{"id":31672,"date":"2019-10-31T21:42:29","date_gmt":"2019-10-31T18:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm\/"},"modified":"2019-10-31T21:42:29","modified_gmt":"2019-10-31T18:42:29","slug":"proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","title":{"rendered":"NetBSD projekt arendab uut NVMM h\u00fcperviisorit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

NetBSD projekti arendajad teatasid<\/a><\/noindex> uue h\u00fcperviisoriga ja sellega seotud virtualiseerimistarkvara loomise kohta, mis on juba kaasatud NetBSD eksperimenteerimisharu NetBSD-current ja pakutakse stabiliseeritud versioonis NetBSD 9. NVMM toetab praegu ainult x86_64 arhitektuuri ja pakub kahte tagapinda, et kasutada \u00e4ra riistvara virtualiseerimise mehhanisme: x86-SVM, mis toetab AMD CPU virtualiseerimise laiendusi, ja x86-VMX Intel CPU-le. Praegu on v\u00f5imalik \u00fchel hostil k\u00e4itada kuni 128 virtuaalmasinat, millest iga\u00fchele v\u00f5ib eraldada kuni 256 virtuaalset protsessorituuma (VCPU) ja 128 GB RAM-i. <\/p>\n

NVMM sisaldab draiverit, mis t\u00f6\u00f6tab s\u00fcsteemi kernelitasemel ja koordineerib ligip\u00e4\u00e4su riistvara virtualiseerimise mehhanismidele, samuti Libnvmm kihti, mis t\u00f6\u00f6tab kasutajaruumi. Kernelite ja kasutajaruumide komponentide vaheline suheldamine toimub IOCTL kaudu. NVMM erip\u00e4ra, mis eristab seda h\u00fcperviisoritest nagu KVM, HAXM<\/a><\/noindex> Bhyve'i tuum, mis t\u00e4hendab, et sisemuses t\u00f6\u00f6tab ainult minimaalne vajalik kiht virtuaalmasinate riistvaraga seotud mehhanismide \u00fcmber, samas kui kogu seadme emuleerimise kood on viidud v\u00e4lja tuuma kasutaja ruumi. Selline l\u00e4henemine v\u00f5imaldab v\u00e4hendada k\u00f5rgete privileegidega t\u00f6\u00f6tava koodi hulka ja v\u00e4hendada kogu s\u00fcsteemi kompromiteerimise riski h\u00fcperviisori haavatavuste r\u00fcnnakute korral. Samuti on projekti silumine ja fuzzing-testaamine oluliselt lihtsustatud. <\/p>\n

Libnvmm ei sisalda emulateerimise funktsioone, vaid pakub API-d, mis v\u00f5imaldab integreerida NVMM-i toe olemasolevatesse emuleerijatesse, nagu QEMU. API katab sellised funktsioonid nagu virtuaalmasina loomine ja k\u00e4ivitamine, k\u00fclaliss\u00fcsteemi m\u00e4lu eraldamine ning VCPU jaotamine. Turvalisuse parandamiseks ja v\u00f5imalike r\u00fcnnakusihte v\u00e4hendamiseks pakub libnvmm ainult selgelt n\u00f5utud funktsioone \u2014 vaikimisi keerukad t\u00f6\u00f6tlejad ei k\u00e4ivitata automaatselt ja v\u00f5ivad j\u00e4\u00e4da \u00fcldse kasutamata, kui neid pole h\u00e4dasti vaja. NVMM p\u00fc\u00fcab rakendada lihtsamaid lahendusi, v\u00e4ltides liialdusi ning v\u00f5imaldades kontrollida v\u00f5imalikult palju t\u00f6\u00f6aspekte.<\/p>\n

\"NetBSD<\/a><\/noindex><\/center><\/p>\n

Ydroot tasandil NVMM-i element on tihedalt integreeritud NetBSD tuumaga ning v\u00f5imaldab suurendada j\u00f5udlust, v\u00e4hendades konteksti vahetuste arvu k\u00fclalisoperatsiooni ja hostkeskkonna vahel. Kasutuseruumis p\u00fc\u00fcab libnvmm koondada t\u00fc\u00fcpilisi sisend-v\u00e4ljundoperatsioone ja v\u00e4ltida s\u00fcsteemik\u00f5nesid vajaduse korral. M\u00e4lu eraldamise s\u00fcsteem p\u00f5hineb pmap alams\u00fcsteemil, v\u00f5imaldades k\u00fclalis\u00fcsteemide m\u00e4lu lehtede vahetamist vahetuse juhul, kui s\u00fcsteemis on m\u00e4lu puudus. NVMM on vabastatud globaalsetest lukustustest ja skaleerub h\u00e4sti, v\u00f5imaldades samal ajal erinevate protsessorituumade kasutamist erinevate k\u00fclaliste virtuaalmasinate k\u00e4itamiseks. <\/p>\n

QEMU baasil on arendatud lahendust, mis kasutab NVMM-i riistvaraliste virtualiseerimise mehhanismide aktiveerimiseks. T\u00f6\u00f6d k\u00e4iakse ettevalmistatud plaastrite integreerimiseks QEMU p\u00f5hikoosseisu. QEMU+NVMM kombinatsioon juba lubab<\/a><\/noindex> \u00f5nnestub k\u00e4ivitada k\u00fclaliss\u00fcsteeme FreeBSD, OpenBSD, Linux, Windows XP\/7\/8.1\/10 ja teiste operatsioonis\u00fcsteemide x86_64 s\u00fcsteemides, kasutades AMD ja Intel protsessoreid (ise NVMM ei ole seotud konkreetse arhitektuuriga; n\u00e4iteks saab vastava backend'i loomisel t\u00f6\u00f6tada ARM64 s\u00fcsteemides). NVMM-i edasise rakenduse valdkondades on samuti m\u00e4rgitud rakenduste sandkast-eraldatus.<\/p>\n

\"NetBSD<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 NetBSD-current \u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 NetBSD 9. NVMM \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86_64 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u0431\u044d\u043a\u0435\u043d\u0434\u0430 \u0434\u043b\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438: x86-SVM \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CPU AMD \u0438 x86-VMX \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23579,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31672","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NetBSD projekt arendab uut NVMM h\u00fcperviisorit | ProHoster","description":"NetBSD projekti arendajad on kuulutanud v\u00e4lja uue h\u00fcperviisori ja sellega seotud virtualiseerimise stacki, mis on juba osa eksperimentaalsest NetBSD-current harust ja pakutakse stabiilses NetBSD 9 v\u00e4ljaandes. NVMM on praegu piirdunud x86_64 arhitektuuri toetamisega ja pakub kahte backend'i, et kasutada \u00e4ra riistvaralisi virtualiseerimise mehhanisme: x86-SVM AMD CPU virtualiseerimise laiendustega ja x86-VMX jaoks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 NetBSD \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 NVMM | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u043d\u0438\u043c \u0441\u0442\u0435\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 NetBSD-current \u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435 NetBSD 9. NVMM \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86_64 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u0431\u044d\u043a\u0435\u043d\u0434\u0430 \u0434\u043b\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438: x86-SVM \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CPU AMD \u0438 x86-VMX \u0434\u043b\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-netbsd-razvivaet-novyj-gipervizor-nvmm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:29+00:00","article:modified_time":"2019-10-31T18:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31672","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:16:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:12:34","updated":"2026-01-21 07:16:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31672"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31672\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23579"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}