Skip to content

OpenLogic 是如何製作 CentOS 修補程式

針對生命週期結束(EOL)的 CentOS 進行修補程式製作,是一項複雜且精細的工作。OpenLogic by Perforce 的技術專家分享了如何透過回溯移植(Backporting)和測試流程,為舊版 CentOS 提供持續的安全更新,確保其在生命週期結束後仍然穩定可靠。

回溯移植是針對生命週期結束的操作系統版本,將上游的最新修補程式,調整並應用於舊版軟件的過程。這並非簡單的直接套用,而是需要根據舊版系統的架構和特性,進行細緻的改寫與測試。例如,CentOS 7 使用的許多軟件,自第一個版本發布以來幾乎未有更新,這意味著新的修補程式可能無法直接適用,需要進行技術處理。

在修補程式製作的流程中,OpenLogic 會首先分析每個漏洞(CVE)的詳細信息,包括漏洞的攻擊向量、影響範圍及嚴重性,並決定修補程式優先次序。接著,檢查上游可用的修補程式或原始碼,然後針對舊版系統進行改寫,確保其與現有環境兼容。例如,在處理像 OpenSSL 這類底層庫時,必須確保修補程式不會影響依賴該庫的其他應用程式。

修補程式移植完成後,OpenLogic 會執行多層次的測試,包括基本功能測試、軟件包內置的測試套件,以及 CentOS 自身的功能測試套件。這些測試確保修補程式能在安裝後維持系統的穩定性和正常運行。

此項技術過程摘錄自 OpenLogic 的網絡研討會《CentOS 7 生命週期結束:為何你需要現在開始規劃 EOL 應對措施》,該研討會旨在幫助公司企業應對 CentOS 7 生命週期結束所帶來的挑戰。OpenLogic 的修補程式製作流程展現了他們在支援 EOL 系統上的專業與承諾,為仍在使用舊版 CentOS 的公司企業提供了可靠的安全保障。

關於 OpenLogic

OpenLogic 由 Perforce 提供完整的企業級支援和服務,專為在其基礎設施中使用開源軟件的公司企業而設計。我們支援超過 400 種開源技術,提供保證的服務水準協議(SLA),並可直接與經驗豐富的企業架構師溝通。透過我們的 24×7 工單支援、專業服務和培訓,OpenLogic 提供綜合且全面的開源支援解決方案。

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

What Is Static Sentiment Analysis?

What Is Sentiment Analysis?

Sentiment analysis takes large volumes of data and uses natural language processing (NLP) to determine whether a body of text has a positive, negative, or neutral sentiment.

There are three main approaches to sentiment analysis:

  • Rules-based techniques: A group of words (lexicons) are classified in terms of tone. For example, a positive lexicon might include “secure” and “compliant,” while a negative lexicon might contain “insecure” and “non-compliant.”
  • Machine learning (ML)-based techniques: These techniques use algorithms trained to determine sentiment based on words appearing in blocks of text and the order in which they appear. The ML learns and improves as more data is ingested.
  • Hybrid techniques: This combines rules-based and ML approaches to balance speed and accuracy based on the use case.

In a talk by Perforce Principal Software Engineer Alex Celeste at Embedded World, Celeste introduced the concept of static sentiment analysis, which combines sentiment analysis and static analysis.

What Is Static Sentiment Analysis?

Static sentiment analysis takes the concept of sentiment analysis and combines it with static analysis. Static sentiment analysis uses machine learning (a small-language model) to analyze code and determine developer intent.

In other words, static sentiment analysis could determine whether the code does what a developer meant for it to do.

As artificial intelligence and machine learning technologies advance, they can help automate the software development process by adding a new dimension to testing and save development teams time and effort.

More on Static Sentiment Analysis 

Explore how static sentiment analysis works, its benefits, and how static sentiment analysis complements static analysis best practices in our new eBook.

Challenges of Traditional Testing in Software Development

Traditional software testing isn’t enough in today’s complex digital landscape, especially with the introduction of AI and ML.

Manual testing and manual code reviews slow down the development cycle and introduce a higher risk of human error. Currently, teams using static analysis tools — like Perforce Helix QAC and Klocwork — are automating the process by detecting bugs, code vulnerabilities, and compliance issues early in development.

But while traditional techniques like static analysis perform well against “hard” criteria like syntax errors, buffer overflows, and quantifiable rules in coding standards, they can miss “soft” criteria like developer intent. That’s where static sentiment analysis comes in.

Developers may soon be able to bridge the gap between intent and implementation by taking a static sentiment analysis approach.

Back to top

How Does Static Sentiment Analysis Work?

Static sentiment analysis analyzes an abstract representation of code to determine if a test section is significantly different from a reference sample in the same code base. These differences could be changes in a developer’s style, code clarity, or misapplied design patterns.

A successful static sentiment analysis would not just detect the pattern of the structure — it would need to identify instances where the test section is sufficiently different from a reference sample and raise a flag.

To break it down further, static sentiment analysis determines the mathematical distance between the entropy of a test feature and a reference sample. The distance measures the similarity between features, and entropy evaluates the feature’s information. A significant increase in the distance between features indicates an unexpected change in style, which may require further investigation.

