{"id":100551,"date":"2021-06-21T10:22:44","date_gmt":"2021-06-21T08:22:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza"},"modified":"2021-06-21T10:22:44","modified_gmt":"2021-06-21T08:22:44","slug":"v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","title":{"rendered":"V NixOS je zabezpe\u010den\u00e1 podpora opakovate\u013en\u00fdch zost\u00e1v pre iso obraz","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdvoj\u00e1ri distrib\u00facie NixOS informovali o implement\u00e1cii podpory verifik\u00e1cie integrity minim\u00e1lneho iso obrazu (iso_minimal.x86_64-linux) pomocou mechanizmu opakovate\u013en\u00fdch zost\u00e1v. Predt\u00fdm boli opakovate\u013en\u00e9 zostavy dostupn\u00e9 na \u00farovni jednotliv\u00fdch bal\u00edkov, teraz s\u00fa roz\u0161\u00edren\u00e9 aj pre cel\u00fd iso obraz. Ka\u017ed\u00fd pou\u017e\u00edvate\u013e si m\u00f4\u017ee vytvori\u0165 iso obraz, ktor\u00fd je \u00faplne identick\u00fd s poskytovan\u00fdm iso obrazom na stiahnutie, a overi\u0165, \u017ee bol zostaven\u00fd z poskytnut\u00fdch zdrojov\u00fdch k\u00f3dov a neobsahuje \u017eiadne skryt\u00e9 zmeny. Na automatiz\u00e1ciu overenia iso obrazu NixOS pomocou opakovate\u013en\u00fdch zost\u00e1v bol pripraven\u00fd \u0161peci\u00e1lny skript. Na nasleduj\u00facom kroku sa pl\u00e1nuje zabezpe\u010di\u0165 opakovate\u013en\u00e9 zostavy pre cel\u00fd iso obraz s pracovnou plochou GNOME. <\/p>\n

Opakovate\u013en\u00e9 zostavy s\u00fa d\u00f4le\u017eit\u00fdm \u010dl\u00e1nkom zabezpe\u010denia, preto\u017ee umo\u017e\u0148uj\u00fa samostatne overi\u0165, \u017ee navrhovan\u00e9 zostavy s\u00fa byte za byte zhodn\u00e9 so zostavami, ktor\u00e9 boli zostaven\u00e9 priamo zo zdrojov\u00fdch k\u00f3dov. Bez mo\u017enosti overi\u0165 identitu bin\u00e1rnej zostavy zost\u00e1va pou\u017e\u00edvate\u013e iba slepo d\u00f4verova\u0165 cudz\u00edm zostavovac\u00edm infra\u0161trukt\u00faram, ktor\u00fdch kompromit\u00e1cia kompil\u00e1tora alebo zostavovacieho n\u00e1stroja m\u00f4\u017ee vies\u0165 k zav\u00e1dzaniu skryt\u00fdch zadn\u00fdch vr\u00e1tok. Na zabezpe\u010denie opakovate\u013en\u00fdch zost\u00e1v je potrebn\u00e9 replikova\u0165 obsah a parametre zostavovacieho prostredia, pou\u017ei\u0165 identick\u00e9 verzie programov, z\u00e1vislost\u00ed a zav\u00e1dzac\u00edch komponentov, vyl\u00fa\u010di\u0165 zavedenie meniacich sa \u00fadajov (\u010dasy, n\u00e1hodn\u00e9 vyplnenia at\u010f.), ako aj zachova\u0165 poradie zostavenia s\u00faborov a dodania bal\u00edkov v iso obraze. <\/p>\n

