IMicrosoft ikhuphe uhlaziyo lwenyanga nolwenyanga lokusasazwa kwayo yiAzure. Linux 3.0.20260506. Ukusasazwa kuphuhliswa njengeqonga elisisiseko lehlabathi Linux- iindawo ezisetyenziswa kwiziseko zophuhliso zelifu, iinkqubo zomda, kunye neenkonzo ezahlukeneyo zeMicrosoft. Uphuhliso oluyimfihlo lweprojekthi lusasazwa phantsi kwelayisenisi ye-MIT. Ulwakhiwo lweephakheji lwenziwe kwizakhiwo ze-aarch64 kunye ne-x86_64. Ubungakanani bomfanekiso wofakelo yi-770 MB.
Phakathi kotshintsho kwinguqulelo entsha:
- Iipakethe zokutsha kunye nokutsha komhlwa kongezwe kwindawo yokugcina izinto (i-SPECS kunye ne-SPECS-EXTENDED).
- Iphakheji yohlalutyo lwenethiwekhi yeWireshark iphinde yakhiwa kwakhona ngenkxaso yolwimi lweLua.
- Xa usakha iphakheji yekernel yoyilo lwe-arm64, iparameter yeCONFIG_IKCONFIG_PROC iyasebenza, evumela ukukwazi ukufikelela kuqwalaselo lolwakhiwo lwekernel yangoku ngefayile ye-/proc/config.gz.
- Inkxaso ephuculweyo yokufuduka bukhoma kwi-QEMU.
- Ipharamitha ye-extraMacrosFiles yongezwe kwifayile yePackageBuild.yml ukuvumela ukudlulisa iifayile ze-macro ezongezelelweyo ngexesha lokwakhiwa kwephakheji.
- Kuye kwalungiswa iingxaki ezininzi kwiipakeji ezahlukeneyo.
- Iinguqulelo zeKernel zihlaziyiwe Linux 6.6.137.1, clamav 1.5.2, cloud-hypervisor 51.1.56, containerd2 2.1.6, cups 2.4.18, erlang 26.2.5.20, golang 1.26.2-1, libpng 1.6.57, mysql 8.0.46.
Ukusasazwa kwe-Azure Linux Ibonelela ngeseti encinci, eqhelekileyo yeepakeji eziphambili ezisebenza njengesiseko esibanzi sokwakha izakhelo zeekhonteyina, iindawo ezihlala abantu, kunye neenkonzo ezisebenza kwiziseko zelifu kunye nezixhobo ezisemaphethelweni. Izisombululo ezintsonkothileyo nezikhethekileyo zinokwenziwa ngokongeza iipakeji ezongezelelweyo phezu kwe-Azure. Linux, kodwa isiseko sazo zonke ezi nkqubo asitshintshi, nto leyo eyenza kube lula ukugcinwa nokulungiswa kohlaziyo.
I-Azure Linux Isetyenziswa njengesiseko se-WSLg mini-distribution, ebonelela ngezixhobo ze-graphics stack zokusebenzisa usetyenziso lwe-GUI. Linux kwiindawo ezisekelwe kwinkqubo engaphantsi ye-WSL2 (Windows Inkqubo esezantsi ye Linux). Ukusebenza okwandisiweyo kwi-WSLg kwenziwa ngokufaka iipakethe ezongezelelweyo kunye neseva ye-Weston composite, i-XWayland, i-PulseAudio, kunye ne-FreeRDP.
Umphathi wenkqubo ye-systemd usetyenziselwa ukulawula iinkonzo kunye nesiqalo. Abaphathi bephakheji i-RPM kunye ne-DNF babonelelwa ngolawulo lwephakheji. Iseva ye-SSH ayenziwanga isebenze ngokungagqibekanga. Ukufakela ukuhanjiswa, isifakeli sinikezelwe esinokusebenza kuzo zombini iindlela zokubhaliweyo kunye negraphical. I-installer inika amandla okufaka ngesethi epheleleyo okanye esisiseko yeepakethe, inikezela nge-interface yokukhetha isahlulelo sediski, ukukhetha igama lomninimzi kunye nokudala abasebenzisi.
Inkqubo Yokwakha i-Azure Linux Ikuvumela ukuba uvelise zombini iipakeji ze-RPM ezizimeleyo ngokusekelwe kwiifayile ze-SPEC kunye nekhowudi yomthombo, kunye nemifanekiso yenkqubo ye-monolithic eyakhiwe kusetyenziswa isixhobo se-rpm-ostree kwaye ihlaziywe ngeathomu ngaphandle kokuziqhekeza zibe ziipakeji ezizimeleyo. Ngokuhambelana noko, iimodeli ezimbini zokuhambisa uhlaziyo ziyaxhaswa: ukuhlaziya iipakeji ezizimeleyo kunye nokwakha kwakhona kunye nokuhlaziya umfanekiso wenkqubo yonke. Indawo yokugcina equlethe malunga neepakeji ze-RPM ezingama-3000 ezakhiwe kwangaphambili iyafumaneka, enokusetyenziswa ukwakha imifanekiso eyenzelwe wena ngokusekelwe kwifayile yoqwalaselo.
Isiseko seqonga sibandakanya kuphela amacandelo abalulekileyo kwaye ilungiselelwe imemori encinci kunye nokusetyenziswa kwendawo yediski, kunye nesantya esiphezulu sokulayisha. Iprojekthi isebenzisa "ukhuseleko oluphezulu ngokungagqibekanga", olubandakanya ukubandakanywa kweendlela ezongezelelweyo zokwandisa ukhuseleko:
- Iifowuni zesistim yokucoca kusetyenziswa indlela ye-seccomp.
- Uguqulelo oluntsonkothileyo lwezahlulo zedisk.
- Ukuqinisekiswa kweepakethi ngotyikityo lwedijithali.
- Idilesi ye-Randomization yendawo.
- Ukukhuselwa kuhlaselo lwe-symlink, mmap, /dev/mem kunye /dev/kmem.
- Imowudi yokufunda kuphela kunye nokuthintela ukuphunyezwa kwekhowudi kwiindawo zememori eziqulethe amacandelo ane-kernel kunye nedatha yemodyuli.
- Ukhetho lokukhubaza ukulayisha iimodyuli zekernel emva kokuqaliswa kwenkqubo.
- Ukusebenzisa iiptables ukucoca iipakethi zenethiwekhi.
- Yenza iindlela zokhuseleko ngokuchasene nokuphuphuma kwemfumba, ukuphuphuma kwebuffer, kunye nemiba yokufomatha umtya ngexesha lokwakha (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro).
umthombo: opennet.ru
