{"id":104123,"date":"2022-05-23T15:36:40","date_gmt":"2022-05-23T13:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-18"},"modified":"2022-05-23T15:36:40","modified_gmt":"2022-05-23T13:36:40","slug":"reliz-yadra-linux-5-18","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-18","title":{"rendered":"Uvoln\u011bn\u00ed j\u00e1dra Linux 5.18","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil uvoln\u011bn\u00ed j\u00e1dra Linux 5.18. Mezi nejv\u00fdznamn\u011bj\u0161\u00ed zm\u011bny pat\u0159\u00ed: komplexn\u00ed \u00faklid zastaral\u00fdch funkcionalit, prohl\u00e1\u0161en\u00ed syst\u00e9mu soubor\u016f Reiserfs za zastaral\u00fd, implementace ud\u00e1lost\u00ed sledov\u00e1n\u00ed u\u017eivatelsk\u00fdch proces\u016f, p\u0159id\u00e1n\u00ed podpory pro mechanismus blokov\u00e1n\u00ed exploit\u016f Intel IBT, zahrnut\u00ed re\u017eimu detekce p\u0159ete\u010den\u00ed bufferu p\u0159i pou\u017eit\u00ed funkce memcpy(), p\u0159id\u00e1n\u00ed mechanismu sledov\u00e1n\u00ed vol\u00e1n\u00ed funkc\u00ed fprobe, zlep\u0161en\u00ed v\u00fdkonu pl\u00e1nova\u010de \u00faloh na CPU AMD Zen, v\u010detn\u011b ovlada\u010de pro spr\u00e1vu funkcionality CPU Intel (SDS), integrace \u010d\u00e1sti patch\u016f pro restrukturalizaci hlavi\u010dkov\u00fdch soubor\u016f, schv\u00e1len\u00ed pou\u017eit\u00ed standardu C11.      <\/p>\n<p>Nov\u00e1 verze obsahuje 16206 oprav od 2127 v\u00fdvoj\u00e1\u0159\u016f (v p\u0159edchoz\u00edm vyd\u00e1n\u00ed bylo 14203 oprav od 1995 v\u00fdvoj\u00e1\u0159\u016f), velikost patche je 108 MB (zm\u011bny se dotkly 14235 soubor\u016f, bylo p\u0159id\u00e1no 1340982 \u0159\u00e1dk\u016f k\u00f3du, odstran\u011bno 593836 \u0159\u00e1dk\u016f). P\u0159ibli\u017en\u011b 44 % v\u0161ech zm\u011bn v 5.18 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, asi 16 % zm\u011bn souvis\u00ed s aktualizac\u00ed k\u00f3du specifick\u00e9ho pro hardwarov\u00e9 architektury, 11 % se t\u00fdk\u00e1 s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku, 3 % se vztahuj\u00ed k souborov\u00fdm syst\u00e9m\u016fm a 3 % k vnit\u0159n\u00edm subsyst\u00e9m\u016fm j\u00e1dra.           <\/p>\n<p>Hlavn\u00ed novinky v j\u00e1dru 5.18:    <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Ve souborov\u00e9m syst\u00e9mu Btrfs byla p\u0159id\u00e1na podpora p\u0159enosu komprimovan\u00fdch dat b\u011bhem operac\u00ed send a receive. D\u0159\u00edve b\u011bhem pou\u017e\u00edv\u00e1n\u00ed send\/receive odes\u00edlaj\u00edc\u00ed strana dekomprimovala data ulo\u017een\u00e1 v komprimovan\u00e9 podob\u011b, zat\u00edmco p\u0159ij\u00edmaj\u00edc\u00ed je znovu komprimovala p\u0159ed z\u00e1pisem. V j\u00e1dru 5.18 maj\u00ed aplikace b\u011b\u017e\u00edc\u00ed ve u\u017eivatelsk\u00e9m prostoru, kter\u00e9 pou\u017e\u00edvaj\u00ed vol\u00e1n\u00ed send\/receive, mo\u017enost p\u0159en\u00e1\u0161et komprimovan\u00e1 data bez repackov\u00e1n\u00ed. Tato funkcionalita byla realizov\u00e1na d\u00edky nov\u00fdm ioctl operac\u00edm BTRFS_IOC_ENCODED_READ a BTRFS_IOC_ENCODED_WRITE, kter\u00e9 umo\u017e\u0148uj\u00ed p\u0159\u00edmo \u010d\u00edst a zapisovat informace do extent\u016f.