{"id":41281,"date":"2020-02-07T09:28:13","date_gmt":"2020-02-07T06:28:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12"},"modified":"2020-02-07T09:28:13","modified_gmt":"2020-02-07T06:28:13","slug":"kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","title":{"rendered":"F\u00f6retaget Siemens har sl\u00e4ppt hypervisor Jailhouse 0.12","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>F\u00f6retaget Siemens <noindex><a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2020\/2\/4\/403\">publicerade<\/a><\/noindex> sl\u00e4pp av den fria hypervisorn <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">Jailhouse 0.12<\/a><\/noindex>. Hypervisorn st\u00f6der arbete p\u00e5 x86_64-system med VMX+EPT eller SVM+NPT (AMD-V) och p\u00e5 ARMv7 och ARMv8\/ARM64-processorer med virtualiseringstill\u00e4gg. Separat <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse-images\">utvecklas<\/a><\/noindex> en bildgenerator f\u00f6r hypervisorn Jailhouse, skapad fr\u00e5n Debian-paket f\u00f6r st\u00f6dja enheter. Projektkoden <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\">sprids<\/a><\/noindex>  \u00e4r under GPLv2-licensen. <\/p>\n<p>Hypervisorn \u00e4r implementerad som en modul f\u00f6r Linux-k\u00e4rnan och m\u00f6jligg\u00f6r virtualisering p\u00e5 k\u00e4rnniv\u00e5. Komponenter f\u00f6r g\u00e4stsystem ing\u00e5r redan i huvudk\u00e4rnan i Linux. F\u00f6r att hantera isolering anv\u00e4nds de h\u00e5rdvarumekanismer f\u00f6r virtualisering som moderna CPU:er tillhandah\u00e5ller. S\u00e4rdrag f\u00f6r Jailhouse inkluderar en l\u00e4ttviktsimplementering och fokus p\u00e5 att koppla virtuella maskiner till en fast CPU, minnesomr\u00e5den och h\u00e5rdvaruenheter. Denna metod g\u00f6r det m\u00f6jligt att driva flera oberoende virtuella milj\u00f6er p\u00e5 en fysisk multiprocessorserver, d\u00e4r varje \u00e4r knuten till sitt eget processork\u00e4rna. <\/p>\n<p>Vid strikt koppling till CPU-minimeras overhead fr\u00e5n hypervisorns arbete och dess implementation f\u00f6renklas avsev\u00e4rt, eftersom det inte finns n\u00e5got behov av att k\u00f6ra en komplex resursf\u00f6rdelare - att avs\u00e4tta en separat CPU-k\u00e4rna garanterar att inga andra uppgifter k\u00f6rs p\u00e5 just den CPU:n. En f\u00f6rdel med en s\u00e5dan strategi \u00e4r att den s\u00e4kerst\u00e4ller garanterad \u00e5tkomst till resurser och f\u00f6ruts\u00e4gbar prestanda, vilket g\u00f6r Jailhouse till en l\u00e4mplig l\u00f6sning f\u00f6r att skapa uppgifter som k\u00f6rs i realtid. Nackdelen \u00e4r den begr\u00e4nsade skalbarheten, begr\u00e4nsad av antalet CPU-k\u00e4rnor.<\/p>\n<p>I Jailhouse-termer kallas virtuella milj\u00f6er f\u00f6r \"cellar\" (cell, i Jailhouse-sammanhang). Inuti cellen ser systemet ut som en en-processor-server, som visar prestanda <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/file\/d\/0B6HTUUWSPdd-Zl93MVhlMnRJRjg\/edit\">n\u00e4ra<\/a><\/noindex> till prestandan hos en dedikerad CPU-k\u00e4rna. Inuti cellen kan milj\u00f6n k\u00f6ras med valfritt operativsystem, samt avskalade milj\u00f6er f\u00f6r att k\u00f6ra en enskild applikation eller s\u00e4rskilt f\u00f6rberedda program avsedda f\u00f6r att l\u00f6sa realtidsuppgifter. Konfigurationen anges i <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/siemens\/jailhouse\/blob\/master\/configs\/\">.cell-filer<\/a><\/noindex>, som definierar den tilldelade CPU:en, minnesregionerna och in-\/utportarna. <\/p>\n<p><center><img decoding=\"async\" alt=\"F\u00f6retaget Siemens har sl\u00e4ppt hypervisor Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/6cf944a2502d951e550625bfd39a3d38.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center><\/p>\n<p>I den nya utg\u00e5van<\/p>\n<ul>\n<li class=\"l\"> Tillagd st\u00f6d f\u00f6r plattformar Raspberry Pi 4 Model B och Texas Instruments J721E-EVM;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/static.sched.com\/hosted_files\/kvmforum2019\/4b\/KVM-Forum19_ivshmem2.pdf\">\u00d6verarbetad<\/a><\/noindex> enhet ivshmem, som anv\u00e4nds f\u00f6r att organisera interaktion mellan cellerna. Ovanp\u00e5 den nya ivshmem kan en transport f\u00f6r VIRTIO implementeras;\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/pics_base\/0_1580842059.png\"><img decoding=\"async\" alt=\"F\u00f6retaget Siemens har sl\u00e4ppt hypervisor Jailhouse 0.12\" src=\"\/wp-content\/uploads\/2020\/02\/f5785c8e73956397f69b56ec804c77c0.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<li class=\"l\"> M\u00f6jlighet att inaktivera skapandet av stora minnessidor (hugepage) f\u00f6r att blockera s\u00e5rbarhet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">CVE-2018-12207<\/a><\/noindex> i Intel-processorer, vilket till\u00e5ter en icke-privilegerad angripare att initiera en \u00f6verbelastningsattack som leder till att systemet h\u00e4nger i tillst\u00e5ndet \"Machine Check Error\";\n<li class=\"l\"> F\u00f6r system med ARM64-processorer har st\u00f6d f\u00f6r SMMUv3 (System Memory Management Unit) och TI PVU (Peripheral Virtualization Unit) implementerats. F\u00f6r isolerade milj\u00f6er som k\u00f6rs ovanp\u00e5 h\u00e5rdvara (bare-metal) har st\u00f6d f\u00f6r PCI lagts till;\n<li class=\"l\"> P\u00e5 x86-system har det implementerats m\u00f6jlighet f\u00f6r rotkameror att aktivera det som levereras av Intel-processorer, l\u00e4get CR4.UMIP (User-Mode Instruction Prevention), som f\u00f6rhindrar utf\u00f6rande i anv\u00e4ndarl\u00e4get av vissa instruktioner, s\u00e5som SGDT, SLDT, SIDT, SMSW och STR, som kan anv\u00e4ndas i attacker som syftar till att h\u00f6ja privilegier i systemet.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52310\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse 0.12. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 x86_64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 VMX+EPT \u0438\u043b\u0438 SVM+NPT (AMD-V), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 ARMv7 \u0438 ARMv8\/ARM64 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Jailhouse, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Debian \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41282,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-07T06:28:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Siemens har sl\u00e4ppt hypervisorn Jailhouse 0.12 | ProHoster","description":"Siemens har publicerat en version av den fria hypervisorn.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 Jailhouse 0.12 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Siemens \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430","og:url":"https:\/\/prohoster.info\/sv\/blog\/kompaniya-siemens-vypustila-gipervizor-jailhouse-0-12","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-07T06:28:13+00:00","article:modified_time":"2020-02-07T06:28:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41281","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:17:48","updated":"2022-09-30 06:27:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/41281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=41281"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/41281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/41282"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=41281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=41281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=41281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}