{"id":41281,"date":"2020-02-07T09:28:13","date_gmt":"2020-02-07T06:28:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12"},"modified":"2020-02-07T09:28:13","modified_gmt":"2020-02-07T06:28:13","slug":"kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","title":{"rendered":"Spolo\u010dnos\u0165 Siemens vydala hyperv\u00edzor Jailhouse 0.12","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spolo\u010dnos\u0165 Siemens <noindex><a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2020\/2\/4\/403\">publikovala<\/a><\/noindex> verzia vo\u013en\u00e9ho hyperv\u00edzora <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">Jailhouse 0.12<\/a><\/noindex>. Hyperv\u00edzor podporuje prev\u00e1dzku na syst\u00e9moch x86_64 s roz\u0161\u00edreniami VMX+EPT alebo SVM+NPT (AMD-V), ako aj na procesoroch ARMv7 a ARMv8\/ARM64 s roz\u0161\u00edreniami pre virtualiz\u00e1ciu. Samostatne <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse-images\">se vyv\u00edj\u00ed<\/a><\/noindex> gener\u00e1tor obrazov pre hyperv\u00edzor Jailhouse, vytv\u00e1ran\u00fd na z\u00e1klade bal\u00edkov Debian pre podporovan\u00e9 zariadenia. K\u00f3d projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">distribuovan\u00fd<\/a><\/noindex>  pod licenciou GPLv2. <\/p>\n<p>Hyperv\u00edzor je implementovan\u00fd ako modul pre jadro Linux a poskytuje virtualiz\u00e1ciu na \u00farovni jadra. Komponenty pre hostite\u013esk\u00e9 syst\u00e9my s\u00fa u\u017e zahrnut\u00e9 v hlavnom jadre Linux. Na riadenie izol\u00e1cie sa vyu\u017e\u00edvaj\u00fa modern\u00e9 CPU poskytovan\u00e9 hardv\u00e9rov\u00e9 mechanizmy virtualiz\u00e1cie. Vlastnos\u0165ou Jailhouse je jeho n\u00edzkoprofilov\u00e1 implement\u00e1cia a orient\u00e1cia na viazanie virtu\u00e1lnych strojov na pevn\u00fd CPU, oblasti RAM a hardv\u00e9rov\u00e9 zariadenia. Tak\u00fdto pr\u00edstup umo\u017e\u0148uje na jednom fyzickom viacprocesorovom serveri prev\u00e1dzkova\u0165 nieko\u013eko nez\u00e1visl\u00fdch virtu\u00e1lnych prostred\u00ed, pri\u010dom ka\u017ed\u00e9 je priraden\u00e9 svojmu jadru procesora. <\/p>\n<p>Pri pevnej v\u00e4zbe na CPU s\u00fa n\u00e1klady spojen\u00e9 s prev\u00e1dzkou hyperv\u00edzora minimalizovan\u00e9 a jeho implement\u00e1cia sa zna\u010dne zjednodu\u0161uje, ke\u010f\u017ee nie je potrebn\u00e9 vykon\u00e1va\u0165 zlo\u017eit\u00fd pl\u00e1nova\u010d prerozdelenia zdrojov \u2014 pridelenie samostatn\u00e9ho jadra CPU zaru\u010duje, \u017ee na tomto CPU nebud\u00fa vykon\u00e1van\u00e9 \u017eiadne in\u00e9 \u00falohy. V\u00fdhodou tohto pr\u00edstupu je mo\u017enos\u0165 zaru\u010di\u0165 pr\u00edstup k zdrojom a predv\u00eddate\u013en\u00fd v\u00fdkon, \u010do rob\u00ed Jailhouse vhodn\u00fdm rie\u0161en\u00edm pre \u00falohy, ktor\u00e9 sa vykon\u00e1vaj\u00fa v re\u00e1lnom \u010dase. Nev\u00fdhodou je obmedzen\u00e1 \u0161k\u00e1lovate\u013enos\u0165, ktor\u00e1 naraz\u00ed na po\u010det jadier CPU.<\/p>\n<p>V terminol\u00f3gii Jailhouse sa virtu\u00e1lne prostredia naz\u00fdvaj\u00fa \u201ekomorami\u201c (cell, v kontexte jailhouse). Vn\u00fatri komory syst\u00e9m vyzer\u00e1 ako jednojadrov\u00fd server s v\u00fdkonom <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/file\/d\/0B6HTUUWSPdd-Zl93MVhlMnRJRjg\/edit\">bl\u00edzky<\/a><\/noindex> v\u00fdkonu vyhraden\u00e9ho jadra CPU. V komore m\u00f4\u017ee by\u0165 spusten\u00e9 prostredie \u013eubovo\u013en\u00e9ho opera\u010dn\u00e9ho syst\u00e9mu, ako aj z\u00fa\u017een\u00e9 prostredia na spustenie jednej aplik\u00e1cie alebo \u0161peci\u00e1lne pripraven\u00e9 samostatn\u00e9 aplik\u00e1cie, ur\u010den\u00e9 na rie\u0161enie \u00faloh v re\u00e1lnom \u010dase. Konfigur\u00e1cia sa ur\u010duje v <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\/blob\/master\/configs\/\">.cell-s\u00faboroch<\/a><\/noindex>, ur\u010duj\u00facich prira\u010fovan\u00e9 prostrediu CPU, regi\u00f3ny pam\u00e4te a porty vstupu\/v\u00fdstupu. <\/p>\n<p><center><img decoding=\"async\" alt=\"Spolo\u010dnos\u0165 Siemens vydala hyperv\u00edzor Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/6cf944a2502d951e550625bfd39a3d38.