🥇NICE.OS imhando yemidziyo midiki yakavakwa kubva pakutanga uye yakagadzirirwa midziyo

Chirongwa cheNAYS.OS chiri kukura chakazvimiririra Linux- kugoverwa kwakavakwa kubva pakutanga kubva pakodhi yekodhi uye kuchengetedza hwaro hwepakeji, iyo isingatore ma script ekuvaka mapakeji kubva kune mamwe ma distributions. Purojekiti iyi inogadzira toolkit yayo, patch set, uye build policy. Mufananidzo weISO (603 MB) wakagadzirirwa kuiswa pamichina chaiyo (KVM, Proxmox, VMware, VirtualBox, nezvimwewo) unowanikwa kuti udhawunirodwe.

Kugoverwa uku kunowanikwa pachena kuti kushandiswe nemunhu wega uye mubhizinesi, pasina zvirambidzo zvemidziyo. Chibvumirano cherezinesi chinorambidza "kugadzirisa, kugadzirisa, kushandura, kupatsanura, kuparadzanisa, kana kuedza kuwana kodhi yekodhesi, kunze kwekunge zvichibvumirwa nemutemo unoshanda kana marezenisi emahara." Chinorambidzawo "kutamisa, kutengesa, kurenda, kukweretesa, kuburitsa, kana kugovera software yacho pasina mvumo yakanyorwa yemuridzi wekodzero."

NICE.OS yakaiswa senzira yekutsigira kwenguva refu (LTS) server yakagadzirirwa michina chaiyo, masisitimu egore, uye ma edge nodes. Kernel, ma compiler, maraibhurari makuru, uye crypto stack zvese zvinounganidzwa kuti zvisangane nezvinodiwa zvakafanana zvekudzokororwa uye zvekuchengetedza. Chirongwa ichi chiri muRussian software registry (kunyoresa zvinoreva kuti chinogona kusangana nezvinodiwa zve "domestic software" mubazi rehurumende uye kune vamwe vatengi vemakambani).

Nzira mbiri dzinotsigirwa: inovandudzwa neatomu (isingachinjike, zvichibva paOSTree) uye classic RPM (dnf/dnf5). Munzira inovandudzwa neatomu, /usr partition inoiswa pakuverenga chete, updates dzinoshandiswa system-wide, Btrfs snapshots dzinoshandiswa kudzosera kumashure failed updates, uye base system versions dzinobatwa seartifacts dzinogona kutarisirwa uye kuiswa kuma nodes kuburikidza neOSTree repository. Nzira yeRPM yekare inoshandisa package management kuburikidza nednf nednf5, inotsigira manual uye automatic updates, uye inopa console installer, "niceos-installer."

Kugoverwa uku kunopa hwaro hushoma uye hunofungidzirwa hwemakontena, umo musina nzvimbo ine mifananidzo, masevhisi ekutanga chete ndiwo anotangwa (systemd, network utilities, SSH, firewall pa nftables/firewalld, basic monitoring utilities), uye mapurogiramu ese ekushandisa anokurudzirwa kuiswa mumakontena (Docker/Podman/Kubernetes) kana semasevhisi akasiyana pamusoro pehwaro.

Mifananidzo yepamutemo yemidziyo inowanikwa paDocker Hub. Mifananidzo iyi yakavakirwa paNiceOS Base diki, inoitwa nemushandisi asina ropafadzo, inosanganisira built-in SBOM (CycloneDX/SPDX) uye vulnerability reporting (Trivy, Grype), uye ine mishumo yakavakirwa mukati memidziyo kuti iongororwe pasina internet zvakananga mukati memidziyo.

Kune rutsigiro rwekunyorwa kwemashoko emuno (mudungwe wakaunganidzwa uye wakaedzwa kune avo vanoda zvinodiwa neGOST uye kuongororwa):

GnuPG ine GOST (GOST R 34.10-2012 uye GOST R 34.11-2012), kusanganisira siginecha, encryption uye certification;
OpenSSL ine GOST - TLS uye CLI zvishandiso zvine GOST cryptography;
libksba/nettle — rutsigiro rweGOST muCMS neX.509;
OpenVPN neGOST - sevha yakagadzirwa yakagadzirwa ine makodhi eGOST, pane script inoshandisa VPN (PKI, firewall, kutarisa, kubatanidzwa naPrometheus) mumaminitsi mashoma;
Zvishandiso zvekudzora kuvimbika kweGOST hashes (gost12sum, ma profiles ari mu openssl dgst, nezvimwewo).

Mikana yekuvandudza kuchengetedzeka:

SELinux inogoneswa nedefault;
Mireza yekudzivirira kuvaka inoshandiswa (PIE, RELRO, SSP, FORTIFY_SOURCE, nezvimwewo);
Mamiriro ekudzora kuvimbika akaitwa (Secure Boot, IMA, AIDE neGOST algorithms);
Pakeji yega yega yeRPM yakasainwa, pane modhi yeZero-Trust PKI: nekutadza, chero chinhu chisina kusimbiswa hachina kuvimbwa nacho;
Mishumo yeSBOM uye yekusagadzikana inogadzirwa pamapakeji nemifananidzo.

Zvinhu zvema "virtual" uye "cloud systems":

Rutsigiro rwema-virtual machines anonzwisisa (AMD SEV-SNP, Intel TDX) rwaziviswa. Zvishandiso zvekusimbisa ma-virtual machines mumamiriro ezvinhu akadaro zviripo.
Mufananidzo wepamutemo weNICE.OS 5.2 unowanikwa paYandex Cloud Marketplace semuchina chaiwo, uyo watove uine Docker, glibc, uye Python 3.12; kugoverwa kwacho kwakanyorwa sekunge kuri muRussian software registry;
PaCloud.ru Marketplace, kugoverwa kwacho kunotsanangurwa se "OS yekuRussia minimalist yemakontena. Mufananidzo weVMs, Docker, uye Kubernetes."
Imwe shanduro yeNiceOS V yakagadzirirwa ma hypervisors (Proxmox, VMware ESXi, KVM/QEMU, AWS/Yandex Cloud/Google Cloud, nezvimwewo), ine masevhisi mashoma uye kusimbiswa kwekuisa otomatiki kuburikidza neKickstart/JSON.

Pakati peshanduro dzakashandiswa: