{"id":114764,"date":"2024-04-03T12:25:48","date_gmt":"2024-04-03T10:25:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd"},"modified":"2024-04-03T12:25:48","modified_gmt":"2024-04-03T10:25:48","slug":"inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","title":{"rendered":"Iniciativa na sn\u00ed\u017een\u00ed z\u00e1vislost\u00ed v libsystemd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mezi v\u00fdvoj\u00e1\u0159i syst\u00e9mov\u00e9ho spr\u00e1vce systemd prob\u00edh\u00e1 diskuse o redukci z\u00e1vislost\u00ed knihovny libsystemd, kter\u00e1 je propojena nejen s komponentami systemd, ale tak\u00e9 s mnoha extern\u00edmi aplikacemi. Nap\u0159\u00edklad ve Fedo\u0159e pou\u017e\u00edv\u00e1 v\u00edce ne\u017e 150 bal\u00ed\u010dk\u016f libsystemd jako z\u00e1vislost. Inici\u00e1tor diskuse tvrd\u00ed, \u017ee zahrnut\u00ed dal\u0161\u00edch extern\u00edch knihoven do libsystemd, kter\u00e9 nejsou pod kontrolou v\u00fdvoj\u00e1\u0159\u016f systemd, v\u00fdznamn\u011b zvy\u0161uje plochu \u00fatoku v p\u0159\u00edpad\u011b kompromitace t\u011bchto extern\u00edch knihoven, jak se to stalo s knihovnou liblzma. <\/p>\n

Krom\u011b liblzma a glibc se do libsystemd na\u010d\u00edtaj\u00ed tak\u00e9 knihovny libzstd, liblz4 a libgcrypt, jejich\u017e zabezpe\u010den\u00ed se st\u00e1v\u00e1 kriticky d\u016fle\u017eit\u00fdm \u00fakolem. V libsystemd je k dispozici 12 z\u00e1kladn\u00edch API (sd-bus, sd-daemon, sd-device, sd-event, sd-hwdb, sd-id128, sd-journal, sd-login, sd-netlink, sd-network, sd-path a sd-resolve) a nast\u00e1v\u00e1 situace, kdy aplikace, nap\u0159\u00edklad ta, kter\u00e1 pou\u017e\u00edv\u00e1 libsystemd pouze pro zavol\u00e1n\u00ed funkce sd_notify k informov\u00e1n\u00ed systemd o zm\u011bn\u011b stavu nebo sd_journal pro z\u00e1pis dat do logu, je propojena se v\u0161emi ostatn\u00edmi knihovnami a zpracovatelsk\u00fdmi API. Jako \u0159e\u0161en\u00ed se navrhuje rozd\u011blen\u00ed libsystemd na n\u011bkolik samostatn\u00fdch knihoven, kter\u00e9 by m\u011bly na starosti jednotliv\u00e1 API, co\u017e by umo\u017enilo na\u010d\u00edtat extern\u00ed z\u00e1vislosti pouze tam, kde jsou skute\u010dn\u011b pot\u0159ebn\u00e9. <\/p>\n

V\u00fdvoj\u00e1\u0159i systemd pova\u017euj\u00ed rozd\u011blen\u00ed za nepraktick\u00e9, proto\u017ee zpracovatel\u00e9 p\u0159\u00edtomn\u00ed v libsystemd jsou vz\u00e1jemn\u011b propojeni. Rozd\u011blen\u00ed by vy\u017eadovalo obrovsk\u00e9 \u00fasil\u00ed a vedlo by bu\u010f ke ztr\u00e1t\u011b efektivity, nebo k pot\u0159eba duplikace k\u00f3du. Pro sn\u00ed\u017een\u00ed spot\u0159eby pam\u011bti v libsystemd bylo ned\u00e1vno p\u0159ijato zm\u011bnu s realizac\u00ed dynamick\u00e9ho na\u010d\u00edt\u00e1n\u00ed knihoven liblzma, libzstd a liblz4 prost\u0159ednictv\u00edm vol\u00e1n\u00ed dlopen(), kdy\u017e jsou jejich funkce skute\u010dn\u011b pot\u0159ebn\u00e9. Podobn\u00e1 zm\u011bna bude od p\u0159\u00ed\u0161t\u00edho vyd\u00e1n\u00ed zavedena i pro libgcrypt. <\/p>\n

Toto \u0159e\u0161en\u00ed se stalo objektem kritiky, proto\u017ee m\u00edsto explicitn\u00edho a z\u0159eteln\u00e9ho propojen\u00ed bude nyn\u00ed na\u010d\u00edt\u00e1n\u00ed extern\u00edch knihoven prov\u00e1d\u011bno neexplicitn\u011b, co\u017e zkomplikuje diagnostiku, proto\u017ee nebude z\u0159ejm\u00e1 vazba mezi API vol\u00e1n\u00edmi libsystemd a vol\u00e1n\u00edm funkc\u00ed z extern\u00edch knihoven. Samotn\u00fd p\u0159echod na na\u010d\u00edt\u00e1n\u00ed prost\u0159ednictv\u00edm dlopen() nem\u011bn\u00ed architekturu, pouze skr\u00fdv\u00e1 extern\u00ed komponenty p\u0159ed spr\u00e1vci a u\u017eivateli. <\/p>\n

