{"id":100747,"date":"2021-07-12T16:22:38","date_gmt":"2021-07-12T14:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-opublikoval-pervyj-stabilnyj-vypusk-linux-distributiva-cbl-mariner"},"modified":"2021-07-12T16:22:38","modified_gmt":"2021-07-12T14:22:39","slug":"microsoft-opublikoval-pervyj-stabilnyj-vypusk-linux-distributiva-cbl-mariner","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/microsoft-opublikoval-pervyj-stabilnyj-vypusk-linux-distributiva-cbl-mariner","title":{"rendered":"Microsoft ha pubblicato il primo rilascio stabile del distribuitore Linux CBL-Mariner.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsoft ha rilasciato la versione del sistema operativo CBL-Mariner 1.0 (Common Base Linux Mariner), contrassegnata come il primo rilascio stabile del progetto. CBL-Mariner viene sviluppato come una piattaforma base universale per ambienti Linux utilizzati nell'infrastruttura cloud, nei sistemi edge e in vari servizi Microsoft. Il progetto mira a uniformare le soluzioni Linux impiegate da Microsoft e semplificare la manutenzione delle sue diverse sistemi Linux. I contributi del progetto sono distribuiti con licenza MIT. <\/p>\n

Il sistema operativo fornisce un insieme standard di pacchetti essenziali, che fungono da base universale per la creazione di contenitori, ambienti host e servizi da eseguire nelle infrastrutture cloud e sui dispositivi edge. Soluzioni pi\u00f9 complesse e specializzate possono essere create aggiungendo pacchetti aggiuntivi sopra CBL-Mariner, ma la base per tutti questi sistemi rimane invariata, facilitando la manutenzione e la preparazione degli aggiornamenti. <\/p>\n

Ad esempio, CBL-Mariner viene utilizzato come base per una mini distribuzione WSLg, che fornisce componenti del stack grafico per l'esecuzione di applicazioni GUI Linux negli ambienti basati sul sottomodulo WSL2 (Windows Subsystem for Linux). La base di questa distribuzione rimane invariata, mentre la funzionalit\u00e0 avanzata \u00e8 implementata tramite l'inclusione di pacchetti addizionali con componenti compositi. server<\/a> Weston, XWayland, PulseAudio e FreeRDP. <\/p>\n

Il sistema di build CBL-Mariner consente di generare sia singoli pacchetti RPM basati su file SPEC e sorgenti, sia immagini di sistema monolitiche, create utilizzando strumenti rpm-ostree e aggiornate in modo atomico senza frammentazione in pacchetti separati. Pertanto, sono supportati due modelli di distribuzione degli aggiornamenti: tramite l'aggiornamento di pacchetti singoli e tramite la ricostruzione e l'aggiornamento dell'intera immagine di sistema. La distribuzione include solo i componenti essenziali e \u00e8 ottimizzata per un consumo minimo di memoria e spazio su disco, nonch\u00e9 per un'elevata velocit\u00e0 di avvio. La distribuzione \u00e8 anche notevole per l'inclusione di diversi meccanismi aggiuntivi per migliorare la sicurezza. <\/p>\n

Il progetto adotta un approccio di \"massima sicurezza per impostazione predefinita\". Viene fornita la possibilit\u00e0 di filtrare le chiamate di sistema tramite il meccanismo seccomp, cifratura delle partizioni del disco e verifica dei pacchetti tramite firme digitali. Durante la fase di compilazione, sono attivate per impostazione predefinita modalit\u00e0 di protezione contro il buffer overflow, overflow dello stack e problemi di formattazione delle stringhe (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). Sono attivate le modalit\u00e0 di randomizzazione dello spazio degli indirizzi supportate nel kernel Linux, cos\u00ec come i meccanismi di protezione contro attacchi legati a link simbolici, mmap, \/dev\/mem e \/dev\/kmem. Per le aree di memoria in cui si trovano i segmenti con i dati del kernel e dei moduli, \u00e8 impostata la modalit\u00e0 di sola lettura e vietata l'esecuzione di codice. \u00c8 disponibile, su base facoltativa, la possibilit\u00e0 di vietare il caricamento di moduli del kernel dopo l'inizializzazione del sistema. Per filtrare i pacchetti di rete \u00e8 stato utilizzato l'insieme di strumenti iptables. <\/p>\n

\u0413\u043e\u0442\u043e\u0432\u044b\u0435 ISO-\u043e\u0431\u0440\u0430\u0437\u044b \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f. \u041f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0441\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0437 \u0441 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u043a\u043e\u0439 (c\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f Ubuntu 18.04). \u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 \u0443\u0436\u0435 \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u043c\u0438 RPM-\u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u043e\u0432\u043a\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0412 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 3300 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c: git clone https:\/\/github.com\/microsoft\/CBL-Mariner.git cd CBL-Mariner\/toolkit sudo make iso REBUILD_TOOLS=y REBUILD_PACKAGES=n CONFIG_FILE=.\/imageconfigs\/full.json <\/p>\n

Per gestire i servizi e il carico viene utilizzato il gestore di sistema systemd. I gestori di pacchetti forniti sono RPM e DNF (una variante di tdnf da vmWare). Il server SSH non \u00e8 attivato di default. Per l'installazione della distribuzione \u00e8 fornito un installer, che pu\u00f2 funzionare sia in modalit\u00e0 testuale che grafica. L'installer offre la possibilit\u00e0 di installare un set completo o di base di pacchetti, presenta un'interfaccia per la selezione della partizione del disco, la scelta del nome host e la creazione degli utenti.

\"Microsoft<\/center>
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner 1.0 (Common Base Linux Mariner), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u0435\u0447\u0435\u043d \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0414\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 CBL-Mariner \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, edge-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Microsoft. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 Microsoft Linux-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438. \u041d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100748,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100747","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft ha pubblicato il primo rilascio stabile della distribuzione Linux CBL-Mariner | ProHoster","description":"Microsoft ha pubblicato la versione del pacchetto CBL-Mariner 1.0 (Common Base Linux Mariner), che \u00e8 contrassegnata come il primo rilascio stabile del progetto.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/microsoft-opublikoval-pervyj-stabilnyj-vypusk-linux-distributiva-cbl-mariner","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner 1.0 (Common Base Linux Mariner), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u0435\u0447\u0435\u043d \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/microsoft-opublikoval-pervyj-stabilnyj-vypusk-linux-distributiva-cbl-mariner","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-07-12T14:22:39+00:00","article:modified_time":"2021-07-12T14:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100747","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-07-12 14:32:16","updated":"2026-02-09 21:46:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/100747","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=100747"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/100747\/revisions"}],"predecessor-version":[{"id":160295,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/100747\/revisions\/160295"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/100748"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=100747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=100747"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=100747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}