\n<p>Krom\u011b toho byla v Btrfs zv\u00fd\u0161ena v\u00fdkonnost fsync. Byla p\u0159id\u00e1na mo\u017enost deduplikace a prov\u00e1d\u011bn\u00ed reflink (klonov\u00e1n\u00ed metadata souboru se vytvo\u0159en\u00edm odkazu na ji\u017e existuj\u00edc\u00ed data bez jejich skute\u010dn\u00e9ho kop\u00edrov\u00e1n\u00ed) pro cel\u00e9 \u00falo\u017ei\u0161t\u011b, nikoli pouze pro body p\u0159ipojen\u00ed.         <\/p>\n<li class=\"l\"> V re\u017eimu p\u0159\u00edm\u00e9ho vstupu\/v\u00fdstupu (Direct I\/O) je zaji\u0161t\u011bn p\u0159\u00edstup k \u0161ifrovan\u00fdm soubor\u016fm p\u0159i pou\u017eit\u00ed inline \u0161ifrov\u00e1n\u00ed fscrypt, kde operace \u0161ifrov\u00e1n\u00ed a de\u0161ifrov\u00e1n\u00ed prov\u00e1d\u00ed \u0159adi\u010d \u00falo\u017en\u00e9ho za\u0159\u00edzen\u00ed, nikoli j\u00e1dro. P\u0159i b\u011b\u017en\u00e9m \u0161ifrov\u00e1n\u00ed j\u00e1drem nen\u00ed p\u0159\u00edstup k \u0161ifrovan\u00fdm soubor\u016fm pomoc\u00ed Direct I\/O nad\u00e1le mo\u017en\u00fd, proto\u017ee p\u0159\u00edstup k soubor\u016fm je prov\u00e1d\u011bn mimo mechanismus vyrovn\u00e1vac\u00ed pam\u011bti j\u00e1dra.\n<li class=\"l\"> Na serveru NFS je standardn\u011b povolena podpora protokolu NFSv3, kter\u00e1 nyn\u00ed nevy\u017eaduje samostatn\u00e9 povolen\u00ed a je dostupn\u00e1 p\u0159i v\u0161eobecn\u00e9m povolen\u00ed NFS. NFSv3 je pova\u017eov\u00e1na za hlavn\u00ed a v\u017edy podporovanou verzi NFS, a podpora NFSv2 m\u016f\u017ee b\u00fdt v budoucnu ukon\u010dena. Byla v\u00fdznamn\u011b zv\u00fd\u0161ena efektivita \u010dten\u00ed obsahu adres\u00e1\u0159\u016f.\n<li class=\"l\"> Souborov\u00fd syst\u00e9m ReiserFS byl za\u0159azen mezi zastaral\u00e9 a \u010dek\u00e1 na odstran\u011bn\u00ed v roce 2025. Za\u0159azen\u00ed ReiserFS mezi zastaral\u00e9 sn\u00ed\u017e\u00ed \u010dasovou n\u00e1ro\u010dnost na \u00fadr\u017ebu obecn\u00fdch zm\u011bn ve file syst\u00e9mech souvisej\u00edc\u00edch s podporou nov\u00e9ho API pro p\u0159ipojen\u00ed, iomap a svazk\u016f.\n<li class=\"l\"> Pro FS F2FS byla implementov\u00e1na mo\u017enost mapov\u00e1n\u00ed identifik\u00e1tor\u016f u\u017eivatel\u016f p\u0159ipojen\u00fdch souborov\u00fdch syst\u00e9m\u016f, kter\u00e1 se pou\u017e\u00edv\u00e1 pro p\u0159i\u0159azen\u00ed soubor\u016f ur\u010dit\u00e9ho u\u017eivatele na p\u0159ipojen\u00e9 ciz\u00ed odd\u00edly k jin\u00e9mu u\u017eivateli v aktu\u00e1ln\u00edm syst\u00e9mu.\n<li class=\"l\"> Byl p\u0159epracov\u00e1n k\u00f3d pro po\u010d\u00edt\u00e1n\u00ed statistik ve zpracovatel\u00edch Device-mapper, co\u017e v\u00fdznamn\u011b zv\u00fd\u0161ilo p\u0159esnost \u00fa\u010detnictv\u00ed v takov\u00fdch zpracovatel\u00edch, jako je dm-crypt.