V\u00fdvoj\u00e1\u0159i distribuce NixOS ozn\u00e1mili zaveden\u00ed podpory pro ov\u011b\u0159ov\u00e1n\u00ed integrity minim\u00e1ln\u00edho iso obrazu (iso_minimal.x86_64-linux) pomoc\u00ed mechanismu opakovateln\u00fdch sestaven\u00ed. D\u0159\u00edve byla opakovateln\u00e1 sestaven\u00ed dostupn\u00e1 na \u00farovni jednotliv\u00fdch bal\u00ed\u010dk\u016f, nyn\u00ed byla roz\u0161\u00ed\u0159ena na cel\u00fd iso obraz. Ka\u017ed\u00fd u\u017eivatel m\u016f\u017ee vytvo\u0159it iso obraz, kter\u00fd je zcela identick\u00fd s poskytovan\u00fdm pro sta\u017een\u00ed, a ov\u011b\u0159it, \u017ee byl sestaven z poskytovan\u00fdch zdrojov\u00fdch text\u016f a neobsahuje skryt\u00e9 zm\u011bny. Pro automatizaci kontroly iso obrazu NixOS pomoc\u00ed opakovateln\u00fdch sestaven\u00ed byl p\u0159ipraven speci\u00e1ln\u00ed skript. V dal\u0161\u00edm kroku se pl\u00e1nuje zajistit opakovateln\u00e1 sestaven\u00ed pro pln\u00fd iso obraz se stoln\u00edm prost\u0159ed\u00edm GNOME. <\/p>\n
Opakovateln\u00e1 sestaven\u00ed jsou d\u016fle\u017eit\u00fdm \u010dl\u00e1nkem pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti, proto\u017ee umo\u017e\u0148uj\u00ed samostatn\u011b ov\u011b\u0159it, \u017ee nab\u00edzen\u00e9 distribuc\u00ed sestaven\u00ed byte-by-byte odpov\u00edd\u00e1 sestaven\u00edm, kter\u00e1 byla osobn\u011b sestavena ze zdrojov\u00fdch text\u016f. Bez mo\u017enosti ov\u011b\u0159it identitu bin\u00e1rn\u00edho sestaven\u00ed z\u016fst\u00e1v\u00e1 u\u017eivateli pouze slep\u011b d\u016fv\u011b\u0159ovat ciz\u00ed infrastruktu\u0159e sestaven\u00ed, jej\u00ed\u017e kompromitace kompil\u00e1toru nebo sestavovac\u00edho n\u00e1stroje m\u016f\u017ee v\u00e9st k vlo\u017een\u00ed skryt\u00fdch zadn\u00edch vr\u00e1tek. Pro zaji\u0161t\u011bn\u00ed opakovateln\u00fdch sestaven\u00ed je nutn\u00e9 reprodukovat za\u0159\u00edzen\u00ed a parametry sestavovac\u00edho prost\u0159ed\u00ed, pou\u017e\u00edvat identick\u00e9 verze program\u016f, z\u00e1vislost\u00ed a spou\u0161t\u011bc\u00edch komponent, vylou\u010dit zaveden\u00ed prom\u011bnliv\u00fdch dat (\u010dasov\u00e9 zna\u010dky, n\u00e1hodn\u00e9 plni\u010dky atd.) a tak\u00e9 zachovat po\u0159\u00e1dek sestaven\u00ed soubor\u016f a dod\u00e1vky bal\u00ed\u010dk\u016f v iso obraze. <\/p>\n
P\u0159ipom\u00edn\u00e1me, \u017ee distribuce NixOS je zalo\u017eena na spr\u00e1vci bal\u00ed\u010dk\u016f Nix a poskytuje \u0159adu vlastn\u00edch \u0159e\u0161en\u00ed, kter\u00e1 usnad\u0148uj\u00ed konfiguraci a \u00fadr\u017ebu syst\u00e9mu. Nap\u0159\u00edklad v NixOS se pou\u017e\u00edv\u00e1 jednotn\u00fd konfigura\u010dn\u00ed soubor (configuration.nix), umo\u017e\u0148uje se rychl\u00fd n\u00e1vrat k p\u0159edchoz\u00edm verz\u00edm, podporuje p\u0159ep\u00edn\u00e1n\u00ed mezi r\u016fzn\u00fdmi stavy syst\u00e9mu, je podporov\u00e1na instalace jednotliv\u00fdch bal\u00ed\u010dk\u016f jednotliv\u00fdmi u\u017eivateli (bal\u00ed\u010dek se instaluje do