Kwanan nan an sanar da sakin sabon sigar Flatpak 1.12 wanda aka yi wasu canje -canje da haɓakawa, wanda haɓakawa ga Steam, gyaran kurakurai da kuma tallafi ga aikace -aikacen TUI sun yi fice.
Ga waɗanda ba su san Flatpak ba, ya kamata ku san cewa wannan yana ba masu haɓaka aikace -aikacen damar sauƙaƙe rarraba shirye -shiryen su waɗanda ba a haɗa su cikin madaidaitan wuraren ajiya ta hanyar shirya kwantena na duniya ba tare da ƙirƙirar keɓaɓɓun taro na kowane rarraba ba.
Ga masu amfani da tsaro, Flatpak yana ba da damar aikace -aikacen da ba daidai ba don yin aiki a cikin akwati ta hanyar ba da dama kawai ga ayyukan cibiyar sadarwar mai amfani da fayilolin da ke da alaƙa da aikace -aikacen. Ga masu amfani da ke sha'awar sabbin samfura, Flatpak yana ba su damar shigar da sabbin ƙa'idodin ƙa'idodi na gwaji ba tare da buƙatar canjin tsarin ba.
Don rage girman fakitin, kawai ya haɗa da takamaiman takamaiman aikace-aikacen, kuma tsarin asali da ɗakunan karatu na hoto (GTK, Qt, GNOME, da KDE dakunan karatu, da dai sauransu) an tsara su azaman madaidaicin yanayin lokacin gudu.
LBabban mahimmancin bambanci tsakanin Flatpak da Snap shine cewa Snap yana amfani da abubuwan da ke cikin mahimman tsarin tsarinl da warewa bisa tsarin tace kira, yayin da Flatpak ke ƙirƙirar akwati daban daga tsarin kuma yana aiki tare da manyan saiti na lokaci, bayar ba fakitoci a matsayin dogaro ba, amma daidaitacce. Yanayin tsarin (alal misali, duk ɗakunan karatu ana buƙata don gudanar da shirye -shiryen GNOME ko KDE).
Baya ga yanayin tsarin tsarin (lokacin aiki) wanda aka shigar ta wurin ajiya ta musamman, ana ba da ƙarin dogaro (fakiti) don aikace -aikacen don yin aiki. A takaice, lokacin aiki da kunshin ya ƙunshi yawan kwantena, kodayake an shigar da lokacin aiki daban kuma ya haɗa kwantena da yawa lokaci guda, yana kawar da buƙatar kwafin fayilolin tsarin gama gari zuwa Kwantena.
Sabbin fasalulluka na Flatpak 1.12
A cikin wannan sabon sigar ingantaccen gudanarwa na sandboxes masu nunin alama ana amfani dashi a cikin fakitin flatpak tare da abokin ciniki don sabis ɗin isar da wasan Steam. A cikin akwatunan da aka saka, an ba da izinin ƙirƙirar madaidaicin matsayi na kundayen adireshi / usr da / app, wanda Steam ke amfani da shi don gudanar da wasanni a cikin akwati daban tare da nasa / usr, wanda aka ware daga muhalli tare da abokin ciniki na Steam.
Hakanan, duka lokutan kunshin tare da ID ɗin aikace -aikacen guda ɗaya suna raba / tmp da kundayen adireshi $ XDG_RUNTIME_DIR kuma zaɓi, ta amfani da tutar "–allow = per-app-dev-shm", zaku iya ba da damar amfani da kundin adireshi / dev / shm.
Hakanan a cikin wannan sabon sigar ingantaccen tallafi don aikace -aikacen ƙirar mai amfani da rubutu (TUI) an haskaka kamar gdb, da ƙarin aiwatar da umarnin "ostree prune" shima an ƙara shi zuwa mai amfani da sabuntawa-repo, wanda aka inganta don aiki tare da wuraren ajiyar yanayin fayil.
A gefe guda kuma an ambaci hakan An daidaita yanayin rashin lafiyar CVE-2021-41133 a cikin aiwatar da hanyar ƙofar, masu alaƙa da rashin toshe sabbin kiran tsarin da ke da alaƙa da haɓaka ɓangarori a cikin dokokin seccomp. Rashin raunin ya ba da damar aikace -aikacen ya ƙirƙiri sandbox mai ƙyalli don ƙetare hanyoyin tabbatarwa '' ƙofar '' da aka yi amfani da ita don samar da damar yin amfani da albarkatun waje da akwati.
A sakamakon haka, maharin zai iya ƙetare tsarin keɓe sandbox aiwatar da kiran tsarin da ke da alaƙa da samun cikakkiyar damar samun abun ciki a cikin mahallin mahalarta. Ana iya amfani da raunin yanayin a cikin fakiti waɗanda ke ba da aikace-aikacen kai tsaye zuwa kwandon AF_UNIX, kamar waɗanda Wayland, Pipewire, da bututu-pulse ke amfani da su. Ba a cika daidaita yanayin ba a cikin sigar 1.12.0, don haka an sake sabunta 1.12.1 a cikin tsananin neman.
Finalmente idan kuna sha'awar ƙarin sani game da shi game da wannan sabon sigar, zaku iya bincika cikakkun bayanai A cikin mahaɗin mai zuwa.