Ngemuva konyaka wokuthuthuka, i-hypervisor yamahhala i-Xen 4.17 ikhishwe. Izinkampani ezifana ne-Amazon, Arm, Bitdefender, Citrix, EPAM Systems kanye ne-Xilinx (AMD) zibambe iqhaza ekuthuthukisweni kokukhishwa okusha. Ukukhiqizwa kwezibuyekezo zegatsha le-Xen 4.17 kuzohlala kuze kube uJuni 12, 2024, kanye nokushicilelwa kokulungiswa kobungozi kuze kube umhla ka-12 Disemba 2025.
Izinguquko ezibalulekile ku-Xen 4.17:
- Ukuthobelana ngokwengxenye kunikezwa nezimfuneko zokuthuthukiswa kwezinhlelo eziphephile nezithembekile ngolimi C, ezakhiwe ngezicaciso ze-MISRA-C ezisetshenziswe ekudaleni amasistimu abalulekile emishini. I-Xen isebenzisa ngokusemthethweni iziqondiso ezi-4 kanye nemithetho engu-24 ye-MISRA-C (emithethweni engu-143 neziqondiso ezingu-16), futhi ihlanganisa i-MISRA-C static analyzer ezinqubweni zokuhlanganisa, eziqinisekisa ukuthotshelwa kwezidingo zokucaciswa.
- Inikeza ikhono lokuchaza ukucushwa kwe-Xen okumile kumasistimu e-ARM, okufaka amakhodi kanzima zonke izinsiza ezidingekayo ukuze uqalise izihambeli kusengaphambili. Zonke izinsiza, njengememori eyabiwe, iziteshi zesaziso somcimbi, kanye nesikhala senqwaba ye-hypervisor, zabelwa ngaphambili ekuqaleni kwe-hypervisor esikhundleni sokwabiwa ngamandla, zisusa ukwehluleka okungenzeka ngenxa yokushoda kwensiza phakathi nokusebenza.
- Kuzinhlelo ezishumekiwe ezisuselwe ekwakhiweni kwe-ARM, usekelo lokuhlola (lokuhlola kuqala kobuchwepheshe) lwe-virtualization ye-I/O kusetshenziswa izivumelwano ze-VirtIO selusetshenzisiwe. Ukuthutha kwe-virtio-mmio kusetshenziselwa ukushintshanisa idatha ngedivayisi ye-virtual I/O, eqinisekisa ukuhambisana nezinhlobonhlobo zamadivayisi we-VirtIO. Usekelo lwe-Linux frontend, ikhithi yamathuluzi (i-libxl/xl), imodi ye-dom0less nama-backend asebenza endaweni yomsebenzisi sekwenziwe (i-virtio-disk, i-virtio-net, i-i2c ne-gpio backends ihloliwe).
- Usekelo oluthuthukisiwe lwemodi ye-dom0less, ekuvumela ukuthi ugweme ukusebenzisa indawo ye-dom0 lapho uqala imishini ebonakalayo ekuqaleni kwe-server boot. Kungenzeka ukuchaza amachibi e-CPU (CPUPOOL) esigabeni sokuqalisa (ngesihlahla sedivayisi), okukuvumela ukuthi usebenzise amachibi ekucushweni ngaphandle kwe-dom0, isibonelo, ukuhlanganisa izinhlobo ezahlukene zama-CPU cores kumasistimu e-ARM asekelwe ku-big.LITTLE izakhiwo, ukuhlanganisa ama-cores anamandla, kodwa adla amandla, nama-cores akhiqiza kancane kodwa awonga amandla. Ukwengeza, i-dom0less inikeza ikhono lokuhlanganisa i-paravirtualization frontend/backend kumasistimu wezihambeli, okukuvumela ukuthi uqalise amasistimu wezihambeli ngamadivayisi adingekayo e-paravirtualized.
