Ib ceg tshiab ruaj khov ntawm Flatpak 1.14 tau raug tso tawm, muab ib lub kaw lus rau kev tsim cov pob khoom uas tsis khi rau cov kev faib tawm tshwj xeeb. Linux thiab ua tiav hauv lub thawv tshwj xeeb uas cais daim ntawv thov ntawm lwm qhov ntawm lub kaw lus. Kev txhawb nqa rau kev khiav cov pob Flatpak yog muab rau Arch. Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, Alt Linux и UbuntuCov pob khoom Flatpak suav nrog hauv Fedora repository thiab tau txais kev txhawb nqa hauv tus thawj tswj hwm GNOME tus qauv.
Cov kev hloov tshiab tseem ceeb hauv Flatpak 1.14 ceg:
- Nws muaj peev xwm tsim tau ib daim ntawv teev npe rau cov ntaub ntawv hauv xeev (.local/state) thiab teeb tsa XDG_STATE_HOME ib puag ncig hloov pauv taw qhia rau phau ntawv no.
- Ntxiv cov kev kuaj xyuas ntawm daim ntawv "have-kernel-module-name" los txiav txim seb qhov muaj cov ntsiav modules (ib qho kev sib piv thoob ntiaj teb ntawm qhov kev thov yav dhau los muaj-intel-gpu kos, es tsis yog cov lus qhia "have-kernel-module-i915 ” tam sim no siv tau).
- Cov lus txib “flatpak document-unexport —doc-id=…” tau raug coj los siv.
- Export ntawm Appstream metadata rau siv nyob rau hauv lub ntsiab ib puag ncig yog muab.
- Ntxiv flatpak hais kom ua tiav cov cai rau ntses plhaub
- Network nkag mus rau X11 thiab PulseAudio cov kev pabcuam raug tso cai (yog tias qhov chaw tsim nyog ntxiv).
- Cov ceg tseem ceeb hauv Git repository tau hloov npe los ntawm "tus tswv" mus rau "lub ntsiab", txij li lo lus "tus tswv" tsis ntev los no tau suav tias yog nom tswv tsis raug.
- Launch scripts tam sim no rov sau dua yog tias daim ntawv thov raug hloov npe.
- Ntxiv "--include-sdk" thiab "--include-debug" xaiv rau cov lus txib nruab rau nruab SDK thiab cov ntaub ntawv debuginfo.
- Ntxiv kev txhawb nqa rau "DeploySideloadCollectionID" parameter rau cov ntaub ntawv flatpakref thiab flatpakrepo. Thaum teeb tsa, sau ID yuav raug teeb tsa thaum ntxiv qhov chaw cia khoom nyob deb, thiab tsis yog tom qab thauj cov metadata.
- Tso cai tsim cov nested sandbox ib puag ncig rau cov neeg ua haujlwm hauv cov rooj sib tham nrog MPRIS (Media Player Chaw Taws Teeb Sib Tham Cov Lus Qhia) cov npe.
- Cov khoom siv kab hais kom ua tam sim no muab cov ntaub ntawv hais txog kev siv cov kev siv sijhawm dhau los.
- Cov lus txib uninstall siv cov lus pom zoo ua ntej tshem tawm lub sijhawm ua haujlwm lossis lub sijhawm ua haujlwm txuas ntxiv uas tseem siv tau.
- Ntxiv kev txhawb nqa rau "--socket = gpg-tus neeg sawv cev" kev xaiv rau cov lus txib xws li "flatpak khiav".
- Qhov tsis zoo tau raug kho nyob rau hauv libostree uas tuaj yeem tso cai rau tus neeg siv kom tshem tawm cov ntaub ntawv tsis txaus ntseeg ntawm lub kaw lus los ntawm kev tswj hwm ntawm flatpak-system-helper handler (xa daim ntawv thov tshem tawm nrog lub npe tshwj xeeb uas tau teev tseg). Qhov teeb meem tsuas yog tshwm sim hauv cov laus versions ntawm Flatpak thiab libostree tso tawm ua ntej 2018 (< 0.10.2) thiab tsis cuam tshuam rau kev tso tawm tam sim no.
Ua ib qho kev ceeb toom, Flatpak tso cai rau cov neeg tsim daim ntawv thov kom yooj yim rau kev faib tawm ntawm lawv cov kev pab cuam uas tsis suav nrog hauv cov chaw khaws cia faib khoom txheem los ntawm kev tsim ib lub thawv, thoob ntiaj teb yam tsis tau tsim cov qauv sib cais rau txhua qhov kev faib tawm. Rau cov neeg siv kev ruaj ntseg, Flatpak tso cai rau lawv khiav ib daim ntawv thov tsis meej hauv lub thawv, tso cai nkag mus rau cov haujlwm network thiab cov ntaub ntawv neeg siv cuam tshuam nrog daim ntawv thov. Rau cov neeg siv xav tau cov ntawv tso tawm tshiab, Flatpak tso cai rau lawv los nruab qhov kev sim tshiab thiab cov ntawv tso tawm ruaj khov ntawm cov ntawv thov yam tsis tau hloov pauv rau lub kaw lus. Piv txwv li, Flatpak pob khoom yog tsim rau LibreOffice, Midori, GIMP, Inkscape, Kdenlive, Steam, 0 AD, Visual Studio Code, VLC, Slack, Skype, thiab Telegram Desktop. Android Studio, thiab lwm yam.
