Wolfi ndeye isingaremi GNU software yekugovera iyo yakagadzirirwa kutenderedza minimalism, ichiita kuti ive yakakodzera kune dzakaiswa midziyo.
Kana iwe uri mumwe weavo vanoshanda zvakanyanya nemidziyo, ndinogona kukurudzira kuverenga chinyorwa chinotevera patichataura nezve Wolfi OS, inova nharaunda itsva Linux kugovera iyo inosanganisa yakanakisa maficha eiyo iripo yemidziyo base mifananidzo ine default kuchengetedza matanho. kuti Vanozosanganisira Sigstore-powered software siginecha, provenance, uye software BOMs.
Wolfi OS ndeyekubviswa-pasi kugovera kwakagadzirirwa yegore-yekuzvarwa nguva. Iyo haina kernel yayo pachayo, asi inoenderana nenharaunda (senge mudziyo yekumhanyisa nguva) kupa imwe. Uku kupatsanurwa kwekunetseka muWolfi kunoreva kuti inochinjika kune akasiyana marongero.
Nezve Wolfi OS
Munzvimbo yayo paGitHub tinogona kuwana kuti:
Chainguard akatanga chirongwa cheWolfi kugonesa kugadzirwa kweChainguard Mifananidzo, muunganidzwa wedu wemifananidzo yakasarudzika yekugovera-yemahara inosangana nezvinodiwa zveyakachengeteka software yekugovera cheni. Izvi zvaida kugoverwa kweLinux nezvikamu pa granularity chaiyo uye nerutsigiro rwezvose zviri zviviri glibc uye musl , chimwe chinhu chisati chavepo mu cloud-native Linux ecosystem.
Zvinonziwo Wolfi, ane zita rakafuridzirwa ne diki octopus munyika, ine zvimwe zvakakosha Chii chinozvisiyanisa kubva kune mamwe distros anotarisa kune gore-yekuzvarwa / midziyo nharaunda:
- Inopa yemhando yepamusoro yekuunganidza-nguva SBOM seyakajairwa kune ese mapakeji
- Mapakeji akagadzirwa kuti ave granular uye anozvimiririra, kutsigira mashoma mifananidzo
- Inoshandisa yakaedzwa uye yakavimbika apk package fomati
- Inozivisa zvizere uye inoberekazve kuvaka system
- Yakagadzirirwa kutsigira glibc uye musl
Zvakakodzera kutaura izvozvo Wolfi OS kugoverwa kweLinux yakagadzirirwa kubva pakutanga, kureva kuti, haina kubva pane chero imwe kugovera iripo uye inoitirwa kutsigira nyowani nyowani komputa paradigms, senge midziyo.
Kunyangwe Wolfi ine mamwe maitiro akafanana ekugadzira kune Alpine (sekushandisa apk), imwe distro inotarisa pane yekuchengetedza cheni. Kusiyana neAlpine, Wolfi parizvino haivake Linux kernel yayo, asi panzvimbo pezvo inovimba nenzvimbo yekutambira (semuenzaniso, mudziyo wekumhanyisa) kuti upe imwe.
Uye ndezvekuti kune musiki weWolfi kuchengetedzeka kweiyo software yekugovera cheni kwakasarudzika, sezvo iye achitaura kuti ine akawanda akasiyana marudzi ekurwiswa anogona kunanga akawanda akasiyana mapoinzi muhupenyu hwesoftware. Iwe haugone kungotora chidimbu chekuchengetedza software, woibatidza, uye uzvidzivirire kubva kune zvese.
"Isu tinoreva Wolfi seundistro nekuti haisi yakazara Linux kugovera kwakagadzirirwa kushanda isina-simbi, asi kugovaniswa-pasi kugovera kwakagadzirirwa nguva yegore-yekuzvarwa. Kunyanya kukosha, isu hatina kusanganisira Linux kernel, asi panzvimbo pezvo takavimba nenharaunda (senge mudziyo wekushandisa) kuti uipe," akadaro Dan Lorenc, CEO weChainguard.
"Pamusoro pezvo, Linux inogovera pachayo inongoburitsa yakagadzikana shanduro dzesoftware kwenguva yakareba, ukuwo vanogadzira vanoisa software vari (zvakare) kuita manyorerwo ekumisikidza kuti vawane zvazvino, kana shanduro dzichangoburwa. Nekuda kweizvozvo, pane kukanganisika kukuru pakati pezvinogona kuona ma scanner kuburikidza nesoftware yekugovera cheni yekuchengetedza maCVE uye chii chiripo chaizvo munharaunda yakajairika.
Wolfi anotora anogara akagadziridzwa mifananidzo ye base midziyo izvo zvinotarisa zero zvinozivikanwa kusasimba, Kubvisa kunonoka uku pakati pekugoverwa kwakajairwa uye mifananidzo yemidziyo, uye vashandisi vanomhanyisa mifananidzo ine zvinozivikanwa kusasimba. wolfi vhara gap iri kuita chokwadi mifananidzo yemidziyo ine ruzivo rwekutanga (kunobva iyo mifananidzo uye kuve nechokwadi kuti haina kukanganisa) uye inoita SBOM chizvarwa chimwe chinhu chinogona kuitika panguva yekuvaka maitiro, uye kwete pakupedzisira.
pakupedzisira kana uri kufarira kuziva zvakawanda nezvazvo nezve kuburitswa kutsva uku, unogona kutarisa ruzivo mu chinotevera chinongedzo.