Aliyun Linux 17.01 特性說明

中文文檔

（來源：文檔中心）

Aliyun Linux 17.01（Golden Toad）具有如下特性。

• 集成阿里雲內核組維護的 4.4 系列 Kernel。

  1. 支持 swap 內存壓縮可保證顯著減少 I/O；
  2. 支持動態補丁機制 kpatch，升級內核無需重啓系統；
  3. 支持超大內存 kdump（至多 3 TB）；
  4. 支持 Automatic NUMA；
  5. 用戶態 vsyscall 獲取時間戳性能提升；
  6. 全面支持 Docker 技術棧；
  7. 支持 pv panic，方便協助雲用戶快速定位內核問題；
  8. 重新設計的無鎖 TCP listener，提升 2 ~ 3 個數量級防 SYN 攻擊能力。

• 高效創建和啓動。

  • 基於虛擬化級優化棧創建實例，有效降低創建虛擬機所需時間。OS 搭載阿里雲定製啓動服務，提升啓動速率，使創建到可登錄時間控制在 30 秒內。
• 文件系統：新增支持文件系統：XFS、Btrfs、AUFS 和 OverlayFS。
• 全新工具鏈：GCC 4.8.x glibc 2.17 GDB 7.6.1。

• 安全提升。

  • OpenSSH 支持 chroot shell 登錄，限制用戶登錄在一個受限的根文件系統中。
  • OpenSSH 可指定多個驗證條件以加強登錄訪問。
• 兼容 CentOS 7.2。

英文文檔

(From Document Center)

Aliyun Linux 17.01 (Golden Toad) has the following features.

• Integrated with Linux kernel 4.4 maintained by the Alibaba Cloud kernel group

  1. Supports swap space compression to guarantee a significant I/O reduction.
  2. Supports kpatch, a hot patching feature. No need to restart the instance to upgrade the kernel.
  3. Supports kdump for virtual machines with large memory (3 TB at the most).
  4. Supports automatic NUMA.
  5. Improves the performance of getting timestamps in user mode using vsyscall page.
  6. Comprehensively supports Docker technology stacks.
  7. Supports paravirtual (PV) panic event interface, facilitating cloud users to quickly locate kernel problems.
  8. Provides the lockless TCP listener that is re-designed with the anti-SYN flooding attack capability elevated by two to three orders of magnitude.

• Efficient creation and start

  • The instance is created based on the virtualization-level optimized stack to effectively reduce the time required for creating a virtual machine. The OS is equipped with Alibaba Cloud custom boot services to improve the boot rate, so that the time needed from instance creation to logon is 30 seconds or less.

• File systems

  • The following file systems are newly supported: XFS, Btrfs, AUFS, and OverlayFS.

• Brand new tool chain

  • GCC 4.8.x glibc 2.17 GDB 7.6.1.

• Improved security

  • OpenSSH supports logon by using the chroot shell, but the user logon is within a limited root file system.
  • OpenSSH supports specifying multiple verification conditions to enhance logon access.
• Compatible with CentOS 7.2