Ukukhutshwa kwe-CRIU 4.0, inkqubo yokugcina nokubuyisela imeko yeenkqubo Linux

I-CRIU 4.0 (Checkpoint and Restore in Userspace), isixhobo sokugcina nokubuyisela iinkqubo kwindawo yomsebenzisi, ikhutshiwe. Esi sixhobo sivumela ukugcina imeko yenkqubo enye okanye iqela uze uqalise ukusebenza ukusuka kwimeko egciniweyo, kuquka emva kokuba inkqubo iqalile kwakhona okanye kwiseva eyahlukileyo, ngaphandle kokuphazamisa uqhagamshelo lwenethiwekhi olukhoyo. Ikhowudi yeprojekthi ibhalwe ngo-C kwaye inelayisenisi phantsi kwelayisenisi ye-GPLv2. I-CRIU isetyenziswa kwiinkqubo zolawulo lwezikhongozeli ezifana ne-OpenVZ, i-LXC/LXD, kunye ne-Docker. Utshintsho olufunekayo ukuze i-CRIU isebenze lufakwe kwi-core kernel. Linux.

Imimandla yokusetyenziswa kwethekhnoloji ye-CRIU ibandakanya ukuqinisekisa ukuqalisa kwakhona kwe-OS ngaphandle kokuphazamisa ukuqhubeka kokuphunyezwa kweenkqubo ezihlala ixesha elide, Ukufuduka okuphilayo kwezikhongozeli ezizimeleyo, ukukhawulezisa ukuqaliswa kweenkqubo ezicothayo (unokuqala ukusebenza kurhulumente ogcinwe emva kokuqaliswa), ukwenza i-kernel. uhlaziyo ngaphandle kokuqalisa kwakhona iinkonzo, ngamaxesha athile ugcina inkqubo yeenkqubo zekhompyutha ezisebenza ixesha elide ukuze uqalise umsebenzi kwakhona xa kukho ungquzulwano, ukulinganisa umthwalo kwiinodi kumaqela, iinkqubo zokuphindaphinda komnye umatshini (ifolokhwe kwisixokelelwano esikude), ukudala izifinyezo ze-snapshots. izicelo zomsebenzisi ngexesha lokusebenza uhlalutyo kwenye inkqubo okanye xa kuyimfuneko ukurhoxisa izenzo ezongezelelweyo kwinkqubo.

Kukhupho olutsha:

  • Yongezwe i-plugin ye-CUDA enika amandla okugcina nokubuyisela imeko yezicelo ezisekelwe kwi-teknoloji ye-NVIDIA CUDA.
  • Inkxaso eyongezelelweyo yendlela yokwenza iShadow Stack, exhaswa ukususela kwi-kernel Linux 6.6 kwaye ivumela ukuvimba ukusebenza kweenkqubo ezininzi, kusetyenziswa amandla ehardware eeprosesa ze-Intel (emva kokudlulisela ulawulo kumsebenzi, iidilesi zokubuyisela zigcinwa yiprosesa kungekuphela nje kwi-stack eqhelekileyo, kodwa nakwi-stack "yesithunzi" eyahlukileyo, engenakutshintshwa ngokuthe ngqo, kwaye ngaphambi kokuba iphume kumsebenzi, idilesi yokubuyisela ikhutshwa kwi-stack yesithunzi kwaye ithelekiswe nedilesi yokubuyisela kwi-stack ephambili).
  • Inkxaso eyongeziweyo yomyalelo we-PAGEMAP_SCAN ioctl ukufumana ulwazi malunga nemixholo yeetafile zememori yephepha, ethi, phakathi kwezinye izinto, xa isetyenziswa nge userfaultfd (), ikuvumela ukuba umise iinyani zokubhala kwindawo ethile yememori.
  • Kuphunyezwe ukukwazi ukubuyisela intambo kwiqela elichanekileyo v1.

    umthombo: opennet.ru
Thenga ukusingathwa okuthembekileyo kwiindawo ezinokhuseleko lweDDoS, iiseva zeVPS VDS 🔥 Thenga ukusingathwa kwewebhusayithi okuthembekileyo ngokhuseleko lwe-DDoS, iiseva zeVPS VDS | ProHoster