{"id":121784,"date":"2025-02-09T03:46:02","date_gmt":"2025-02-09T01:46:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux"},"modified":"2025-02-09T03:46:02","modified_gmt":"2025-02-09T01:46:05","slug":"proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","title":{"rendered":"El proyecto TuxTape para implementar infraestructura de parches en vivo para el n\u00facleo de Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La compa\u00f1\u00eda de seguros GEICO ha publicado una versi\u00f3n preliminar de la herramienta TuxTape, que permite desplegar una infraestructura propia para la creaci\u00f3n, compilaci\u00f3n y entrega de parches en vivo para el n\u00facleo de Linux. Los parches en vivo permiten aplicar correcciones al n\u00facleo de Linux en tiempo real, sin reiniciar ni detener el sistema. El c\u00f3digo del proyecto est\u00e1 escrito en el lenguaje Rust y se distribuye bajo la licencia Apache 2.0. <\/p>\n

Los parches en vivo que corrigen vulnerabilidades son proporcionados para sus distribuciones por empresas como Red Hat, Oracle, Canonical y SUSE, pero su herramienta de bajo nivel para trabajar con parches es de acceso abierto, mientras que los propios parches se generan a puerta cerrada. Las distribuciones Gentoo y Debian han intentado desarrollar proyectos abiertos como elivepatch y linux-livepatching, pero el primero ha estado abandonado durante 6 a\u00f1os y el segundo se ha detenido en la fase de creaci\u00f3n de un prototipo de prueba. <\/p>\n

TuxTape est\u00e1 dirigido a organizar el trabajo de un sistema propio para la creaci\u00f3n y entrega de parches en vivo, sin depender de proveedores externos y adaptable a cualquier n\u00facleo de Linux, no solo a paquetes con n\u00facleos de distribuciones espec\u00edficas. TuxTape puede generar parches en vivo compatibles con la herramienta kpatch, desarrollada por Red Hat (adem\u00e1s de kpatch, existen herramientas similares: kGraft de SUSE, Ksplice de Oracle y livepatch universal). Los parches se generan en forma de m\u00f3dulos de n\u00facleo cargables, que reemplazan funciones en el n\u00facleo, utilizando la subestructura ftrace para redirigir a nuevas funciones incluidas en el m\u00f3dulo.

\"El<\/center> <\/p>\n

TuxTape puede rastrear informaci\u00f3n sobre la correcci\u00f3n de vulnerabilidades en el n\u00facleo de Linux, publicada en la lista de correo linux-cve-announce y en el repositorio de Git, clasificar las vulnerabilidades seg\u00fan su gravedad, determinar la aplicabilidad a los n\u00facleos de Linux bajo su mantenimiento y generar parches en vivo basados en parches ordinarios para las ramas LTS del n\u00facleo. La aplicabilidad de los parches originales se eval\u00faa mediante la creaci\u00f3n de perfiles de compilaci\u00f3n del n\u00facleo. Los parches que afectan vulnerabilidades que no comprometen el n\u00facleo objetivo son ignorados. <\/p>\n

TuxTape incluye un sistema para rastrear nuevas vulnerabilidades en el n\u00facleo, un generador de base de datos de parches y vulnerabilidades, servidor<\/a> para almacenar metadatos, un sistema de gesti\u00f3n de compilaciones del n\u00facleo, un compilador del n\u00facleo, un generador de parches, un archivo de parches, un cliente para recibir parches para los hosts finales y una interfaz interactiva para gestionar la generaci\u00f3n de parches en vivo.

\"El<\/center> <\/p>\n

El desarrollo se encuentra en la etapa de prototipo experimental. Para la prueba inicial se han propuesto: tuxtape-cve-parser para analizar la informaci\u00f3n sobre vulnerabilidades y construir una base de datos con parches; tuxtape-server con la implementaci\u00f3n de la interfaz gRPC para servicios que generan parches; tuxtape-kernel-builder para compilar el n\u00facleo en la configuraci\u00f3n dada y formar el perfil de compilaci\u00f3n; tuxtape-dashboard \u2014 una interfaz de consola para revisar y crear parches en vivo basados en parches originales obtenidos de tuxtape-server.

\"El<\/center>
\n
Fuente: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GEICO \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f TuxTape, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 live-\u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. Live-\u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u044f\u0434\u0440\u0443 Linux \u043d\u0430 \u043b\u0435\u0442\u0443, \u0431\u0435\u0437 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. Live-\u043f\u0430\u0442\u0447\u0438 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121785,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121784","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Proyecto TuxTape para desplegar una infraestructura de live-parches para el n\u00facleo de Linux | ProHoster","description":"La compa\u00f1\u00eda de seguros GEICO ha publicado una versi\u00f3n preliminar de la herramienta TuxTape, que permite desplegar una infraestructura propia para crear, compilar y entregar live-parches para el n\u00facleo de Linux.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TuxTape \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b live-\u043f\u0430\u0442\u0447\u0435\u0439 \u043a \u044f\u0434\u0440\u0443 Linux | ProHoster","og:description":"\u0421\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GEICO \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f TuxTape, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 live-\u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-09T01:46:05+00:00","article:modified_time":"2025-02-09T01:46:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121784","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 10:26:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:26:19","updated":"2026-01-23 10:26:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/121784","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=121784"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/121784\/revisions"}],"predecessor-version":[{"id":173017,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/121784\/revisions\/173017"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media\/121785"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=121784"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=121784"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=121784"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}