Kuburitswa kweLXD 5.0 ​​*container management system

Canonical yakaburitsa kuburitswa kwemudziyo maneja LXD 5.0 ​​​​uye chaiyo faira system LXCFS 5.0. Iyo LXD kodhi yakanyorwa muGo uye yakagoverwa pasi peiyo Apache 2.0 rezinesi. Bazi re5.0 rinorongedzerwa sekuburitswa kwerutsigiro kwenguva refu - zvigadziriso zvichagadzirwa kusvika Chikumi 2027.

Senguva yekuvhura midziyo, LXC toolkit inoshandiswa, iyo inosanganisira liblxc raibhurari, seti yezvishandiso (lxc-gadzira, lxc-kutanga, lxc-stop, lxc-ls, nezvimwewo), matemplate emidziyo yekuvaka uye a seti yezvisungo zvemitauro yakasiyana-siyana yekuronga. Kuzviparadzanisa kunoitwa uchishandisa yakajairwa Linux kernel maitiro. Kuparadzanisa maitiro, iyo ipc network stack, uts, maID ID uye mapoinzi ekumisikidza, iyo nzvimbo yemazita nzira inoshandiswa. cgroups inoshandiswa kuderedza zviwanikwa. Kudzikisa ropafadzo uye kudzikisira kuwana, kernel maficha akadai seApparmor uye SELinux profiles, Seccomp marongero, Chroots (pivot_root) uye kugona zvinoshandiswa.

Pamusoro peLXC, LXD inoshandisawo zvikamu kubva kuCRIU neQEMU mapurojekiti. Kana LXC iri yakaderera-chikamu chekushandisa chekushandisa padanho remidziyo yega, saka LXD inopa maturusi epakati pekutonga kwemidziyo yakaiswa muboka remaseva akati wandei. LXD inoshandiswa senzira yekumashure inogamuchira zvikumbiro pamusoro petiweki kuburikidza neREST API uye inotsigira akasiyana-siyana ekuchengetedza backends (dhairekitori muti, ZFS, Btrfs, LVM), snapshots ine chidimbu chenyika, mhenyu kutama kwemidziyo inomhanya kubva kune mumwe muchina kuenda kune mumwe, uye zvishandiso zvekuchengetera mifananidzo midziyo. LXCFS inoshandiswa kutevedzera pseudo-FS / proc uye / sys mumidziyo, uye iyo inomiririra inomiririra cgroupfs kupa midziyo kutaridzika kweyakazvimiririra yakazvimirira system.

Kunatsiridza kukuru:

  • Kugona kwekupisa plugging uye kuburitsa madhiraivha uye USB zvishandiso. Mumuchina chaiwo, dhisiki nyowani inoonekwa nekuonekwa kwechishandiso chitsva paSCSI bhazi, uye USB mudziyo unoonekwa nechizvarwa che USB hotplug chiitiko.
  • Izvo zvinogoneka kuvhura LXD kunyangwe zvisingakwanisi kumisa network yekubatanidza, semuenzaniso, nekuda kwekushaikwa kweiyo inodiwa network mudziyo. Panzvimbo pekuratidza kukanganisa pakutanga, LXD ikozvino inotangisa huwandu hwehuwandu hwenzvimbo dzinogoneka pasi pemamiriro azvino, uye nharaunda dzakasara dzinotangwa mushure mekutangisa network.
  • Basa idzva renhengo yeboka rakawedzerwa - ovn-chassis, yakagadzirirwa masumbu anoshandisa OVN (Open Virtual Network) yekukurukurirana kwenetiweki (nekupa basa reovn-chassis, unogona kusarudza maseva kuti aite mabasa eOVN routers).
  • Iyo yakagadziridzwa modhi yekuvandudza zviri mukati mezvikamu zvekuchengetera yapihwa. Mukuburitswa kwakapfuura, iyo yekuvandudza yaisanganisira yekutanga kukopa muenzaniso wemudziyo kana kupatsanura, semuenzaniso, kushandisa kutumira/kugamuchira mashandiro muzfs kana btrfs, mushure mezvo kopi yakagadzirwa yakawiriraniswa nekumhanyisa chirongwa chersync. Kuti uvandudze kushanda zvakanaka kwekugadzirisa mashini chaiwo, kuburitswa kutsva kunoshandisa advanced migration logic, umo, kana sosi uye maseva ekuenda akashandisa dziva rimwe chete rekuchengetera, snapshots uye kutumira / kugamuchira mashandiro anongoshandiswa pachinzvimbo chersync.
  • Iyo pfungwa yekuziva nharaunda mu cloud-init yakagadziridzwa zvakare: panzvimbo yemazita enzvimbo, UUID yave kushandiswa semuenzaniso-id.
  • Yakawedzera tsigiro yekukochekera iyo sched_setscheduler system kufona, ichibvumira zvisina njodzi midziyo kuti ichinje maitiro ekutanga.
  • Iyo lvm.thinpool_metadata_size sarudzo yaitwa kudzora saizi yemetadata mu thinpool.
  • Mafaira efaira ane ruzivo rwenetiweki yelxc akagadziridzwa patsva. Yakawedzera tsigiro yedata pane interface inosunga, network mabhiriji, VLAN uye OVN network.
  • Zvinodiwa zvezvishoma zvechikamu shanduro zvawedzerwa: Linux kernel 5.4, Go 1.18, LXC 4.0.x uye QEMU 6.0.
  • LXCFS 5 yakawedzera tsigiro yeiyo yakabatana cgroup hierarchy (cgroup2), yakaitwa /proc/slabinfo uye /sys/devices/system/cpu, uye yakashandisa meson toolkit yekuungana.

Source: opennet.ru

Voeg