OpenHCL se pozi\u021bioneaz\u0103 ca un mediu cu componente de para-virtualizare (para-hipervizor), care func\u021bioneaz\u0103 deasupra hipervizorului OpenVMM. Caracteristica principal\u0103 a sistemelor de virtualizare bazate pe OpenVMM \u0219i OpenHCL este c\u0103 componentele pentru para-virtualizare ruleaz\u0103 nu pe partea sistemului gazd\u0103, ci \u00eentr-o singur\u0103 ma\u0219in\u0103 virtual\u0103 cu sistemul de operare invitat. Izolarea stratului de para-virtualizare de sistemul de operare invitat este asigurat\u0103 de hipervizorul de nivel doi OpenVMM. OpenHCL, \u00een aceast\u0103 aplica\u021bie, poate fi considerat un firmware virtual, oper\u00e2nd la un nivel mai \u00eenalt de privilegii dec\u00e2t sistemul de operare care ruleaz\u0103 \u00een mediu invitat. <\/p>\n
Separarea sistemului invitat \u0219i a componentelor OpenHCL se realizeaz\u0103 folosind conceptul de niveluri virtuale de \u00eencredere (VTL, Virtual Trust Level), pentru realizarea c\u0103rora pot fi utilizate at\u00e2t mecanisme software, c\u00e2t \u0219i tehnologii hardware, cum ar fi Intel TDX (Trust Domain Extensions), AMD SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging) \u0219i ARM CCA (Confidential Compute Architecture). Pentru a rula componentele OpenHCL se utilizeaz\u0103 o versiune restr\u00e2ns\u0103 a nucleului Linux, care include doar componentele minime necesare pentru func\u021bionarea OpenVMM.
![\"Microsoft](\"\/wp-content\/uploads\/2024\/10\/e998f3109604aad0946a76e3fc7d5233.png\")
<\/center> <\/p>\nOpenHCL poate func\u021biona pe platforme x86-64 \u0219i ARM64 \u0219i suport\u0103 extensiile Intel TDX, AMD SEV-SNP \u0219i ARM CCA pentru o izolare suplimentar\u0103. OpenHCL include un set de servicii, drivere \u0219i emulatori utiliza\u021bi pentru a organiza accesul la echipamente, a asigura func\u021bionarea dispozitivelor virtuale pe partea sistemului gazd\u0103 \u0219i a emula dispozitive hardware (de exemplu, poate fi emulat un cip pentru stocarea cheilor criptografice \u2014 vTPM). <\/p>\n
Pentru transla\u021bia accesului la hardware pe partea gazdelor se aplic\u0103 drivere existente cu suport pentru paravirtualizare sau se poate realiza ata\u0219area direct\u0103 a dispozitivelor la ma\u0219ina virtual\u0103, ceea ce permite migrarea sistemelor gazd\u0103 existente \u00een medii bazate pe OpenHCL f\u0103r\u0103 a le modifica. \u00cen plus, OpenHCL include componente pentru diagnosticare \u0219i depanare. ma\u0219ini virtuale<\/a>, realizate folosind extensii pentru a asigura calcule confiden\u021biale. <\/p>\n Spre deosebire de proiectul deschis existent COCONUT-SVSM (Secure VM Service Module), care furnizeaz\u0103 servicii \u0219i dispozitive emulate pentru sistemele gazd\u0103 care func\u021bioneaz\u0103 \u00een confiden\u021bialitate virtu\u00e1lne ma\u0161ini<\/a> (CVM, Confidential Virtual Machine), OpenHCL permite utilizarea interfe\u021belor standard \u00een sistemele gazd\u0103, \u00een timp ce COCONUT-SVSM necesit\u0103 organizarea unei interac\u021biuni speciale cu SVSM, modificarea sistemului gazd\u0103 \u0219i utilizarea de drivere separate. <\/p>\n Printre aplica\u021biile paravirtorului OpenHCL se num\u0103r\u0103 scenarii precum migrarea sistemelor existente la utilizarea acceleratoarelor hardware Azure Boost f\u0103r\u0103 a necesita modific\u0103ri \u00een imaginea discului sistemului gazd\u0103; rularea sistemelor gazd\u0103 existente \u00een ma\u0219ini virtuale care ofer\u0103 calcule confiden\u021biale (de exemplu, bazate pe Intel TDX \u0219i AMD SEV-SNP); organizarea unei \u00eenc\u0103rc\u0103ri verificate a ma\u0219inilor virtuale, folosind modul UEFI Secure Boot \u0219i vTPM. <\/p>\n Se men\u021bioneaz\u0103 \u00een mod special c\u0103 proiectul OpenVMM se concentreaz\u0103 pe utilizarea \u00eempreun\u0103 cu OpenHCL \u0219i nu este \u00eenc\u0103 preg\u0103tit pentru a fi utilizat separat pe sistemele de gazduire pentru implement\u0103ri dedicate utilizatorilor finali. Printre problemele OpenVMM care \u00eempiedic\u0103 utilizarea sa \u00een medii de gazduire \u00een context tradi\u021bional, \u00een afara integr\u0103rii cu OpenHCL, se num\u0103r\u0103: documenta\u021bia slab\u0103 a interfe\u021bei de management; lipsa optimiz\u0103rii corespunz\u0103toare a performan\u021bei backend-urilor pentru stocare, re\u021bea \u0219i grafic\u0103; absen\u021ba suportului pentru anumite drivere (de exemplu, HDD-uri IDE \u0219i mouse-uri PS\/2); lipsa unei garan\u021bii de stabilitate a API-ului \u0219i func\u021bionalit\u0103\u021bii. Totu\u0219i, integrarea dintre OpenVMM \u0219i OpenHCL a atins deja un nivel de implementare industrial\u0103 \u0219i este utilizat\u0103 de Microsoft pe platforma Azure (SKU Azure Boost) pentru operarea a peste 1.5 milioane de ma\u0219ini virtuale. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0441\u043b\u043e\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d OpenVMM, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b OpenHCL. \u041a\u043e\u0434 OpenVMM \u0438 OpenHCL \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. OpenVMM \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\u043c \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c \u0432 \u043e\u0434\u043d\u043e\u043c \u043a\u043e\u043b\u044c\u0446\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u044f\u0434\u0440\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120220,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120219","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft a deschis codul hipervizorului OpenVMM \u0219i platformei de paravirtualizare OpenHCL | ProHoster","description":"Compania Microsoft a anun\u021bat deschiderea codului surs\u0103 pentru stratul de paravirtualizare OpenHCL \u0219i monitorul de ma\u0219ini virtuale OpenVMM, dezvoltat \u00een mod special pentru a organiza func\u021bionarea OpenHCL.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 OpenVMM \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0441\u043b\u043e\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 OpenHCL \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d OpenVMM, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b OpenHCL.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-otkryl-kod-gipervizora-openvmm-i-platformy-paravirtualizaczii-openhcl","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-18T11:09:11+00:00","article:modified_time":"2024-10-18T11:09:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120219","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:35:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:23:19","updated":"2026-02-09 17:35:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=120219"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120219\/revisions"}],"predecessor-version":[{"id":164165,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120219\/revisions\/164165"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/120220"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=120219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=120219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=120219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"