{"id":101123,"date":"2021-08-30T10:22:49","date_gmt":"2021-08-30T08:22:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-14"},"modified":"2021-08-30T10:22:49","modified_gmt":"2021-08-30T08:22:49","slug":"reliz-yadra-linux-5-14","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-14","title":{"rendered":"Vyd\u00e1n\u00ed j\u00e1dra Linux 5.14","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 5.14. Mezi nejv\u00fdrazn\u011bj\u0161\u00ed zm\u011bny pat\u0159\u00ed: nov\u00e9 syst\u00e9mov\u00e9 vol\u00e1n\u00ed quotactl_fd() a memfd_secret(), odstran\u011bn\u00ed ovlada\u010d\u016f ide a raw, nov\u00fd \u0159adi\u010d priorit vstup\/v\u00fdstup pro cgroup, re\u017eim pl\u00e1nov\u00e1n\u00ed \u00faloh SCHED_CORE, infrastruktura pro vytv\u00e1\u0159en\u00ed zav\u00e1d\u011b\u010d\u016f ov\u011b\u0159en\u00fdch program\u016f BPF.      <\/p>\n<p>Nov\u00e1 verze obsahuje 15883 oprav od 2002 v\u00fdvoj\u00e1\u0159\u016f, velikost patche je 69 MB (zm\u011bny se dotkly 12580 soubor\u016f, p\u0159id\u00e1no 861501 \u0159\u00e1dk\u016f k\u00f3du, odstran\u011bno 321654 \u0159\u00e1dk\u016f). P\u0159ibli\u017en\u011b 47 % v\u0161ech zm\u011bn v 5.14 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, zhruba 14 % zm\u011bn souvis\u00ed s aktualizac\u00ed k\u00f3du specifick\u00e9ho pro hardwarov\u00e9 architektury, 13 % je spojeno s s\u00ed\u0165ov\u00fdm stekem, 3 % s souborov\u00fdmi syst\u00e9my a 3 % s vnit\u0159n\u00edmi subsyst\u00e9my j\u00e1dra.           <\/p>\n<p>Hlavn\u00ed novinky:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Pro cgroup byl implementov\u00e1n nov\u00fd kontroler prioritizace vstupu\/v\u00fdstupu \u2014 rq-qos, kter\u00fd m\u016f\u017ee \u0159\u00eddit prioritu zpracov\u00e1n\u00ed po\u017eadavk\u016f na blokov\u00e1 za\u0159\u00edzen\u00ed generovan\u00fdch \u00fa\u010dastn\u00edky ka\u017ed\u00e9 cgroup. Podpora nov\u00e9ho kontroleru priority byla p\u0159id\u00e1na do pl\u00e1nova\u010de vstupu\/v\u00fdstupu mq-deadline.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu ext4 byla zavedena nov\u00e1 ioctl p\u0159\u00edkaz EXT4_IOC_CHECKPOINT, kter\u00e1 povinn\u011b zapisuje na disk v\u0161echny \u010dekaj\u00edc\u00ed transakce z den\u00edku a s nimi spojen\u00e9 buffery, a tak\u00e9 p\u0159episuje oblast pou\u017e\u00edvanou den\u00edkem ve skladu. Zm\u011bna byla p\u0159ipravena v r\u00e1mci iniciativy na zabr\u00e1n\u011bn\u00ed \u00fanik\u016fm informac\u00ed ze souborov\u00fdch syst\u00e9m\u016f.\n<li class=\"l\"> V Btrfs byly provedeny optimalizace v\u00fdkonu: vylou\u010den\u00edm nadbyte\u010dn\u00e9ho zaznamen\u00e1v\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00fdch atribut\u016f p\u0159i vykon\u00e1v\u00e1n\u00ed fsync se v\u00fdkon intenzivn\u00edch operac\u00ed s roz\u0161\u00ed\u0159en\u00fdmi atributy zv\u00fd\u0161il a\u017e o 17 %. D\u00e1le bylo p\u0159i prov\u00e1d\u011bn\u00ed operac\u00ed o\u0159ez\u00e1v\u00e1n\u00ed, kter\u00e9 se net\u00fdkaj\u00ed extent\u016f, vypnuto prov\u00e1d\u011bn\u00ed \u00fapln\u00e9 synchronizace, co\u017e zkr\u00e1tilo dobu vykon\u00e1n\u00ed operace o 12 %. Do sysfs byla p\u0159id\u00e1na konfigurace pro omezen\u00ed propustnosti vstup\/v\u00fdstup p\u0159i kontrole FS. Byly p\u0159id\u00e1ny ioctl-vol\u00e1n\u00ed pro zru\u0161en\u00ed operac\u00ed zm\u011bny velikosti a odstran\u011bn\u00ed za\u0159\u00edzen\u00ed.