A postmarketOS project, which develops a Linux distribution for mobile devices, has announced the creation of an atomically updatable version of the distribution. The new edition, called Duranium, is notable for delivering the system as a single entity, without splitting it into separate packages. It is noted that the new version adheres to the idea that the device should simply work, without the user needing to know about the existence of a terminal or decipher the intricacies of the system. <\/p>\n
A rendszer k\u00f6rnyezete a \/usr mapp\u00e1ban csak olvas\u00e1si m\u00f3dban van csatolva, az EROFS f\u00e1jlrendszer haszn\u00e1lat\u00e1val, \u00e9s minden ind\u00edt\u00e1skor ellen\u0151rz\u00e9sre ker\u00fcl digit\u00e1lis al\u00e1\u00edr\u00e1s alapj\u00e1n. A \/usr mappa m\u00e9rete 5 GB. Az adatok integrit\u00e1s\u00e1nak ellen\u0151rz\u00e9s\u00e9re a \/usr mapp\u00e1ban a dm-verity alkalmaz\u00e1s ker\u00fcl, \u00e9s a tartalom m\u00f3dos\u00edt\u00e1s\u00e1nak \u00e9szlel\u00e9se eset\u00e9n az ind\u00edt\u00e1s blokkolva van. Az ellen\u0151rz\u0151 hash be\u00e9p\u00fcl az UKI (Unified Kernel Image) egys\u00e9ges\u00edtett k\u00e9pbe, amely tartalmazza az ind\u00edt\u00f3t az UEFI-b\u0151l (UEFI boot stub), a Linux kernel k\u00e9p\u00e9t \u00e9s a mem\u00f3ri\u00e1ba bet\u00f6lt\u0151d\u0151 initrd rendszert, amely a gy\u00f6k\u00e9r f\u00e1jlrendszer csatol\u00e1sa el\u0151tti kezdeti inicializ\u00e1l\u00e1sra szolg\u00e1l. Az UKI-k\u00e9p egy v\u00e9grehajthat\u00f3 f\u00e1jl form\u00e1tumban PE form\u00e1tumban k\u00e9sz\u00fcl, amelyet az UEFI bet\u00f6lt\u0151 h\u00edv meg. <\/p>\n
All other directories, except for \/usr, are part of the root partition, which is writable and retains data between reboots and updates. The contents of the root partition must be encrypted using LUKS2, which raises hardware requirements. The encrypted root file system is created during the first boot or after a factory reset. By default, an empty key is created that allows for the automatic unlocking of the encrypted partition. In the initial setup wizard and in the configurator, the user is prompted to set a password for decryption. <\/p>\n
Default settings are stored within the system image in the \/usr\/share\/factory\/etc directory. During the first boot, symbolic links to all files in \/usr\/share\/factory\/etc are created in the \/etc directory, except for the files passwd, group, shadow, fstab, machine-id, and hostname. If there is a need to modify settings during operation, the symbolic link is replaced with a copy of the file. <\/p>\n
A friss\u00edt\u00e9sek a teljes rendszerk\u00e9p cser\u00e9j\u00e9vel ker\u00fclnek telep\u00edt\u00e9sre. A meghajt\u00f3n k\u00e9t azonos gy\u00f6k\u00e9r partici\u00f3 j\u00f6n l\u00e9tre - egy akt\u00edv \u00e9s egy passz\u00edv. Az \u00faj friss\u00edt\u00e9s a passz\u00edv partici\u00f3ra ker\u00fcl telep\u00edt\u00e9sre, an\u00e9lk\u00fcl hogy hat\u00e1ssal lenne az akt\u00edvra. A telep\u00edtett friss\u00edt\u00e9s helyess\u00e9g\u00e9nek ellen\u0151rz\u00e9se \u00e9s a sikeres \u00fajraind\u00edt\u00e1s ut\u00e1n a partici\u00f3k felcser\u00e9l\u0151dnek - a friss\u00edt\u00e9st tartalmaz\u00f3 partici\u00f3 akt\u00edvv\u00e1 v\u00e1lik, m\u00edg a kor\u00e1bbi akt\u00edv partici\u00f3 passz\u00edv \u00fczemm\u00f3dba ker\u00fcl \u00e9s v\u00e1rja a k\u00f6vetkez\u0151 friss\u00edt\u00e9s telep\u00edt\u00e9s\u00e9t. Ha friss\u00edt\u00e9s ut\u00e1n ind\u00edt\u00e1si probl\u00e9m\u00e1k l\u00e9pnek fel, automatikus vissza\u00e1ll\u00edt\u00e1s t\u00f6rt\u00e9nik a kor\u00e1bbi rendszerverzi\u00f3ra. <\/p>\n
Ez a megk\u00f6zel\u00edt\u00e9s jelent\u0151sen megk\u00f6nny\u00edti a hib\u00e1k hibakeres\u00e9s\u00e9t \u00e9s diagnosztiz\u00e1l\u00e1s\u00e1t, mivel a fejleszt\u0151k pontosan reproduk\u00e1lhatj\u00e1k azt az \u00e1llapotot, amikor a hiba bek\u00f6vetkezett, an\u00e9lk\u00fcl, hogy a felhaszn\u00e1l\u00f3i rendszer \u00f6sszetev\u0151it k\u00fcl\u00f6n csomagok szintj\u00e9n kellene \u00fajraalkotniuk, figyelembe v\u00e9ve a csomagok verzi\u00f3inak kombin\u00e1ci\u00f3it. A h\u00e1tr\u00e1nya a magasabb hardverig\u00e9ny, ami megakad\u00e1lyozza a Duranium haszn\u00e1lat\u00e1t az \u00f6sszes postmarketOS \u00e1ltal t\u00e1mogatott eszk\u00f6z\u00f6n. <\/p>\n
A Duranium rendszerk\u00e9p tartalma a postmarketOS egys\u00e9ges csomagb\u00e1zis\u00e1b\u00f3l k\u00e9pz\u0151dik, amely az Alpine Linux-ra alapozva, a Musl szabv\u00e1nyos C k\u00f6nyvt\u00e1rat \u00e9s a BusyBox utilit\u00e1sokat tartalmazza. A postmarketOS \u00e9s a Duranium kiad\u00e1sok szinte azonos \u00f6sszet\u00e9tel\u0171ek, de elt\u00e9rnek a rendszer sz\u00e1ll\u00edt\u00e1s\u00e1nak m\u00f3dj\u00e1ban. A rendszerk\u00e9pek kialak\u00edt\u00e1s\u00e1hoz, telep\u00edt\u00e9s\u00e9hez \u00e9s friss\u00edt\u00e9s\u00e9hez a systemd-sysupdate, systemd-repart \u00e9s systemd-verity-setup \u00f6sszetev\u0151ket haszn\u00e1lj\u00e1k. <\/p>\n