# packages

pkgId: f17a6cc4b4433fac2c85fdb09ed79d313c45485db30af818f2202010ba592aff
name: ctdy-backend
arch: noarch
version: 1.2.6
epoch: 0
release: 1.ky11
summary: ctdy platform for KylinOS
rpm_license: EULA, non OpenSouce, KylinSoft Inc All Rights Reserved.
rpm_vendor: KylinSoft
rpm_group: Unspecified
rpm_buildhost: localhost.localdomain
rpm_sourcerpm: ctdy-backend-1.2.6-1.ky11.src.rpm
rpm_packager: Kylin Linux
location_href: Packages/ctdy-backend-1.2.6-1.ky11.noarch.rpm
checksum_type: sha256
description:
  CTDY Integration Platform Backend Engine - ISO Building Core Module. It is dedicated to providing full lifecycle support capabilities for ISO images of the Kylin Advanced Server Operating System, with core functions including ISO image building, refined permission allocation, multi-version image comparison, and customized modification of image content. The module can stably generate compliant image files that conform to the ISO-9660 standard, and provides underlying technical support for the standardized production, management and iteration of operating system images.


pkgId: 2817a9308e2501d8fe348b78edb12b4cff1e2f70289929461089885ec5e02bf4
name: ctdy-guard
arch: x86_64
version: 2.0.4
epoch: 0
release: 2.ky11
summary: ctdy-guard platform for KylinOS
url: https://guard.kylinos.cn/
rpm_license: EULA, non OpenSouce, KylinSoft Inc All Rights Reserved.
rpm_vendor: KylinSoft
rpm_group: Unspecified
rpm_buildhost: kojibuilder102
rpm_sourcerpm: ctdy-guard-2.0.4-2.ky11.src.rpm
rpm_packager: Kylin Linux
location_href: Packages/ctdy-guard-2.0.4-2.ky11.x86_64.rpm
checksum_type: sha256
description:
  Kylin Guard System is a secure, compliant, and traceable software package lifecycle management platform developed by Kylin Software Co., Ltd., designed to safeguard the integrity, reliability, and regulatory compliance of software packages integrated into Kylin operating system series. As a core component of the domestic secure operating system ecosystem, it implements end-to-end control over software package introduction, storage, distribution, and retirement, ensuring "trusted sources, controllable processes, and verifiable history" for all software assets.
  Core Functions
  The system integrates comprehensive modules to cover the entire software package management lifecycle:
  Software Selection: Supports multi-form package import (source code packages, binary RPMs, Git repositories) with batch upload and security review capabilities. It enforces strict pre-introduction checks, including certificate verification, source validation, and compliance detection, ensuring only qualified packages enter the central repository.
  Central Repository Management: Serves as a centralized storage and retrieval hub for trusted software packages, recording detailed metadata such as name, version, license, source, update history, and security assessment reports. It supports quick search, filtering by vendor/product line, and real-time synchronization with open-source communities.
  Multi-Mode Ingestion: Enables flexible package ingestion through Gerrit (for code fixes/vulnerability patches), central repository (for unmodified upstream packages), commercial software (for vendor-provided binary packages), and file-based batch ingestion. Each mode includes specialized validation, pre-compilation, and Hook detection workflows.
  Product & Tag Management: Facilitates customized product management with support for product creation, modification, tag addition, and version control. It maintains product-architecture-tag mappings, ensuring consistent package distribution across product lines.
  Compliance & Security Detection (Hook Service): Executes 16+ automated detection items, including license blacklist/whitelist verification, binary file scanning, virus detection (via Qi'anxin tools), code quality analysis (SonarQube), security vulnerability scanning (Fortify), compatibility testing, and BCT rating assessment. It supports concurrent detection via Go coroutines and task queues for efficiency.
  Evaluation & Audit: Implements a two-tier review process (evaluation + audit) with role-based access control, ensuring all packages undergo human validation before final ingestion. It provides detailed audit trails for all review actions.
  Personal Center & Permission Management: Offers role-based access control (RBAC) with predefined roles (admin, developer, evaluator, auditor) and fine-grained permissions. Users can track their submitted tasks, view workflow status, and retry/revoke failed processes.
  Technical Architecture
  Architecture Pattern: Adopts B/S (Browser/Server) architecture with front-end and back-end separation.
  Front-End Stack: Built with Vue2, Element UI, Axios, Webpack, and ECharts, delivering a user-friendly, responsive interface accessible via mainstream browsers (Chrome, Firefox).
  Back-End Stack: Developed in Golang with Gin/Echo frameworks for routing, GORM for ORM operations, and PostgreSQL as the relational database (ensuring data consistency and transaction support).
  Integration Capabilities: Seamlessly interfaces with third-party systems including Gerrit (source code management), Koji (compilation), CVE platform (vulnerability tracking), ZenTao (task management), and Jenkins (CI/CD), enabling end-to-end workflow automation.
  Reliability Design: Incorporates fault detection, location, and recovery mechanisms, data redundancy (regular backups), overload control, and non-disruptive upgrade support to ensure 24/7 availability.
  Key Features & Value
  Compliance Assurance: Enforces open-source license compliance, patent checks, and regulatory requirements to mitigate legal and security risks.
  Traceability: Maintains comprehensive audit logs for all package lifecycle events (selection, ingestion, modification, retirement), supporting full traceability of software assets.
  Security Enhancement: Multi-layered security measures include digital signature verification, package integrity checks, virus scanning, and vulnerability detection, preventing malicious code or tampered packages from entering the ecosystem.
  Efficiency Optimization: Automates repetitive tasks (validation, compilation, detection) and supports batch operations, reducing manual effort and improving development workflow efficiency.
  Customization & Scalability: Designed to adapt to diverse product customization needs and scale with growing numbers of users (supports 3,000+ concurrent accesses) and packages.
  Application Scope
  Kylin Guard System is tailored for the R&D and operation of Kylin operating systems, including server, desktop, and custom editions. It is suitable for managing open-source, commercial, and self-developed software packages, ensuring the security, compliance, and quality of Kylin OS products for enterprise, government, and industrial users.
  All data processed by the system is internal to Kylin Software, with no external data collection or disclosure, ensuring privacy and data security.


