کانتینرها و مجازی‌سازی لینوکس: استفاده از راست برای کانتینرهای لینوکس (ویرایش دوم)

This book is a practical, comprehensive guide to creating secure and efficient Linux containers using the Rust programming language. It utilizes a hands-on approach to teach Rust's programming constructs, security features, and its application in containerization. Author Shashank Mohan Jain starts with a gentle introduction to Rust to help you grasp the language's core concepts, syntax, and unique memory safety guarantees. He then transitions into the realm of Linux container development, where Rust shines as a robust and secure language for building containerized applications. Through hands-on examples, you will gain a deep understanding of how to harness Rust's features to create lightweight and secure Linux containers and how to leverage its strong type system and ownership model to eliminate common bugs and ensure memory safety in containerized applications. As you progress, you’ll explore the intricacies of working with system resources, networking, and interacting with the host operating system while maintaining isolation and security within the containers, as well as how Rust's concurrency model can build performant and responsive containerized applications. The book also covers advanced topics such as secure configuration handling, logging, and handling authentication within your containerized environment. After completing this book, you will be well-versed in Rust programming, equipped to create efficient and secure Linux containers, and confident in your ability to develop containerized applications for a variety of use cases. What You Will Learn Understand the basics of the Rust programming language Understand Rust's security features Create Linux constructs like namespaces in Rust Develop your own container runtime using Rust Who This Book Is For Developers, Architects and SREs working with cloud applications and dealing with container based workloads. Table of Contents About the Author About the Technical Reviewer Chapter 1: Virtualization Basics History of Virtualization What Is Virtualization? VM-Based Virtualization Container-Based Virtualization Hypervisors Virtual Machine Monitor Device Model Memory Virtualization Shadow Page Tables Nested Page Tables with Hardware Support CPU Virtualization Binary Translation in the Case of Full Virtualization Paravirtualization in the Case of XEN with Hypercalls IO Virtualization Full Virtualization Paravirtualization Summary Chapter 2: Hypervisors The Intel Vt-x Instruction Set The Quick Emulator Creating a VM Using the KVM Module Vhost-Based Data Communication What Is an eventfd? Alternative Virtualization Mechanisms Unikernels Project Dune novm Summary of Alternative Virtualization Approaches Summary Chapter 3: Namespaces Namespace Types UTS PID Mount Network IPC Cgroup Time Data Structures for Linux Namespaces Adding a Device to a Namespace Summary Chapter 4: Cgroups Creating a Sample Cgroup Cgroup Types CPU Cgroup Block I/O Cgroups Understanding Fairness Understanding Throttling Summary Chapter 5: Layered File Systems A File System Primer Brief Overview of Pseudo File Systems Understanding layered File Systems The Union File System OverlayFS Summary Chapter 6: Creating a Simple Container Framework The UTS Namespace Golang Installation Building a Container with a Namespace Adding More Namespaces Launching a Shell Program Within the Container Providing the Root File System The Mount Proc File System Enabling the Network for the Container Virtual Networking: A Brief Primer Enabling Cgroups for the Container Summary Chapter 7: Why Choose Rust Introduction Rust Installation Variables Data Types Primitive Data Types Compound Data Types Structs Enums Unions Functions Defining Functions Calling Functions Function Arguments Function Return Values Function Scope and Lifetime Function Overloading Generics Conditional Logic If/Else Statements Loops Match Expressions Exception Handling Rust Security Features Ownership System Lifetimes Pattern Matching Closures Traits Summary Chapter 8: Containers in Rust Refreshing Linux Namespaces? Creating a PID Namespace Creating a Network Namespace Creating a Mount Namespace Writing Complete Container Code Summary Index