I-Containerization: I-Apple ikhulula i-"Distrobox" noma "WSL" yayo ukuze iqhube i-Linux distros ezitsheni

Emahoreni ambalwa edlule i-WWDC25 iqalile, umcimbi lapho i-Apple yethula khona izinguqulo ezintsha zezinhlelo zayo zokusebenza. Kulokho I-keynote I-iOS, i-iPadOS, i-tvOS, i-macOS, i-watchOS, ne-visionOS konke kuxoxwe kafushane, futhi manje sebehlanganise izinombolo zabo futhi bonke banenombolo engu-26. Ubude balezi zingqungquthela abubavumeli ngisho nokukhuluma ngezici eziningi zesistimu yabo, futhi kukhona ezinye izinto ezingatholakala ngezinye izindlela. Phakathi kwazo, Ukuqina, okungesiyo a I-Distrobox noma i-Apple WSL, kodwa isondela kancane kuyo yomibili imiqondo.

Ukwenziwa kwe-virtualization kanye neziqukathi kuguqule ukuthuthukiswa kohlelo lokusebenza, okuvumela amaqembu ukuthi akhe izindawo ezihlukene ngokuphelele neziphindaphindekayo ukusebenzisa isofthiwe nokuphatha izinsiza ngendlela efanele. I-Apple, ikwazi ukubaluleka kwalobu buchwepheshe ekuthuthukisweni nasekukhiqizeni, ithathe igxathu eliya phambili ngokwethula uhlaka lwayo lokuqukatha olulungiselelwe amadivayisi namaphrosesa we-Apple Silicon.

Iyini i-Containerization ngokusho kwe-Apple?

El Uhlaka lokuqukatha amabhokisi I-Apple's iphakethe lesofthiwe yomthombo ovulekile elakhiwe ku-Swift, okuyinto ivumela izinhlelo zokusebenza ukuphatha iziqukathi ze-Linux ngqo ku-macOS kumadivayisi we-Apple Silicon (ama-chips e-ARM aziwa kakhulu omkhiqizo). Ngokungafani nezinhlelo zendabuko lapho iziqukathi eziningi zabelana nge-kernel eyodwa yesistimu yokusebenza noma umshini omkhulu obonakalayo, I-Apple ikhetha ukusebenzisa isiqukathi ngasinye ngomshini wayo ongasindi obonakalayo.

Le ndlela ifinyelela ibhalansi eyingqayizivele: Igcina ukusebenza kahle nokuphatheka kweziqukathi, kodwa yengeza ukuqina nokuhlukaniswa kwemishini ebonakalayo. Isiqukathi ngasinye sisebenza endaweni yaso ebonakalayo, ngaphandle kokwabelana nge-kernel nabanye noma nesistimu yokusingatha, okwenza ukukhuphuka okungaba khona kwesiqukathi noma ukuhlasela okuvuzayo phakathi kweziqukathi kube nzima kakhulu.

Isisusa kanye nesendlalelo: Iziqukathi ku-macOS

Kuze kube yilapho kuvela isixazululo se-Apple, abathuthukisi abasebenzisa ama-Macs nabadinga izindawo ze-Linux baphendukela kwezinye izindlela njengokuthi I-Docker, iPodman, i-Orbstack noma i-LimaKodwa-ke, lawa mathuluzi abe nemikhawulo ebalulekile ekusebenzeni, ukusetshenziswa kwensiza, futhi, ikakhulukazi, ukuphepha ngenxa yokusebenzisa kwawo ama-VM e-monolithic abamba iziqukathi eziningi kanye nokwabelana okujulile kwe-kernel.

Ezimweni ezibucayi, Izinkinga zokuhlukaniswa kanye nokuvuza kwenqubo okungenzeka kubangele izinkampani nezinhlangano eziningi ukuthi zilahle lezi zinhlelo zokukhiqiza. Ngokwethula uhlaka lwayo, i-Apple igcwalisa lezi zikhala futhi ifuna ukuzibeka njengophawu lokusebenzisa okuphephile nokusebenza kahle kweziqukathi ze-Linux ku-Mac.

