Uma silanda ukusatshalaliswa kwe-GNU/Linux, into evamile ukulanda Dala isithombe se-ISO bese uqala ukudala idrayivu ye-USB ebhuthwayo. Ngaphandle kokucabanga kakhulu ngalokho okungenzeka ukuthi kwenzeke endleleni. Iqiniso liwukuthi, yize ngokuvamile kungekho okungahambi kahle, sithemba ngokungazi ukuthi i-ISO isemthethweni. Ukuthi akekho oye wayithinta nokuthi ukulanda akonakalanga.
Uma sikhuluma ngohlelo lokusebenza oluphelele, izinto ziyashintsha. Lawa amafayela amakhulu, athatha isikhathi eside ukuwalanda, futhi ngaphezu kwakho konke, Ukwehluleka noma ukukhohliswa kwe-ISO kungabeka engcupheni iqembu lonkeYingakho emhlabeni we-Linux kuvame kakhulu (futhi kunconywa kanjalo) ukuqinisekisa ubuqotho kanye nobuqiniso bama-ISO kusetshenziswa ama-checksum kanye nama-signature e-GPG ngaphambi kokuwashisa abe yi-DVD noma ukuwabhala ku-USB drive.
Kusho ukuthini ukuqinisekisa i-ISO: ubuqotho kanye nobuqiniso
Uma uqinisekisa indinganiso ye-ISO, awuhloli okukodwa, kodwa wenza ukuhlola okubili okuhlukile okungafanele kuhlanganiswe: ubuqotho befayela kanye nobuqiniso bomsuka waloUbuqotho bukutshela ukuthi i-ISO onayo kudiski ifana yini naleyo eyayikuseva, i-bit ne-bit. Ubuqotho bukutshela ukuthi leyo ISO kanye nama-checksum ayo avela kuphrojekthi abathi bayayimelela.
Ubuqotho buqinisekiswa nge- umsebenzi we-hash (checksum) ubalwe kufayela lonkeUma umphumela owuthola kukhompyutha yakho ufana nalowo oshicilelwe yi-distribution, kusho ukuthi i-ISO ayikashintshwanga ngesikhathi sokulanda noma yonakele endaweni yokugcina.
Ubuqiniso buqinisekiswa ngokusebenzisa Iziginesha zedijithali ze-GPG okuhambisana nezihluthulelo zomphakathi zonjiniyelaEmpeleni, ukusatshalaliswa kusayina ifayela eliqukethe ama-checksum (isibonelo, i-SHA256SUMS) bese uqinisekisa ukuthi lesi siginesha sihambisana nokhiye wephrojekthi osemthethweni nokuthi awukashintshwa.
Nakuba abantu abaningi behlola kuphela i-MD5 noma i-SHA checksum futhi bayibheka njengesebenzayo, uma othile ebeke engcupheni iseva yokulanda, bangase futhi... Shintsha i-ISO bese ushicilela i-checksum mbumbulu.Ngakho-ke, umkhuba omuhle uhilela nokuqinisekisa isiginesha se-GPG sefayela lezibalo.
Iyini i-checksum futhi kungani isetshenziswa kuma-ISO?
I-checksum ingumphumela wokusebenzisa i-checksum kufayela. umsebenzi we-cryptographic hash okhiqiza umucu oyingqayizivele ngalokho okuqukethwe. Leyo ntambo ivame ukumelwa nge-hexadecimal (izinhlamvu 0-9 kanye ne-af) futhi inobude obungaguquki, kungakhathalekile ukuthi ifayela lokuqala lingakanani.
Kumongo wokusatshalaliswa kwe-GNU/Linux, ama-checksum asetshenziswa ukwenza qinisekisa ukuthi idatha ayikashintshi selokhu iphrojekthi yashicilela isithombeUma amafayela amabili ekhiqiza i-hash efanayo esebenzisa i-algorithm efanayo, abhekwa (empeleni) njengafanayo. Uma i-hash ingahambisani, ingxenye eyodwa ehlukile yanele ukushintsha inani ngokuphelele futhi isivumele ukuthi sibone inkinga.
