本书介绍了数字基础设施操作系统——openEuler 的关键技术,以及openEuler 在14 个行业(电信、金融、政府、安平、制造、交通等)应用的实践。全书共分为两篇:第一篇共分为7 章,内容包括openEuler 的"四梁八柱”技术体系和六大行业应用技术。第二篇共分为7 章,主要介绍14 个行业现状、对操作系统的诉求,以及各个行业的openEuler 实践案例。 本书面向的读者包括操作系统从业人员、openEuler 社区开发者、开源爱好者,以及其他对操作系统感兴趣的人士。
陈海波,华为基础软件首席科学家,中央软件院副总裁,上海交通大学特聘教授,IEEE Fellow;任ACM SIGOPS主席、ACM旗舰杂志Communications of the ACM编委与领域共同主席、ACM EuroSys 2025程序委员会主席。主要研究领域为操作系统、分布式系统与系统安全,研究成果通过产学研深度结合被应用到数十亿设备,产生了广泛的学术与产业影响。曾获陈嘉庚青年科学奖(信息技术科学奖)、中国青年科技奖、教育部技术发明一等奖、全国优秀博士学位论文奖、CCF青年科学家奖等。研究工作还获得了华为卓越贡献个人奖,ASPLOS、EuroSys、VEE等最佳论文奖,以及DSN“十年时间检验奖”、SIGMOD研究亮点奖等。按照csrankings.org的统计,其近五年(2018~2022年)在操作系统领域顶会SOSP/OSDI上发表的论文数并列世界第一。主持撰写的《现代操作系统:原理与实现》图书获得2020年度“最受读者喜爱的IT图书奖”与2022年上海交通大学最佳本科生教材奖。
目 录
第1 篇 openEuler 关键技术
第1 章 openEuler“四梁八柱”技术体系 ···········································.3
第2 章 极致开箱即用 ····································································.7
2.1 智能调优工具:A-Tune ·······················································.7
2.2 高性能用户态网络协议栈:Gazelle ·········································.9
2.3 高性能用户态存储软件栈:HSAK ········································.12
2.4 应用无感知的原生加速引擎:sysBoost ··································.15
2.5 自适应千核并行调度技术 ···················································.17
2.6 可编程内核:安全灵活的用户态代码内核卸载框架 ·····················.19
2.7 软芯协同的高性能虚拟化底座 ·············································.22
2.8 高性能计算套件:HCK ·····················································.23
第3 章 确定性低时延 ··································································.26
3.1 实时系统 ········································································.26
3.2 多级调度框架 ··································································.29
3.3 资源竞争协议 ··································································.30
3.4 异步通信 ········································································.31
3.5 确定性临界区 ··································································.33
第4 章 云原生操作系统底座与智能运维 ··············································.35
4.1 云原生操作系统底座 ·························································.36
4.1.1 快速部署 ·······························································.37
4.1.2 高效运行 ·······························································.48
4.1.3 资源优化 ·······························································.55
4.2 智能运维 ········································································.63
4.2.1 故障快恢 ·······························································.64
4.2.2 系统升级 ·······························································.66
第5 章 操作系统极致安全 ····························································.77
5.1 操作系统安全概述 ····························································.77
5.2 操作系统安全目标 ····························································.78
5.2.1 机密性 ··································································.80
5.2.2 完整性 ··································································.80
5.2.3 可用性 ··································································.81
5.2.4 真实性 ··································································.81
5.2.5 可授权性 ·······························································.82
5.2.6 不可抵赖性 ····························································.82
5.3 操作系统应该提供的安全能力 ·············································.83
5.4 操作系统关键安全技术 ······················································.84
5.4.1 完整性保护 ····························································.84
5.4.2 机密计算 ·······························································.88
5.4.3 全栈国密(数据安全与隐私) ····································.91
5.4.4 安全隔离(工业安全) ·············································.94
5.4.5 入侵检测 ·······························································.95
5.5 操作系统安全未来的发展方向 ·············································.98
5.5.1 动态调整 ·······························································.98
5.5.2 行为可信 ·······························································.99
5.5.3 AI for OS 安全 ·······················································.101
