<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="675" viewBox="0 0 1200 675" preserveAspectRatio="xMidYMid meet" data-image-type="architecture-comparison">
  <title>容器与虚拟机部署隔离层架构对比</title>
  <desc>image_type=architecture-comparison; reader_task=看懂两种部署方式的运行边界; section_position=上部，核心结论后; alt=容器部署和虚拟机部署架构区别; caption=图1：容器与虚拟机的隔离层不同，决定了部署和运维方式不同</desc>
  <defs><style><![CDATA[
    text{font-family:system-ui,-apple-system,"Microsoft YaHei","PingFang SC",Arial,sans-serif;fill:#172033}.bg{fill:#f7fbff}.h{font-size:28px;font-weight:700}.sub{font-size:18px;fill:#52677b}.layer{stroke-width:2}.vm{fill:#fff3df;stroke:#c9852c}.ct{fill:#eaf8f0;stroke:#3b956a}.base{fill:#eaf3ff;stroke:#4f86d8}.t{font-size:22px;font-weight:700}.s{font-size:16px;fill:#40546a}.label{font-size:18px;font-weight:700}.note{font-size:16px;fill:#5b6d7f}.safe{fill:#f1ecff;stroke:#7b65cf;stroke-width:2}
  ]]></style></defs>
  <rect class="bg" width="1200" height="675"/>
  <text class="h" x="600" y="76" text-anchor="middle">隔离层不同，管理对象也不同</text>
  <text class="sub" x="600" y="110" text-anchor="middle">虚拟机偏机器边界，容器偏应用工作负载</text>
  <text class="t" x="330" y="160" text-anchor="middle">虚拟机部署</text>
  <text class="t" x="870" y="160" text-anchor="middle">容器部署</text>
  <rect class="safe" x="185" y="185" width="290" height="58" rx="18"/>
  <text class="s" x="330" y="221" text-anchor="middle">隔离边界包含完整系统</text>
  <rect class="safe" x="725" y="185" width="290" height="58" rx="18"/>
  <text class="s" x="870" y="221" text-anchor="middle">共享内核，隔离工作负载</text>
  <rect class="layer vm" x="130" y="300" width="175" height="108" rx="18"/>
  <text class="label" x="218" y="333" text-anchor="middle">虚拟机 A</text>
  <text class="s" x="218" y="363" text-anchor="middle">独立操作系统</text>
  <text class="s" x="218" y="389" text-anchor="middle">应用运行时</text>
  <rect class="layer vm" x="355" y="300" width="175" height="108" rx="18"/>
  <text class="label" x="443" y="333" text-anchor="middle">虚拟机 B</text>
  <text class="s" x="443" y="363" text-anchor="middle">独立操作系统</text>
  <text class="s" x="443" y="389" text-anchor="middle">应用运行时</text>
  <rect class="layer base" x="130" y="438" width="400" height="52" rx="14"/>
  <text class="label" x="330" y="471" text-anchor="middle">虚拟化层</text>
  <rect class="layer base" x="130" y="516" width="400" height="52" rx="14"/>
  <text class="label" x="330" y="549" text-anchor="middle">物理机 / 宿主机</text>
  <rect class="layer ct" x="670" y="270" width="112" height="92" rx="18"/>
  <text class="label" x="726" y="305" text-anchor="middle">容器 A</text>
  <text class="s" x="726" y="334" text-anchor="middle">应用依赖</text>
  <rect class="layer ct" x="816" y="270" width="112" height="92" rx="18"/>
  <text class="label" x="872" y="305" text-anchor="middle">容器 B</text>
  <text class="s" x="872" y="334" text-anchor="middle">应用依赖</text>
  <rect class="layer ct" x="962" y="270" width="112" height="92" rx="18"/>
  <text class="label" x="1018" y="305" text-anchor="middle">容器 C</text>
  <text class="s" x="1018" y="334" text-anchor="middle">应用依赖</text>
  <rect class="layer base" x="670" y="390" width="400" height="52" rx="14"/>
  <text class="label" x="870" y="423" text-anchor="middle">容器运行时</text>
  <rect class="layer base" x="670" y="468" width="400" height="52" rx="14"/>
  <text class="label" x="870" y="501" text-anchor="middle">宿主机系统与内核</text>
  <rect class="layer base" x="670" y="546" width="400" height="52" rx="14"/>
  <text class="label" x="870" y="579" text-anchor="middle">物理机 / 宿主机</text>
  <text class="note" x="600" y="598" text-anchor="middle">两种方式都可纳入统一监控和变更管理，边界不同不等于互相替代</text>
</svg>