Izici zobuchwepheshe zohlaka lwe-Containerization

Isamba se-insulation ngesiqukathi ngasinye: Isiqukathi ngasinye sisebenza ngaphakathi komshini ozimele ozimele, ongasindi kakhulu, oqinisekisa ukuhlukaniswa kwezinga le-kernel nokuvimbela ukubaleka noma ukugxambukela okungase kuthinte ezinye izindawo noma isistimu yokusingatha.
Ukulungiselela i-Apple Silicon: Uhlaka lubhalwe nge-Swift futhi luncike ku-Virtualization.framework, lusizakala ngokusheshisa izingxenyekazi zekhompuyutha ze-ARM CPUs ze-Apple, okuholela ekuqalweni kweziqukathi ngezingxenyana zokusetshenziswa kwesibili nokuphansi kakhulu kwensiza.
Isithombe esithuthukisiwe nokuphathwa kwenethiwekhi: Uhlelo lunika amandla ukuphathwa kwesithombe ngaphansi kwezinga le-OCI, ukusebenzisana nokubhaliswa okukude, kanye nokunikezwa kwamakheli e-IP azinikele esiqukathi ngasinye, kuqeda inkimbinkimbi yokumepha imbobo kanye nokwenza lula ukutholwa kwesevisi nokulinganisa.
Ukucushwa kwe-kernel ngokwezifiso: Onjiniyela bangakhetha ukulungiselelwa kwe-kernel ethize esiqukathi ngasinye, balungise indawo ngayinye ngokwezidingo eziqondile zezinhlelo zabo zokusebenza kanye nokuqinisekisa ukuhambisana phakathi kwezinguqulo.
Ukunciphisa isistimu yesisekelo: I-VM ngayinye isebenzisa isistimu yesisekelo esincane esiqukethe kuphela i-vminitd, isistimu ye-init ehlanganiswe ngokwezibalo ngaphandle kwanoma yimaphi amalabhulali ashukumisayo noma izinto ezisetshenziswayo ezivamile, enciphisa indawo yokuhlasela.
Ukusekelwa kwe-Rosetta 2: Ivumela ukusebenzisa izithombe ze-x86_64 kumakhompuyutha e-ARM ngaphandle kwesijeziso esizwakalayo, okwenza kube lula ukuguqula nokugcina izindawo ezixubile noma zefa.

Izinzuzo zezakhiwo ezihlongozwe yi-Apple

Ukuphepha okuqinisiwe: Ngokungabelani ngezinhlamvu noma okuncikile, isiqukathi ngasinye sisodwa ngokuphelele, sihambisana nezimiso zokuphepha ze-zero-trust. Ubuncane obudlulele besistimu ye-init kanye nokuntuleka kwamathuluzi angasebenziseka kunciphisa kakhulu ingcuphe yokukhuphuka kwamalungelo noma ukuvuza kwedatha.
Ukusebenza kahle ekusebenziseni izinsiza: Imishini ebonakalayo engasindi kakhulu isebenzisa izinsiza kuphela uma isebenza. Asikho isidingo sokugodla i-RAM noma i-CPU yechibi lesiqukathi okungenzeka singenzi lutho, sithuthukise ukusetshenziswa kwesistimu iyonke.
Inethiwekhi eyenziwe lula futhi evumelana nezimo: Ukwabiwa kwe-IP ezinikezele kuqeda ubuhlungu bekhanda bomlando bokudwetshwa kwechweba kanye nokuphathwa kwenethiwekhi yangaphakathi ezitsheni, kusiza ukuxhumanisa kanye nokukala okuvundlile kwama-microservices.
Ukuhambisana nokuphatheka: Ukusekelwa kwezithombe ezijwayelekile ze-OCI nokuhlanganiswa okungenamthungo nezirejista kuvumela amapayipi afanayo e-CI/CD namafa esiqukathi ukuthi asebenze ngokuqondile ku-Mac ngaphandle kwanoma yiziphi izinguquko noma ukwenza ngendlela oyifisayo.

