Ukukhishwa kokusabalalisa kwe-Proxmox Backup Server 1.1

I-Proxmox, eyaziwa ngokuthuthukisa i-Proxmox Virtual Environment kanye nemikhiqizo ye-Proxmox Mail Gateway, yethule ukukhululwa kokusatshalaliswa kwe-Proxmox Backup Server 1.1, okwethulwa njengesixazululo se-turnkey sokwenza ikhophi yasenqolobaneni nokubuyiselwa kwezindawo ezibonakalayo, iziqukathi nokugxilwa kweseva. Isithombe sokufakwa kwe-ISO siyatholakala ukuze silandwe mahhala. Izingxenye eziqondene nokusabalalisa zinikezwe ilayisense ngaphansi kwelayisensi ye-AGPLv3. Ukuze ufake izibuyekezo, kokubili inqolobane ye-Enterprise ekhokhelwayo kanye namakhosombe amabili amahhala ayatholakala, ahluke ngezinga lokuzinzisa isibuyekezo.

Ingxenye yesistimu yokusabalalisa isekelwe kusisekelo sephakheji le-Debian 10.9 (Buster), i-Linux 5.4 kernel ne-OpenZFS 2.0. Isitaki sesofthiwe sokuphatha izipele sibhalwe ku-Rust futhi sisekela izipele ezikhuphukayo (idatha eshintshiwe kuphela idluliselwa kuseva), ukuphindaphinda (uma kukhona okuphindwe kabili, kugcinwa ikhophi eyodwa kuphela), ukucindezela (kusetshenziswa i-ZSTD) nokubethela kwezipele. Uhlelo ludizayinelwe ngokusekelwe esakhiweni seseva yeklayenti - Iseva Eyisipele ye-Proxmox ingasetshenziswa kokubili ekusebenzeni ngezipele zasendaweni nanjengeseva ephakathi nendawo yokusekela idatha evela kubasingathi abahlukahlukene. Amamodi okuthola ngokushesha okukhethayo nokuvumelanisa idatha phakathi kwamaseva anikeziwe.

I-Proxmox Backup Server isekela ukuhlanganiswa neplathifomu ye-Proxmox VE yokusekela imishini ebonakalayo neziqukathi. Ukuphathwa kwamakhophi ayisipele kanye nokutholwa kwedatha kwenziwa ngesixhumi esibonakalayo sewebhu. Kungenzeka ukukhawulela ukufinyelela komsebenzisi kudatha yabo. Yonke i-traffic transmitted esuka kumakhasimende iye kuseva ibethelwa kusetshenziswa i-AES-256 kumodi ye-GCM, futhi amakhophi ayisipele ngokwawo asakazwa kakade abethelwe kusetshenziswa ukubethela kwe-asymmetric kusetshenziswa okhiye basesidlangalaleni (ukubethela kwenziwa ohlangothini lweklayenti futhi ukufaka iseva engozini ngamakhophi ayisipele ngeke kuholela ekuvuzeni kwedatha). Ubuqotho bezipele kulawulwa kusetshenziswa i-SHA-256 hashes.

Ekukhishweni okusha:

  • Ukuvumelanisa nesizindalwazi sephakeji ye-Debian 10.9 β€œBuster” sekuqediwe.
  • Ukuqaliswa kwesistimu yefayela le-ZFS kushintshelwe egatsheni le-OpenZFS 2.0.
  • Ukwesekwa okwengeziwe kwamadrayivu etheyiphu asekela ifomethi ye-LTO (Linear Tape-Open).
  • Ukwesekwa okwengeziwe kokulondoloza nokubuyisela isitoreji kusetshenziswa i-tape pool.
  • Izinqubomgomo eziguquguqukayo ziye zasetshenziswa ukuze kunqunywe isikhathi sokugcinwa kwedatha.
  • Kwengezwe umshayeli omusha wetheyiphu yesikhala somsebenzisi ebhalwe ngesiRust.
  • Ukwesekwa okwengeziwe kokulawula izindlela zokuphakela i-cartridge ezizenzakalelayo kumadrayivu wamateyipu. Ukuze ulawule izilayishi ezizenzakalelayo, insiza ye-pmtx ihlongoziwe, okuyi-analogue yokusetshenziswa kwe-mtx, ebhalwe kabusha ngolimi lwe-Rust.
  • Izigaba zengeziwe ku-inthanethi ukuze kulungiswe izingxenye, imisebenzi, nokwenza imisebenzi ehleliwe.
  • Kwengezwe isicelo sewebhu se-Proxmox LTO Barcode Label Generator ukuze sikhiqize futhi siphrinte amalebula ebhakhodi.
  • Ukusekela ukuqinisekiswa kwezinto ezimbili kusetshenziswa amaphasiwedi esikhathi esisodwa (TOTP), i-WebAuthn kanye nokhiye bokuthola besikhathi esisodwa okhiye bokuthola kungeziwe kusixhumi esibonakalayo sewebhu.

Source: opennet.ru

Engeza amazwana