\n<li class=\"l\"> Pro za\u0159\u00edzen\u00ed NVMe byla implementov\u00e1na podpora 64bitov\u00fdch kontroln\u00edch sou\u010dt\u016f pro ov\u011b\u0159ov\u00e1n\u00ed integrity.\n<li class=\"l\"> Pro souborov\u00fd syst\u00e9m exfat byla navr\u017eena nov\u00e1 mo\u017enost montov\u00e1n\u00ed \u201ekeep_last_dots\u201c, kter\u00e1 zakazuje odstran\u011bn\u00ed te\u010dek na konci n\u00e1zvu souboru (ve Windows jsou te\u010dky na konci n\u00e1zvu ve v\u00fdchoz\u00edm nastaven\u00ed odstra\u0148ov\u00e1ny).\n<li class=\"l\"> V EXT4 byla zv\u00fd\u0161ena v\u00fdkonnost re\u017eimu fast_commit a zlep\u0161ena \u0161k\u00e1lovatelnost. Mo\u017enost montov\u00e1n\u00ed \u201emb_optimize_scan\u201c, kter\u00e1 zvy\u0161uje v\u00fdkon v podm\u00ednk\u00e1ch vysok\u00e9 fragmentace FS, byla p\u0159izp\u016fsobena pro pr\u00e1ci se soubory s extenty.\n<li class=\"l\"> Podpora pro zapisovac\u00ed proudy (write stream) v subsyst\u00e9mu, kter\u00fd zaji\u0161\u0165uje funk\u010dnost blokov\u00fdch za\u0159\u00edzen\u00ed, byla ukon\u010dena. Tato funkce byla navr\u017eena pro SSD, av\u0161ak nenalezla \u0161irok\u00e9 uplatn\u011bn\u00ed a v sou\u010dasnosti neexistuj\u00ed za\u0159\u00edzen\u00ed, kter\u00e1 by tento re\u017eim podporovala, a je velmi nepravd\u011bpodobn\u00e9, \u017ee by se takov\u00e1 za\u0159\u00edzen\u00ed v budoucnu objevila.                      <\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Za\u010dala integrace sady patch\u016f, kter\u00e1 umo\u017e\u0148uje v\u00fdrazn\u011b zkr\u00e1tit \u010das pot\u0159ebn\u00fd k p\u0159estavb\u011b j\u00e1dra d\u00edky restrukturalizaci hierarchie hlavi\u010dkov\u00fdch soubor\u016f a sn\u00ed\u017een\u00ed po\u010dtu vz\u00e1jemn\u00fdch z\u00e1vislost\u00ed. Patchy optimalizuj\u00edc\u00ed strukturu hlavi\u010dkov\u00fdch soubor\u016f pl\u00e1nova\u010de \u00faloh (kernel\/sched) byly za\u0159azeny do j\u00e1dra 5.18. Ve srovn\u00e1n\u00ed s p\u0159edchoz\u00edm vyd\u00e1n\u00edm do\u0161lo ke sn\u00ed\u017een\u00ed vyu\u017eit\u00ed procesorov\u00e9ho \u010dasu p\u0159i sestaven\u00ed k\u00f3du kernel\/sched o 61%, a skute\u010dn\u00fd \u010das se sn\u00ed\u017eil o 3,9% (z 2,95 na 2,84 sekundy).\n<li class=\"l\"> V j\u00e1d\u0159e bylo povoleno pou\u017e\u00edv\u00e1n\u00ed standardu C11, kter\u00fd byl publikov\u00e1n v roce 2011. D\u0159\u00edve p\u0159id\u00e1van\u00fd k\u00f3d do j\u00e1dra musel odpov\u00eddat specifikaci ANSI C (C89), kter\u00e1 byla vytvo\u0159ena ji\u017e v roce 1989. V aplika\u010dn\u00edch skriptech j\u00e1dra 5.18 byla mo\u017enost \u201a\u2014std=gnu89\u2018 nahrazena \u201a\u2014std=gnu11 -Wno-shift-negative-value\u2018. Zva\u017eovalo se pou\u017eit\u00ed standardu C17, ale v tomto p\u0159\u00edpad\u011b by bylo nutn\u00e9 zv\u00fd\u0161it minim\u00e1ln\u011b podporovanou verzi GCC, podpora C11 v\u0161ak odpov\u00edd\u00e1 aktu\u00e1ln\u00edm po\u017eadavk\u016fm na verzi GCC (5.1).