ืžื™ืงืจื•ืกื•ืคื˜ ืคืจืกืžื” ืืช ื”ืžื”ื“ื•ืจื” ื”ื™ืฆื™ื‘ื” ื”ืจืืฉื•ื ื” ืฉืœ ื”ืคืฆืช ืœื™ื ื•ืงืก CBL-Mariner

ืžื™ืงืจื•ืกื•ืคื˜ ืคืจืกืžื” ืืช ื”ื”ืคืฆื” ืฉืœ ื”ื”ืคืฆื” CBL-Mariner 1.0 (Common Base Linux Mariner), ื”ืžืกื•ืžื ืช ื›ื’ืจืกื” ื”ื™ืฆื™ื‘ื” ื”ืจืืฉื•ื ื” ืฉืœ ื”ืคืจื•ื™ืงื˜. ื”ืคืฆืช CBL-Mariner ืžืคื•ืชื—ืช ื›ืคืœื˜ืคื•ืจืžืช ื‘ืกื™ืก ืื•ื ื™ื‘ืจืกืœื™ืช ืขื‘ื•ืจ ืกื‘ื™ื‘ื•ืช ืœื™ื ื•ืงืก ื”ืžืฉืžืฉื•ืช ื‘ืชืฉืชื™ื•ืช ืขื ืŸ, ืžืขืจื›ื•ืช ืงืฆื” ื•ืฉื™ืจื•ืชื™ื ืฉื•ื ื™ื ืฉืœ ืžื™ืงืจื•ืกื•ืคื˜. ื”ืคืจื•ื™ืงื˜ ื ื•ืขื“ ืœืื—ื“ ืืช ืคืชืจื•ื ื•ืช ืœื™ื ื•ืงืก ืฉืœ ืžื™ืงืจื•ืกื•ืคื˜ ื•ืœืคืฉื˜ ืืช ื”ืชื—ื–ื•ืงื” ืฉืœ ืžืขืจื›ื•ืช ืœื™ื ื•ืงืก ืœืžื˜ืจื•ืช ืฉื•ื ื•ืช ืขื“ื›ื ื™ื•ืช. ื”ืคื™ืชื•ื—ื™ื ืฉืœ ื”ืคืจื•ื™ืงื˜ ืžื•ืคืฆื™ื ืชื—ืช ืจื™ืฉื™ื•ืŸ MIT.

ื”ื”ืคืฆื” ืžืกืคืงืช ืกื˜ ืกื˜ื ื“ืจื˜ื™ ืงื˜ืŸ ืฉืœ ื—ื‘ื™ืœื•ืช ื‘ืกื™ืกื™ื•ืช ื”ืžืฉืžืฉื•ืช ื‘ืกื™ืก ืื•ื ื™ื‘ืจืกืœื™ ืœื™ืฆื™ืจืช ืชื›ื•ืœืช ืงื•ื ื˜ื™ื™ื ืจื™ื, ืกื‘ื™ื‘ื•ืช ืžืืจื—ื™ื ื•ืฉื™ืจื•ืชื™ื ื”ืคื•ืขืœื™ื ื‘ืชืฉืชื™ื•ืช ืขื ืŸ ื•ื‘ืžื›ืฉื™ืจื™ ืงืฆื”. ื ื™ืชืŸ ืœื™ืฆื•ืจ ืคืชืจื•ื ื•ืช ืžื•ืจื›ื‘ื™ื ื•ืžื™ื•ื—ื“ื™ื ื™ื•ืชืจ ืขืœ ื™ื“ื™ ื”ื•ืกืคืช ื—ื‘ื™ืœื•ืช ื ื•ืกืคื•ืช ืขืœ ื’ื‘ื™ CBL-Mariner, ืืš ื”ื‘ืกื™ืก ืœื›ืœ ื”ืžืขืจื›ื•ืช ื”ืœืœื• ื ืฉืืจ ื–ื”ื”, ืžื” ืฉืžืงืœ ืขืœ ื”ืชื—ื–ื•ืงื” ื•ื”ืขื“ื›ื•ื ื™ื.

ืœื“ื•ื’ืžื”, CBL-Mariner ืžืฉืžืฉ ื›ื‘ืกื™ืก ืœื”ืคืฆืช ื”ืžื™ื ื™ WSLg, ื”ืžืกืคืงืช ืจื›ื™ื‘ื™ ืžื—ืกื ื™ืช ื’ืจืคื™ืงื” ืœื”ืคืขืœืช ื™ื™ืฉื•ืžื™ GUI ืฉืœ Linux ื‘ืกื‘ื™ื‘ื•ืช ื”ืžื‘ื•ืกืกื•ืช ืขืœ ืชืช-ืžืขืจื›ืช WSL2 (Windows Subsystem for Linux). ื”ืœื™ื‘ื” ืฉืœ ื”ืคืฆื” ื–ื• ืื™ื ื” ืžืฉืชื ื”, ื•ื”ืคื•ื ืงืฆื™ื•ื ืœื™ื•ืช ื”ืžื•ืจื—ื‘ืช ืžืชืžืžืฉืช ื‘ืืžืฆืขื•ืช ื”ื›ืœืœืช ื—ื‘ื™ืœื•ืช ื ื•ืกืคื•ืช ืขื ื”ืฉืจืช ื”ืžืจื•ื›ื‘ ืฉืœ Weston, XWayland, PulseAudio ื•-FreeRDP.