Lenart Pottering vyj\u00e1d\u0159il kategorick\u00fd nesouhlas s my\u0161lenkou rozd\u011blit libsystemd na n\u011bkolik knihoven, proto\u017ee by tento krok v\u00fdrazn\u011b zkomplikoval sd\u00edlen\u00ed k\u00f3du v systemd a vy\u017eadoval by p\u0159eveden\u00ed v\u0161ech vnit\u0159n\u00edch zpracovatel\u016f na ve\u0159ejn\u00e9 nebo jejich odd\u011blen\u00e9 statick\u00e9 zkompilov\u00e1n\u00ed do ka\u017ed\u00e9 knihovny. V prvn\u00edm p\u0159\u00edpad\u011b by vznikly probl\u00e9my s udr\u017eov\u00e1n\u00edm stability API a jmenn\u00fdmi prostory, a ve druh\u00e9m p\u0159\u00edpad\u011b by do\u0161lo ke zv\u00fd\u0161en\u00ed velikosti kv\u016fli duplikaci k\u00f3du. <\/p>\n

Realizovan\u00e9 pro n\u00e1sleduj\u00edc\u00ed vyd\u00e1n\u00ed na\u010d\u00edt\u00e1n\u00ed extern\u00edch knihoven pouze na vy\u017e\u00e1d\u00e1n\u00ed je Lenartem vn\u00edm\u00e1no jako optim\u00e1ln\u00ed strategie. Probl\u00e9m s komplikovan\u00fdm z\u00edsk\u00e1v\u00e1n\u00edm dat o dynamicky na\u010d\u00edtan\u00fdch knihovn\u00e1ch se navrhuje vy\u0159e\u0161it p\u0159id\u00e1n\u00edm dodate\u010dn\u00fdch pol\u00ed s informacemi o t\u011bchto dynamick\u00fdch z\u00e1vislostech do soubor\u016f ELF, kter\u00e9 mohou b\u00fdt zpracov\u00e1ny ladic\u00edmi n\u00e1stroji a zobrazov\u00e1ny ve v\u00fdstupu utilit readelf. <\/p>\n

Pokud jde o propojen\u00ed velk\u00e9ho po\u010dtu aplikac\u00ed s libsystemd, Lenart doporu\u010dil v\u00fdvoj\u00e1\u0159\u016fm aplikac\u00ed nepokou\u0161et se na\u010d\u00edtat libsystemd pouze kv\u016fli jedn\u00e9 funkci, ale realizovat zpracovatele protokolu na \u00farovni aplikace. Nap\u0159\u00edklad implementace funk\u010dnosti sd_notify() je dost trivi\u00e1ln\u00ed a m\u016f\u017ee se vej\u00edt do n\u011bkolika \u0159\u00e1dk\u016f k\u00f3du p\u0159i pou\u017eit\u00ed UNIXov\u00fdch soket\u016f (AF_UNIX). Takov\u00e1 samostatn\u00e1 implementace sd_notify je od roku 2017 dostupn\u00e1 pro OpenSSH a ned\u00e1vno byla p\u0159ijata do p\u0159enosn\u00e9 verze OpenSSH 9.8, jej\u00ed\u017e vyd\u00e1n\u00ed je pl\u00e1nov\u00e1no na polovinu l\u00e9ta.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 systemd \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libsystemd, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 systemd, \u043d\u043e \u0438 \u0441\u043e \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 Fedora \u0431\u043e\u043b\u0435\u0435 150 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 libsystemd \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u043e\u0440 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0435 \u0432 libsystemd \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 systemd, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114764","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Iniciativa na sn\u00ed\u017een\u00ed z\u00e1vislost\u00ed knihovny libsystemd | ProHoster","description":"Mezi v\u00fdvoj\u00e1\u0159i syst\u00e9mov\u00e9ho mana\u017eera systemd prob\u00edh\u00e1 debata o sn\u00ed\u017een\u00ed z\u00e1vislost\u00ed knihovny libsystemd, kter\u00e1 se propojuje nejen s komponenty systemd, ale tak\u00e9 s mnoha extern\u00edmi aplikacemi.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u043f\u043e \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 libsystemd | ProHoster","og:description":"\u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 systemd \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libsystemd, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 systemd, \u043d\u043e \u0438 \u0441\u043e \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-03T10:25:48+00:00","article:modified_time":"2024-04-03T10:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114764","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 21:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 21:20:19","updated":"2026-01-22 21:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=114764"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114764\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=114764"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=114764"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=114764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}