{"id":115219,"date":"2024-04-21T14:30:09","date_gmt":"2024-04-21T12:30:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kata-containers-3-4-s-izolyacziej-na-osnove-virtualizaczii"},"modified":"2024-04-21T14:30:09","modified_gmt":"2024-04-21T12:30:09","slug":"vypusk-kata-containers-3-4-s-izolyacziej-na-osnove-virtualizaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-kata-containers-3-4-s-izolyacziej-na-osnove-virtualizaczii","title":{"rendered":"L\u00ebshimi i Kata Containers 3.4 me izolim t\u00eb bazuar n\u00eb virtualizim","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cbsht\u00eb publikuar l\u00ebshimi i projektit Kata Containers 3.4, i cili zhvillon nj\u00eb stak p\u00ebr menaxhimin e konteiner\u00ebve duke p\u00ebrdorur izolimin n\u00eb baz\u00eb t\u00eb mekanizmave t\u00eb plot\u00eb t\u00eb virtualizimit. Projekti \u00ebsht\u00eb krijuar nga kompanit\u00eb Intel dhe Hyper duke bashkuar teknologjit\u00eb Clear Containers dhe runV. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebt Go dhe Rust, dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. Zhvillimi i projektit mbik\u00ebqyret nga nj\u00eb grup pune, i krijuar n\u00ebn patronazhin e organizat\u00ebs s\u00eb pavarur OpenInfra Foundation, ku marrin pjes\u00eb kompani si Canonical, China Mobile, Dell\/EMC, EasyStack, Google, Huawei, NetApp, Red Hat, SUSE dhe ZTE. <\/p>\n

Baza e Kata p\u00ebrb\u00ebhet nga runtime, q\u00eb lejon krijimin e makinave virtuale kompakte, t\u00eb cilat ekzekutohen duke p\u00ebrdorur nj\u00eb hipervizor t\u00eb plot\u00eb, n\u00eb vend t\u00eb p\u00ebrdorimit t\u00eb kontejner\u00ebve tradicional\u00eb, q\u00eb p\u00ebrdorin b\u00ebrtham\u00ebn e p\u00ebrbashk\u00ebt Linux dhe jan\u00eb t\u00eb izoluara p\u00ebrmes hap\u00ebsirave t\u00eb emrave dhe cgroups. P\u00ebrdorimi makinave virtuale<\/a> mund\u00ebson arritjen e nj\u00eb niveli m\u00eb t\u00eb lart\u00eb t\u00eb siguris\u00eb, q\u00eb mbron nga sulmet e shkaktuara nga shfryt\u00ebzimi i dob\u00ebsive n\u00eb kernelin Linux. <\/p>\n

Kata Containers fokusohet n\u00eb integrimin n\u00eb infrastrukturat ekzistuese t\u00eb izolimit t\u00eb kontejner\u00ebve, me mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb makinerive virtuale t\u00eb ngjashme p\u00ebr t\u00eb forcuar mbrojtjen e kontejner\u00ebve tradicional\u00eb. Projekti ofron mekanizma p\u00ebr t\u00eb siguruar kompatibilitetin e makinave virtuale t\u00eb lehta me infrastrukturat e ndryshme t\u00eb izolimit t\u00eb kontejner\u00ebve, platformat e orkestrimit t\u00eb kontejner\u00ebve dhe specifikimet, t\u00eb tilla si OCI (Iniciativa p\u00ebr Kontejner\u00eb t\u00eb Hapur), CRI (Nd\u00ebrfaqja e Ekzekutimit t\u00eb Kontejner\u00ebve) dhe CNI (Nd\u00ebrfaqja e Rrjetit t\u00eb Kontejner\u00ebve). Jan\u00eb n\u00eb dispozicion mjete p\u00ebr integrimin me Docker, Kubernetes, QEMU dhe OpenStack. <\/p>\n

