{"id":115219,"date":"2024-04-21T14:30:09","date_gmt":"2024-04-21T12:30:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kata-containers-3-4-s-izolyacziej-na-osnove-virtualizaczii"},"modified":"2024-04-21T14:30:09","modified_gmt":"2024-04-21T12:30:09","slug":"vypusk-kata-containers-3-4-s-izolyacziej-na-osnove-virtualizaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-kata-containers-3-4-s-izolyacziej-na-osnove-virtualizaczii","title":{"rendered":"L\u00ebshimi i Kata Containers 3.4 me izolim t\u00eb bazuar n\u00eb virtualizim","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cbsht\u00eb publikuar versioni 3.4 i projektit Kata Containers, i cili zhvillon nj\u00eb paket\u00eb p\u00ebr organizimin e ekzekutimit t\u00eb kontejner\u00ebve duke p\u00ebrdorur izolimin mbi baza t\u00eb mekanizmave t\u00eb plot\u00eb t\u00eb virtualizimit. Projekti \u00ebsht\u00eb krijuar nga kompanit\u00eb Intel dhe Hyper p\u00ebrmes bashkimit t\u00eb teknikave Clear Containers dhe runV. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebt Go dhe Rust dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. Zhvillimi i projektit mbik\u00ebqyret nga nj\u00eb grup pune i krijuar n\u00ebn mbik\u00ebqyrjen e organizat\u00ebs s\u00eb pavarur OpenInfra Foundation, ku marrin pjes\u00eb kompani si Canonical, China Mobile, Dell\/EMC, EasyStack, Google, Huawei, NetApp, Red Hat, SUSE dhe ZTE. <\/p>\n

Baza e Kata \u00ebsht\u00eb nj\u00eb runtime q\u00eb lejon krijimin e makinave virtuale kompakte, t\u00eb cilat ekzekutohen duke p\u00ebrdorur nj\u00eb hypervizor t\u00eb plot\u00eb, n\u00eb vend t\u00eb aplikimit t\u00eb kontejner\u00ebve tradicional\u00eb, t\u00eb cil\u00ebt p\u00ebrdorin nj\u00eb kernel t\u00eb p\u00ebrbashk\u00ebt Linux dhe jan\u00eb izoluar p\u00ebrmes hap\u00ebsirave t\u00eb emrave dhe cgroups. P\u00ebrdorimi i makinat virtuale<\/a> siguron nj\u00eb nivel m\u00eb t\u00eb lart\u00eb t\u00eb siguris\u00eb, duke mbrojtur nga sulmet q\u00eb shkaktohen nga shfryt\u00ebzimi i dob\u00ebsive n\u00eb kernel-in Linux. <\/p>\n

Kata Containers \u00ebsht\u00eb orientuar p\u00ebr integrimin n\u00eb infrastrukturat ekzistuese t\u00eb izolimit t\u00eb kontejner\u00ebve me mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb k\u00ebtij lloji t\u00eb makinave virtuale p\u00ebr forcimin e mbrojtjes s\u00eb kontejner\u00ebve tradicional\u00eb. Projekti ofron mekanizma p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb e makinave virtuale t\u00eb lehta me infrastrukturat e ndryshme t\u00eb izolimit t\u00eb kontejner\u00ebve, platformat e orkestrimit t\u00eb kontejner\u00ebve dhe specifikimet si OCI (Open Container Initiative), CRI (Container Runtime Interface) dhe CNI (Container Networking Interface). Jan\u00eb n\u00eb dispozicion mjete p\u00ebr integrim me Docker, Kubernetes, QEMU dhe OpenStack. <\/p>\n

Integrimi me sistemet e menaxhimit t\u00eb kontejner\u00ebve arrihet p\u00ebrmes nj\u00eb shtrese q\u00eb simulon menaxhimin e kontejner\u00ebve, e cila p\u00ebrmes nj\u00eb interface gRPC dhe nj\u00eb proxy t\u00eb ve\u00e7ant\u00eb i drejtohet agentit menaxhues n\u00eb makin\u00ebn virtuale. Brenda mjedisit virtual, i cili ndizet nga hypervizori, p\u00ebrdoret nj\u00eb kernel i optimizuar posa\u00e7\u00ebrisht q\u00eb p\u00ebrmban vet\u00ebm grupin minimal t\u00eb mund\u00ebsive t\u00eb nevojshme. <\/p>\n

Si p\u00ebrdorues i hipervizorit, mund t\u00eb p\u00ebrdoret Dragonball Sandbox (edita KVM, e optimizuar p\u00ebr konteiner\u00ebt) me mjetet QEMU, si dhe Firecracker dhe Cloud Hypervisor. Mjedisi i sistemit p\u00ebrfshin nj\u00eb demon t\u00eb inicializimit dhe nj\u00eb agjent (Agent). Agjenti siguron ekzekutimin e imazheve t\u00eb konteiner\u00ebve t\u00eb p\u00ebrcaktuar nga p\u00ebrdoruesi n\u00eb formatin OCI p\u00ebr Docker dhe CRI p\u00ebr Kubernetes. Kur p\u00ebrdoret s\u00eb bashku me Docker, p\u00ebr \u00e7do konteiner krijohet nj\u00eb makina virtuale<\/a>, pra, mjedisi i nisjes mbi hipervizorin aplikohet p\u00ebr nisjen e brendshme t\u00eb konteiner\u00ebve. <\/p>\n

\"L\u00ebshimi<\/center> <\/p>\n

P\u00ebr t\u00eb reduktuar konsumin e memories, aplikohet mekanizmi DAX (qasje e drejtp\u00ebrdrejt\u00eb n\u00eb FS anashkalon cachen e faqeve pa p\u00ebrdorimin e nivelit t\u00eb pajisjeve me bllok), dhe p\u00ebr deduplication e zonave t\u00eb nj\u00ebjta t\u00eb memories aplikohet teknologjia KSM (Kernel Samepage Merging), e cila lejon organizimin e ndarjes s\u00eb burimeve t\u00eb sistemit host dhe lidhjen e nj\u00eb shablloni t\u00eb zakonsh\u00ebm t\u00eb mjedisit t\u00eb sistemit me sisteme t\u00eb ndryshme mysafir. <\/p>\n

P\u00ebr organizimin e qasjes n\u00eb imazhet e konteiner\u00ebve, \u00ebsht\u00eb angazhuar sistemi i skedar\u00ebve Nydus, i cili p\u00ebrdor adresimin sipas p\u00ebrmbajtjes p\u00ebr bashk\u00ebpunim efikas me imazhet tipike. Nydus mb\u00ebshtet ngarkimin e imazheve n\u00eb fluks (ngarkohet vet\u00ebm kur \u00ebsht\u00eb e nevojshme), siguron deduplication e t\u00eb dh\u00ebnave t\u00eb p\u00ebrs\u00ebritura dhe mund t\u00eb p\u00ebrdor\u00eb backend t\u00eb ndrysh\u00ebm p\u00ebr ruajtjen efektive. Ofron kompatibilitet me POSIX (n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me Composefs, implementimi i Nydus kombinon mund\u00ebsit\u00eb e OverlayFS me EROFS ose modul FUSE). <\/p>\n

N\u00eb versionin e ri: <\/p>\n