Kunezinhlobo eziningi ze-hash algorithms, kodwa lezo ozozibona kakhulu ezihlotshaniswa nama-ISO yilezi: I-MD5, i-SHA-1 kanye nomndeni we-SHA-2 (SHA-256, SHA-384, SHA-512…)Emakhasini okulanda e-Debian, Ubuntu, Fedora, noma okunye ukusatshalaliswa, bavame ukunikeza amafayela anamagama afana ne-MD5SUMS, SHA1SUMS, noma SHA256SUMS kanye nama-ISO.
Inqubo ilula: ulanda i-ISO kanye nefayela layo le-hash, ubale i-ISO hash emshinini wakho bese Uyaqinisekisa ukuthi umphumela ufana nenani elishicilelwe kufayela le-checksumUma ifana, ungaqiniseka ngokufanele ukuthi isithombe asonakele noma asifinyeziwe.
I-MD5 ibhekwa njenge-algorithm namuhla iphelelwe yisikhathi sokusetshenziswa kwezokuphepha okunzimangoba kutholakale ukungqubuzana okusebenzayo. Noma kunjalo, kusasebenza ekuhloleni ubuqotho obuyisisekelo. Kokulandwa okukhulu, ikakhulukazi ama-ISO, kungcono ukusebenzisa... I-SHA-256, okuyiyona ejwayelekile enconywayo njengamanje. ekusatshalalisweni okuningi.
Izinhlobo zamafayela ozowathola uma ulanda i-ISO
Uma ulanda ukusatshalaliswa kusuka kuseva yayo esemthethweni, kuvamile ukuthola, ngaphezu kwesithombe ngokwaso, uchungechunge lwamafayela engeziwe. Ngayinye inenhloso yayo, futhi kubalulekile ukwazi ukuthi ayini. Yimuphi umsebenzi owenziwa uhlobo ngalunye lwefayela futhi uhlobene kanjani nokuqinisekiswa? lokho ozokwenza.
Ngokuvamile uzothola into efana nale (amagama angahluka kancane phakathi kwezindawo ezisetshenziswayo):
- i-distribution-name-version-architecture.isoIsithombe ngokwaso, okuyilokho ozokushisa kudrayivu ye-USB noma i-DVD. Isibonelo, ubuntu-20.04-desktop-amd64.iso, ekhombisa ukusatshalaliswa, inguqulo, uhlelo (ideskithophu/iseva), kanye nokwakhiwa.
- MD5SUMS: Ifayela lombhalo elihlanganisa uhlu lwama-hashe e-MD5 ezithombe ezitholakala kulolo hlu lwemibhalo. Umugqa ngamunye uhlobanisa i-hash negama lefayela.
- I-MD5SUMS.gpg: Isiginesha se-GPG sefayela le-MD5SUMS, esenziwe ngokhiye wonjiniyela. Sisebenza ukuqinisekisa ukuthi ifayela le-hash le-MD5 livela kuphrojekthi futhi alikashintshwa.
- SHA256SUMS: okulingana ne-MD5SUMS kodwa usebenzisa i-algorithm ye-SHA-256. Leli yifayela okufanele ulibeke phambili uma litholakala.
- I-SHA256SUMS.gpg: Isiginesha yedijithali ye-SHA256SUMS GPG, esetshenziselwa ukuqinisekisa ubuqiniso bayo.
Kwezinye izabelo uzobona ne-SHA1SUMS, SHA512SUMS, noma amafayela afanayo. Wonke alandela isimiso esifanayo: uhlu lwezibalo kanye, ngokuzithandela, nesiginesha ye-GPG ehlobene ukuze uqinisekise ukuthi uhlu aluzange luphazanyiswe.
Uma esikhundleni sokulanda i-ISO nge-HTTP/HTTPS ukwenza usebenzisa I-BitTorrent, iningi lamakhasimende selivele lihlanganisa uhlelo lokuqinisekisa Ukucubungula kwangaphakathi kusekelwe ezingcezu kanye nama-hashe angaphelele, ngakho-ke amathuba okugcina une-ISO eyonakele ancishisiwe kakhulu. Noma kunjalo, uma ufuna ukuqiniseka ngokuphelele ngobuqiniso bayo, kusanengqondo ukuqinisekisa isiginesha se-GPG sefayela le-hash.
