A set of experimental Linux kernel patches from Google introduces a technique called "Orphaned VMs," designed to let virtual machines persist independently while their host kernel is taken offline for reboots or updates. The proposal targets a critical efficiency bottleneck in cloud-scale infrastructure: performing essential maintenance without service interruption or the overhead of live migration.
Conventional host updates require either scheduling downtime or using complex live migration to shift workloads to another server—a process that demands significant spare capacity and operational effort. The Orphaned VM concept takes a different approach, seeking to move the maintenance orchestration into the kernel itself. A designated "Live Update Orchestrator" would manage the safe shutdown, update, and restart of the host kernel, all while the guest VM continues running in an isolated state on the same physical hardware.
The core innovation lies in formally decoupling a VM's lifecycle from the active kernel on its host machine. This addresses a major pain point for data center operators: applying urgent security patches or updates without performance degradation or costly downtime. By handling state preservation at a lower level, the method could lead to more streamlined and integrated infrastructure management.
However, the proposal remains early-stage and open for community scrutiny. Significant technical challenges need resolution, particularly around the security model for a VM operating detached from its host kernel and the guarantees required to reliably save and restore its complete state—memory, devices, and I/O—once the kernel comes back online.
Hailing from Google, an operator of some of the world's largest data centers, the proposal carries weight and suggests a potential path toward kernel-native solutions for problems currently managed at higher virtualization layers. Its ultimate adoption will depend on the Linux kernel community's feedback and its ability to meet rigorous standards for security and stability.
For now, Orphaned VMs present a promising vision for future cloud infrastructure, where core maintenance tasks could become a transparent and non-disruptive background process.
Google 提出的一系列實驗性 Linux 核心補丁，引入了一項名為「孤立虛擬機」的技術。該技術旨在讓虛擬機在主機核心因重啟或更新而離線時，能夠獨立持續運行。此提案針對的是雲端規模基礎設施中的一個關鍵效率瓶頸：如何在不中斷服務或產生即時遷移開銷的情況下進行必要維護。
傳統的主機更新方式，需要安排停機時間或使用複雜的即時遷移技術，將工作負載轉移到另一台伺服器。這個過程需要大量的備用容量和運營投入。而「孤立虛擬機」的概念採取了不同的方法，致力於將維護協調工作移入核心本身。一個指定的「即時更新協調器」將負責管理主機核心的安全關閉、更新和重啟，而客戶虛擬機則在相同物理硬件上以隔離狀態繼續運行。
其核心創新在於，正式將虛擬機的生命週期與其主機上的活動核心解耦。這解決了數據中心營運商的一大痛點：如何在不導致性能下降或高昂停機成本的情況下，應用緊急安全補丁或更新。透過在更低層級處理狀態保存，此方法有望帶來更精簡和一體化的基礎設施管理。
然而，該提案仍處於早期階段，並接受社群審查。還需解決重大的技術挑戰，特別是關於虛擬機與主機核心分離運作時的安全模型，以及在核心重新上線後可靠保存和恢復其完整狀態（記憶體、裝置及輸入輸出）所需的保證機制。
作為全球最大數據中心營運商之一的 Google 提出的此提案，具有重要的分量，並為目前在更高虛擬化層面處理的問題，提供了一個可能朝向核心原生解決方案的路徑。其最終能否被採納，將取決於 Linux 核心社群的反饋，以及它是否能滿足嚴格的安全與穩定性標準。
目前，「孤立虛擬機」為未來的雲端基礎設施描繪了一個前景光明的願景，其中核心維護任務或可成為一個透明且不中斷的後台流程。