Ngemuva kweminyaka engaphezu konyaka yokuthuthuka okukhulu, UStéphane Graber, umholi wephrojekthi ye-Linux Containers kanye nomdidiyeli we-LXC, yethule i-IncuOS, ukusatshalaliswa kwe-Linux okusha okuklanyelwe ngokukhethekile ukuhlinzeka ngesisekelo esiqinile, esivikelekile, futhi esingaguquki okungase kusetshenziswe kuso i-Incus, imfoloko ye-LXD.
I-IncusOS iyi-a isistimu yokusebenza engaguquleki eklanyelwe ngokukhethekile ukusebenzisa i-Incus Ngokuphepha nangokuthembekile. Isebenzisa izici zokuphepha zesimanje ukuze inikeze umuzwa wokuqalisa ovikelekile kanye nokubethela okugcwele kwediski okungaphazanyiswa.
Isakhiwo esingaguquki nesivikelekile
Enye yezinsika ze-IncusOS yiyona umklamo ongaguquki, ngoba iyisistimu yokusebenza Iqukethe izingxenye ezimbili ezizimele: eyodwa esebenzayo futhi enye ihlose ukuthola izibuyekezo, okuyinto Ivumela indlela yokuthuthukisa ye-athomu ye-A/B. Le ndlela iqinisekisa ukuzinza kwesistimu futhi yenza kube lula ukuhlehla uma kwenzeka iphutha.
Ukuphepha nakho kudlala indima ebalulekile, kusukela I-IncusOS isebenzisa i-UEFI Secure Boot, ukubethela okugcwele kwediski nge-LUKS, futhi uvikele ukhiye wokulondoloza ku-TPM 2.0. Le sethi iqinisekisa ukuzizwisa okuthembekile kokuqaliswa kanye nokuvikelwa okuphelele ekuphazanyisweni noma ekufinyeleleni okungagunyaziwe.
Oguqukweni olukhulu ukusuka ekusatshalalisweni kwendabuko, I-IncusOS ayinikezi ukufinyelela kwekhonsoli yasendaweni noma okukudefuthi ayivumeli ukuphathwa nge-SSH. Yonke imisebenzi yokumisaukuphatha nokugada Zenziwa ngokukhethekile nge-REST API kusuka ku-Incus, ngokufakazela ubuqiniso ngezitifiketi ze-TLS noma ze-OIDC (OpenID Connect).
Ngale ndlela, Wonke amaseva asebenzisa i-IncusOS ayafana kancane kancane, ukuqeda ukungezwani phakathi kwezindawo kanye nokwenza lula ukukaleka noma ukusatshalaliswa kabusha okukhulu kwezingqalasizinda.
Ukuhlanganiswa namathuluzi e-systemd nawesimanje
Ukuthuthukiswa kwe-IncusOS kusebenzisa kakhulu i-systemd ecosystem, okuhlanganisa namathuluzi afana nalawa:
- mkosi, wokwenza isithombe sohlelo.
- systemd-sysext, ekuvumela ukuthi ufake izinhlelo zokusebenza njengezandiso zesistimu embondelayo usebenzisa i-OverlayFS.
- systemd-sysupdate, ukuphatha izibuyekezo zesistimu ye-athomu.
- Indawo eyisisekelo yesistimu ifakwe kumodi yokufunda kuphela, okuqinisekisa ukungaguquki kanye nokunciphisa ingcuphe yenkohlakalo noma ukuguqulwa okungafuneki.
Isitoreji esithuthukisiwe namakhono okuxhumana
Incusos Inikeza ukwesekwa okuthuthukisiwe kokugcinwa kwebhizinisi nokuxhumana. Ngokuzenzakalelayo, idala ichibi lendawo le-ZFS futhi ikuvumela ukuthi ulungiselele izakhiwo eziyinkimbinkimbi nge-LVM, Ceph, NVMe phezu kwe-TCP, iSCSI, neFiber Channel.
Endaweni yamanethiwekhi, Isekela ama-VLAN azenzakalelayo kanye nokuhlanganisa ukuhlanganisa, i-LLDP, i-OVS/OVN, i-NTP, i-syslog ekude, ne-VPN ehlanganiswe njenge-Tailscale (ngokusekelwa kwe-Netbird esikhathini esizayo).
Izibuyekezo nokugcinwa okuqhubekayo
Le phrojekthi Igcina iziteshi ezimbili zokubuyekeza:
- Izinzile, ezithola izibuyekezo zeviki zonke ngokulungiswa kwe-kernel namapeshi okuphepha.
- Ukuhlola, okubuyekezwa cishe nsuku zonke ngentuthuko yakamuva nezici zokuhlola.
Amasistimu e-IncuOS Bahlola ngokuzenzakalela ukutholakala kwezibuyekezo njalo ngamahora ayisithuphaUkusebenzisa ama-patches ngaphandle kokuthinta izimo ezisebenzayo. Ukwengeza, abalawuli bangenza ngendlela oyifisayo imvamisa yokubuyekeza noma bachaze izikhathi zokulungisa ezihleliwe.
Ukufakwa nokusetshenziswa okwenziwe lula
Incusos Ayisebenzisi isifaki esisebenzisanayongoba esikhundleni, i Abasebenzisi kufanele benze isithombe sangokwezifiso besebenzisa isihleli se-inthanethi, lapho konke ukufakwa kanye nemingcele yokumisa yokuqala (imbewu) kuchazwa khona, okuhlanganisa nezitifiketi, inethiwekhi nokugcina.
Lesi sithombe Ingasetshenziswa kukho kokubili ihadiwe yesimanje ngokomzimba kanye nezindawo ezibonakalayo, kufaka phakathi i-libvirt, i-Proxmox, i-VirtualBox, ne-VMware.
Njengoba inguqulo ezinzile manje isitholakala, ithimba labathuthukisi lihlela ukuqhubeka nokwengeza izici, ezifana nokuhambisana kwe-Linstor kwesitoreji esabalalisiwe kanye nesixhumi esibonakalayo sewebhu esithuthukisiwe esizovumela ukusetshenziswa nokuphathwa kwesistimu okuphelele ngaphandle kwesidingo sezitifiketi ze-TLS.
Okokugcina, kufanelekile ukusho ukuthi lolu hlelo futhiIsatshalaliswa ngaphansi kwelayisensi ye-Apache 2.0.Yazalwa ngokusekelwa kwephrojekthi ye-Linux Containers. futhi ihlose ukuguqula ukuphathwa kweseva okumaphakathi ngokuthuthukiswa kwe-athomu kanye nendawo enokwethenjelwa kakhulu.
Incusos Iyatholakala ku-x86_64 kanye ne-ARM64 yezakhiwo, futhi Yakhelwe phezu kwesisekelo esincane se-Debian 13, kanye ne-Linux kernel ethuthukisiwe evela kumakhosombe e-Zabbly, umthombo ohlanganisa ukuthuthukiswa kokusebenza okuphezulu ezindaweni zokuqukatha.
Uma ungathanda ukwazi okwengeziwe ngakho, ungathintana nemininingwane ku isixhumanisi esilandelayo.