Indlela imisebenzi ye-hash esebenza ngayo (MD5, SHA-1, SHA-256…)
Ezingeni elisebenzayo, awudingi ukuqonda izibalo ezingemuva kwama-hashes, kodwa kuyasiza ukuqonda imiqondo embalwa eyisisekelo ukuze ube nokuqonda okucacile. Kungani ziwusizo kangaka ekuhloleni ama-ISO?Umsebenzi we-cryptographic hash uthatha ifayela lanoma yiluphi usayizi bese ubuyisela umucu wobude obungaguquki; ukushintsha ingxenye eyodwa yefayela kuphumela ku-hash ehluke ngokuphelele.
Izidingo zomsebenzi omuhle we-hash zifaka phakathi ukuthi kulula ukuwubala ngomqondo owodwa, kodwa cishe akunakwenzeka ukutshala imaliukuthi kunzima kakhulu ukuthola amafayela amabili ahlukene ane-hash efanayo (ukungqubuzana) nokuthi ayimelani nemizamo yokukhiqiza okuqukethwe okunonya okuhambisana ne-hash ethile.
I-MD5 ibilokhu iyindinganiso yangempela yalolu hlobo lokuqinisekisa iminyaka eminingi, kodwa intuthuko ekubhalweni kwe-cryptography ikhombisile ukuthi Kungenzeka ukwakha amafayela ahlukene nge-hash efanayo ye-MD5Ngakho-ke, nakuba kuseyinto evamile kwamanye amaphrojekthi, ngenxa yezizathu zokuphepha kunconywa ukusebenzisa ama-algorithms aqinile kakhulu.
I-SHA-1 ithuthuke kakhulu kwezinye zezibuthakathaka ze-MD5, kodwa izinkinga zokushayisana nazo zitholiwe futhi kuyacatshangelwa. Akufanelekile ukusetshenziswa okusha okudinga ukuphepha okuphezuluUmndeni we-SHA-2 (ikakhulukazi i-SHA-256) okwamanje uyindlela elinganiselayo kakhulu phakathi kokuphepha nokusebenza kokuqinisekiswa kwe-ISO.
Empeleni, uma i-distro inikeza amafayela amaningi esamba, inketho engcono kakhulu ukukhetha eyodwa. I-SHA-256 noma i-SHA-512 njengenketho yokuqalaShiya i-SHA-1 kuphela ezimweni lapho kungekho enye inketho bese wehlisa i-MD5 ekuhlolweni kobuqotho okuyisisekelo uma ungenayo enye indlela.
Amathuluzi e-Linux okubala nokuqinisekisa amasheke
Izindaba ezinhle ukuthi awudingi ukufaka noma yini engajwayelekile: ukusatshalaliswa okuningi kwe-GNU/Linux kwanamuhla sekuvele kufakiwe. izinsiza zomugqa womyalo zokubala nokuqinisekisa ama-hasheLawa mathuluzi ngokuvamile ayingxenye yama-coreutils noma amanye amaphakheji ayisisekelo.
Imiyalo evame kakhulu ozohlangana nayo yile:
- md5sum: ibala futhi iqinisekise izibalo ze-MD5.
- sha1sum: ibala futhi iqinisekise izibalo ze-SHA-1.
- sha256sum: ibala futhi iqinisekise izibalo ze-SHA-256.
- sha512sum: ibala futhi iqinisekise izibalo ze-SHA-512.
Ukuzisebenzisa kulula kakhulu. Uma ufuna ukubala i-hash yefayela elithile, mane usebenzise umyalo olandelayo ku-terminal, kusukela kufolda lapho unefayela le-ISO:
cd Descargas
sha256sum nombre-de-tu-imagen.iso
Umyalo uzophrinta umugqa one-hash kanye negama lefayela, ongaliqhathanisa nenani elishicilelwe kuwebhusayithi. Uma ukhetha i-MD5 noma i-SHA-1, i- Ifomethi yomyalo iyafana, ishintsha ukusetshenziswa (md5sum, sha1sum, sha512sum…).