ืžืขืจื›ืช ื”ื‘ื ื™ื™ื” ืฉืœ CBL-Mariner ืžืืคืฉืจืช ืœืš ืœื™ืฆื•ืจ ื’ื ื—ื‘ื™ืœื•ืช RPM ื‘ื•ื“ื“ื•ืช ื”ืžื‘ื•ืกืกื•ืช ืขืœ ืงื‘ืฆื™ SPEC ื•ืงื•ื“ ืžืงื•ืจ, ื•ื’ื ืชืžื•ื ื•ืช ืžืขืจื›ืช ืžื•ื ื•ืœื™ื˜ื™ื•ืช ืฉื ื•ืฆืจื• ื‘ืืžืฆืขื•ืช ืขืจื›ืช ื”ื›ืœื™ื rpm-ostree ื•ืžืชืขื“ื›ื ื•ืช ืžื‘ื—ื™ื ื” ืื˜ื•ืžื™ืช ืžื‘ืœื™ ืœื”ืชืคืฆืœ ืœื—ื‘ื™ืœื•ืช ื ืคืจื“ื•ืช. ื‘ื”ืชืื ืœื›ืš, ืฉื ื™ ืžื•ื“ืœื™ื ืฉืœ ืžืกื™ืจืช ืขื“ื›ื•ื ื™ื ื ืชืžื›ื™ื: ื‘ืืžืฆืขื•ืช ืขื“ื›ื•ืŸ ื—ื‘ื™ืœื•ืช ื‘ื•ื“ื“ื•ืช ื•ื“ืจืš ื‘ื ื™ื™ื” ืžื—ื“ืฉ ื•ืขื“ื›ื•ืŸ ืฉืœ ืชืžื•ื ืช ื”ืžืขืจื›ืช ื›ื•ืœื”. ื”ื”ืคืฆื” ื›ื•ืœืœืช ืจืง ืืช ื”ืจื›ื™ื‘ื™ื ื”ื“ืจื•ืฉื™ื ื‘ื™ื•ืชืจ ื•ื”ื™ื ืžื•ืชืืžืช ืœืฆืจื™ื›ืช ื–ื™ื›ืจื•ืŸ ืžื™ื ื™ืžืœื™ืช ื•ืฆืจื™ื›ืช ืฉื˜ื— ื“ื™ืกืง, ื›ืžื• ื’ื ืœืžื”ื™ืจื•ืช ื˜ืขื™ื ื” ื’ื‘ื•ื”ื”. ื”ื”ืคืฆื” ื‘ื•ืœื˜ืช ื’ื ื‘ื”ื›ืœืœืช ืžื ื’ื ื•ื ื™ื ื ื•ืกืคื™ื ืฉื•ื ื™ื ืœืฉื™ืคื•ืจ ื”ืื‘ื˜ื—ื”.

ื”ืคืจื•ื™ืงื˜ ื ื•ืงื˜ ื‘ื’ื™ืฉื” ืฉืœ "ืื‘ื˜ื—ื” ืžืจื‘ื™ืช ื›ื‘ืจื™ืจืช ืžื—ื“ืœ". ื ื™ืชืŸ ืœืกื ืŸ ืงืจื™ืื•ืช ืžืขืจื›ืช ื‘ืืžืฆืขื•ืช ืžื ื’ื ื•ืŸ seccomp, ืœื”ืฆืคื™ืŸ ืžื—ื™ืฆื•ืช ื“ื™ืกืง ื•ืœืืžืช ื—ื‘ื™ืœื•ืช ื‘ืืžืฆืขื•ืช ื—ืชื™ืžื” ื“ื™ื’ื™ื˜ืœื™ืช. ื‘ืฉืœื‘ ื”ื‘ื ื™ื™ื”, ื”ื’ื ื” ืžืคื ื™ ื”ืฆืคืช ืžื—ืกื ื™ืช, ื’ืœื™ืฉืช ืžืื’ืจ ื•ื‘ืขื™ื•ืช ืขื™ืฆื•ื‘ ืžื—ืจื•ื–ืช ืžื•ืคืขืœืช ื›ื‘ืจื™ืจืช ืžื—ื“ืœ (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). ืžื•ืคืขืœื™ื ืžืฆื‘ื™ ืืงืจืื™ ืฉืœ ืžืจื—ื‘ ื›ืชื•ื‘ื•ืช ื”ื ืชืžื›ื™ื ื‘ืœื™ื‘ืช ืœื™ื ื•ืงืก, ื›ืžื• ื’ื ืžื ื’ื ื•ื ื™ ื”ื’ื ื” ืžืคื ื™ ื”ืชืงืคื•ืช ืกื™ืžืœื™ื ืง, mmap, /dev/mem ื•-/dev/kmem. ืื–ื•ืจื™ ื”ื–ื™ื›ืจื•ืŸ ื”ืžื›ื™ืœื™ื ืžืงื˜ืขื™ื ืขื ื ืชื•ื ื™ ืœื™ื‘ื” ื•ืžื•ื“ื•ืœ ืžื•ื’ื“ืจื™ื ืœืžืฆื‘ ืงืจื™ืื” ื‘ืœื‘ื“ ื•ื‘ื™ืฆื•ืข ืงื•ื“ ืืกื•ืจ. ืืคืฉืจื•ืช ืื•ืคืฆื™ื•ื ืœื™ืช ื”ื™ื ืœื‘ื˜ืœ ื˜ืขื™ื ืช ืžื•ื“ื•ืœื™ ืœื™ื‘ื” ืœืื—ืจ ืืชื—ื•ืœ ื”ืžืขืจื›ืช. ืขืจื›ืช ื”ื›ืœื™ื iptables ืžืฉืžืฉืช ืœืกื™ื ื•ืŸ ืžื ื•ืช ืจืฉืช.