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<p>V novej verzii<\/p>\n<ul>\n<li class=\"l\"> Pridan\u00e1 podpora pre platformy Raspberry Pi 4 Model B a Texas Instruments J721E-EVM;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/static.sched.com\/hosted_files\/kvmforum2019\/4b\/KVM-Forum19_ivshmem2.pdf\">Prepracovan\u00e9<\/a><\/noindex> zariadenie ivshmem, pou\u017e\u00edvan\u00e9 na organiz\u00e1ciu interakcie medzi bunkami. Nad nov\u00fdm ivshmem je mo\u017en\u00e9 realizova\u0165 prenos pre VIRTIO;\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/pics_base\/0_1580842059.png\"><img decoding=\"async\" alt=\"Spolo\u010dnos\u0165 Siemens vydala hyperv\u00edzor Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/f5785c8e73956397f69b56ec804c77c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> Implementovan\u00e1 mo\u017enos\u0165 vypnutia vytv\u00e1rania ve\u013ek\u00fdch str\u00e1nok pam\u00e4te (hugepage) na blokovanie zranite\u013enosti <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">CVE-2018-12207<\/a><\/noindex> v procesoroch Intel, ktor\u00fd umo\u017e\u0148uje nepriviligovan\u00e9mu \u00fato\u010dn\u00edkovi iniciova\u0165 odmietnutie slu\u017eby, \u010do vedie k zamrznutiu syst\u00e9mu v stave \u201eMachine Check Error\u201c;\n<li class=\"l\"> Pre syst\u00e9my s procesormi ARM64 bola implementovan\u00e1 podpora SMMUv3 (System Memory Management Unit) a TI PVU (Peripheral Virtualization Unit). Pre izolovan\u00e9 prostredia be\u017eiace na hardv\u00e9ri (bare-metal) bola pridan\u00e1 podpora PCI;\n<li class=\"l\"> Na syst\u00e9moch x86 pre root kamery bola implementovan\u00e1 mo\u017enos\u0165 aktiv\u00e1cie re\u017eimu CR4.UMIP (User-Mode Instruction Prevention), poskytovan\u00e9ho procesormi Intel, ktor\u00fd umo\u017e\u0148uje zak\u00e1za\u0165 vykon\u00e1vanie niektor\u00fdch in\u0161trukci\u00ed v u\u017e\u00edvate\u013eskom priestore, ako s\u00fa SGDT, SLDT, SIDT, SMSW a STR, ktor\u00e9 m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 v \u00fatokoch zameran\u00fdch na zv\u00fd\u0161enie opr\u00e1vnen\u00ed v syst\u00e9me.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52310\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse 0.12. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 VMX+EPT \u0438\u043b\u0438 SVM+NPT (AMD-V), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 ARMv7 \u0438 ARMv8\/ARM64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Debian \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41282,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spolo\u010dnos\u0165 Siemens vydala hyperv\u00edzor Jailhouse 0.12 | ProHoster","description":"Spolo\u010dnos\u0165 Siemens vydala vydanie vo\u013en\u00e9ho hyperv\u00edzora","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430","og:url":"https:\/\/prohoster.info\/sk\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-07T06:28:13+00:00","article:modified_time":"2020-02-07T06:28:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:17:48","updated":"2022-09-30 06:27:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/41281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=41281"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/41281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/41282"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=41281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=41281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=41281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}