第6 章 异构操作系统融合计算 ························································.103
6.1 融合算力调度 ·································································.104
6.2 融合内存管理 ·································································.105
6.3 资源弹性复用 ·································································.106
6.4 面向SLA 的并发控制·······················································.107
第7 章 欧拉鸿蒙结合 ·································································.108
7.1 欧拉鸿蒙结合的方向 ························································.109
7.2 能力共享 ·······································································.110
7.2.1 分布式软总线 ························································.110
7.2.2 分布式数据 ···························································.113
7.2.3 操作系统视窗 ························································.114
7.3 一机多域 ·······································································.115
7.4 端边云跨域协同 ······························································.117
第2 篇 openEuler 行业应用实践
第8 章 电信行业应用实践 ···························································.121
8.1 行业现状和操作系统诉求 ··················································.121
8.1.1 电信行业现状 ························································.121
8.1.2 电信行业对操作系统的诉求 ······································.124
8.2 openEuler 电信行业解决方案 ··············································.126
8.2.1 openEuler 云应用加速解决方案 ··································.126
8.2.2 openEuler 操作系统迁移解决方案 ·······························.127
8.2.3 openEuler 云原生操作系统底座解决方案 ······················.133
8.2.4 openEuler 安全云主机解决方案 ··································.134
8.3 电信行业案例 ·································································.135
8.3.1 移动云天元“易行”迁移 ·········································.135
8.3.2 移动云可信云主机 ··················································.137
8.3.3 某运营商云大规模多样性算力开放基础设施 ·················.139
8.3.4 中国移动IT 中心磐基云原生产品 ·······························.141
8.3.5 中国移动在线客服营销服务中心 ································.144
第9 章 金融行业应用实践 ···························································.146
9.1 行业现状与操作系统诉求 ··················································.146
9.1.1 金融行业现状 ························································.146
9.1.2 金融行业对操作系统的诉求 ······································.148
9.2 openEuler 金融行业解决方案 ··············································.150
9.2.1 openEuler 资源混合部署解决方案 ·······························.150
9.2.2 openEuler 智能运维平台解决方案 ·······························.151
9.2.3 openEuler 用户态低时延协议栈解决方案 ······················.154
9.2.4 openEuler 安全机密计算解决方案 ·······························.155
9.3 金融行业案例 ·································································.156
9.3.1 工商银行资源混合部署 ············································.156
9.3.2 某行百万人脸识别机密计算 ······································.158
9.3.3 某证券交易所低时延协议栈 ······································.160
9.3.4 恒生电子公司应用案例 ············································.161
9.3.5 兴业银行智慧金融隐私计算平台 ································.165
第10 章 政府&安平行业应用实践 ··················································.168
10.1 行业现状与操作系统诉求 ················································.168
10.1.1 政府行业现状 ······················································.168
10.1.2 安平行业现状 ······················································.170
10.1.3 政务业务对操作系统的诉求 ····································.170
10.1.4 安平行业对操作系统的诉求 ····································.171
10.2 openEuler 政府&安平行业解决方案 ····································.173
10.2.1 openEuler 基于TEE 的密码模块解决方案 ···················.173
10.2.2 openEuler 重保会议解决方案 ···································.174
10.2.3 openEuler 隔离超算解决方案 ···································.175
10.3 政府&安平行业案例 ·······················································.176
10.3.1 视频云操作系统存量迁移 ·······································.176
10.3.2 “鲲密”产品支撑公安行业数据安全 ························.178
10.3.3 SZ 政务云视频会议 ···············································.180
10.3.4 武汉超算高性能操作系统 ·······································.180
第11 章 电力能源行业应用实践 ····················································.182
