A fost publicat\u0103 o nou\u0103 ramur\u0103 stabil\u0103 a instrumentarului Flatpak 1.14, care ofer\u0103 un sistem pentru construirea de pachete autonome, nelegate de distribu\u021bii Linux specifice \u0219i care ruleaz\u0103 \u00eentr-un container special, izol\u00e2nd aplica\u021bia de restul sistemului. Suportul pentru executarea pachetelor Flatpak este asigurat pentru Arch Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, Alt Linux \u0219i Ubuntu. Pachetele Flatpak sunt incluse \u00een repository-ul Fedora \u0219i sunt suportate \u00een programul standard de gestionare a aplica\u021biilor GNOME. <\/p>\n
Nout\u0103\u021bi cheie \u00een ramura Flatpak 1.14: <\/p>\n
Reamintim c\u0103 dezvoltatorii de aplica\u021bii Flatpak au posibilitatea de a simplifica distribu\u021bia programelor lor, care nu sunt incluse \u00een repositoarele standard ale distribu\u021biilor, prin preg\u0103tirea unui singur container universal, f\u0103r\u0103 a crea pachete separate pentru fiecare distribu\u021bie. Utilizatorilor preocupa\u021bi de securitate, Flatpak le permite s\u0103 ruleze aplica\u021bii discutabile \u00eentr-un container, oferind acces doar la func\u021bionalit\u0103\u021bile de re\u021bea \u0219i fi\u0219ierele utilizatorului asociate aplica\u021biei. Utilizatorii interesa\u021bi de nout\u0103\u021bi pot instala cele mai recente versiuni de teste \u0219i stabile ale aplica\u021biilor f\u0103r\u0103 a fi necesare modific\u0103ri \u00een sistem. De exemplu, pachetele Flatpak sunt disponibile pentru LibreOffice, Midori, GIMP, Inkscape, Kdenlive, Steam, 0 A.D., Visual Studio Code, VLC, Slack, Skype, Telegram Desktop, Android Studio etc. <\/p>\n
Pentru a reduce dimensiunea pachetului, acesta include doar dependen\u021bele specifice aplica\u021biei, \u00een timp ce bibliotecile de baz\u0103 sistemice \u0219i grafice (GTK, Qt, bibliotecile GNOME \u0219i KDE etc.) sunt prezentate sub form\u0103 de runtime-uri tipice care pot fi conectate. Principala diferen\u021b\u0103 dintre Flatpak \u0219i Snap este c\u0103 Snap folose\u0219te componentele mediului sistemului de baz\u0103 \u0219i izolare bazat\u0103 pe filtrarea apelurilor sistemului, \u00een timp ce Flatpak creeaz\u0103 un container separat de sistem \u0219i opereaz\u0103 cu seturi mari de runtime-uri, oferind ca dependen\u021be nu pachete, ci medii sistemice tipice (de exemplu, toate bibliotecile necesare pentru func\u021bionarea aplica\u021biilor GNOME sau KDE). <\/p>\n
Pe l\u00e2ng\u0103 mediul sistemic standard (runtime), care este instalat printr-un repository special, sunt furnizate dependen\u021be suplimentare (bundle) necesare pentru func\u021bionarea aplica\u021biei. \u00cempreun\u0103, runtime \u0219i bundle formeaz\u0103 con\u021binutul containerului, av\u00e2nd \u00een vedere c\u0103 runtime este instalat separat \u0219i este legat de mai multe containere, ceea ce permite evitarea duplic\u0103rii fi\u0219ierelor sistemice comune pentru containere. \u00centr-un singur sistem pot fi instalate mai multe runtime-uri diferite (GNOME, KDE) sau mai multe versiuni ale unui singur runtime (GNOME 3.40, GNOME 3.42). Containerul cu aplica\u021bia, ca dependen\u021b\u0103, folose\u0219te leg\u0103tura doar cu un anumit runtime, f\u0103r\u0103 a lua \u00een considerare pachetele individuale din care este compus runtime-ul. Toate elementele lips\u0103 sunt incluse direct \u00eempreun\u0103 cu aplica\u021bia. La formarea containerului, con\u021binutul runtime-ului este montat ca partajare \/usr, iar bundle-ul este montat \u00een directorul \/app. <\/p>\n
Con\u021binutul runtime-ului \u0219i al containerelor de aplica\u021bii este generat folosind tehnologia OSTree, \u00een care imaginea este actualizat\u0103 atomic dintr-un depozit similar Git, permi\u021b\u00e2nd aplicarea metodelor de control al versiunilor asupra componentelor distribu\u021biei (de exemplu, se poate reveni rapid la o stare anterioar\u0103 a sistemului). Pachetele RPM sunt transmise \u00een depozitul OSTree printr-un strat special numit rpm-ostree. Instalarea \u0219i actualizarea separat\u0103 a pachetelor \u00een cadrul mediului de lucru nu este suportat\u0103, sistemul este actualizat nu la nivelul componentelor individuale, ci \u00een \u00eentregime, schimb\u00e2nd atomic starea sa. Sunt furnizate unelte pentru aplicarea incremental\u0103 a actualiz\u0103rilor, elimin\u00e2nd necesitatea \u00eenlocuirii complete a imaginii la fiecare actualizare. <\/p>\n
