Microsoft publikoi p\u00ebrdit\u00ebsimin e par\u00eb stabil t\u00eb deg\u00ebs s\u00eb re t\u00eb shp\u00ebrndarjes CBL-Mariner 2.0 (Common Base Linux Mariner), e cila po zhvillohet si nj\u00eb platform\u00eb baz\u00eb universale p\u00ebr mjediset Linux t\u00eb p\u00ebrdorura n\u00eb infrastruktur\u00ebn cloud, sistemet edge dhe sh\u00ebrbime t\u00eb ndryshme t\u00eb Microsoft. Projekti synon t\u00eb unifikoj\u00eb zgjidhjet Linux t\u00eb p\u00ebrdorura n\u00eb Microsoft dhe t\u00eb thjeshtoj\u00eb mir\u00ebmbajtjen e sistemeve Linux p\u00ebr p\u00ebrdorime t\u00eb ndryshme duke i mbajtur t\u00eb p\u00ebrdit\u00ebsuara. Zhvillimet e projektit shp\u00ebrndahen sipas licenc\u00ebs MIT. Build-et e paketave krijohen p\u00ebr arkitekturat aarch64 dhe x86_64. <\/p>\n
Versioni i ri dallohet p\u00ebr p\u00ebrdit\u00ebsimin e ndjesh\u00ebm t\u00eb versioneve t\u00eb softuerit. Nd\u00ebr t\u00eb tjera, jan\u00eb p\u00ebrdit\u00ebsuar versionet e kernelit Linux 5.15 (n\u00eb deg\u00ebn 1.0 p\u00ebrdorej kerneli 5.4), systemd 250, glibc 2.35, GCC 11.2, clang 12, Python 3.9, ruby 3.1.2, rpm 4.17, qemu 6.1, perl 5.34, ostree 2022.1. N\u00eb p\u00ebrb\u00ebrje t\u00eb depozitos baz\u00eb jan\u00eb p\u00ebrfshir\u00eb komponent\u00eb p\u00ebr nd\u00ebrtimin e nd\u00ebrfaqes grafike, si Wayland 1.20, Mesa 21.0, GTK 3.24 dhe X.Org Server 1.20.10, t\u00eb cil\u00ebt m\u00eb par\u00eb ofroheshin n\u00eb depon e ve\u00e7ant\u00eb coreui. Jan\u00eb shtuar build-e t\u00eb kernelit me patch-et PREEMPT_RT p\u00ebr p\u00ebrdorim n\u00eb sisteme q\u00eb punojn\u00eb n\u00eb koh\u00eb reale. <\/p>\n
Shp\u00ebrndarja CBL-Mariner ofron nj\u00eb grup t\u00eb vog\u00ebl standard t\u00eb paketave baz\u00eb, q\u00eb sh\u00ebrben si themel universal p\u00ebr krijimin e p\u00ebrmbajtjes s\u00eb konteiner\u00ebve, mjediseve host dhe sh\u00ebrbimeve q\u00eb ekzekutohen n\u00eb infrastrukturat cloud dhe n\u00eb pajisjet edge. Zgjidhje m\u00eb komplekse dhe t\u00eb specializuara mund t\u00eb krijohen duke shtuar paketa shtes\u00eb mbi CBL-Mariner, por baza p\u00ebr t\u00eb gjitha k\u00ebto sisteme mbetet e pandryshuar, gj\u00eb q\u00eb thjeshton mir\u00ebmbajtjen dhe p\u00ebrgatitjen e p\u00ebrdit\u00ebsimeve. P\u00ebr shembull, CBL-Mariner p\u00ebrdoret si baz\u00eb p\u00ebr mini-shp\u00ebrndarjen WSLg, n\u00eb t\u00eb cil\u00ebn ofrohen komponent\u00ebt e stack-ut grafik p\u00ebr organizimin e ekzekutimit t\u00eb aplikacioneve Linux me GUI n\u00eb mjedise t\u00eb bazuara n\u00eb n\u00ebnsistemin WSL2 (Windows Subsystem for Linux). Funksionaliteti i zgjeruar n\u00eb WSLg realizohet p\u00ebrmes p\u00ebrfshirjes s\u00eb