I-Canonical ikhuphe ukukhutshwa kwe Inguqulelo entsha yezixhobo zakho yokulungiselela ukusebenza kwezikhongozeli ezifakwe ngaphakathi LXC 4.0, umphathi wesikhongozeli I-LXD 4.0 kunye ne-FS LXCFS eyi-4.0 yokulingisa kwi-virtualised / proc, / sys kunye neecgroupfs izikhongozeli zonikezelo ngaphandle kwenkxaso yendawo yamagama eqela.
Kulabo abangazaziyo ezi zixhobo, kufuneka bayazi loo nto I-LXC lixesha lokubaleka lokuqhuba zombini izikhongozeli zenkqubo kunye nezikhongozeli zesicelo ngasinye (OCI). I-LXC ibandakanya ilayibrari ye-liblxc, iseti yezixhobo, iitemplate zokwenza izikhongozeli, kunye neseti yeefolda kwiilwimi ezahlukeneyo zenkqubo.
I-LXD yiplagi-ye-LXC, i-CRIU kunye ne-QEMU yintoni esetyenziswayo ukulawula izikhongozeli kunye noomatshini ababonakalayo kwiseva enye okanye ezingaphezulu. Ukuba i-LXC sisixhobo esikwinqanaba elisezantsi lokusebenzisa inqanaba lesikhongozeli ngasinye, i-LXD iphunyezwa njengenkqubo yangasemva eyamkela izicelo kwinethiwekhi nge-REST API kwaye ikuvumela ukuba wenze ubumbeko olunokumiliselwa olwenziwe kwiqela leeseva ezininzi.
Ixhasa ukubuyela umva kokugcina (umthi wesikhombisi, iZFS, iBtrfs, i-LVM), izifinyezo ezinekhefu likarhulumente, ukuhamba ngokuhamba kwezikhongozelo zomatshini ukusuka komnye umatshini ukuya komnye, kunye nezixhobo zokucwangcisa ukugcinwa kwemifanekiso. Ikhowudi ye-LXD ibhaliwe kwi-Go kwaye isasazwa phantsi kwelayisensi ye-Apache 2.0.
Yintoni entsha kwi-LXC 4.0?
Kule nguqulo intsha, isilawuli sokusebenza neqela liphinde labhalwa ngokutsha, Ngaphandle koko yongeze inkxaso kubumbano lweqela elihlangeneyo (cgroup2), yongeza ukusebenza kwesikhenkcezisi onokuthi uyeke ukusebenza kuso kunye nokukhulula okwethutyana ezinye izixhobo (i-CPU, i-O / O kunye nenkumbulo) ukwenza eminye imisebenzi.
Kwakhona yongezwe inkxaso ye-kernel subsystem "pidfd" yenzelwe ukuphatha imeko yokusetyenziswa kwakhona kwe-PID (i-pidfd ijoyina inkqubo ethile kwaye ayitshintshi, ngelixa i-PID inokudityaniswa kwenye inkqubo emva kokugqiba inkqubo yangoku enxulumene nale PID)
Kwakhona, Iziseko zophuhliso zamiliselwa ukunqanda iifowuni zenkqubo indalo kunye nokucinywa kuphuculwe kwizixhobo zenethiwekhi, kunye nokuhamba kwazo phakathi kwendawo yamagama yenkqubo esezantsi yenethiwekhi.
Kwaye ukubanakho ukuhambisa izixhobo zenethiwekhi ngaphandle kwamacingo (nl80211) kwizikhongozeli kwenziwa.
Yintoni entsha kwi-LXD 4.0?
Ukwahlulahlula iiseva ze-LXD, icebo leprojekthi licetyisiwe elenza lula ukulawulwa kwamaqela ezinto kunye noomatshini ababonakalayo. Iprojekthi nganye inokubandakanya iseti yayo yezikhongozeli, oomatshini ababonakalayo, imifanekiso, iiprofayili, kunye neesahlulelo zokugcina. Ngokunxulumene neeprojekthi, unokuseta izithintelo zakho kwaye utshintshe iisetingi.
Inkqubo ye- Inkxaso yokwazisa kungekuphela izikhongozeli, kodwa kunye noomatshini ababonakalayo, kunye nenkxaso yokuthintela inkqubo yokufowuna izikhongozeli, kunye nenkxaso yokutshintsha, i-FS ebonakalayo yokwabela amanqaku kumgama wegama lomsebenzisi (indawo yegama lomsebenzisi).
Yongeze amandla okumisela idilesi ye-MAC kunye nokuchonga idilesi yemithombo ye-NAT kunye ne-API eyongeziweyo yokulawula ukubopha kwi-DHCP.
Ikwabonelelwe kolu hlobo lutsha kuyilo oluzenzekelayo lweziqendu zemeko-bume kunye namacandelo okugcina anokukwazi ukuseta ixesha lokuphila kwesikripthi.
Olunye utshintsho olukhankanyiweyo kwintengiso:
- Ukuphunyezwa kokugcinwa kwendalo kunye nokufumana kwakhona.
- Yongezwe i-API yokujonga imeko yenethiwekhi (ulwazi lwenethiwekhi ye-lxc).
- Iindidi ezintsha ze "ipvlan" kunye ne "routed" network adapters ziyacetyiswa.
- Yongeze umva ekusebenziseni isitora esisekwe kwi-CephFS.
- Amacandelo axhasa ukuphindaphindeka kwemifanekiso kunye nolwakhiwo oluninzi loyilo.
- Ukongezwa koLawulo lokuFikelela okuSekwe kwiNdima (RBAC).
- Yongezwe inkxaso yeCGroup2.
- Inkxaso yeNftables yongezwa.
Gqibela ukuba ufuna ukwazi ngakumbi ngayo malunga neendaba zolu hlobo lutsha, unokujonga iinkcukacha Kule khonkco ilandelayo.