{"id":101775,"date":"2021-10-25T22:22:37","date_gmt":"2021-10-25T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-muen-1-0-otkrytogo-mikroyadra-dlya-sozdaniya-vysokonadyozhnyh-sistem"},"modified":"2021-10-25T22:22:37","modified_gmt":"2021-10-25T20:22:37","slug":"vypusk-muen-1-0-otkrytogo-mikroyadra-dlya-sozdaniya-vysokonadyozhnyh-sistem","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-muen-1-0-otkrytogo-mikroyadra-dlya-sozdaniya-vysokonadyozhnyh-sistem","title":{"rendered":"Vydanie Muen 1.0, otvoren\u00e9ho mikrojadra pre vytv\u00e1ranie vysoko spo\u013eahliv\u00fdch syst\u00e9mov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Po \u00f4smich rokoch v\u00fdvoja sa spustila verzia projektu Muen 1.0, ktor\u00e1 sa zaober\u00e1 jadrom rozdelenia (Separation kernel), pri\u010dom absencia ch\u00fdb v zdrojov\u00fdch k\u00f3doch bola potvrden\u00e1 matematick\u00fdmi met\u00f3dami form\u00e1lnej verifik\u00e1cie spo\u013eahlivosti. Jadro je dostupn\u00e9 pre architekt\u00faru x86_64 a m\u00f4\u017ee sa pou\u017e\u00edva\u0165 v kritick\u00fdch syst\u00e9moch, ktor\u00e9 si vy\u017eaduj\u00fa zv\u00fd\u0161en\u00fa \u00farove\u0148 spo\u013eahlivosti a z\u00e1ruku absencie por\u00fach. Zdrojov\u00e9 k\u00f3dy projektu s\u00fa nap\u00edsan\u00e9 v programovacom jazyku Ada a jeho verifikovate\u013enom dialekte SPARK 2014. K\u00f3d sa distribuuje pod licenciou GPLv3. <\/p>\n
Jadro rozdelenia predstavuje mikrojadro, ktor\u00e9 poskytuje prostredie pre sp\u00fa\u0161\u0165anie izolovan\u00fdch komponentov, ktor\u00fdch interakcia je pr\u00edsne regulovan\u00e1 stanoven\u00fdmi pravidlami. Izol\u00e1cia je zalo\u017een\u00e1 na pou\u017eit\u00ed roz\u0161\u00edren\u00ed virtualiz\u00e1cie Intel VT-x a predpoklad\u00e1 aj mechanizmy ochrany na blokovanie skryt\u00fdch komunika\u010dn\u00fdch kan\u00e1lov. Jadro rozdelenia je minimalistickej\u0161ie a statickej\u0161ie v porovnan\u00ed s in\u00fdmi mikrojadrami, \u010do umo\u017e\u0148uje zn\u00ed\u017ei\u0165 po\u010det situ\u00e1ci\u00ed, ktor\u00e9 m\u00f4\u017eu vies\u0165 k poruche. <\/p>\n
Jadro be\u017e\u00ed v kore\u0148ovom re\u017eime VMX podobne ako hyperv\u00edzor, zatia\u013e \u010do v\u0161etky ostatn\u00e9 komponenty be\u017eia v nekore\u0148ovom re\u017eime VMX podobne ako hos\u0165uj\u00face syst\u00e9my. Pr\u00edstup k hardv\u00e9ru sa uskuto\u010d\u0148uje pomocou roz\u0161\u00edren\u00ed Intel VT-d DMA a premapovania preru\u0161enia, \u010do umo\u017e\u0148uje bezpe\u010dn\u00e9 prepojenie PCI zariaden\u00ed na komponenty spravovan\u00e9 Muen.
<\/center> <\/p>\n
Medzi schopnosti Muen patr\u00ed podpora viacjadrov\u00fdch syst\u00e9mov, vnoren\u00e9 str\u00e1nky pam\u00e4te (EPT, Extended Page Tables), MSI (Message Signaled Interrupts), tabu\u013eky atrib\u00fatov str\u00e1n pam\u00e4te (PAT, Page Attribute Table). Muen tie\u017e poskytuje fixovan\u00fd cyklick\u00fd pl\u00e1nova\u010d zalo\u017een\u00fd na pretl\u00e1\u010dacom \u010dasova\u010di Intel VMX, kompaktn\u00fd runtime, ktor\u00fd neovplyv\u0148uje v\u00fdkon, syst\u00e9m auditu zlyhan\u00ed, mechanizmus statick\u00e9ho pridelovania zdrojov na z\u00e1klade pravidiel, syst\u00e9m spracovania udalost\u00ed a kan\u00e1ly zdie\u013eanej pam\u00e4te na interakciu v r\u00e1mci sp\u00fa\u0161\u0165an\u00fdch komponentov. <\/p>\n
![\"Vydanie](\"\/wp-content\/uploads\/2021\/10\/bd30e656326f6fd3667eec5773341420.jpg\")
<\/center> <\/p>\n