Integrimi me sistemet e menaxhimit t\u00eb kontejner\u00ebve arrihet p\u00ebrmes nj\u00eb shtrese q\u00eb simulon menaxhimin e kontejnerit, e cila p\u00ebrmes nj\u00eb nd\u00ebrfaqe gRPC dhe nj\u00eb proxy t\u00eb ve\u00e7ant\u00eb i drejtohet agentit menaxhues n\u00eb makinerin\u00eb virtuale. Brenda ambientit virtual, i cili niset nga nj\u00eb hipervizor, p\u00ebrdoret nj\u00eb b\u00ebrtham\u00eb Linux e optimizuar ve\u00e7an\u00ebrisht, q\u00eb p\u00ebrmban vet\u00ebm grupin minimal t\u00eb mund\u00ebsive t\u00eb nevojshme. <\/p>\n

Si p\u00ebr hiper-vizorin mb\u00ebshtetet p\u00ebrdorimi i Dragonball Sandbox (edita KVM, e optimizuar p\u00ebr kontejner\u00eb) me mjetin QEMU, si dhe Firecracker dhe Cloud Hypervisor. Mjedisi sistemor p\u00ebrfshin nj\u00eb demon iniciatori dhe nj\u00eb agjent (Agent). Agjenti garanton ekzekutimin e imazheve t\u00eb kontejnerit t\u00eb caktuara nga p\u00ebrdoruesi n\u00eb formatin OCI p\u00ebr Docker dhe CRI p\u00ebr Kubernetes. Kur p\u00ebrdoret s\u00eb bashku me Docker, p\u00ebr \u00e7do kontejner krijohet nj\u00eb \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430<\/a>, dmth, mjedisi i ndihm\u00ebs q\u00eb vjen mbi hiper-vizorin aplikohet p\u00ebr ekzekutimin e kontejner\u00ebve t\u00eb vendosur brenda. <\/p>\n

\"L\u00ebshimi<\/center> <\/p>\n

P\u00ebr t\u00eb reduktuar konsumimin e memories, aplikohet mekanizmi DAX (qasje e drejtp\u00ebrdrejt\u00eb n\u00eb FS duke anashkaluar cache-n e faqeve pa p\u00ebrdorimin e nivelit t\u00eb pajisjeve me blloqe), dhe p\u00ebr deduplikimin e zonave t\u00eb ngjashme t\u00eb memories aplikohet teknologjia KSM (Konsolidimi i Faqeve t\u00eb T\u00eb Nj\u00ebjtave t\u00eb Kernelit), q\u00eb lejon organizimin e p\u00ebrdorimit t\u00eb p\u00ebrbashk\u00ebt t\u00eb burimeve t\u00eb sistemit host dhe t\u00eb lidh\u00eb nj\u00eb shabllon t\u00eb p\u00ebrbashk\u00ebt t\u00eb mjedisit sistemor me sisteme t\u00eb ndryshme mysafir. <\/p>\n

P\u00ebr t\u00eb organizuar aksesin n\u00eb imazhet e konteiner\u00ebve \u00ebsht\u00eb p\u00ebrdorur sistemi i skedar\u00ebve Nydus, i cili aplikon adresimin sipas p\u00ebrmbajtjes p\u00ebr bashk\u00ebpunim efektiv me imazhet standart. Nydus mb\u00ebshtet ngarkimin n\u00eb koh\u00eb reale t\u00eb imazheve (ngarkon vet\u00ebm kur \u00ebsht\u00eb e nevojshme), siguron deduplication t\u00eb t\u00eb dh\u00ebnave t\u00eb p\u00ebrs\u00ebritura dhe mund t\u00eb p\u00ebrdor\u00eb backend t\u00eb ndryshme p\u00ebr ruajtjen reale. Ofrohet compatibilitet me POSIX (n\u00eb m\u00ebnyr\u00eb analogjike me Composefs, implementimi Nydus bashkon mund\u00ebsit\u00eb e OverlayFS me EROFS ose modul FUSE). <\/p>\n

N\u00eb k\u00ebt\u00eb version t\u00eb ri: <\/p>\n