Microsoft e phatlalalitse tokollo ea pele e tsitsitseng ea kabo ea Linux CBL-Mariner

Microsoft e phatlalalitse tokollo ea kabo ea CBL-Mariner 1.0 (Common Base Linux Mariner), e tšoailoeng e le tokollo ea pele e tsitsitseng ea morero. Kabo ea CBL-Mariner e ntse e ntlafatsoa e le sethala sa motheo sa bokahohle bakeng sa tikoloho ea Linux e sebelisoang meahong ea maru, lits'ebetso tsa moeli le lits'ebeletso tse fapaneng tsa Microsoft. Morero ona o reretsoe ho kopanya litharollo tsa Microsoft Linux le ho nolofatsa tlhokomelo ea litsamaiso tsa Linux molemong oa merero e fapaneng ho fihlela joale. Lintlafatso tsa morero li ajoa tlasa laesense ea MIT.

Kabo e fana ka sete e nyane e tloaelehileng ea liphutheloana tsa mantlha tse sebetsang e le motheo oa bokahohle bakeng sa ho theha likahare tsa lijana, libaka tse amohelang baeti le lits'ebeletso tse sebetsang litsing tsa marang-rang tsa maru le lisebelisoa tse haufi. Litharollo tse rarahaneng haholoanyane le tse khethehileng li ka bōptjoa ka ho eketsa liphutheloana tse eketsehileng holim'a CBL-Mariner, empa motheo oa mekhoa eohle e joalo e ntse e tšoana, ho etsa hore tlhokomelo le lisebelisoa li be bonolo.

Mohlala, CBL-Mariner e sebelisoa e le motheo oa kabo e nyane ea WSLg, e fanang ka likarolo tsa "graph" tsa "graph" bakeng sa ho tsamaisa lits'ebetso tsa Linux GUI maemong a ipapisitseng le sistimi e nyane ea WSL2 (Windows Subsystem for Linux). Moko oa kabo ena ha o fetohe, 'me ts'ebetso e atolositsoeng e bonoa ka ho kenyelletsa liphutheloana tse eketsehileng le seva sa Weston, XWayland, PulseAudio le FreeRDP.

Sistimi ea kaho ea CBL-Mariner e u lumella ho hlahisa liphutheloana tsa RPM ka bobeli ho latela lifaele tsa SPEC le khoutu ea mohloli, hammoho le litšoantšo tsa sistimi e monolithic tse hlahisoang ho sebelisoa sesebelisoa sa rpm-ostree le ho nchafatsoa ka atomo ntle le ho arola liphutheloana tse fapaneng. Ka hona, mefuta e 'meli ea ho fana ka ntlafatso e tšehetsoa: ka ho nchafatsa liphutheloana tsa motho ka mong le ka ho aha bocha le ho nchafatsa setšoantšo sohle sa sistimi. Kabo e kenyelletsa likarolo tse hlokahalang feela mme e ntlafalitsoe bakeng sa mohopolo o fokolang le tšebeliso ea sebaka sa disk, hammoho le lebelo le phahameng la ho jarolla. Kabo e boetse e hlokomeleha bakeng sa ho kenyelletsa mekhoa e fapaneng ea tlatsetso ho matlafatsa ts'ireletso.

Morero o nka "ts'ireletso e phahameng ka ho sa feleng". Hoa khonahala ho sefa mehala ea sistimi u sebelisa mochini oa seccomp, ho koala likarolo tsa disk, le ho netefatsa liphutheloana u sebelisa signature ea dijithale. Mokhahlelong oa kaho, ts'ireletso khahlanong le ho putlama ha stack, buffer overflows, le mathata a fomete ea likhoele li nolofalloa ka ho sa feleng (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro). Mefuta ea aterese ea sebaka sa marang-rang e tšehetsoeng ho kernel ea Linux ea sebetsa, hammoho le mekhoa ea tšireletso khahlanong le litlhaselo tsa symlink, mmap, /dev/mem le /dev/kmem. Libaka tsa memori tse nang le likarolo tse nang le kernel le data ea module li behiloe ho mokhoa oa ho bala feela mme ts'ebetso ea khoutu e thibetsoe. Ho na le khetho ea ho thibela ho kenya li-module tsa kernel ka mor'a ho qala tsamaiso. Iptables toolkit e sebelisoa ho sefa lipakete tsa marang-rang.

Litšoantšo tsa ISO tse entsoeng esale pele ha li fanoe. Ho nahanoa hore mosebelisi a ka etsa setšoantšo ka ho tlatsoa ho hlokahalang (litaelo tsa kopano li fanoa bakeng sa Ubuntu 18.04). Ho na le polokelo ea liphutheloana tsa RPM tse hahiloeng esale pele, tseo u ka li sebelisang ho iketsetsa litšoantšo ho latela faele ea tlhophiso. Sebaka sa polokelo se fana ka liphutheloana tse ka bang 3300. Mohlala, ho aha setšoantšo se felletseng sa iso, matha feela: git clone https://github.com/microsoft/CBL-Mariner.git cd CBL-Mariner/toolkit sudo etsa iso REBUILD_TOOLS=y REBUILD_PACKAGES=n CONFIG_FILE=./imageconfigs /full .json

Tsamaiso ea tsamaiso systemd e sebelisetsoa ho laola litšebeletso le boot. Bakeng sa tsamaiso ea liphutheloana, batsamaisi ba liphutheloana RPM le DNF (tdnf variant from vmWare) ba fanoa. Seva ea SSH ha e bulele ka khutso. Ho kenya kabo, ho fanoa ka sehlomathi se ka sebetsang ka mekhoa ea mongolo le ea litšoantšo. Sesebelisoa se fana ka khetho ea ho kenya liphutheloana tse felletseng kapa tsa mantlha, 'me se fana ka sebopeho sa ho khetha karolo ea disk, ho khetha lebitso la moamoheli, le ho theha basebelisi.

Microsoft e phatlalalitse tokollo ea pele e tsitsitseng ea kabo ea Linux CBL-Mariner


Source: opennet.ru

Eketsa ka tlhaloso