Microsoft ya bayyana kwanan nan sakewa na farko barga update na sabon reshe na rarraba Linux ɗin ku "CBL Mariner 2.0" (Common Base Linux Mariner), wanda ake haɓaka shi azaman tushen dandamali na duniya don mahallin Linux da ake amfani da su a cikin kayan aikin girgije, tsarin gefen, da sabis na Microsoft daban-daban.
Aikin yana nufin haɗa hanyoyin magance Linux ɗin da ake amfani da su a Microsoft da kuma sauƙaƙe kiyaye tsarin Linux don dalilai daban-daban har zuwa yau. Ana rarraba ci gaban aikin a ƙarƙashin lasisin MIT.
Game da CBL-Mariner
Ga wadanda basu san CBL-Mariner ba, ya kamata ku san cewa wannan rarraba ana siffanta shi da bayarwa ƙaramin daidaitaccen tsari na fakiti na asali waɗanda ke aiki azaman ginshiƙi na duniya don gina kwantena, mahalli, da sabis da ke gudana akan kayan aikin girgije da na'urori masu gefe.
Za'a iya ƙirƙirar ƙarin rikitarwa da ƙwarewa na musamman ta hanyar ƙara ƙarin fakiti zuwa CBL-Mariner, amma tushen duk waɗannan tsarin ya kasance iri ɗaya, yana sauƙaƙa don kulawa da shirya don haɓakawa. Misali, Ana amfani da CBL-Mariner azaman tushe na ƙaramin rarraba WSLg, wanda ke ba da kayan haɗin zane-zane don ƙaddamar da aikace-aikacen Linux GUI a cikin mahalli dangane da tsarin WSL2 (Windows Subsystem for Linux). Ayyukan da aka haɓaka a cikin WSLg ana yin su ta haɗa da ƙarin fakiti tare da Weston Composite Server, XWayland, PulseAudio, da FreeRDP.
Tsarin ginin CBL-Mariner yana ba ku damar samar da fakitin RPM na tsaye bisa tushen da fayilolin SPEC, da kuma hotunan tsarin monolithic da aka samar tare da kayan aiki na rpm-ostree kuma an sabunta su ta atomatik ba tare da rarraba cikin fakiti daban ba. Sakamakon haka, ana samun goyan bayan samfuran isar da sabuntawa guda biyu: ta sabunta fakiti guda ɗaya da ta sake ginawa da sabunta hoton tsarin gaba ɗaya. Akwai ma'aji tare da kusan RPM 3000 da aka riga aka gina waɗanda za ku iya amfani da su don gina naku hotunan dangane da fayil ɗin daidaitawa.
Rarrabawa ya ƙunshi abubuwan da suka fi dacewa kawai kuma an inganta shi don ƙarancin ƙwaƙwalwar ajiya da amfani da sarari diski, haka nan don saurin saukewa. Har ila yau, rarrabawar ya shahara don haɗa ƙarin hanyoyin tsaro da yawa.
Aikin yana amfani da hanyar "mafi girman tsaro ta tsohuwa". Yana ba da ikon tace kiran tsarin ta amfani da tsarin seccomp, ɓoye ɓangarori na diski, da kuma tabbatar da fakiti ta amfani da sa hannun dijital.
Hanyoyin bazuwar adireshi da ke goyan bayan kernel na Linux ana kunna su, da kuma hanyoyin kariya daga hare-hare masu alaƙa da alaƙa na alama, mmap, /dev/mem da /dev/kmem. Don wuraren ƙwaƙwalwar ajiya waɗanda ke ƙunshe da ɓangarori tare da bayanan kernel da module, an saita yanayin don karantawa-kawai kuma an haramta aiwatar da lambar.
Akwai zaɓin zaɓi shine ikon musaki loda kayan kwaya bayan tsarin farawa. Ana amfani da kayan aikin iptables don tace fakitin cibiyar sadarwa. Ta hanyar tsohuwa, matakin ginawa yana ba da damar hanyoyin kariya daga magudanar ruwa, buffer overflow, da batutuwan tsara kirtani (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro).
Mai kula da tsarin ana amfani da systemd don sarrafa ayyuka da farawa. Ana ba da masu sarrafa fakitin RPM da DNF don sarrafa fakitin.
Menene sabo a cikin CBL-Mariner 2.0
Sabuwar sigar ya yi fice ga babban haɓaka nau'ikan software, Wannan ya haɗa da sabbin sigogin Linux kernel 5.15, systemd 250, glibc 2.35, gcc 11.2, clang 12, python 3.9, ruby 3.1.2, rpm 4.17, qemu 6.1, perl 5.34, o2022.1stree
Baya ga wannan, an lura da cewa ma'ajiyar tushe ta ƙunshi sassa don ƙirƙirar ƙirar hoto, irin su Wayland 1.20, Mesa 21.0, GTK 3.24, da X.Org Server 1.20.10, waɗanda a baya aka tura su a cikin ma'ajiyar coreui daban.
Hakanan an lura cewa kernel yana ginawa tare da facin PREEMPT_RT an ƙara don amfani akan tsarin lokaci-lokaci.
A ƙarshe ga masu sha'awar, ya kamata ku sani cewa an samar da ginin fakitin don gine-ginen arch64 da x86_64.
Sabar Ba a kunna SSH ta tsohuwa ba. Don shigar da rarraba, an samar da mai sakawa wanda zai iya aiki a cikin duka rubutu da kuma yanayin hoto.
Mai sakawa yana ba da damar shigarwa tare da cikakken ko ainihin saitin fakiti, yana ba da hanyar sadarwa don zaɓar ɓangaren diski, zaɓar sunan mai masauki, da ƙirƙirar masu amfani.