How Static Analysis and Machine Learning Level Up DevOps Workflows

The promise of static sentiment analysis allows developers to identify where developer intent went amiss in code and better fulfill the needs of customers and industry standards.

While static sentiment analysis is still in the research phase, static analysis is currently helping DevOps teams shift left and increase developer productivity.

Static code analyzers Helix QAC and Klocwork help reduce technical debt by:

  • Finding and fixing coding issues earlier
  • Improving overall software quality
  • Quickly inspecting millions of lines of source code (legacy and new code)
  • Enforcing coding standards compliance
  • Prioritizing risk and analysis results.

With the introduction of static sentiment analysis, DevOps teams could even further level up their workflows by also automatically checking for instances where developer intent may have been missed — greatly reducing the time and effort required for exhaustive functional testing.

In the meantime, there’s a lot you can do to level up now. See for yourself how Perforce Static Analysis helps accelerate development. Sign up for your free 7-day trial today.

About Perforce
The best run DevOps teams in the world choose Perforce. Perforce products are purpose-built to develop, build and maintain high-stakes applications. Companies can finally manage complexity, achieve speed without compromise, improve security and compliance, and run their DevOps toolchains with full integrity. With a global footprint spanning more than 80 countries and including over 75% of the Fortune 100, Perforce is trusted by the world’s leading brands to deliver solutions to even the toughest challenges. Accelerate technology delivery, with no shortcuts.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

OpenLogic 為 CentOS 6、7 和 8 提供長期支援服務 確保您的 CentOS EOL 部署持續安全無憂

從 CentOS 遷移需要時間與周密規劃。如果您在 End-of-Life 後仍需使用 CentOS,OpenLogic 可提供修補程式和專家支援,協助您保持安全並保護基礎架構。

延長遷移時間,確保安全合規

尚未準備好遷移?OpenLogic 的 CentOS LTS(長期支援)提供針對核心與基礎軟件的修補程式,專門修復 CVSS 分數 7 或以上的高嚴重性漏洞(CVE)。這些修補程式經過完整測試和數位簽名,可透過我們安全的私人儲存庫取得。

CentOS LTS 支援期限至少比社群版 EOL 多 5 年,讓您有足夠的時間規劃下一步,同時保持系統安全。

版本

OpenLogic LTS 支援期限

CentOS 6

支援至 2025 年

CentOS 7

支援至 2029 年

CentOS 8

支援至 2026 年

全天候 24/7 技術支援,來自經驗豐富的 Linux 專家

除了修補程式之外,是否需要更多協助?OpenLogic 提供 CentOS 技術支援,讓您直接與擁有至少 15 年企業 IT 經驗的 Linux 專家合作,快速解決問題。

我們提供全年無休(24/7/365)的支援服務,並保證服務等級協議(SLA)中明確的響應與解決時間。此外,我們不限支援請求次數或提交人數,確保您獲得充分協助。

提供公正建議,絕無附帶條件

我們的企業架構師(Enterprise Architects)可在技術支援範圍內,協助您探索 CentOS 替代方案與遷移路徑。我們專業的 Linux 團隊會回答您的疑問,並在您評估與規劃轉換至其他 Linux 發行版時,提供實用建議。

OpenLogic 不銷售軟件,也不與任何商業 Linux 廠商掛鉤,因此我們能根據您的實際需求,給出客觀建議,而不是推銷特定產品。

為什麼選擇 OpenLogic?

OpenLogic 擁有超過 20 年的經驗,專注於協助企業應對像 CentOS EOL 這樣的重要事件。我們的服務範圍不僅限於 CentOS,還涵蓋 400 多種開源技術,包括所有主要 Linux 發行版。我們價格透明,無設置費或隱藏費用,讓您安心合作。

關於 OpenLogic

OpenLogic 由 Perforce 提供完整的企業級支援和服務,專為在其基礎設施中使用開源軟件的公司企業而設計。我們支援超過 400 種開源技術,提供保證的服務水準協議(SLA),並可直接與經驗豐富的企業架構師溝通。透過我們的 24×7 工單支援、專業服務和培訓,OpenLogic 提供綜合且全面的開源支援解決方案。

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴,Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區,客戶來自各行各業,包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

Perforce’s Helix Core Now ISO 26262 Certified for Functional Safety in Automotive Development

Perforce matches functional safety with the software and design driven world of automotive today.