11.1 行业现状和操作系统诉求 ················································.182
11.1.1 电力能源行业现状 ················································.182
11.1.2 电力能源行业对操作系统的诉求·······························.183
11.2 openEuler 在电力行业中的解决方案 ···································.187
11.2.1 openEuler 在电力行业中的优势 ································.187
11.2.2 下一代电力系统边端协同计算方案 ····························.188
11.3 电力能源行业案例 ·························································.189
11.3.1 某电网公司核心调度系统迁移改造 ····························.189
11.3.2 某电网公司信息业务系统平滑迁移 ····························.191
11.3.3 某发电厂DCS 核心控制系统平滑迁移 ·······················.193
第12 章 制造行业应用实践 ··························································.195
12.1 行业现状和操作系统诉求 ················································.195
12.1.1 行业现状 ····························································.195
12.1.2 制造行业对操作系统的总体诉求 ······························.198
12.1.3 高精度制造对操作系统的诉求 ·································.199
12.1.4 设备能力多样化对操作系统的诉求 ···························.200
12.2 openEuler 在制造行业中的解决方案 ···································.201
12.2.1 制造行业解决方案 ················································.201
12.2.2 分级实时系统解决方案 ··········································.202
12.2.3 混合关键性系统解决方案 ·······································.205
12.3 制造业案例 ··································································.209
12.3.1 柏楚电子高精激光切割控制系统 ······························.209
12.3.2 华为制造自动化设备开发部的软运动控制器 ···············.211
第13 章 交通行业应用实践 ··························································.215
13.1 民航行业现状和操作系统诉求 ··········································.215
13.1.1 民航行业现状 ······················································.215
13.1.2 民航行业对操作系统的诉求 ····································.218
13.2 铁路行业现状和操作系统诉求 ··········································.219
13.2.1 铁路行业现状 ······················································.219
13.2.2 铁路行业对操作系统的诉求 ····································.220
13.3 公路水运行业现状和操作系统诉求 ····································.221
13.3.1 公路行业 ····························································.221
13.3.2 水运行业 ····························································.224
13.4 openEuler 在交通行业中的解决方案 ···································.227
13.4.1 铁路行业调度桌面云方案 ·······································.227
13.4.2 业务不中断升级方案 ·············································.228
13.5 交通行业案例 ·······························································.229
13.5.1 民航行业某央企电子客票系统建设项目 ·····················.229
13.5.2 山东港口青岛港码头操作系统A-TOS ························.230
13.5.3 某铁路局调度桌面云项目 ·······································.232
第14 章 其他行业应用实践 ··························································.234
14.1 水利行业现状和操作系统诉求 ··········································.234
14.1.1 水利行业现状 ······················································.234
14.1.2 水利行业对操作系统的诉求 ····································.235
14.2 教育行业现状和操作系统诉求介绍 ····································.236
14.2.1 教育行业现状 ······················································.236
14.2.2 教育行业对操作系统诉求 ·······································.237
14.3 卫生健康行业现状和操作系统诉求 ····································.237
14.3.1 卫生健康行业现状 ················································.237
14.3.2 卫生健康行业对操作系统的诉求 ······························.238
14.4 广电行业现状和操作系统诉求 ··········································.239
14.4.1 广电行业现状 ······················································.239
14.4.2 广电行业对操作系统的诉求 ····································.239
14.5 邮政行业现状和操作系统诉求 ··········································.240
14.5.1 邮政行业现状 ······················································.240
14.5.2 邮政行业对操作系统的诉求 ····································.241
14.6 其他行业案例 ·······························································.242
14.6.1 水利行业:某市水务局运用大禹水文站一体机改进水文感知 ························································.242
14.6.2 卫生健康行业案例:国内某市医疗云平台 ··················.244
14.6.3 广电行业案例:广电应急广播系统数字签名 ···············.245
14.6.4 邮政行业:某邮政OA 业务系统迁移改造 ···················.248
14.6.5 教育行业案例:重庆大学智慧校园 ···························.249