Izingxenye ze-Apple Framework

I-Containerization Swift Package: Ilabhulali eyisisekelo ehlinzeka ngama-API okuphatha izithombe, ukubhaliswa, amasistimu wefayela, izinqubo, nokuhlanganiswa nesistimu ye-init yomdabu kanye nezinhlamvu zangokwezifiso.
vminitd: Isistimu ye-init encane, ebhalwe nge-Swift futhi yahlanganiswa ne-Static Linux SDK, esebenza njengenqubo yokuqala ku-VM ngayinye. Ayidingi amalabhulali ashukumisayo noma amathuluzi esistimu futhi iveza i-gRPC API phezu kwe-vsock ukuze ilawule imijikelezo yokuphila kanye nokucushwa kwemvelo.
Ama-kernels alungiselelwe: Ama-Linux kernels ancishisiwe, alungiselelwe izikhathi zokuqalisa okusheshayo kanye nokusetshenziswa kwamandla okuncane, nakuba kungenzeka ukukhetha noma ukuhlanganisa ukucushwa okungokwezifiso kwamakesi okusetshenziswa okuthuthukile.
Amathuluzi Omsebenzisi: cctl Iyithuluzi eliyinhloko le-CLI, elikuvumela ukuthi uphathe izithombe, uqalise iziqukathi futhi uhlole i-API yohlaka ngendlela elula, efana nemiyalo evamile ye-Docker.

Isebenza kanjani ekusebenzeni: kusuka kukhodi kuya ekusetshenzisweni

Uhlaka luhlinzeka ngama-API namathuluzi e-CLI kulezi zinqubo ezilandelayo:

Ukuphathwa kwezithombe ze-OCI nokukhohlisa.
Vikela ukusebenzelana nokubhaliswa okukude.
Ukudala nokufometha amasistimu wefayela le-ext4.
Ukuphathwa kwenethiwekhi okuthuthukisiwe ngamasokhethi e-Netlink nomsebenzi ngamunye we-IP.
Ukwenziwa nokuqapha izinqubo ngaphakathi kweziqukathi ngenxa yesistimu ye-init yobunikazi.
Ukuphathwa kwezindawo zesikhathi sokusebenza nge-VM ngayinye, ngama-API wokukhetha i-kernel, inguqulo, nokulungiselelwa okuqondene nesiqukathi.
Ukuhlanganiswa ne-Rosetta 2 ukusetshenziswa kwezithombe ze-x86_64 ezinhlelweni ze-Apple Silicon kanye nokuqinisekiswa kokuhambisana.

Ukuqala kwesiqukathi ngasinye masinyane (isekhondi elincane), idlula ezimweni eziningi isipiliyoni sokuqalisa se-Docker noma i-Podman, nokuphathwa kwezinsiza kusebenza ngokuphelele.

Izidingo kanye nokuhambisana

Ukuze usebenzise uhlaka lwe-Apple udinga:

Yiba ne-Mac ene-Apple Silicon (M1, M2 uchungechunge kuya phambili).
MacOS 15 noma ngaphezulu, nakuba ukusebenzisa wonke amakhono futhi ugweme ukulinganiselwa, batusa i-macOS 26 Beta 1.
I-Xcode 26 Beta namathuluzi okwakha e-Swift abuyekeziwe.

Ezinye izici, njengokuxhumana kwesitsha ukuya kusitsha phakathi kwengxenye yenethiwekhi efanayo, zinikwa amandla ngokugcwele kuphela ku-macOS 26 nakamuva.

