Nyaya yacho yaburitswa Asterinas 0.18.0 β sisitimu yekuedza yekushandisa uye kernel yakanyorwa muRust uye yakanangana nekushanda pamwe chete Linux ABI. Chirongwa ichi chakaiswa senzira yekuedza kugadzira imwe nzira ye "production-grade" Linux tichitarisa kuchengetedzeka kwendangariro, mashandiro, uye kushanda kwakajairika Linux-nzvimbo yevashandisi. Kodhi yeAsterinas yakavhurika uye inochengetwa pa GitHub, rezenisi huru yeprojekiti iyi iMPL 2.0. Kuburitswa Asterinas 0.18.0 yakaburitswa musi wa4 Chikumi, 2026., uye musi wa9 Chikumi akakwezva pfungwa nezvazvo Phoronix.
Chinangwa chikuru chekuburitswa kwacho ndechekugadzirira Asterinas kuti ishandiswe seOS yevaenzi yeVM-based Kata Containers ΠΈ Zvivande Zvekuchengetedza Zvinhu ZvakavanzikaKuti izvi zviitike, nzira dzepasi dzakashaikwa dzakawedzerwa ku kernel: nzvimbo dzemazita, mapoka emapoka, mavirtio-fs, mavirtio-rng, uye vsock yakagadzirwazve yekuchinjana data pakati pemasystem ehost nevashanyi.
Rondedzero yekuchinja kukuru:
-
Kugadzirira kuiswa muKata Containers neConfidential Containers.
Asterinas 0.18 inotora danho rakakosha rekushanda semushandi weOS mukati memuchina wevirtual wakaparadzaniswa. Izvi zvakakosha kune zviitiko apo midziyo inomhanya kwete zvakananga pa kernel yemushandi, asi mukati meVM yakasiyana, kusanganisira munzvimbo dzakavanzika dzemakombiyuta. -
Nzvimbo dzemazita dzinotsigira.
Kernel ikozvino ine IPC namespace uye cgroup namespace, pamwe ne nsfs ine namespace inomiririra kuburikidza ne /proc/[pid]/ns. Izvi zvinoswededza Asterinas pedyo ne process isolation model inoshandiswa ne Linux-midziyo. -
Rutsigiro rwekutanga rwemapoka eboka.
Rutsigiro rwePID sub-controller uye chikamu cheCPU sub-controller zvaiswa. Kunyanya, cpu.stat statistics uye stubs dzemafaira e cpu.weight uye cpu.max limit zvawedzerwa. Uku hakusi kushandiswa kwakazara kwemaitiro ese e cgroups, asi zvatove zvichipa hwaro hunodiwa hwemamiriro ezvinhu emuchina. -
ma virtio-fs ekugovana system yefaira nehost.
Rutsigiro rwakawedzerwa rwema virtio-fs, zvichibvumira sisitimu yevaenzi kushandisa sisitimu yemafaira inopihwa nehost. Kune maVM containers, iyi inzira huru yekutumira data isina nzira dzakaoma dzekugadzirisa dambudziko. -
virtio-rng uye /dev/hwrng.
Yakawedzera virtio-rng ne hardware entropy export kuburikidza ne /dev/hwrng. Izvi zvinodiwa kuti mashandiro e cryptographic operations uye random number generators ashande zvakanaka mukati me guest OS. -
Yakadzokororwa vsock.
Vsock, nzira yekutaurirana pakati pemuchina wekugamuchira uye muenzi, yakanyorwazve zvizere. Mukati meKata Containers neConfidential Containers, izvi zvakakosha kune nzira dzekudzora, vamiririri, uye kudyidzana kwebasa pakati peVM nenzvimbo yekutanga. -
Rutsigiro rwekugadzirisa matambudziko ePtrace ne userspace rwaonekwa.
Kufona kwesystem yeptrace pamwe nemabasa ekutanga ePTRACE_SETOPTIONS, PTRACE_SYSCALL, PTRACE_PEEK, uye PTRACE_POKE zvaitwa. Izvi zvinokutendera kuti ushandise maturusi ekugadzirisa matambudziko anozivikanwa akadai seGDB uye strace paAsterinas. Magwaro ekushandiswa kwakasimbiswa uye CI checks zvakawedzerwa zvematurusi aya. -
Mutyairi mutsva weNVMe.
