Canonical yakaburitsa kuburitswa kweLXC 5.0 yakasarudzika midziyo yekushandisa, iyo inopa nguva yekumhanya yakakodzera kune ese ari maviri midziyo ine yakazara sisitimu nharaunda, padyo nemichina chaiyo, uye yekumhanyisa isina njodzi yemidziyo yekushandisa (OCI). LXC ndeye yakaderera-level toolkit inoshanda pamwero wemidziyo yega. Kune yepakati manejimendi yemidziyo yakaiswa muchikwata chemaseva akati wandei, iyo LXD system iri kuvandudzwa zvichibva paLXC. Iyo LXC 5.0 bazi inorongedzerwa sekuburitswa kwerutsigiro kwenguva refu, zvigadziriso zvinogadzirwa mukati memakore mashanu. Iyo LXC kodhi yakanyorwa muC uye ine rezinesi pasi peGPLv5.
LXC inosanganisira liblxc raibhurari, seti yezvishandiso (lxc-gadzira, lxc-kutanga, lxc-stop, lxc-ls, nezvimwewo), matemplate emidziyo yekuvakisa uye seti yezvisungo zvemitauro yakasiyana-siyana yekuronga. Kuzviparadzanisa kunoitwa uchishandisa yakajairwa Linux kernel maitiro. Kuparadzanisa maitiro, iyo ipc network stack, uts, maID ID uye mapoinzi ekumisikidza, iyo nzvimbo yemazita nzira inoshandiswa. cgroups inoshandiswa kuderedza zviwanikwa. Kudzikisa ropafadzo uye kudzikisira kuwana, kernel maficha akadai seApparmor uye SELinux profiles, Seccomp marongero, Chroots (pivot_root) uye kugona zvinoshandiswa.
Shanduko huru:
- Isu takachinja kubva ku autotools kuenda kuMeson kuvaka system, iyo inoshandiswawo kuvaka mapurojekiti akadai seX.Org Server, Mesa, Lighttpd, systemd, GStreamer, Wayland, GNOME uye GTK.
- Yakawedzera sarudzo nyowani dzekugadzirisa cgroup - lxc.cgroup.dir.container, lxc.cgroup.dir.monitor, lxc.cgroup.dir.monitor.pivot uye lxc.cgroup.dir.container.inner, izvo zvinokutendera iwe kutsanangura zvakajeka boka nzira dzemudziyo, maitiro ekutarisa uye nested cgroup hierarchies.
- Yakawedzera tsigiro yenzvimbo dzemazita yenguva yekusunga yakaparadzana mamiriro ehurongwa hwewachi kumudziyo, zvichikubvumidza kuti ushandise yako nguva mumudziyo, zvakasiyana neiyo system imwe. Nekugadzirisa, iyo lxc.time.offset.boot uye lxc.time.offset.monotonic sarudzo dzakarongwa, izvo zvinokutendera kuti uone kugadzirisa kwemudziyo zvinoenderana newachi huru.
- Rutsigiro rweVLAN runoitwa kune virtual Ethernet adapters (Veth). Sarudzo dzinopihwa kune VLAN manejimendi: veth.vlan.id kuseta iyo huru VLAN uye veth.vlan.tagged.id kusunga mamwe maVLAN ane tagged.
- Kuma adapter eEthernet chaiwo, kugona kugadzirisa saizi yekugamuchira uye kutumira mitsetse kwawedzerwa uchishandisa sarudzo nyowani veth.n_rxqueues uye veth.n_txqueues.
Source: opennet.ru