Aikin Asterinas ya fitar da sigar 0.18, wani kernel da aka rubuta da Rust kuma aka tsara shi don amfani a cikin tsarin aiki na gabaɗaya. Kernel yana samar da ABI (Application Binary Interface) wanda ya dace da kernel. Linux kuma ana iya amfani da shi a maimakon haka. Ana haɓaka rarrabawar Asterinas NixOS, wacce ta haɗa ƙwayar Asterinas da yanayin tsarin NixOS, a layi ɗaya. An rarraba lambar aikin a ƙarƙashin lasisin jama'a na MPL (Mozilla Public License).
A halin yanzu, akwai kusan kiran tsarin 240 da aka aiwatar a cikin kernel. LinuxAn tabbatar da cewa rarrabawar Asterinas NixOS tana aiki a saman ƙwayar Asterinas tare da fakitin NixOS sama da 100. Fakitin da aka tallafa sun haɗa da: Xfce, Firefox, bash, systemd, Podman, QEMU, rsync, Apache httpd, nginx, SQLite, Redis, Clang, GCC, Go, Lua, Node.js, OpenJDK, Perl, PHP, Python, Ruby, Rust, Git, FFmpeg, PyTorch, TensorFlow, Ollama, da Codex.
Kernel ɗin yana ba da cikakken goyon baya ga tsarin x86-64, tallafi na ɓangare na RISC-V 64 da x86-64 tare da keɓewa bisa ga Intel TDX, da kuma tallafi na farko ga tsarin LoongArch 64. Fannin da aka fi mayar da hankali a kai sun haɗa da tsarin da ya dogara da Linux ABIs, amma suna buƙatar babban matakin tsaro. Misali, an gabatar da shawarar amfani da Asterinas don ƙirƙirar yanayin tsarin tsaro. injunan kama-da-wane, don ware fasahar kamar ARM CCA, AMD SEV da Intel TDX da ake amfani da su, da kuma a ɓangaren tsarin mai masaukin baki, wanda ke tabbatar da ƙaddamar da kwantena.
Domin rage yuwuwar kurakuran ƙwaƙwalwa, babban tushen raunin da ya fi haɗari, Asterinas yana amfani da harshen Rust da kuma iyakance amfani da tubalan marasa aminci. An gina kernel ta amfani da tsarin framekernel, wanda ke ƙoƙarin haɗa ƙarfin keɓewa na microkernels tare da ingancin kernels na monolithic.
Abubuwan da ke cikin ƙwayoyin halitta a cikin Asterinas suna cikin sararin adireshin da aka raba, kuma ana samun tsaro ta hanyar raba lambar tsaro mai ma'ana daga lambar da za ta iya zama mai rauni. An raba ƙwayar halitta zuwa sassa biyu, duka an rubuta su a cikin Rust: OS Framework da OS Services. OS Services sun hana amfani da tubalan da ba su da aminci, kuma duk ayyukan ƙananan matakan da ke buƙatar aiwatar da lambar a cikin tubalan da ba su da aminci ana motsa su zuwa Tsarin OS kuma ana iya samun su ta hanyar API mai girma kawai. Duk kiran tsarin, tsarin fayil, da direbobi ana aiwatar da su a matakin Ayyukan OS kuma ba za su iya haɗawa da tubalan da ba su da aminci ba.
Don haɓaka ayyukan tsarin da kuma kayan aikin kernel, ana samar da OSDK (Kayan Haɓaka Tsarin Aiki), wanda ke ba da damar amfani da kayan aiki na kaya-osdk don ƙirƙira, ginawa, gwaji, da gudanar da sassan tsarin aiki. Masu haɓakawa kuma za su iya amfani da saitin OSTD (Kayan Aiki na Tsarin Aiki), wanda ya haɗa da bugu na ɗakunan karatu na Rust (kare std) waɗanda aka daidaita don amfani a cikin sassan tsarin aiki.
Daga cikin canje-canje a cikin sigar 0.18:
- A matsayin wani ɓangare na aikin tabbatar da cewa Asterinas yana gudana a matsayin tsarin baƙo a cikin kwantena na Kata Containers da Containers Containers na sirri, an aiwatar da tallafi ga IPC da cgroup namespaces, nsfs (/proc/[pid]/ns), cgroups, virtio-fs (don samun damar tsarin fayil da aka raba tare da tsarin mai masaukin baki), virtio-rng (/dev/hwrng don entropy don mai samar da lambar karya), da vsock (don sadarwa tsakanin tsarin mai masaukin baki da tsarin baƙo).
- An aiwatar da tsarin kira na ptrace da ikon gyara kurakurai ta amfani da GDB da strace.
- An gabatar da sabon aiwatar da tsarin fayil na ext2, kuma an ƙara direban NVMe. An ƙara tsarin Dentry (Shigar da Jagora) zuwa VFS, kuma an sake fasalin aiwatar da cache na shafi.
- Rarraba Asterinas NixOS yana da ikon gudanar da Codex, QEMU, da Firefox.
- An ƙara kiran tsarin pidfd_getfd, pidfd_send_signal, pivot_root.
- Добавлена начальная Tallafin IPv6.
- An aiwatar da tsarin iyawa don tura ayyukan da suka dace ga kowane mutum.
- An ƙara aiwatar da tsarin LSM na farko (Linux Na'urorin Tsaro).
source: budenet.ru