Mediul izolat format este complet independent de distribu\u021bia utilizat\u0103 \u0219i, cu set\u0103rile corecte ale pachetului, nu are acces la fi\u0219ierele \u0219i procesele utilizatorului sau ale sistemului de baz\u0103, nu poate accesa direct hardware-ul, cu excep\u021bia afi\u0219\u0103rii prin DRI \u0219i a apelurilor c\u0103tre subsistemul de re\u021bea. Afi\u0219area graficii \u0219i organizarea intr\u0103rii se realizeaz\u0103 prin protocolul Wayland sau prin redirec\u021bionarea socket-ului X11. Interac\u021biunea cu mediul extern este construit\u0103 pe baza sistemului de mesagerie DBus \u0219i a unui API special Portals. <\/p>\n
Pentru izolare se folose\u0219te un strat Bubblewrap \u0219i tehnologii tradi\u021bionale pentru Linux de virtualizare a containerelor, bazate pe utilizarea cgroups, spa\u021bii de nume (namespaces), Seccomp \u0219i SELinux. Pentru redarea sunetului se utilizeaz\u0103 PulseAudio. \u00cen acest context, izola\u021bia poate fi dezactivat\u0103, lucru de care profit\u0103 dezvoltatorii multor pachete populare pentru a ob\u021bine acces complet la FS \u0219i la toate dispozitivele din sistem. De exemplu, pachetele GIMP, VSCodium, PyCharm, Octave, Inkscape, Audacity \u0219i VLC sunt livrate cu un mod de izolare restric\u021bionat, l\u0103s\u00e2nd acces complet la directorul home. \u00cen cazul compromiterii pachetelor cu acces la directorul home, \u00een ciuda prezen\u021bei \u00eentr-un pachet a etichetei «sandboxed», atacatorului \u00eei este suficient s\u0103 modifice fi\u0219ierul ~\\\/ .bashrc pentru a-\u0219i executa codul. O alt\u0103 problem\u0103 este controlul asupra modific\u0103rilor aduse pachetelor \u0219i \u00eencrederea \u00een constructorii de pachete, care adesea nu sunt conecta\u021bi la proiectul principal sau la distribu\u021biile acestora. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Flatpak 1.14, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u043c Linux \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435, \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Flatpak-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u0434\u043b\u044f Arch Linux, CentOS, Debian, Fedora, Gentoo, Mageia, Linux Mint, Alt Linux \u0438 Ubuntu. \u041f\u0430\u043a\u0435\u0442\u044b \u0441 Flatpak \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Fedora […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104920","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea sistemului de pachete autonome Flatpak 1.14.0 | ProHoster","description":"A fost publicat\u0103 o nou\u0103 ramur\u0103 stabil\u0103 a instrumentului Flatpak 1.14, care ofer\u0103 un sistem pentru construirea pachetelor autonome, nelegate de distribuitorii specifici de Linux \u0219i care ruleaz\u0103 \u00een mod special.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-sistemy-samodostatochnyh-paketov-flatpak-1-14-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Flatpak 1.14.0 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Flatpak 1.14, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u043c Linux \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-sistemy-samodostatochnyh-paketov-flatpak-1-14-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-24T13:36:56+00:00","article:modified_time":"2022-08-24T13:36:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104920","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-24 13:37:42","updated":"2022-09-27 18:27:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=104920"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104920\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=104920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=104920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=104920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"