{"id":103995,"date":"2022-05-10T15:36:38","date_gmt":"2022-05-10T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0"},"modified":"2022-05-10T15:36:38","modified_gmt":"2022-05-10T13:36:38","slug":"kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","title":{"rendered":"Spolo\u010dnos\u0165 Microsoft vydala Linuxov\u00fd distribu\u010dn\u00fd syst\u00e9m CBL-Mariner 2.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spolo\u010dnos\u0165 Microsoft zverejnila svoje prv\u00e9 stabiln\u00e9 aktualiz\u00e1cie novej vetvy distrib\u00facie CBL-Mariner 2.0 (Common Base Linux Mariner), ktor\u00e1 sa vyv\u00edja ako univerz\u00e1lna z\u00e1kladn\u00e1 platforma pre Linuxov\u00e9 prostredia pou\u017e\u00edvan\u00e9 v cloudovej infra\u0161trukt\u00fare, edge syst\u00e9moch a r\u00f4znych slu\u017eb\u00e1ch Microsoftu. Projekt si kladie za cie\u013e zjednoti\u0165 pou\u017e\u00edvan\u00e9 Linux rie\u0161enia v Microsoft a zjednodu\u0161i\u0165 \u00fadr\u017ebu Linuxov\u00fdch syst\u00e9mov pre r\u00f4zne \u00fa\u010dely. V\u00fdvoj projektu je distribuovan\u00fd pod licenciou MIT. Bal\u00edky s\u00fa zostaven\u00e9 pre architekt\u00fary aarch64 a x86_64. <\/p>\n

Nov\u00e1 verzia sa vyzna\u010duje v\u00fdznamn\u00fdm aktualizovan\u00edm verzi\u00ed softv\u00e9ru. Medzi in\u00fdmi sa aktualizovali verzie jadra Linux 5.15 (v vetve 1.0 bolo pou\u017eit\u00e9 jadro 5.4), systemd 250, glibc 2.35, GCC 11.2, clang 12, Python 3.9, ruby 3.1.2, rpm 4.17, qemu 6.1, perl 5.34, ostree 2022.1. Z\u00e1kladn\u00fd repozit\u00e1r obsahuje komponenty na zostavenie grafick\u00e9ho rozhrania, ako s\u00fa Wayland 1.20, Mesa 21.0, GTK 3.24 a X.Org Server 1.20.10, ktor\u00e9 boli predt\u00fdm dod\u00e1van\u00e9 v samostatnom repozit\u00e1ri coreui. Boli pridan\u00e9 aj zostavy jadra s PREEMPT_RT patchmi pre pou\u017eitie v syst\u00e9moch pracuj\u00facich v re\u00e1lnom \u010dase. <\/p>\n

Distrib\u00facia CBL-Mariner poskytuje mal\u00fd \u0161tandardn\u00fd set z\u00e1kladn\u00fdch bal\u00edkov, ktor\u00e9 sl\u00fa\u017eia ako univerz\u00e1lny z\u00e1klad pre vytv\u00e1ranie obsahu kontajnerov, hostite\u013esk\u00fdch prostred\u00ed a slu\u017eieb sp\u00fa\u0161\u0165an\u00fdch v cloudov\u00fdch infra\u0161trukt\u00farach a na edge zariadeniach. Zlo\u017eitej\u0161ie a \u0161pecializovan\u00e9 rie\u0161enia m\u00f4\u017eu by\u0165 vytvoren\u00e9 pridan\u00edm \u010fal\u0161\u00edch bal\u00edkov nad CBL-Mariner, no z\u00e1klad pre v\u0161etky tieto syst\u00e9my zost\u00e1va nezmenen\u00fd, \u010do zjednodu\u0161uje \u00fadr\u017ebu a pr\u00edpravu aktualiz\u00e1ci\u00ed. Napr\u00edklad, CBL-Mariner sa pou\u017e\u00edva ako z\u00e1klad mini distrib\u00facie WSLg, v ktorej s\u00fa poskytovan\u00e9 komponenty grafick\u00e9ho stacku pre sp\u00fa\u0161\u0165anie GUI aplik\u00e1ci\u00ed Linux v prostrediach zalo\u017een\u00fdch na subsyst\u00e9me WSL2 (Windows Subsystem for Linux). Roz\u0161\u00edren\u00e1 funk\u010dnos\u0165 v WSLg sa realizuje prostredn\u00edctvom zahrnutia \u010fal\u0161\u00edch bal\u00edkov s kompozitn\u00fdm serverom<\/a> Weston, XWayland, PulseAudio a FreeRDP. <\/p>\n

