I-Siemens ikhiphe i-Jailhouse 0.11 hypervisor

Inkampani yakwa-Siemens eshicilelwe ukukhululwa kwe-hypervisor yamahhala I-Jailhouse 0.11. I-hypervisor isekela izinhlelo ze-x86_64 ezinezandiso ze-VMX+EPT noma i-SVM+NPT (AMD-V), kanye namaphrosesa we-ARMv7 kanye ne-ARMv8/ARM64 anezandiso ze-virtualization. Ngokuhlukana iyathuthuka ijeneretha yesithombe ye-Jailhouse hypervisor, ekhiqizwe ngokusekelwe kumaphakheji e-Debian wamadivayisi asekelwe. Ikhodi yephrojekthi isatshalaliswa ngu ilayisensi ngaphansi kwe-GPLv2.

I-hypervisor isetshenziswa njengemojula ye-Linux kernel futhi inikeza i-virtualization ezingeni le-kernel. Izingxenye zezinhlelo zezivakashi sezivele zifakiwe ku-Linux kernel eyinhloko. Ukuphatha ukuhlukaniswa, izindlela zokwenza izinto ezibonakalayo ezinikezwe ama-CPU esimanje ziyasetshenziswa. Izici ezihlukile ze-Jailhouse ukusetshenziswa kwayo okungasindi futhi igxile ekubopheni imishini ebonakalayo ku-CPU engashintshi, indawo ye-RAM namadivayisi wehadiwe. Le ndlela ivumela iseva eyodwa ye-multiprocessor ngokomzimba ukuthi isekele ukusebenza kwezindawo ezimbalwa ezizimele ezizimele, ngayinye eyabelwe umgogodla wayo wokucubungula.

Ngesixhumanisi esiqinile ku-CPU, i-overhead ye-hypervisor iyancishiswa futhi ukuqaliswa kwayo kwenziwa lula kakhulu, njengoba asikho isidingo sokusebenzisa ukuhlelwa kwezinsiza eziyinkimbinkimbi - ukwaba umgogodla we-CPU ohlukile kuqinisekisa ukuthi ayikho eminye imisebenzi eyenziwa kule CPU. . Inzuzo yale ndlela yikhono lokunikeza ukufinyelela okuqinisekisiwe kwezinsiza nokusebenza okubikezelwayo, okwenza i-Jailhouse ibe yisixazululo esifanelekile sokudala imisebenzi eyenziwa ngesikhathi sangempela. Okubi ukukala okukhawulelwe, kukhawulwe ngenani lama-CPU cores.

Kumatemu e-Jailhouse, izindawo ezibonakalayo zibizwa ngokuthi “amakhamera” (iseli, kumongo wendlu yejele). Ngaphakathi kwekhamera, uhlelo lubukeka njengeseva yephrosesa eyodwa ebonisa ukusebenza vala ekusebenzeni kwe-CPU core ezinikele. Ikhamera ingasebenzisa indawo yesistimu yokusebenza engafanele, kanye nezimo ezisusiwe ukuze isebenze uhlelo olulodwa noma izinhlelo zokusebenza ezilungiselelwe ngokukhethekile ezidizayinelwe ukuxazulula izinkinga zesikhathi sangempela. Ukucushwa kusethiwe .amafayela weseli, enquma i-CPU, izifunda zenkumbulo, nezimbobo ze-I/O ezinikezwe imvelo.

Ekukhululweni okusha

• Ukwesekwa okwengeziwe kwe-Marvell MACCHIATObin, i-Xilinx Ultra96,
  I-Microsys miriac SBC-LS1046A kanye ne-Texas Instruments AM654 IDK;

• Izibalo ezingeziwe zomgogodla ngamunye we-CPU;
• Amadivayisi e-PCI anikwe amandla ukuze asethwe kabusha lapho ikhamera ivaliwe;
• Isakhiwo Sesihlahla Sedivayisi siguqulelwe ekukhishweni kwakamuva kwe-Linux kernel;
• Ukuvikelwa okungeziwe ekuhlaselweni kwe-Specter v64 yezingxenyekazi ze-ARM ne-ARM2. Izilungiselelo ze-qemu-arm64 zicabangela izinguquko eziphuma ekukhishweni kwakamuva kwe-QEMU. Izinkinga ngokubhala kabusha i-PSCI firmware kumabhodi we-Orange Pi Zero sezixazululiwe;
• Kuplathifomu ye-x86, lapho usebenzisa izimo zedemo (iziboshwa), ukusetshenziswa kwemiyalelo ye-SSE ne-AVX kunikwe amandla, futhi nokubika okuhlukile kuyengezwa.

Izinhlelo zesikhathi esizayo zihlanganisa ukwesekwa okulindelwe isikhathi eside kwe-IOMMUv3, ukwandisa ukusebenza kahle kokusebenzisa inqolobane yokucubungula (umbala we-cache), eqeda izinkinga nge-APIC kuma-processor we-AMD Ryzen, isebenze kabusha idivayisi ye-ivshmem futhi ithuthukise abashayeli ku-kernel eyinhloko.

Source: opennet.ru