{"id":103995,"date":"2022-05-10T15:36:38","date_gmt":"2022-05-10T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0"},"modified":"2022-05-10T15:36:38","modified_gmt":"2022-05-10T13:36:38","slug":"kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","title":{"rendered":"Spole\u010dnost Microsoft zve\u0159ejnila distribuci Linuxu CBL-Mariner 2.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Microsoft zve\u0159ejnila prvn\u00ed stabiln\u00ed aktualizaci nov\u00e9 verze distribuce CBL-Mariner 2.0 (Common Base Linux Mariner), kter\u00e1 se vyv\u00edj\u00ed jako univerz\u00e1ln\u00ed z\u00e1kladn\u00ed platforma pro linuxov\u00e1 prost\u0159ed\u00ed pou\u017e\u00edvan\u00e1 v cloudov\u00e9 infrastruktu\u0159e, edge syst\u00e9mech a r\u016fzn\u00fdch slu\u017eb\u00e1ch Microsoftu. Projekt se zam\u011b\u0159uje na unifikaci pou\u017e\u00edvan\u00fdch linuxov\u00fdch \u0159e\u0161en\u00ed v Microsoftu a zjednodu\u0161en\u00ed udr\u017eov\u00e1n\u00ed linuxov\u00fdch syst\u00e9m\u016f r\u016fzn\u00fdch \u00fa\u010del\u016f v aktu\u00e1ln\u00edm stavu. V\u00fdstupy projektu jsou \u0161\u00ed\u0159eny pod licenc\u00ed MIT. Sestaven\u00ed bal\u00ed\u010dk\u016f je vytv\u00e1\u0159eno pro architektury aarch64 a x86_64. <\/p>\n

Nov\u00e9 vyd\u00e1n\u00ed se vyzna\u010duje v\u00fdznamnou aktualizac\u00ed verz\u00ed program\u016f. Mezi n\u011b pat\u0159\u00ed aktualizovan\u00e9 verze Linuxov\u00e9ho j\u00e1dra 5.15 (v r\u00e1mci v\u011btve 1.0 bylo pou\u017eito j\u00e1dro 5.4), systemd 250, glibc 2.35, GCC 11.2, clang 12, Python 3.9, ruby 3.1.2, rpm 4.17, qemu 6.1, perl 5.34, ostree 2022.1. Z\u00e1kladn\u00ed repozit\u00e1\u0159 zahrnuje komponenty pro vytv\u00e1\u0159en\u00ed grafick\u00e9ho rozhran\u00ed, jako je Wayland 1.20, Mesa 21.0, GTK 3.24 a X.Org Server 1.20.10, kter\u00e9 byly d\u0159\u00edve dod\u00e1v\u00e1ny v samostatn\u00e9m repozit\u00e1\u0159i coreui. P\u0159id\u00e1ny byly sestaven\u00ed j\u00e1dra s opravami PREEMPT_RT pro pou\u017eit\u00ed v syst\u00e9mech pracuj\u00edc\u00edch v re\u00e1ln\u00e9m \u010dase. <\/p>\n

Distribuce CBL-Mariner poskytuje malou typovou sadu z\u00e1kladn\u00edch bal\u00ed\u010dk\u016f, kter\u00e9 slou\u017e\u00ed jako univerz\u00e1ln\u00ed z\u00e1klad pro vytv\u00e1\u0159en\u00ed kontejner\u016f, hostitelsk\u00fdch prost\u0159ed\u00ed a slu\u017eeb spu\u0161t\u011bn\u00fdch v cloudov\u00fdch infrastruktur\u00e1ch a na edge za\u0159\u00edzen\u00edch. Slo\u017eit\u011bj\u0161\u00ed a specializovan\u00e1 \u0159e\u0161en\u00ed mohou b\u00fdt vytv\u00e1\u0159ena p\u0159id\u00e1n\u00edm dal\u0161\u00edch bal\u00ed\u010dk\u016f nad CBL-Mariner, ale z\u00e1klad pro v\u0161echny takov\u00e9 syst\u00e9my z\u016fst\u00e1v\u00e1 nem\u011bnn\u00fd, co\u017e zjednodu\u0161uje \u00fadr\u017ebu a p\u0159\u00edpravu aktualizac\u00ed. Nap\u0159\u00edklad, CBL-Mariner se pou\u017e\u00edv\u00e1 jako z\u00e1klad mini distribuce WSLg, ve kter\u00e9 jsou poskytov\u00e1ny komponenty grafick\u00e9ho z\u00e1sobn\u00edku pro organizaci spu\u0161t\u011bn\u00ed GUI aplikac\u00ed Linux v prost\u0159ed\u00edch zalo\u017een\u00fdch na subsyst\u00e9mu WSL2 (Windows Subsystem for Linux). Roz\u0161\u00ed\u0159en\u00e1 funk\u010dnost ve WSLg se realizuje prost\u0159ednictv\u00edm zahrnut\u00ed dal\u0161\u00edch bal\u00ed\u010dk\u016f s kompozitn\u00edm. serverem<\/a> Weston, XWayland, PulseAudio a FreeRDP. <\/p>\n

