Microsoft yakaburitsa kuburitswa kweiyo CBL-Mariner 1.0 (Common Base Linux Mariner) kugovera, iyo yakamisikidzwa seyekutanga yakagadzikana kuburitswa kweprojekiti. Iyo CBL-Mariner kugoverwa kuri kuvandudzwa seyepasirese base chikuva cheLinux nharaunda dzinoshandiswa mumakore zvivakwa, edge masisitimu uye akasiyana masevhisi eMicrosoft. Iyo purojekiti ine chinangwa chekubatanidza Microsoft Linux mhinduro uye kurerutsa kuchengetedza kweLinux masisitimu ezvinangwa zvakasiyana kusvika parizvino. Zviitiko zveprojekiti zvakagoverwa pasi peMIT rezenisi.
Iko kugovera kunopa diki diki seti yemapakeji ekutanga anoshanda seyepasirese hwaro hwekugadzira zviri mukati memidziyo, nharaunda dzevaenzi uye masevhisi anomhanya mumafu zvivakwa uye pamupendero zvishandiso. Zvimwe zvakaoma uye zvine hunyanzvi zvigadziriso zvinogona kugadzirwa nekuwedzera mamwe mapakeji pamusoro peCBL-Mariner, asi hwaro hwese masisitimu akadaro hunoramba hwakafanana, zvichiita kuti kugadzirisa uye kugadzirisa kuve nyore.
Semuenzaniso, CBL-Mariner inoshandiswa sehwaro hweWSLg mini-kugovera, iyo inopa magiraidhi stack zvikamu zvekushandisa Linux GUI maapplication munzvimbo dzakavakirwa paWSL2 (Windows Subsystem yeLinux) subsystem. Mwoyo wekugovera uku hauna kuchinjika, uye mashandiro akawedzerwa anowanikwa kuburikidza nekubatanidzwa kwemamwe mapakeji neWeston, XWayland, PulseAudio uye FreeRDP composite server.
Iyo CBL-Mariner kuvaka sisitimu inobvumidza iwe kugadzira ese ari maviri ega RPM mapakeji anoenderana neSPEC mafaera uye sosi kodhi, pamwe ne monolithic system mifananidzo inogadzirwa uchishandisa rpm-ostree toolkit uye yakagadziridzwa atomu pasina kupatsanura mumapakeji akasiyana. Saizvozvo, maviri edhisheni edhisheni modhi anotsigirwa: kuburikidza nekuvandudza ega mapakeji uye kuburikidza nekuvaka patsva nekugadzirisa iyo yese system mufananidzo. Kugovera kunosanganisira chete izvo zvinonyanya kukosha zvikamu uye zvakagadziridzwa kune shoma ndangariro uye dhisiki nzvimbo yekushandisa, pamwe nekumhanyisa kurodha. Kugovera kwacho kwakakoshawo pakuiswa kwedzimwe nzira dzakasiyana dzekuwedzera kuchengetedzwa.
Iyo purojekiti inotora "yakanyanya kuchengetedzwa nekusarudzika" nzira. Zvinogoneka kusefa mafoni ehurongwa uchishandisa seccomp mechanism, encrypt disk partitions, uye simbisa mapakeji uchishandisa siginecha yedhijitari. Padanho rekuvaka, dziviriro kubva pakupfachukira, buffer mafashama, uye tambo yefomati matambudziko inogoneswa nekusarudzika (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). Kero nzvimbo randomisation modes inotsigirwa muLinux kernel inogadziriswa, pamwe chete nedziviriro nzira dzekurwisa symlink kurwiswa, mmap, /dev/mem uye /dev/kmem. Idzo nzvimbo dzekurangarira dzine zvikamu zvine kernel uye module data dzakagadzirirwa kuverenga-chete modhi uye kodhi kuuraya inorambidzwa. Imwe sarudzo ndeyekudzima kurodha kernel modules mushure mekutanga system. Iyo iptables toolkit inoshandiswa kusefa network mapaketi.
Mifananidzo ye ISO yakagadzirwa kare haina kupihwa. Zvinofungidzirwa kuti mushandisi anogona kugadzira chifananidzo nekuzvizadza kwakakodzera pachake (mirayiridzo yegungano inopihwa Ubuntu 18.04). A repository ye pre-yakavakwa RPM mapakeji iripo, iyo iwe yaunogona kushandisa kuvaka yako mifananidzo zvichienderana nefaira rekugadzirisa. Iyo repository inopa anenge 3300 mapakeji. Semuenzaniso, kugadzira iyo yakazara iso mufananidzo, ingomhanya: git clone https://github.com/microsoft/CBL-Mariner.git cd CBL-Mariner/toolkit sudo ita iso REBUILD_TOOLS=y REBUILD_PACKAGES=n CONFIG_FILE=./imageconfigs /full .json
Iyo system maneja systemd inoshandiswa kubata masevhisi uye boot. Zvepakeji maneja, mapakeji maneja RPM uye DNF (tdnf musiyano kubva vmWare) anopihwa. Iyo SSH server haibatike chinyararire. Kuti uise kugovera, mugadziri anopiwa anogona kushanda mune zvese zvinyorwa uye graphical modes. Iyo yekumisikidza inopa sarudzo yekuisa ine yakazara kana yekutanga seti yemapakeji, uye inopa chinongedzo chekusarudza dhisiki partition, kusarudza zita remuenzi, uye kugadzira vashandisi.
Source: opennet.ru