{"id":106135,"date":"2022-12-17T15:36:38","date_gmt":"2022-12-17T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-gipervizora-xen-4-17"},"modified":"2022-12-17T15:36:38","modified_gmt":"2022-12-17T13:36:38","slug":"vypusk-gipervizora-xen-4-17","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-gipervizora-xen-4-17","title":{"rendered":"Xen hypervisori v\u00e4ljaanne 4.17","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00e4rast aasta kestnud arendust on v\u00e4lja antud vabavara hypervisor Xen 4.17. Uue v\u00e4ljaande arendamisse on panustanud sellised ettev\u00f5tted nagu Amazon, Arm, Bitdefender, Citrix, EPAM Systems ja Xilinx (AMD). Xen 4.17 versiooni v\u00e4rskenduste koostamine kestab kuni 12. juunini 2024 ja haavatavuste paranduste avaldamine kuni 12. detsembrini 2025.      <\/p>\n<p>Peamised muudatused Xen 4.17-s:   <\/p>\n<ul>\n<li class=\"l\"> Tagatakse osaline vastavus C-keeles arendamise ohutuse ja usaldusv\u00e4\u00e4rsuse n\u00f5uetele, mis on formuleeritud MISRA-C spetsifikatsioonides, mida kasutatakse kriitiliste s\u00fcsteemide loomisel. Xenis on ametlikult rakendatud 4 MISRA-C direktiivi ja 24 reeglit (kokku 143 reeglit ja 16 direktiivi), samuti on tagatud integreerimine MISRA-C staatilise anal\u00fcsaatoriga, mis kontrollib spetsifikatsiooni n\u00f5uete t\u00e4itmist.\n<li class=\"l\"> Pakutakse v\u00f5imalust m\u00e4\u00e4rata Xen-i staatiline konfiguratsioon ARM-i s\u00fcsteemide jaoks, mis eelnevalt kindlaks m\u00e4\u00e4rab k\u00f5ik ressursid, mis on vajalikud k\u00fclastuss\u00fcsteemide k\u00e4ivitamiseks. K\u00f5ik ressursid, nagu jagatud m\u00e4lu, s\u00fcndmustest teatamise kanalid ja hypervisori m\u00e4luruum, jaotatakse ette, kui hypervisori k\u00e4ivitatakse, mitte ei eraldata d\u00fcnaamiliselt, mis v\u00e4listab v\u00f5imalike t\u00f6\u00f6 ajal resursside puuduj\u00e4\u00e4gist tingitud k\u00e4ivitumise t\u00f5rkeid.\n<li class=\"l\"> Sisseehitatud s\u00fcsteemidele, mis p\u00f5hinevad ARM-i arhitektuuril, on rakendatud katse (tehniline eelvaade) sisendi\/v\u00e4ljundi virtualiseerimise tugi VirtIO protokollide abil. Andmete vahetamiseks virtuaalse sisendi\/v\u00e4ljundi seadmega kasutatakse transporti virtio-mmio, mis tagab \u00fchilduvuse laia valiku VirtIO seadmetega. Rakendatud on Linuxi front-end, t\u00f6\u00f6riistakomplekt (libxl\/xl), dom0less re\u017eiim ja kasutajaruumi k\u00e4ivitatavad tagurpidised (testitud on virtio-disk, virtio-net, i2c ja gpio tagurpidised).\n<li class=\"l\"> Parandatud on dom0less re\u017eiimi tuge, mis v\u00f5imaldab k\u00e4ivitamist ilma dom0 keskkonna seadistamiseta. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/vps\/\"   title=\"virtuaalmasinate\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2131\">virtuaalmasinate<\/a> serveri laadimise varajases etapis. On antud v\u00f5imalus m\u00e4\u00e4rata CPU basseinid (CPUPOOL) laadimise etapis (device tree kaudu), mis v\u00f5imaldab kasutada basseine konfiguratsioonides ilma dom0-ta, n\u00e4iteks erinevate CPU tuumade sidumiseks ARM s\u00fcsteemides, mis p\u00f5hinevad big.LITTLE arhitektuuril, mis kombineerib \u00fches kiibis v\u00f5imsaid, kuid energiat s\u00fc\u00fcavaid tuumasid ja v\u00e4hem v\u00f5imsaid, kuid energiat\u00f5husamaid tuumasid. Lisaks on dom0less antud v\u00f5imalus siduda paravirtualiseerimise frontend\/backend k\u00fclgs\u00fcsteemidega, mis v\u00f5imaldab laadida k\u00fclgs\u00fcsteeme vajalike paravirtualiseeritud seadmetega.\n<li class=\"l\"> ARM s\u00fcsteemides eraldatakse n\u00fc\u00fcd m\u00e4lu virtualiseerimise struktuurid (P2M, Physical to Machine) m\u00e4lu basseinist, mis moodustatakse domeeni loomisel, mis suurendab isolatsiooni t\u00f5husust k\u00fclgs\u00fcsteemide vahel, kui esinevad m\u00e4lu t\u00f5rked.\n<li class=\"l\"> ARM s\u00fcsteemidele on lisatud Spectre-BHB haavatavuse kaitse protsessorite mikroarhitektuurilistes struktuurides.\n<li class=\"l\"> ARM s\u00fcsteemides on v\u00f5imalik k\u00e4ivitada Zephyr operatsioonis\u00fcsteem juurdomeenide keskkonnas.\n<li class=\"l\"> On antud v\u00f5imalus eraldi (out-of-tree) h\u00fcperviisori koostamiseks.