{"id":41281,"date":"2020-02-07T09:28:13","date_gmt":"2020-02-07T06:28:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12"},"modified":"2020-02-07T09:28:13","modified_gmt":"2020-02-07T06:28:13","slug":"kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","title":{"rendered":"La soci\u00e9t\u00e9 Siemens a lanc\u00e9 l'hyperviseur Jailhouse 0.12","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Soci\u00e9t\u00e9 Siemens <noindex><a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2020\/2\/4\/403\">a publi\u00e9<\/a><\/noindex> version gratuite d'hyperviseur <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">Jailhouse 0.12<\/a><\/noindex>. L'hyperviseur fonctionne sur des syst\u00e8mes x86_64 avec les extensions VMX+EPT ou SVM+NPT (AMD-V), ainsi que sur les processeurs ARMv7 et ARMv8\/ARM64 avec des extensions de virtualisation. En outre <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse-images\">\u00e9volue<\/a><\/noindex> g\u00e9n\u00e9rateur d'images pour l'hyperviseur Jailhouse, form\u00e9es \u00e0 partir de paquets Debian pour les dispositifs pris en charge. Le code du projet <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">est distribu\u00e9<\/a><\/noindex>  sous licence GPLv2. <\/p>\n<p>L'hyperviseur est impl\u00e9ment\u00e9 sous la forme d'un module pour le noyau Linux et assure la virtualisation au niveau du noyau. Les composants pour les syst\u00e8mes invit\u00e9s sont d\u00e9j\u00e0 inclus dans le noyau principal de Linux. Pour g\u00e9rer l'isolation, les m\u00e9canismes mat\u00e9riels de virtualisation fournis par des CPU modernes sont utilis\u00e9s. Les caract\u00e9ristiques distinctives de Jailhouse sont sa mise en \u0153uvre l\u00e9g\u00e8re et son orientation vers l'attribution de machines virtuelles \u00e0 un CPU fixe, des zones de RAM et des dispositifs mat\u00e9riels. Cette approche permet d'ex\u00e9cuter plusieurs environnements virtuels ind\u00e9pendants sur un serveur multiprocesseur physique, chacun \u00e9tant assign\u00e9 \u00e0 son c\u0153ur de processeur. <\/p>\n<p>Avec une liaison stricte au CPU, les frais g\u00e9n\u00e9raux li\u00e9s au fonctionnement de l'hyperviseur sont minimis\u00e9s et sa mise en \u0153uvre est consid\u00e9rablement simplifi\u00e9e, car il n'est pas n\u00e9cessaire d'ex\u00e9cuter un planificateur de ressources complexe \u2014 l'attribution d'un c\u0153ur CPU d\u00e9di\u00e9 garantit l'absence d'ex\u00e9cution d'autres t\u00e2ches sur ce CPU. L'avantage de cette approche est la possibilit\u00e9 d'assurer un acc\u00e8s garanti aux ressources et des performances pr\u00e9visibles, ce qui rend Jailhouse adapt\u00e9 pour cr\u00e9er des t\u00e2ches ex\u00e9cut\u00e9es en temps r\u00e9el. Cependant, le principal inconv\u00e9nient est l'\u00e9volutivit\u00e9 limit\u00e9e, qui est contraignante en fonction du nombre de c\u0153urs CPU.<\/p>\n<p>Dans la terminologie de Jailhouse, les environnements virtuels sont appel\u00e9s \u00ab cellules \u00bb (cell, dans le contexte de jailhouse). \u00c0 l'int\u00e9rieur de la cellule, le syst\u00e8me ressemble \u00e0 un serveur monoproc\u00e9d\u00e9, affichant la performance <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/file\/d\/0B6HTUUWSPdd-Zl93MVhlMnRJRjg\/edit\">proche<\/a><\/noindex> de la performance d'un c\u0153ur CPU d\u00e9di\u00e9. Dans la cellule, il est possible d'ex\u00e9cuter un environnement de n'importe quel syst\u00e8me d'exploitation, ainsi que des environnements r\u00e9duits pour ex\u00e9cuter une seule application ou des applications sp\u00e9cifiquement pr\u00e9par\u00e9es pour r\u00e9soudre des t\u00e2ches en temps r\u00e9el. La configuration est d\u00e9finie dans <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\/blob\/master\/configs\/\">.cell-files<\/a><\/noindex>, d\u00e9finissant les CPU allou\u00e9s \u00e0 l'environnement, les r\u00e9gions de m\u00e9moire et les ports d'entr\u00e9e\/sortie. <\/p>\n<p><center><img decoding=\"async\" alt=\"La soci\u00e9t\u00e9 Siemens a lanc\u00e9 l&#039;hyperviseur Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/6cf944a2502d951e550625bfd39a3d38.