Byla zve\u0159ejn\u011bna nov\u00e1 stabiln\u00ed verze n\u00e1stroje Flatpak 1.14, kter\u00fd poskytuje syst\u00e9m pro vytv\u00e1\u0159en\u00ed sob\u011bsta\u010dn\u00fdch bal\u00ed\u010dk\u016f, kter\u00e9 nejsou v\u00e1z\u00e1ny na konkr\u00e9tn\u00ed distribuce Linuxu a b\u011b\u017e\u00ed ve speci\u00e1ln\u00edm kontejneru, kter\u00fd izoluje aplikaci od zbytku syst\u00e9mu. Podpora pro b\u011bh Flatpak bal\u00ed\u010dk\u016f je zaji\u0161t\u011bna pro Arch Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, Alt Linux a Ubuntu. Flatpak bal\u00ed\u010dky jsou zahrnuty v repozit\u00e1\u0159i Fedora a jsou podporov\u00e1ny v nativn\u00edm spr\u00e1vci aplikac\u00ed GNOME. <\/p>\n
Hlavn\u00ed novinky ve verzi Flatpak 1.14: <\/p>\n
P\u0159ipom\u00edn\u00e1me, \u017ee Flatpak d\u00e1v\u00e1 v\u00fdvoj\u00e1\u0159\u016fm aplikac\u00ed mo\u017enost usnadnit distribuci sv\u00fdch program\u016f, kter\u00e9 nejsou sou\u010d\u00e1st\u00ed ofici\u00e1ln\u00edch repozit\u00e1\u0159\u016f distribuc\u00ed, p\u0159\u00edpravou jednoho univerz\u00e1ln\u00edho kontejneru, ani\u017e by bylo nutn\u00e9 vytv\u00e1\u0159et samostatn\u00e9 sestaven\u00ed pro ka\u017edou distribuci. U\u017eivatel\u016fm, kte\u0159\u00ed dbaj\u00ed na bezpe\u010dnost, Flatpak umo\u017e\u0148uje spustit problematickou aplikaci v kontejneru, p\u0159i\u010dem\u017e poskytuje p\u0159\u00edstup pouze k s\u00ed\u0165ov\u00fdm funkc\u00edm a u\u017eivatelsk\u00fdm soubor\u016fm souvisej\u00edc\u00edm s aplikac\u00ed. U\u017eivatel\u016fm, kte\u0159\u00ed se zaj\u00edmaj\u00ed o novinky, Flatpak umo\u017e\u0148uje instalaci nejnov\u011bj\u0161\u00edch testovac\u00edch a stabiln\u00edch verz\u00ed aplikac\u00ed, ani\u017e by bylo nutn\u00e9 zasahovat do syst\u00e9mu. Nap\u0159\u00edklad Flatpak bal\u00ed\u010dky jsou k dispozici pro LibreOffice, Midori, GIMP, Inkscape, Kdenlive, Steam, 0 A.D., Visual Studio Code, VLC, Slack, Skype, Telegram Desktop, Android Studio atd. <\/p>\n
Aby se sn\u00ed\u017eila velikost bal\u00ed\u010dku, zahrnuje pouze z\u00e1vislosti specifick\u00e9 pro aplikaci, zat\u00edmco z\u00e1kladn\u00ed syst\u00e9mov\u00e9 a grafick\u00e9 knihovny (GTK, Qt, knihovny GNOME a KDE atd.) jsou dod\u00e1ny jako p\u0159ipojiteln\u00e9 typov\u00e9 runtime prost\u0159ed\u00ed. Kl\u00ed\u010dov\u00fd rozd\u00edl mezi Flatpak a Snap spo\u010d\u00edv\u00e1 v tom, \u017ee Snap pou\u017e\u00edv\u00e1 komponenty prost\u0159ed\u00ed hlavn\u00edho syst\u00e9mu a izolaci zalo\u017eenou na filtrov\u00e1n\u00ed syst\u00e9mov\u00fdch vol\u00e1n\u00ed, zat\u00edmco Flatpak vytv\u00e1\u0159\u00ed odd\u011blen\u00fd kontejner od syst\u00e9mu a operuje s velk\u00fdmi sadami runtime, p\u0159i\u010dem\u017e jako z\u00e1vislosti poskytuje nikoli bal\u00ed\u010dky, ale typov\u00e1 syst\u00e9mov\u00e1 prost\u0159ed\u00ed (nap\u0159\u00edklad v\u0161echny knihovny pot\u0159ebn\u00e9 pro fungov\u00e1n\u00ed program\u016f GNOME nebo KDE). <\/p>\n