paketave shtes\u00eb me kompozit server<\/a> Weston, XWayland, PulseAudio dhe FreeRDP. <\/p>\n Sistemi i nd\u00ebrtimit CBL-Mariner mund\u00ebson gjenerimin si t\u00eb paketave t\u00eb ve\u00e7anta RPM mbi baz\u00ebn e skedar\u00ebve SPEC dhe kodeve burimore, ashtu edhe t\u00eb imazheve monolitike t\u00eb sistemit, t\u00eb krijuara me mjetet rpm-ostree dhe t\u00eb p\u00ebrdit\u00ebsuara n\u00eb m\u00ebnyr\u00eb atomike pa u ndar\u00eb n\u00eb paketa t\u00eb ve\u00e7anta. Si rrjedhoj\u00eb, mb\u00ebshteten dy modele t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrdit\u00ebsimeve: p\u00ebrmes p\u00ebrdit\u00ebsimit t\u00eb paketave individuale dhe p\u00ebrmes rind\u00ebrtimit e p\u00ebrdit\u00ebsimit t\u00eb t\u00eb gjith\u00eb imazhit t\u00eb sistemit. Ofrohet nj\u00eb depo q\u00eb p\u00ebrfshin rreth 3000 paketa RPM t\u00eb nd\u00ebrtuara tashm\u00eb, e cila mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb krijuar imazhet tuaja mbi baz\u00ebn e nj\u00eb skedari konfigurimi. <\/p>\n Distribucioni p\u00ebrfshin vet\u00ebm komponentet m\u00eb t\u00eb nevojshme dhe \u00ebsht\u00eb optimizuar p\u00ebr konsum minimal t\u00eb memories dhe hap\u00ebsir\u00ebs n\u00eb disk, si dhe p\u00ebr shpejt\u00ebsi t\u00eb lart\u00eb ngarkimi. Distribucioni gjithashtu shquhet p\u00ebr p\u00ebrfshirjen e mekanizmave t\u00eb ndrysh\u00ebm shtes\u00eb p\u00ebr t\u00eb ritur mbrojtjen. N\u00eb projekt aplikohet qasja \"siguria maksimale si parazgjedhje\". Ofron mund\u00ebsin\u00eb e filtrimit t\u00eb thirrjeve sistemike p\u00ebrmes mekanizmit seccomp, enkriptimin e ndarjeve t\u00eb diskut, verifikimin e paketave me n\u00ebnshkrim digjital. <\/p>\n Jan\u00eb aktivizuar m\u00ebnyrat e randomizimit t\u00eb hap\u00ebsir\u00ebs s\u00eb adresave t\u00eb mb\u00ebshtetura n\u00eb kernelin Linux, si edhe mekanizmat mbrojt\u00ebs kund\u00ebr sulmeve q\u00eb lidhen me lidhjet simbolike, mmap, \/dev\/mem dhe \/dev\/kmem. P\u00ebr zonat e memories ku vendosen segmentet me t\u00eb dh\u00ebnat e kernelit dhe t\u00eb moduleve, \u00ebsht\u00eb vendosur m\u00ebnyra vet\u00ebm p\u00ebr lexim dhe \u00ebsht\u00eb ndaluar ekzekutimi i kodit. Opsionalisht ofrohet mund\u00ebsia p\u00ebr t\u00eb ndaluar ngarkimin e moduleve t\u00eb kernelit pas inicializimit t\u00eb sistemit. P\u00ebr filtrimin e paketave t\u00eb rrjetit p\u00ebrdoret instrumentari iptables. N\u00eb faz\u00ebn e nd\u00ebrtimit aktivizohen si parazgjedhje m\u00ebnyrat e mbrojtjes kund\u00ebr tejmbushjes s\u00eb stack-ut, tejmbushjes s\u00eb buffer-it dhe problemeve me formatimin e vargjeve (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). <\/p>\n