Sehlooho sena se tla tšohla kamoo se sebetsang kateng , hape ho tla ba le karolo e sebetsang mabapi le khokahano ea bona le Docker.
Mabapi le mathata a tloaelehileng le Docker le litharollo tsa bona , kajeno ke tla hlalosa ka bokhutšoanyane ts'ebetsong ho tloha Kata Containers. Kata Containers ke nako e sireletsehileng ea sejana e thehiloeng ho mechini e bobebe e bobebe. Ho sebetsa le bona ho tšoana le lijana tse ling, empa ho phaella moo ho na le ho itšehla thajana ho ka tšeptjoang ho sebelisa theknoloji ea virtualization ea hardware. Morero o qalile ka 2017, ha sechaba se nang le lebitso le le leng se qeta ho kopanya likhopolo tse molemo ka ho fetisisa tse tsoang ho Intel Clear Containers le Hyper.sh RunV, ka mor'a moo mosebetsi o ile oa tsoela pele ho tšehetsa meralo e fapaneng ea meralo, ho kenyeletsoa AMD64, ARM, IBM p- le z. -letoto. Ho phaella moo, mosebetsi o tšehetsoa ka hare ho hypervisors QEMU, Firecracker, 'me ho boetse ho na le kopanyo le setshelo. Khoutu e fumaneha ho tlas'a laesense ea MIT.
Litšobotsi tsa bohlokoa
- Ho sebetsa le mantlha a arohaneng, ka hona ho fana ka marang-rang, memori le I / O ho itšehla thajana, hoa khoneha ho qobella ts'ebeliso ea ho itšehla thajana ho ipapisitsoe le li-extensions tsa virtualization.
- Ts'ehetso bakeng sa litekanyetso tsa indasteri ho kenyelletsa OCI (sebopeho sa setshelo), Kubernetes CRI
- Ts'ebetso e tsitsitseng ea lijana tsa Linux tse tloaelehileng, ho itšehla thajana ho eketsehileng ntle le ts'ebetso ea li-VM tse tloaelehileng
- Felisa tlhoko ea ho tsamaisa lijana ka har'a mechini e felletseng e felletseng, li-interface tsa generic li nolofatsa kopanyo le ho qala.
bophirima
Ho na le likhetho tsa ho kenya, ke tla nahana ka ho kenya ho tloha polokelong ea polokelo, ho ipapisitse le sistimi e sebetsang ea Centos 7.
ea bohlokoa: Mosebetsi oa li-kata Containers o tšehetsoa feela ho Hardware, phepelo ea virtualization ha e sebetse kamehla, hape hloka sse4.1 tšehetso ho tsoa ho processor.
Ho kenya Kata Containers ho bonolo haholo:
Kenya lisebelisoa tsa ho sebetsa le li-repositories:
# yum -y install yum-utilsThibela Selinux (e nepahetse haholoanyane ho e hlophisa, empa bakeng sa ho nolofatsa kea e tima):
# setenforce 0
# sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/configRe hokahanya polokelo ebe re etsa ho kenya
# source /etc/os-release
# ARCH=$(arch)
# BRANCH="${BRANCH:-stable-1.10}"
# yum-config-manager --add-repo "http://download.opensuse.org/repositories/home:/katacontainers:/releases:/${ARCH}:/${BRANCH}/CentOS_${VERSION_ID}/home:katacontainers:releases:${ARCH}:${BRANCH}.repo"
# yum -y install kata-runtime kata-proxy kata-shimphetoho
Ke tla be ke itokisetsa ho sebetsa le docker, ho kenngoa ha eona ho tloaelehile, nke ke ka e hlalosa ka botlalo:
# rpm -qa | grep docker
docker-ce-cli-19.03.6-3.el7.x86_64
docker-ce-19.03.6-3.el7.x86_64
# docker -v
Docker version 19.03.6, build 369ce74a3cRe etsa liphetoho ho daemon.json:
# cat <<EOF > /etc/docker/daemon.json
{
"default-runtime": "kata-runtime",
"runtimes": {
"kata-runtime": {
"path": "/usr/bin/kata-runtime"
}
}
}
EOFQala hape docker:
# service docker restartLekhetho la tšebetso
Haeba u qala setshelo pele u qala docker, u ka bona hore uname e tla fana ka mofuta oa kernel e sebetsang ho sistimi e kholo:
# docker run busybox uname -a
Linux 19efd7188d06 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64 GNU/LinuxKamora ho qala bocha, mofuta oa kernel o shebahala tjena:
# docker run busybox uname -a
Linux 9dd1f30fe9d4 4.19.86-5.container #1 SMP Sat Feb 22 01:53:14 UTC 2020 x86_64 GNU/LinuxLihlopha tse ling!
