{"id":114764,"date":"2024-04-03T12:25:48","date_gmt":"2024-04-03T10:25:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd"},"modified":"2024-04-03T12:25:48","modified_gmt":"2024-04-03T10:25:48","slug":"inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","title":{"rendered":"Ini\u021biativa de reducere a dependen\u021belor \u00een libsystemd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen r\u00e2ndul dezvoltatorilor sistemului manager systemd se discut\u0103 despre reducerea dependen\u021belor bibliotecii libsystemd, care este legat\u0103 nu doar de componentele systemd, ci \u0219i de multe aplica\u021bii externe. De exemplu, \u00een Fedora, peste 150 de pachete utilizeaz\u0103 libsystemd ca dependen\u021be. Ini\u021biatorul discu\u021biei consider\u0103 c\u0103 includerea \u00een libsystemd a bibliotecilor externe suplimentare, care nu sunt controlate de dezvoltatorii systemd, cre\u0219te semnificativ suprafa\u021ba de atac \u00een cazul compromiterii bibliotecilor externe, a\u0219a cum s-a \u00eent\u00e2mplat cu biblioteca liblzma. <\/p>\n

Pe l\u00e2ng\u0103 liblzma \u0219i glibc, \u00een libsystemd sunt \u00eenc\u0103rcate \u0219i bibliotecile libzstd, liblz4 \u0219i libgcrypt, men\u021binerea securit\u0103\u021bii c\u0103rora devine o sarcin\u0103 critic\u0103. \u00cen libsystemd este disponibil accesul la 12 API-uri de baz\u0103 (sd-bus, sd-daemon, sd-device, sd-event, sd-hwdb, sd-id128, sd-journal, sd-login, sd-netlink, sd-network, sd-path \u0219i sd-resolve) \u0219i apare situa\u021bia \u00een care o aplica\u021bie, de exemplu, care folose\u0219te libsystemd doar pentru a apela func\u021bia sd_notify pentru a informa systemd despre schimbarea st\u0103rii sau sd_journal pentru a \u00eenregistra date \u00een jurnal, devine legat\u0103 de toate celelalte biblioteci \u0219i gestionari API. Ca o solu\u021bie, se propune \u00eemp\u0103r\u021birea libsystemd \u00een mai multe biblioteci separate, fiecare responsabil\u0103 pentru API-uri distincte, ceea ce va permite \u00eenc\u0103rcarea dependen\u021belor externe doar acolo unde sunt necesare. <\/p>\n

Dezvoltatorii systemd consider\u0103 c\u0103 \u00eemp\u0103r\u021birea nu este fezabil\u0103, deoarece gestionarii prezen\u021bi \u00een libsystemd sunt interconecta\u021bi. \u00cemp\u0103r\u021birea va necesita un efort uria\u0219 \u0219i va conduce fie la pierderi de eficien\u021b\u0103, fie la necesitatea duplic\u0103rii codului. Pentru a reduce memoria ocupat\u0103 \u00een libsystemd, recent s-a adoptat o modificare ce implementeaz\u0103 \u00eenc\u0103rcarea dinamic\u0103 a bibliotecilor liblzma, libzstd \u0219i liblz4 prin apelul dlopen(), \u00een situa\u021biile \u00een care func\u021biile lor sunt cu adev\u0103rat necesare. O modificare similar\u0103 va fi implementat\u0103 \u0219i pentru libgcrypt \u00eencep\u00e2nd cu urm\u0103toarea versiune. <\/p>\n

Aceast\u0103 solu\u021bie a fost criticat\u0103, deoarece, \u00een locul unei leg\u0103turi evidente \u0219i clare, \u00eenc\u0103rcarea bibliotecilor externe va fi efectuat\u0103 \u00een mod implicit, complic\u00e2nd diagnosticul, deoarece leg\u0103tura dintre apelurile API din libsystemd \u0219i apelurile func\u021biilor din bibliotecile externe nu este evident\u0103. \u00cen sine, trecerea la \u00eenc\u0103rcarea prin dlopen() nu schimb\u0103 arhitectura, ci doar ascunde componentele externe de cei care \u00eentre\u021bin \u0219i de utilizatori. <\/p>\n

