Ngemuva kwezinyanga eziyisishiyagalombili zokuthuthuka, i-hypervisor yamahhala i-Xen 4.15 isikhishwe. Izinkampani ezifana ne-Amazon, Arm, Bitdefender, Citrix kanye ne-EPAM Systems zibambe iqhaza ekuthuthukisweni kokukhishwa okusha. Ukukhishwa kwezibuyekezo zegatsha le-Xen 4.15 kuzohlala kuze kube umhla ka-8 Okthoba 2022, kanye nokushicilelwa kokulungiswa kobungozi kuze kube umhla ka-8 Ephreli 2024.
Izinguquko ezibalulekile ku-Xen 4.15:
- Izinqubo ze-Xenstored ne-oxensstored zinikeza ukwesekwa kokuhlolwa kwezibuyekezo ezibukhoma, okuvumela ukulungiswa kobungozi ukuthi kulethwe futhi kusetshenziswe ngaphandle kokuqalisa kabusha indawo yokusingatha.
- Ukwesekwa okwengeziwe kwezithombe ze-boot ezihlanganisiwe, okwenza kube nokwenzeka ukudala izithombe zesistimu ezihlanganisa izingxenye ze-Xen. Lezi zithombe zipakishwe njengokufana okukodwa kwe-EFI okungasetshenziswa ukuqalisa isistimu ye-Xen ngokuqondile kusukela kusiphathi sokuqalisa se-EFI ngaphandle kwezilayishi ezimaphakathi ze-boot ezifana ne-GRUB. Isithombe sihlanganisa izingxenye ze-Xen ezifana ne-hypervisor, i-kernel yendawo yokusingatha (dom0), i-initrd, i-Xen KConfig, izilungiselelo ze-XSM kanye Nesihlahla Sedivayisi.
- Kuplathifomu ye-ARM, ikhono lokuhlola lokusayinda amamodeli edivayisi ohlangothini lwesistimu yokusingatha i-dom0 lisetshenzisiwe, elenza kube nokwenzeka ukulingisa amadivayisi ezingxenyekazi zekhompiyutha ngokunganaki amasistimu wezihambeli asekelwe ekwakhiweni kwe-ARM. Ku-ARM, usekelo lwe-SMMUv3 (Iyunithi Yokulawulwa Kwememori Yesistimu) selusetshenzisiwe, okwenza kube nokwenzeka ukukhulisa ukuphepha nokuthembeka kokudluliswa kwedivayisi kumasistimu e-ARM.
- Kwengezwe amandla okusebenzisa i-IPT (Intel Processor Trace) indlela yokulandelela izingxenyekazi zekhompuyutha, evele iqala nge-Intel Broadwell CPU, ukuze ikhiphe idatha isuka ezinhlelweni zezihambeli iye ezinsizeni zokususa iphutha ezisebenza ohlangothini lwesistimu yomsingathi. Isibonelo, ungasebenzisa i-VMI Kernel Fuzzer noma i-DRAKVUF Sandbox.
- Usekelo olungeziwe lwezindawo ze-Viridian (Hyper-V) zokuqhuba izihambeli ze-Windows zisebenzisa ama-VCPU angaphezu kuka-64.
- Isendlalelo se-PV Shim sithuthukisiwe, sisetshenziselwe ukusebenzisa amasistimu wezihambeli ezingashintshiwe (i-PV) endaweni ye-PVH ne-HVM (ivumela amasistimu amadala wesivakashi ukuthi asebenze ezindaweni ezivikeleke kakhulu ezinikeza ukuhlukaniswa okuqinile). Inguqulo entsha ithuthukise ukusekelwa kokusebenzisa amasistimu wezihambeli ze-PV ezindaweni ezisekela imodi ye-HVM kuphela. Usayizi we-interlayer wehlisiwe ngenxa yokwehliswa kwekhodi eqondene ne-HVM.
- Amakhono abashayeli be-VirtIO ezinhlelweni ze-ARM andiwe. Kuzinhlelo ze-ARM, ukuqaliswa kweseva ye-IOREQ kuhlongoziwe, okuhlelelwe ukusetshenziswa esikhathini esizayo ukuze kuthuthukiswe ukwenziwa kwezinto ezibonakalayo kwe-I/O kusetshenziswa izivumelwano ze-VirtIO. Kwengezwe ukuqaliswa kwereferensi yedivayisi ye-VirtIO block ye-ARM futhi kwanikeza ikhono lokuphusha amadivayisi wokuvimba we-VirtIO ezivakashini ngokusekelwe ekwakhiweni kwe-ARM. Usekelo lwe-PCIe lwe-virtualization lwe-ARM seluqalile ukunikwa amandla.
- Umsebenzi uyaqhubeka nokusebenzisa ichweba le-Xen lamaphrosesa e-RISC-V. Njengamanje, ikhodi iyathuthukiswa ukuze ilawule inkumbulo ebonakalayo ohlangothini losokhaya nolwezivakashi, kanye nokudala ikhodi eqondene nesakhiwo se-RISC-V.
- Kanye nephrojekthi ye-Zephyr, ngokusekelwe ezingeni le-MISRA_C, isethi yezidingo kanye nemihlahlandlela yokuklama ikhodi iyathuthukiswa eyehlisa ubungozi bezinkinga zokuphepha. Ama-Static analyzer asetshenziselwa ukukhomba ukungezwani nemithetho edaliwe.
- Isinyathelo se-Hyperlaunch siyethulwa, okuhloswe ngaso ukuhlinzeka ngamathuluzi avumelana nezimo zokumisa ukwethulwa kwesethi emile yemishini ebonakalayo ngesikhathi sokuqalisa isistimu. Isinyathelo siphakamise umqondo we-domB (isizinda sokuqalisa, i-dom0less), esikuvumela ukuthi wenze ngaphandle kokusebenzisa indawo ye-dom0 lapho uqala imishini ebonakalayo ekuqaleni kwe-server boot.
- Uhlelo lokuhlanganisa oluqhubekayo lusekela ukuhlolwa kwe-Xen ku-Alpine Linux naku-Ubuntu 20.04. Ukuhlola kwe-CentOS 6 kunqanyuliwe. Ukuhlolwa kwe-dom0/domU okusekelwe ku-QEMU kwengezwe endaweni eqhubekayo yokuhlanganisa ye-ARM.
Source: opennet.ru