{"id":31672,"date":"2019-10-31T21:42:29","date_gmt":"2019-10-31T18:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm\/"},"modified":"2019-10-31T21:42:29","modified_gmt":"2019-10-31T18:42:29","slug":"proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","title":{"rendered":"Projektet NetBSD udvikler en ny NVMM hypervisor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Udviklerne af NetBSD-projektet at de kun havde to blokke tilbage \/8.<\/a><\/noindex> om oprettelsen af en ny hypervisor og det tilknyttede virtualiseringsstack, som allerede er inkluderet i den eksperimentelle gren af NetBSD-current og vil blive tilbudt i den stabile udgave af NetBSD 9. NVMM er endnu begr\u00e6nset til underst\u00f8ttelse af x86_64-arkitektur og giver to backend-l\u00f8sninger for udnyttelse af hardwarevirtualiseringsmekanismer: x86-SVM med underst\u00f8ttelse af AMD's CPU-virtualiseringsextensioner og x86-VMX for Intel CPU'er. I sin nuv\u00e6rende form muligg\u00f8r det k\u00f8rsel af op til 128 virtuelle maskiner p\u00e5 \u00e9n v\u00e6rt, hvor hver kan tildeles op til 256 virtuelle CPU-kerner (VCPU) og 128 GB RAM. <\/p>\n

NVMM inkluderer en driver, der fungerer p\u00e5 kerneniveau og koordinerer adgangen til hardwarevirtualiseringsmekanismer, samt Libnvmm-stakken, som udf\u00f8res i brugerrum. Interaktionen mellem kernelkomponenterne og brugerrumos komponenter sker gennem IOCTL. En s\u00e6rlig egenskab ved NVMM, der adskiller det fra hypervisorer som KVM, HAXM<\/a><\/noindex> og Bhyve, er, at kun det minimalt n\u00f8dvendige bindeled omkring hardwarevirtualiseringsmekanismerne udf\u00f8res p\u00e5 kerneniveau, mens al hardwareemulationskode er flyttet fra kernen til brugerrum. Denne tilgang reducerer m\u00e6ngden af kode, der k\u00f8rer med forh\u00f8jede privilegier, og mindsker risikoen for kompromittering af hele systemet i tilf\u00e6lde af angreb p\u00e5 s\u00e5rbarheder i hypervisoren. Derudover forenkles debugging og fuzzing-testning af projektet betydeligt. <\/p>\n

Libnvmm indeholder ikke selv emulatorfunktioner, men giver blot et API, der muligg\u00f8r integration af NVMM-underst\u00f8ttelse i eksisterende emulatorer, s\u00e5som QEMU. API'et d\u00e6kker funktioner som oprettelse og opstart af virtuelle maskiner, tildeling af hukommelse til g\u00e6stesystemet og distribution af VCPU. For at \u00f8ge sikkerheden og reducere mulige angrebsvektorer giver libnvmm kun de funktioner, der er eksplicit anmodet om - som standard aktiveres komplekse h\u00e5ndterere ikke automatisk og kan overhovedet ikke anvendes, hvis de kan undg\u00e5s. NVMM fors\u00f8ger at holde sig til enkle l\u00f8sninger uden at komplicere tingene og tillader kontrol over s\u00e5 mange aspekter af driften som muligt.<\/p>\n

\"Projektet<\/a><\/noindex><\/center><\/p>\n

Den kernniveau-del af NVMM er t\u00e6t integreret med kernen i NetBSD og muligg\u00f8r forbedret ydeevne ved at reducere antallet af kontekstskift mellem g\u00e6ste-OS og v\u00e6rtsmilj\u00f8et. P\u00e5 brugerrumssiden fors\u00f8ger libnvmm at aggregere typiske input\/output-operationer og undg\u00e5 systemopkald un\u00f8dvendigt. Hukommelsesallokeringssystemet er baseret p\u00e5 pmap-subsystemet, hvilket g\u00f8r det muligt at udveksle hukommelsessider fra g\u00e6stesystemer til swap i tilf\u00e6lde af hukommelsesmangel i systemet. NVMM undg\u00e5r globale l\u00e5se og skalerer godt, hvilket muligg\u00f8r samtidig brug af forskellige CPU-kerner til at k\u00f8re forskellige g\u00e6ste virtuelle maskiner. <\/p>\n

Der er udviklet en l\u00f8sning baseret p\u00e5 QEMU, der bruger NVMM til at udnytte hardwarevirtualiseringsmekanismer. Der arbejdes p\u00e5 at inkludere de forberedte patches i hovedversionen af QEMU. Kombinationen QEMU+NVMM kan allerede det muligt<\/a><\/noindex> succesfuldt k\u00f8re g\u00e6stesystemer med FreeBSD, OpenBSD, Linux, Windows XP\/7\/8.1\/10 og andre OS p\u00e5 x86_64-systemer med AMD og Intel-processorer (selve NVMM er ikke bundet til en bestemt arkitektur, eksempelvis kan det fungere p\u00e5 ARM64-systemer ved at oprette en tilsvarende backend). Blandt de fremtidige anvendelsesomr\u00e5der n\u00e6vnes ogs\u00e5 sandbox-isolering af enkelte applikationer.<\/p>\n

\"Projektet<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 NetBSD-current \u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 NetBSD 9. NVMM \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86_64 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u0431\u044d\u043a\u0435\u043d\u0434\u0430 \u0434\u043b\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438: x86-SVM \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CPU AMD \u0438 x86-VMX \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23579,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31672","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NetBSD-projektet udvikler en ny NVMM-hypervisor | ProHoster","description":"Udviklerne af NetBSD-projektet har annonceret oprettelsen af en ny hypervisor og den dertil knyttede virtualiseringsstak, som.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 NetBSD \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 NVMM | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:29+00:00","article:modified_time":"2019-10-31T18:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31672","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:16:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:12:34","updated":"2026-01-21 07:16:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/31672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=31672"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/31672\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/23579"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=31672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=31672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=31672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}