ืชืžื•ื ื•ืช ISO ืžื•ื›ื ื•ืช ืžืจืืฉ ืื™ื ืŸ ืžืกื•ืคืงื•ืช. ื”ื”ื ื—ื” ื”ื™ื ืฉื”ืžืฉืชืžืฉ ื™ื›ื•ืœ ืœื™ืฆื•ืจ ืชืžื•ื ื” ืขื ื”ืžื™ืœื•ื™ ื”ื“ืจื•ืฉ ื‘ืขืฆืžื• (ื”ื•ืจืื•ืช ื”ืจื›ื‘ื” ืžืกื•ืคืงื•ืช ืขื‘ื•ืจ ืื•ื‘ื•ื ื˜ื• 18.04). ื–ืžื™ืŸ ืžืื’ืจ ืฉืœ ื—ื‘ื™ืœื•ืช RPM ืžื•ื‘ื ื•ืช ืžืจืืฉ, ืฉื‘ื• ืืชื” ื™ื›ื•ืœ ืœื”ืฉืชืžืฉ ื›ื“ื™ ืœื‘ื ื•ืช ืชืžื•ื ื•ืช ืžืฉืœืš ื‘ื”ืชื‘ืกืก ืขืœ ืงื•ื‘ืฅ ื”ืชืฆื•ืจื”. ื”ืžืื’ืจ ืžืฆื™ืข ื›-3300 ื—ื‘ื™ืœื•ืช. ืœื“ื•ื’ืžื”, ื›ื“ื™ ืœื‘ื ื•ืช ืชืžื•ื ืช ISO ืžืœืื”, ืคืฉื•ื˜ ื”ืคืขืœ: git clone https://github.com/microsoft/CBL-Mariner.git cd CBL-Mariner/toolkit sudo make iso REBUILD_TOOLS=y REBUILD_PACKAGES=n CONFIG_FILE=./imageconfigs /full .json

ืžืขืจื›ืช ืžื ื”ืœ ื”ืžืขืจื›ืช ืžืฉืžืฉืช ืœื ื™ื”ื•ืœ ืฉื™ืจื•ืชื™ื ื•ืœืืชื—ื•ืœ. ืœื ื™ื”ื•ืœ ื—ื‘ื™ืœื•ืช, ืžื ื”ืœื™ ื—ื‘ื™ืœื•ืช RPM ื•-DNF (ื’ืจืกื” tdnf ืž-vmWare) ืžืกื•ืคืงื™ื. ืฉืจืช SSH ืœื ื ื“ืœืง ื‘ืฉืงื˜. ื›ื“ื™ ืœื”ืชืงื™ืŸ ืืช ื”ื”ืคืฆื”, ืžืกื•ืคืง ืžืชืงื™ืŸ ืฉื™ื›ื•ืœ ืœืขื‘ื•ื“ ื”ืŸ ื‘ืžืฆื‘ื™ ื˜ืงืกื˜ ื•ื”ืŸ ื‘ืžืฆื‘ ื’ืจืคื™. ื”ืžืชืงื™ืŸ ืžืกืคืง ืืคืฉืจื•ืช ื”ืชืงื ื” ืขื ืกื˜ ืžืœื ืื• ื‘ืกื™ืกื™ ืฉืœ ื—ื‘ื™ืœื•ืช, ื•ืžืฆื™ืข ืžืžืฉืง ืœื‘ื—ื™ืจืช ืžื—ื™ืฆืช ื“ื™ืกืง, ื‘ื—ื™ืจืช ืฉื ืžืืจื— ื•ื™ืฆื™ืจืช ืžืฉืชืžืฉื™ื.

ืžื™ืงืจื•ืกื•ืคื˜ ืคืจืกืžื” ืืช ื”ืžื”ื“ื•ืจื” ื”ื™ืฆื™ื‘ื” ื”ืจืืฉื•ื ื” ืฉืœ ื”ืคืฆืช ืœื™ื ื•ืงืก CBL-Mariner


ืžืงื•ืจ: OpenNet.ru

ื”ื•ืกืคืช ืชื’ื•ื‘ื”