Syst\u00e9m zostavovania CBL-Mariner umo\u017e\u0148uje generova\u0165 bu\u010f samostatn\u00e9 RPM bal\u00edky na z\u00e1klade SPEC s\u00faborov a zdrojov\u00fdch textov, alebo monolitn\u00e9 syst\u00e9mov\u00e9 obrazy, ktor\u00e9 sa vytv\u00e1raj\u00fa pomocou n\u00e1stroja rpm-ostree a aktualizuj\u00fa sa atomicky bez rozdelenia na samostatn\u00e9 bal\u00edky. Podporuj\u00fa sa tak dve modely dod\u00e1vania aktualiz\u00e1ci\u00ed: prostredn\u00edctvom aktualiz\u00e1cie jednotliv\u00fdch bal\u00edkov a prostredn\u00edctvom prestavby a aktualiz\u00e1cie cel\u00e9ho syst\u00e9mov\u00e9ho obrazu. K dispoz\u00edcii je repozit\u00e1r, ktor\u00fd obsahuje pribli\u017ene 3000 u\u017e zostaven\u00fdch RPM bal\u00edkov, ktor\u00fd je mo\u017en\u00e9 vyu\u017ei\u0165 na zostavenie vlastn\u00fdch obrazov na z\u00e1klade konfigura\u010dn\u00e9ho s\u00faboru. <\/p>\n

Distrib\u00facia obsahuje iba najnevyhnutnej\u0161ie komponenty a je optimalizovan\u00e1 pre minim\u00e1lnu spotrebu pam\u00e4te a diskov\u00e9ho priestoru, ako aj pre vysok\u00fa r\u00fdchlos\u0165 na\u010d\u00edtania. Distrib\u00facia sa tie\u017e vyzna\u010duje zahrnut\u00edm r\u00f4znych doplnkov\u00fdch mechanizmov na zvy\u0161ovanie ochrany. V projekte sa uplat\u0148uje pr\u00edstup \u201emaxim\u00e1lna bezpe\u010dnos\u0165 predvolene\u201c. Poskytuje sa mo\u017enos\u0165 filtr\u00e1cie syst\u00e9mov\u00fdch volan\u00ed pomocou mechanizmu seccomp, \u0161ifrovania diskov\u00fdch oddielov a overovania bal\u00edkov prostredn\u00edctvom digit\u00e1lneho podpisu. <\/p>\n

S\u00fa aktivovan\u00e9 podporovan\u00e9 v jadre Linux re\u017eimy randomiz\u00e1cie adresn\u00e9ho priestoru, ako aj mechanizmy ochrany proti \u00fatokom s\u00favisiacim so symbolick\u00fdmi odkazmi, mmap, \/dev\/mem a \/dev\/kmem. Pre oblasti pam\u00e4te, v ktor\u00fdch s\u00fa umiestnen\u00e9 segmenty s \u00fadajmi jadra a modulov, je nastaven\u00fd re\u017eim iba na \u010d\u00edtanie a je zak\u00e1zan\u00e9 vykon\u00e1vanie k\u00f3du. Volite\u013ene je k dispoz\u00edcii mo\u017enos\u0165 zablokovania na\u010d\u00edtania modulov jadra po inicializ\u00e1cii syst\u00e9mu. Na filtr\u00e1ciu sie\u0165ov\u00fdch paketov sa vyu\u017e\u00edva n\u00e1stroj iptables. Po\u010das zostavovania s\u00fa predvolene povolen\u00e9 re\u017eimy ochrany proti prete\u010deniu z\u00e1sobn\u00edka, prete\u010deniam bufferov a probl\u00e9mom s form\u00e1tovan\u00edm re\u0165azcov (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). <\/p>\n

Na spr\u00e1vu slu\u017eieb a na\u010d\u00edtania sa pou\u017e\u00edva syst\u00e9mov\u00fd spr\u00e1vca systemd. Na spr\u00e1vu bal\u00edkov sa dod\u00e1vaj\u00fa bal\u00edkov\u00e9 spr\u00e1vcovia RPM a DNF. SSH server nie je predvolene zapnut\u00fd. Na in\u0161tal\u00e1ciu distrib\u00facie je k dispoz\u00edcii in\u0161tala\u010dn\u00fd program, ktor\u00fd m\u00f4\u017ee fungova\u0165 v textovom aj grafickom re\u017eime. V in\u0161tala\u010dnom programe je k dispoz\u00edcii mo\u017enos\u0165 in\u0161tal\u00e1cie s plnou alebo z\u00e1kladnou sadou bal\u00edkov, pon\u00faka rozhranie na v\u00fdber diskovej partition, v\u00fdber n\u00e1zvu hostite\u013ea a vytvorenie pou\u017e\u00edvate\u013eov.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner 2.0 (Common Base Linux Mariner), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, edge-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Microsoft. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 Microsoft Linux-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f Linux-\u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438. \u041d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103995","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spolo\u010dnos\u0165 Microsoft zverejnila Linux distrib\u00faciu CBL-Mariner 2.0 | ProHoster","description":"Spolo\u010dnos\u0165 Microsoft zverejnila prv\u00fa stabiln\u00fa aktualiz\u00e1ciu novej vetvy distrib\u00facie CBL-Mariner 2.0 (Common Base Linux Mariner), ktor\u00e1 sa vyv\u00edja ako univerz\u00e1lna z\u00e1kladn\u00e1 platforma pre prostredia Linux.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 CBL-Mariner 2.0 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 CBL-Mariner 2.0 (Common Base Linux Mariner), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f Linux-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-microsoft-opublikovala-linux-distributiv-cbl-mariner-2-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-10T13:36:38+00:00","article:modified_time":"2022-05-10T13:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103995","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-10 13:37:26","updated":"2026-02-09 22:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=103995"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103995\/revisions"}],"predecessor-version":[{"id":160325,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/103995\/revisions\/160325"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=103995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=103995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=103995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}