He aha te Anga Whakawhāiti me te Hiranga o ngā Whakaeke Anga Peke
Ka whakamahia ngā anga whakawhāiti hei whakahaere i ngā whakahau ka taea e ngā kaiwhakamahi te whakahaere, ā, he maha ngā wā ka ārai i ngā mahi pēnei i te cd, te whakarewa i ngā anga hou, te kaweake rānei i ngā taurangi taiao. I te nuinga o te wā ka whakatinanahia ēnei ki roto i CI/CD ngā kaihoko, ngā taiao hanga rānei hei whakawhāiti i ngā whanonga a te kaiwhakamahi. Heoi, ka rapu ngā kaiwhakaeke i ngā huarahi hei mahi i tētahi anga pekepeke, he tikanga e whakamahia ana hei mawhiti i ngā taiao anga kua herea, hei uru atu hoki ki ngā anga kāore i herea pērā i bin/bashKia tae ki roto it, kei te kaiwhakaeke te mana whakahaere katoa i te rārangi whakahau, me te karo i ngā herenga katoa o te taiao kua herea.
Te Mahi a te Jumping Shell: Mai i te Restricted ki te bin/bash
Ko te whāinga o te anga pekepeke he whakamahi i ngā ngoikoretanga i roto i ngā taiao kua whakawhāitihia, ā, ka whakaoho i te mawhiti o te anga e arahi ana ki bin/bashKo ngā tikanga noa mō ngā whakaeke anga ārai-mawhiti ko:
$ ls /bin/bash $ /bin/bashIf bin/bash he mea e taea ana te uru atu, mā tēnei karangatanga māmā nei ka oti ai.
Tētahi atu tikanga noa:
$ echo "/bin/bash" > run.sh $ sh run.sh Ka taea hoki e ngā kaiwhakaeke te whakamahi kino i ngā ētita pēnei i a vi or iti:
vi :set shell=/bin/bash :shell E whakaatu ana ēnei tikanga i te ngāwari o te arahi a te anga peke ki bin/bash te whakatinanatanga, me te karo i ngā parenga anga kua herea.
Ngā Tūponotanga Tuturu o ēnei Whakaekenga i roto i te DevOps
I roto i te tiritiri CI/CD i ngā taiao, ka whakamahia ngā anga kua whakawhāitihia hei wehe i ngā hanganga me te whakaiti i te mōrearea. Engari ina angitu te kaiwhakaeke me te anga peke ka tae atu bin/bash, ka hinga te tauira haumarutanga.
Ko nga raru kei roto:
- Te urunga kore whakamanatanga ki ngā mea ngaro o te taiao
- Te whakanui ake i te mana mā te kore herenga bin/bash
- Te whakararuraru i te hanganga pipelinengā taonga tuku iho rānei
- Te whakatinanatanga o ngā taputapu pumau i roto i te pipeline
Ko te anga whakawhāiti i te mawhiti ki bin/bash ka huaki te kuaha ki te takahi katoa o te pūnaha, he maha ngā wā ko te nekehanga tuatahi i roto i te whānui ake Whakaeke DevSecOps.
Te Aroturuki me te Kimi i ngā Mawhiti Peke o te Shell me te bin/bash
Hei kite i ngā whanonga pekepeke o te anga me te aukati i ngā nganatanga anga kua herea ki te mawhiti, me mahi e ngā tīma haumarutanga ēnei:
- Tuhia ngā mahi katoa o te anga, inā koa / ipu / bash Tuhinga
- Aroturuki i te tukino a te ētita me te whakamahinga o te tuhinga hei ira whakaputa anga
- Aroturuki i te urunga ki ngā kōnae whirihora anga pēnei i .bashrc or .bash_profile
Ngā whanonga pēnei i te whakarewa bin/bash me whakaaro ko te hunga mai i tētahi taiao kua whakawhāitihia he mea nui hei whakatūpato. Mā te kite wawe i tēnei ka ārai i te nekehanga hōhonu ki te taha.
Te Ārai i ngā Whakaekenga me ngā Whakamahinga Mawhiti i raro i te Herenga o te Anga
Hei whakaiti i ngā mōrearea peke anga me te ārai i ngā kaiwhakaeke kei whakarewa bin/bash:
- Whakapakarihia ngā anga kua herea: Tangohia, āraia rānei te uru
- Whakamahia te AppArmor, te SELinux rānei hei whakawhāiti i te whakahaerenga o ngā whakahau
- Whakaūtia te mana iti rawa puta noa CI/CD ngā tūranga me ngā kaiwhai
- Ka hangaia te Containerize me ngā whakaahua distroless kāore he anga penei bin/bash
- Whakamanahia ngā taiao i mua me muri i te hanganga hei hopu i ngā āhuatanga rerekē
Ko te ārai i ngā āhuatanga anga herenga mawhiti me whai mana paparanga, kaua e whakawhirinaki noa ki ngā anga herenga. Kaua e whakaaro he haumaru ngā anga herenga mēnā bin/bash tae atu ki reira, tera pea ka taea.
Whakamutunga: Ko ngā Putanga o te Angaanga he Wāhi Whakauru
He paparanga parepare ngā anga kua herea, ehara i te taurangi. Ko ngā whakaekenga anga peke e aro ana ki te wehenga ngoikore me te whakamanatanga ngoikore. Kia uru ki roto / ipu / bash, ka taea e ngā kaiwhakaeke te huri, te tohe tonu, me te whakararu i te hanganga DevSecOps.
He mea nui te kimi me te wehe. Mā te whakakotahi i te takiuru whakahau, ngā taiao kua herea, me te horoi tika o ngā kaiwhakahaere mōkihi ka whakaiti i te whakaaturanga.
Hei whakamutunga, ko ngā taputapu pērā i te Xygeni ka kitea ēnei mōrearea. Ka āwhina rātou ki te whakamana i te pono o te waehere, te kite i ngā whanonga anga rerekē, ā, tiakina tō pipelinemai i ngā tūmomo riri ā-roto, ā-waho hoki, tae atu ki ērā e tīmata ana me te anga peke noa ki / ipu / bash ngā ngana rānei ki te mawhiti i ngā taiao anga kua herea.
