{"id":78967,"date":"2020-04-23T13:41:58","date_gmt":"2020-04-23T11:41:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok"},"modified":"2020-04-23T13:41:58","modified_gmt":"2020-04-23T11:41:58","slug":"dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","title":{"rendered":"Rebuilderd este disponibil pentru verificarea independent\u0103 a Arch Linux prin compil\u0103ri repetabile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Prezentat<\/a><\/noindex> un instrumentar rebuilderd<\/a><\/noindex>, permi\u021b\u00e2nd organizarea unei verific\u0103ri independente a pachetelor binare ale distribu\u021biei prin desf\u0103\u0219urarea unui proces de compilare continuu, care verific\u0103 pachetele desc\u0103rcate cu cele ob\u021binute \u00een urma recompil\u0103rii pe un sistem local. Instrumentul este scris \u00een limbajul Rust \u0219i este distribuit sub licen\u021ba GPLv3.<\/p>\n

\u00cen prezent, rebuilderd ofer\u0103 doar suport experimental pentru verificarea pachetelor din Arch Linux, dar \u00een cur\u00e2nd se promit \u0219i suport pentru Debian. \u00cen cel mai simplu caz, pentru a rula rebuilderd suficient<\/a><\/noindex> trebuie s\u0103 instala\u021bi pachetul rebuilderd din repository-ul standard, s\u0103 importa\u021bi cheia GPG pentru verificarea mediului \u0219i s\u0103 activa\u021bi serviciul de sistem corespunz\u0103tor. Este posibil\u0103 desf\u0103\u0219urarea unei re\u021bele din mai multe instan\u021be rebuilderd.<\/p>\n

Serviciul monitorizeaz\u0103 starea indexului de pachete \u0219i lanseaz\u0103 automat recompilarea noilor pachete \u00eentr-un mediu de referin\u021b\u0103, a c\u0103rui stare este sincronizat\u0103 cu set\u0103rile mediului principal de compilare Arch Linux. La recompilare se iau \u00een considerare aspecte precum coresponden\u021ba exact\u0103 a dependen\u021belor, utilizarea unui set fix de unelte de compilare \u0219i versiuni, un set identic de op\u021biuni \u0219i set\u0103ri implicite, men\u021binerea ordinii de compilare a fi\u0219ierelor (aplicarea acelora\u0219i metode de sortare). Set\u0103rile procesului de compilare exclud ad\u0103ugarea de informa\u021bii auxiliare inconsistante de c\u0103tre compilator, cum ar fi valori aleatorii, linkuri c\u0103tre c\u0103i de fi\u0219iere \u0219i date despre ora \u0219i data compil\u0103rii. <\/p>\n

\n\u00cen prezent, compil\u0103rile repetabile sunt asigurate<\/a><\/noindex> pentru 84.1% din pachetele din repository-ul core Arch Linux, 83.8% din repository-ul extras \u0219i 76.9% din repository-ul community. Spre compara\u021bie, \u00een Debian 10 acest procent de<\/a><\/noindex> este de 94.1%. Compil\u0103rile repetabile reprezint\u0103 un element esen\u021bial \u00een asigurarea securit\u0103\u021bii, deoarece ofer\u0103 oric\u0103rui utilizator posibilitatea de a se asigura c\u0103 compil\u0103rile de pachete oferite de distribu\u021bie sunt identice cu cele compilate personal din sursele originale. F\u0103r\u0103 posibilitatea de a verifica identitatea unei compil\u0103ri binare, utilizatorul nu are de ales dec\u00e2t s\u0103 aib\u0103 \u00eencredere \u00een infrastructura de compilare a altora, compromiterea compilatorului sau a uneltelor de compilare av\u00e2nd poten\u021bialul de a introduce backdoor-uri ascunse. <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 rebuilderd, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0441\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0441 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u043c\u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0435\u0440\u0435\u0441\u0431\u043e\u0440\u043a\u0438 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 rebuilderd \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u0437 Arch Linux, \u043d\u043e \u0432 \u0441\u043a\u043e\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78967","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47rebuilderd este disponibil pentru verificarea independent\u0103 a Arch Linux prin compil\u0103ri repetabile | ProHoster","description":"A fost prezentat un set de instrumente","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d rebuilderd \u0434\u043b\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Arch Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-rebuilderd-dlya-nezavisimoj-verifikaczii-arch-linux-pri-pomoshhi-povtoryaemyh-sborok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-23T11:41:58+00:00","article:modified_time":"2020-04-23T11:41:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78967","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:47:25","updated":"2022-10-01 19:56:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/78967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=78967"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/78967\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=78967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=78967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=78967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}