Krom\u011b typick\u00e9ho syst\u00e9mov\u00e9ho prost\u0159ed\u00ed (runtime), kter\u00e9 se instaluje prost\u0159ednictv\u00edm speci\u00e1ln\u00edho repozit\u00e1\u0159e, jsou dod\u00e1v\u00e1ny dal\u0161\u00ed z\u00e1vislosti (bundle) pot\u0159ebn\u00e9 pro chod aplikace. Celkov\u011b runtime a bundle tvo\u0159\u00ed obsah kontejneru, p\u0159i\u010dem\u017e runtime se instaluje odd\u011blen\u011b a v\u00e1\u017ee se na v\u00edce kontejner\u016f sou\u010dasn\u011b, co\u017e umo\u017e\u0148uje vyhnout se duplikaci sd\u00edlen\u00fdch syst\u00e9mov\u00fdch soubor\u016f pro kontejnery. V jednom syst\u00e9mu m\u016f\u017ee b\u00fdt nainstalov\u00e1no n\u011bkolik r\u016fzn\u00fdch runtime (GNOME, KDE) nebo n\u011bkolik verz\u00ed jednoho runtime (GNOME 3.40, GNOME 3.42). Kontejner s aplikac\u00ed jako z\u00e1vislost pou\u017e\u00edv\u00e1 vazbu pouze na ur\u010dit\u00e9 runtime, bez ohledu na jednotliv\u00e9 bal\u00ed\u010dky, ze kter\u00fdch se runtime skl\u00e1d\u00e1. V\u0161echny chyb\u011bj\u00edc\u00ed prvky jsou zabaleny p\u0159\u00edmo spolu s aplikac\u00ed. P\u0159i vytv\u00e1\u0159en\u00ed kontejneru se obsah runtime montuje jako odd\u00edl \/usr a bundle se montuje do adres\u00e1\u0159e \/app. <\/p>\n
Obsah runtime a kontejner\u016f aplikac\u00ed se vytv\u00e1\u0159\u00ed pomoc\u00ed technologie OSTree, p\u0159i kter\u00e9 se obraz atom\u00e1rn\u011b aktualizuje z Git-podobn\u00e9ho \u00falo\u017ei\u0161t\u011b, co\u017e umo\u017e\u0148uje aplikovat metody verzionov\u00e1n\u00ed na komponenty distribuce (nap\u0159\u00edklad je mo\u017en\u00e9 rychle vr\u00e1tit syst\u00e9m do p\u0159edchoz\u00edho stavu). RPM bal\u00ed\u010dky se p\u0159ekr\u00fdvaj\u00ed do repozit\u00e1\u0159e OSTree pomoc\u00ed speci\u00e1ln\u00ed vrstvy rpm-ostree. Samostatn\u00e1 instalace a aktualizace bal\u00ed\u010dk\u016f uvnit\u0159 pracovn\u00edho prost\u0159ed\u00ed nen\u00ed podporov\u00e1na, syst\u00e9m se aktualizuje nikoli na \u00farovni jednotliv\u00fdch komponent\u016f, ale celkov\u011b, atom\u00e1rn\u011b m\u011bn\u00ed sv\u00e9 stavy. Jsou poskytov\u00e1ny prost\u0159edky pro inkrement\u00e1ln\u00ed aplikaci aktualizac\u00ed, kter\u00e9 osvobozuj\u00ed od nutnosti \u00fapln\u00e9 v\u00fdm\u011bny obrazu p\u0159i ka\u017ed\u00e9 aktualizaci. <\/p>\n
Vytv\u00e1\u0159en\u00e9 izolovan\u00e9 prost\u0159ed\u00ed je pln\u011b nez\u00e1visl\u00e9 na pou\u017e\u00edvan\u00e9 distribuci a p\u0159i spr\u00e1vn\u00e9m nastaven\u00ed bal\u00ed\u010dku nem\u00e1 p\u0159\u00edstup k soubor\u016fm a proces\u016fm u\u017eivatele nebo z\u00e1kladn\u00edho syst\u00e9mu, nem\u016f\u017ee p\u0159\u00edmo komunikovat s hardwarem, krom\u011b v\u00fdstupu p\u0159es DRI a po\u017eadavk\u016f na s\u00ed\u0165ov\u00fd subsyst\u00e9m. V\u00fdstup grafiky a organizace vstupu jsou realizov\u00e1ny prost\u0159ednictv\u00edm protokolu Wayland nebo pomoc\u00ed p\u0159esm\u011brov\u00e1n\u00ed socketu X11. Interakce s vn\u011bj\u0161\u00edm prost\u0159ed\u00edm je zalo\u017eena na syst\u00e9mu zpr\u00e1v DBus a speci\u00e1ln\u00edm API Portals. <\/p>\n
