{"id":102190,"date":"2021-11-02T21:36:39","date_gmt":"2021-11-02T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-15"},"modified":"2021-11-02T21:36:39","modified_gmt":"2021-11-02T19:36:39","slug":"reliz-yadra-linux-5-15","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-15","title":{"rendered":"Vyd\u00e1n\u00ed j\u00e1dra Linux 5.15","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil vyd\u00e1n\u00ed j\u00e1dra Linux 5.15. Mezi nejv\u00fdznamn\u011bj\u0161\u00ed zm\u011bny pat\u0159\u00ed: nov\u00fd ovlada\u010d NTFS s podporou z\u00e1pisu, modul ksmbd implementuj\u00edc\u00ed SMB server, subsyst\u00e9m DAMON pro monitoring p\u0159\u00edstupu k pam\u011bti, primitiva z\u00e1mk\u016f pro re\u00e1ln\u00fd \u010das, podpora fs-verity v Btrfs, syst\u00e9mov\u00fd vol\u00e1n\u00ed process_mrelease pro reakci na nedostatek pam\u011bti a modul vzd\u00e1len\u00e9ho ov\u011b\u0159en\u00ed dm-ima.        <\/p>\n<p>Do nov\u00e9 verze bylo zapracov\u00e1no 13499 oprav od 1888 v\u00fdvoj\u00e1\u0159\u016f, velikost patche \u2014 42 MB (zm\u011bny se dotkly 10895 soubor\u016f, p\u0159id\u00e1no 632522 \u0159\u00e1dk\u016f k\u00f3du, odstran\u011bno 299966 \u0159\u00e1dk\u016f). P\u0159ibli\u017en\u011b 45 % v\u0161ech zm\u011bn uveden\u00fdch v 5.15 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, asi 14 % zm\u011bn souvis\u00ed s aktualizac\u00ed k\u00f3du specifick\u00e9ho pro hardwarov\u00e9 architektury, 14 % se t\u00fdk\u00e1 s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku, 6 % \u2014 souborov\u00fdch syst\u00e9m\u016f a 3 % s vnit\u0159n\u00edmi subsyst\u00e9my j\u00e1dra.      <\/p>\n<p>Hlavn\u00ed novinky:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Do j\u00e1dra byla p\u0159ijata nov\u00e1 implementace souborov\u00e9ho syst\u00e9mu NTFS, kterou otev\u0159ela spole\u010dnost Paragon Software. Nov\u00fd ovlada\u010d m\u016f\u017ee pracovat v re\u017eimu z\u00e1pisu a podporuje v\u0161echny mo\u017enosti aktu\u00e1ln\u00ed verze NTFS 3.1, v\u010detn\u011b roz\u0161\u00ed\u0159en\u00fdch atribut\u016f soubor\u016f, seznam\u016f p\u0159\u00edstupu (ACL), re\u017eimu komprese dat, efektivn\u00ed pr\u00e1ce s mezerami v souborech (sparse) a obnovov\u00e1n\u00ed integrity po selh\u00e1n\u00ed pomoc\u00ed protokolovan\u00fdch zm\u011bn.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu Btrfs byla implementov\u00e1na podpora mechanismu fs-verity, kter\u00fd se pou\u017e\u00edv\u00e1 pro transparentn\u00ed kontrolu integrity a autenticity jednotliv\u00fdch soubor\u016f pomoc\u00ed kryptografick\u00fdch hash\u016f nebo kl\u00ed\u010d\u016f asociovan\u00fdch se soubory, kter\u00e9 jsou ulo\u017eeny v oblasti metadat. D\u0159\u00edve byl fs-verity dostupn\u00fd pouze pro FS Ext4 a F2fs.\n<p>V Btrfs byla tak\u00e9 p\u0159id\u00e1na podpora mapov\u00e1n\u00ed identifik\u00e1tor\u016f u\u017eivatel\u016f pro p\u0159ipojen\u00e9 souborov\u00e9 syst\u00e9my (d\u0159\u00edve podporov\u00e1no pro FS FAT, ext4 a XFS). Tato funkce umo\u017e\u0148uje p\u0159i\u0159adit soubory konkr\u00e9tn\u00edho u\u017eivatele na p\u0159ipojen\u00e9 ciz\u00ed parti jako jin\u00e9mu u\u017eivateli v aktu\u00e1ln\u00edm syst\u00e9mu.   <\/p>\n<p>Mezi dal\u0161\u00edmi zm\u011bnami v Btrfs: zrychlen\u00ed p\u0159id\u00e1v\u00e1n\u00ed kl\u00ed\u010d\u016f do indexu adres\u00e1\u0159e za \u00fa\u010delem zv\u00fd\u0161en\u00ed v\u00fdkonu p\u0159i vytv\u00e1\u0159en\u00ed soubor\u016f; mo\u017enost provozu raid0 s jedn\u00edm za\u0159\u00edzen\u00edm a raid10 se dv\u011bma (nap\u0159\u00edklad b\u011bhem rekonfigurace pole); volba \u201erescue=ibadroots\u201c pro ignorov\u00e1n\u00ed nespr\u00e1vn\u00e9ho stromu extent\u016f; zrychlen\u00ed operace \u201esend\u201c; sn\u00ed\u017een\u00ed konflikt\u016f z\u00e1mk\u016f b\u011bhem operac\u00ed p\u0159ejmenov\u00e1n\u00ed; mo\u017enost pou\u017eit\u00ed sektor\u016f 4K na syst\u00e9mech s velikost\u00ed str\u00e1nky pam\u011bti 64K.        <\/p>\n<li class=\"l\"> Ve XFS byla stabilizov\u00e1na mo\u017enost pou\u017eit\u00ed v FS dat po roce 2038. Byla implementov\u00e1na funkce odlo\u017een\u00e9 deaktivace inode a podpora odlo\u017een\u00e9ho nastavov\u00e1n\u00ed a maz\u00e1n\u00ed atribut\u016f soubor\u016f. S c\u00edlem vylou\u010dit probl\u00e9my byla odstran\u011bna mo\u017enost vyp\u00edn\u00e1n\u00ed diskov\u00fdch kv\u00f3t pro ji\u017e p\u0159ipojen\u00e9 odd\u00edly (kv\u00f3ty lze vynutit, ale souvisej\u00edc\u00ed po\u010d\u00edt\u00e1n\u00ed bude pokra\u010dovat, proto pro pln\u00e9 vypnut\u00ed je t\u0159eba op\u011btovn\u00e9 p\u0159ipojen\u00ed).\n<li class=\"l\"> V EXT4 byla provedena pr\u00e1ce na zv\u00fd\u0161en\u00ed v\u00fdkonu z\u00e1pisu delalloc-buffer\u016f a zpracov\u00e1n\u00ed osi\u0159el\u00fdch (orphan) soubor\u016f, kter\u00e9 st\u00e1le existuj\u00ed, proto\u017ee z\u016fst\u00e1vaj\u00ed otev\u0159en\u00e9, ale nemaj\u00ed vazbu na adres\u00e1\u0159. Zpracov\u00e1n\u00ed operac\u00ed discard bylo vyjmuto z jbd2-vl\u00e1kna kthread, aby se vylou\u010dily blokace operac\u00ed s metadaty.\n<li class=\"l\"> Ve F2FS byla p\u0159id\u00e1na volba \u201ediscard_unit=block|segment|section\u201c pro p\u0159i\u0159azen\u00ed operac\u00ed discard (ozna\u010den\u00ed uvoln\u011bn\u00fdch blok\u016f, kter\u00e9 ji\u017e fyzicky nemus\u00ed b\u00fdt uchov\u00e1v\u00e1ny) k vyrovn\u00e1n\u00ed podle bloku, sektoru, segmentu nebo sekce. Byla p\u0159id\u00e1na podpora sledov\u00e1n\u00ed zm\u011bn latenc\u00ed p\u0159i vstupu\/v\u00fdstupu.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu EROFS (Extendable Read-Only File System) byla p\u0159id\u00e1na podpora p\u0159\u00edm\u00e9ho vstupu\/v\u00fdstupu pro soubory ulo\u017een\u00e9 bez komprese, stejn\u011b jako podpora fiemap.\n<li class=\"l\"> V OverlayFS byla implementov\u00e1na spr\u00e1vn\u00e1 spr\u00e1va p\u0159\u00edznak\u016f montov\u00e1n\u00ed \u201eimmutable\u201c, \u201eappend-only\u201c, \u201esync\u201c a \u201enoatime\u201c.\n<li class=\"l\"> V NFS bylo zlep\u0161eno zpracov\u00e1n\u00ed situac\u00ed, kdy NFS-server p\u0159estal reagovat na po\u017eadavky. Byla p\u0159id\u00e1na mo\u017enost p\u0159ipojen\u00ed z ji\u017e pou\u017e\u00edvan\u00e9ho <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-los-angeles\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3763\">serveru<\/a>, ale dostupn\u00e9ho p\u0159es jinou s\u00ed\u0165ovou adresu.\n<li class=\"l\"> Bylo zah\u00e1jen\u00e9 p\u0159\u00edpravy na p\u0159eps\u00e1n\u00ed subsyst\u00e9mu FSCACHE.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora EFI odd\u00edl\u016f s nestandardn\u00edm um\u00edst\u011bn\u00edm tabulek GPT.\n<li class=\"l\"> Ve mechanismu fanotify byl implementov\u00e1n nov\u00fd p\u0159\u00edznak FAN_REPORT_PIDFD, kter\u00fd zp\u016fsobuje, \u017ee pidfd je zahrnut mezi vracen\u00e9 metadata. Pidfd pom\u00e1h\u00e1 \u0159e\u0161it situace opakovan\u00e9ho pou\u017eit\u00ed PID pro p\u0159esn\u011bj\u0161\u00ed identifikaci proces\u016f, kter\u00e9 se pokou\u0161ej\u00ed o p\u0159\u00edstup k sledovan\u00fdm soubor\u016fm (pidfd je spojen s konkr\u00e9tn\u00edm procesem a nem\u011bn\u00ed se, zat\u00edmco PID m\u016f\u017ee b\u00fdt p\u0159i\u0159azen jin\u00e9mu procesu po ukon\u010den\u00ed aktu\u00e1ln\u00edho procesu spojen\u00e9ho s t\u00edmto PID).\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed move_mount() byla p\u0159id\u00e1na mo\u017enost p\u0159id\u00e1vat body p\u0159ipojen\u00ed do existuj\u00edc\u00edch sd\u00edlen\u00fdch skupin, co\u017e vy\u0159e\u0161ilo probl\u00e9my s uchov\u00e1v\u00e1n\u00edm a obnovov\u00e1n\u00edm stavu proces\u016f v n\u00e1stroji CRIU v p\u0159\u00edpad\u011b n\u011bkolika mont\u00e1\u017en\u00edch prostor\u016f sd\u00edlen\u00fdch mezi izolovan\u00fdmi kontejnery.\n<li class=\"l\"> Byla p\u0159id\u00e1na ochrana proti skryt\u00fdm podm\u00ednk\u00e1m z\u00e1vodu, kter\u00e9 mohly potenci\u00e1ln\u011b v\u00e9st k po\u0161kozen\u00ed soubor\u016f b\u011bhem \u010dten\u00ed z cache p\u0159i zpracov\u00e1n\u00ed mezer ve souboru.