{"id":104441,"date":"2022-06-18T03:36:45","date_gmt":"2022-06-18T01:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemy-upravleniya-kontejnerami-lxc-5-0"},"modified":"2022-06-18T03:36:45","modified_gmt":"2022-06-18T01:36:45","slug":"vypusk-sistemy-upravleniya-kontejnerami-lxc-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-sistemy-upravleniya-kontejnerami-lxc-5-0","title":{"rendered":"Vydanie syst\u00e9mu na spr\u00e1vu kontajnerov LXC 5.0.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Spolo\u010dnos\u0165 Canonical vydala n\u00e1stroj na organiz\u00e1ciu pr\u00e1ce izolovan\u00fdch kontajnerov LXC 5.0, ktor\u00fd poskytuje runtime vhodn\u00fd na sp\u00fa\u0161\u0165anie kontajnerov s pln\u00fdm syst\u00e9mov\u00fdm prostred\u00edm, bl\u00edzkych k virtu\u00e1lnym strojom, ako aj na vykon\u00e1vanie nepriviligovan\u00fdch kontajnerov jednotliv\u00fdch aplik\u00e1ci\u00ed (OCI). LXC patr\u00ed medzi n\u00edzko\u00farov\u0148ov\u00e9 n\u00e1stroje, ktor\u00e9 funguj\u00fa na \u00farovni jednotliv\u00fdch kontajnerov. Pre centralizovan\u00e9 riadenie kontajnerov nasaden\u00fdch v clustere viacer\u00fdch serverov sa na b\u00e1ze LXC vyv\u00edja syst\u00e9m LXD. Vetva LXC 5.0 patr\u00ed medzi vydania s dlhou podporou, aktualiz\u00e1cie pre ktor\u00e9 s\u00fa vytv\u00e1ran\u00e9 po\u010das 5 rokov. K\u00f3d LXC je nap\u00edsan\u00fd v jazyku C a distribuuje sa pod licenciou GPLv2. <\/p>\n
S\u00fa\u010das\u0165ou LXC je kni\u017enica liblxc, s\u00fabor util\u00edt (lxc-create, lxc-start, lxc-stop, lxc-ls at\u010f.), \u0161abl\u00f3ny na vytv\u00e1ranie kontajnerov a s\u00fabor bindingov pre r\u00f4zne programovacie jazyky. Izol\u00e1cia sa vykon\u00e1va pomocou \u0161tandardn\u00fdch mechanizmov jadra Linux. Pre izol\u00e1ciu procesov, sie\u0165ov\u00e9ho z\u00e1sobn\u00edka ipc, uts, identifik\u00e1torov pou\u017e\u00edvate\u013eov a bodov montovania sa vyu\u017e\u00edva mechanizmus priestorov mien (namespaces). Na obmedzenie zdrojov sa pou\u017e\u00edvaj\u00fa cgroups. Na zni\u017eovanie privil\u00e9gi\u00ed a obmedzenie pr\u00edstupu s\u00fa zapojen\u00e9 funkcie jadra ako profily Apparmor a SELinux, politiky Seccomp, Chroots (pivot_root) a capabilities. <\/p>\n
Hlavn\u00e9 zmeny: <\/p>\n
\n
Prebieha prechod z autotools na syst\u00e9m zostavovania Meson, ktor\u00fd sa tie\u017e pou\u017e\u00edva na zostavovanie tak\u00fdch projektov, ako s\u00fa X.Org Server, Mesa, Lighttpd, systemd, GStreamer, Wayland, GNOME a GTK.\n
Pridan\u00e9 nov\u00e9 mo\u017enosti na nastavenie cgroup \u2014 lxc.cgroup.dir.container, lxc.cgroup.dir.monitor, lxc.cgroup.dir.monitor.pivot a lxc.cgroup.dir.container.inner, ktor\u00e9 umo\u017e\u0148uj\u00fa jasne definova\u0165 cesty cgroup pre kontajner, proces monitorovania a vn\u00fatorn\u00e9 hierarchie cgroup.\n
Pridan\u00e1 podpora \u010dasov\u00fdch n\u00e1zvov (time namespaces) na priradenie konkr\u00e9tneho stavu syst\u00e9mov\u00fdch hod\u00edn ku kontajneru, \u010do umo\u017e\u0148uje pou\u017e\u00edva\u0165 v kontajneri vlastn\u00fd \u010das odli\u0161n\u00fd od syst\u00e9mov\u00e9ho. Na nastavenie s\u00fa navrhnut\u00e9 mo\u017enosti lxc.time.offset.boot a lxc.time.offset.monotonic, ktor\u00e9 umo\u017e\u0148uj\u00fa ur\u010di\u0165 pre kontajner posun vo\u010di hlavn\u00fdm syst\u00e9mov\u00fdm hodin\u00e1m.\n
Pre virtu\u00e1lne ethernetov\u00e9 adapt\u00e9ry (Veth) bola implementovan\u00e1 podpora VLAN. Na riadenie VLAN s\u00fa navrhnut\u00e9 mo\u017enosti: veth.vlan.id na ur\u010denie z\u00e1kladn\u00e9ho VLAN a veth.vlan.tagged.id na priradenie dodato\u010dn\u00fdch ozna\u010den\u00fdch VLAN.\n
Pre virtu\u00e1lne ethernetov\u00e9 adapt\u00e9ry bola pridan\u00e1 mo\u017enos\u0165 nastavenia ve\u013ekosti front prij\u00edmania a odosielania prostredn\u00edctvom nov\u00fdch mo\u017enost\u00ed veth.n_rxqueues a veth.n_txqueues. <\/ul>\n