\n<li class=\"l\"> V XFS byla p\u0159epracov\u00e1na implementace vyrovn\u00e1vac\u00edho cache, kter\u00e1 byla p\u0159evedena na alokaci pam\u011b\u0165ov\u00fdch str\u00e1nek v d\u00e1vkov\u00e9m re\u017eimu. Byla zv\u00fd\u0161ena \u00fa\u010dinnost pr\u00e1ce cache.\n<li class=\"l\"> Ve F2FS byla p\u0159id\u00e1na mo\u017enost provozu v re\u017eimu pouze pro \u010dten\u00ed a implementov\u00e1n re\u017eim ukl\u00e1d\u00e1n\u00ed do vyrovn\u00e1vac\u00ed pam\u011bti komprimovan\u00fdch blok\u016f (compress_cache) pro zlep\u0161en\u00ed v\u00fdkonu n\u00e1hodn\u00e9ho \u010dten\u00ed. Byla zaveden\u00e1 podpora komprese soubor\u016f odra\u017een\u00fdch do pam\u011bti pomoc\u00ed operace mmap(). Pro selektivn\u00ed vypnut\u00ed komprese soubor\u016f podle masky byla navr\u017eena nov\u00e1 mont\u00e1\u017en\u00ed volba nocompress.\n<li class=\"l\"> V ovlada\u010di exFAT byly provedeny \u00fapravy pro zlep\u0161en\u00ed kompatibility se skladovac\u00edmi za\u0159\u00edzen\u00edmi n\u011bkter\u00fdch digit\u00e1ln\u00edch kamer.\n<li class=\"l\"> Byl p\u0159id\u00e1n syst\u00e9mov\u00fd hovor quotactl_fd(), kter\u00fd umo\u017e\u0148uje spravovat kv\u00f3ty nikoli prost\u0159ednictv\u00edm souboru speci\u00e1ln\u00edho za\u0159\u00edzen\u00ed, ale prost\u0159ednictv\u00edm specifikace popisova\u010de souboru, kter\u00fd souvis\u00ed s file syst\u00e9mem, pro kter\u00fd se kv\u00f3ta pou\u017e\u00edv\u00e1.\n<li class=\"l\"> Z j\u00e1dra byly odstran\u011bny star\u00e9 ovlada\u010de pro blokov\u00e1 za\u0159\u00edzen\u00ed s rozhran\u00edm IDE, kter\u00e9 ji\u017e d\u00e1vno nahradila podsyst\u00e9m libata.\n<li class=\"l\"> Z j\u00e1dra byl odstran\u011bn ovlada\u010d \u201eraw\u201c, kter\u00fd poskytoval nebufferovan\u00fd p\u0159\u00edstup k blokov\u00fdm za\u0159\u00edzen\u00edm p\u0159es rozhran\u00ed \/dev\/raw. Tato funk\u010dnost byla dlouho implementov\u00e1na v aplikac\u00edch pomoc\u00ed p\u0159\u00edznaku O_DIRECT.                  <\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> V pl\u00e1nova\u010di \u00faloh byl zaveden nov\u00fd re\u017eim pl\u00e1nov\u00e1n\u00ed SCHED_CORE, kter\u00fd umo\u017e\u0148uje \u0159\u00edzen\u00ed toho, kter\u00e9 procesy mohou b\u00fdt prov\u00e1d\u011bny spole\u010dn\u011b na jednom j\u00e1dru CPU. Ka\u017ed\u00e9mu procesu m\u016f\u017ee b\u00fdt p\u0159id\u011blen cookie identifik\u00e1tor, kter\u00fd ur\u010duje oblast d\u016fv\u011bry mezi procesy (nap\u0159\u00edklad pat\u0159\u00edc\u00ed jednomu u\u017eivateli nebo kontejneru). P\u0159i organizaci prov\u00e1d\u011bn\u00ed k\u00f3du m\u016f\u017ee pl\u00e1nova\u010d zajistit sd\u00edlen\u00ed jednoho j\u00e1dra CPU pouze pro procesy spojen\u00e9 s jedn\u00edm vlastn\u00edkem, co\u017e m\u016f\u017ee b\u00fdt pou\u017eito k blokov\u00e1n\u00ed n\u011bkter\u00fdch \u00fatok\u016f t\u0159\u00eddy Spectre t\u00edm, \u017ee se zabr\u00e1n\u00ed prov\u00e1d\u011bn\u00ed d\u016fv\u011bryhodn\u00fdch a ned\u016fv\u011bryhodn\u00fdch \u00faloh ve stejn\u00e9m vl\u00e1knu SMT (Hyper Threading).