\n<li class=\"l\"> Byla ukon\u010dena podpora povinn\u00fdch (mandatory) z\u00e1mk\u016f soubor\u016f, kter\u00e9 byly implementov\u00e1ny prost\u0159ednictv\u00edm syst\u00e9mov\u00fdch vol\u00e1n\u00ed blokuj\u00edc\u00edch, je\u017e vedly ke zm\u011bn\u011b souboru. Kv\u016fli mo\u017en\u00fdm podm\u00ednk\u00e1m z\u00e1vodu byly tyto z\u00e1mky pova\u017eov\u00e1ny za nespolehliv\u00e9 a ji\u017e p\u0159ed mnoha lety byly prohl\u00e1\u0161eny za zastaral\u00e9.\n<li class=\"l\"> Byl odstran\u011bn subsyst\u00e9m LightNVM, kter\u00fd umo\u017e\u0148oval p\u0159\u00edm\u00fd p\u0159\u00edstup k SSD disku, obch\u00e1zej\u00edc\u00ed vrstvu emulace. LightNVM ztratil smysl po vzniku standard\u016f NVMe, kter\u00e9 zahrnuj\u00ed mo\u017enost z\u00f3nov\u00e1n\u00ed (ZNS, Zoned Namespace).                      <\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Byl implementov\u00e1n subsyst\u00e9m DAMON (Data Access MONitor), kter\u00fd umo\u017e\u0148uje sledovat aktivitu spojenou s p\u0159\u00edstupem k dat\u016fm v opera\u010dn\u00ed pam\u011bti v\u00e1zanou na zvolen\u00fd proces b\u011b\u017e\u00edc\u00ed ve space u\u017eivatele. Tento subsyst\u00e9m umo\u017e\u0148uje analyzovat, ke kter\u00fdm oblastem pam\u011bti proces p\u0159istupoval po celou dobu sv\u00e9 \u010dinnosti, a kter\u00e9 oblasti pam\u011bti z\u016fstaly nevyu\u017eit\u00e9. Mezi vlastnosti DAMON pat\u0159\u00ed n\u00edzk\u00e1 z\u00e1t\u011b\u017e CPU, mal\u00e1 spot\u0159eba pam\u011bti, vysok\u00e1 p\u0159esnost a p\u0159edv\u00eddateln\u00e9 st\u00e1l\u00e9 re\u017eijn\u00ed n\u00e1klady, kter\u00e9 nez\u00e1vis\u00ed na velikosti. Tento subsyst\u00e9m m\u016f\u017ee b\u00fdt pou\u017e\u00edv\u00e1n jak j\u00e1drem pro optimalizaci spr\u00e1vy pam\u011bti, tak n\u00e1stroji ve space u\u017eivatele pro pochopen\u00ed toho, co dan\u00fd proces d\u011bl\u00e1, a pro optimalizaci vyu\u017e\u00edv\u00e1n\u00ed pam\u011bti, nap\u0159\u00edklad uvoln\u011bn\u00ed nadbyte\u010dn\u00e9 pam\u011bti syst\u00e9mu.\n<li class=\"l\"> Byl implementov\u00e1n syst\u00e9mov\u00fd hovor process_mrelease, kter\u00fd umo\u017e\u0148uje zrychlit proces uvol\u0148ov\u00e1n\u00ed pam\u011bti procesu, kter\u00fd kon\u010d\u00ed sv\u016fj b\u011bh. Za norm\u00e1ln\u00edch podm\u00ednek je uvoln\u011bn\u00ed prost\u0159edk\u016f a dokon\u010den\u00ed procesu prov\u00e1d\u011bno nikoli okam\u017eit\u011b a z r\u016fzn\u00fdch d\u016fvod\u016f m\u016f\u017ee b\u00fdt zpo\u017ed\u011bno, co\u017e br\u00e1n\u00ed spr\u00e1vn\u00e9mu fungov\u00e1n\u00ed syst\u00e9m\u016f \u010dasn\u00e9ho reak\u010dn\u00edho z\u00e1sahu na nedostatek pam\u011bti, jako jsou oomd (poskytov\u00e1no v systemd) a lmkd (pou\u017e\u00edvan\u00e9 v syst\u00e9mu Android). Pomoc\u00ed vol\u00e1n\u00ed process_mrelease mohou tyto syst\u00e9my p\u0159edv\u00eddateln\u011bji zah\u00e1jit navracen\u00ed pam\u011bti od n\u00e1siln\u011b ukon\u010dovan\u00fdch proces\u016f.\n<li class=\"l\"> Z v\u011btve j\u00e1dra PREEMPT_RT, ve kter\u00e9 se vyv\u00edj\u00ed podpora pro pr\u00e1ci v re\u00e1ln\u00e9m \u010dase, byly p\u0159eneseny varianty primitiv pro organizaci z\u00e1mk\u016f mutex, ww_mutex, rw_semaphore, spinlock a rwlock, zalo\u017een\u00e9 na subsyst\u00e9mu RT-Mutex. Do SLUB slab allocatoru byly p\u0159id\u00e1ny zm\u011bny, kter\u00e9 zlep\u0161uj\u00ed fungov\u00e1n\u00ed v re\u017eimu PREEMPT_RT a sni\u017euj\u00ed vliv na p\u0159eru\u0161en\u00ed.\n<li class=\"l\"> Do cgroup byla p\u0159id\u00e1na podpora atributu pl\u00e1nova\u010de \u00faloh SCHED_IDLE, kter\u00fd umo\u017e\u0148uje vybavit t\u00edmto ozna\u010den\u00edm v\u0161echny procesy skupiny, kter\u00e9 pat\u0159\u00ed do ur\u010dit\u00e9 cgroup. Tedy tyto procesy budou spu\u0161t\u011bny pouze tehdy, kdy\u017e syst\u00e9m nem\u00e1 \u017e\u00e1dn\u00e9 jin\u00e9 \u00falohy \u010dekaj\u00edc\u00ed na proveden\u00ed. Na rozd\u00edl od nastaven\u00ed atributu SCHED_IDLE pro ka\u017ed\u00fd proces jednotliv\u011b, p\u0159i p\u0159i\u0159azen\u00ed SCHED_IDLE k cgroup se p\u0159i v\u00fdb\u011bru \u00falohy k proveden\u00ed zohled\u0148uje relativn\u00ed v\u00e1ha \u00faloh uvnit\u0159 skupiny.