ICanonical ikhiphe ukukhishwa kwe- inguqulo entsha yamathuluzi akho yokuhlela ukusebenza kweziqukathi ezifakiwe I-LXC 4.0, umphathi wesitsha I-LXD 4.0 kanye ne-FS LXCFS engu-4.0 ukulingisa kuziqukathi / i-proc, / ama-sys nama-cgroupfs we-virtualized wokusabalalisa ngaphandle kokusekelwa kwezikhala zamagama eqembu.
Kulabo abangawazi la mathuluzi, kufanele bakwazi lokho I-LXC yisikhathi sokusebenza sokusebenzisa zombili iziqukathi zohlelo neziqukathi zohlelo lokusebenza ngalunye (OCI). I-LXC ifaka phakathi umtapo wezincwadi we-liblxc, iqoqo lezinsiza, izifanekiso zokwakha iziqukathi, kanye nesethi yamafolda ezilimi ezahlukahlukene zokuhlela.
I-LXD iyi-plug-in ye-LXC, i-CRIU ne-QEMU yini esetshenziswayo ukuphatha ngaphakathi iziqukathi nemishini ebonakalayo kuseva eyodwa noma amaningi. Uma i-LXC iyithuluzi lamathuluzi elisezingeni eliphansi lokukhohlisa ezingeni leziqukathi ngazinye, i-LXD isetshenziswa njengenqubo engemuva eyamukela izicelo ngenethiwekhi nge-REST API futhi ikuvumela ukuthi udale ukumenyezelwa okungasabalali okwenziwe kuqoqo lamaseva amaningi.
Isekela ukugcinwa kwangemuva kokugcina okuhlukahlukene (isihlahla somqondisi, i-ZFS, i-Btrfs, i-LVM), izifinyezo ezinokusikwa kombuso, ukufuduka bukhoma kweziqukathi ezisebenza zisuka komunye umshini ziye komunye, namathuluzi wokuhlela isitoreji sesithombe Ikhodi ye-LXD ibhalwe ku-Go futhi isatshalaliswa ngaphansi kwelayisense le-Apache 2.0.
Yini okusha ku-LXC 4.0?
Kule nguqulo entsha, isilawuli sokusebenza neqembu sibhalwe kabusha ngokuphelele, Ngaphandle kwalokho kungezwe ukusekelwa kwesigaba esihlangene seqembu (cgroup2), ingeze ukusebenza kwesilawuli sefriji ongayeka ukusebenza kuso neqoqo futhi ukhulule okwesikhashana ezinye izinsizakusebenza (i-CPU, i-O / O futhi mhlawumbe nenkumbulo) ukwenza eminye imisebenzi.
Futhi kungezwe ukusekelwa kohlelo olungaphansi lwe-kernel "pidfd" yakhelwe ukuphatha isimo sokusetshenziswa kabusha kwe-PID (i-pidfd ijoyina inqubo ethile futhi ayiguquki, ngenkathi i-PID ingaxhunyaniswa nenye inqubo ngemuva kokuphothula inqubo yamanje ehambisana nale PID)
Futhi, ingqalasizinda yaqaliswa ukuvimba izingcingo zohlelo futhi ukudala nokususa kuthuthukisiwe kumadivayisi enethiwekhi, kanye nokuhamba kwawo phakathi kwezikhala zamagama zesistimu yenethiwekhi.
Futhi amandla okuhambisa amadivayisi wenethiwekhi angenantambo (nl80211) kuya eziqukethweni asetshenzisiwe.
Yini okusha ku-LXD 4.0?
Ukuhlukanisa amaseva we-LXD, kuphakanyiswe umqondo wephrojekthi owenza lula ukuphathwa kwamaqembu ezitsha nemishini ebonakalayo. Iphrojekthi ngayinye ingafaka isethi yayo yeziqukathi, imishini ebonakalayo, izithombe, amaphrofayli, kanye nokwahlukaniswa kokugcina. Ngokuphathelene namaphrojekthi, ungasetha imingcele yakho futhi ushintshe izilungiselelo.
I- ukusekelwa kokwethula hhayi iziqukathi kuphela, kepha nemishini ebonakalayo, futhi ukusekelwa kokubamba kohlelo kubiza iziqukathi, kanye nokusekelwa kwama-shiftfs, i-FS ebonakalayo yokwabela amaphuzu wokukhweza kusikhala segama lomsebenzisi (i-namespace yomsebenzisi).
Kungezwe amandla okulungisa ikheli le-MAC nokunquma ikheli lomthombo le-NAT kanye ne-API engeziwe yokuphatha ukubopha ku-DHCP.
Futhi okuhlinzekwe kulokhu kukhishwa okusha ukwenziwa okuzenzakalelayo kwezifinyezo zezindawo nezindawo zokugcina ezinekhono lokusetha isikhathi sokuphila kwesifinyezo.
Kwezinye izinguquko ezishiwo esikhangisweni:
- Kwenziwe isipele semvelo nokululama.
- Kungezwe i-API yokuqapha isimo senethiwekhi (imininingwane yenethiwekhi ye-lxc).
- Izinhlobo ezintsha ze- "ipvlan" ne- "routed" network adapters ziyaphakanyiswa.
- Kungezwe i-backend ukusebenzisa i-CephFS based storages.
- Amaqoqo asekela ukuphindaphindeka kwesithombe nokulungiselelwa kokwakhiwa okuningi.
- Kungezwe i-Role based Access Control (RBAC).
- Kungezwe ukusekelwa kweCGroup2.
- Kungezwe ukusekelwa kwamaNftables.
Okokugcina uma ufuna ukwazi kabanzi ngayo mayelana nezindaba zale nguqulo entsha, ungabheka imininingwane Kulesi sixhumanisi esilandelayo.