NestOS for Container (NFC) integrates rpm-ostree support, ignition configuration, and other technologies. It adopts a dual-root file system and the design of atomic updates, and uses nestos-assembler to quickly integrate and build. It is also adapted to platforms such as K8S and openStack to optimize the noise floor of container operation, so that the system has the ability to build clusters very conveniently, and can run large-scale containerized workloads more securely.
Deploying on Virtualization Platforms - VMware
①. Rpm-ostree usage ②. Zincati automatic update ③. NestOS customization ④. Example of ignition configuration ⑤. Container image update usage ⑥. Detailed explanation of more functional features
NestOS For Virt (NFV) is a customized version designed for virtualization scenarios, pre-installed with virtualization key components. The goal is that users can easily create and manage virtual machines that provide superior virtualization performance whether working in development, test, or production environments, while running a variety of workloads on high-performance virtual machines for resource isolation and security.
Whether you're running cloud-native applications, virtualized environments, or both, NFC and NFV are the perfect choice. They provide stability, performance, and security to meet the requirements of modern data centers and cloud environments.
The Nestos Kubernetes Deployer (NKD) is container cloud deployment and O&M tool dedicated to NFC. NKD is a solution for deploying Kubernetes clusters based on NestOS and consistent O&M with container cloud services and cloud base OS. The goal is to simplify the process of deploying and upgrading clusters by providing services such as deployment, updates, and configuration management of cluster infrastructure, including operating systems and Kubernetes infrastructure components, outside the cluster.
PilotGo is a plug-in O&M management platform incubated by Kylinsoft in the openEuler community. Based on the features and best practices of the NestOS platform, PilotGo brings customized O&M management functions and new architecture-aware plug-in features to the NestOS platform.
x2nestos is a quick and easy deployment tool that converts a general operating system to an NFC version. The NFV version is integrated by default, and can also be used with other general Linux operating systems managed by yum or apt mainstream package managers. Based on the kexec dynamic kernel loading feature, the tool can skip the boot stage to complete the deployment of the operating system, effectively reducing the difficulty and cost of converting existing clusters to NFC.
NFC, as a container cloud base operating system based on the idea of immutable infrastructure, distributes and updates the file system as a whole.This solution has brought huge improvements in operation and security. However, in the actual production environment, the officially released version is often difficult to meet the needs of users, so more convenient customization means are required. NFC integrates the feature of ostree native container , which allows users in container cloud scenarios to easily build custom images by writing a ContainerFile (Dockerfile) file using the familiar technology stack, which can be used for custom integration components or subsequent upgrade and maintenance.
Rubik is a container hybrid engine that adapts to single-node computing power tuning and quality of service assurance. NFC has pre-enabled the kernel features of rubik( related to mix online and offline business), and supports the overall solution based on the rubik container hybrid engine. This solution greatly improves the resource utilization of container cloud scenarios while ensuring the quality of service of key services by reasonably scheduling and isolating resources.
We maintain nestos-kernel independently and develop it based on the openEuler-22.03-sp2 kernel version. In this process, we focus on improving the kernel features such as mm, CPU, cgroup, etc., to create features that are different from openEuler kernel and have better optimized performance.
Use NestOS For Container-22.03-LTS-SP2.20230928 to compare the performance of docker, podman, and iSulad container engines. The test results are as follows, showing that the performance of containers running in NFC is much better than that of traditional CentOS.
operator(ms) | NestOS(Podman) | CentOS(Podman) | NestOS(iSulad) | CentOS(iSulad) | NestOS(Docker) | CentOS(Docker) |
---|---|---|---|---|---|---|
100*creat | 3436 | 6761 | 858 | 882 | 1375 | 2919 |
100*start | 5496 | 10130 | 1885 | 2123 | 7397 | 18400 |
100*stop | 2516 | 2532 | 457 | 497 | 1052 | 465 |
100*rm | 2971 | 3141 | 501 | 566 | 1116 | 6838 |
Gitee ID | company | |
---|---|---|
@duyiwei7w | KylinSoft | duyiwei@kylinos.cn |
@ccdxx | KylinSoft | chendexi@kylinos.cn |
@shanph | KylinSoft | lishanfeng@kylinos.cn |
@wangyueliang | KylinSoft | wangyueliang@kylinos.cn |
@jianli-97 | KylinSoft | lijian2@kylinos.cn |
@duguhaotian | Huawei | liuhao27@huawei.com |
Thank you to the following original contributors for their contributions to the NestOS project and openEuler community:
Gitee ID | company | |
---|---|---|
@fu-shanqing | KylinSoft | fushanqing@kylinos.cn |
@ningjinnj | KylinSoft | ningjin@kylinos.cn |
Anyone who is interested in contributing to the project is welcome to participate.
此处可能存在不合适展示的内容,页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容,可点击提交进行申诉,我们将尽快为您处理。
1. Open source ecosystem
2. Collaboration, People, Software
3. Evaluation model