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<p>Dans cette nouvelle version<\/p>\n<ul>\n<li class=\"l\"> Ajout de la prise en charge des plateformes Raspberry Pi 4 Model B et Texas Instruments J721E-EVM ;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/static.sched.com\/hosted_files\/kvmforum2019\/4b\/KVM-Forum19_ivshmem2.pdf\">Refondu<\/a><\/noindex> le dispositif ivshmem, utilis\u00e9 pour organiser l'interaction entre les cellules. Sur le nouveau ivshmem, un transport pour VIRTIO peut \u00eatre impl\u00e9ment\u00e9 ;\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/pics_base\/0_1580842059.png\"><img decoding=\"async\" alt=\"La soci\u00e9t\u00e9 Siemens a lanc\u00e9 l&#039;hyperviseur Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/f5785c8e73956397f69b56ec804c77c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> Mise en \u0153uvre de la possibilit\u00e9 de d\u00e9sactiver la cr\u00e9ation de grandes pages m\u00e9moire (hugepage) pour bloquer une vuln\u00e9rabilit\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">CVE-2018-12207<\/a><\/noindex> des processeurs Intel, qui permet \u00e0 un attaquant non privil\u00e9gi\u00e9 d'initier une d\u00e9ni de service, entra\u00eenant le blocage du syst\u00e8me dans un \u00e9tat \u00ab Machine Check Error \u00bb.\n<li class=\"l\"> Pour les syst\u00e8mes avec processeurs ARM64, prise en charge de SMMUv3 (System Memory Management Unit) et TI PVU (Peripheral Virtualization Unit) mise en \u0153uvre. Pour les environnements isol\u00e9s s'ex\u00e9cutant sur le mat\u00e9riel (bare-metal), prise en charge PCI ajout\u00e9e ;\n<li class=\"l\"> Sur les syst\u00e8mes x86 pour les cam\u00e9ras racines, la possibilit\u00e9 d'activer le mode CR4.UMIP (User-Mode Instruction Prevention) fourni par les processeurs Intel est mise en \u0153uvre, permettant d'interdire l'ex\u00e9cution dans l'espace utilisateur de certaines instructions telles que SGDT, SLDT, SIDT, SMSW et STR, qui peuvent \u00eatre utilis\u00e9es dans des attaques visant \u00e0 \u00e9lever les privil\u00e8ges dans le syst\u00e8me.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52310\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse 0.12. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 VMX+EPT \u0438\u043b\u0438 SVM+NPT (AMD-V), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 ARMv7 \u0438 ARMv8\/ARM64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Debian \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41282,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47La soci\u00e9t\u00e9 Siemens a lanc\u00e9 l'hyperviseur Jailhouse 0.12 | ProHoster","description":"La soci\u00e9t\u00e9 Siemens a publi\u00e9 une version de l'hyperviseur libre","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430","og:url":"https:\/\/prohoster.info\/fr\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-07T06:28:13+00:00","article:modified_time":"2020-02-07T06:28:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:17:48","updated":"2022-09-30 06:27:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/41281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=41281"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/41281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/41282"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=41281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=41281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=41281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}