Kwantenan Kata suna ba da ingantaccen lokacin aiki tare da injuna masu nauyi masu nauyi
Bayan shekaru biyu na ci gaba, An buga sakin aikin Kata Containers 3.0, wanda ke tasowa tari don tsara kwantena masu gudana ta amfani da rufi dangane da cikakkun hanyoyin kyautatawa.
A tsakiyar Kata shine lokacin aiki, wanda ke ba da damar ƙirƙirar injunan ƙirar ƙira waɗanda ke gudana ta amfani da cikakken hypervisor, maimakon yin amfani da kwantena na gargajiya waɗanda ke amfani da kwaya ta Linux ta gama gari kuma ana ware su ta amfani da wuraren suna da ƙungiyoyi.
Amfani da injunan kama-da-wane yana ba da damar cimma babban matakin tsaro wanda ke ba da kariya daga hare-haren da ake amfani da su a cikin kernel na Linux.
Game da Kata Kwantena
Kata Kwantena yana mai da hankali kan haɗa kai cikin abubuwan keɓancewa na kwantena da ake da su tare da ikon yin amfani da waɗannan injunan injina don haɓaka kariyar kwantena na gargajiya.
Wannan aikin yana ba da hanyoyin yin injunan kama-da-wane masu nauyi masu dacewa da tsarin keɓe daban-daban kwantena, dandamali na ƙungiyar kade-kade, da ƙayyadaddun bayanai kamar OCI, CRI, da CNI. Haɗin kai tare da Docker, Kubernetes, QEMU da OpenStack suna samuwa.
Haɗuwa tare da tsarin sarrafa kwantenaAna samun wannan ta hanyar sinadari mai kwaikwaya sarrafa kwantena, wanda, ta hanyar haɗin gRPC da wakili na musamman, yana samun dama ga wakilin sarrafawa akan na'ura mai mahimmanci. A matsayin hypervisor, ana goyan bayan amfani da Sandbox Sandball (KVM ingantaccen akwati) tare da QEMU, haka kuma Firecracker da Cloud Hypervisor. Yanayin tsarin ya haɗa da boot daemon da wakili.
Wakilin yana gudanar da hotunan kwantena da aka ayyana mai amfani a cikin tsarin OCI don Docker da CRI don Kubernetes. Don rage yawan ƙwaƙwalwar ajiya, ana amfani da tsarin DAX kuma ana amfani da fasahar KSM don ƙaddamar da wuraren ƙwaƙwalwar ajiya iri ɗaya, ba da damar raba albarkatun tsarin runduna da tsarin baƙo daban-daban don haɗawa tare da samfurin yanayi na gama gari.
Babban sabbin litattafan Kata Kwantena 3.0
A cikin sabon sigar an gabatar da wani lokacin gudu (runtime-rs), wanda ke samar da mashin ɗin, wanda aka rubuta cikin yaren Tsatsa (lokacin aiki da aka bayar a sama an rubuta shi cikin yaren Go). lokacin gudu yana goyan bayan OCI, CRI-O da Kwantena, wanda ya sa ya dace da Docker da Kubernetes.
Wani canjin da ya yi fice a cikin wannan sabon sigar Kata Containers 3.0 shine wancan yanzu kuma yana da tallafin GPU. Wannan ya haɗa da tallafi don Virtual Aiki I/O (VFIO), wanda ke ba da damar aminci, na'urar PCIe mara gata da masu kula da sararin samaniya.
An kuma haskaka cewa aiwatar da tallafi don canza saitunan ba tare da canza babban fayil ɗin saiti ba ta hanyar maye gurbin tubalan a cikin fayiloli daban-daban da ke cikin "config.d/" directory. Abubuwan tsatsa suna amfani da sabon ɗakin karatu don aiki tare da hanyoyin fayil lafiya.
Har ila yau, Wani sabon aikin kwantena na Kata ya fito. Kwantenan Sirri ne, buɗaɗɗen tushe Cloud-Native Computing Foundation (CNCF) aikin akwatin sandbox. Sakamakon keɓewar kwantena na Kata Containers yana haɗa kayan aikin Amintattun Kisa na Muhalli (TEE).
Na wasu canje-canje cewa tsaya a waje:
- An ƙaddamar da sabon hawan hawan dragon wanda ya dogara da KVM da tsatsa-vmm.
- Ƙara tallafi don ƙungiyar v2.
- bangaren virtiofsd (an rubuta a cikin C) wanda aka maye gurbinsa da virtiofsd-rs (an rubuta cikin Tsatsa).
- Ƙara tallafi don keɓewar akwatin sandbox na abubuwan QEMU.
- QEMU tana amfani da io_uring API don I/O asynchronous.
- An aiwatar da goyan bayan Intel TDX (Amintacce Domain Extensions) don QEMU da Cloud-hypervisor.
- Abubuwan da aka sabunta: QEMU 6.2.0, Cloud-hypervisor 26.0, Firecracker 1.1.0, Linux 5.19.2.
Finalmente ga wadanda suke sha'awar aikin, ya kamata ku sani cewa Intel da Hyper ne suka kirkiro shi tare da Clear Containers da fasahar runV.
An rubuta lambar aikin a cikin Go and Rust kuma an sake shi ƙarƙashin lasisin Apache 2.0. Ƙungiya mai aiki da aka kirkira a ƙarƙashin kulawar ƙungiyar OpenStack Foundation ce ke kula da ci gaban aikin.
Kuna iya samun ƙarin bayani game da shi a bin hanyar haɗi.