Siemens yakaburitsa iyo Jailhouse 0.11 hypervisor

Siemens kambani yakabudiswa mahara hypervisor kusunungurwa Jailhouse 0.11. Iyo hypervisor inotsigira x86_64 masisitimu ane VMX + EPT kana SVM + NPT (AMD-V) ekuwedzera, pamwe neARMv7 uye ARMv8/ARM64 processors ine virtualization extensions. Takaparadzana inovandudza jenareta yemifananidzo yeJailhouse hypervisor, yakagadzirwa yakavakirwa paDebian mapakeji emidziyo inotsigirwa. Project code inoparadzirwa ne ane rezinesi pasi peGPLv2.

Iyo hypervisor inoshandiswa semodule yeLinux kernel uye inopa virtualization pane kernel level. Zvikamu zvevaenzi masisitimu zvakatoverengerwa muLinux kernel huru. Kugadzirisa kuzviparadzanisa nevamwe, iyo hardware virtualization masisitimu anopihwa neazvino maCPU anoshandiswa. Akasarudzika maficha eJailhouse kuita kwayo kukareruka kuita uye kutarisa pakusunga mashini chaiwo kune yakagadziriswa CPU, RAM nzvimbo uye hardware zvishandiso. Iyi nzira inobvumira imwe yemuviri multiprocessor server kutsigira kushanda kweakati wandei akazvimirira nharaunda, imwe neimwe inopihwa kune yayo processor musimboti.

Iine chinongedzo chakasimba kuCPU, iyo pamusoro peiyo hypervisor inodzikiswa uye kuita kwayo kunorerutswa zvakanyanya, sezvo pasina chikonzero chekumhanyisa chakaomesesa chekugovera zvigadziriso - kugovera yakaparadzana CPU musimboti kunovimbisa kuti hapana mamwe mabasa anoitwa paCPU iyi. . Kubatsira kweiyi nzira kugona kupa vimbiso yekuwana zviwanikwa uye kufungidzira kuita, izvo zvinoita kuti Jailhouse ive mhinduro yakakodzera yekugadzira mabasa anoitwa munguva chaiyo. Iyo yakaderera ishoma scalability, inoganhurwa nehuwandu hweCPU cores.

MuJailhouse terminology, nharaunda chaidzo dzinonzi "kamera" (sero, mune yejerihouse mamiriro). Mukati mekamera, sisitimu inotaridzika senge-processor server inoratidza kuita pedyo kune kuita kweCPU yakatsaurirwa musimboti. Iyo kamera inogona kumhanyisa nharaunda yeanopokana sisitimu yekushandisa, pamwe neyakabviswa-pasi nharaunda yekumhanyisa imwe application kana yakanyatsogadzirirwa yega maapplication akagadzirirwa kugadzirisa chaiyo-nguva matambudziko. Iyo configuration yakaiswa mukati .cell files, iyo inosarudza iyo CPU, nzvimbo dzekuyeuka, uye I/O ports dzakagoverwa kunharaunda.

Mukuburitswa kutsva

• Yakawedzerwa rutsigiro rweMarvell MACCHIATObin, Xilinx Ultra96,
  Microsys miriac SBC-LS1046A uye Texas Instruments AM654 IDK;

• Yakawedzerwa manhamba kune yega yega CPU musimboti;
• Inogonesa PCI zvishandiso kuti zvigadziriswe kana kamera yavharwa;
• Iyo Device Muti chimiro chakagadziridzwa kune yazvino Linux kernel kuburitswa;
• Yakawedzerwa dziviriro kubva kuSpecter v64 kurwiswa kweARM uye ARM2 mapuratifomu. Iyo qemu-arm64 marongero anotora muakaundi shanduko kubva kuzvino kuburitswa kweQEMU. Matambudziko nekunyorazve PSCI firmware paOrange Pi Zero mabhodhi akagadziriswa;
• Kune x86 chikuva, kana uchimhanyisa demo nharaunda (vasungwa), kushandiswa kweSSE uye AVX mirairo kunogoneswa, uye kusarudzika kushuma kunowedzerwa.

Zvirongwa zveramangwana zvinosanganisira yakamirirwa kwenguva refu rutsigiro rweIOMMUv3, kuwedzera kugona kwekushandisa processor cache (cache coloring), kubvisa matambudziko ne APIC pa AMD Ryzen processors, kugadzirisa zvakare ivshmem mudziyo uye kusimudzira vatyairi kune main kernel.

Source: opennet.ru