I-CBL-Mariner manje isiqanjwe kabusha ngokuthi i-Azure Linux kumathuluzi nasekulungiseleleni

azure linux

I-Azure Linux ukusatshalaliswa kwe-Linux kwangaphakathi kwengqalasizinda yamafu ye-Microsoft kanye nemikhiqizo enqenqemeni namasevisi.

Ngemva kweminyaka engaphezu kwemi-3, i-CBL-Mariner, ukusatshalaliswa kwe-Linux iMicrosoft ebilokhu isebenza kukho, kushintshe kakhulu: iMicrosoft inqume ukuqamba kabusha ukusatshalaliswa kwayo kwe-CBL-Mariner kube yi-Azure Linux.

Kuhle ukukhumbula ukuthi ngaphambilini, igama elithi Azure Linux lalihlotshaniswa nokwakhiwa okukhethekile kwe-Azure Kubernetes Service (AKS), kuyilapho ipulatifomu evamile yokudala ukusatshalaliswa yayaziwa ngokuthi i-CBL-Mariner (Common Base Linux Mariner).

I-Microsoft isanda kuqamba kabusha indawo yokugcina i-CBL-Mariner yaba yi-Azure Linux, yashintsha amagama ezinsiza, futhi yabuyekeza amadokhumenti e-Azure Linux ukuze abonise lezi zinguquko. Ngenxa yalokho, inguqulo yokuqala yesikhulumi ngaphansi kwegama elisha, i-Azure Linux 2.0.20240301, yakhululwa, okuhlanganisa ukulungiswa kwamaphutha kanye nobuthakathaka obuqongelelwe ezinguqulweni zangaphambilini.

Umgomo oyinhloko walolu shintsho ukuhlanganisa izixazululo ze-Microsoft Linux nokwenza lula ukugcinwa kwezinhlelo ze-Linux ezibuyekeziwe ngezinjongo ezahlukene. I-Azure Linux isetshenziswa kwingqalasizinda yamafu, izinhlelo ze-edge, kanye nezinsizakalo ezahlukene ze-Microsoft, futhi ukuthuthukiswa kwephrojekthi kusatshalaliswa ngaphansi kwelayisensi ye-MIT.

I-Azure Linux isetshenziswa njengesisekelo se-WSLg mini-distribution , ehlinzeka ngezingxenye ze-graphics stack zokusebenzisa izinhlelo zokusebenza ze-Linux GUI ezindaweni ezisekelwe ku-WSL2 subsystem (Windows Subsystem ye-Linux). I-WSLg yandisa ukusebenza kwayo ngokufaka amaphakheji engeziwe njenge-Weston Composite Server, i-XWayland, i-PulseAudio, kanye ne-FreeRDP.

Uhlelo lokwakha lwe-Azure Linux luvumela ukukhiqizwa kwamaphakheji e-RPM ngamanye ngokusekelwe kumafayela e-SPEC kanye nekhodi yomthombo, kanye nezithombe zesistimu ye-monolithic ezenziwe nge-toolkit ye-rpm-ostree, ezivuselelwa nge-athomu ngaphandle kokuhlukaniswa zibe amaphakheji ahlukene. Lokhu kuvumela amamodeli amabili okulethwa kokuvuselelwa: ukubuyekeza amaphakheji ngamanye noma ukwakha kabusha nokubuyekeza isithombe sonke sesistimu. Indawo yokugcina amaphakheji e-RPM alungiselelwe kusengaphambili angaba ngu-3000 iyatholakala ukuze kudalwe izithombe ezenziwe ngokwezifiso ngokusekelwe kumafayela okucushwa.

Ipulatifomu yesisekelo se-Azure Linux iklanyelwe ukunikeza ukusetshenziswa okuncane kwezinsiza kanye nesivinini esikhulu sokulayisha. Isebenzisa indlela "yokuphepha okuphezulu ngokuzenzakalelayo" ngokusebenzisa izindlela eziningana zokuphepha ezengeziwe:

  • Ukuhlunga ikholi yesistimu: Isebenzisa indlela ye-seccomp ukuhlunga izingcingo zesistimu.
  • Ukubethela kwezingxenye zediski: Izingxenye zediski zibethelwe ukuze kuvikelwe idatha.
  • Ukuqinisekiswa kwephakheji: Amaphakheji aqinisekiswa ngesiginesha yedijithali ukuze kuqinisekiswe ubuqiniso nobuqotho.
  • Bhekana nokungahleliwe kwesikhala: Ukungahleliwe kwesikhala sekheli kusetshenziswa ukwenza ukuhlasela kube nzima kakhulu.
  • Ukuvikelwa ekuhlaselweni okuthile: Ivikela ekuhlaselweni kwe-symlink, mmap, /dev/mem, kanye ne-/dev/kmem.
  • Imodi yokufunda kuphela kanye nokwenqatshelwa kokusayinda: Imodi yokufunda kuphela iyasungulwa futhi ukusetshenziswa kwekhodi ezindaweni zememori ezibalulekile kuvinjelwe.
  • Ikhubaza ukulayisha kwemojuli ye-kernel: Ungakhubaza ukulayisha amamojula e-kernel ngemva kokuqaliswa kwesistimu.
  • Ukuhlunga iphakethe lenethiwekhi: Ama-Iptables asetshenziselwa ukuhlunga amaphakethe enethiwekhi nokuthuthukisa ukuphepha kwenethiwekhi.
  • Ukuvikelwa ekuchichimeni nasezinkingeni zokufometha kweyunithi yezinhlamvu: Izindlela zokuvikela ngokumelene nokuchichima kwesitaki, ukuchichima kwebhafa, nezinkinga zokufometha kweyunithi yezinhlamvu zinikwe amandla ngesikhathi sokuhlanganiswa.

Uhlelo lusebenzisa i-systemd ukuphatha amasevisi kanye nokuqalisa , futhi lunikeza abaphathi bephakheji ye-RPM kanye ne-DNF yokuphathwa kwephakheji. Iseva ye-SSH ayivunyelwe ngokuzenzakalelayo. Isifaki sinikeza izinketho kokubili kumodi yombhalo kanye neyokuthwebula, okuhlanganisa ukukhetha isethi yephakheji ephelele noma eyisisekelo, ukumisa izingxenye zediski, ukusetha igama lomethuleli, nokudala abasebenzisi.

Ukwengeza, iMicrosoft yethule i-Azure Sphere 24.03, inkundla eyenzelwe amadivayisi we-IoT ngokusekelwe kuma-microcontrollers awonga amandla. Ihlanganisa i-subsystem ye-Pluton, ehlinzeka nge-hardware yokubethela, isitoreji sokhiye wangasese, kanye nokusebenza okuyinkimbinkimbi kwe-cryptographic, okuhlanganisa iphrosesa ezinikele, injini ye-cryptography, i-hardware ye-random generator, kanye nesitoreji esingukhiye ongasodwa.

Okokugcina, uma unesithakazelo sokufunda okwengeziwe , ungathola imininingwane kusixhumanisi esilandelayo. Kuhle ukusho ukuthi izithombe ze-ISO eziqalwa kabusha ziyatholakala ku-x86_64 kanye ne-aarch64 architectures, kanye nesethi ejwayelekile yamaphakheji ayinhloko asebenza njengesisekelo esijwayelekile sokudala izitsha, izindawo zokusingatha, kanye nezinsizakalo zamafu.


Engeza njengomthombo okhethwayo ku-Google