Mutyairi weNVMe awedzerwa kune block layer. Izvi zvinowedzera kugona kweAsterinas pakushanda nemidziyo yekuchengetera zvinhu yemazuva ano uye zvinoswededza sisitimu pedyo nekushandiswa kwayo pamidziyo chaiyo uye yakashandisirwa sevha. -
Mutyairi weEXT2 akanyorwa patsva zvizere.
Sisitimu yemafaira yeEXT2 yagadziriswazve. Vagadziri vanoti izvi zvakakonzerwa nekuvandudzwa kwenzvimbo yekuchengetera zvinhu: sisitimu yemafaira inofanira kuva yakavimbika uye yakakodzera kushandisa nzvimbo dzevashandisi chaidzo. -
Kuchinja kweVFS uye peji cache.
VFS yakagadziridzwa neDentry revalidate mechanism, page cache implementation yakagadziriswazve, pivot_root implementation, O_TMPFILE support ye open/openat, uye fixed page cache bug inogona kukonzera kuti memory leak isashande zvakanaka munzvimbo yekushandisa. -
kuwedzera kweprocfs.
Yakawedzerwa /proc/mounts, /proc/[pid]/auxv, /proc/[tid], mamwe maemail ari mu /proc/[pid]/maps uye mountstats. Izvi zvinovandudza kufambirana ne Linux-mashandisirwo uye maturusi ekuongorora anotarisira chimiro chakajairika /proc. -
Kuvandudzwa kwenetwork.
Pamusoro peVsock yakanyorwazve, kune rutsigiro rwekutanga rweIPv6, kugadziriswa kweUDP implementation, uye mvumo yekutarisa kana ichisunga kumaports ane ropafadzo: malink kumaports akadaro ava kurambwa pasina CAP_NET_BIND_SERVICE. -
Maitiro ekugadzira zvinhu uye hurongwa hwekutanga hweLSM.
Kuburitswa uku kunosanganisira kushandiswa kwezvinogona, rutsigiro rwezvibodzwa zvesimba, kugadzirisa mafoni ehurongwa ane chekuita nemagwaro, uye hurongwa hwekutanga hweLSM. Ichi chikamu chebasa rekuunza muenzaniso wekuchengetedza weAsterinas pedyo. Linux. -
Kuvandudzwa kwePCI, TTY uye console.
Kuwanikwa kwePCI kwakagadziridzwa, rutsigiro rwePCI ECAM rwakawedzerwa pa x86, uye rutsigiro rwemaTTY akawanda, NS16550A UART console, /dev/ttyS0, uye parameter yeconsole=ttyS0. Rutsigiro rwekhibhodi rwakagadziridzwawo. -
Asterinas NixOS extension.
Asterinas NixOS yava kutarisa mapakeji anopfuura zana anozivikanwa, anosanganisira Codex, QEMU, neFirefox. Rutsigiro rweARCH_GET_GS neARCH_SET_GS rwakawedzerwa zvakananga kuFirefox. -
Zvishandiso zvitsva zvekuyedza.
Chirongwa ichi chakabatanidzwa Linux kselftest, xfstests, standard Go, Python, uye JDK tests, pamwe chete neQEMU tests dzemaapplications ari pakombiyuta. Izvi zvakakosha sechiratidzo chekukura kweprojekiti: Asterinas iri kuramba ichiedzwa pamasystem chaiwo. Linux-mitoro. -
Kuchinja muOSDD neOSDK.
MuOSTD, crate log yakatsiviwa necustom logging API, DMA API yakagadziriswazve, framework yema typed memory copy operations yakawedzerwa, uye Pod yakagadziriswazve kuti ishandise zerocopy. Nzvimbo yeDocker paARM/aarch64 yakawedzerwa kuti ivandudzwe. -
Kuvandudza zvinyorwa.
Bhuku reAsterinas rakagadziridzwa nemirairo yekunyora makodhi, ongororo yeOSTD, uye magwaro eKata Containers neConfidential Containers. Izvi zvinoratidza kuti mamiriro ekugadzira macomputer nevirtualization ndiwo chinhu chikuru chiri kutariswa neprojekiti iyi.
Asterinas 0.18 haigone kutorwa sechinotsiva Linux kushandiswa kwezuva nezuva, asi kuburitswa kwacho kunosimudzira zvikuru purojekiti iyi kuenda kumamiriro ezvinhu anoshanda eseva nemidziyo. Nzvimbo nhatu dzakakosha zvikuru: kushandira pamwe ne Linux-mapurogiramu, rutsigiro rwenzira dzekuzviparadzanisa uye mashandiro munzvimbo dzemakontena dziri muVM.
Source: linux.org.ru