\n<li class=\"l\"> Mechanismus sledov\u00e1n\u00ed vyu\u017e\u00edv\u00e1n\u00ed pam\u011bti v cgroup byl roz\u0161\u00ed\u0159en o mo\u017enost sledov\u00e1n\u00ed dal\u0161\u00edch struktur dat j\u00e1dra, v\u010detn\u011b t\u011bch, kter\u00e9 vznikaj\u00ed pro polling, zpracov\u00e1n\u00ed sign\u00e1l\u016f a prostor\u016f n\u00e1zv\u016f.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora asymetrick\u00e9ho pl\u00e1nov\u00e1n\u00ed p\u0159i\u0159azov\u00e1n\u00ed \u00faloh k procesorov\u00fdm j\u00e1dr\u016fm na architektur\u00e1ch, kde n\u011bkter\u00e9 CPU umo\u017e\u0148uj\u00ed prov\u00e1d\u011bn\u00ed 32bitov\u00fdch \u00faloh, zat\u00edmco n\u011bkter\u00e9 funguj\u00ed pouze v 64bitov\u00e9m re\u017eimu (nap\u0159\u00edklad ARM). Nov\u00fd re\u017eim umo\u017e\u0148uje p\u0159i pl\u00e1nov\u00e1n\u00ed prov\u00e1d\u011bn\u00ed 32bitov\u00fdch \u00faloh zohlednit pouze CPU, kter\u00e9 podporuj\u00ed 32bitov\u00e9 \u00falohy.\n<li class=\"l\"> V rozhran\u00ed asynchronn\u00edho vstupu\/v\u00fdstupu io_uring byla p\u0159id\u00e1na podpora pro otev\u00edr\u00e1n\u00ed soubor\u016f p\u0159\u00edmo v indexov\u00e9 tabulce fixed-file, ani\u017e by bylo pot\u0159eba pou\u017e\u00edvat souborov\u00fd deskriptor, co\u017e umo\u017e\u0148uje v\u00fdrazn\u011b urychlit n\u011bkter\u00e9 typy operac\u00ed, av\u0161ak stoj\u00ed to v rozporu s tradi\u010dn\u00edm unixov\u00fdm procesem pou\u017e\u00edv\u00e1n\u00ed souborov\u00fdch deskriptor\u016f pro otev\u00edr\u00e1n\u00ed soubor\u016f.\n<p>V io_uring pro subsyst\u00e9m BIO (Block I\/O Layer) byl uveden nov\u00fd mechanismus recyklace (\u201eBIO recycling\u201c), kter\u00fd sni\u017euje re\u017eijn\u00ed n\u00e1klady p\u0159i spr\u00e1v\u011b intern\u00ed pam\u011bti a zhruba o 10 % zvy\u0161uje po\u010det zpracov\u00e1van\u00fdch operac\u00ed vstupu\/v\u00fdstupu za sekundu. V io_uring byla tak\u00e9 p\u0159id\u00e1na podpora syst\u00e9mov\u00fdch vol\u00e1n\u00ed mkdirat(), symlinkat() a linkat().    <\/p>\n<li class=\"l\"> Pro BPF programy byla implementov\u00e1na mo\u017enost po\u017eadovat a zpracov\u00e1vat ud\u00e1losti \u010dasova\u010de. Byl p\u0159id\u00e1n iter\u00e1tor pro UNIX sokety a implementov\u00e1na mo\u017enost z\u00edsk\u00e1vat a nastavovat mo\u017enosti soket\u016f pro setsockopt. Do BTF dumpovac\u00edho programu byla p\u0159id\u00e1na podpora typovan\u00fdch dat.\n<li class=\"l\"> Na NUMA syst\u00e9mech s r\u016fzn\u00fdmi typy pam\u011bti, kter\u00e9 se li\u0161\u00ed v\u00fdkonem, p\u0159i vy\u010derp\u00e1n\u00ed voln\u00e9ho prostoru byl realizov\u00e1n p\u0159esun vyhazovan\u00fdch str\u00e1nek pam\u011bti z dynamick\u00e9 pam\u011bti (DRAM) do pomalej\u0161\u00ed trval\u00e9 pam\u011bti (Persistent Memory) m\u00edsto jejich vymaz\u00e1n\u00ed. Testy uk\u00e1zaly, \u017ee tato taktika zpravidla zlep\u0161uje v\u00fdkon na takov\u00fdch syst\u00e9mech. Pro NUMA byla tak\u00e9 implementov\u00e1na mo\u017enost alokace str\u00e1nek pam\u011bti pro proces z vybran\u00e9ho souboru NUMA uzl\u016f.\n<li class=\"l\"> Pro architekturu ARC byla zavedena podpora t\u0159\u00ed- a \u010dty\u0159\u00farov\u0148ov\u00fdch tabulek str\u00e1nek pam\u011bti, co\u017e v budoucnu umo\u017en\u00ed implementaci podpory 64bitov\u00fdch procesor\u016f ARC.\n<li class=\"l\"> Pro architekturu s390 byla zavedena mo\u017enost aplikace mechanismu KFENCE pro detekci chyb p\u0159i pr\u00e1ci s pam\u011bt\u00ed a tak\u00e9 byla p\u0159id\u00e1na podpora detektoru z\u00e1vodn\u00edch stav\u016f KCSAN.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora pro indexov\u00e1n\u00ed seznamu zpr\u00e1v, kter\u00e9 jsou vyps\u00e1ny prost\u0159ednictv\u00edm printk(), co\u017e umo\u017e\u0148uje najednou extrahovat v\u0161echny takov\u00e9 zpr\u00e1vy a sledovat zm\u011bny ve u\u017eivatelsk\u00e9m prostoru.\n<li class=\"l\"> V mmap() byla ukon\u010dena podpora volby VM_DENYWRITE a j\u00e1dro bylo zbaveno pou\u017e\u00edv\u00e1n\u00ed re\u017eimu MAP_DENYWRITE, co\u017e sn\u00ed\u017eilo po\u010det situac\u00ed, kter\u00e9 vedly k blokov\u00e1n\u00ed z\u00e1pisu do souboru s chybou ETXTBSY.