# time docker run busybox mount
kataShared on / type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev type tmpfs (rw,nosuid,size=65536k,mode=755)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=666)
sysfs on /sys type sysfs (ro,nosuid,nodev,noexec,relatime)
tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,relatime,mode=755)
cgroup on /sys/fs/cgroup/systemd type cgroup (ro,nosuid,nodev,noexec,relatime,xattr,name=systemd)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (ro,nosuid,nodev,noexec,relatime,cpu,cpuacct)
cgroup on /sys/fs/cgroup/blkio type cgroup (ro,nosuid,nodev,noexec,relatime,blkio)
cgroup on /sys/fs/cgroup/memory type cgroup (ro,nosuid,nodev,noexec,relatime,memory)
cgroup on /sys/fs/cgroup/devices type cgroup (ro,nosuid,nodev,noexec,relatime,devices)
cgroup on /sys/fs/cgroup/perf_event type cgroup (ro,nosuid,nodev,noexec,relatime,perf_event)
cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (ro,nosuid,nodev,noexec,relatime,net_cls,net_prio)
cgroup on /sys/fs/cgroup/freezer type cgroup (ro,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/pids type cgroup (ro,nosuid,nodev,noexec,relatime,pids)
cgroup on /sys/fs/cgroup/cpuset type cgroup (ro,nosuid,nodev,noexec,relatime,cpuset)
mqueue on /dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)
shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=65536k)
kataShared on /etc/resolv.conf type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)
kataShared on /etc/hostname type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)
kataShared on /etc/hosts type 9p (rw,dirsync,nodev,relatime,mmap,access=client,trans=virtio)
proc on /proc/bus type proc (ro,relatime)
proc on /proc/fs type proc (ro,relatime)
proc on /proc/irq type proc (ro,relatime)
proc on /proc/sys type proc (ro,relatime)
tmpfs on /proc/acpi type tmpfs (ro,relatime)
tmpfs on /proc/timer_list type tmpfs (rw,nosuid,size=65536k,mode=755)
tmpfs on /sys/firmware type tmpfs (ro,relatime)
real 0m2.381s
user 0m0.066s
sys 0m0.039s# time docker run busybox free -m
total used free shared buff/cache available
Mem: 1993 30 1962 0 1 1946
Swap: 0 0 0
real 0m3.297s
user 0m0.086s
sys 0m0.050sTlhahlobo ea mojaro o potlakileng
Ho lekola tahlehelo ho tsoa ho virtualization - ke tsamaisa sysbench, joalo ka mehlala ea mantlha .
Ho matha sysbench ho sebelisa Docker +containard
Teko ea processor
sysbench 1.0: multi-threaded system evaluation benchmark
Running the test with following options:
Number of threads: 1
Initializing random number generator from current time
Prime numbers limit: 20000
Initializing worker threads...
Threads started!
General statistics:
total time: 36.7335s
total number of events: 10000
total time taken by event execution: 36.7173s
response time:
min: 3.43ms
avg: 3.67ms
max: 8.34ms
approx. 95 percentile: 3.79ms
Threads fairness:
events (avg/stddev): 10000.0000/0.00
execution time (avg/stddev): 36.7173/0.00Teko ea RAM
sysbench 1.0: multi-threaded system evaluation benchmark
Running the test with following options:
Number of threads: 1
Initializing random number generator from current time
Initializing worker threads...
Threads started!
