{"id":105291,"date":"2022-10-12T03:36:45","date_gmt":"2022-10-12T01:36:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kata-containers-3-0-s-izolyacziej-na-osnove-virtualizaczii"},"modified":"2022-10-12T03:36:45","modified_gmt":"2022-10-12T01:36:47","slug":"vypusk-kata-containers-3-0-s-izolyacziej-na-osnove-virtualizaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-kata-containers-3-0-s-izolyacziej-na-osnove-virtualizaczii","title":{"rendered":"L\u00ebshimi i Kata Containers 3.0 me izolim t\u00eb bazuar n\u00eb virtualizim.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pasi dy vitesh zhvillimi, u publikua seria e projektit Kata Containers 3.0, e cila zhvillon nj\u00eb stek p\u00ebr organizimin e ekzekutimit t\u00eb kontejner\u00ebve duke p\u00ebrdorur izolimin mbi baza t\u00eb mekanizmave t\u00eb plota t\u00eb virtualizimit. Projekti \u00ebsht\u00eb krijuar nga kompanit\u00eb Intel dhe Hyper duke bashkuar teknologjit\u00eb Clear Containers dhe runV. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebt Go dhe Rust, dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. Zhvillimi i projektit monitorohet nga nj\u00eb grup pune, i krijuar n\u00ebn petkun e organizat\u00ebs s\u00eb pavarur OpenStack Foundation, n\u00eb t\u00eb cilin marrin pjes\u00eb kompani si Canonical, China Mobile, Dell\/EMC, EasyStack, Google, Huawei, NetApp, Red Hat, SUSE dhe ZTE. <\/p>\n

Baza e Kata-s \u00ebsht\u00eb runtime-i, q\u00eb ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb krijuar makina virtuale t\u00eb kompakt, t\u00eb cilat ekzekutohen duke p\u00ebrdorur nj\u00eb hipervizor t\u00eb plot\u00eb, n\u00eb vend t\u00eb aplikimit t\u00eb kontejner\u00ebve tradicional\u00eb, q\u00eb p\u00ebrdorin b\u00ebrtham\u00ebn e p\u00ebrbashk\u00ebt Linux dhe jan\u00eb t\u00eb izoluara p\u00ebrmes hap\u00ebsirave t\u00eb emrave dhe cgroups. P\u00ebrdorimi makinat virtuale<\/a> siguron nj\u00eb nivel m\u00eb t\u00eb lart\u00eb t\u00eb siguris\u00eb, duke mbrojtur nga sulmet q\u00eb shkaktohen nga shfryt\u00ebzimi i dob\u00ebsive n\u00eb kernel-in Linux. <\/p>\n

Kata Containers \u00ebsht\u00eb orientuar p\u00ebr integrimin n\u00eb infrastrukturat ekzistuese t\u00eb izolimit t\u00eb kontejner\u00ebve me mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb k\u00ebtij lloji t\u00eb makinave virtuale p\u00ebr forcimin e mbrojtjes s\u00eb kontejner\u00ebve tradicional\u00eb. Projekti ofron mekanizma p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb e makinave virtuale t\u00eb lehta me infrastrukturat e ndryshme t\u00eb izolimit t\u00eb kontejner\u00ebve, platformat e orkestrimit t\u00eb kontejner\u00ebve dhe specifikimet si OCI (Open Container Initiative), CRI (Container Runtime Interface) dhe CNI (Container Networking Interface). Jan\u00eb n\u00eb dispozicion mjete p\u00ebr integrim me Docker, Kubernetes, QEMU dhe OpenStack. <\/p>\n

\"L\u00ebshimi<\/center> <\/p>\n

Integrimi me sistemet e menaxhimit t\u00eb kontejner\u00ebve arrihet p\u00ebrmes nj\u00eb shtrese q\u00eb simulon menaxhimin e kontejner\u00ebve, e cila p\u00ebrmes nj\u00eb interface gRPC dhe nj\u00eb proxy t\u00eb ve\u00e7ant\u00eb i drejtohet agentit menaxhues n\u00eb makin\u00ebn virtuale. Brenda mjedisit virtual, i cili ndizet nga hypervizori, p\u00ebrdoret nj\u00eb kernel i optimizuar posa\u00e7\u00ebrisht q\u00eb p\u00ebrmban vet\u00ebm grupin minimal t\u00eb mund\u00ebsive t\u00eb nevojshme. <\/p>\n

Si p\u00ebrdorues i hipervizorit, mund t\u00eb p\u00ebrdoret Dragonball Sandbox (edita KVM, e optimizuar p\u00ebr konteiner\u00ebt) me mjetet QEMU, si dhe Firecracker dhe Cloud Hypervisor. Mjedisi i sistemit p\u00ebrfshin nj\u00eb demon t\u00eb inicializimit dhe nj\u00eb agjent (Agent). Agjenti siguron ekzekutimin e imazheve t\u00eb konteiner\u00ebve t\u00eb p\u00ebrcaktuar nga p\u00ebrdoruesi n\u00eb formatin OCI p\u00ebr Docker dhe CRI p\u00ebr Kubernetes. Kur p\u00ebrdoret s\u00eb bashku me Docker, p\u00ebr \u00e7do konteiner krijohet nj\u00eb makina virtuale<\/a>, pra, mjedisi i nisjes mbi hipervizorin aplikohet p\u00ebr nisjen e brendshme t\u00eb konteiner\u00ebve.

\"L\u00ebshimi<\/center> <\/p>\n

P\u00ebr t\u00eb reduktuar konsumin e memories, aplikohet mekanizmi DAX (qasje e drejtp\u00ebrdrejt\u00eb n\u00eb FS anashkalon cachen e faqeve pa p\u00ebrdorimin e nivelit t\u00eb pajisjeve me bllok), dhe p\u00ebr deduplication e zonave t\u00eb nj\u00ebjta t\u00eb memories aplikohet teknologjia KSM (Kernel Samepage Merging), e cila lejon organizimin e ndarjes s\u00eb burimeve t\u00eb sistemit host dhe lidhjen e nj\u00eb shablloni t\u00eb zakonsh\u00ebm t\u00eb mjedisit t\u00eb sistemit me sisteme t\u00eb ndryshme mysafir. <\/p>\n

N\u00eb versionin e ri: <\/p>\n