\n<li class=\"l\"> Byla zv\u00fd\u0161ena v\u00fdkonnost pl\u00e1nov\u00e1n\u00ed \u00faloh na procesorech AMD s mikroarchitekturou Zen, kde pro ka\u017ed\u00fd uzel s m\u00edstn\u00edmi pam\u011b\u0165ov\u00fdmi kan\u00e1ly je k dispozici n\u011bkolik \u00farovn\u00ed posledn\u00edho cache (LLC, Last Level Cache). V nov\u00e9 verzi byl odstran\u011bn nerovnov\u00e1ha LLC mezi uzly NUMA, co\u017e vedlo k v\u00fdznamn\u00e9mu zv\u00fd\u0161en\u00ed v\u00fdkonu p\u0159i n\u011bkter\u00fdch typech z\u00e1t\u011b\u017ee.\n<li class=\"l\"> Byly roz\u0161\u00ed\u0159eny prost\u0159edky pro sledov\u00e1n\u00ed aplikac\u00ed v u\u017eivatelsk\u00e9m prostoru. V nov\u00e9 verzi j\u00e1dra byla p\u0159id\u00e1na mo\u017enost vytv\u00e1\u0159en\u00ed ud\u00e1lost\u00ed sledov\u00e1n\u00ed u\u017eivatelsk\u00fdmi procesy (User events) a z\u00e1pisu dat do sledovac\u00edho bufferu, kter\u00e1 lze zobrazit prost\u0159ednictv\u00edm typick\u00fdch utilit sledov\u00e1n\u00ed j\u00e1dra, jako jsou ftrace a perf. Ud\u00e1losti sledov\u00e1n\u00ed z u\u017eivatelsk\u00e9ho prostoru jsou izolov\u00e1ny od ud\u00e1lost\u00ed sledov\u00e1n\u00ed j\u00e1dra. Stav ud\u00e1lost\u00ed lze zobrazit prost\u0159ednictv\u00edm souboru \/sys\/kernel\/debug\/tracing\/user_events_status, zat\u00edmco registrace ud\u00e1losti a z\u00e1pis dat prob\u00edh\u00e1 prost\u0159ednictv\u00edm souboru \/sys\/kernel\/debug\/tracing\/user_events_data.\n<li class=\"l\"> Byl p\u0159id\u00e1n mechanismus sledov\u00e1n\u00ed (probe) vol\u00e1n\u00ed funkc\u00ed \u2014 fprobe. API fprobe je zalo\u017een na ftrace, ale je omezeno pouze na mo\u017enost p\u0159ipojen\u00ed callback-handler\u016f k vstupn\u00edm a v\u00fdstupn\u00edm bod\u016fm funkc\u00ed. Na rozd\u00edl od kprobes a kretprobes nov\u00fd mechanismus umo\u017e\u0148uje pou\u017e\u00edt jeden handler pro v\u00edce funkc\u00ed.\n<li class=\"l\"> Byla ukon\u010dena podpora star\u00fdch procesor\u016f ARM (ARMv4 a ARMv5), kter\u00e9 nejsou vybaveny \u0159\u00eddic\u00edm blokem pam\u011bti (MMU). Podpora syst\u00e9m\u016f ARMv7-M bez MMU byla zachov\u00e1na.\n<li class=\"l\"> Byla ukon\u010dena podpora RISC-podobn\u00e9 architektury NDS32, kter\u00e1 byla pou\u017e\u00edv\u00e1na v procesorech spole\u010dnosti Andes Technologies. K\u00f3d byl odstran\u011bn z d\u016fvodu nedostatku \u00fadr\u017eby a nevhodnosti podpory NDS32 v hlavn\u00edm j\u00e1d\u0159e Linuxu (zb\u00fdvaj\u00edc\u00ed u\u017eivatel\u00e9 pou\u017e\u00edvaj\u00ed specializovan\u00e9 sestaven\u00ed j\u00e1dra od v\u00fdrobc\u016f vybaven\u00ed).\n<li class=\"l\"> Ve v\u00fdchoz\u00edm nastaven\u00ed byla vypnuta kompilace j\u00e1dra s podporou form\u00e1tu spustiteln\u00fdch soubor\u016f a.out pro architektury alpha a m68k, ve kter\u00fdch se tento form\u00e1t st\u00e1le pou\u017e\u00edv\u00e1. Je pravd\u011bpodobn\u00e9, \u017ee podpora zastaral\u00e9ho form\u00e1tu a.out bude v brzk\u00e9 dob\u011b z j\u00e1dra zcela odstran\u011bna. Pl\u00e1ny na odstran\u011bn\u00ed form\u00e1tu a.out se diskutuj\u00ed od roku 2019.