document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2024-12-26 21:30:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #30245 from wxy/20230927-Wolfi--The-Linux-Un(distro)-Improving-Cloud-Software-Supply-Chain-Turns-One

Browse Source 
ATRP:published/20230927 Wolfi- The Linux Un(distro) Improving Cloud Software Supply Chain Turns One.md
This commit is contained in:
Xingyu.Wang 2023-10-07 19:31:44 +08:00 committed by GitHub
commit a4934a703b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 85 additions and 93 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

85
published/20230927 Wolfi- The Linux Un(distro) Improving Cloud Software Supply Chain Turns One.md Normal file
View File

@ -0,0 +1,85 @@
[#]: subject: "Wolfi: The Linux Un(distro) Improving Cloud Software Supply Chain Turns One!"
[#]: via: "https://news.itsfoss.com/wolfi-turns-one/"
[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/"
[#]: collector: "lujun9972/lctt-scripts-1693450080"
[#]: translator: "ChatGPT"
[#]: reviewer: "wxy"
[#]: publisher: "wxy"
[#]: url: "https://linux.cn/article-16261-1.html"
Wolfi：改进云软件供应链的 Linux “非”发行版
=====
![][0]
> Wolfi，这个有趣的项目致力于增强软件供应链的安全性，现已走过一载岁月！
这里说的不是 [世界上最小的章鱼][1]，而是一款从这个小章鱼那里汲取灵感的 Linux 发行版。
Wolfi 是一个**由社区驱动、以容器为核心的 Linux 发行版**，目的在于保护软件供应链的安全性。创造者（[Chainguard][2]）将其誉为 “**非发行版**”。
Wolfi 的目标是解决构建和分发软件时经常遇到的容器问题。
下面我们一起来回顾下 Wolfi 的历程，以及未来的展望。
### Wolfi：项目的成就 🐙
自从 Wolfi [去年][5] 开始启动，它已经取得了长足的进步，例如 **在 Wolfi 的仓库中具有超过 1300 个包配置** ，并且在 Wolfi 的索引中拥有 **超过 18000 的软件包**。
**有 60 名贡献者**参与了这个项目 ，在过去的一年中， **超过 4400 个拉取请求已经成功地合并了** 到 Wolfi 在 [GitHub][6] 上的仓库中。
此外，他们还保证了 80% 的时间内， 在 GitHub 项目中的 **软件包更新间隔少于 24 小时** ，并且还添加了如 [Docker Scout][7] 、[Snyk][8] 、[Wiz][9] 等漏洞扫描工具。
由于 Wolfi 采用了 [滚动发布][10] 模式，因此它还致力于为新发现的 [CVE][11] 快速提供修复。
综上，这些成就使得他们在以下方面实现了技术创新：
* 为所有 Wolfi 软件包构建了 64 位 ARM 版本。
* 对 Go 和 Java 实现了全源引导。
* 引入了 [Rustls][12] TLS 库，用于处理内存安全漏洞。
* 分发了一个名称为 “[wolfi-act][13]” 的新项目，让 Wolfi 包能在 GitHub 操作中动态使用。
你可能会好奇：**未来的计划是什么？**
好吧，Wolfi 的开发团队希望它能发展成为一个**由社区驱动的项目**，并有望成为人们最信赖的容器化工作负载发行版。他们还期望 **广大开发者都能充分利用 Wolfi 的全部潜力，解决各种问题**。
此外，他们还分享了一个 Wolfi 的使用案例：
> 在当前应用中，Wolfi 的一个清晰的示例是 [Chainguard Images][14] —— 这正是我们开始构建该项目的原因。Chainguard Images 只是 Wolfi 实现的许多解决方案之一，我们鼓励更多的用户和社区去探寻 Wolfi 所能搭建出的可能性。
根据他们的新闻发布，他们还提到，在不久的将来 **将为 Rust 和其他语言生态系统加入全源引导**。
💬 你是否有过用 Wolfi 的经验？你对它的体验是如何的？
--------------------------------------------------------------------------------
via: https://news.itsfoss.com/wolfi-turns-one/
作者：[Sourav Rudra][a]
选题：[lujun9972][b]
译者：[ChatGPT](https://linux.cn/lctt/ChatGPT)
校对：[wxy](https://github.com/wxy)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://news.itsfoss.com/author/sourav/
[b]: https://github.com/lujun9972
[1]: https://en.wikipedia.org/wiki/Octopus_wolfi
[2]: https://www.chainguard.dev/
[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png
[4]: https://news.itsfoss.com/content/images/2023/09/Wolfi.png
[5]: https://news.itsfoss.com/wolfi-linux-undistro/
[6]: https://github.com/wolfi-dev
[7]: https://docs.docker.com/scout/
[8]: https://snyk.io/
[9]: https://www.wiz.io/
[10]: https://itsfoss.com/rolling-release/
[11]: https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures
[12]: https://github.com/rustls/rustls
[13]: https://github.com/wolfi-dev/wolfi-act
[14]: https://www.chainguard.dev/chainguard-images
[15]: https://news.itsfoss.com/assets/images/Certs-and-Bundles-1536x864.webp
[16]: https://itsfoss.click/latest-lf-offer
[0]: https://img.linux.net.cn/data/attachment/album/202310/07/192722wdzz199535h4c983.jpg

