{"id":121784,"date":"2025-02-09T03:46:02","date_gmt":"2025-02-09T01:46:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux"},"modified":"2025-02-09T03:46:02","modified_gmt":"2025-02-09T01:46:05","slug":"proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","title":{"rendered":"Projekt TuxTape Linuxi tuuma reaalajas patchide infrastruktuuri juurutamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kindlustusfirma GEICO on avaldanud esialgse TuxTape t\u00f6\u00f6riistakomplekti, mis v\u00f5imaldab luua, kompileerida ja tarnida live-patche Linuxi tuumale. Live-patchid v\u00f5imaldavad rakendada parandusi Linuxi tuumale reaalajas, ilma s\u00fcsteemi taask\u00e4ivitamata v\u00f5i peatamata. Projekti kood on kirjutatud Rusti keeles ja see levitatakse Apache 2.0 litsentsi alusel. <\/p>\n

Saamispoke, mis eemaldab turvaauke, pakuvad oma jaotistes sellised ettev\u00f5tted nagu Red Hat, Oracle, Canonical ja SUSE, kuid nende avatud osa on vaid madala taseme t\u00f6\u00f6riist, mis tegeleb patchidega, samas kui ise pat\u0161id vormistatakse suletud uste taga. Jaotised Gentoo ja Debian on proovinud arendada avatud projekte elivepatch ja linux-livepatching, kuid esimene on juba 6 aastat h\u00fcljatud ja teine on pidanud peatuma testprotot\u00fc\u00fcbi loomise etapis. <\/p>\n

TuxTape on suunatud oma s\u00fcsteemi organiseerimisele live-patchide loomiseks ja tarnimiseks, s\u00f5ltumatuks kolmandatest tarnijatest ja kohandatavaks mis tahes Linuxi tuumade jaoks, mitte ainult konkreetsete jaotuste tuumade paketide jaoks. TuxTape suudab luua live-patchid, mis on \u00fchilduvad Red Hati v\u00e4ljat\u00f6\u00f6tatud kpatch t\u00f6\u00f6riistakomplektiga (lisaks kpatchile on olemas sarnased t\u00f6\u00f6riistad: kGraft SUSElt, Ksplice Oracle'ilt ja universaalne livepatch). Pat\u0161id luuakse tuuma laaditavate moodulitena, mis asendavad tuuma funktsioone, kasutades ftrace alam s\u00fcsteemi uute funktsioonide suunamiseks, mis on moodulisse lisatud.

\"Projekt<\/center> <\/p>\n

TuxTape suudab j\u00e4lgida teavet Linuxi tuuma turvaaukude kohta, mida avaldatakse linux-cve-announce postitusloendis ja Git-repos, klassifitseerida haavatavusi vastavalt ohtlikkuse tasemele, m\u00e4\u00e4rata, kas need on rakendatavad hallatavatele Linuxi tuumadele ja genereerida live-patchid tavaliste patchide p\u00f5hjal LTS tuuma harude jaoks. Algse patchi rakendatavust hinnatakse tuuma kompileerimisel. Patchid, mis sisaldavad sihttuuma mitteseotud haavatavusi, j\u00e4etakse t\u00e4helepanuta. <\/p>\n

TuxTape h\u00f5lmab uut haavatavuste j\u00e4lgimise s\u00fcsteemi, pat\u0161ide ja haavatavuste andmebaasi koostajat, server<\/a> metaandmete salvestamiseks, tuuma kompileerimise haldamise s\u00fcsteemi, tuuma kompileerija, patchide generaator, patchide arhiiv, klient patchide hankimiseks l\u00f5pp-hostidelt ja interaktiivne liides live-patchide genereerimise juhtimiseks.

\"Projekt<\/center> <\/p>\n

Arendus on katseprotot\u00fc\u00fcbi staadiumis. Esialgse testimise jaoks on v\u00e4lja pakutud: tuxtape-cve-parser haavatavuste teabe anal\u00fc\u00fcsimiseks ja patchide andmebaasi koostamiseks; tuxtape-server gRPC liidese rakendusega patchide genereerimiseks; tuxtape-kernel-builder tuuma kokku panemiseks antud konfiguratsioonis ja kompileerimisprofiili moodustamiseks; tuxtape-dashboard — konsooli liides live-patchide \u00fclevaatamiseks ja loomiseks algsete patchide p\u00f5hjal, mis on saadud tuxtape-serverilt.

\"Projekt<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GEICO \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f TuxTape, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 live-\u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. Live-\u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u044f\u0434\u0440\u0443 Linux \u043d\u0430 \u043b\u0435\u0442\u0443, \u0431\u0435\u0437 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. Live-\u043f\u0430\u0442\u0447\u0438 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121785,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121784","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TuxTape projekt elurea Linuxi tuuma live-patchide infrastruktuuri | ProHoster","description":"Kindlustusettev\u00f5te GEICO avaldas TuxTape'i t\u00f6\u00f6riistade esialgse v\u00e4ljaande, mis v\u00f5imaldab \u00fcles seada oma infrastruktuuri, et luua, koguda ja jagada Linuxi tuumale live-patte. Live-patched v\u00f5imaldab rakendada Linuxi tuuma parandusi reaalajas, ilma s\u00fcsteemi taask\u00e4ivitamata ja peatamata. Projekti kood on kirjutatud Rusti keeles ja levitatakse Apache 2.0 litsentsi alusel. Turvaprobleeme lahendavad live-patched on kergesti saadaval nende jaotiste jaoks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TuxTape \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b live-\u043f\u0430\u0442\u0447\u0435\u0439 \u043a \u044f\u0434\u0440\u0443 Linux | ProHoster","og:description":"\u0421\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GEICO \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f TuxTape, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 live-\u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 Linux. Live-\u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u044f\u0434\u0440\u0443 Linux \u043d\u0430 \u043b\u0435\u0442\u0443, \u0431\u0435\u0437 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. Live-\u043f\u0430\u0442\u0447\u0438 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-tuxtape-dlya-razvyortyvaniya-infrastruktury-live-patchej-k-yadru-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-09T01:46:05+00:00","article:modified_time":"2025-02-09T01:46:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121784","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 10:26:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:26:19","updated":"2026-01-23 10:26:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121784","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=121784"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121784\/revisions"}],"predecessor-version":[{"id":173017,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121784\/revisions\/173017"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/121785"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=121784"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=121784"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=121784"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}