\n<li class=\"l\"> Pro architekturu PA-RISC byla implementov\u00e1na minim\u00e1ln\u00ed podpora mechanismu vDSO (virtual dynamic shared objects), kter\u00fd poskytuje omezenou sadu syst\u00e9mov\u00fdch vol\u00e1n\u00ed dostupn\u00fdch v u\u017eivatelsk\u00e9m prostoru bez p\u0159ep\u00edn\u00e1n\u00ed kontextu. Podpora vDSO umo\u017enila implementaci mo\u017enosti spu\u0161t\u011bn\u00ed s neprovediteln\u00fdm z\u00e1sobn\u00edkem.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora mechanismu Intel HFI (Hardware Feedback Interface), kter\u00fd umo\u017e\u0148uje hardwaru p\u0159ed\u00e1vat j\u00e1dru informace o aktu\u00e1ln\u00edm v\u00fdkonu a energetick\u00e9 \u00fa\u010dinnosti ka\u017ed\u00e9ho CPU.\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d pro mechanismus Intel SDSi (Software-Defined Silicon), kter\u00fd umo\u017e\u0148uje \u0159\u00eddit aktivaci dodate\u010dn\u00fdch funkc\u00ed v procesoru (nap\u0159\u00edklad specializovan\u00e9 instrukce a dal\u0161\u00ed cache pam\u011b\u0165). My\u0161lenka je takov\u00e1, \u017ee \u010dipy s uzam\u010den\u00fdmi roz\u0161\u00ed\u0159en\u00fdmi funkcemi mohou b\u00fdt dod\u00e1v\u00e1ny za ni\u017e\u0161\u00ed cenu, kter\u00e9 lze pot\u00e9 \u201edoktupit\u201c a aktivovat dal\u0161\u00ed mo\u017enost bez hardwarov\u00e9 v\u00fdm\u011bny \u010dipu.\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d amd_hsmp pro podporu rozhran\u00ed AMD HSMP (Host System Management Port), kter\u00e9 poskytuje p\u0159\u00edstup k funkc\u00edm spr\u00e1vy procesoru prost\u0159ednictv\u00edm souboru speci\u00e1ln\u00edch registr\u016f, kter\u00e9 se objevily v serverov\u00fdch procesorech AMD EPYC po\u010d\u00ednaje generac\u00ed Fam19h. Nap\u0159\u00edklad prost\u0159ednictv\u00edm HSMP lze z\u00edskat \u00fadaje o spot\u0159eb\u011b energie a teplot\u011b, nastavit omezen\u00ed frekvence, aktivovat r\u016fzn\u00e9 re\u017eimy zv\u00fd\u0161en\u00ed v\u00fdkonu a \u0159\u00eddit parametry pr\u00e1ce pam\u011bti.\n<li class=\"l\"> V rozhran\u00ed asynchronn\u00edho vstupu\/v\u00fdstupu io_uring byla zavedena mo\u017enost IORING_SETUP_SUBMIT_ALL pro registraci skupiny deskriptor\u016f soubor\u016f v kruhov\u00e9m vyrovn\u00e1vac\u00edm pam\u011bti, stejn\u011b jako operace IORING_OP_MSG_RING, kter\u00e1 umo\u017e\u0148uje poslat sign\u00e1l z jednoho kruhov\u00e9ho vyrovn\u00e1vac\u00ed pam\u011bti do druh\u00e9ho.\n<li class=\"l\"> V mechanismu DAMOS (Data Access Monitoring-based Operation Schemes), kter\u00fd umo\u017e\u0148uje uvol\u0148ovat pam\u011b\u0165 s ohledem na frekvenci p\u0159\u00edstupu k pam\u011bti, byly roz\u0161\u00ed\u0159eny mo\u017enosti kontroly operac\u00ed s pam\u011bt\u00ed z u\u017eivatelsk\u00e9ho prostoru.