{"id":78967,"date":"2020-04-23T13:41:58","date_gmt":"2020-04-23T11:41:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok"},"modified":"2020-04-23T13:41:58","modified_gmt":"2020-04-23T11:41:58","slug":"dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","title":{"rendered":"rebuilderd est\u00e1 disponible para la verificaci\u00f3n independiente de Arch Linux mediante compilaciones repetibles.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Presentado<\/a><\/noindex> un conjunto de herramientas rebuilderd<\/a><\/noindex>, que permite organizar una verificaci\u00f3n independiente de los paquetes binarios de la distribuci\u00f3n a trav\u00e9s del despliegue de un proceso de construcci\u00f3n continuo, que compara los paquetes descargados con los que se obtienen a trav\u00e9s de una reconstrucci\u00f3n en el sistema local. El conjunto de herramientas est\u00e1 escrito en Rust y se distribuye bajo la licencia GPLv3.<\/p>\n

Actualmente, en rebuilderd solo hay soporte experimental para la verificaci\u00f3n de paquetes de Arch Linux, pero pronto prometen a\u00f1adir tambi\u00e9n soporte para Debian. En el caso m\u00e1s simple, para iniciar rebuilderd hay suficiente<\/a><\/noindex> , se debe instalar el paquete rebuilderd desde el repositorio oficial, importar la clave GPG para verificar el entorno y activar el servicio del sistema correspondiente. Es posible desplegar una red de varias instancias de rebuilderd.<\/p>\n

El servicio monitorea el estado del \u00edndice de paquetes y autom\u00e1ticamente inicia la reconstrucci\u00f3n de nuevos paquetes en un entorno de referencia, cuyo estado est\u00e1 sincronizado con la configuraci\u00f3n del entorno de construcci\u00f3n principal de Arch Linux. Durante la reconstrucci\u00f3n, se tienen en cuenta detalles como la coincidencia exacta de dependencias, el uso de una composici\u00f3n y versiones inalteradas del conjunto de herramientas de construcci\u00f3n, un conjunto id\u00e9ntico de opciones y configuraciones predeterminadas, y la conservaci\u00f3n del orden de construcci\u00f3n de los archivos (aplicando los mismos m\u00e9todos de ordenaci\u00f3n). Las configuraciones del proceso de construcci\u00f3n excluyen la adici\u00f3n de informaci\u00f3n auxiliar no constante por parte del compilador, como valores aleatorios, referencias a rutas de archivos y datos sobre la fecha y hora de la construcci\u00f3n. <\/p>\n

\nActualmente, las reconstrucciones repetibles est\u00e1n garantizadas<\/a><\/noindex> para el 84.1% de los paquetes del repositorio core de Arch Linux, el 83.8% del repositorio extras y el 76.9% del repositorio community. Para comparaci\u00f3n en Debian 10, esta cifra es<\/a><\/noindex> es del 94.1%. Las reconstrucciones repetibles son un eslab\u00f3n importante en la seguridad, ya que permiten a cualquier usuario verificar que las construcciones de paquetes ofrecidas por la distribuci\u00f3n coincidan byte por byte con las construcciones que se han generado personalmente a partir de los c\u00f3digos fuente. Sin la posibilidad de verificar la identidad de una construcci\u00f3n binaria, el usuario solo puede confiar ciegamente en la infraestructura de construcci\u00f3n de terceros, cuya posible compromisi\u00f3n del compilador o del conjunto de herramientas de construcci\u00f3n puede llevar a la inyecci\u00f3n de puertas traseras ocultas. <\/p>\n

<\/a><\/noindex><\/p>\n

Fuente: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 rebuilderd, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0441\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u043c\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0435\u0440\u0435\u0441\u0431\u043e\u0440\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 rebuilderd \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u0437 Arch Linux, \u043d\u043e \u0432 \u0441\u043a\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78967","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Disponible rebuilderd para la verificaci\u00f3n independiente de Arch Linux mediante compilaciones reproducibles | ProHoster","description":"Se presenta un conjunto de herramientas","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d rebuilderd \u0434\u043b\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Arch Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-23T11:41:58+00:00","article:modified_time":"2020-04-23T11:41:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78967","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:47:25","updated":"2022-10-01 19:56:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/78967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=78967"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/78967\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=78967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=78967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=78967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}