Ngaphezu kokubala ama-hashe ngamanye, lawa mathuluzi afanayo akuvumela ukuthi uqinisekise amafayela amaningi ngesikhathi esisodwa usebenzisa imodi yokuhlola ngenketho ethi -cYilapho-ke ifayela le-MD5SUMS noma le-SHA256SUMS olilandile kanye nama-ISO liqala khona ukusebenza.
Ukuhlola ubuqotho be-ISO kusetshenziswa amafayela e-sum
Esimweni esivamile, ulanda kokubili isithombe se-ISO kanye nefayela laso le-SHA256SUMS (futhi, uma litholakala, i-MD5SUMS noma i-SHA1SUMS) kuwebhusayithi esemthethweni ye-distro. Isakhiwo saleli fayela silula kakhulu: umugqa ngamunye uqukethe i-hash, isikhala, mhlawumbe i-asterisk noma isikhala esengeziwe, kanye negama lefayela.
Ukuze uhlole i-ISO ngefayela le-sum, udinga nje ukuya kufolda lapho unayo khona kokubili isithombe kanye nefayela le-SHA256SUMS bese usebenzisa:
sha256sum -c SHA256SUMS
I-utility iphinda yonke imigqa ye-SHA256SUMS bese iqhathanisa i-hash eyibala endaweni yefayela ngalinye elibhalwe ohlwini naleyo ekudokhumenti. Uma konke kuhlelekile, izobonisa into efana nalokhu:
nombre-distro.iso: OK
Uma kwenzeka ukungafani, kungaba ngoba i-ISO yonakele noma ngoba Ifayela alifani nohlu lwezibaloUzobona imiyalezo efana nale:
nombre-distro.iso: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
Inqubo efanayo isebenza ku-MD5 kanye ne-SHA-1 ngokufaka ithuluzi nefayela elihambisanayo, isibonelo:
md5sum -c MD5SUMS
sha1sum -c SHA1SUMS
Le ndlela ilula kakhulu uma ulanda ama-ISO amaningi noma amafayela amaningi ngesikhathi esisodwa, ngoba Uqinisekisa wonke amafayela ngesikhathi esisodwa ngomyalo owodwa. futhi uhlelo lukutshela ukuthi yiziphi eziphumelele ukuhlolwa nokuthi yiziphi ezingaphumelelanga.
Amasignesha e-GPG: ukuqinisekisa ubuqiniso bezibalo
Kuze kube manje sikhulume ngobuqotho kuphela, kodwa ingxenye yesibili ayikho: qiniseka ukuthi ifayela lezibalo livela kuphrojekthi ngempela hhayi kothile oye wafaka iseva engcupheni. Yilapho i-GnuPG (gpg) ingena khona, ithuluzi elijwayelekile lokuphatha i-cryptography yokhiye womphakathi ku-GNU/Linux.
Iningi lezabelo ezinkulu lisayina amafayela azo e-hashsum (isb., i-SHA256SUMS.gpg) ngokhiye oyimfihlo ohlotshaniswa nabathuthukisi. Wena, njengomsebenzisi, ulanda leso siginesha bese usisebenzisa. ukhiye womphakathi wephrojekthi okufanele uqinisekiswe ukuthi ifayela le-SHA256SUMS alikashintshwa.
Ukuhamba komsebenzi okujwayelekile nge-distro efana ne-Ubuntu kungaba yilokhu, uma usufake i-gpg futhi usesiqondisweni sokulanda:
gpg --keyid-format long --verify SHA256SUMS.gpg SHA256SUMS
Uma ikhompyutha yakho isivele inokhiye womphakathi we-Ubuntu ongeniswe kahle futhi othembekile, i-gpg izobonisa umlayezo obonisa i- isiginesha esisebenzayo kanye nesihlonzi sesihluthuleloKodwa kuvamile kakhulu ukuthi uma uqala ukuyisebenzisa, izokutshela ukuthi ayazi leyo key yomphakathi.
