A NixOS distribution developer announced the implementation of integrity verification support for the minimal ISO image (iso_minimal.x86_64-linux) using a mechanism for reproducible builds. Previously, reproducible builds were available at the package level, but they have now been expanded to the entire ISO image. Any user can create an ISO image that is fully identical to the provided downloadable ISO image and verify that it was built from the supplied source texts and contains no hidden changes. A special script has been prepared to automate the verification of the NixOS ISO image using reproducible builds. In the next phase, it is planned to ensure reproducible builds for the full ISO image with the GNOME desktop. <\/p>\n
Reproducible builds are a crucial link in ensuring security, as they allow users to independently verify that the builds offered by the distribution match byte-for-byte with the builds compiled from the source texts. Without the ability to check the identity of a binary build, users are left with no choice but to blindly trust someone else's build infrastructure, whose compiler or build tools could be compromised, potentially leading to the insertion of hidden backdoors. To ensure reproducible builds, it is essential to replicate the contents and parameters of the build environment, use identical versions of programs, dependencies, and boot components, exclude any variation-inducing data (timestamps, random fillers, etc.), and maintain the order of file assembly and package delivery in the ISO image. <\/p>\n
Eml\u00e9keztet\u00fcnk, hogy a NixOS disztrib\u00faci\u00f3 a Nix csomagkezel\u0151n alapul, \u00e9s sz\u00e1mos saj\u00e1t fejleszt\u00e9st k\u00edn\u00e1l, amelyek megk\u00f6nny\u00edtik a rendszer be\u00e1ll\u00edt\u00e1s\u00e1t \u00e9s karbantart\u00e1s\u00e1t. P\u00e9ld\u00e1ul a NixOS egyetlen rendszerkonfigur\u00e1ci\u00f3s f\u00e1jlt (configuration.nix) haszn\u00e1l, lehet\u0151s\u00e9get biztos\u00edt a friss\u00edt\u00e9sek gyors vissza\u00e1ll\u00edt\u00e1s\u00e1ra, t\u00e1mogatja a k\u00fcl\u00f6nb\u00f6z\u0151 rendszer\u00e1llapotok k\u00f6z\u00f6tti v\u00e1lt\u00e1st, \u00e9s lehet\u0151v\u00e9 teszi a k\u00fcl\u00f6n\u00e1ll\u00f3 felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra az egy\u00e9ni csomagok telep\u00edt\u00e9s\u00e9t (a csomag a felhaszn\u00e1l\u00f3 otthoni k\u00f6nyvt\u00e1r\u00e1ba ker\u00fcl), valamint lehet\u0151v\u00e9 teszi ugyanazon program t\u00f6bb verzi\u00f3j\u00e1nak egyidej\u0171 telep\u00edt\u00e9s\u00e9t. A Nix haszn\u00e1latakor a csomagok egy k\u00fcl\u00f6n f\u00e1jlstrukt\u00far\u00e1ban ker\u00fclnek telep\u00edt\u00e9sre, a \/nix\/store k\u00f6nyvt\u00e1rba, vagy a felhaszn\u00e1l\u00f3 k\u00f6nyvt\u00e1r\u00e1nak alk\u00f6nyvt\u00e1r\u00e1ba. P\u00e9ld\u00e1ul egy csomag telep\u00edt\u00e9se a \/nix\/store\/f2b5\u20268a563-firefox-89.0.1\/ mapp\u00e1ba t\u00f6rt\u00e9nik, ahol a \u201ef2b5\u2026\u201d egyedi azonos\u00edt\u00f3, amelyet a f\u00fcgg\u0151s\u00e9gek ellen\u0151rz\u00e9s\u00e9re haszn\u00e1lnak. <\/p>\n
A csomagok kont\u00e9nerek form\u00e1j\u00e1ban vannak, amelyek tartalmazz\u00e1k az alkalmaz\u00e1sok m\u0171k\u00f6d\u00e9s\u00e9hez sz\u00fcks\u00e9ges \u00f6sszetev\u0151ket. A csomagok k\u00f6z\u00f6tt f\u00fcgg\u0151s\u00e9gek hat\u00e1rozhat\u00f3k meg, mik\u00f6zben a m\u00e1r telep\u00edtett f\u00fcgg\u0151s\u00e9gek megl\u00e9t\u00e9nek ellen\u0151rz\u00e9s\u00e9re a telep\u00edtett csomagok mappa hash-azonos\u00edt\u00f3j\u00e1nak \u00e1tvizsg\u00e1l\u00e1sa t\u00f6rt\u00e9nik. Lehet\u0151s\u00e9g van k\u00e9szenl\u00e9ti bin\u00e1ris csomagok let\u00f6lt\u00e9s\u00e9re a t\u00e1rol\u00f3b\u00f3l (a bin\u00e1ris csomagok friss\u00edt\u00e9sekor csak delta-v\u00e1ltoz\u00e1sok t\u00f6lthet\u0151k le), valamint forr\u00e1sk\u00f3dok alapj\u00e1n t\u00f6rt\u00e9n\u0151 \u00f6ssze\u00e1ll\u00edt\u00e1sra minden f\u00fcgg\u0151s\u00e9ggel. A csomaggy\u0171jtem\u00e9ny a speci\u00e1lis Nixpkgs t\u00e1rol\u00f3ban tal\u00e1lhat\u00f3. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430. \u041b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c iso-\u043e\u0431\u0440\u0430\u0437, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0439 \u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 iso-\u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0441\u043e\u0431\u0440\u0430\u043d \u0438\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100551","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A NixOS biztos\u00edtja a megism\u00e9telhet\u0151 \u00e9p\u00edtkez\u00e9sek t\u00e1mogat\u00e1s\u00e1t az ISO-k\u00e9phez | ProHoster","description":"A NixOS disztrib\u00faci\u00f3 fejleszt\u0151i bejelentett\u00e9k a minim\u00e1lis ISO-k\u00e9p (iso_minimal.x86_64-linux) integrit\u00e1s\u00e1nak ellen\u0151rz\u00e9si t\u00e1mogat\u00e1s\u00e1nak megval\u00f3s\u00edt\u00e1s\u00e1t, amely a megism\u00e9telhet\u0151 \u00e9p\u00edtkez\u00e9sek mechanizmusa \u00e1ltal val\u00f3sul meg.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NixOS \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a \u0434\u043b\u044f iso-\u043e\u0431\u0440\u0430\u0437\u0430 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-21T08:22:44+00:00","article:modified_time":"2021-06-21T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100551","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-21 08:34:58","updated":"2022-09-28 18:53:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/100551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=100551"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/100551\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=100551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=100551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=100551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"