{"id":41281,"date":"2020-02-07T09:28:13","date_gmt":"2020-02-07T06:28:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12"},"modified":"2020-02-07T09:28:13","modified_gmt":"2020-02-07T06:28:13","slug":"kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","title":{"rendered":"Firma Siemens wyda\u0142a hipervizor Jailhouse 0.12","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Firma Siemens <noindex><a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2020\/2\/4\/403\">opublikowa\u0142a<\/a><\/noindex> wydanie wolnego hipernadzorcy <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">Jailhouse 0.12<\/a><\/noindex>. Hypervisor obs\u0142uguje dzia\u0142anie na systemach x86_64 z rozszerzeniami VMX+EPT lub SVM+NPT (AMD-V), a tak\u017ce na procesorach ARMv7 i ARMv8\/ARM64 z rozszerzeniami dla wirtualizacji. Osobno <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse-images\">rozwijana jest<\/a><\/noindex> generator obraz\u00f3w dla hyperwizora Jailhouse, tworzonych w oparciu o pakiety Debian dla wspieranych urz\u0105dze\u0144. Kod projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">rozpowszechniany<\/a><\/noindex>  na licencji GPLv2. <\/p>\n<p>Hypervisor zrealizowany jest jako modu\u0142 j\u0105dra Linux i zapewnia wirtualizacj\u0119 na poziomie j\u0105dra. Komponenty dla system\u00f3w go\u015bcinnych s\u0105 ju\u017c w\u0142\u0105czone w sk\u0142ad podstawowego j\u0105dra Linux. Do zarz\u0105dzania izolacj\u0105 wykorzystywane s\u0105 nowoczesne mechanizmy sprz\u0119towe do wirtualizacji oferowane przez procesory. Cech\u0105 wyr\u00f3\u017cniaj\u0105c\u0105 Jailhouse jest lekka realizacja oraz orientacja na przypisanie wirtualnych maszyn do sta\u0142ego CPU, obszaru RAM i urz\u0105dze\u0144 sprz\u0119towych. Takie podej\u015bcie pozwala na zapewnienie funkcjonowania kilku niezale\u017cnych wirtualnych \u015brodowisk na jednym fizycznym serwerze wieloprocesorowym, z kt\u00f3rych ka\u017cde jest przypisane do swojego rdzenia procesora. <\/p>\n<p>Przy \u015bcis\u0142ym powi\u0105zaniu z CPU narzuty wynikaj\u0105ce z dzia\u0142ania hyperwizora s\u0105 minimalizowane, co znacznie upraszcza jego wdro\u017cenie, poniewa\u017c nie ma potrzeby stosowania skomplikowanego harmonogramu przydzia\u0142u zasob\u00f3w - przydzielenie oddzielnego rdzenia CPU pozwala zapewni\u0107, \u017ce na danym CPU nie b\u0119d\u0105 wykonywane inne zadania. Zalet\u0105 tego podej\u015bcia jest mo\u017cliwo\u015b\u0107 zapewnienia gwarantowanego dost\u0119pu do zasob\u00f3w i przewidywalnej wydajno\u015bci, co czyni Jailhouse odpowiednim rozwi\u0105zaniem do tworzenia zada\u0144 dzia\u0142aj\u0105cych w czasie rzeczywistym. Wad\u0105 jest ograniczona skalowalno\u015b\u0107, opieraj\u0105ca si\u0119 na liczbie rdzeni CPU.<\/p>\n<p>W terminologii Jailhouse wirtualne \u015brodowiska nazywane s\u0105 \u201ecelami\u201d (cell, w kontek\u015bcie Jailhouse). Wewn\u0105trz celi system wygl\u0105da jak jednoprosesorowy serwer, wykazuj\u0105cy wydajno\u015b\u0107 <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/file\/d\/0B6HTUUWSPdd-Zl93MVhlMnRJRjg\/edit\">blisk\u0105<\/a><\/noindex> wydajno\u015bci dedykowanego rdzenia CPU. W komorze mo\u017ce by\u0107 uruchomione \u015brodowisko dowolnego systemu operacyjnego, a tak\u017ce uproszczone \u015brodowiska do uruchamiania jednego aplikacji lub specjalnie przygotowane oddzielne aplikacje, przeznaczone do rozwi\u0105zywania zada\u0144 czasu rzeczywistego. Konfiguracja okre\u015blana jest w <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\/blob\/master\/configs\/\">.pliki .cell<\/a><\/noindex>, definiuj\u0105ce przydzielane \u015brodowisku CPU, obszary pami\u0119ci i porty wej\u015bcia\/wyj\u015bcia. <\/p>\n<p><center><img decoding=\"async\" alt=\"Firma Siemens wyda\u0142a hipervizor Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/6cf944a2502d951e550625bfd39a3d38.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<p>W nowym wydaniu<\/p>\n<ul>\n<li class=\"l\"> Dodano wsparcie dla platform Raspberry Pi 4 Model B oraz Texas Instruments J721E-EVM;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/static.sched.com\/hosted_files\/kvmforum2019\/4b\/KVM-Forum19_ivshmem2.pdf\">Przeprojektowano<\/a><\/noindex> urz\u0105dzenie ivshmem, stosowane do organizowania interakcji mi\u0119dzy kom\u00f3rkami. Na nowym ivshmem mo\u017cna wdro\u017cy\u0107 transport dla VIRTIO;\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/pics_base\/0_1580842059.png\"><img decoding=\"async\" alt=\"Firma Siemens wyda\u0142a hipervizor Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/f5785c8e73956397f69b56ec804c77c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> Zrealizowano mo\u017cliwo\u015b\u0107 wy\u0142\u0105czenia tworzenia du\u017cych stron pami\u0119ci (hugepage) w celu zablokowania podatno\u015bci <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">CVE-2018-12207<\/a><\/noindex> \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 &#171;Machine Check Error&#187;;\n<li class=\"l\"> Dla system\u00f3w z procesorami ARM64 zaimplementowano wsparcie SMMUv3 (System Memory Management Unit) oraz TI PVU (Peripheral Virtualization Unit). Dla izolowanych \u015brodowisk dzia\u0142aj\u0105cych na sprz\u0119cie (bare-metal) dodano wsparcie PCI;\n<li class=\"l\"> Na systemach x86 dla rdzeni procesora wdro\u017cono mo\u017cliwo\u015b\u0107 w\u0142\u0105czenia trybu CR4.UMIP (User-Mode Instruction Prevention) zapewnianego przez procesory Intel, kt\u00f3ry pozwala zakaza\u0107 wykonania niekt\u00f3rych instrukcji w przestrzeni u\u017cytkownika, takich jak SGDT, SLDT, SIDT, SMSW i STR, kt\u00f3re mog\u0105 by\u0107 wykorzystywane w atakach maj\u0105cych na celu podniesienie przywilej\u00f3w w systemie.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>\u0179r\u00f3d\u0142o: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52310\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse 0.12. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 VMX+EPT \u0438\u043b\u0438 SVM+NPT (AMD-V), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 ARMv7 \u0438 ARMv8\/ARM64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Debian \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41282,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firma Siemens wyda\u0142a hipernadz\u00f3r Jailhouse 0.12 | ProHoster","description":"Firma Siemens opublikowa\u0142a wydanie wolnego hipernadzory","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430","og:url":"https:\/\/prohoster.info\/pl\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-07T06:28:13+00:00","article:modified_time":"2020-02-07T06:28:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:17:48","updated":"2022-09-30 06:27:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/41281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=41281"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/41281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/41282"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=41281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=41281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=41281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}