Kata Containers inopa yakachengeteka mudziyo kumhanya ine lightweight virtual michina
Mushure memakore maviri ekuvandudza, iyo Kata Containers 3.0 kuburitswa kweprojekiti yakaburitswa, izvo zvinokura murwi wekuronga midziyo inomhanya kushandisa insulation zvichibva pane yakakwana virtualization michina.
Pamwoyo weKata inguva yekumhanya, iyo inopa kugona kugadzira compact chaiyo michina inomhanya ichishandisa yakazara hypervisor, pane kushandisa echinyakare midziyo inoshandisa yakajairwa Linux kernel uye yakaparadzaniswa uchishandisa mazita emazita nemapoka.
Iko kushandiswa kwemashini chaiwo kunobvumira kuwana yakakwira nhanho yekuchengetedza iyo inodzivirira kubva kurwiswa kunokonzerwa nekushandiswa kwekusagadzikana muLinux kernel.
About Kata Containers
Kata Containers inotarisa pakubatanidza muzvivakwa zvekuzviparadzanisa nevamwe yemidziyo iripo ine kugona kushandisa aya mashini chaiwo kuvandudza kuchengetedzwa kwemidziyo yechinyakare.
Iyo purojekiti inopa michina yekugadzira lightweight virtual machines inoenderana neakasiyana siyana ekuzviparadzanisa nevamwe midziyo, midziyo orchestration mapuratifomu, uye zvakatemwa zvakaita seOCI, CRI, uye CNI. Kubatanidzwa neDocker, Kubernetes, QEMU uye OpenStack zviripo.
Kubatanidzwa necontainer management systemsyakawanikwa kuburikidza nedhizaini inoteedzera manejimendi emidziyo, iyo, kuburikidza neiyo gRPC interface uye yakakosha proxy, inowana iyo control agent pamushini chaiwo. Se hypervisor, kushandiswa kwe Dragonball Sandbox kunotsigirwa (mudziyo-wakagadziridzwa KVM edition) ine QEMU, pamwe neFirecracker uye Cloud Hypervisor. Iyo system nharaunda inosanganisira boot daemon uye mumiririri.
Mumiririri inomhanyisa mushandisi-yakatsanangurwa mudziyo mifananidzo muOCI fomati yeDocker uye CRI yeKubernetes. Kuderedza kushandiswa kwekuyeuka, iyo DAX nzira inoshandiswa uye KSM tekinoroji inoshandiswa kudonhedza nzvimbo dzakafanana dzekurangarira, ichibvumira zviwanikwa zvesystem kuti zvigovane uye akasiyana masisitimu evaenzi kuti abatanidze neyakajairika system nharaunda template.
Zvikuru zvitsva zveKata Containers 3.0
Mune vhezheni itsva imwe nguva yekumhanya inokurudzirwa (runtime-rs), iyo inoumba wrapper padding, yakanyorwa nemutauro weRust (nguva yekumhanya yakapihwa pamusoro yakanyorwa nemutauro weGo). kumhanya-nguva inotsigira OCI, CRI-O uye Containerd, izvo zvinoita kuti ienderane neDocker uye Kubernetes.
Imwe shanduko inomira pachena mune iyi vhezheni itsva yeKata Containers 3.0 ndeyekuti ikozvino zvakare ine GPU rutsigiro. Izvi inosanganisira tsigiro yeVirtual Function I/O (VFIO), iyo inogonesa yakachengeteka, isina-yakasarudzika PCIe mudziyo uye mushandisi nzvimbo controller.
Izvo zvakare zvakasimbiswa izvo yakaitwa tsigiro yekushandura marongero pasina kushandura iyo huru config file nekutsiva zvidhinha mumafaira akasiyana ari mu "config.d/" dhairekitori. Ngura zvikamu zvinoshandisa raibhurari nyowani kushanda nemafaira nzira zvakachengeteka.
Uyewo, Chirongwa chitsva cheKata Containers chabuda. Iyo Yakavanzika Containers, yakavhurika sosi Cloud-Native Computing Foundation (CNCF) sandbox chirongwa. Ichi chigadziko chekuzviparadzanisa mhedzisiro yeKata Containers inosanganisa iyo Yakavimbika Kuurayiwa Kwenzvimbo (TEE) zvivakwa.
Of the dzimwe shanduko izvo zvinomira pachena:
- Iyo nyowani dragonball hypervisor yakavakirwa paKVM uye ngura-vmm yakatsanangurwa.
- Yakawedzera rutsigiro rwecgroup v2.
- virtiofsd component (yakanyorwa muC) yakatsiviwa nevirtiofsd-rs (yakanyorwa muRust).
- Yakawedzera tsigiro yesandbox yekuparadzaniswa kwezvikamu zveQEMU.
- QEMU inoshandisa iyo io_uring API yeasynchronous I/O.
- Tsigiro yeIntel TDX (Trusted Domain Extensions) yeQEMU uye Cloud-hypervisor yaitwa.
- Zvikamu zvakagadziridzwa: QEMU 6.2.0, Cloud-hypervisor 26.0, Firecracker 1.1.0, Linux 5.19.2.
Finalmente kune avo vanofarira chirongwa ichi, iwe unofanirwa kuziva kuti yakagadzirwa neIntel neHyper kusanganisa Clear Containers uye runV matekinoroji.
Iyo kodhi yeprojekiti yakanyorwa muGo uye Rust uye inoburitswa pasi peiyo Apache 2.0 rezinesi. Kuvandudzwa kwechirongwa ichi kunotariswa neboka rinoshanda rakagadzirwa pasi pesangano rakazvimirira reOpenStack Foundation.
Unogona kuziva zvakawanda nezvazvo pa inotevera chinongedzo.