Imininingwane Yonjiniyela kanye nokugeleza komsebenzi

Ukugeleza okujwayelekile konjiniyela onalolu hlaka kufaka:

Faka okuncikile okunconyiwe: Ngokushesha, I-Swift, i-Static Linux SDK, nezinguqulo ezifanele ze-grpc-swift ne-swift-protobuf.
Hlanganisa iphakheji ngemithombo usebenzisa imibhalo enikeziwe kanye nezinsiza.
Ukusebenzisa i-cctl ukuze uhlole futhi ulawule izithombe, uqalise iziqukathi, uphathe amasistimu wefayela lezimpande, futhi wenze imisebenzi yokuphakela noma yokuhlola ngokuzenzakalela.
Enza ngendlela oyifisayo i-kernel uma noma yisiphi isici esingafakiwe ekucushweni okuzenzakalelayo sidingeka, ngokulandela imibhalo yenqolobane.
Ukuhlanganiswa namapayipi ajwayelekile e-CI/CD kanye nokubhaliswa kokugeleza kokuthuthukiswa okuhlanganyelwe kanye nokusatshalaliswa kuwo wonke amaqembu axubile.

Amadokhumenti asemthethweni anikeza isiqondiso sesinyathelo ngesinyathelo ekusetheni kokuqala, ukuxazulula inkinga okuvamile, kanye nokuzenzakalela kokugeleza komsebenzi okuvamile.

Ukuqhathanisa nezinye izixazululo: I-Docker, iPodman kanye nemodeli ye-Apple

Docker nezinye izixazululo zikuvumela ukuthi usebenzise iziqukathi ku-Mac, kodwa zikwenza nge-Linux VM eyodwa lapho kuhlala khona zonke iziqukathi, okusho ukuthi:

Ukusetshenziswa kwensiza okuyisisekelo okuphezulu (i-VM ihlala isebenza).
Ukuhlukaniswa nokuba yinkimbinkimbi lapho wabelana ngamafayela phakathi komsingathi, i-VM, neziqukathi.
Indawo enkulu yokuhlasela kanye nezinkinga zokuhlukaniswa, njengoba ukwehluleka kungaba nomthelela kuzo zonke iziqukathi ezihlala khona.
Ubunzima bokunikeza ama-IP ahlukile kanye nokuxhumana phakathi kweziqukathi nezinsizakalo zokusingatha.

Imodeli ye-Apple, ngokwakha ama-VM ngesitsha ngasinye, iqeda lezi zinkinga. Nakuba ekuqaleni kungase kubonakale kungasebenzi kahle, ama-VM angasindi kakhulu kanye nokusetshenziswa kwensiza okukhethekile kuyenza ibe imodeli ephakeme kakhulu mayelana nokuphepha nokuvumelana nezimo, ikakhulukazi ezindaweni lapho ukuzihlukanisa nokuthobela kubaluleke kakhulu.

Ukuhambisana nokufuduka kokugeleza komsebenzi okukhona

Okunye okukhathazayo okuvamile lapho uthuthela kubuchwepheshe obusha i ukuhambisana kwezimpahla nokugeleza komsebenzi. Uhlaka lwe-Apple lugcina ukuhambisana okugcwele nezithombe ezijwayelekile ze-OCI, okusho ukuthi izithombe ezikhona zizosebenza, futhi ukubhaliswa namapayipi kungahlala kungashintshile. Amathuluzi afana cctl Basebenzisa imiyalo efana naleyo ye-Docker, ngakho-ke ijika lokufunda lincane.

I-athikili ehlobene:

I-WizOS: Isixazululo Esisha Esivikelekile Nesilula Seziqukathi Zebhizinisi

Iminikelo nomphakathi

Le phrojekthi ingumthombo ovulekile futhi iyakwamukela iminikelo yangaphandle, isiza ukubamba iqhaza ngenxa yesakhiwo se-Swift semodular nemihlahlandlela ecacile yokunikela. Abanakekeli bephakheji bakhuthaza iminikelo yamakhodi, ukuthuthukiswa okuphakanyisiwe, futhi bakhiphe umbiko ukuze kusheshiswe ukuthuthukiswa nokutholwa.