Lenart P\u00f6ttering \u0219i-a exprimat dezacordul ferm fa\u021b\u0103 de ideea de a \u00eemp\u0103r\u021bi libsystemd \u00een mai multe biblioteci, deoarece o astfel de m\u0103sur\u0103 va complica semnificativ utilizarea comun\u0103 a codului \u00een systemd \u0219i va necesita transformarea tuturor handlerilor interni \u00een publici sau compilarea static\u0103 separat\u0103 a acestora \u00een fiecare bibliotec\u0103. \u00cen primul caz, vor ap\u0103rea probleme \u00een men\u021binerea stabilit\u0103\u021bii API-ului \u0219i a spa\u021biilor de nume, iar \u00een al doilea - o cre\u0219tere a dimensiunii din cauza duplic\u0103rii codului. <\/p>\n

\u00cenc\u0103rcarea bibliotecilor externe doar la nevoie, realizat\u0103 pentru urm\u0103toarea versiune, este perceput\u0103 de Lenart ca o strategie optim\u0103. Problema complexit\u0103\u021bii ob\u021binerii datelor despre bibliotecile \u00eenc\u0103rcate dinamic se propune a fi rezolvat\u0103 prin ad\u0103ugarea de c\u00e2mpuri suplimentare \u00een fi\u0219ierele ELF cu informa\u021bii despre aceste dependen\u021be dinamice, care pot fi procesate de debug-uri \u0219i afi\u0219ate \u00een ie\u0219irea utilitarului readelf. <\/p>\n

\u00cen ceea ce prive\u0219te leg\u0103tura cu libsystemd a unui num\u0103r mare de aplica\u021bii, Lenart a recomandat dezvoltatorilor de aplica\u021bii s\u0103 nu \u00eencerce s\u0103 \u00eencarce libsystemd pentru o singur\u0103 func\u021bie, ci s\u0103 implementeze un handler al protocolului la nivel de aplica\u021bie. De exemplu, implementarea func\u021bionalit\u0103\u021bii sd_notify() este destul de trivial\u0103 \u0219i poate fi realizat\u0103 \u00een c\u00e2teva linii de cod folosind socket-uri UNIX (AF_UNIX). O astfel de implementare separat\u0103 a sd_notify este disponibil\u0103 din 2017 pentru OpenSSH \u0219i a fost recent acceptat\u0103 \u00een ramura portabil\u0103 OpenSSH 9.8, al c\u0103rei release este programat pentru mijlocul verii.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 systemd \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libsystemd, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 systemd, \u043d\u043e \u0438 \u0441\u043e \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 Fedora \u0431\u043e\u043b\u0435\u0435 150 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 libsystemd \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u043e\u0440 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u044f\u0433\u0438\u0432\u0430\u043d\u0438\u0435 \u0432 libsystemd \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 systemd, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114764","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ini\u021biativa de reducere a dependen\u021belor de libsystemd | ProHoster","description":"\u00cen r\u00e2ndul dezvoltatorilor managerului de sistem systemd se discut\u0103 despre problema reducerii dependen\u021belor bibliotecii libsystemd, care este legat\u0103 nu doar de componentele systemd, ci \u0219i de multe aplica\u021bii externe.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u043f\u043e \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 libsystemd | ProHoster","og:description":"\u0421\u0440\u0435\u0434\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 systemd \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libsystemd, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438 systemd, \u043d\u043e \u0438 \u0441\u043e \u043c\u043d\u043e\u0433\u0438\u043c\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/inicziativa-po-sokrashheniyu-zavisimostej-u-libsystemd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-03T10:25:48+00:00","article:modified_time":"2024-04-03T10:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114764","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 21:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 21:20:19","updated":"2026-01-22 21:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/114764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=114764"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/114764\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=114764"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=114764"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=114764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}