Syst\u00e9m sestaven\u00ed CBL-Mariner umo\u017e\u0148uje generovat jak jednotliv\u00e9 RPM bal\u00ed\u010dky na z\u00e1klad\u011b SPEC soubor\u016f a zdrojov\u00fdch text\u016f, tak monolitick\u00e9 syst\u00e9mov\u00e9 obrazy, kter\u00e9 jsou vytv\u00e1\u0159eny pomoc\u00ed n\u00e1stroj\u016f rpm-ostree a aktualizov\u00e1ny atomicky, bez rozd\u011blen\u00ed na jednotliv\u00e9 bal\u00ed\u010dky. T\u00edm p\u00e1dem jsou podporov\u00e1ny dv\u011b modely dod\u00e1v\u00e1n\u00ed aktualizac\u00ed: prost\u0159ednictv\u00edm aktualizace jednotliv\u00fdch bal\u00ed\u010dk\u016f a prost\u0159ednictv\u00edm p\u0159estavby a aktualizace cel\u00e9ho syst\u00e9mov\u00e9ho obrazu. K dispozici je repozit\u00e1\u0159, kter\u00fd zahrnuje p\u0159ibli\u017en\u011b 3000 ji\u017e sestaven\u00fdch RPM bal\u00ed\u010dk\u016f, kter\u00fd lze vyu\u017e\u00edt k sest\u017een\u00ed vlastn\u00edch obraz\u016f na z\u00e1klad\u011b konfigura\u010dn\u00edho souboru. <\/p>\n

Distro obsahuje pouze nejz\u00e1kladn\u011bj\u0161\u00ed komponenty a je optimalizov\u00e1no pro minim\u00e1ln\u00ed spot\u0159ebu pam\u011bti a diskov\u00e9ho prostoru, stejn\u011b jako pro vysokou rychlost spu\u0161t\u011bn\u00ed. Distro je tak\u00e9 pozoruhodn\u00e9 za\u010dlen\u011bn\u00edm r\u016fzn\u00fdch dodate\u010dn\u00fdch mechanism\u016f pro zv\u00fd\u0161en\u00ed ochrany. V projektu je aplikov\u00e1n p\u0159\u00edstup \"maxim\u00e1ln\u00ed zabezpe\u010den\u00ed jako v\u00fdchoz\u00ed\". Je k dispozici mo\u017enost filtrov\u00e1n\u00ed syst\u00e9mov\u00fdch vol\u00e1n\u00ed pomoc\u00ed mechanismu seccomp, \u0161ifrov\u00e1n\u00ed diskov\u00fdch odd\u00edl\u016f a ov\u011b\u0159ov\u00e1n\u00ed bal\u00ed\u010dk\u016f pomoc\u00ed digit\u00e1ln\u00edho podpisu. <\/p>\n

Byly aktivov\u00e1ny podporovan\u00e9 re\u017eimy randomizace adresn\u00edho prostoru v j\u00e1d\u0159e Linux a tak\u00e9 mechanismy ochrany proti \u00fatok\u016fm souvisej\u00edc\u00edm se symbolick\u00fdmi odkazy, mmap, \/dev\/mem a \/dev\/kmem. Pro oblasti pam\u011bti, ve kter\u00fdch jsou um\u00edst\u011bny segmenty s daty j\u00e1dra a modul\u016f, je nastaven re\u017eim pouze pro \u010dten\u00ed a je zak\u00e1z\u00e1no prov\u00e1d\u011bn\u00ed k\u00f3du. Voliteln\u011b je k dispozici mo\u017enost zak\u00e1zat na\u010d\u00edt\u00e1n\u00ed modul\u016f j\u00e1dra po inicializaci syst\u00e9mu. Pro filtrov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch paket\u016f je pou\u017eit n\u00e1stroj iptables. B\u011bhem sestaven\u00ed jsou ve v\u00fdchoz\u00edm nastaven\u00ed povoleny ochrann\u00e9 re\u017eimy proti p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku, p\u0159ete\u010den\u00ed bufferu a probl\u00e9m\u016fm s form\u00e1tov\u00e1n\u00edm \u0159et\u011bzc\u016f (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). <\/p>\n

Pro spr\u00e1vu slu\u017eeb a zat\u00ed\u017een\u00ed se pou\u017e\u00edv\u00e1 syst\u00e9mov\u00fd spr\u00e1vce systemd. Pro spr\u00e1vu bal\u00ed\u010dk\u016f jsou dod\u00e1v\u00e1ny bal\u00ed\u010dkov\u00e9 spr\u00e1vce RPM a DNF. SSH server nen\u00ed p\u0159i instalaci ve v\u00fdchoz\u00edm nastaven\u00ed zapnut. Pro instalaci distribuce je k dispozici instal\u00e1tor, kter\u00fd m\u016f\u017ee fungovat jak v textov\u00e9m, tak v grafick\u00e9m re\u017eimu. Instal\u00e1tor poskytuje mo\u017enost instalace s pln\u00fdm nebo z\u00e1kladn\u00edm souborem bal\u00ed\u010dk\u016f, nab\u00edz\u00ed rozhran\u00ed pro v\u00fdb\u011br diskov\u00e9 partition, volbu n\u00e1zvu hostitele a vytv\u00e1\u0159en\u00ed u\u017eivatel\u016f.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner 2.0 (Common Base Linux Mariner), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, edge-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Microsoft. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 Microsoft Linux-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438. \u041d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103995","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spole\u010dnost Microsoft zve\u0159ejnila linuxovou distribuci CBL-Mariner 2.0 | ProHoster","description":"Spole\u010dnost Microsoft zve\u0159ejnila prvn\u00ed stabiln\u00ed aktualizaci nov\u00e9 verze distribuce CBL-Mariner 2.0 (Common Base Linux Mariner), kter\u00e1 se vyv\u00edj\u00ed jako univerz\u00e1ln\u00ed z\u00e1kladn\u00ed platforma pro linuxov\u00e1 prost\u0159ed\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 CBL-Mariner 2.0 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner 2.0 (Common Base Linux Mariner), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-10T13:36:38+00:00","article:modified_time":"2022-05-10T13:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103995","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-10 13:37:26","updated":"2026-02-09 22:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=103995"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103995\/revisions"}],"predecessor-version":[{"id":160325,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103995\/revisions\/160325"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=103995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=103995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=103995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}