I-Xen yi-hypervisor ebonelela ngokhuseleko lodwa, ulawulo lwezixhobo, umgangatho weziqinisekiso zenkonzo, kunye nokufuduka koomatshini.
Emva konyaka wophuhliso, ukumiliselwa kwe inguqulelo entsha ye-hypervisor yasimahla IXen 4.17, inguqulelo apho ukwenziwa kohlaziyo lwesebe le-Xen 4.17 kuya kuhlala kude kube nguJuni 12, 2024 kunye nokukhutshwa kwezilungiso zobuthathaka kude kube nguDisemba 12, 2025.
Kuyafaneleka ukukhankanya ukuba iinkampani ezifana ne-Amazon, i-Arm, i-Bitdefender, i-Citrix, i-EPAM Systems kunye ne-Xilinx (AMD) ziye zafaka isandla ekuphuhliseni inguqu entsha.
I-Xen 4.17 Iimpawu eziNtsha eziPhambili
Kolu guqulelo lutsha oluvezwayo, kugxininiswe ukuba i ukukwazi ukuchaza uqwalaselo olungatshintshiyo lwe-Xen kwiinkqubo ze-ARM efaka iikhowudi kwangaphambili zonke izibonelelo ezifunekayo ukuqalisa iinkqubo zeendwendwe. zonke izibonelelonjengememori ekwabelwanayo ngayo, amajelo okwazisa ngesiganeko, kunye nesithuba semfumba ye-hypervisor, zabelwe kwangaphambili kwi-hypervisor startup endaweni yokwabiwa ngamandla, nto leyo ephelisa ukusilela okunokwenzeka ngenxa yokunqongophala kwezixhobo zokusebenza.
Ku iinkqubo ezizinzisiweyo ezisekelwe kuyilo lwe-ARM, iphunyeziwe inkxaso yovavanyo (i-tech preview) Kwi-I / O ye-virtualization usebenzisa i-protocol ye-VirtIO, i-virtio-mmio isetyenziselwa ukunxibelelana nesixhobo se-I / O esibonakalayo, esivumele ukuba siqinisekise ukuhambelana noluhlu olubanzi lwezixhobo ze-VirtIO. Sisenokufumana ukuhambelana okuphunyeziweyo kwi-Linux frontend, kunye ne-libxl/xl, imowudi ye-dom0less kunye ne-backends yendawo yomsebenzisi.
Olunye lolona tshintsho lubonakalayo inkxaso ephuculweyo yemowudi ye-dom0less, que ivumela ukuphepha ukuphumeza indawo ye-dom0 xa uqala oomatshini benyani kwinqanaba lokuqala lomncedisi.
Inkqubo ye- ukukwazi ukuchaza amaqela e-CPU (CPUPOOL) kwinqanaba lokuqala (ngomthi wesixhobo), leyo ivumela ukusebenzisa amaqela kuqwalaselo ngaphandle kwe dom0, umzekelo, ukudibanisa iindidi ezahlukeneyo ze-CPU kwiinkqubo ze-ARM ezisekelwe kwi-architecture enkulu.LITTLE, edibanisa ama-cores anamandla, kodwa amandla alambileyo, kunye nemveliso engaphantsi, kodwa i-cores esebenza ngamandla. Ukongeza, i-dom0less ibonelela ngokukwazi ukubophelela i-paravirtualization frontend/backend kwiindwendwe, ikuvumela ukuba uqalise iindwendwe ngezixhobo eziyimfuneko zeparavirtualized.
Kwiinkqubo ze-ARM, imemori ye-virtualization izakhiwo (P2M, ngokomzimba ukuya kumatshini) ngoku zabelwe ukusuka kwimemori pool eyenziweyo xa isizinda senziwe, sivumela ukwahlulwa okungcono phakathi kweendwendwe xa ukusilela okunxulumene nenkumbulo kusenzeka.
Kwiinkqubo x86, amaphepha e-IOMMU ayaxhaswa (i-superpage) kuzo zonke iintlobo zeenkqubo zeendwendwe, ezivumela ukusebenza okwandisiweyo xa uthumela izixhobo, i-PCI, kunye ukongeza inkxaso yeenginginya ukuya kuthi ga kwi-12TB ye-RAM. Kwinqanaba lokuqala, ukukwazi ukuseta iiparamitha ze-cpuid ze dom0 ziphunyeziwe. I-VIRT_SSBD kunye ne-MSR_SPEC_CTRL iiparamitha zicetywa ukulawula ukhuseleko lwenqanaba le-hypervisor kuhlaselo lwe-CPU kwiinkqubo zeendwendwe.
Ye- Olunye utshintsho ezibalaseleyo:
- Ukukhuselwa okongeziweyo kwi-Specter-BHB sesichengeni kwiprosesa yezakhiwo ze-microarchitecture kwiinkqubo ze-ARM.
- Kwiinkqubo ze-ARM, ukukwazi ukuqhuba i-Zephyr OS kwindawo yengcambu ye-Dom0 inikwe.
Ithuba lendibano ye-hypervisor eyahlukileyo (ngaphandle komthi) inikezelwa.
Ngokwahlukileyo, uthutho lwe-VirtIO-Grant luyaphuhliswa, oluhluke kwi-VirtIO-MMIO kwinqanaba eliphezulu lokhuseleko kunye nokukwazi ukuqhuba abalawuli kwi-domain ehlukeneyo ehlukeneyo yabalawuli.
Endaweni yemephu yememori ethe ngqo, i-VirtIO-Grant isebenzisa uguqulelo lweedilesi zendawo yondwendwe kwikhonkco lokuqeshisa, ivumela ukusetyenziswa kweendawo zememori ekwabelwana ngazo kwangaphambili kutshintshiselwano lwedatha phakathi kondwendwe kunye ne-backend ye-VirtIO. , ngaphandle kokunika umva ilungelo yenza imephu yememori. Inkxaso ye-VirtIO-Grant sele iphunyeziwe kwi-Linux kernel, kodwa ayikabandakanywa kwi-QEMU, i-virtio-vhost kunye ne-toolkit (libxl/xl) umva.
Inyathelo le-Hyperlaunch liyaqhubeka nokuphuhlisa ukubonelela ngezixhobo eziguquguqukayo zokwenza ngokwezifiso ukuqaliswa koomatshini benyani ngexesha lokuqalisa inkqubo. Okwangoku, isethi yokuqala yeepatches ilungile, okwenza kube lula ukuchaza imimandla ye-PV kunye nokudlulisa imifanekiso yabo kwi-hypervisor kumthwalo. wena
Gqibela ukuba unomdla wokwazi ngakumbi ngayo, unokubonisana iinkcukacha kwikhonkco elilandelayo.