Pro izolaci se pou\u017e\u00edv\u00e1 mezivrstva Bubblewrap a tradi\u010dn\u00ed technologie kontejnerov\u00e9 virtualizace pro Linux, zalo\u017een\u00e9 na pou\u017eit\u00ed cgroups, prostor\u016f n\u00e1zv\u016f (namespaces), Seccomp a SELinux. Pro zvukov\u00fd v\u00fdstup se pou\u017e\u00edv\u00e1 PulseAudio. Izolaci lze p\u0159itom vypnout, co\u017e vyu\u017e\u00edvaj\u00ed v\u00fdvoj\u00e1\u0159i mnoha popul\u00e1rn\u00edch bal\u00ed\u010dk\u016f, aby m\u011bli pln\u00fd p\u0159\u00edstup k FS a v\u0161em za\u0159\u00edzen\u00edm v syst\u00e9mu. Nap\u0159\u00edklad s omezen\u00fdm re\u017eimem izolace, kter\u00fd ponech\u00e1v\u00e1 pln\u00fd p\u0159\u00edstup k domovsk\u00e9mu adres\u00e1\u0159i, se dod\u00e1vaj\u00ed bal\u00ed\u010dky GIMP, VSCodium, PyCharm, Octave, Inkscape, Audacity a VLC. V p\u0159\u00edpad\u011b kompromitace bal\u00ed\u010dk\u016f s p\u0159\u00edstupem k domovsk\u00e9mu adres\u00e1\u0159i, navzdory tomu, \u017ee v popisu bal\u00ed\u010dku je ozna\u010den\u00ed «sandboxed», \u00fato\u010dn\u00edkovi sta\u010d\u00ed zm\u011bnit soubor ~\/.bashrc, aby mohl spustit sv\u016fj k\u00f3d. Samostatnou ot\u00e1zkou je kontrola zm\u011bn v bal\u00ed\u010dc\u00edch a d\u016fv\u011bra ve stavebn\u00edky bal\u00ed\u010dk\u016f, kte\u0159\u00ed \u010dasto nejsou spojeni s hlavn\u00edm projektem nebo distribucemi. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Flatpak 1.14, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u043c Linux \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435, \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Flatpak-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u0434\u043b\u044f Arch Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, Alt Linux \u0438 Ubuntu. \u041f\u0430\u043a\u0435\u0442\u044b \u0441 Flatpak \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Fedora […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104920","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uvoln\u011bn\u00ed syst\u00e9mu sob\u011bsta\u010dn\u00fdch bal\u00ed\u010dk\u016f Flatpak 1.14.0 | ProHoster","description":"Byla publikov\u00e1na nov\u00e1 stabiln\u00ed v\u011btev n\u00e1stroj\u016f Flatpak 1.14, kter\u00e1 poskytuje syst\u00e9m pro vytv\u00e1\u0159en\u00ed sob\u011bsta\u010dn\u00fdch bal\u00ed\u010dk\u016f, kter\u00e9 nejsou v\u00e1z\u00e1ny na konkr\u00e9tn\u00ed distribuce Linuxu a kter\u00e9 se vykon\u00e1vaj\u00ed ve speci\u00e1ln\u00edm prost\u0159ed\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-sistemy-samodostatochnyh-paketov-flatpak-1-14-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Flatpak 1.14.0 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Flatpak 1.14, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u043c Linux \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-sistemy-samodostatochnyh-paketov-flatpak-1-14-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-24T13:36:56+00:00","article:modified_time":"2022-08-24T13:36:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104920","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-24 13:37:42","updated":"2022-09-27 18:27:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104920"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104920\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"