MINNEAPOLIS, OCTOBER 29, 2024 — Perforce Software, a global provider of enterprise DevOps solutions, today announced its version control platform Helix Core has achieved ISO 26262 Functional Safety Process Certification by internationally-accredited certification body TÜV SÜD. With this certification, Perforce ensures its platform meets the strict safety and reliability standards required for developing automotive systems and reinforces its commitment to supporting innovation within the automotive industry. Perforce Helix Core is the version control platform trusted by leading automotive OEMs and suppliers – as well as the world’s largest semiconductor firms, embedded systems developers, and top gaming and media studios – for limitless scalability, fine-grained security, and rapid file access from anywhere in the world. ISO 26262 is an international functional safety standard for the development of electrical and electronic systems, including hardware and software components, for road vehicles. By certifying its version control platform is ISO 26262 compliant, Perforce now makes this critical solution available to all organizations that need to prove compliance with the highest safety, quality, and reliability standards. “With the transition to software-defined vehicles and the rise of autonomy, automotive OEMs and suppliers are revolutionizing their development pipeline with modern tools that accelerate innovation, yet safety remains paramount,” said Brad Hart, CTO and VP of Product Management at Perforce. “Helix Core offers a modern alternative to legacy tools that can no longer meet the demands of today’s fast-paced software- and design-driven automotive development. For large, cross-functional, globally distributed teams, Helix Core is the only version control solution that can deliver the speed, scale, and security necessary to manage all digital assets, including binary code and large game engine/3D files.” Perforce’s 2024 State of Game Technology survey found that 50% of respondents are now using game engines outside of traditional game development, such as in the creation of digital twins of vehicles. These digital twins can enhance vehicle safety in many ways, from virtual crash tests to using simulated driving scenarios to more efficiently train Advanced Driver Assistance Systems (ADAS). With Helix Core serving as an essential foundation to effectively leverage this technology, achieving the ISO 26262 Functional Safety Process Certification allows Perforce to offer a platform that drives innovation while ensuring the highest level of automotive safety.

About Perforce
The best run DevOps teams in the world choose Perforce. Perforce products are purpose-built to develop, build and maintain high-stakes applications. Companies can finally manage complexity, achieve speed without compromise, improve security and compliance, and run their DevOps toolchains with full integrity. With a global footprint spanning more than 80 countries and including over 75% of the Fortune 100, Perforce is trusted by the world’s leading brands to deliver solutions to even the toughest challenges. Accelerate technology delivery, with no shortcuts.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Perforce Aims to Embed AI at Every Stage of the Testing Lifecycle from Creation to Maintenance

AUSTIN, Texas, October 15, 2024 —Perforce Software, the DevOps company for global teams requiring speed, quality, security and compliance at scale along the development lifecycle, announced its AI-driven strategy during the DevOps + Data Impact event. The strategy covers four AI-driven pillars across the testing lifecycle: test creation, execution, analysis and maintenance, across all main environments: web, mobile and packaged applications. The result would remove traditional testing barriers to help testing teams achieve new levels of agility, reliability, and breakthrough advancements.

The amount of talent in the testing space as well as the overall continued practice of manual testing — according to Forrester’s Developer Survey, 2023, 43% of testing is still done with manual practices — cannot keep pace with the quality and security needed in the testing space. To compound this, by 2028 IDC predicts that there will be over one billion new logical applications*.

“Test maintenance continues to be a huge burden for organizations and can lead to outdated tests and slower releases,” said Melinda-Carol Ballou, Research Director at IDC. “Building on earlier investments within the testing industry, we’ve seen a great uptick in AI and Machine Learning as key technologies that can greatly improve this area of development, including potential for increased efficiency, time and cost savings and business execution.”

Perforce’s vision for AI in software testing aims to democratize software testing by enabling testers of every skill level on every team. It will lead to simplified test creation, faster debugging, enhanced collaboration, and the elimination of test maintenance.

“What we aim to deliver is not just leveraging AI to augment and improve the way testers work today, but we are implementing AI testing that completely changes the way testing works within a business,” said Stephen Feloney, Vice President of Product Management at Perforce. “There are two core areas that we are revolutionizing in testing that we know teams will find immediate value in. First, is the reduction of the traditional tools and elimination of frameworks to make testing infinitely more flexible. Secondly, we want to create full automation of test maintenance, which continues to be a blocker to efficient testing and faster releases. Testers should focus on developing test cases instead of worrying about creating and maintaining automated scripts.”

This vision for continuous testing by Perforce will be comprised of four key pillars:

  1. AI-Driven Testing Creation: Eliminates the need for traditional testing frameworks and empowers every team member to contribute seamlessly, accelerating test creation timelines.
  2. AI-Driven Test Execution: AI autonomously adapts to real-time changes, ensuring resilience and consistency across all platforms without manual intervention.
  3. AI-Driven Test Analysis: Provides immediate insights into test failures, pinpointing the root cause to enable faster resolution and continuous optimization.
  4. AI-Driven Test Maintenance: Eliminates manual test maintenance by continuously adapting to UI, data, or logic changes, ensuring your testing suite is resilient and future-proof.

Perforce’s continuous testing suite offers AI currently with Test Data Pro, which provides test data generation powered by AI.

Source:*IDC, 1 Billion New Logical Applications: More Background, doc #US51953724, April 2024

Resources

About Perforce
The best run DevOps teams in the world choose Perforce. Perforce products are purpose-built to develop, build and maintain high-stakes applications. Companies can finally manage complexity, achieve speed without compromise, improve security and compliance, and run their DevOps toolchains with full integrity. With a global footprint spanning more than 80 countries and including over 75% of the Fortune 100, Perforce is trusted by the world’s leading brands to deliver solutions to even the toughest challenges. Accelerate technology delivery, with no shortcuts.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.