\n<li class=\"l\"> x86 s\u00fcsteemides on tagatud IOMMU suurte lehek\u00fclgede (superpage) tugi k\u00f5igi k\u00fclgs\u00fcsteemide t\u00fc\u00fcpide jaoks, mis v\u00f5imaldab suurendada l\u00e4bilaskev\u00f5imet PCI-seadmete edastamisel. On lisatud tugi hostidele, millel on kuni 12 TB RAM-i. Laadimisprotsessis on rakendatud cpuid parameetrite m\u00e4\u00e4ramise v\u00f5imalus dom0 jaoks. K\u00fclgs\u00fcsteemide kaitsemeetmete juhtimiseks, mis on rakendatud h\u00fcperviisori tasemel CPU r\u00fcnnakute vastu, on pakutud parameetreid VIRT_SSBD ja MSR_SPEC_CTRL.\n<li class=\"l\"> Erak\u00e4tele areneb edasi VirtIO-Grant transport, mis erineb VirtIO-MMIO-st k\u00f5rgema turvalisuse taseme ja v\u00f5imalusega k\u00e4ivitada t\u00f6\u00f6tlejad eraldi isoleeritud domeenis draiverite jaoks. VirtIO-Grant sisaldab otsem\u00e4lu kaardistamise asemel k\u00fclgs\u00fcsteemi f\u00fc\u00fcsiliste aadresside t\u00f5lget grant-linkideks, mis v\u00f5imaldab kasutada eelnevalt kokkulepitud jagatud m\u00e4lu alasid andmete vahetamiseks k\u00fclgs\u00fcsteemi ja VirtIO backend'i vahel, ilma et backend'l oleks \u00f5igusi m\u00e4lukaardistamise teostamiseks. VirtIO-Grant tugi on juba rakendatud Linuxi kernelis, kuid pole veel kaasatud QEMU backend'idesse, virtio-vhosti ja t\u00f6\u00f6riistadesse (libxl\/xl).\n<li class=\"l\"> Hyperlaunchi algatus j\u00e4tkab arenemist, mis on suunatud paindlike t\u00f6\u00f6riistade pakkumisele virtuaalmasinate k\u00e4ivitamiseks s\u00fcsteemi k\u00e4ivitamise ajal. Hetkel on valmis esimene komplekt plaastritest, mis v\u00f5imaldavad m\u00e4\u00e4rata PV-domeene ja edastada nende pilte h\u00fcperviisori laadimise ajal. Samuti on rakendatud k\u00f5ik vajalik paravirtualiseeritud <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/domain\/\"   title=\"domeenide\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3179\">domeenide<\/a>, sealhulgas Xenstore komponendid PV-draiverite jaoks. P\u00e4rast plaastrite vastuv\u00f5tmist algab t\u00f6\u00f6, et lisada PVH ja HVM seadmete toetus ning rakendada eraldi domeen domB (builder domain), mis sobib m\u00f5\u00f5detud laadimise (measured boot) korraldamiseks, et kinnitada k\u00f5igi laaditavate komponentide autentsus.\n<li class=\"l\"> T\u00f6\u00f6d Xen-porti loomise kallal RISC-V arhitektuuri jaoks j\u00e4tkuvad.  <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58340\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD). \u0424\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 Xen 4.17 \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e 12 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043e 12 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Xen 4.17: \u041e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u043e \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106135","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-gipervizora-xen-4-17\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-gipervizora-xen-4-17\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-12-17T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-12-17T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Xen 4.17 h\u00fcperviisi v\u00e4ljaanne | ProHoster","description":"P\u00e4rast aastast arendust on avaldatud tasuta h\u00fcperviisi Xen 4.17 v\u00e4ljaanne. Uue v\u00e4ljaande arendamises osalesid sellised ettev\u00f5tted nagu Amazon, Arm, Bitdefender, Citrix, EPAM Systems ja Xilinx (AMD).","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-gipervizora-xen-4-17","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen 4.17. \u0412 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u0430\u043a Amazon, Arm, Bitdefender, Citrix, EPAM Systems \u0438 Xilinx (AMD).","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-gipervizora-xen-4-17","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-17T13:36:38+00:00","article:modified_time":"2022-12-17T13:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"106135","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 17:11:32","updated":"2026-02-11 11:12:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/106135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=106135"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/106135\/revisions"}],"predecessor-version":[{"id":160572,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/106135\/revisions\/160572"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=106135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=106135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=106135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}