93
sources/news/20230927 Wolfi- The Linux Un(distro) Improving Cloud Software Supply Chain Turns One.md
View File

@ -1,93 +0,0 @@
[#]: subject: "Wolfi: The Linux Un(distro) Improving Cloud Software Supply Chain Turns One!"
[#]: via: "https://news.itsfoss.com/wolfi-turns-one/"
[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/"
[#]: collector: "lujun9972/lctt-scripts-1693450080"
[#]: translator: " "
[#]: reviewer: " "
[#]: publisher: " "
[#]: url: " "
Wolfi: The Linux Un(distro) Improving Cloud Software Supply Chain Turns One!
======
An interesting project that helps secure software supply chain turns
one!
Wolfi has turned one!
I am not talking about the [world's smallest octopus][1], but a Linux distro taking inspiration from the little one.
It is **a community-driven, container-focused Linux distribution** designed to secure the software supply chain. The creators ([Chainguard][2]) call it an “ **Undistro** ”.
Wolfi aims to deal with the shortcomings of containers, primarily used to build and ship software.
Let's take a look at its journey so far, and what's in store for the future.
**Suggested Read** 📖
![][3]
### Wolfi: Project's Achievements 🐙
![][4]
Since Wolfi began its journey [last year][5], it has come a long way, with **over 1,300 package configs housed in the Wolfi repo** and **over** **18,000 packages in the Wolfi index**.
**60 contributors** have been involved with this project, with **more than 4,400 pull requests being merged** into the Wolfi repo on [GitHub][6] over the past year.
They have also achieved **a solid package update interval of less than 24 hours** , 80 percent of the time on their GitHub projects, with **support for vulnerability scanning tools** such as [Docker Scout][7], [Snyk][8], [Wiz][9], and more.
As Wolfi follows a [rolling release][10] approach, it also worked on delivering fixes to newly found [CVEs][11] quickly.
All of these achievements allowed them **to pioneer some key technical innovations** that include:
* Building 64-bit ARM versions of all Wolfi packages.
* Implementation of full-source bootstrapping for Go and Java.
* Introduction of the [Rustls][12] TLS library for handling memory safety vulnerabilities.
* A new project called '[wolfi-act][13]' that leverages Wolfi packages to be used dynamically within GitHub actions.
You're maybe wondering: **what does the future entail?**
Well, the folks behind Wolfi want it to improve it as **a community-driven project** that can someday become the most trusted distro for containerized workloads. With hopes that **builders everywhere can make use of Wolfi's full potential** to solve various problems.
Furthermore, they share about a use-case of Wolfi:
> One clear use case of Wolfi in practice today is [Chainguard Images][14]–which is why we set out to build the project. Chainguard Images is just one of the solutions Wolfi has enabled and we encourage more users and the community to explore what's possible to build with Wolfi for years to come.
As per their press release, they also mention that the **full-source bootstrapping for Rust and other language ecosystems will be added in the near future**.
_💬 Have you used Wolfi before? How was your experience with it?_
* * *
[![Linux Foundation Bootcamp Offer][15]][16]
--------------------------------------------------------------------------------
via: https://news.itsfoss.com/wolfi-turns-one/
作者：[Sourav Rudra][a]
选题：[lujun9972][b]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://news.itsfoss.com/author/sourav/
[b]: https://github.com/lujun9972
[1]: https://en.wikipedia.org/wiki/Octopus_wolfi
[2]: https://www.chainguard.dev/
[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png
[4]: https://news.itsfoss.com/content/images/2023/09/Wolfi.png
[5]: https://news.itsfoss.com/wolfi-linux-undistro/
[6]: https://github.com/wolfi-dev
[7]: https://docs.docker.com/scout/
[8]: https://snyk.io/
[9]: https://www.wiz.io/
[10]: https://itsfoss.com/rolling-release/
[11]: https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures
[12]: https://github.com/rustls/rustls
[13]: https://github.com/wolfi-dev/wolfi-act
[14]: https://www.chainguard.dev/chainguard-images
[15]: https://news.itsfoss.com/assets/images/Certs-and-Bundles-1536x864.webp
[16]: https://itsfoss.click/latest-lf-offer