Microsoft yakazarurwa ichangoburitswa yekutanga yakagadzikana update ye iro bazi idzva rekugovera kwako Linux "CBL-Mariner 2.0" (Common Base Linux Mariner), iyo iri kuvandudzwa seyepasirose base chikuva cheLinux nharaunda dzinoshandiswa mumakore, edge masisitimu, uye akasiyana masevhisi eMicrosoft.
Iyo purojekiti ine chinangwa chekubatanidza mhinduro dzeLinux dzinoshandiswa kuMicrosoft uye kurerutsa kuchengetedzwa kweLinux masisitimu nekuda kwezvikonzero zvakasiyana kusvika parizvino. Iko kusimukira kwechirongwa ichi kwakagoverwa pasi peMIT rezenisi.
Nezve CBL-Mariner
Kune avo vasingazive nezve CBL-Mariner, iwe unofanirwa kuziva kuti kugovera uku inoratidzirwa nekupa diki diki seti yemapakeji ekutanga anoshanda se hwaro hwepasirese hwekuvakisa midziyo, nharaunda dzekutambira, uye masevhisi anomhanya pazvivakwa zvemakore uye edge zvishandiso.
Zvimwe zvakaoma uye zvine hunyanzvi zvigadziriso zvinogona kugadzirwa nekuwedzera mamwe mapakeji kuCBL-Mariner, asi hwaro hweese masystem anoramba akafanana, zvichiita kuti zvive nyore kuchengetedza nekugadzirira kukwidziridzwa. Semuyenzaniso, CBL-Mariner inoshandiswa sehwaro hweWSLg mini-kugovera, iyo inopa magiraidhi stack zvikamu zvekutanga Linux GUI application munzvimbo dzakavakirwa paWSL2 (Windows Subsystem yeLinux) subsystem. Kuwedzerwa kushanda muWSLg kunoitwa nekusanganisira mamwe mapakeji neWeston Composite Server, XWayland, PulseAudio, uye FreeRDP.
CBL-Mariner kuvaka sisitimu inobvumidza iwe kugadzira yakamira-yega RPM mapakeji zvichibva pane kwabva uye SPEC mafaera, pamwe ne monolithic system mifananidzo inogadzirwa neiyo rpm-ostree toolkit uye yakagadziridzwa atomu pasina kupatsanura mumapakeji akasiyana. Nekuda kweizvozvo, maviri ekugadzirisa edhisheni modhi anotsigirwa: nekugadzirisa ega mapakeji uye nekuvakazve nekugadzirisa iyo yese system mufananidzo. A repository inowanikwa neanosvika mazana matatu ezviuru RPMs akatovakwa aunogona kushandisa kuvaka yako mifananidzo zvichienderana nefaira rekugadzirisa.
Kugovera inosanganisira chete izvo zvinonyanya kukosha uye inogadziridzwa kune kushoma ndangariro uye disk nzvimbo yekushandisa, pamwe chete nekumhanyisa kurodha. Iyo yekugovera zvakare inomira kunze kwekubatanidza akati wandei mamwe maitiro ekuchengetedza.
Iyo purojekiti inoshandisa "yakanyanya kuchengetedzwa nekusarudzika" nzira. Inopa kugona kusefa nharembozha uchishandisa seccomp mashandiro, encrypt disk partitions, uye simbisa mapaketi uchishandisa siginecha yedhijitari.
Iyo kero nzvimbo randomisation modes inotsigirwa muLinux kernel inogadziriswa, pamwe chete nedziviriro nzira kurwisa kurwiswa zvine chekuita nezviratidzo zvinongedzo, mmap, /dev/mem uye /dev/kmem. Kune nzvimbo dzekurangarira dzine zvikamu zvine kernel uye module data, iyo modhi inotarwa kuverenga-chete uye kodhi kuuraya inorambidzwa.
Optionally inowanikwa ndiko kugona kudzima kurodha kwema kernel module mushure mekutanga system. Iyo iptables toolkit inoshandiswa kusefa network mapaketi. Nekumisikidza, nhanho yekuvaka inogonesa nzira dzedziviriro kubva pakupfachukira, buffer mafashama, uye tambo fomati nyaya (_FORTIFY_SOURCE, -fstack-protector, -Wformat-security, relro).
Mutungamiri wehurongwa systemd inoshandiswa kubata masevhisi uye kutanga. RPM uye DNF mapakeji maneja anopihwa maneja manejimendi.
Chii chitsva muCBL-Mariner 2.0
Shanduro nyowani inomira pachena pakukwidziridzwa kukuru kweshanduro dzesoftware, izvi zvinosanganisira shanduro dzakagadziridzwa dzelinux kernel 5.15, systemd 250, glibc 2.35, gcc 11.2, clang 12, python 3.9, ruby 3.1.2, rpm 4.17, qemu 6.1, perl 5.34, ostree.
Mukuwedzera kune izvi, zvinoonekwa kuti iyo base repository inosanganisira zvikamu zvekugadzira graphical interface, dzakadai seWayland 1.20, Mesa 21.0, GTK 3.24, uye X.Org Server 1.20.10, iyo yakambotumirwa mune imwe nzvimbo yakasiyana yecoreui.
Izvo zvakare zvinocherechedzwa kuti kernel inovaka nePREEMPT_RT zvigamba zvakawedzerwa kuti zvishandiswe pane chaiyo-nguva masisitimu.
Chekupedzisira kune avo vanofarira, iwe unofanirwa kuziva kuti mapakeji anovaka anogadzirwa ezvivakwa aarch64 uye x86_64.
Seva SSH haigoneswe neyakagadzika. Kuti uise kugovera, mugadziri anopiwa anogona kushanda mune zvese zvinyorwa uye graphical modes.
Iyo yekuisa inopa kugona kuisa neyakazara kana yekutanga seti yemapakeji, inopa chinongedzo chekusarudza dhisiki partition, kusarudza zita rekutambira, uye kugadzira vashandisi.