Txhawm rau txo cov pob loj, nws suav nrog tsuas yog daim ntawv thov tshwj xeeb, thiab cov txheej txheem yooj yim thiab cov tsev qiv ntawv duab (GTK, Qt, GNOME thiab KDE cov tsev qiv ntawv, thiab lwm yam) yog tsim los ua plug-in standard runtime ib puag ncig. Qhov sib txawv tseem ceeb ntawm Flatpak thiab Snap yog tias Snap siv cov khoom ntawm lub hauv paus system ib puag ncig thiab kev sib cais raws li kev lim dej hu, thaum Flatpak tsim lub thawv cais tawm ntawm lub kaw lus thiab ua haujlwm nrog cov sijhawm ua haujlwm loj, tsis muab cov pob khoom raws li kev cia siab, tab sis tus qauv. ib qhov system ib puag ncig (piv txwv li, txhua lub tsev qiv ntawv tsim nyog rau kev ua haujlwm ntawm GNOME lossis KDE cov haujlwm).
Ntxiv nrog rau cov txheej txheem txheej txheem ib puag ncig (runtime), ntsia los ntawm lub chaw cia khoom tshwj xeeb, ntxiv kev cia siab (khoom) xav tau rau kev ua haujlwm ntawm daim ntawv thov raug muab. Nyob rau hauv tag nrho, runtime thiab bundle tsim lub filling ntawm lub thawv, txawm lub fact tias runtime yog ntsia nyias thiab khi rau ob peb lub thawv ib zaug, uas tso cai rau koj kom tsis txhob duplicating system cov ntaub ntawv uas muaj rau ntim. Ib lub kaw lus tuaj yeem muaj ntau lub sijhawm sib txawv nruab (GNOME, KDE) lossis ntau lub sijhawm ntawm tib lub sijhawm (GNOME 3.40, GNOME 3.42). Ib lub thawv nrog rau daim ntawv thov raws li kev vam khom siv tsuas yog khi rau ib lub sijhawm tshwj xeeb, tsis suav nrog cov pob khoom uas ua rau lub sijhawm ua haujlwm. Tag nrho cov ntsiab lus uas ploj lawm yog ntim ncaj qha nrog daim ntawv thov. Thaum lub thawv tsim, cov ntsiab lus ntawm lub sijhawm ua haujlwm tau teeb tsa raws li /usr muab faib, thiab cov pob khoom tau teeb tsa hauv /app directory.
Lub sijhawm ua haujlwm thiab cov ntawv thov ntim tau tsim los siv OSTree thev naus laus zis, uas cov duab tau hloov kho atomically los ntawm Git-zoo li qhov chaw cia khoom, uas tso cai rau cov txheej txheem tswj hwm los siv rau cov khoom faib (piv txwv li, koj tuaj yeem yob rov qab lub kaw lus sai sai. yav dhau los xeev). RPM tej pob khoom raug txhais rau hauv OSTree repository siv ib txheej tshwj xeeb rpm-ostree. Kev sib cais thiab kev hloov tshiab ntawm cov pob khoom hauv qhov chaw ua haujlwm tsis tau txais kev txhawb nqa; lub kaw lus hloov kho tsis yog nyob rau theem ntawm tus kheej cov khoom, tab sis tag nrho, atomically hloov nws lub xeev. Muab cov cuab yeej los siv cov kev hloov tshiab nce ntxiv, tshem tawm qhov xav tau los hloov tag nrho cov duab nrog txhua qhov hloov tshiab.
Lub chaw tsim khoom sib cais yog ywj siab ntawm kev faib khoom siv thiab, nrog rau cov chaw tsim nyog ntawm lub pob, tsis muaj kev nkag mus rau cov ntaub ntawv thiab cov txheej txheem ntawm cov neeg siv lossis cov txheej txheem tseem ceeb, tsis tuaj yeem nkag mus rau cov cuab yeej ncaj qha, tshwj tsis yog cov zis ntawm DRI, thiab hu mus rau lub network subsystem. Graphics tso zis thiab lub koom haum input yog siv los ntawm Wayland raws tu qauv los yog ntawm X11 socket forwarding. Kev cuam tshuam nrog ib puag ncig sab nraud yog ua raws li DBus kev xa xov thiab ib qho tshwj xeeb Portals API.
Rau kev rwb thaiv tsev, ib txheej Bubblewrap thiab ib txwm muaj Linux Cov thev naus laus zis virtualization thawv raws li kev siv cgroups, namespaces, Seccomp thiab SELinuxPulseAudio siv rau cov zis suab. Sandboxing tuaj yeem raug kaw, uas yog siv los ntawm cov neeg tsim khoom ntawm ntau lub pob nrov kom tau txais kev nkag mus rau tag nrho cov ntaub ntawv system thiab txhua yam khoom siv hauv lub system. Piv txwv li, GIMP, VSCodium, PyCharm, Octave, Inkscape, Audacity, thiab VLC raug xa nrog hom sandboxing txwv uas tso cai rau kev nkag mus rau hauv daim nplaub tshev hauv tsev. Yog tias cov pob khoom nrog kev nkag mus rau daim nplaub tshev hauv tsev raug cuam tshuam, txawm tias muaj "sandboxed" tag hauv cov lus piav qhia pob khoom, tus neeg tawm tsam tuaj yeem hloov kho cov ntaub ntawv ~ / .bashrc kom ua tiav lawv cov lej. Ib qho teeb meem sib cais yog kev tswj hwm kev hloov pauv rau cov pob khoom thiab kev ntseeg siab rau cov neeg saib xyuas pob khoom, uas feem ntau tsis koom nrog qhov project tseem ceeb lossis kev faib tawm.
Tau qhov twg los: opennet.ru