- Kumasistimu e-ARM, izakhiwo zememori ezibukwayo (P2M, Physical to Machine) manje zabelwa kusukela kumemori pool edalwe lapho isizinda sidalwa, okuvumela ukuhlukaniswa okungcono phakathi kwezihambeli lapho ukwehluleka okuhlobene nenkumbulo kwenzeka.
- Kuzinhlelo ze-ARM, ukuvikela ngokumelene nokuba sengozini kwe-Specter-BHB ku-processor microarchitectural structures yengeziwe.
- Kumasistimu e-ARM, kuyenzeka ukusebenzisa isistimu yokusebenza ye-Zephyr endaweni yempande ye-Dom0.
- Amathuba omhlangano ohlukile (ongaphandle kwesihlahla) we-hypervisor unikeziwe.
- Kuzinhlelo ze-x86, amakhasi amakhulu e-IOMMU (ikhasi elikhulu) asekelwa kuzo zonke izinhlobo zamasistimu ezivakashi, okuvumela ukukhuphuka kokuphuma komsebenzi lapho udlulisela amadivayisi we-PCI. Usekelo olungeziwe lwabasingathi abahlonyiswe kufika ku-12 TB we-RAM. Esigabeni sokuqalisa, ikhono lokusetha imingcele ye-cpuid ye-dom0 seliqalisiwe. Ukuze ulawule izinyathelo zokuvikela ezisetshenziswa kuleveli ye-hypervisor ngokumelene nokuhlaselwa kwe-CPU kumasistimu wezihambeli, amapharamitha angu-VIRT_SSBD kanye ne-MSR_SPEC_CTRL ayahlongozwa.
- Ukuthutha kwe-VirtIO-Grant kuthuthukiswa ngokuhlukana, okuhlukile ku-VirtIO-MMIO ngezinga eliphezulu lokuphepha kanye nekhono lokuqhuba izibambi esizindeni esihlukile esizimele sabashayeli. I-VirtIO-Grant, esikhundleni semephu yenkumbulo eqondile, isebenzisa ukuhunyushwa kwamakheli aphathekayo ohlelo lwezihambeli kuzixhumanisi zesibonelelo, okuvumela ukusetshenziswa kwezindawo okuvunyelwene ngazo ngaphambili zenkumbulo eyabiwe ngokushintshaniswa kwedatha phakathi kwesistimu yesivakashi ne-VirtIO backend, ngaphandle kokunikeza. amalungelo angemuva okwenza imephu yememori. Usekelo lwe-VirtIO-Grant seluvele lusetshenziswa ku-Linux kernel, kodwa alukafakwa kuma-backend e-QEMU, ku-virtio-vhost naku-toolkit (libxl/xl).
- Isinyathelo se-Hyperlaunch siyaqhubeka nokuthuthuka, okuhloswe ngaso ukuhlinzeka ngamathuluzi aguquguqukayo okumisa ukwethulwa kwemishini ebonakalayo ngesikhathi sokuqalisa uhlelo. Njengamanje, isethi yokuqala yama-patches isivele ilungisiwe evumela ukuthi ukwazi ukubona izizinda ze-PV futhi udlulisele izithombe zazo ku-hypervisor lapho ulayisha. Yonke into edingekayo ukuze kusetshenziswe izizinda ezihambisana ne-paravirtualized nayo isiqaliwe, okuhlanganisa izingxenye ze-Xenstore zabashayeli be-PV. Uma ama-patches amukelwa, umsebenzi uzoqala ukunika amandla ukusekelwa kwamadivayisi we-PVH ne-HVM, kanye nokuqaliswa kwesizinda esihlukile se-domB (isizinda somakhi), esilungele ukuhlela ibhuthi elinganisiwe, eqinisekisa ukufaneleka kwazo zonke izingxenye ezilayishiwe.
- Umsebenzi uyaqhubeka ekwakheni ichweba le-Xen le-RISC-V yezakhiwo.
Source: opennet.ru