Bayan shekara guda na ci gaba, an saki hypervisor Xen 4.17 kyauta. Kamfanoni irin su Amazon, Arm, Bitdefender, Citrix, EPAM Systems da Xilinx (AMD) sun shiga cikin haɓaka sabon sakin. Ƙirƙirar sabuntawa don reshen Xen 4.17 zai kasance har zuwa Yuni 12, 2024, da kuma buga gyare-gyaren raunin har zuwa Disamba 12, 2025.
Canje-canje masu mahimmanci a cikin Xen 4.17:
- An ba da ɓangarorin yarda tare da buƙatun don haɓaka amintattun shirye-shirye masu aminci a cikin yaren C, waɗanda aka tsara a cikin ƙayyadaddun MISRA-C da aka yi amfani da su wajen ƙirƙirar mahimman tsarin manufa. Xen bisa hukuma yana aiwatar da umarni 4 da ka'idojin MISRA-C guda 24 (daga cikin dokoki 143 da umarnin 16), sannan kuma yana haɗa mai nazarin MISRA-C a cikin tsarin taro, wanda ke tabbatar da bin ƙayyadaddun buƙatun.
- Yana ba da ikon ayyana daidaitaccen tsarin Xen don tsarin ARM, wanda ke ƙididdige duk albarkatun da ake buƙata don taya baƙi gaba. Duk albarkatun, kamar ƙwaƙwalwar ajiyar da aka raba, tashoshi na sanarwar taron, da sararin samaniyar hypervisor, an riga an keɓe su a farawa hypervisor maimakon a keɓe masu ƙarfi, kawar da yuwuwar gazawar saboda ƙarancin albarkatu yayin aiki.
- Don tsarin da aka haɗa bisa tsarin gine-gine na ARM, goyan bayan gwaji (samfoti na fasaha) don haɓaka I/O ta amfani da ka'idojin VirtIO an aiwatar da su. Ana amfani da jigilar virtio-mmio don musayar bayanai tare da na'urar I/O mai kama-da-wane, wanda ke tabbatar da dacewa tare da kewayon na'urorin VirtIO. An aiwatar da goyan bayan gaban Linux, kayan aikin kayan aiki (libxl/xl), yanayin dom0less da backends da ke gudana a cikin sarari mai amfani (an gwada virtio-disk, virtio-net, i2c da gpio backends).
- Ingantattun tallafi don yanayin dom0less, wanda ke ba ku damar guje wa tura yanayin dom0 lokacin fara injunan kama-da-wane a farkon matakin boot ɗin uwar garken. Yana yiwuwa a ayyana wuraren waha na CPU (CPUPOOL) a matakin taya (ta hanyar bishiyar na'ura), wanda ke ba ku damar amfani da wuraren waha a cikin jeri ba tare da dom0 ba, alal misali, don ɗaure nau'ikan nau'ikan nau'ikan CPU akan tsarin ARM dangane da babban.LITTLE. gine-gine, hada karfi, amma makamashi cinye cores, da ƙasa da m amma mafi makamashi tasiri cores. Bugu da ƙari, dom0less yana ba da ikon ɗaure paravirtualization frontend / backend zuwa tsarin baƙo, wanda ke ba ku damar taya tsarin baƙo tare da na'urorin da suka dace.
- A kan tsarin ARM, tsarin ƙirar ƙwaƙwalwar ajiya (P2M, Physical to Machine) yanzu ana kebe su daga wurin ajiyar ƙwaƙwalwar ajiya da aka ƙirƙira lokacin da aka ƙirƙiri yankin, wanda ke ba da damar mafi kyawun warewa tsakanin baƙi lokacin da gazawar ƙwaƙwalwar ajiya ta faru.
- Don tsarin ARM, an ƙara kariya daga raunin Specter-BHB a cikin tsarin ƙirar microarchitectural.
- A kan tsarin ARM, yana yiwuwa a gudanar da tsarin aiki na Zephyr a cikin tushen tushen Dom0.
- An ba da yiwuwar haɗuwar hypervisor daban (daga itace).
- A kan tsarin x86, manyan shafuka na IOMMU (superpage) ana goyan bayan kowane nau'in tsarin baƙo, wanda ke ba da damar haɓaka kayan aiki yayin tura na'urorin PCI. Ƙara tallafi don runduna sanye take da har zuwa 12 TB na RAM. A matakin taya, an aiwatar da ikon saita sigogi na cpuid don dom0. Don sarrafa matakan kariya da aka aiwatar a matakin hypervisor kan hare-hare kan CPU a cikin tsarin baƙo, ana ba da shawarar sigogin VIRT_SSBD da MSR_SPEC_CTRL.
- Ana haɓaka sufurin VirtIO-Grant daban, ya bambanta da VirtIO-MMIO ta babban matakin tsaro da ikon tafiyar da masu sarrafa a keɓantaccen yanki na direbobi. VirtIO-Grant, maimakon taswirar ƙwaƙwalwar ajiyar kai tsaye, yana amfani da fassarar adiresoshin jiki na tsarin baƙo zuwa hanyoyin haɗin kai, wanda ke ba da damar yin amfani da wuraren da aka riga aka yarda da su na ƙwaƙwalwar ajiya don musayar bayanai tsakanin tsarin baƙo da na baya na VirtIO, ba tare da bayarwa ba. haƙƙin baya don yin taswirar ƙwaƙwalwar ajiya. An riga an aiwatar da tallafin VirtIO-Grant a cikin Linux kernel, amma har yanzu ba a haɗa shi cikin goyan bayan QEMU ba, a cikin virtio-vhost kuma a cikin kayan aiki (libxl/xl).
- Shirin Hyperlaunch yana ci gaba da haɓakawa, da nufin samar da kayan aiki masu sassauƙa don daidaita ƙaddamar da injunan kama-da-wane yayin boot ɗin tsarin. A halin yanzu, an riga an shirya saitin farko na faci wanda ke ba ka damar gano wuraren PV da canja wurin hotunan su zuwa hypervisor lokacin lodawa. An kuma aiwatar da duk abin da ake buƙata don gudanar da irin waɗannan wuraren da aka lalatar da su, gami da abubuwan Xenstore don direbobin PV. Da zarar an karɓi faci, aikin zai fara ba da damar tallafi ga na'urorin PVH da HVM, da kuma aiwatar da wani yanki na domB daban (yankin gini), wanda ya dace da tsara takalmin da aka auna, yana tabbatar da ingancin duk abubuwan da aka ɗora.
- Ana ci gaba da aiki akan ƙirƙirar tashar jiragen ruwa na Xen don gine-ginen RISC-V.
source: budenet.ru