Microsoft e phatlalalitse kabo ea Linux CBL-Mariner 2.0

Microsoft e phatlalalitse ntjhafatso ea pele e tsitsitseng ea lekala le lecha la kabo ea CBL-Mariner 2.0 (Common Base Linux Mariner), e ntseng e ntlafatsoa e le sethala sa motheo sa bokahohle bakeng sa tikoloho ea Linux e sebelisoang meahong ea maru, lits'ebetso tsa moeli le lits'ebeletso tse fapaneng tsa Microsoft. Morero ona o reretsoe ho kopanya litharollo tsa Microsoft Linux le ho nolofatsa tlhokomelo ea litsamaiso tsa Linux molemong oa merero e fapaneng ho fihlela joale. Lintlafatso tsa morero li ajoa tlasa laesense ea MIT. Mehaho ea liphutheloana e etselitsoe meralo ea aarch64 le x86_64.

Tokollo e ncha e bohlokoa bakeng sa ntlafatso ea bohlokoa ea liphetolelo tsa lenaneo. Ho kenyelletsa le liphetolelo tse ntlafalitsoeng tsa Linux kernel 5.15 (lekaleng la 1.0 ho sebelisitsoe kernel ea 5.4), systemd 250, glibc 2.35, GCC 11.2, clang 12, Python 3.9, ruby ​​​​3.1.2, rpm 4.17. , ostree 6.1. Sebaka sa polokelo ea mantlha se kenyelletsa likarolo tsa GUI tse kang Wayland 5.34, Mesa 2022.1, GTK 1.20 le X.Org Server 21.0, tseo pele li neng li romelloa sebakeng se arohaneng sa coreui. Kernel e ekelitsoeng e hahiloe ka li-patches tsa PREEMPT_RT bakeng sa tšebeliso ea lits'ebetso tsa nako ea nnete.

Kabo ea CBL-Mariner e fana ka sete e nyane e tloaelehileng ea liphutheloana tsa mantlha tse sebetsang e le motheo oa bokahohle bakeng sa ho theha likahare tsa lijana, libaka tse amohelang baeti le lits'ebeletso tse sebetsang lits'ebetsong tsa maru le lisebelisoa tse haufi. Litharollo tse rarahaneng haholoanyane le tse khethehileng li ka bōptjoa ka ho eketsa liphutheloana tse eketsehileng holim'a CBL-Mariner, empa motheo oa mekhoa eohle e joalo e ntse e tšoana, ho etsa hore tlhokomelo le lisebelisoa li be bonolo. Mohlala, CBL-Mariner e sebelisoa e le motheo oa kabo e nyane ea WSLg, e fanang ka likarolo tsa "graph" tsa "graph" bakeng sa ho tsamaisa lits'ebetso tsa Linux GUI maemong a ipapisitseng le sistimi e nyane ea WSL2 (Windows Subsystem for Linux). Ts'ebetso e atolositsoeng ho WSLg e bonoa ka ho kenyelletsa liphutheloana tse eketsehileng le Weston Composite Server, XWayland, PulseAudio le FreeRDP.

Sistimi ea kaho ea CBL-Mariner e u lumella ho hlahisa liphutheloana tsa RPM ka bobeli ho latela lifaele tsa SPEC le khoutu ea mohloli, hammoho le litšoantšo tsa sistimi e monolithic tse hlahisitsoeng ho sebelisoa sesebelisoa sa rpm-ostree le ho nchafatsoa ka atomo ntle le ho arola liphutheloana tse arohaneng. Ka hona, mefuta e 'meli ea ho fana ka ntlafatso e tšehetsoa: ka ho nchafatsa liphutheloana tsa motho ka mong le ka ho aha bocha le ho nchafatsa setšoantšo sohle sa sistimi. Ho na le polokelo ea liphutheloana tsa RPM tse ka bang 3000 tse hahiloeng esale pele tseo u ka li sebelisang ho iketsetsa litšoantšo ho latela faele ea tlhophiso.

Kabo e kenyelletsa likarolo tse hlokahalang feela mme e ntlafalitsoe bakeng sa mohopolo o fokolang le tšebeliso ea sebaka sa disk, hammoho le lebelo le phahameng la ho jarolla. Kabo e boetse e hlokomeleha bakeng sa ho kenyelletsa mekhoa e fapaneng ea tlatsetso ho matlafatsa ts'ireletso. Morero o nka "ts'ireletso e phahameng ka ho sa feleng". Hoa khonahala ho sefa mehala ea sistimi u sebelisa mochini oa seccomp, ho koala likarolo tsa disk, le ho netefatsa liphutheloana u sebelisa signature ea dijithale.

Mefuta ea aterese ea sebaka sa marang-rang e tšehelitsoeng ho kernel ea Linux ea sebetsa, hammoho le mekhoa ea ts'ireletso khahlanong le litlhaselo tsa symlink, mmap, /dev/mem le /dev/kmem. Libaka tsa memori tse nang le likarolo tse nang le kernel le data ea module li behiloe ho mokhoa oa ho bala feela mme ts'ebetso ea khoutu e thibetsoe. Khetho ea boikhethelo ke ho tima ho kenya li-module tsa kernel kamora ho qala sistimi. Iptables toolkit e sebelisoa ho sefa lipakete tsa marang-rang. Mokhahlelong oa kaho, tšireletso khahlanong le ho putlama ha stack, buffer overflows, le mathata a fomete ea likhoele li nolofalloa ka ho sa feleng (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro).

Tsamaiso ea tsamaiso systemd e sebelisetsoa ho laola litšebeletso le boot. Batsamaisi ba liphutheloana tsa RPM le DNF ba fuoa taolo ea liphutheloana. Seva ea SSH ha e sebetse ka mokhoa oa kamehla. Ho kenya kabo, ho fanoa ka sehlomathi se ka sebetsang ka mekhoa ea mongolo le ea litšoantšo. Sesebelisoa se fana ka khetho ea ho kenya liphutheloana tse felletseng kapa tsa mantlha, 'me se fana ka sebopeho sa ho khetha karolo ea disk, ho khetha lebitso la moamoheli, le ho theha basebelisi.

Source: opennet.ru

Eketsa ka tlhaloso