Imodeli yenguqulo iqinisekisa ukuzinza kanambambili phakathi kokukhishwa okuncane, ihlinzeka ukuzethemba kulabo abafuna ukusebenzisa uhlaka ngaphambi kwesikhathi somjikelezo wabo wokuphila.

Amacala okusetshenziswa afanelekile nezinhlelo zokusebenza

Uhlaka lwe-Apple's Containerization luthakazelisa kakhulu:

Onjiniyela abadinga ukuhlola futhi basebenzise izinhlelo zokusebenza ze-Linux ku-Mac ngokomdabu nangokuvikelekile.
Izinkampani nezinhlangano lapho ukuphepha nokuzihlukanisa kuyimpoqo (umkhakha wezezimali, ezempilo, i-AI, njll.).
Izinhlangano ezitshale imali kumapayipi e-OCI futhi zifuna ukusebenzisa amapayipi akhona ngaphandle kwezingozi zokusebenzisana.
Amaqembu axubile asuka ku-x86 aya ekwakhiweni kwezakhiwo ze-ARM futhi adinga inguquko ebushelelezi.
Amaphrojekthi adinga ama-kernels ahlukene noma ukucushwa okungokwezifiso kweziqukathi ezahlukene.

Ukuvumelana nezimo, ukuphepha okungokwemvelo kanye nezindleko eziphansi zokusebenza yenza uhlaka lube inketho ekhangayo kakhulu yokwenza ukuhamba komsebenzi kube kwesimanje kanye nokuthuthukisa ukuvikelwa kwedatha namasistimu.

Imikhawulo kanye nesimo sephrojekthi

Uhlaka lungaphakathi Inguqulo ye-0.1.0, okusho ukuthi isesigabeni sayo sokuqala, nakuba isebenza ngokugcwele ekuhlolweni nasekusetshenzisweni okulawulwayo. Ezinye izici ezithuthukile, ezifana nenethiwekhi ye-container-to-container ku-macOS 15, azitholakali ngokugcwele ngaphandle kwe-macOS 26 nakamuva.

U-Apple uxwayisa ngokuthi ukuzinza kwe-API kuqinisekiswa kuphela phakathi kokukhishwa okuncane, ngakho-ke abamukeli kufanele babuyekeze amanothi okukhululwa futhi bacacise ukuncika ngendlela efanele ukuze bagweme izinkinga ezibuyekezweni ezizayo.

Ukufakwa kweziqukathi ezindaweni zeselula ze-iOS

I-Containerization ibonakala futhi ekuphathweni nasekuvikelekeni kwamadivayisi we-iOS, lapho abaphathi bengasebenzisa izinhlelo ze-MDM (Mobile Device Management) ukuze bakhawulele ukuxhumana phakathi kwezinhlelo zokusebenza, ukufinyelela kumasevisi athile, ukufakwa kokucushwa nezitifiketi, kanye nokukhawulela ukufakwa kwezinhlelo zokusebenza ezingagunyaziwe nokuxhumeka okungaphephile. Lezi zinqubomgomo, nakuba zihlukile ekufakweni kwesofthiwe evamile, zifuna vikela imininingwane yenkampani futhi uvimbele ukuvuza kwedatha phakathi kwezinhlelo zokusebenza namasevisi ngaphakathi kwe-Apple ecosystem.

Ikusasa le-containation ngokusho kwe-Apple

Umnyakazo we-Apple, ngokuvulwa kohlaka kanye nokukhuthazwa kwamathuluzi ayo, kungase kuphawule ngaphambi nangemuva kwendlela izinhlelo zokusebenza ezivikelekile ezithuthukiswa ngayo futhi zisetshenziswe ohlelweni lwezemvelo lwe-Mac. Izinzuzo ekuphepheni, ukusebenza kahle kanye nokuhambisana Ngamazinga avulekile, bazofaka ingcindezi kubadlali bendabuko futhi bakhuthaze ukuvela kwezixazululo ezintsha kanye nentuthuko emkhakheni.