\n<li class=\"l\"> Pro cgroup byla implementov\u00e1na podpora operace kill, kter\u00e1 umo\u017e\u0148uje hromadn\u011b ukon\u010dit v\u0161echny procesy p\u0159i\u0159azen\u00e9 k skupin\u011b (odeslat SIGKILL) zapisov\u00e1n\u00edm \u201e1\u201c do virtu\u00e1ln\u00edho souboru cgroup.kill.\n<li class=\"l\"> Byly roz\u0161\u00ed\u0159eny mo\u017enosti t\u00fdkaj\u00edc\u00ed se reakce na detekci roz\u0161t\u011bpen\u00fdch z\u00e1mk\u016f (\u201esplit lock\u201c), kter\u00e9 vznikaj\u00ed p\u0159i p\u0159\u00edstupu k nevyrovnan\u00fdm dat\u016fm v pam\u011bti, proto\u017ee p\u0159i prov\u00e1d\u011bn\u00ed atom\u00e1rn\u00ed instrukce data p\u0159ekro\u010d\u00ed dv\u011b cache linky CPU. Takov\u00e9 z\u00e1mky vedou k v\u00fdrazn\u00e9mu poklesu v\u00fdkonu, proto d\u0159\u00edve byla poskytov\u00e1na mo\u017enost vynucen\u00e9ho ukon\u010den\u00ed aplikace, kter\u00e1 z\u00e1mek zp\u016fsobila. V nov\u00e9m vyd\u00e1n\u00ed byl p\u0159id\u00e1n parametr p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku j\u00e1dra \u201esplit_lock_detect=ratelimit:N\u201c, kter\u00fd umo\u017e\u0148uje ur\u010dit syst\u00e9mov\u00fd limit intenzity operac\u00ed z\u00e1mk\u016f za sekundu, po jeho\u017e p\u0159ekro\u010den\u00ed bude jak\u00fdkoliv proces, kter\u00fd se stal zdrojem roz\u0161t\u011bpen\u00e9ho z\u00e1mku, m\u00edsto ukon\u010den\u00ed vynucen\u011b zastaven na 20 ms.\n<li class=\"l\"> V \u0159adi\u010di propustnosti cgroup CFS (CFS bandwidth controller), kter\u00fd ur\u010duje, kolik procesorov\u00e9ho \u010dasu m\u016f\u017ee b\u00fdt p\u0159id\u011bleno ka\u017ed\u00e9 cgroup, byla implementov\u00e1na mo\u017enost definice limit\u016f, omezen\u00fdch stanovenou dobou trv\u00e1n\u00ed, co\u017e umo\u017e\u0148uje l\u00e9pe regulovat z\u00e1t\u011b\u017ee citliv\u00e9 na zpo\u017ed\u011bn\u00ed. Nap\u0159\u00edklad nastaven\u00ed hodnoty cpu.cfs_quota_us na 50000 a cpu.cfs_period_us na 100000 umo\u017en\u00ed skupin\u011b proces\u016f tr\u00e1vit ka\u017ed\u00fdch 100 ms 50 ms procesorov\u00e9ho \u010dasu.\n<li class=\"l\">  Byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed infrastruktura pro vytv\u00e1\u0159en\u00ed zavad\u011b\u010d\u016f BPF program\u016f, kter\u00e1 v budoucnu umo\u017en\u00ed nahr\u00e1v\u00e1n\u00ed pouze BPF program\u016f podepsan\u00fdch d\u016fv\u011bryhodn\u00fdm digit\u00e1ln\u00edm kl\u00ed\u010dem.\n<li class=\"l\"> Byla p\u0159id\u00e1na nov\u00e1 futex operace FUTEX_LOCK_PI2, kter\u00e1 pou\u017e\u00edv\u00e1 monot\u00f3nn\u00ed \u010dasova\u010d pro v\u00fdpo\u010det \u010dasov\u00e9ho limitu, kter\u00fd zohled\u0148uje dobu str\u00e1venou syst\u00e9mem v re\u017eimu sp\u00e1nku.\n<li class=\"l\"> Pro architekturu RISC-V byla implementov\u00e1na podpora velk\u00fdch pam\u011b\u0165ov\u00fdch str\u00e1nek (Transparent Huge-Pages) a mo\u017enost vyu\u017eit\u00ed mechanismu KFENCE pro odhalov\u00e1n\u00ed chyb p\u0159i pr\u00e1ci s pam\u011bt\u00ed.