November 2025
Intermediate to advanced
130 pages
1h 11m
Chinese
Content preview from Azure上のLinux (Chinese Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
第5章. Azure上のSUSE Linux
本作品已使用人工智能进行翻译。欢迎您提供反馈和意见：translation-feedback@oreilly.com
要在 Azure 上高效运行 SUSE Linux Enterprise Server (SLES)，需要针对 Azure 进行专门优化。本章详细介绍了如何提升 SUSE 工作负载的性能、安全性及管理效率，并提供了部署与配置的实用步骤。凭借逾30年的企业级Linux开发经验及与微软的合作伙伴关系，SUSE始终秉持开源理念提供解决方案。我们积极推动协作与社区创新，保障用户选择权并避免供应商锁定。最终，SUSE为Azure等平台的现代云部署量身打造了全面的企业级就绪技术。
Azure版SUSELinux Enterprise Servers的特性
Azure版SLES为您的应用程序和服务提供稳定、安全且优化的基础架构，并享有强大技术支持保障.
性能
SLES专为与Azure集成而设计，可最大化提升应用程序和网站的速度与效率：
- Azure 优化内核
-
此选项提供更快的启动时间、改进的运行时性能和先进的设备支持，专为 Azure 环境配置。
- Hyper-V集成
-
预装驱动程序免除手动配置，确保与 Azure 虚拟机监控程序的顺畅运行。
- I/O性能
-
采用优化的Linux I/O调度程序和块多队列设置，最大限度提升Azure基础设施内的数据处理效率。
- 网络管理
-
内置Azure网络适配器驱动程序和cloud-init简化网络连接与系统管理。
- 高级虚拟化
-
采用第二代虚拟机提升性能，支持大型实例（包括M系列），满足高负载工作需求。
安全性
安全至上，通过多项认证、防御机制及定期更新，保护您的数据免受不断演变的威胁。定期修补的镜像和专属区域云更新基础设施可及时交付安全更新，最大限度降低漏洞风险。
- 预强化映像
-
提供预强化映像以增强安全性，并符合公共云框架要求。
- 自动化安全审计
-
SLES 的 OpenSCAP 配置文件可在发行版内提供自动化安全审计（软件包：scap_security）。这些配置文件也可在上游的ComplianceAsCode GitHub 项目中获取。
- 认证
-
SLES的安全性通过以下认证获得验证：
-
通用标准EAL 4+认证
-
FIPS 140-3
-
PCI DSS
-
STIG/DISA
-
SOC2
-
SLSA L4
-
ISO-IEC 27001/27701
完整认证列表请参阅SUSE 文档。
-
管理
在 Azure 上管理 SLES 服务器可实现以下优势：掌控运维、简化操作、自动化任务：
- 安全远程访问
-
安全外壳协议（SSH）在启动时即被启用，实现即时安全的服务器访问。
- 精准时间同步
-
通过chrony实现预配置的时间同步，确保系统一致性。
- 可定制部署
-
Cloud-init支持自定义服务器配置，简化部署与自动化流程。
- 灵活存储管理
-
简化的磁盘调整功能可灵活适应不断变化的存储需求。
- Azure工具集成
-
与 Azure CLI 和 PowerShell 的无缝集成，实现高效管理。
- 自动更新（按需付费）
-
按量付费镜像自动注册更新通道，确保系统持续保持最新状态。
- 经济高效的解决方案
-
SLES提供灵活的按量付费(PAYG)和自带操作系统(BYOS)选项。表5-1对比了PAYG与BYOS两种模式。
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.