{"id":78967,"date":"2020-04-23T13:41:58","date_gmt":"2020-04-23T11:41:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok"},"modified":"2020-04-23T13:41:58","modified_gmt":"2020-04-23T11:41:58","slug":"dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","title":{"rendered":"A ReversingLabs publicou os resultados da an\u00e1lise do uso","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Apresentado<\/a><\/noindex> um conjunto de ferramentas rebuilderd<\/a><\/noindex>, permitindo uma verifica\u00e7\u00e3o independente de pacotes bin\u00e1rios da distribui\u00e7\u00e3o atrav\u00e9s da implementa\u00e7\u00e3o de um processo de constru\u00e7\u00e3o cont\u00ednua, que compara os pacotes baixados com os pacotes resultantes da reconstru\u00e7\u00e3o em um sistema local. A ferramenta \u00e9 escrita na linguagem Rust e \u00e9 distribu\u00edda sob a licen\u00e7a GPLv3.<\/p>\n

Atualmente, o rebuilderd oferece apenas suporte experimental para verifica\u00e7\u00e3o de pacotes do Arch Linux, mas em breve prometem adicionar suporte ao Debian. No caso mais simples, para iniciar o rebuilderd precisa apenas<\/a><\/noindex> \u00e9 necess\u00e1rio instalar o pacote rebuilderd do reposit\u00f3rio padr\u00e3o, importar a chave GPG para verificar o ambiente e ativar o servi\u00e7o do sistema correspondente. \u00c9 poss\u00edvel implantar uma rede de v\u00e1rias inst\u00e2ncias do rebuilderd.<\/p>\n

O servi\u00e7o monitora o estado do \u00edndice de pacotes e inicia automaticamente a reconstru\u00e7\u00e3o de novos pacotes em um ambiente de refer\u00eancia, cujo estado \u00e9 sincronizado com as configura\u00e7\u00f5es do ambiente de constru\u00e7\u00e3o principal do Arch Linux. Na reconstru\u00e7\u00e3o, s\u00e3o considerados detalhes como a correspond\u00eancia exata das depend\u00eancias, o uso de composi\u00e7\u00f5es e vers\u00f5es imut\u00e1veis da ferramenta de constru\u00e7\u00e3o, o conjunto id\u00eantico de op\u00e7\u00f5es e configura\u00e7\u00f5es padr\u00e3o, e a preserva\u00e7\u00e3o da ordem de constru\u00e7\u00e3o dos arquivos (aplicando os mesmos m\u00e9todos de ordena\u00e7\u00e3o). As configura\u00e7\u00f5es do processo de constru\u00e7\u00e3o excluem a adi\u00e7\u00e3o de informa\u00e7\u00f5es de servi\u00e7o n\u00e3o determin\u00edsticas pelo compilador, como valores aleat\u00f3rios, refer\u00eancias a caminhos de arquivo e dados sobre a data e hora da constru\u00e7\u00e3o. <\/p>\n

\nAtualmente, as reconstru\u00e7\u00f5es repet\u00edveis s\u00e3o garantidas<\/a><\/noindex> para 84,1% dos pacotes do reposit\u00f3rio core do Arch Linux, 83,8% do reposit\u00f3rio extras e 76,9% do reposit\u00f3rio community. Para compara\u00e7\u00e3o, no Debian 10 esse \u00edndice \u00e9<\/a><\/noindex> \u00e9 de 94,1%. Reconstru\u00e7\u00f5es repet\u00edveis s\u00e3o um elo importante para garantir a seguran\u00e7a, pois permitem que qualquer usu\u00e1rio verifique se as compila\u00e7\u00f5es de pacotes fornecidas pelo distribuidor correspondem byte a byte \u00e0s compila\u00e7\u00f5es que foram constru\u00eddas pessoalmente a partir dos c\u00f3digos fonte. Sem a possibilidade de verificar a identidade da constru\u00e7\u00e3o bin\u00e1ria, o usu\u00e1rio deve confiar cegamente na infraestrutura de constru\u00e7\u00e3o de terceiros, cuja comprometimento do compilador ou ferramenta de constru\u00e7\u00e3o pode levar \u00e0 inser\u00e7\u00e3o de backdoors ocultas. <\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 rebuilderd, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0441\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u043c\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0435\u0440\u0435\u0441\u0431\u043e\u0440\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 rebuilderd \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u0437 Arch Linux, \u043d\u043e \u0432 \u0441\u043a\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78967","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rebuilderd dispon\u00edvel para verifica\u00e7\u00e3o independente do Arch Linux por meio de builds repet\u00edveis | ProHoster","description":"Foi apresentada a ferramenta","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d rebuilderd \u0434\u043b\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Arch Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-23T11:41:58+00:00","article:modified_time":"2020-04-23T11:41:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78967","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:47:25","updated":"2022-10-01 19:56:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/78967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=78967"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/78967\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=78967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=78967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=78967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}