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed madvise(), kter\u00e9 poskytuje prost\u0159edky pro optimalizaci spr\u00e1vy pam\u011bti procesu, byly p\u0159id\u00e1ny p\u0159\u00edznaky MADV_POPULATE_READ a MADV_POPULATE_WRITE pro generov\u00e1n\u00ed \u201epage fault\u201c ve v\u0161ech str\u00e1nk\u00e1ch pam\u011bti, kter\u00e9 jsou zobrazeny pro operace \u010dten\u00ed nebo z\u00e1pisu, ani\u017e by do\u0161lo k faktick\u00e9mu \u010dten\u00ed nebo z\u00e1pisu (prefault). Pou\u017eit\u00ed t\u011bchto p\u0159\u00edznak\u016f m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 pro sn\u00ed\u017een\u00ed latenc\u00ed b\u011bhem b\u011bhu programu d\u00edky proaktivn\u00edmu spu\u0161t\u011bn\u00ed zpracovatele \u201epage fault\u201c najednou pro v\u0161echny nep\u0159id\u011blen\u00e9 str\u00e1nky, ani\u017e by se \u010dekalo na skute\u010dn\u00e9 jejich pou\u017eit\u00ed.\n<li class=\"l\"> Do syst\u00e9mu unit-testov\u00e1n\u00ed kunit byla p\u0159id\u00e1na podpora spu\u0161t\u011bn\u00ed test\u016f v prost\u0159ed\u00ed QEMU.\n<li class=\"l\"> Byly p\u0159id\u00e1ny nov\u00e9 trasova\u010de: \u201eosnoise\u201c pro sledov\u00e1n\u00ed latenc\u00ed v aplikac\u00edch zp\u016fsoben\u00fdch zpracov\u00e1n\u00edm p\u0159eru\u0161en\u00ed, a \u201etimerlat\u201c pro zobrazen\u00ed podrobn\u00fdch informac\u00ed o latenc\u00edch p\u0159i probuzen\u00ed podle sign\u00e1lu \u010dasova\u010de.              <\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Bylo p\u0159id\u00e1no syst\u00e9mov\u00e9 vol\u00e1n\u00ed memfd_secret(), kter\u00e9 umo\u017e\u0148uje vytvo\u0159it priv\u00e1tn\u00ed pam\u011b\u0165ovou oblast v izolovan\u00e9m adresn\u00edm prostoru, viditelnou jen pro proces vlastn\u00edka, nezrcadlenou do jin\u00fdch proces\u016f a p\u0159\u00edmo nedostupnou j\u00e1dru.\n<li class=\"l\"> V syst\u00e9mu filtrov\u00e1n\u00ed syst\u00e9mov\u00fdch vol\u00e1n\u00ed seccomp, p\u0159i p\u0159enosu obslu\u017en\u00fdch routine do u\u017eivatelsk\u00e9ho prostoru, byla poskytnuta mo\u017enost pou\u017eit\u00ed jedn\u00e9 atomick\u00e9 operace k vytvo\u0159en\u00ed souborov\u00e9ho deskriptoru pro izolovan\u00fd \u00fakol a jeho vr\u00e1cen\u00ed p\u0159i zpracov\u00e1n\u00ed syst\u00e9mov\u00e9ho vol\u00e1n\u00ed. Navr\u017een\u00e1 operace vy\u0159e\u0161\u00ed probl\u00e9m s p\u0159eru\u0161en\u00edm obslu\u017en\u00e9 routine v u\u017eivatelsk\u00e9m prostoru p\u0159i p\u0159ijet\u00ed sign\u00e1lu.\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd mechanismus pro spr\u00e1vu omezen\u00ed zdroj\u016f ve jmenn\u00e9m prostoru identifik\u00e1tor\u016f u\u017eivatel\u016f, kter\u00fd v\u00e1\u017ee jednotliv\u00e9 po\u010d\u00edtadla rlimit na u\u017eivatele v \u201euser namespace\u201c. Tato zm\u011bna \u0159e\u0161\u00ed probl\u00e9m se sd\u00edlen\u00fdmi po\u010d\u00edtadly zdroj\u016f p\u0159i spou\u0161t\u011bn\u00ed proces\u016f jedn\u00edm u\u017eivatelem v r\u016fzn\u00fdch kontejnerech.