November 2025
Intermediate to advanced
130 pages
1h 11m
Chinese
Content preview from Azure上のLinux (Chinese Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
第四章. Ubuntu 与 Canonical 在 Azure 平台
本作品已使用人工智能进行翻译。欢迎您提供反馈和意见：translation-feedback@oreilly.com
无论您是迁移现有 Linux 部署还是作为架构师来构建全新的云原生解决方案，Ubuntu 背后的公司 Canonical 都已开发出一套全面的工具集，既能充分利用 Azure 基础设施，又能保持熟悉的 Ubuntu 使用体验。本章将介绍 Canonical 的 Azure 原生工具与服务，其设计目标不仅在于实现云端“运行 Ubuntu”，更致力于在软件生命周期中构建、扩展并保障生产级 Linux 应用的安全性。如表 4-1 所示，这些工具覆盖了云架构师常用的关键领域。
| 架构师需重点考虑的因素 | Canonical提供的解决方案 |
|---|---|
|
应用程序开发平台 |
Azure 优化版 Ubuntu 映像 |
|
安全考量 |
常见漏洞与暴露（CVE）处理、内核实时补丁、AppArmor、安全启动与测量启动、全盘加密（FDE）、保密计算、Ubuntu快照服务 |
|
合规要求 |
符合FIPS标准的镜像、基于DISA STIG或CIS基准的强化镜像 |
|
安全容器化选项 |
精雕细琢的Ubuntu镜像、容器构建服务、Rocks |
|
Kubernetes相关扩展管理方案 |
支持基于Ubuntu的AKS工作节点、长期支持的Canonical Kubernetes及多云选项 |
|
应用程序管理选项 |
基于Juju和charms的生命周期管理，托管应用与解决方案（MLOps、数据处理集群、SQL与NoSQL数据库、可观测性方案、资产管理） |
支撑这些技术的核心是Canonical对企业级支持的承诺，确保您能在Azure环境中自信地采用并依赖安全的开源解决方案。本章后续部分将详细解析各项服务。
Azure 优化版 Ubuntu 镜像
Ubuntu是云开发者最常用的Linux环境，并获得微软官方认证支持Azure平台。通过与微软的深度协作，Ubuntu镜像经过专门优化，可在Azure基础设施上实现性能最大化，并支持最新发布的云功能。这些镜像与核心Azure服务深度集成，包括Azure定价服务、Azure来宾补丁服务（AzGPS）及更新管理中心。目前提供多种Azure优化镜像变体：
- 服务器映像
-
这些基于Azure优化内核的通用定制镜像，通过定制内核实现云专属特性：支持InfiniBand实例的加速网络及单根I/O虚拟化。
- 精简服务器映像
-
这些映像专为大规模自动化部署设计，默认软件包集精简。省略了文档（手册页）和交互式工具的安装。由于安装软件包更少，它们体积更小、启动更快，且长期所需的安全更新更少。
- Ubuntu Pro映像
-
这些高级映像包含可选的FIPS认证组件、CIS强化选项、通过扩展安全维护(ESM)实现的最长12年开源安全覆盖、内核实时补丁服务、基于Landscape的环境管理服务，以及可选的全天候企业级支持。同时提供精简版Ubuntu Pro服务器映像。
- Ubuntu Pro联邦信息处理标准（FIPS）映像
-
这些基于Ubuntu Pro构建的镜像预启用了FIPS认证模块，确保从首次启动即生效，便于美国政府Ubuntu用户将工作负载迁移至Azure。 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.