\n<li class=\"l\"> Do subsyst\u00e9mu trasov\u00e1n\u00ed byl p\u0159id\u00e1n nov\u00fd typ kontrol \u201eEvent probes\u201c, kter\u00e9 lze p\u0159ipojit k existuj\u00edc\u00edm trasovac\u00edm ud\u00e1lostem a definovat vlastn\u00ed form\u00e1t v\u00fdstupu.\n<li class=\"l\"> P\u0159i kompilaci j\u00e1dra s pou\u017eit\u00edm p\u0159eklada\u010de Clang je nyn\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed vyu\u017e\u00edv\u00e1n integrovan\u00fd assembler z projektu LLVM.\n<li class=\"l\"> V r\u00e1mci projektu na odstran\u011bn\u00ed k\u00f3du, kter\u00fd zp\u016fsobuje v\u00fdstup varov\u00e1n\u00ed kompil\u00e1torem, byl proveden experiment se zapnut\u00edm re\u017eimu &#171;-Werror&#187; jako v\u00fdchoz\u00edho, p\u0159i kter\u00e9m jsou varov\u00e1n\u00ed kompil\u00e1toru zpracov\u00e1v\u00e1na jako chyby. B\u011bhem p\u0159\u00edpravy verze 5.15 Linus za\u010dal p\u0159ij\u00edmat pouze zm\u011bny, kter\u00e9 nezp\u016fsobuj\u00ed varov\u00e1n\u00ed p\u0159i sestaven\u00ed j\u00e1dra, a aktivoval sestaven\u00ed s &#171;-Werror&#187;, ale pozd\u011bji souhlasil s n\u00e1zorem, \u017ee toto rozhodnut\u00ed je p\u0159ed\u010dasn\u00e9, a odlo\u017eil zapnut\u00ed &#171;-Werror&#187; jako v\u00fdchoz\u00ed. Ovl\u00e1d\u00e1n\u00ed zapnut\u00ed p\u0159\u00edznaku &#171;-Werror&#187; p\u0159i sestaven\u00ed se prov\u00e1d\u00ed pomoc\u00ed parametru WERROR, kter\u00fd je ve v\u00fdchoz\u00edm nastaven\u00ed nastaven na hodnotu COMPILE_TEST, tedy se zap\u00edn\u00e1 pouze p\u0159i testovac\u00edch sestaven\u00edch.                    <\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Do Device Mapperu (DM) byl p\u0159id\u00e1n nov\u00fd zpracovatel dm-ima s implementac\u00ed mechanismu vzd\u00e1len\u00e9 attestation zalo\u017een\u00e9ho na subsyst\u00e9mu IMA (Integrity Measurement Architecture), kter\u00fd umo\u017e\u0148uje extern\u00ed slu\u017eb\u011b ov\u011b\u0159it stav subsyst\u00e9m\u016f j\u00e1dra, aby se zajistila jejich autenti\u010dnost. V praxi dm-ima umo\u017e\u0148uje vytv\u00e1\u0159et pomoc\u00ed Device Mapperu \u00falo\u017ei\u0161t\u011b spojen\u00e1 s extern\u00edmi cloudov\u00fdmi syst\u00e9my, ve kter\u00fdch se pomoc\u00ed IMA kontroluje pravost spou\u0161t\u011bn\u00e9 konfigurace c\u00edle DM.\n<li class=\"l\"> V prctl() byla implementov\u00e1na nov\u00e1 volba PR_SPEC_L1D_FLUSH, kter\u00e1 p\u0159i zapnut\u00ed zp\u016fsob\u00ed, \u017ee j\u00e1dro za\u010d\u00edn\u00e1 vymaz\u00e1vat obsah prvn\u00edho \u00farov\u0148ov\u00e9ho cache (L1D) poka\u017ed\u00e9, kdy\u017e doch\u00e1z\u00ed k p\u0159epnut\u00ed kontextu. Tento re\u017eim umo\u017e\u0148uje c\u00edlen\u011b implementovat dodate\u010dnou ochranu pro nejd\u016fle\u017eit\u011bj\u0161\u00ed procesy proti \u00fatok\u016fm pomoc\u00ed postrann\u00edch kan\u00e1l\u016f, kter\u00e9 se sna\u017e\u00ed zjistit data usazen\u00e1 v cache v d\u016fsledku zranitelnost\u00ed zp\u016fsoben\u00fdch spekulativn\u00edm vykon\u00e1v\u00e1n\u00edm instrukc\u00ed v CPU. Cenou za zapnut\u00ed PR_SPEC_L1D_FLUSH (ve v\u00fdchoz\u00edm nastaven\u00ed nen\u00ed aktivov\u00e1no) je v\u00fdrazn\u00e9 sn\u00ed\u017een\u00ed v\u00fdkonnosti.\n<li class=\"l\"> Byla implementov\u00e1na mo\u017enost sestaven\u00ed j\u00e1dra s p\u0159id\u00e1n\u00edm do GCC p\u0159\u00edznaku &#171;-fzero-call-used-regs=used-gpr&#187;, kter\u00fd zaji\u0161\u0165uje vymaz\u00e1n\u00ed v\u0161ech registr\u016f p\u0159ed n\u00e1vratem \u0159\u00edzen\u00ed z funkce. Uveden\u00e1 mo\u017enost umo\u017e\u0148uje chr\u00e1nit se p\u0159ed \u00fanikem informac\u00ed z funkc\u00ed a o 20 % zkracuje po\u010det blok\u016f vhodn\u00fdch pro sestaven\u00ed ROP gadget\u016f (Return-Oriented Programming) v exploitech.\n<li class=\"l\"> Byla zavedena mo\u017enost kompilace jader pro architekturu ARM64 ve form\u011b klient\u016f pro hypervisor Hyper-V.\n<li class=\"l\"> Byl navr\u017een nov\u00fd r\u00e1mec pro v\u00fdvoj ovlada\u010d\u016f &#171;VDUSE&#187;, kter\u00fd umo\u017e\u0148uje realizaci virtu\u00e1ln\u00edch blokov\u00fdch za\u0159\u00edzen\u00ed v prostoru u\u017eivatele a pou\u017eit\u00ed Virtio jako transportu pro p\u0159\u00edstup z hostitelsk\u00fdch syst\u00e9m\u016f.