I-Siemens ikhuphe i-Jailhouse 0.11 hypervisor

Inkampani yeSiemens ipapashiwe ukukhululwa kwe-hypervisor yamahhala IJailhouse 0.11. I-hypervisor isekela iinkqubo ze-x86_64 kunye ne-VMX + EPT okanye i-SVM + NPT (AMD-V) izandiso, kunye ne-ARMv7 kunye ne-ARMv8 / ARM64 iprosesa kunye nezandiso ze-virtualization. Ngokwahlukileyo iphuhlisa ijenereyitha yomfanekiso weJailhouse hypervisor, eveliswe ngokusekwe kwipakethe yeDebian yezixhobo ezixhaswayo. Ikhowudi yeprojekthi isasazwa ngu ilayisenisi phantsi kwe-GPLv2.

I-hypervisor iphunyezwa njengemodyuli ye-Linux kernel kwaye ibonelela ngokubonakalayo kwinqanaba le-kernel. Amacandelo eenkqubo zeendwendwe sele ebandakanyiwe kwi-Linux kernel engundoqo. Ukulawula ukubekwa wedwa, iindlela ze-hardware ze-virtualization ezibonelelwa zii-CPU zanamhlanje ziyasetyenziswa. Iimpawu ezahlukileyo zeJailhouse kukuphunyezwa kwayo okukhaphukhaphu kwaye kugxininise ekubopheleleni koomatshini ababonakalayo kwi-CPU esisigxina, indawo ye-RAM kunye nezixhobo zehardware. Le ndlela ivumela umncedisi omnye we-multiprosesa womzimba ukuba axhase ukusebenza kweendawo ezininzi ezizimeleyo ezizimeleyo, nganye kuzo yabelwe undoqo wayo weprosesa.

Ngekhonkco eliqinileyo kwi-CPU, i-overhead ye-hypervisor iyancitshiswa kwaye ukuphunyezwa kwayo kwenziwa lula kakhulu, kuba akukho mfuneko yokuqhuba umcwangcisi wolwabiwo lwezixhobo ezintsonkothileyo - ukwabiwa kwe-CPU engundoqo iqinisekisa ukuba akukho minye imisebenzi eyenziwa kule CPU. . Inzuzo yale ndlela kukukwazi ukubonelela ukufikelela okuqinisekisiweyo kwizibonelelo kunye nokusebenza okuqikelelweyo, okwenza i-Jailhouse ibe isisombululo esifanelekileyo sokudala imisebenzi eyenziwa ngexesha langempela. Icala elisezantsi lilinganiselwe, lilinganiselwe linani le-CPU cores.

Kwisigama seJailhouse, iimeko ezingqongileyo ezibonakalayo zibizwa ngokuba β€œziikhamera” (iseli, kumxholo wentolongo). Ngaphakathi kwekhamera, inkqubo ibonakala ngathi yiseva yeprosesa enye ebonisa ukusebenza kufutshane ekusebenzeni kondoqo we-CPU ozinikeleyo. Ikhamera inokuqhuba imo engqongileyo yenkqubo yokusebenza engafanelekanga, kunye neendawo ezichithwayo zokusebenzisa isicelo esinye okanye izicelo ezilungiselelwe ngokukodwa ezenzelwe ukuxazulula iingxaki zexesha langempela. Ubumbeko lusetwe ngaphakathi .iifayile zeseli, emisela i-CPU, imimandla yenkumbulo, kunye nezibuko ze-I/O ezabelwe imo engqongileyo.

I-Siemens ikhuphe i-Jailhouse 0.11 hypervisor

Kukhululo olutsha

  • Inkxaso eyongeziweyo yeMarvell MACCHIATObin, Xilinx Ultra96,
    I-Microsys miriac SBC-LS1046A kunye ne-Texas Instruments AM654 IDK;

  • Iinkcukacha-manani ezongeziweyo zondoqo we-CPU nganye;
  • Izixhobo ze-PCI ezisebenzayo ukuba zisetwe kwakhona xa ikhamera ivaliwe;
  • Isakhiwo soMthi weSixhobo silungelelaniselwe ukukhutshwa kwe-Linux kernel yamva nje;
  • Ukhuseleko olongeziweyo kuhlaselo lweSpecter v64 lwe-ARM kunye ne-ARM2 amaqonga. Izicwangciso zeqemu-arm64 zithathela ingqalelo utshintsho oluvela kukhupho lwamva nje lwe-QEMU. Iingxaki ngokubhala kwakhona i-PSCI firmware kwiibhodi ze-Orange Pi Zero ziye zasonjululwa;
  • Kwiqonga le-x86, xa kuqhuba iimeko zedemo (amabanjwa), ukusetyenziswa kwe-SSE kunye ne-AVX imiyalelo kunikwe amandla, kwaye ingxelo engaphandle yongezwa.

Izicwangciso zexesha elizayo ziquka inkxaso ekudala ilindelwe ye-IOMMUv3, ukwandisa ukusebenza kakuhle kokusebenzisa i-cache yeprosesa (umbala we-cache), ukuphelisa iingxaki nge-APIC kwi-AMD Ryzen processors, iphinda isebenze isixhobo se-ivshmem kunye nokukhuthaza abaqhubi kwi-kernel ephambili.

umthombo: opennet.ru

Yongeza izimvo