{"id":105291,"date":"2022-10-12T03:36:45","date_gmt":"2022-10-12T01:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kata-containers-3-0-s-izolyacziej-na-osnove-virtualizaczii"},"modified":"2022-10-12T03:36:45","modified_gmt":"2022-10-12T01:36:47","slug":"vypusk-kata-containers-3-0-s-izolyacziej-na-osnove-virtualizaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kata-containers-3-0-s-izolyacziej-na-osnove-virtualizaczii","title":{"rendered":"Megjelent a Kata Containers 3.0, amely a virtualiz\u00e1ci\u00f3n alapul\u00f3 izol\u00e1ci\u00f3t k\u00edn\u00e1l.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A k\u00e9t \u00e9v fejleszt\u00e9s ut\u00e1n megjelent a Kata Containers 3.0 projekt verzi\u00f3ja, amely a teljes k\u00f6r\u0171 virtualiz\u00e1ci\u00f3s mechanizmusokon alapul\u00f3 kont\u00e9ner-feladatv\u00e9gz\u00e9s keretrendszer\u00e9t fejleszti. A projektet az Intel \u00e9s a Hyper c\u00e9gek hozt\u00e1k l\u00e9tre, \u00f6sszekapcsolva a Clear Containers \u00e9s a runV technol\u00f3gi\u00e1it. A projekt k\u00f3dja Go \u00e9s Rust nyelveken k\u00e9sz\u00fclt, \u00e9s az Apache 2.0 licenc alatt terjesztik. A projekt fejl\u0151d\u00e9s\u00e9t egy munkacsoport ir\u00e1ny\u00edtja, amelyet az OpenStack Foundation f\u00fcggetlen szervezete alatt alap\u00edtottak, \u00e9s amelyben olyan c\u00e9gek vesznek r\u00e9szt, mint a Canonical, a China Mobile, a Dell\/EMC, az EasyStack, a Google, a Huawei, a NetApp, a Red Hat, a SUSE \u00e9s a ZTE. <\/p>\n

A Kata alapj\u00e1t a runtime k\u00e9pezi, amely lehet\u0151v\u00e9 teszi kompakt virtu\u00e1lis g\u00e9pek l\u00e9trehoz\u00e1s\u00e1t, amelyeket egy teljes funkcionalit\u00e1s\u00fa hipervizor haszn\u00e1lat\u00e1val hajtanak v\u00e9gre, ahelyett, hogy a hagyom\u00e1nyos kont\u00e9nerekre t\u00e1maszkodn\u00e1nak, amelyek k\u00f6z\u00f6s Linux kernelt haszn\u00e1lnak, \u00e9s namespace-ek \u00e9s cgroups seg\u00edts\u00e9g\u00e9vel vannak izol\u00e1lva. Az alkalmaz\u00e1s virtu\u00e1lis g\u00e9pekhez<\/a> nagyobb biztons\u00e1gi szint el\u00e9r\u00e9s\u00e9t teszi lehet\u0151v\u00e9, amely megv\u00e9d a Linux magban tal\u00e1lhat\u00f3 s\u00e9r\u00fcl\u00e9kenys\u00e9gek kihaszn\u00e1l\u00e1s\u00e1val v\u00e9gzett t\u00e1mad\u00e1sokt\u00f3l. <\/p>\n

A Kata Containers a megl\u00e9v\u0151 kont\u00e9nerelszigetel\u00e9si infrastrukt\u00far\u00e1k integr\u00e1l\u00e1s\u00e1ra \u00f6sszpontos\u00edt, lehet\u0151s\u00e9get biztos\u00edtva az ilyen virtu\u00e1lis g\u00e9pek alkalmaz\u00e1s\u00e1ra a hagyom\u00e1nyos kont\u00e9nerek v\u00e9delm\u00e9nek fokoz\u00e1s\u00e1ra. A projekt eszk\u00f6z\u00f6ket biztos\u00edt a k\u00f6nny\u0171 virtu\u00e1lis g\u00e9pek k\u00fcl\u00f6nb\u00f6z\u0151 kont\u00e9nerelszigetel\u00e9si infrastrukt\u00far\u00e1kkal, kont\u00e9nerorkesztr\u00e1l\u00f3 platformokkal \u00e9s specifik\u00e1ci\u00f3kkal, p\u00e9ld\u00e1ul OCI (Open Container Initiative), CRI (Container Runtime Interface) \u00e9s CNI (Container Networking Interface) kompatibilit\u00e1s\u00e1nak biztos\u00edt\u00e1s\u00e1ra. El\u00e9rhet\u0151k az integr\u00e1ci\u00f3s eszk\u00f6z\u00f6k a Docker, Kubernetes, QEMU \u00e9s OpenStack platformokkal. <\/p>\n

\"Megjelent<\/center> <\/p>\n

Az integr\u00e1ci\u00f3 a kont\u00e9nerkezel\u0151 rendszerekkel egy olyan r\u00e9teg seg\u00edts\u00e9g\u00e9vel val\u00f3sul meg, amely szimul\u00e1lja a kont\u00e9ner kezel\u00e9s\u00e9t, amely gRPC interf\u00e9szen \u00e9s speci\u00e1lis proxy-n kereszt\u00fcl l\u00e9p kapcsolatba a virtu\u00e1lis g\u00e9pben l\u00e9v\u0151 kezel\u0151 \u00fcgyn\u00f6kkel. A hypervisor \u00e1ltal ind\u00edtott virtu\u00e1lis k\u00f6rnyezetben egy speci\u00e1lisan optimaliz\u00e1lt Linux kernel ker\u00fcl felhaszn\u00e1l\u00e1sra, amely csak a sz\u00fcks\u00e9ges funkci\u00f3k minim\u00e1lis halmaz\u00e1t tartalmazza. <\/p>\n

A hypervisor supports the use of Dragonball Sandbox (KVM edition optimized for containers) with the QEMU toolkit, as well as Firecracker and Cloud Hypervisor. The system environment includes an initialization daemon and an agent (Agent). The agent ensures the execution of user-defined container images in OCI format for Docker and CRI for Kubernetes. When used alongside Docker, a separate virtu\u00e1lis g\u00e9p<\/a>, i.e., an environment running on top of the hypervisor is applied for nested container launches.

\"Megjelent<\/center> <\/p>\n

To reduce memory consumption, the DAX mechanism (direct access to the file system bypassing the page cache without using block device levels) is utilized, and for deduplication of identical memory areas, the KSM (Kernel Samepage Merging) technology is applied, allowing resource sharing of the host system and connecting a shared system environment template to different guest systems. <\/p>\n

Az \u00faj verzi\u00f3ban: <\/p>\n