 (2022+) | — |
| Concurrent RDP | 2 (admin), 200+ (RDS CAL) | 1 (Home), více (RDP host) |
| PowerShell Remoting | Neomezen (WinRM) | Ano (WinRM) |
- AI-INFRASTRUCTURE.md — OS pro AI workloady, GPU drivery, kernel parametry
- KUBERNETES.md — container runtime, orchestrace
- HYPERVISORS.md — hypervisory, VM host OS
- DATACENTERS.md — DC layout, HW platformy
Zdroje
Odkazy, knihy a standardy: sources/infrastructure/sources.md
Poslední revize: 2026-06-18