dom\u00e1c\u00edho adres\u00e1\u0159e) a je mo\u017en\u00e9 sou\u010dasn\u011b instalovat v\u00edce verz\u00ed jedn\u00e9 aplikace. P\u0159i pou\u017eit\u00ed Nix se bal\u00ed\u010dky instaluj\u00ed do samostatn\u00e9ho stromu adres\u00e1\u0159\u016f \/nix\/store nebo do podadres\u00e1\u0159e v u\u017eivatelsk\u00e9m adres\u00e1\u0159i. Nap\u0159\u00edklad bal\u00ed\u010dek se instaluje jako \/nix\/store\/f2b5\u20268a563-firefox-89.0.1\/, kde \u201ef2b5\u2026\u201c je unik\u00e1tn\u00ed identifik\u00e1tor bal\u00ed\u010dku, kter\u00fd se pou\u017e\u00edv\u00e1 pro spr\u00e1vu z\u00e1vislost\u00ed. <\/p>\n
Bal\u00ed\u010dky jsou uspo\u0159\u00e1d\u00e1ny jako kontejnery, kter\u00e9 obsahuj\u00ed pot\u0159ebn\u00e9 komponenty pro provoz aplikac\u00ed. Mezi bal\u00ed\u010dky je mo\u017en\u00e9 definovat z\u00e1vislosti, p\u0159i\u010dem\u017e pro vyhled\u00e1n\u00ed ji\u017e nainstalovan\u00fdch z\u00e1vislost\u00ed se pou\u017e\u00edv\u00e1 skenov\u00e1n\u00ed hash identifik\u00e1tor\u016f v adres\u00e1\u0159i nainstalovan\u00fdch bal\u00ed\u010dk\u016f. Je mo\u017en\u00e1 jak \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 hotov\u00fdch bin\u00e1rn\u00edch bal\u00ed\u010dk\u016f z repozit\u00e1\u0159e (p\u0159i instalaci aktualizac\u00ed se k bin\u00e1rn\u00edm bal\u00ed\u010dk\u016fm stahuj\u00ed pouze delta zm\u011bny), tak i sestaven\u00ed z v\u00fdchoz\u00edch text\u016f se v\u0161emi z\u00e1vislostmi. Kolekce bal\u00ed\u010dk\u016f je prezentov\u00e1na ve speci\u00e1ln\u00edm repozit\u00e1\u0159i Nixpkgs. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430. \u041b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c iso-\u043e\u0431\u0440\u0430\u0437, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0439 \u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 iso-\u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0441\u043e\u0431\u0440\u0430\u043d \u0438\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100551","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V NixOS je zaji\u0161t\u011bna podpora opakovateln\u00fdch sestaven\u00ed pro iso obraz | ProHoster","description":"V\u00fdvoj\u00e1\u0159i distribuce NixOS ozn\u00e1mili implementaci podpory verifikace integrity minim\u00e1ln\u00edho iso obrazu (iso_minimal.x86_64-linux) pomoc\u00ed mechanismu opakovateln\u00fdch sestaven\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NixOS \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a \u0434\u043b\u044f iso-\u043e\u0431\u0440\u0430\u0437\u0430 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-21T08:22:44+00:00","article:modified_time":"2021-06-21T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100551","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-21 08:34:58","updated":"2022-09-28 18:53:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100551"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100551\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"