\n<li class=\"l\"> V hypervisoru <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/abuzoustojchivye-vps\/\"   title=\"KVM\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4400\">KVM<\/a> Pro syst\u00e9my ARM64 byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed v hostitelsk\u00fdch syst\u00e9mech roz\u0161\u00ed\u0159en\u00ed MTE (MemTag, Memory Tagging Extension), kter\u00e9 umo\u017e\u0148uje p\u0159i\u0159adit tagy k ka\u017ed\u00e9 operaci alokace pam\u011bti a organizovat kontrolu spr\u00e1vnosti pou\u017e\u00edv\u00e1n\u00ed ukazatel\u016f, aby se zabr\u00e1nilo zneu\u017eit\u00ed zranitelnost\u00ed, kter\u00e9 jsou zp\u016fsobeny p\u0159\u00edstupem k ji\u017e uvoln\u011bn\u00fdm blok\u016fm pam\u011bti, p\u0159ete\u010den\u00edm bufferu, p\u0159\u00edstupem p\u0159ed inicializac\u00ed a pou\u017eit\u00edm mimo aktu\u00e1ln\u00ed kontext.\n<li class=\"l\"> N\u00e1stroje platformy ARM64 pro autentizaci ukazatel\u016f (Pointer Authentication) mohou nyn\u00ed b\u00fdt nastaveny samostatn\u011b pro j\u00e1dro a u\u017eivatelsk\u00fd prostor. Technologie umo\u017e\u0148uje vyu\u017eit\u00ed specializovan\u00fdch instrukc\u00ed ARM64 pro kontrolu adres n\u00e1vratu pomoc\u00ed digit\u00e1ln\u00edch podpis\u016f, kter\u00e9 jsou ulo\u017eeny v nevyu\u017eit\u00fdch horn\u00edch bitech samotn\u00e9ho ukazatele.\n<li class=\"l\"> Do User-mode Linux byla p\u0159id\u00e1na podpora pro pou\u017eit\u00ed ovlada\u010d\u016f k PCI za\u0159\u00edzen\u00edm s virtu\u00e1ln\u00ed sb\u011brnic\u00ed PCI, kter\u00e1 je realizov\u00e1na ovlada\u010dem PCI-over-virtio.\n<li class=\"l\"> Pro syst\u00e9my x86 byla p\u0159id\u00e1na podpora paravirtualizovan\u00e9ho za\u0159\u00edzen\u00ed virtio-iommu, kter\u00e9 umo\u017e\u0148uje odes\u00edlat IOMMU dotazy, jako je ATTACH, DETACH, MAP a UNMAP, p\u0159es transport virtio bez emulace pam\u011b\u0165ov\u00fdch str\u00e1nek.\n<li class=\"l\"> Pro CPU Intel, po\u010d\u00ednaje rodinou Skylake a kon\u010de Coffee Lake, je ve v\u00fdchoz\u00edm nastaven\u00ed zak\u00e1z\u00e1no pou\u017e\u00edv\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00ed Intel TSX (Transactional Synchronization Extensions), kter\u00e9 poskytuj\u00ed prost\u0159edky na zlep\u0161en\u00ed v\u00fdkonu v\u00edcetenvovan\u00fdch aplikac\u00ed d\u00edky dynamick\u00e9mu vylou\u010den\u00ed zbyte\u010dn\u00fdch synchroniza\u010dn\u00edch operac\u00ed. Roz\u0161\u00ed\u0159en\u00ed jsou zak\u00e1z\u00e1na kv\u016fli mo\u017enosti prov\u00e1d\u011bn\u00ed \u00fatok\u016f Zombieload, kter\u00e9 manipuluj\u00ed s \u00faniky informac\u00ed p\u0159es bo\u010dn\u00ed kan\u00e1ly, kter\u00e9 vznikaj\u00ed p\u0159i pr\u00e1ci mechanismu asynchronn\u00edho p\u0159eru\u0161en\u00ed operac\u00ed (TAA, TSX Asynchronous Abort).           <\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> Pokra\u010duje integrace roz\u0161\u00ed\u0159en\u00ed protokolu TCP MPTCP (MultiPath TCP) do j\u00e1dra pro organizaci TCP p\u0159ipojen\u00ed s doru\u010dov\u00e1n\u00edm paket\u016f sou\u010dasn\u011b n\u011bkolika r\u016fzn\u00fdmi trasami prost\u0159ednictv\u00edm r\u016fzn\u00fdch s\u00ed\u0165ov\u00fdch rozhran\u00ed, p\u0159ipojen\u00fdch k r\u016fzn\u00fdm. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/lir\/ipv4\/\"   title=\"IP adresy\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4456\">IP adresy<\/a>. V nov\u00e9m vyd\u00e1n\u00ed byla p\u0159id\u00e1na mo\u017enost nastavit vlastn\u00ed politiky hashov\u00e1n\u00ed provozu pro IPv4 a IPv6 (multipath hash policy), kter\u00e9 umo\u017e\u0148uj\u00ed z u\u017eivatelsk\u00e9ho prostoru definovat, kter\u00e9 z pol\u00ed v paketech, v\u010detn\u011b zano\u0159en\u00fdch, budou pou\u017eity p\u0159i v\u00fdpo\u010dtu hash, ur\u010duj\u00edc\u00edm v\u00fdb\u011br cesty pro paket.