Microsoft tau tshaj tawm qhov kev tso tawm ntawm CBL-Mariner 1.0 (Common Base Linux Mariner) kev faib tawm, uas tau cim tias yog thawj qhov kev tso tawm ruaj khov ntawm txoj haujlwm. CBL-Mariner kev faib tawm yog tsim los ua lub hauv paus thoob ntiaj teb rau Linux ib puag ncig siv nyob rau hauv huab kev tsim kho, ntug tshuab thiab ntau yam kev pabcuam Microsoft. Txoj haujlwm no yog tsom rau kev sib koom ua ke Microsoft Linux cov kev daws teeb meem thiab ua kom yooj yim rau kev saib xyuas ntawm Linux systems rau ntau lub hom phiaj mus txog hnub. Txoj haujlwm tsim kho tau muab faib raws li daim ntawv tso cai MIT.
Kev faib khoom muab cov txheej txheem me me ntawm cov pob khoom yooj yim uas ua haujlwm raws li lub hauv paus thoob ntiaj teb rau kev tsim cov ntsiab lus ntawm cov thawv ntim khoom, cov chaw tswj hwm ib puag ncig thiab cov kev pabcuam khiav hauv huab infrastructures thiab ntawm ntug khoom. Ntau txoj kev daws teeb meem thiab tshwj xeeb tuaj yeem tsim los ntawm kev ntxiv cov pob ntawv ntxiv rau saum CBL-Mariner, tab sis lub hauv paus rau tag nrho cov tshuab no tseem zoo ib yam, ua kom muaj kev saib xyuas thiab hloov kho yooj yim dua.
Piv txwv li, CBL-Mariner yog siv los ua lub hauv paus rau WSLg mini-distribution, uas muab cov duab kab ke rau kev khiav Linux GUI daim ntawv thov hauv ib puag ncig raws li WSL2 (Windows Subsystem rau Linux) subsystem. Lub hauv paus ntawm qhov kev faib tawm no tsis hloov pauv, thiab kev nthuav dav ua haujlwm tau pom los ntawm kev suav nrog cov pob ntxiv nrog Weston, XWayland, PulseAudio thiab FreeRDP cov neeg rau zaub mov sib xyaw.
CBL-Mariner tsim cov txheej txheem tso cai rau koj los tsim ob qho tib si RPM pob khoom raws li SPEC cov ntaub ntawv thiab cov lej cim, nrog rau cov duab monolithic uas tsim los siv cov cuab yeej rpm-ostree thiab hloov kho atomically yam tsis muaj kev sib cais rau hauv nyias pob. Raws li, ob qho kev hloov pauv hloov tshiab tau txais kev txhawb nqa: los ntawm kev hloov kho cov pob khoom ntawm tus kheej thiab los ntawm kev tsim kho thiab hloov kho tag nrho cov duab hauv lub cev. Kev faib khoom suav nrog tsuas yog cov khoom tsim nyog tshaj plaws thiab tau ua kom zoo rau qhov tsawg kawg nkaus nco thiab qhov chaw siv disk, nrog rau kev thauj khoom ceev. Qhov kev faib tawm kuj tseem ceeb rau kev suav nrog ntau yam ntxiv rau kev txhim kho kev ruaj ntseg.
Qhov project yuav siv sij hawm "kev ruaj ntseg siab tshaj plaws los ntawm lub neej ntawd" mus kom ze. Nws muaj peev xwm lim cov xov tooj hu siv lub tshuab seccomp, encrypt disk partitions, thiab xyuas cov pob khoom siv kos npe digital. Thaum lub sij hawm tsim, kev tiv thaiv tawm tsam pawg overflows, tsis overflows, thiab txoj hlua formatting teeb meem yog enabled los ntawm lub neej ntawd (_FORTIFY_SOURCE, -fstack-protector, -Wformat-kev ruaj ntseg, relro). Chaw nyob qhov chaw randomization hom kev txhawb nqa hauv Linux ntsiav tau qhib, nrog rau cov txheej txheem tiv thaiv kev tawm tsam symlink, mmap, /dev/mem thiab /dev/kmem. Cov chaw nco uas muaj ntu nrog cov ntsiav thiab cov ntaub ntawv module tau teeb tsa rau hom nyeem nkaus xwb thiab kev ua tiav code raug txwv. Ib qho kev xaiv xaiv yog los lov tes taw loading kernel modules tom qab pib qhov system. iptables toolkit yog siv los lim cov pob ntawv network.
Cov duab ISO ua ntej tsis muab. Nws tau xav tias tus neeg siv tuaj yeem tsim cov duab nrog qhov tsim nyog sau nws tus kheej (cov lus qhia sib dhos tau muab rau Ubuntu 18.04). Ib qhov chaw khaws cia ntawm cov pob khoom ua ntej RPM muaj, uas koj tuaj yeem siv los tsim koj tus kheej cov duab raws li cov ntaub ntawv teeb tsa. Lub chaw khaws cia muaj txog 3300 pob khoom. Piv txwv li, txhawm rau tsim cov duab iso tag nrho, tsuas yog khiav: git clone https://github.com/microsoft/CBL-Mariner.git cd CBL-Mariner/toolkit sudo ua iso REBUILD_TOOLS=y REBUILD_PACKAGES=n CONFIG_FILE=./imageconfigs /full .json
Tus tswj hwm qhov systemd yog siv los tswj cov kev pabcuam thiab khau raj. Rau kev tswj cov pob, cov tswj pob RPM thiab DNF (tdnf variant ntawm vmWare) tau muab. SSH server tsis qhib ntsiag to. Txhawm rau txhim kho qhov kev faib tawm, tus installer yog muab uas tuaj yeem ua haujlwm hauv ob hom ntawv thiab duab. Lub installer muab cov kev xaiv ntawm kev txhim kho nrog ib tug tag nrho los yog yooj yim txheej ntawm tej pob khoom, thiab muaj ib tug interface rau xaiv ib tug disk muab faib, xaiv tus tswv lub npe, thiab tsim cov neeg siv.
Tau qhov twg los: opennet.ru