Operations performed: 104857600 (2172673.64 ops/sec)
102400.00 MiB transferred (2121.75 MiB/sec)
General statistics:
total time: 48.2620s
total number of events: 104857600
total time taken by event execution: 17.4161s
response time:
min: 0.00ms
avg: 0.00ms
max: 0.17ms
approx. 95 percentile: 0.00ms
Threads fairness:
events (avg/stddev): 104857600.0000/0.00
execution time (avg/stddev): 17.4161/0.00Ho tsamaisa sysbench ho sebelisa lijana tsa Docker + Kata
Teko ea processor
sysbench 1.0: multi-threaded system evaluation benchmark
Running the test with following options:
Number of threads: 1
Initializing random number generator from current time
Prime numbers limit: 20000
Initializing worker threads...
Threads started!
General statistics:
total time: 36.5747s
total number of events: 10000
total time taken by event execution: 36.5594s
response time:
min: 3.43ms
avg: 3.66ms
max: 4.93ms
approx. 95 percentile: 3.77ms
Threads fairness:
events (avg/stddev): 10000.0000/0.00
execution time (avg/stddev): 36.5594/0.00Teko ea RAM
sysbench 1.0: multi-threaded system evaluation benchmark
Running the test with following options:
Number of threads: 1
Initializing random number generator from current time
Initializing worker threads...
Threads started!
Operations performed: 104857600 (2450366.94 ops/sec)
102400.00 MiB transferred (2392.94 MiB/sec)
General statistics:
total time: 42.7926s
total number of events: 104857600
total time taken by event execution: 16.1512s
response time:
min: 0.00ms
avg: 0.00ms
max: 0.43ms
approx. 95 percentile: 0.00ms
Threads fairness:
events (avg/stddev): 104857600.0000/0.00
execution time (avg/stddev): 16.1512/0.00Ha e le hantle, boemo bo se bo hlakile, empa ho molemo ho feta ho etsa liteko ka makhetlo a 'maloa, ho tlosa lihlahisoa le ho lekanya liphetho, kahoo ha ke e-s'o etse liteko tse ling.
fumanoeng ke
Leha taba ea hore lijana tse joalo li nka nako e ka bang makhetlo a mahlano ho isa ho a leshome ho qala (nako e tloaelehileng ea ho matha bakeng sa litaelo tse tšoanang ha u sebelisa setshelo se ka tlase ho karolo ea boraro ea motsotsoana), li ntse li sebetsa ka potlako haeba re nka nako ea ho qala e felletseng (hona. ke mehlala e ka holimo, litaelo tse etsoang ka karolelano ea metsotsoana e meraro). Ha e le hantle, liphello tsa teko e potlakileng ea CPU le RAM li bontša hoo e batlang e le liphello tse tšoanang, tse ke keng tsa thaba, haholo-holo ka lebaka la hore ho itšehla thajana ho fanoa ka mochine o tsamaisoang hantle joalo ka kvm.
Phatlalatso
Sengoliloeng ke tlhahlobo, empa se u fa monyetla oa ho utloa nako e 'ngoe ea ho matha. Libaka tse ngata tsa kopo ha lia koaheloa, mohlala, sebaka sena se hlalosa bokhoni ba ho tsamaisa Kubernetes holim'a Kata Containers. Ho feta moo, o ka boela oa etsa letoto la liteko tse shebaneng le ho fumana mathata a ts'ireletso, ho beha lithibelo, le lintho tse ling tse khahlisang.
Ke kopa bohle ba balileng le ho khutla mona ho kenya letsoho phuputsong, eo likhatiso tsa nako e tlang mabapi le sehlooho sena li tla itšetleha ka eona.
Ke basebelisi ba ngolisitsoeng feela ba ka kenyang letsoho phuputsong. ka kopo.
Na ke lokela ho tsoela pele ho hatisa lingoliloeng tse mabapi le Kata Containers?
-
80,0%Ee, kwala go feta!28
-
20,0%Che, ha ho joalo…7
Basebelisi ba 35 ba ile ba khetha. Basebelisi ba 7 ba ile ba hana.
Source: www.habr.com