\n<li class=\"l\"> Do virtu\u00e1ln\u00edho transportu virtio byla p\u0159id\u00e1na podpora soket\u016f SOCK_SEQPACKET (uspo\u0159\u00e1dan\u00fd a spolehliv\u00fd p\u0159enos datagram\u016f).\n<li class=\"l\"> Byly roz\u0161\u00ed\u0159eny mo\u017enosti mechanismu soket\u016f SO_REUSEPORT, kter\u00fd umo\u017e\u0148uje n\u011bkolika odposlouch\u00e1vaj\u00edc\u00edm soket\u016fm p\u0159ipojit se k jednomu portu pro p\u0159ij\u00edm\u00e1n\u00ed spojen\u00ed s rozd\u011blen\u00edm p\u0159ich\u00e1zej\u00edc\u00edch dotaz\u016f mezi v\u0161emi p\u0159ipojen\u00fdmi sokety p\u0159es SO_REUSEPORT, co\u017e usnad\u0148uje vytv\u00e1\u0159en\u00ed v\u00edcetenvovan\u00fdch serverov\u00fdch aplikac\u00ed. V nov\u00e9 verzi byly p\u0159id\u00e1ny prost\u0159edky pro p\u0159ed\u00e1n\u00ed \u0159\u00edzen\u00ed jin\u00e9mu soketu v p\u0159\u00edpad\u011b selh\u00e1n\u00ed p\u0159i zpracov\u00e1n\u00ed dotazu p\u016fvodn\u011b vybran\u00fdm soketem (\u0159e\u0161\u00ed probl\u00e9m ztr\u00e1ty jednotliv\u00fdch spojen\u00ed p\u0159i restartov\u00e1n\u00ed slu\u017eeb).                              <\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> V ovlada\u010di amdgpu byla implementov\u00e1na podpora nov\u00fdch s\u00e9ri\u00ed GPU AMD Radeon RX 6000, vyv\u00edjen\u00fdch pod k\u00f3dov\u00fdmi n\u00e1zvy \u201eBeige Goby\u201c (Navi 24) a \u201eYellow Carp\u201c, a tak\u00e9 byla vylep\u0161ena podpora GPU Aldebaran (gfx90a) a APU Van Gogh. Byla p\u0159id\u00e1na mo\u017enost sou\u010dasn\u00e9ho pou\u017eit\u00ed v\u00edce panel\u016f eDP. Pro APU Renoir byla implementov\u00e1na podpora pr\u00e1ce se \u0161ifrovan\u00fdmi pufry ve videopam\u011bti (TMZ, Trusted Memory Zone). Byla p\u0159id\u00e1na podpora hork\u00e9ho odpojen\u00ed grafick\u00fdch karet (hot-unplug). Pro GPU Radeon RX 6000 (Navi 2x) a star\u0161\u00ed GPU AMD byla ve v\u00fdchoz\u00edm nastaven\u00ed aktivov\u00e1na podpora mechanismu \u00faspory energie ASPM (Active State Power Management), kter\u00fd byl d\u0159\u00edve aktivov\u00e1n pouze pro GPU Navi 1x, Vega a Polaris.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora sd\u00edlen\u00e9 virtu\u00e1ln\u00ed pam\u011bti (SVM, shared virtual memory) na b\u00e1zi pod syst\u00e9mu HMM (Heterogeneous memory management) pro \u010dipy AMD, co\u017e umo\u017e\u0148uje pou\u017eit\u00ed za\u0159\u00edzen\u00ed s vlastn\u00edmi bloky \u0159\u00edzen\u00ed pam\u011bti (MMU, memory management unit), kter\u00e9 mohou p\u0159istupovat k hlavn\u00ed pam\u011bti. Pomoc\u00ed HMM je tak\u00e9 mo\u017en\u00e9 uspo\u0159\u00e1dat spole\u010dn\u00fd adresn\u00ed prostor mezi GPU a CPU, ve kter\u00e9m m\u00e1 GPU p\u0159\u00edstup k hlavn\u00ed pam\u011bti procesu.\n<li class=\"l\"> Byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed podpora technologie AMD Smart Shift, kter\u00e1 dynamicky m\u011bn\u00ed parametry spot\u0159eby energie CPU a GPU na notebooc\u00edch s \u010dipsetem a grafickou kartou AMD, aby se zv\u00fd\u0161ila v\u00fdkonnost p\u0159i hran\u00ed her, \u00faprav\u011b videa a 3D renderingu.