Pripom\u00edname, \u017ee distrib\u00facia NixOS je zalo\u017een\u00e1 na spr\u00e1vcovi bal\u00edkov Nix a poskytuje rad vlastn\u00fdch rie\u0161en\u00ed, ktor\u00e9 zjednodu\u0161uj\u00fa nastavenie a \u00fadr\u017ebu syst\u00e9mu. Napr\u00edklad v NixOS sa pou\u017e\u00edva jeden s\u00fabor syst\u00e9movej konfigur\u00e1cie (configuration.nix), je mo\u017en\u00e9 r\u00fdchlo obnovi\u0165 aktualiz\u00e1cie, podporuje sa prep\u00ednanie medzi r\u00f4znymi stavmi syst\u00e9mu, umo\u017e\u0148uje sa in\u0161tal\u00e1cia individu\u00e1lnych bal\u00edkov jednotliv\u00fdmi pou\u017e\u00edvate\u013emi (bal\u00edk sa in\u0161taluje do domovsk\u00e9ho adres\u00e1ra) a mo\u017en\u00e1 je s\u00fa\u010dasn\u00e1 in\u0161tal\u00e1cia viacer\u00fdch verzi\u00ed jednej aplik\u00e1cie. Pri pou\u017eit\u00ed Nix sa bal\u00edky in\u0161taluj\u00fa do samostatn\u00e9ho stromu adres\u00e1rov \/nix\/store alebo podadres\u00e1ra v adres\u00e1ri pou\u017e\u00edvate\u013ea. Napr\u00edklad bal\u00edk je in\u0161talovan\u00fd ako \/nix\/store\/f2b5\u20268a563-firefox-89.0.1\/, kde \u201ef2b5\u2026\u201c je jedine\u010dn\u00fd identifik\u00e1tor bal\u00edka pou\u017e\u00edvan\u00fd na kontrolu z\u00e1vislost\u00ed. <\/p>\n

Bal\u00edky s\u00fa usporiadan\u00e9 vo forme kontajnerov, obsahuj\u00facich potrebn\u00e9 komponenty na fungovanie aplik\u00e1ci\u00ed. Medzi bal\u00edkmi je mo\u017en\u00e9 definova\u0165 z\u00e1vislosti, pri\u010dom na vyh\u013ead\u00e1vanie existuj\u00facich z\u00e1vislost\u00ed sa vyu\u017e\u00edva skenovanie hash identifik\u00e1torov v adres\u00e1ri nain\u0161talovan\u00fdch bal\u00edkov. Je mo\u017en\u00e1 ako s\u0165ahovanie hotov\u00fdch bin\u00e1rnych bal\u00edkov z repozit\u00e1ra (pri in\u0161tal\u00e1cii aktualiz\u00e1ci\u00ed sa s\u0165ahuj\u00fa iba delta zmeny), tak aj zostavenie zo zdrojov\u00fdch k\u00f3dov so v\u0161etk\u00fdmi z\u00e1vislos\u0165ami. Kolekcia bal\u00edkov je prezentovan\u00e1 v \u0161peci\u00e1lnom repozit\u00e1ri Nixpkgs.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430. \u041b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c iso-\u043e\u0431\u0440\u0430\u0437, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0439 \u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 iso-\u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043e\u043d \u0441\u043e\u0431\u0440\u0430\u043d \u0438\u0437 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100551","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V NixOS je zabezpe\u010den\u00e1 podpora opakovan\u00fdch zostaven\u00ed pre iso obraz | ProHoster","description":"V\u00fdvoj\u00e1ri distrib\u00facie NixOS ozn\u00e1mili implement\u00e1ciu podpory verifik\u00e1cie integrity minim\u00e1lneho iso obrazu (iso_minimal.x86_64-linux) pomocou mechanizmu opakovan\u00fdch zostaven\u00ed.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 NixOS \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a \u0434\u043b\u044f iso-\u043e\u0431\u0440\u0430\u0437\u0430 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 NixOS \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e iso-\u043e\u0431\u0440\u0430\u0437\u0430 (iso_minimal.x86_64-linux) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-nixos-obespechena-podderzhka-povtoryaemyh-sborok-dlya-iso-obraza","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-21T08:22:44+00:00","article:modified_time":"2021-06-21T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100551","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-21 08:34:58","updated":"2022-09-28 18:53:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=100551"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100551\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=100551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=100551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=100551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}