{"id":100551,"date":"2021-06-21T10:22:44","date_gmt":"2021-06-21T08:22:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza"},"modified":"2021-06-21T10:22:44","modified_gmt":"2021-06-21T08:22:44","slug":"v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","title":{"rendered":"U NixOS-u je podr\u017eana funkcionalnost ponovljivih gra\u0111evina za iso-slike","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Razvojni tim distribucije NixOS objavio je implementaciju podr\u0161ke za verifikaciju integriteta minimalne iso-slike (iso_minimal.x86_64-linux) uz pomo\u0107 mehanizma ponovljivih gra\u0111evina. Ranije su ponovljive gra\u0111evine bile dostupne na nivou pojedina\u010dnih paketa, a sada su pro\u0161irene i na celu iso-sliku. Svaki korisnik mo\u017ee da formira iso-sliku koja je potpuno identi\u010dna onoj koja se pru\u017ea za preuzimanje, i da se uveri da je izgra\u0111ena iz dostupnih izvornika i da ne sadr\u017ei skrivene promene. Za automatizaciju provere iso-slike NixOS uz pomo\u0107 ponovljivih gra\u0111evina pripremljen je poseban skript. U slede\u0107oj fazi planira se obezbe\u0111ivanje ponovljivih gra\u0111evina za punu iso-sliku sa radnim okru\u017eenjem GNOME. <\/p>\n

Ponovljive gra\u0111evine su va\u017ena karika u obezbe\u0111ivanju sigurnosti, jer omogu\u0107avaju korisnicima da samostalno provere da li se binarne gra\u0111evine koje nudi distribucija poklapaju sa gra\u0111evinama koje su li\u010dno izgra\u0111ene iz izvora. U nedostatku mogu\u0107nosti da se proveri identitet binarne gra\u0111evine, korisnici su primorani da slepo veruju tu\u0111oj infrastrukturi za izgradnju, \u010dija bi kompromitacija kompajlera ili alata za izgradnju mogla dovesti do umetanja skrivene \u0161pijunske opreme. Da bi se obezbedile ponovljive gra\u0111evine, potrebno je reprodukovati postavke i parametre okru\u017eenja za izgradnju, koristiti identi\u010dne verzije programa, zavisnosti i pokretnih komponenti, isklju\u010diti promene podataka (vremenske oznake, slu\u010dajni podaci itd.), kao i odr\u017eati redosled izgradnje datoteka i isporuke paketa u iso-slici. <\/p>\n

Podsjetimo, da je NixOS distribucija temeljena na Nix upravitelju paketa, koja pru\u017ea niz vlastitih rje\u0161enja koja pojednostavljuju postavke i odr\u017eavanje sustava. Na primjer, u NixOS-u se koristi jedinstvena datoteka sustavne konfiguracije (configuration.nix), omogu\u0107ava se brzo vra\u0107anje a\u017euriranja, podr\u017eava se prebacivanje izme\u0111u razli\u010ditih stanja sustava, podr\u017eava se instalacija individualnih paketa od strane pojedina\u010dnih korisnika (paket se instalira u korisni\u010dki direktorij) i omogu\u0107ena je istovremena instalacija nekoliko verzija istog programa. Kada se koriste Nix, paketi se instaliraju u zasebno stablo direktorija \/nix\/store ili poddirektorij u korisni\u010dkom direktoriju. Na primjer, paket se instalira kao \/nix\/store\/f2b5\u20268a563-firefox-89.0.1\/, gdje je \u00abf2b5\u2026\u00bb jedinstveni identifikator paketa koji se koristi za kontrolu ovisnosti. <\/p>\n

Paketi su oblikovani kao kontejneri koji sadr\u017ee potrebne komponente za rad aplikacija. Izme\u0111u paketa mogu\u0107e je definirati ovisnosti, pri \u010demu se za provjeru prisutnosti ve\u0107 instaliranih ovisnosti koristi skeniranje he\u0161-identifikatora u direktoriju instaliranih paketa. Mogu\u0107e je u\u010ditati gotove binarne pakete iz repozitorija (prilikom instalacije a\u017euriranja za binarne pakete preuzimaju se samo delta-izmjene), kao i kompilirati iz izvornog koda sa svim ovisnostima. Kolekcija paketa predstavljena je u posebnom repozitoriju Nixpkgs.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430. \u041b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c iso-\u043e\u0431\u0440\u0430\u0437, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0439 \u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 iso-\u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0441\u043e\u0431\u0440\u0430\u043d \u0438\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100551","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47U NixOS-u je osigurana podr\u0161ka za ponovljive kompilacije za iso-ima\u017e | ProHoster","description":"Programeri distribucije NixOS su objavili implementaciju podr\u0161ke za verifikaciju integriteta minimalnog iso-ima\u017ea (iso_minimal.x86_64-linux) koriste\u0107i mehanizam ponovljivih kompilacija.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NixOS \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a \u0434\u043b\u044f iso-\u043e\u0431\u0440\u0430\u0437\u0430 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-21T08:22:44+00:00","article:modified_time":"2021-06-21T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100551","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-21 08:34:58","updated":"2022-09-28 18:53:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/100551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=100551"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/100551\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=100551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=100551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=100551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}