Uma kunjalo, isinyathelo esilandelayo kungaba ukungenisa ukhiye womphakathi kusuka kuseva yokhiye othembekile. Isibonelo, nge-Ubuntu ungenza into efana nale:
gpg --keyid-format long --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xD94AA3F0EFE21092
Lokhu kulanda ukhiye ngesikhombi esichaziwe kusuka kuseva yokhiye esemthethweni. Uma usungenisile, uphinda usebenzise umyalo wokuqinisekisa isiginesha usebenzisa i-SHA256SUMS, futhi manje kufanele uthole i- isiqinisekiso sokuthi isiginesha silungile futhi ihlotshaniswa nesihluthulelo esithi “Ubuntu CD Image Automatic Signing Key (2012) "noma enye efanayo kuye ngokuthi i-distro iyatholakala yini."
I-GPG ingabonisa izixwayiso ezinjengokuthi "Akukho okubonisa ukuthi isiginesha ingeyomnikazi," okusho ukuthi Awukawuphawuli lowo khiye njengothembekile ngokuphelele.Akuyona iphutha elibulalayo: uma nje usuqinisekisile ngezinye izindlela (iwebhusayithi esemthethweni, imibhalo, njll.) ukuthi umunwe oyisihluthulelo yilowo omenyezelwe yiphrojekthi, ungaqhubeka.
Isibonelo esisebenzayo: ukuqinisekisa i-Ubuntu ISO yakamuva
Ukuze uqonde lokhu ngokucacile, cabanga ngokulanda i-Ubuntu ISO (isibonelo, inguqulo yakamuva ye-LTS) kusuka kuwebhusayithi esemthethweni. Kulelo khasi, uzothola izixhumanisi ze-ISO, ifayela le-SHA256SUMS, kanye nesiginesha yalo ye-SHA256SUMS.gpg, konke kufolda efanayo noma eseduze.
Izinyathelo ongazilandela ngokuyisisekelo zizoba yilezi ezilandelayo:
Okokuqala, Landa i-ISO efanele yokwakha kwakho (isibonelo, isithombe sedeskithophu se-64-bit AMD64), ngaphezu kwamafayela e-SHA256SUMS kanye ne-SHA256SUMS.gpg ahambisana naleyo nguqulo.
Okulandelayo, uma i-gpg ifakiwe ohlelweni lwakho, uzoqinisekisa isiginesha sefayela le-sums nge:
gpg --keyid-format long --verify SHA256SUMS.gpg SHA256SUMS
Uma i-gpg ikutshela ukuthi ayikwazi ukuthola ukhiye, ungawuthola kuseva yokhiye ehlotshaniswa nephrojekthi ngokusebenzisa umyalo ofana no:
gpg --keyid-format long --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xD94AA3F0EFE21092
Uma ukhiye usungenisiwe futhi isiginesha yefayela le-SHA256SUMS iqinisekisiwe, ungahlola i-ISO ngokumelene nalolo hlu usebenzisa:
sha256sum -c SHA256SUMS
Umyalo uzohlola konke okufakiwe futhi ubonise umlayezo wefayela ngalinye elibhalwe ohlwini. Ku-ISO esanda kulandwa, kufanele ubone into efana nale: “ubuntu-XX.XX-desktop-amd64.iso: Ukufana kwe-Sum” noma “Kulungile”, okuqinisekisa ukuthi isithombe sendawo sifana ncamashi nesithombe esishicilelwe abathuthukisi.
Hlola i-checksum eyodwa mathupha
Ngezinye izikhathi awunayo ifayela eliphelele lezibalo noma unikezwe i-hash eyodwa kuphela ekhasini lokulanda. Kuleso simo, ungenza futhi ukuqinisekiswa "kwakudala". ukubala i-checksum yendawo nokuyiqhathanisa ngesandla ngenani elishicilelwe.
Cabanga ukuthi ulande i-Red Hat ISO futhi iwebhusayithi ibonisa kuphela i-SHA-1 hash yaleso sithombe. Kufolda yakho yokusebenza, ugijima:
sha1sum redhat7-x64.iso
Umyalo uzobuyisa into efana nale:
2ac2f3368e6c9fe4d7201d85ad85528698aeaf08 redhat7-x64.iso
Kusukela lapho, kufanele nje qhathanisa ngokubonakalayo noma ngokukopisha/ukunamathisela leyo hashi Qhathanisa igama lefayela nalelo eliboniswe kuwebhusayithi noma kufayela lombhalo elincane olilandile. Uma zifana nohlamvu ngohlamvu, ubuqotho befayela buyaqinisekiswa; uma zingafani, kuzodingeka ulilande futhi.
