ALP ine chinangwa chekuda hushoma huwandu hwekupindira hunogoneka
SUSE nguva pfupi yadarika akaparura chirongwa che kutanga kwechitatu prototype yeALP "Piz Bernina" (Inochinjika Linux Platform), yakaiswa sekuenderera mberi kwekusimudzira kweSUSE Linux Enterprise kugovera.
Musiyano wakakosha pakati peALP kupatsanurwa kweiyo musimboti framework yekugovera muzvikamu zviviri: "host operating system" yakarerutswa kuti imhanye pamusoro pe Hardware uye yekutsigira application layer yakatarisana nekumhanya mumidziyo nemichina chaiyo.
ALP yakatanga kugadzirwa uchishandisa yakavhurika yekuvandudza maitiro, apo yepakati inovaka uye bvunzo mhinduro inowanikwa pachena kune wese munhu.
Yechitatu prototype inosanganisira mapazi maviri akasiyanas, iyo mune yazvino fomu vari pedyo maererano nekuzadza, asi mune ramangwana vanozosimudzira vakananga kunzvimbo dzakasiyana dzekushandisa uye vanozosiyana mumasevhisi anopihwa. Zvemiyedzo, Bedrock bazi rinowanikwa, iyo inotarisa pakushandiswa mumasevhisi masisitimu, uye Micro bazi, rakagadzirirwa kuvaka gore (gore-native) masisitimu uye inomhanya microservices.
The architecture ye ALP yakavakirwa pakusimudzira pane "host OS" nharaunda, hushoma hunodiwa kutsigira nekudzora midziyo. Zvinonzi ese userland application uye zvikamu hazvimhanye munzvimbo yakasanganiswa, asi mumidziyo yakasiyana kana michina chaiyo inomhanya pamusoro pe "host operating system" uye yakaparadzaniswa kubva kune imwe neimwe. Iri sangano rinobvumira vashandisi kutarisa pamashandisirwo uye abstract workflows yehardware uye yakaderera-level system nharaunda.
Chigadzirwa SLE Micro, yakavakirwa pakuvandudzwa kweiyo MicroOS chirongwa, inoshandiswa sehwaro ye "host operating system". Kune yepakati manejimendi, iyo Munyu (yakafanoiswa) uye Ansible (inosarudzika) masisitimu ekugadzirisa anopihwa. Iyo Podman neK3s (Kubernetes) maturusi ezvishandiso aripo ekushandisa ega midziyo. Containerized system zvikamu zvinosanganisira yast2, podman, k3s, cockpit, GDM (GNOME Display Manager), uye KVM.
Nezve maficha emamiriro ehurongwa, kutaurwa kunoitwa kushandiswa kweiyo Full Disk Encryption (FDE) nekugona kuchengeta makiyi muTPM. The root partition yakasungirirwa kuverenga-chete uye haishanduki panguva yekushanda. Zvakatipoteredza inoshandisa iyo atomic update yekuisa michina. Kusiyana neostree uye snap based atomic updates anoshandiswa muFedora neUbuntu, muALP, pachinzvimbo chekugadzira akaparadzana maatomu emifananidzo uye kuita mamwe maturakiti ekutakura, yakajairika package maneja uye in-system snapshot mechanism inoshandiswa.
Kunze kwaizvozvo, live zvigamba zvinotsigirwa kugadzirisa iyo linux kernel pasina kutangazve kana kumisa basa. Kuti uchengetedze kuponeswa kwehurongwa (kuzvidzoresa), iyo yekupedzisira yakagadzikana inogadziriswa neBtrfs snapshots (kana anomalies akaonekwa mushure mekushandisa zvigadziriso kana kushandura marongero, sisitimu inoendeswa otomatiki kune yapfuura nyika).
Of the shanduko huru mune yechitatu prototype ALP «Piz Bernina»zvinotevera zvinobuda pachena:
- Ipa Yakavimbika Kuuraya Nzvimbo yezvakavanzika komputa, ichikubvumidza iwe kuti uchengetedze zvakachengeteka data uchishandisa yega, encryption, uye chaiwo muchina.
- Hardware uye runtime atestation application kuratidza kuvimbika kwekuita mabasa.
- Nheyo yeChakavanzika Virtual Machine (CVM) rutsigiro.
- Batanidza tsigiro yeNeuVector papuratifomu kuti uone kuchengetedzwa kwemudziyo, kuona kuvepo kwezvinhu zviri munjodzi, uye kuona chiitiko chakaipa.
- Tsigiro ye s390x yekuvaka mukuwedzera kune x86_64 uye aarch64.
- Kugona kugonesa Yakazara Disk Encryption (FDE) padanho rekuisa ine kiyi yekuchengetedza muTPMv2 uye pasina chikonzero chekuisa passphrase panguva yekutanga boot. Yakaenzana rutsigiro kune ese akajairwa partition encryption uye LVM (Logical Volume Manager) zvikamu.
Pakupedzisira, Kune avo vanoda kudzidza zvakawanda nezvazvo, unogona kutarisa ruzivo pa chinotevera chinongedzo.
Nepo kune avo vanofarira kukwanisa kuyedza sisitimu, ivo vanofanirwa kuziva kuti izvo zvinovaka zvakagadzirira iyo x86_64 architecture ( Bedrock , Micro). Zvakare, kuvaka zvinyorwa zviripo (Bedrock , Micro ) yeAarch64, PPC64le uye s390x zvivakwa.