Microsoft e rehile kabo ea CBL-Mariner ho Azure Linux. Pejana, lebitso la Azure Linux le ne le sebelisetsoa moaho o ikhethileng o kentsoeng Azure Kubernetes Service (AKS), mme sethala se akaretsang sa ho theha liphallelo se ile sa ntlafatsoa tlasa lebitso la CBL-Mariner (Common Base Linux Mariner). Matsatsi a 'maloa a fetileng, Microsoft e ile ea reha sebaka sa polokelo ea CBL-Mariner ho azurelinux, ea fetola mabitso a lits'ebeletso,' me ea nkela sebaka sa ho bua ka CBL-Mariner litokomaneng ka Azure Linux. Ka mor'a moo, ho ile ha thehoa tokollo ea pele ea sethala e nang le lebitso le lecha - Azure Linux 2.0.20240301, e ileng ea lokisa liphoso le bofokoli bo bokelletsoeng lits'ebetsong.
Morero ona o reretsoe ho kopanya litharollo tsa Linux tse sebelisoang ho Microsoft le ho nolofatsa tlhokomelo ea litsamaiso tsa Linux molemong oa merero e fapaneng maemong a morao-rao. Har'a lintho tse ling, kabo e sebelisoa metheong ea maru, lits'ebetso tsa moeli le lits'ebeletso tse fapaneng tsa Microsoft. Lintlafatso tsa morero li ajoa tlasa laesense ea MIT. Liphutheloana li hlahisoa bakeng sa meralo ea aarch64 le x86_64. Setšoantšo sa ISO se bootable se lokiselitsoe (860 MB) bakeng sa meralo ea x86_64.
Kabo ea Azure Linux e fana ka litekanyetso tse nyane tsa liphutheloana tsa mantlha tse sebetsang e le motheo oa bokahohle bakeng sa ho theha lijana, libaka tse amohelang baeti le lits'ebeletso tse sebetsang ka har'a meaho ea maru le lisebelisoa tse haufi. Litharollo tse rarahaneng le tse ikhethang li ka etsoa ka ho kenyelletsa liphutheloana tse eketsehileng holim'a Azure Linux, empa motheo oa litsamaiso tsohle tse joalo o lula o tšoana, o nolofalletsa ho boloka le ho lokisa lintlafatso.
Mohlala, Azure Linux e sebediswa e le motheo wa kabo e nyane ya WSLg, e fanang ka dikarolo tsa pokello ya ditshwantsho bakeng sa ho tsamaisa ditshebediso tsa Linux GUI ditikolohong tse thehilweng ho WSL2 (Windows Subsystem for Linux). Tshebetso e atolositsweng ho WSLg e kenngwa tshebetsong ka ho kenyeletswa ha diphuthelwana tse ding tse nang le dikompone tse kopaneng. seva Weston, XWayland, PulseAudio le FreeRDP.
Sistimi ea kaho ea Azure Linux e u lumella ho hlahisa liphutheloana tsa RPM ka bobeli tse ipapisitseng le lifaele tsa SPEC le khoutu ea mohloli, hammoho le litšoantšo tsa sistimi e monolithic tse hlahisitsoeng ho sebelisoa rpm-ostree toolkit le ho nchafatsoa ka atomo ntle le ho ikarola ka har'a liphutheloana tse arohaneng. Ka hona, mefuta e 'meli ea ho fana ka ntlafatso e tšehetsoa: ka ho nchafatsa liphutheloana tsa motho ka mong le ka ho aha bocha le ho nchafatsa setšoantšo sohle sa sistimi. Ho na le polokelo ea liphutheloana tsa RPM tse ka bang 3000 tse hahiloeng esale pele tseo u ka li sebelisang ho iketsetsa litšoantšo ho latela faele ea tlhophiso.
Sethala sa motheo se kenyelletsa feela likarolo tsa bohlokoa 'me se lokiselitsoe bakeng sa mohopolo o fokolang le tšebeliso ea sebaka sa disk, hammoho le lebelo le phahameng la ho laela. Morero o sebelisa "ts'ireletso e phahameng ka ho sa feleng", e kenyelletsang ho kenyelletsoa ha mekhoa e fapaneng ea ho eketsa ts'ireletso:
- Sistimi ea ho sefa mehala e sebelisa mochini oa seccomp.
- Encryption ea likarolo tsa disk.
- Netefatso ea liphutheloana ka signature ea dijithale.
- Arosa sebaka sa randomization.
- Tšireletso khahlanong le litlhaselo tsa symlink, mmap, /dev/mem le /dev/kmem.
- Mokhoa oa ho bala feela le ho thibela tšebeliso ea khoutu libakeng tsa memori tse nang le likarolo tse nang le kernel le lintlha tsa module.
- Khetho ea ho tima li-module tsa kernel ka mor'a ho qala tsamaiso.
- Ho sebelisa li-iptables ho sefa lipakete tsa marang-rang.
- Lumella mekhoa ea ts'ireletso khahlano le ho tlokoma ha lipampiri, ho tlokoma ha buffer, le mathata a fomete ea likhoele nakong ea kaho (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro).
Tsamaiso ea tsamaiso systemd e sebelisetsoa ho laola litšebeletso le boot. Batsamaisi ba liphutheloana tsa RPM le DNF ba fuoa taolo ea liphutheloana. Seva ea SSH ha e sebetse ka mokhoa oa kamehla. Ho kenya kabo, ho fanoa ka sehlomathi se ka sebetsang ka mekhoa ea mongolo le ea litšoantšo. Sesebelisoa se fana ka khetho ea ho kenya liphutheloana tse felletseng kapa tsa mantlha, 'me se fana ka sebopeho sa ho khetha karolo ea disk, ho khetha lebitso la moamoheli, le ho theha basebelisi.
Ntle le liphetoho tse amanang le CBL-Mariner le Azure Linux, Microsoft e boetse e hlahisitse tokollo e ncha ea sethala sa Azure Sphere 24.03, se hahiloeng holim'a Linux kernel mme se etselitsoe ho theha lisebelisoa tsa Inthanete tsa Lintho tse thehiloeng ho li-microcontroller tse sebetsang hantle ka matla (MCU) tse nang le likaroloana tse kopantsoeng tsa peripheral. E 'ngoe ea likarolo tsa sethala ke "subsystem" ea Pluton, e etselitsoeng ho fana ka hardware bakeng sa encryption, ho boloka linotlolo tsa poraefete, le ho etsa ts'ebetso e rarahaneng ea cryptographic. Pluton e kenyelletsa processor e ikhethileng e ikhethileng, enjine ea cryptographic, jenereithara ea linomoro tse sa sebetseng tsa hardware, le lebenkele la linotlolo le ka thoko.
Source: opennet.ru
