Ukukhishwa kwe-CRU 3.16, uhlelo lokusindisa nokubuyisela isimo sezinqubo ku Linux

Ikhithi yamathuluzi ye-CRIU 3.16 (Checkpoint and Restore In Userspace) yokonga nokubuyisela izinqubo esikhaleni somsebenzisi isikhishiwe. Ikhithi yamathuluzi ikuvumela ukuthi ulondoloze isimo senqubo eyodwa noma iqembu, bese uqala kabusha umsebenzi endaweni elondoloziwe, okuhlanganisa ngemva kokuqalisa kabusha isistimu noma kwenye iseva ngaphandle kokuphula uxhumano lwenethiwekhi oseluvele lusunguliwe. Ikhodi yephrojekthi isatshalaliswa ngaphansi kwelayisensi ye-GPLv2.

Ukusetshenziswa kobuchwepheshe be-CRIU kufaka phakathi ukuqinisekisa ukuthi i-OS iqala kabusha ngaphandle kokuphazamisa ukuqhubeka kwezinqubo ezisebenza isikhathi eside, ukufuduka bukhoma kweziqukathi ezihlukanisiwe, ukusheshisa ukuqaliswa kwezinqubo ezihamba kancane (zingaqala kusukela esimweni esigciniwe ngemva kokuqaliswa), ukwenza izibuyekezo ze-kernel ngaphandle kokuqalisa kabusha izinsizakalo, ukulondoloza njalo isimo semisebenzi yekhompyutha ehlala isikhathi eside ukuze kuqaliswe umsebenzi uma kwenzeka ingozi, ukulinganisela umthwalo kuzo zonke izingqimba ngamaqoqo, ukukopisha izinqubo komunye umshini (ukufola ohlelweni olukude), nokudala izithombe zezinhlelo zokusebenza zomsebenzisi ngesikhathi sokusebenza ukuze zihlaziywe kwenye uhlelo noma uma kwenzeka ezinye izenzo ohlelweni zidinga ukukhanselwa. I-CRIU isetshenziswa ezinhlelweni zokuphatha iziqukathi ezifana ne-OpenVZ, LXC/LXD, kanye ne-Docker. Izinguquko ezidingekayo ukuze i-CRIU isebenze zifakiwe ku-kernel eyinhloko. Linux.

Ekukhishweni okusha:

  • Kwengezwe umyalo we-criu-ns ukuze kubuyiselwe isifinyezo senqubo elondoloziwe nge-PID entsha nasendaweni ehlukile yokukhweza. Ukuqala nge-PID ehlukile kungase kudingeke, isibonelo, uma i-PID endala isivele isetshenziswa ohlelweni.
  • Amandla okulondoloza nokubuyisela izifinyezo zesimo samaphrofayela e-armor aqalisiwe.
  • Ukuvinjwa okusetshenzisiwe kanye nokuvula izinsiza zenethiwekhi ngokusekelwe kuma-nfttables.
  • Usekelo olungeziwe lokubuyisela amadivayisi e-veth adalwe ngaphambilini.
  • Ukusekelwa okuthuthukisiwe kokubuyisela iziqukathi kuma-pods akhona.
  • Kumakhasimende e-RPC, ikhono lokunquma ukusetshenziswa kabusha kwe-PID lengeziwe, lasetshenziswa kusetshenziswa indlela ye-pidfd.
  • Ilayisensi yawo wonke amafayela e-proto ezithombeni/uhla lwemibhalo ishintshiwe yaba yi-MIT.

Source: opennet.ru

Thenga ukusingathwa okuthembekile kwamasayithi anokuvikelwa kwe-DDoS, amaseva e-VPS VDS 🔥 Thenga ukusingathwa kwewebhusayithi okuthembekile ngokuvikelwa kwe-DDoS, amaseva e-VPS VDS | ProHoster