Qhov kev tso tawm ntawm TUF 1.0 (The Update Framework) tau tshaj tawm, muab cov cuab yeej rau kev ruaj ntseg xyuas thiab rub tawm cov hloov tshiab. Lub hom phiaj tseem ceeb ntawm txoj haujlwm yog los tiv thaiv tus neeg siv khoom los ntawm kev tawm tsam ntawm cov chaw cia khoom thiab kev tsim kho vaj tse, suav nrog kev tawm tsam kev txhawb nqa los ntawm cov neeg tawm tsam ntawm cov ntaub ntawv tsis tseeb uas tau tsim tom qab nkag mus rau cov yuam sij rau kev tsim cov kos npe digital lossis cuam tshuam lub chaw cia khoom. Qhov project yog tsim nyob rau hauv kev txhawb nqa ntawm Linux Foundation thiab yog siv los txhim kho kev ruaj ntseg ntawm kev hloov kho tshiab hauv cov haujlwm xws li Docker, Fuchsia, Automotive Qib Linux, Bottlerocket thiab PyPI (qhov suav nrog rub tawm pov thawj thiab metadata hauv PyPI yog xav tau hauv nyob ze yav tom ntej). TUF siv cov cai siv yog sau hauv Python thiab muab faib raws li Apache 2.0 daim ntawv tso cai.
Qhov project tab tom tsim cov tsev qiv ntawv, cov ntaub ntawv tawm tswv yim thiab cov khoom siv hluav taws xob uas tuaj yeem yooj yim sib xyaw rau hauv cov ntawv thov hloov tshiab uas twb muaj lawm, muab kev tiv thaiv thaum muaj kev cuam tshuam tseem ceeb ntawm sab ntawm software tsim tawm. Txhawm rau siv TUF, nws txaus los ntxiv cov ntaub ntawv tsim nyog rau lub chaw cia khoom, thiab sib xyaw cov txheej txheem muab hauv TUF rau rub tawm thiab txheeb xyuas cov ntaub ntawv rau hauv tus neeg siv khoom.
TUF lub moj khaum yuav siv cov dej num ntawm kev kuaj xyuas qhov hloov tshiab, rub tawm qhov hloov tshiab, thiab txheeb xyuas nws txoj kev ncaj ncees. Kev hloov kho kev teeb tsa tsis ncaj qha cuam tshuam nrog cov metadata ntxiv, kev txheeb xyuas thiab kev thauj khoom uas tau ua los ntawm TUF. Rau kev koom ua ke nrog cov ntawv thov thiab hloov kho cov txheej txheem kev teeb tsa, API qib qis yog muab rau kev nkag mus rau cov metadata thiab kev siv cov neeg siv qib siab API ngclient, npaj rau kev koom ua ke nrog cov ntawv thov.
Ntawm cov kev tawm tsam uas TUF tuaj yeem tawm tsam yog qhov hloov pauv ntawm cov ntawv tshaj tawm qub raws li kev hloov kho tshiab txhawm rau txhawm rau txhawm rau kho cov software tsis zoo lossis tus neeg siv rov qab mus rau qhov qub tsis zoo, nrog rau kev txhawb nqa kev hloov kho tsis zoo tau kos npe siv kev cuam tshuam. qhov tseem ceeb, DoS tawm tsam rau cov neeg siv khoom, xws li sau cov disk nrog kev hloov tshiab tsis kawg.
Kev tiv thaiv kev cuam tshuam ntawm tus neeg muab kev pabcuam software yog ua tiav los ntawm kev tswj xyuas cov ntaub ntawv sib cais, txheeb xyuas tau ntawm lub xeev ntawm lub chaw khaws cia lossis daim ntawv thov. Metadata tau txheeb xyuas los ntawm TUF suav nrog cov ntaub ntawv hais txog cov yuam sij uas tuaj yeem ntseeg tau, cryptographic hashs los ntsuas qhov ncaj ncees ntawm cov ntaub ntawv, kos npe digital ntxiv los txheeb xyuas cov metadata, cov ntaub ntawv hais txog tus lej version, thiab cov ntaub ntawv hais txog lub neej ntawm cov ntaub ntawv. Cov yuam sij uas siv rau kev txheeb xyuas muaj lub neej luv thiab yuav tsum tau hloov kho tas li los tiv thaiv kev kos npe los ntawm cov yuam sij qub.
Txo qhov kev pheej hmoo ntawm kev cuam tshuam ntawm tag nrho cov kab ke ua tiav los ntawm kev siv cov qauv kev ntseeg siab sib koom, uas txhua tog tsuas yog txwv rau thaj chaw uas nws yog lub luag haujlwm ncaj qha. Lub kaw lus siv hierarchy ntawm lub luag hauj lwm nrog lawv tus kheej cov yuam sij, piv txwv li, lub hauv paus lub luag hauj lwm kos npe rau cov yuam sij rau lub luag hauj lwm rau lub luag hauj lwm rau metadata nyob rau hauv repository, cov ntaub ntawv nyob rau hauv lub sij hawm ntawm tiam ntawm kev hloov tshiab thiab lub hom phiaj cov rooj sib txoos, nyob rau hauv lem, lub luag hauj lwm lub luag hauj lwm rau lub rooj sib txoos cov paib. lub luag haujlwm cuam tshuam nrog kev lees paub ntawm cov ntaub ntawv xa tuaj.
Txhawm rau tiv thaiv qhov kev cuam tshuam tseem ceeb, siv lub tshuab ua kom tshem tawm sai thiab hloov cov yuam sij. Txhua tus yuam sij tsuas muaj qhov tsawg kawg nkaus tsim nyog lub hwj chim, thiab kev ua pov thawj yuav tsum tau siv ob peb lub yuam sij (qhov xau ntawm ib tus yuam sij tsis tso cai rau kev tawm tsam tam sim ntawm tus neeg siv khoom, thiab txhawm rau cuam tshuam tag nrho cov txheej txheem, cov yuam sij ntawm txhua tus neeg koom yuav tsum yog. ntes). Tus neeg siv khoom tsuas tuaj yeem lees txais cov ntaub ntawv uas tsis ntev los no ntau dua li cov ntaub ntawv tau txais yav dhau los, thiab cov ntaub ntawv tsuas yog rub tawm raws li qhov loj me tau teev tseg hauv cov ntawv pov thawj metadata.
Qhov kev tso tawm ntawm TUF 1.0.0 muab ib qho kev sau rov qab ua tiav thiab ruaj khov siv ntawm TUF specification uas koj tuaj yeem siv ua piv txwv npaj txhij thaum tsim koj tus kheej kev siv lossis kev koom ua ke rau hauv koj cov haujlwm. Qhov kev siv tshiab muaj cov lej tsawg dua (1400 kab es tsis yog 4700), yooj yim rau kev tswj hwm thiab tuaj yeem txuas ntxiv tau yooj yim, piv txwv li, yog tias nws tsim nyog ntxiv kev txhawb nqa rau cov kab sib txuas tshwj xeeb, cov kab ke khaws cia lossis encryption algorithms.
Tau qhov twg los: opennet.ru