Qinisekisa ama-ISO amaningi ngesikhathi esisodwa
Kunezimo lapho uzolanda khona izithombe eziningana ngesikhathi esisodwa (isibonelo, izinguqulo ezahlukene noma izakhiwo) futhi ungafuni ukuzihlola ngayinye ngayinye. Ngenhlanhla, amafayela e-MD5SUMS, SHA1SUMS, noma e-SHA256SUMS avame ukuwahlanganisa ndawonye. zonke izibalo zesikhombisi kudokhumenti eyodwa, ukuze nje ukwazi ukwenza ukuqinisekiswa okukhulu ngesinyathelo esisodwa.
Ake sithi une-ISO eziyisithupha ezahlukene kufolda futhi ulande amafayela e-MD5SUM, SHA1SUM, kanye ne-SHA256SUM. Uma uhlola i-MD5, ungenza into efana nale:
md5sum -c MD5SUM
Okukhiphayo kuzofaka uhlu lwe-ISO ngayinye kanye no-"Kulungile" noma "FAILED" kuye ngokuthi isamba siyahambisana noma cha. Okufanayo kusebenza ku-SHA-1 kanye ne-SHA-256, kushintsha ithuluzi kanye nefayela kuphela:
sha1sum -c SHA1SUM
sha256sum -c SHA256SUM
Uma uke washintsha ngamabomu i-ISO, noma uma yonakala ngenxa yokwehluleka kwediski, uzobona ukuthi Yilawo mamaki okufaka athile kuphela ahlulekile Nakuba konke okunye kusalungile, izinhlelo zizokwazisa ngomyalezo onjengokuthi "ISEXWAYISO: I-1 computed checksum ayifani," ngakho-ke uyazi ukuthi kukhona okungahambi kahle.
Indlela yokukhiqiza amafayela akho e-checksum
Ngaphezu kokuqinisekisa lokho abanye abakuthumelelayo, ungakha namafayela akho e-checksum uma uhlela ukwabelana ngama-ISO noma olunye uhlobo lwefayela nabantu abaningi. Kulula njengokusebenzisa amathuluzi afanayo, kodwa ukuqondisa kabusha okukhiphayo okujwayelekile kufayela ongalayisha kanye nokulandwayo.
Isibonelo, uma ulungiselele izithombe eziningana ze-ISO kufolda futhi ufuna ukukhiqiza ifayela le-MD5SUM ngazo zonke, ungenza okulandelayo:
md5sum *.iso > MD5SUM
Umyalo uzoskena wonke ama-ISO kufolda bese ulondoloza uhlu lwama-hashe namagama kufayela le-MD5SUM. Ngokufanayo, ungakha amadokhumenti usebenzisa i-SHA-1 noma i-SHA-256:
sha1sum *.iso > SHA1SUM
sha256sum *.iso > SHA256SUM
Ngokushicilela lawa mafayela okuqinisekisa kanye namafayela akho, noma ubani uzokwazi ukusebenzisa md5sum -c, sha1sum -co sha256sum -c kuzo futhi uqinisekise ukuthi okulandiwe kuhambe kahle nokuthi akekho oye wakushintsha ngesikhathi sokuthutha.
Uma ufuna ukuya phambili futhi unikeze iziqinisekiso zobuqiniso, ungaze sayina ngedijithali lawo mafayela esamba Usebenzisa ukhiye wakho we-GPG, ngendlela amaphrojekthi amakhulu akwenza ngayo. Ngale ndlela, noma ngubani othola izinto angaqinisekisa hhayi nje kuphela ukuthi idatha iphelele, kodwa nokuthi ivela kuwe ngempela.
Ukwamukela umkhuba wokuhlola ama-checksum kanye nama-signature e-GPG ngaphambi kokufaka ukusatshalaliswa kwe-Linux kuthatha isikhathi esincane kakhulu futhi ngokubuyisela kunikeza ungqimba olubalulekile lokuphepha, ukuvimbela ukufakwa okunama-ISO onakele noma aguquliwe futhi kukusize ukuthola izinkinga ngaphambi kokuba zithinte ikhompyutha yakho.
