Microsoft yatulutsa zosintha zokhazikika za nthambi yatsopano yogawa CBL-Mariner 2.0 (Common Base Linux Mariner), yomwe ikupangidwa ngati nsanja yapadziko lonse lapansi yamalo a Linux omwe amagwiritsidwa ntchito mumtambo, makina am'mphepete ndi ntchito zosiyanasiyana za Microsoft. Pulojekitiyi ikufuna kugwirizanitsa mayankho a Linux omwe amagwiritsidwa ntchito mu Microsoft komanso kufewetsa kasamalidwe ka Linux pazifukwa zosiyanasiyana mpaka pano. Zomwe polojekitiyi ikuchita zimagawidwa pansi pa layisensi ya MIT. Kupanga phukusi kumapangidwira aarch64 ndi x86_64 zomangamanga.
Kutulutsidwa kwatsopano ndikodziwika chifukwa chakusintha kwakukulu kwamitundu yamapulogalamu. Kuphatikizira mitundu yosinthidwa ya Linux kernel 5.15 (mu nthambi ya 1.0 5.4 kernel idagwiritsidwa ntchito), systemd 250, glibc 2.35, GCC 11.2, clang 12, Python 3.9, ruby ββββ3.1.2, rpm 4.17, 6.1. , ostree 5.34. Chosungira chachikulu chimaphatikizapo zigawo za GUI monga Wayland 2022.1, Mesa 1.20, GTK 21.0 ndi X.Org Server 3.24, zomwe zinatumizidwa m'mbuyo mosungiramo coreui. Kernel yowonjezeredwa imamanga ndi zigamba za PREEMPT_RT kuti zigwiritsidwe ntchito munthawi yeniyeni.
Kugawa kwa CBL-Mariner kumapereka magawo ang'onoang'ono oyambira omwe amakhala ngati maziko apadziko lonse lapansi popanga zomwe zili muzotengera, malo okhala ndi ntchito zomwe zikuyenda mumtambo komanso pazida zam'mphepete. Mayankho ovuta komanso apadera amatha kupangidwa powonjezera ma phukusi owonjezera pamwamba pa CBL-Mariner, koma maziko a machitidwe onsewa amakhalabe ofanana, kupanga kukonza ndi zosintha kukhala zosavuta. Mwachitsanzo, CBL-Mariner imagwiritsidwa ntchito ngati maziko a kagawidwe kakang'ono ka WSLg, komwe kamapereka magawo azithunzi ogwiritsira ntchito Linux GUI m'malo otengera WSL2 (Windows Subsystem for Linux). Kugwira ntchito kowonjezereka mu WSLg kumachitika kudzera pakuphatikizidwa kwa mapaketi owonjezera ndi Weston Composite Server, XWayland, PulseAudio ndi FreeRDP.
Makina omangira a CBL-Mariner amakulolani kupanga phukusi la RPM pawokha potengera mafayilo a SPEC ndi ma source code, komanso zithunzi zamtundu wa monolithic zomwe zimapangidwa pogwiritsa ntchito zida za rpm-ostree ndikusinthidwa ma atomu popanda kugawanika m'maphukusi osiyana. Chifukwa chake, mitundu iwiri yobweretsera zosinthika imathandizidwa: kudzera pakukonzanso phukusi layekha komanso pomanganso ndikusintha chithunzi chonse chadongosolo. Malo osungira pafupifupi 3000 omwe adamangidwa kale a RPM akupezeka omwe mungagwiritse ntchito kupanga zithunzi zanu potengera fayilo yosinthira.
Kugawa kumaphatikizapo zigawo zofunikira zokhazokha ndipo zimakonzedwa kuti zisamakumbukire pang'ono ndi kugwiritsa ntchito malo a disk, komanso kuthamanga kwambiri. Kugawirako kumawonekeranso pakuphatikizidwa kwa njira zina zowonjezera zowonjezera chitetezo. Pulojekitiyi imatenga njira ya "chitetezo chokwanira mwachisawawa". Ndizotheka kusefa mafoni amachitidwe pogwiritsa ntchito makina a seccomp, encrypt partitions disk, ndikutsimikizira phukusi pogwiritsa ntchito siginecha ya digito.
Njira zopangira ma adilesi zomwe zimathandizidwa mu kernel ya Linux zimayatsidwa, komanso njira zodzitetezera ku symlink, mmap, /dev/mem ndi /dev/kmem. Malo okumbukira omwe ali ndi magawo omwe ali ndi kernel ndi data ya module amayikidwa kuti awerenge-pokhapokha ndipo kupha ma code ndikoletsedwa. Njira ilipo yoletsa kutsitsa ma module a kernel pambuyo poyambitsa dongosolo. Iptables toolkit imagwiritsidwa ntchito kusefa mapaketi a netiweki. Pakumanga, chitetezo pakusefukira kwa stack, buffer kusefukira, ndi zovuta zamapangidwe a zingwe zimayatsidwa mwachisawawa (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro).
Systemd manager systemd imagwiritsidwa ntchito kuyang'anira ntchito ndi boot. Oyang'anira phukusi la RPM ndi DNF amaperekedwa kuti aziwongolera phukusi. Seva ya SSH siyiyatsidwa mwachisawawa. Kuti muyike kugawa, choyikapo chimaperekedwa chomwe chingagwire ntchito m'mawu ndi ma graphical modes. Woyikirayo amapereka mwayi woyika ndi phukusi lathunthu kapena loyambira, ndipo amapereka mawonekedwe osankha gawo la disk, kusankha dzina la alendo, ndikupanga ogwiritsa ntchito.
Source: opennet.ru