Kompania Cisco ofroi nj\u00eb sistem t\u00eb ri skedar\u00ebsh PuzzleFS, i implementuar si nj\u00eb modul p\u00ebr b\u00ebrtham\u00ebn Linux, i shkruar n\u00eb gjuh\u00ebn Rust. Ky sistem \u00ebsht\u00eb i destinuar p\u00ebr p\u00ebrdorim n\u00eb vendosjen e konteiner\u00ebve t\u00eb izoluar dhe vazhdon zhvillimin e ideve t\u00eb propozuara n\u00eb sistemin skedar Atomfs. Implementimi \u00ebsht\u00eb ende n\u00eb faz\u00ebn e prototipit, mb\u00ebshtet nd\u00ebrtimin me deg\u00ebn rust-next t\u00eb b\u00ebrtham\u00ebs Linux dhe \u00ebsht\u00eb t\u00eb hapur n\u00ebn licencat Apache 2.0 dhe MIT. <\/p>\n
Projekti ka p\u00ebr q\u00ebllim q\u00eb t\u00eb kaloj\u00eb kufizimet q\u00eb lindin gjat\u00eb p\u00ebrdorimit t\u00eb imazheve t\u00eb konteiner\u00ebve n\u00eb formatin OCI (Open Container Initiative). PuzzleFS zgjidh \u00e7\u00ebshtje si ruajtja efikase e t\u00eb dh\u00ebnave t\u00eb rip\u00ebrs\u00ebritura, mund\u00ebsia e montimit t\u00eb drejtp\u00ebrdrejt\u00eb, rind\u00ebrtimi i p\u00ebrs\u00ebritur i imazheve dhe puna e sigurt me kujtes\u00ebn. <\/p>\n
P\u00ebr dedupikimin e t\u00eb dh\u00ebnave t\u00eb rip\u00ebrs\u00ebritura n\u00eb konteiner\u00eb t\u00eb ndrysh\u00ebm, p\u00ebrdoret algoritmi FastCDC (Fast Content-Defined Chunking), i cili funksionon p\u00ebrmes ndarjes s\u00eb t\u00eb dh\u00ebnave n\u00eb fragmente me madh\u00ebsi t\u00eb rast\u00ebsishme dhe mbajtjes s\u00eb nj\u00eb indeksi me hash-et e fragmenteve t\u00eb p\u00ebrpunuara. Fragmente t\u00eb rip\u00ebrs\u00ebritura ruhen nj\u00eb her\u00eb dhe indeksohen p\u00ebr t\u00eb gjitha nivelet e sistemit skedar, dmth. dedupikimi mund t\u00eb p\u00ebrfshij\u00eb pika t\u00eb ndryshme montimi (nj\u00eb nivel i ri i sistemit skedar mund t\u00eb drejtohet mbi baz\u00ebn e ekzistuesh\u00ebm dhe t\u00eb p\u00ebrdor\u00eb fragmente t\u00eb dh\u00ebnash t\u00eb tij p\u00ebr dedupikim). <\/p>\n
Rind\u00ebrtimi i p\u00ebrs\u00ebritur i imazheve t\u00eb konteiner\u00ebve arrihet p\u00ebrmes p\u00ebrcaktimit t\u00eb nj\u00eb p\u00ebrfaq\u00ebsimi kanonik t\u00eb formatit t\u00eb imazheve t\u00eb konteiner\u00ebve. Montimi i drejtp\u00ebrdrejt\u00eb (direct-mount) lejon montimin e nj\u00eb imazhi t\u00eb konteinerit n\u00eb formatin OCI nga nj\u00eb depo t\u00eb p\u00ebrbashk\u00ebt globale pa e shp\u00ebrb\u00ebr\u00eb paraprakisht dhe duke p\u00ebrdorur si identifikues hash-in e p\u00ebrmbajtjes nga manifesti i konteinerit. P\u00ebr verifikimin e integritetit t\u00eb t\u00eb dh\u00ebnave n\u00eb kushte t\u00eb depozitave t\u00eb p\u00ebrbashk\u00ebta, mund t\u00eb p\u00ebrdoret mekanizmi fs-verity, i cili kur qaset n\u00eb skedar\u00ebt kontrollon p\u00ebrshtatshm\u00ebrin\u00eb e hash-eve t\u00eb specifikuara n\u00eb indeksin binar me p\u00ebrmbajtjen aktuale. <\/p>\n
Gjuha Rust \u00ebsht\u00eb zgjedhur si nj\u00eb kombinim i performanc\u00ebs s\u00eb lart\u00eb t\u00eb kodit rezultues dhe mund\u00ebsive p\u00ebr nj\u00eb pun\u00eb t\u00eb sigurt me kujtes\u00ebn, duke lejuar k\u00ebshtu reduktimin e rrezikut t\u00eb shfaqjes s\u00eb vulnerabiliteteve, t\u00eb shkaktuara nga probleme siq jan\u00eb aksesimi i hap\u00ebsir\u00ebs s\u00eb kujtes\u00ebs pas \u00e7lirimit t\u00eb saj dhe dalja jasht\u00eb kufijve t\u00eb tamponit. P\u00ebrdorimi i Rust p\u00ebr modulin e b\u00ebrtham\u00ebs gjithashtu ka lejuar ndarjen e kodit n\u00eb b\u00ebrtham\u00eb dhe komponent\u00ebt q\u00eb punojn\u00eb n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, p\u00ebr t\u00eb krijuar nj\u00eb implementim t\u00eb sigurt t\u00eb integruar. <\/p>\n