pkgId: fc690279f0c30466464736dc9f1cc918b2bd346f454cd6ee31bfe73de96a62e8
name: koji
arch: noarch
version: 1.32.0
epoch: 0
release: 1.p16.ky11
summary: Build system tools
url: https://pagure.io/koji/
rpm_license: LGPLv2 and GPLv2+
rpm_vendor: KylinSoft
rpm_group: Unspecified
rpm_buildhost: kojibuilder102
rpm_sourcerpm: koji-1.32.0-1.p16.ky11.src.rpm
rpm_packager: Kylin Linux
location_href: Packages/koji-1.32.0-1.p16.ky11.noarch.rpm
checksum_type: sha256
description:
  Koji is a system for building and tracking RPMS.  The base package
  contains shared libraries and the command-line interface.


pkgId: a62994cffc134800d4298bfc23e76b2a0375cb6e2dd6628c1f9f94c8a0bd5813
name: python3-koji
arch: noarch
version: 1.32.0
epoch: 0
release: 1.p16.ky11
summary: Build system tools python library
url: https://pagure.io/koji/
rpm_license: LGPLv2 and GPLv2+
rpm_vendor: KylinSoft
rpm_group: Unspecified
rpm_buildhost: kojibuilder102
rpm_sourcerpm: koji-1.32.0-1.p16.ky11.src.rpm
rpm_packager: Kylin Linux
location_href: Packages/python3-koji-1.32.0-1.p16.ky11.noarch.rpm
checksum_type: sha256
description:
  Koji is a system for building and tracking RPMS.
  This subpackage provides python functions and libraries.


pkgId: 047b282ec7441b6a6934583af7b6e69ee3e13765a0ab7773886ec1b4e360530b
name: subscription-server
arch: x86_64
version: 1.0.0
epoch: 0
release: 2.p01.ky11
summary: A subscription server developed in Golang
url: https://subscription.kylinos.cn
rpm_license: non open source, The copyright belongs to KylinSoft Co.,Ltd.
rpm_vendor: KylinSoft
rpm_group: Unspecified
rpm_buildhost: kojibuilder102
rpm_sourcerpm: subscription-server-1.0.0-2.p01.ky11.src.rpm
rpm_packager: Kylin Linux
location_href: Packages/subscription-server-1.0.0-2.p01.ky11.x86_64.rpm
checksum_type: sha256
description:
  kylin-subscription is a subscription server developed using Golang. It provides service for managing subscriptions.