\n<li class=\"l\"> Byl p\u0159id\u00e1n Virtio ovlada\u010d pro sb\u011brnici I2C, kter\u00fd umo\u017e\u0148uje emulovat I2C \u0159adi\u010de v re\u017eimu paravirtualizace s pou\u017eit\u00edm jednotliv\u00fdch backend\u016f.\n<li class=\"l\"> Byl p\u0159id\u00e1n Virtio ovlada\u010d gpio-virtio, kter\u00fd umo\u017e\u0148uje hostitelsk\u00fdm syst\u00e9m\u016fm p\u0159\u00edstup k \u0159ad\u00e1m GPIO poskytovan\u00fdm hostitelsk\u00fdm syst\u00e9mem.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost omezen\u00ed p\u0159\u00edstupu k str\u00e1nk\u00e1m pam\u011bti pro ovlada\u010de za\u0159\u00edzen\u00ed s podporou DMA na syst\u00e9mech bez I\/O MMU (jednotky pro spr\u00e1vu pam\u011bti).\n<li class=\"l\"> V hypervisoru KVM byla zavedena mo\u017enost v\u00fdstupu statistik ve form\u011b line\u00e1rn\u00edch a logaritmick\u00fdch histogram\u016f.          <\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> Do j\u00e1dra byl p\u0159id\u00e1n modul ksmbd s implementac\u00ed souborov\u00e9ho serveru, kter\u00fd pou\u017e\u00edv\u00e1 protokol SMB3. Modul dopl\u0148uje d\u0159\u00edve dostupnou implementaci klienta SMB v j\u00e1d\u0159e a na rozd\u00edl od SMB serveru pracuj\u00edc\u00edho v prostoru u\u017eivatele je efektivn\u011bj\u0161\u00ed z hlediska v\u00fdkonu, spot\u0159eby pam\u011bti a integrace s roz\u0161\u00ed\u0159en\u00fdmi mo\u017enostmi j\u00e1dra. Ksmbd se prezentuje jako vysoce v\u00fdkonn\u00e9 a p\u0159ipraven\u00e9 k pou\u017eit\u00ed na vestav\u011bn\u00fdch za\u0159\u00edzen\u00edch roz\u0161\u00ed\u0159en\u00ed k Samba, kter\u00e9 lze podle pot\u0159eby integrovat s n\u00e1stroji a knihovnami Samba. Mezi schopnosti ksmbd pat\u0159\u00ed vylep\u0161en\u00e1 podpora technologie distribuovan\u00e9ho ke\u0161ov\u00e1n\u00ed soubor\u016f (SMB leases) na m\u00edstn\u00edch syst\u00e9mech, kter\u00e1 v\u00fdrazn\u011b sni\u017euje provoz. V budoucnu pl\u00e1nuj\u00ed p\u0159idat podporu RDMA (&#171;smbdirect&#187;) a roz\u0161\u00ed\u0159en\u00ed protokolu souvisej\u00edc\u00ed s pos\u00edlen\u00edm spolehlivosti \u0161ifrov\u00e1n\u00ed a verifikac\u00ed digit\u00e1ln\u00edmi podpisy.\n<li class=\"l\"> V klientovi CIFS byla ukon\u010dena podpora NTLM a m\u00e9n\u011b spolehliv\u00fdch algoritm\u016f autentizace zalo\u017een\u00fdch na algoritmu DES pou\u017e\u00edvan\u00fdch v protokolu SMB1.\n<li class=\"l\"> V implementaci s\u00ed\u0165ov\u00fdch most\u016f pro vlan byla zavedena podpora multicastu.\n<li class=\"l\"> Do ovlada\u010de bonding, pou\u017e\u00edvan\u00e9ho pro agregaci s\u00ed\u0165ov\u00fdch rozhran\u00ed, byla p\u0159id\u00e1na podpora subsyst\u00e9mu XDP (eXpress Data Path), kter\u00fd umo\u017e\u0148uje manipulaci se s\u00ed\u0165ov\u00fdmi pakety p\u0159ed jejich zpracov\u00e1n\u00edm j\u00e1drem linuxov\u00e9ho s\u00ed\u0165ov\u00e9ho stacku.\n<li class=\"l\"> V bezdr\u00e1tov\u00e9m stacku mac80211 byla zavedena podpora 6GHZ STA (Special Temporary Authorization) v re\u017eimech LPI, SP a VLP, stejn\u011b jako mo\u017enost nastaven\u00ed jednotliv\u00fdch TWT (Target Wake Time) v re\u017eimu p\u0159\u00edstupov\u00e9ho bodu.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora protokolu MCTP (Management Component Transport Protocol), kter\u00fd se pou\u017e\u00edv\u00e1 pro interakci \u0159\u00edd\u00edc\u00edch modul\u016f a jejich za\u0159\u00edzen\u00ed (hostitelsk\u00e9 procesory, perifern\u00ed za\u0159\u00edzen\u00ed atd.).\n<li class=\"l\"> Pokra\u010duje integrace do j\u00e1dra MPTCP (MultiPath TCP), roz\u0161\u00ed\u0159en\u00ed protokolu TCP pro organizaci TCP spojen\u00ed s doru\u010dov\u00e1n\u00edm paket\u016f sou\u010dasn\u011b p\u0159es n\u011bkolik tras r\u016fzn\u00fdmi s\u00ed\u0165ov\u00fdmi rozhran\u00edmi, p\u0159i\u0159azen\u00fdmi k r\u016fzn\u00fdm IP adres\u00e1m. V nov\u00e9m vyd\u00e1n\u00ed byla p\u0159id\u00e1na podpora adres v re\u017eimu fullmesh.\n<li class=\"l\"> V netfilter byly p\u0159id\u00e1ny zpracovatele s\u00ed\u0165ov\u00fdch tok\u016f, kter\u00e9 jsou enkapsulov\u00e1ny v protokolu SRv6 (Segment Routing IPv6).