Tus qauv thib ob ntawm ALP platform, hloov SUSE Linux Enterprise

SUSE tau luam tawm tus qauv thib ob ntawm ALP "Punta Baretti" (Adaptable Linux Platform), tau ua haujlwm txuas ntxiv ntawm kev txhim kho ntawm SUSE Linux Enterprise faib. Qhov sib txawv tseem ceeb ntawm ALP yog kev faib cov tub ntxhais faib ua ob ntu: kev tshem tawm "tus tswv OS" rau kev khiav ntawm cov khoom siv sab saum toj thiab txheej txheej rau kev txhawb nqa cov ntawv thov, tsom rau kev khiav hauv ntim thiab tshuab virtual. Cov rooj sib txoos tau npaj rau x86_64 architecture. ALP yog thawj zaug tsim los siv cov txheej txheem qhib kev txhim kho, uas qhov nruab nrab ntawm kev tsim thiab kev xeem tau raug tshaj tawm rau txhua tus.

ALP architecture yog raws li kev txhim kho hauv "tus tswv OS" ntawm ib puag ncig uas tsim nyog tsawg los txhawb thiab tswj cov khoom siv. Nws tau thov kom khiav txhua daim ntawv thov thiab cov neeg siv qhov chaw tsis nyob hauv ib puag ncig sib xyaw, tab sis nyob rau hauv cov thawv cais lossis cov tshuab virtual khiav rau saum "tus tswv OS" thiab cais tawm ntawm ib leeg. Lub koom haum no yuav tso cai rau cov neeg siv tsom mus rau cov ntawv thov thiab kev ua haujlwm tsis pom kev deb ntawm lub hauv paus system ib puag ncig thiab kho vajtse.

SLE Micro cov khoom, raws li kev txhim kho ntawm MicroOS project, yog siv los ua lub hauv paus rau "tus tswv OS". Rau kev tswj hwm hauv nruab nrab, cov txheej txheem tswj xyuas cov ntsev (ua ntej-ntsia) thiab Ansible (yeem) muaj. Podman thiab K3s (Kubernetes) cov cuab yeej muaj los khiav cov thawv cais. Ntawm cov khoom siv hauv lub thawv yog yast2, podman, k3s, cockpit, GDM (GNOME Display Manager) thiab KVM.

Ntawm cov yam ntxwv ntawm qhov system ib puag ncig, lub neej ntawd siv disk encryption (FDE, Full Disk Encryption) nrog lub peev xwm khaws cov yuam sij hauv TPM tau hais. Lub hauv paus muab faib yog mounted nyob rau hauv hom nyeem nkaus xwb thiab tsis hloov thaum lub sij hawm ua hauj lwm. Ib puag ncig siv atomic hloov tshiab installation mechanism. Tsis zoo li atomic hloov tshiab raws li ostree thiab snap siv hauv Fedora thiab Ubuntu, ALP siv tus txheej txheem pob tus thawj tswj hwm thiab snapshot mechanism hauv Btrfs cov ntaub ntawv es tsis txhob tsim cov duab atomic cais thiab xa cov khoom xa tuaj ntxiv.

Muaj hom kev teeb tsa rau kev teeb tsa tsis siv neeg hloov tshiab (piv txwv li, koj tuaj yeem ua kom tsis siv neeg nruab ntawm tsuas yog thaj ua rau thaj tsam tseem ceeb lossis rov qab mus rau manually lees paub lub installation ntawm kev hloov tshiab). Nyob thaj ua rau thaj tau txais kev txhawb nqa los hloov kho Linux ntsiav yam tsis tau rov pib dua lossis tso tseg ua haujlwm. Txhawm rau tswj hwm txoj kev muaj sia nyob (kev kho tus kheej), lub xeev ruaj khov kawg tau sau tseg siv Btrfs snapshots (yog tias pom qhov tsis txaus ntseeg tom qab thov hloov kho lossis hloov chaw, lub kaw lus yuav cia li hloov mus rau lub xeev dhau los).

Lub platform siv ntau hom software pawg - ua tsaug rau kev siv cov ntim khoom, koj tuaj yeem siv ib txhij siv cov cuab yeej sib txawv thiab kev siv. Piv txwv li, koj tuaj yeem khiav cov ntawv thov siv sib txawv ntawm Python, Java, thiab Node.js ua kev vam khom, sib cais tsis sib haum xeeb. Lub hauv paus kev cia siab yog muab rau hauv daim ntawv ntawm BCI (Base Container Images) teev. Tus neeg siv tuaj yeem tsim, hloov kho thiab tshem tawm software pawg yam tsis muaj kev cuam tshuam rau lwm qhov chaw.

Kev hloov pauv tseem ceeb hauv ALP qauv thib ob:

  • D-Installer installer yog siv, nyob rau hauv uas tus neeg siv interface yog sib cais los ntawm lub sab hauv Cheebtsam ntawm YaST thiab nws muaj peev xwm siv ntau yam frontends, nrog rau ib tug frontend rau kev tswj lub installation ntawm lub web interface. Lub interface yooj yim rau kev tswj hwm kev teeb tsa yog tsim los ntawm kev siv lub vev xaib thev naus laus zis thiab suav nrog tus neeg saib xyuas uas muab kev nkag mus rau D-Bus hu ntawm HTTP, thiab lub vev xaib cuam tshuam nws tus kheej. Lub web interface yog sau rau hauv JavaScript siv lub React moj khaum thiab PatternFly Cheebtsam. Txhawm rau kom muaj kev ruaj ntseg, D-Installer txhawb nqa kev teeb tsa ntawm cov kev sib faib encrypted thiab tso cai rau koj siv TPM (Trusted Platform Module) los txiav txim siab qhov kev faib khau raj, siv cov yuam sij khaws cia hauv TPM nti es tsis txhob lo lus zais.
  • Pab kom ua tiav ntawm qee tus neeg siv YaST (bootloader, iSCSIClient, Kdump, firewall, thiab lwm yam) hauv cov thawv cais. Ob hom ntim tau raug coj los siv: tswj ib qho rau kev ua haujlwm nrog YaST hauv hom ntawv, hauv GUI thiab ntawm Web interface, thiab sim cov khoom siv rau kev xa ntawv. Ib tug xov tooj ntawm modules kuj tau yoog rau siv nyob rau hauv lub tshuab nrog kev hloov pauv hloov tshiab. Rau kev koom ua ke nrog openQA, lub tsev qiv ntawv libyui-rest-api nrog REST API siv tau raug npaj.
  • Ua tiav kev ua tiav nyob rau hauv ib lub thawv ntawm Cockpit platform, ntawm lub hauv paus ntawm lub web interface ntawm configurator thiab installer yog tsim.
  • Nws tuaj yeem siv tag nrho-disk encryption (FDE, Full Disk Encryption) hauv kev teeb tsa rau saum cov khoom siv ib txwm siv, thiab tsis yog hauv cov tshuab virtualization thiab huab.
  • GRUB2 yog siv los ua lub ntsiab bootloader.
  • Ntxiv configurations rau deploying ntim rau tsim ib lub firewall (firewalld-container) thiab centralized tswj ntawm systems thiab pawg (warewulf-container).

Tau qhov twg los: opennet.ru

Ntxiv ib saib