\n<li class=\"l\"> V ovlada\u010di i915 pro grafick\u00e9 karty Intel byla povolena podpora \u010dip\u016f Intel Alderlake P.\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d drm\/hyperv pro virtu\u00e1ln\u00ed grafick\u00fd adapt\u00e9r Hyper-V.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora pro po\u010d\u00edta\u010d typu All-in-One Raspberry Pi 400.\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d dell-wmi-privacy pro podporu hardwarov\u00fdch vyp\u00edna\u010d\u016f kamery a mikrofonu dod\u00e1van\u00fdch v notebooc\u00edch Dell.\n<li class=\"l\"> Pro notebooc\u00edch Lenovo byl p\u0159id\u00e1n WMI rozhran\u00ed pro \u00fapravu nastaven\u00ed BIOSu p\u0159es sysfs \/sys\/class\/firmware-attributes\/.\n<li class=\"l\"> Byla roz\u0161\u00ed\u0159ena podpora za\u0159\u00edzen\u00ed s rozhran\u00edm USB4.\n<li class=\"l\">  Byla p\u0159id\u00e1na podpora pro zvukov\u00e9 karty a codec AmLogic SM1 TOACODEC, Intel AlderLake-M, NXP i.MX8, NXP TFA1, TDF9897, Rockchip RK817, Qualcomm Quinary MI2 a Texas Instruments TAS2505. Byla vylep\u0161ena podpora zvuku na notebooc\u00edch HP a ASUS. Byly p\u0159id\u00e1ny patche pro sn\u00ed\u017een\u00ed latenc\u00ed p\u0159ed za\u010d\u00e1tkem p\u0159ehr\u00e1v\u00e1n\u00ed zvuku na za\u0159\u00edzen\u00edch s rozhran\u00edm USB.        <\/ul>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55702\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101123","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.14.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-14\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.14 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.14.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-14\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-08-30T08:22:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-08-30T08:22:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed j\u00e1dra Linux 5.14 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil vyd\u00e1n\u00ed j\u00e1dra Linux 5.14.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-14","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.14 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.14.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-14","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-30T08:22:49+00:00","article:modified_time":"2021-08-30T08:22:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101123","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-30 09:02:19","updated":"2022-09-28 11:27:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=101123"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101123\/revisions"}],"predecessor-version":[{"id":164334,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101123\/revisions\/164334"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=101123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=101123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=101123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}