\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora sockmap pro streamov\u00e9 Unix sockety.              <\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> V ovlada\u010di amdgpu byla implementov\u00e1na podpora APU Cyan Skillfish (vybaven\u00fdch GPU Navi 1x). Pro APU Yellow Carp byla realizov\u00e1na podpora video kodek\u016f. Byla vylep\u0161ena podpora GPU Aldebaran. P\u0159id\u00e1ny nov\u00e9 identifik\u00e1tory karet na b\u00e1zi GPU Navi 24 \u201eBeige Goby\u201c a RDNA2. Byla navr\u017eena vylep\u0161en\u00e1 implementace virtu\u00e1ln\u00edch obrazovek (VKMS). Byla realizov\u00e1na podpora sledov\u00e1n\u00ed teploty \u010dip\u016f AMD Zen 3.\n<li class=\"l\"> V ovlada\u010di amdkfd (pro diskr\u00e9tn\u00ed GPU, jako je Polaris) byl implementov\u00e1n spr\u00e1vce sd\u00edlen\u00e9 virtu\u00e1ln\u00ed pam\u011bti (SVM, shared virtual memory) na b\u00e1zi subsyst\u00e9mu HMM (Heterogeneous memory management), kter\u00fd umo\u017e\u0148uje pou\u017e\u00edvat za\u0159\u00edzen\u00ed s vlastn\u00edm \u0159\u00edd\u00edc\u00edm blokem pam\u011bti (MMU, memory management unit), kter\u00e1 mohou p\u0159istupovat k hlavn\u00ed pam\u011bti. To zahrnuje organizaci spole\u010dn\u00e9ho adresn\u00edho prostoru mezi GPU a CPU, ve kter\u00e9m m\u016f\u017ee GPU p\u0159istupovat k hlavn\u00ed pam\u011bti procesu.\n<li class=\"l\"> V ovlada\u010di i915 pro grafick\u00e9 karty Intel bylo roz\u0161\u00ed\u0159eno pou\u017eit\u00ed spr\u00e1vce \u0159\u00edzen\u00ed grafick\u00e9 pam\u011bti TTM a byla zavedena mo\u017enost spr\u00e1vy spot\u0159eby energie na b\u00e1zi GuC (Graphics micro Controller). Za\u010dala se p\u0159\u00edprava na implementaci podpory grafick\u00e9 karty Intel ARC Alchemist a GPU Intel Xe-HP.\n<li class=\"l\"> V ovlada\u010di nouveau bylo implementov\u00e1no \u0159\u00edzen\u00ed podsv\u00edcen\u00ed panel\u016f eDP pomoc\u00ed DPCD (DisplayPort Configuration Data).\n<li class=\"l\"> Do ovlada\u010de msm byla p\u0159id\u00e1na podpora GPU Adreno 7c Gen 3 a Adreno 680.\n<li class=\"l\"> Pro \u010dip Apple M1 byl implementov\u00e1n ovlada\u010d IOMMU.\n<li class=\"l\"> Byl p\u0159id\u00e1n zvukov\u00fd ovlada\u010d pro syst\u00e9my zalo\u017een\u00e9 na APU AMD Van Gogh.\n<li class=\"l\"> Do v\u011btve staging byl p\u0159id\u00e1n ovlada\u010d Realtek R8188EU, kter\u00fd nahradil star\u0161\u00ed variantu ovlada\u010de (rtl8188eu) pro bezdr\u00e1tov\u00e9 \u010dipy Realtek RTL8188EU 802.11 b\/g\/n.\n<li class=\"l\"> Byl p\u0159ijat ovlada\u010d ocp_pt pro vyv\u00edjenou spole\u010dnost\u00ed Meta (Facebook) PCIe desku s realizac\u00ed miniaturizovan\u00fdch atomov\u00fdch hodin a GNSS p\u0159ij\u00edma\u010de, kter\u00e9 mohou b\u00fdt pou\u017eity pro organizaci izolovan\u00e9 <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/\"   title=\"servery\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1616\">servery<\/a> synchronizace p\u0159esn\u00e9ho \u010dasu.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora smartphon\u016f Sony Xperia 10II (Snapdragon 665), Xiaomi Redmi 2 (Snapdragon MSM8916), Samsung Galaxy S3 (Snapdragon MSM8226), Samsung Gavini\/Codina\/Kyle.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM SoC a desek NVIDIA Jetson TX2 NX Developer Kit, Sancloud BBE Lite, PicoITX, DRC02, SolidRun SolidSense, SKOV i.MX6, Nitrogen8, Traverse Ten64, GW7902, Microchip SAMA7, Qualcomm Snapdragon SDM636\/SM8150, Renesas R-Car H3e-2G\/M3e-2G, Marvell CN913x, ASpeed AST2600 (serverov\u00e9 desky Facebook Cloudripper, Elbert a Fuji), 4KOpen STiH418-b2264.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora LCD panel\u016f Gopher 2b, EDT ETM0350G0DH6\/ETMV570G2DHU, LOGIC Technologies LTTD800480070-L6WH-RT, Multi-Innotechnology MI1010AIT-1CP1, Innolux EJ030NA 3.0, ilitek ili9341, E Ink VB3300-KCA, Samsung ATNA33XC20, Samsung DB7430, WideChips WS2401.\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d LiteETH s podporou Ethernetov\u00fdch \u0159adi\u010d\u016f pou\u017e\u00edvan\u00fdch v programov\u00fdch SoC LiteX (pro FPGA).