Iqembu labacwaningi abavela eVirginia Polytechnic University (USA), I-Qualcomm ne-Aachen Rhine-Westphalia Technical University (EJalimane) bayathuthuka umnyombo osindayo IHermiTux, ehambelana ne-unikernel paradigm.
IHermiTux iyi kuhloswe ukuvumela ukusebenzisa izinhlelo ngqo kwi-hypervisor ngaphandle kwesidingo sezendlalelo ezingeziwe, enikezela ngokuhambisana kanambambili nezinhlelo zokusebenza zeLinux ezingeni le-ABI.
Ikhodi ye-HermiTux Kubhalwe ngolimi lokuhlela lwe-C futhi kusatshalaliswa ngaphansi kwelayisense le-BSD.
IHermiTux inikeza imvelo yesistimu yokusebenza encane nge-kernel yayo (unikernel), okuyi Isebenzisa izinsiza ezingaphansi kakhulu kunangesikhathi sakha izindawo ngokususelwa ku-kernel ejwayelekile ye-Linux.
Ngalo lokhu ikuvumela ukuthi uqalise ngokushesha izinhlelo zokusebenza ku-hypervisor: isikhathi sokuqala asidluli imizuzwana engu-0,1.
Ekuhlolweni kokusebenza kweHermiTux, Cishe ama-3% asilele ezindaweni ezine-kernel ejwayelekile ye-Linux, ngenxa yokudluliselwa ngaphezulu kwe-I / O ohlangothini lomsingathi.
Ukusetshenziswa kwememori endaweni yokuhlola kwakungu-9 MB, okuyisikhathi esiphindwe kayishumi kunangesikhathi usebenzisa i-Linux kernel (ukusetshenziswa kwe-Docker kwakucishe kube ngu-10MB ngenxa yokusebenzisa i-kernel ejwayelekile nemvelo ye-Host ngaphandle kokusebenzisa ukubona okugcwele).
Mayelana neHermiTux
IHermiTux kugqame njengokuhloselwe ukuba namandla okwenza izinhlelo zokusebenza ezingashintshiwe yenzelwe iLinux, lokhu kwenziwa ngokusekelwa kwefomethi ye-ELF, ukwenziwa kwamakholi wesistimu ye-Linux nokulingiswa kwezinhlelo zefayela elibonakalayo.
Esigabeni samanje sokuthuthuka kweHermiTux, lokhu isebenzisa izingcingo zesistimu ezingama-83. Sekukonke, i-Linux kernel inikela ngezingcingo ezingaphezu kwezingu-350 zohlelo, kepha ingxenye encane kuphela yazo esetshenziswa ezinhlelweni zangempela (ukumboza ama-90% wezinhlelo zokwabiwa okuvamile, kwanele ukusebenzisa izingcingo zesistimu ezingama-200).
Ukwehlisa ukubambezeleka ngenkathi kwenziwa izingcingo zohlelo, kusetshenziswa indlela yokuzikhethela yokuchaza kabusha (ukubhala kabusha) izingcingo zohlelo ukubiza imisebenzi ejwayelekile yekernel.
Okwezinhlelo zokusebenza ezihlobene nezibalo, kungenzeka ukufaka esikhundleni sezitatimende ze-syscall ngezingcingo zomsebenzi kufayela elisebenzisekayo.
Kuzinhlelo zokusebenza ezihlobene ngokunamandla, ukufaka esikhundleni kwenziwa ezingeni elijwayelekile lomtapo wezincwadi.
Futhi, kulungiselelwe amathuluzi okuhlaziya izingcingo zesistimu ezibandakanyeka kumafayili asebenzayo evumela wena ukuthi uqoqe isithombe esincane se-HermiTux esifaka kuphela ikhodi edingekayo ukucubungula kuphela izingcingo zesistimu ezisetshenziswe kuhlelo lokusebenza.
Izici zeHermiTux
IHermiTux isebenzisa i-hypervisor esekwe ku-KVM engasindi elayisha kanambambili we-Linux kanye nongqimba oluncane yohlelo lokusebenza ngaphakathi komshini owodwa wesikhala sekheli elilodwa. Ngesikhathi sokusebenza, izingcingo zesistimu ezenziwa uhlelo lokusebenza zithathwa yi-HermiTux kernel.
Ngokuzithandela, iHermiTux inikeza indlela yokubhala kabusha ukucelwa kwamakholi wesistimu kuzingcingo ezivamile zomsebenzi we-kernel, kunciphisa kakhulu ukubambezeleka kokushaya kwesistimu.
Ngokombono wokuvikelwa, wathi modularity ivumela, futhiEsikhundleni sokuhlunga, izingcingo zesistimu ezingasetshenziswanga (ngokwesibonelo, nge-seccomp) ukuya ku- zikhiphe ngokuphelele ku-kernel.
Uhlelo lokusebenza lusebenza esikhaleni esabiwe sekheli (iHermiTux yakhelwe ukusebenza ngaphezulu kwe-application hypervisor eyodwa).
Ukusekelwa okuyisisekelo kwe-threading (i-Pthreads Embedded) kunikeziwe.
Njengohlelo lwefayela, iMiniFS iyaphakanyiswa, lapho kufakwa khona i-RAM (i-RAM disk) nezinye izinto zezinhlelo zefayela elibonakalayo (/ dev / zero, proc / cpuinfo, njll.).
Isitaki se-TCP / IP sisuselwa kuphrojekthi ye-LWIP, futhi inguqulo eguquliwe yephrojekthi ye-Musl isetshenziswa njengomtapo wezincwadi ojwayelekile C.
IHermiTux ayidingi ukuhlanganiswa kabusha kwezinhlelo futhi ikuvumela ukuthi usebenze womabili amafayela ahlanganisiwe (ngokuhlobene ngokwezibalo nangamandla) kanye nezicelo ngezilimi ezihunyushiwe (iPython, iLua, njll.).