\n<li class=\"l\"> Do ovlada\u010de usb-audio byla p\u0159id\u00e1na mo\u017enost lowlatency pro ovl\u00e1d\u00e1n\u00ed zapnut\u00ed re\u017eimu minim\u00e1ln\u00edch zpo\u017ed\u011bn\u00ed. Tak\u00e9 byla p\u0159id\u00e1na mo\u017enost quirk_flags pro p\u0159ed\u00e1v\u00e1n\u00ed specifick\u00fdch nastaven\u00ed pro za\u0159\u00edzen\u00ed.      <\/ul>\n<\/ul>\n<p>Mezit\u00edm latinskoamerick\u00e1 Nadace svobodn\u00e9ho softwaru vytvo\u0159ila verzi pln\u011b svobodn\u00e9ho j\u00e1dra 5.15 \u2014 Linux-libre 5.15-gnu, o\u010di\u0161t\u011bnou od prvk\u016f firmwaru a ovlada\u010d\u016f, kter\u00e9 obsahuj\u00ed nesvobodn\u00e9 komponenty nebo \u010d\u00e1sti k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobcem. V nov\u00e9 verzi bylo implementov\u00e1no zapisov\u00e1n\u00ed zpr\u00e1vy do protokolu o dokon\u010den\u00ed \u010di\u0161t\u011bn\u00ed. Byly odstran\u011bny probl\u00e9my p\u0159i vytv\u00e1\u0159en\u00ed bal\u00ed\u010dk\u016f s pou\u017eit\u00edm mkspec, vylep\u0161ena podpora bal\u00ed\u010dk\u016f snap. Byla odstran\u011bna n\u011bkter\u00e1 upozorn\u011bn\u00ed, kter\u00e1 se zobrazovala p\u0159i zpracov\u00e1n\u00ed z\u00e1hlav\u00ed firmware.h. Bylo povoleno v\u00fdstup n\u011bkter\u00fdch typ\u016f upozorn\u011bn\u00ed (\u201eformat-extra-args\u201c, koment\u00e1\u0159e, nepou\u017e\u00edvan\u00e9 funkce a prom\u011bnn\u00e9) p\u0159i sestavov\u00e1n\u00ed v re\u017eimu \u201e-Werror\u201c. Bylo p\u0159id\u00e1no \u010di\u0161t\u011bn\u00ed ovlada\u010de gehc-achc. Bylo aktualizov\u00e1no \u010di\u0161t\u011bn\u00ed blob\u016f v ovlada\u010d\u00edch a subsyst\u00e9mech adreno, btusb, btintel, brcmfmac, aarch64 qcom. Bylo ukon\u010deno \u010di\u0161t\u011bn\u00ed ovlada\u010d\u016f prism54 (odstran\u011bno) a rtl8188eu (vym\u011bn\u011bno za r8188eu).<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56079\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.15. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 NTFS \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u043c\u043e\u0434\u0443\u043b\u044c ksmbd \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430 DAMON \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u0434\u043b\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 fs-verity \u0432 Btrfs, \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 process_mrelease \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0443 \u043f\u0430\u043c\u044f\u0442\u0438, \u043c\u043e\u0434\u0443\u043b\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102190","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.15.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-15\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.15 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.15.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-15\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-11-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-11-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vyd\u00e1n\u00ed j\u00e1dra Linux 5.15 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil vyd\u00e1n\u00ed j\u00e1dra Linux 5.15.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-15","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.15 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.15.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-15","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-11-02T19:36:39+00:00","article:modified_time":"2021-11-02T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102190","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-11-02 19:38:03","updated":"2026-02-22 15:30:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102190","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=102190"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102190\/revisions"}],"predecessor-version":[{"id":162291,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102190\/revisions\/162291"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=102190"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=102190"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=102190"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}