\n<li class=\"l\"> Byla integrov\u00e1na t\u0159et\u00ed s\u00e9rie patch\u016f s realizac\u00ed konceptu foliant\u016f str\u00e1nek pam\u011bti (page folios), kter\u00e9 p\u0159ipom\u00ednaj\u00ed slou\u010den\u00e9 str\u00e1nky pam\u011bti (compound pages), ale li\u0161\u00ed se vylep\u0161enou s\u00e9mantikou a srozumiteln\u011bj\u0161\u00ed organizac\u00ed pr\u00e1ce. Pou\u017eit\u00ed foliant\u016f zrychluje spr\u00e1vu pam\u011bti v n\u011bkter\u00fdch subsyst\u00e9mech j\u00e1dra. V navr\u017een\u00fdch patchech byla provedena konverze na folianty vnit\u0159n\u00edch funkc\u00ed spr\u00e1vy pam\u011bti, v\u010detn\u011b varianty funkce get_user_pages(). Byla poskytnuta podpora pro vytv\u00e1\u0159en\u00ed velk\u00fdch foliant\u016f v k\u00f3du anticipace na\u010d\u00edt\u00e1n\u00ed dat.\n<li class=\"l\"> V build syst\u00e9mu se objevila podpora prom\u011bnn\u00fdch prost\u0159ed\u00ed USERCFLAGS a USERLDFLAGS, pomoc\u00ed kter\u00fdch lze p\u0159edat dal\u0161\u00ed p\u0159\u00edznaky p\u0159eklada\u010di a linkeru.\n<li class=\"l\"> V subsyst\u00e9mu eBPF v mechanismu BTF (BPF Type Format), kter\u00fd poskytuje informace pro kontrolu typ\u016f v pseudok\u00f3du BPF, byla zavedena mo\u017enost p\u0159id\u00e1vat anotace k prom\u011bnn\u00fdm odkazuj\u00edc\u00edm na oblasti pam\u011bti v u\u017eivatelsk\u00e9m prostoru. Anotace pom\u00e1haj\u00ed syst\u00e9mu verifikace BPF k\u00f3du kvalitn\u011bji identifikovat a kontrolovat p\u0159\u00edstupy k pam\u011bti.\n<li class=\"l\"> Byl navr\u017een nov\u00fd zpracovatel alokace pam\u011bti pro ukl\u00e1d\u00e1n\u00ed nahran\u00fdch BPF program\u016f, kter\u00fd umo\u017e\u0148uje efektivn\u011bj\u0161\u00ed vyu\u017e\u00edv\u00e1n\u00ed pam\u011bti v situac\u00edch nahr\u00e1v\u00e1n\u00ed velk\u00e9ho mno\u017estv\u00ed BPF program\u016f.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed madvise() byl p\u0159id\u00e1n p\u0159\u00edznak MADV_DONTNEED_LOCKED, kter\u00fd dopl\u0148uje ji\u017e existuj\u00edc\u00ed p\u0159\u00edznak MADV_DONTNEED, je\u017e j\u00e1dru umo\u017e\u0148uje p\u0159edem ozn\u00e1mit uvoln\u011bn\u00ed bloku pam\u011bti, tj. \u017ee tento blok ji\u017e nen\u00ed pot\u0159ebn\u00fd a m\u016f\u017ee b\u00fdt vyu\u017eit j\u00e1drem. Na rozd\u00edl od MADV_DONTNEED je pou\u017eit\u00ed p\u0159\u00edznaku MADV_DONTNEED_LOCKED povoleno pro zafixovan\u00e9 str\u00e1nky pam\u011bti, kter\u00e9 jsou p\u0159i vol\u00e1n\u00ed madvise odstran\u011bny bez zm\u011bny sv\u00e9ho zafixovan\u00e9ho stavu, a v p\u0159\u00edpad\u011b n\u00e1sledn\u00e9ho p\u0159\u00edstupu k bloku a generov\u00e1n\u00ed \u201epage fault\u201c jsou vr\u00e1ceny se zachov\u00e1n\u00edm vazby. D\u00e1le byla p\u0159id\u00e1na zm\u011bna, kter\u00e1 umo\u017e\u0148uje pou\u017eit\u00ed p\u0159\u00edznaku MADV_DONTNEED s velk\u00fdmi str\u00e1nkami pam\u011bti v HugeTLB.              <\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Pro architekturu x86 byla p\u0159id\u00e1na podpora mechanismu ochrany toku vykon\u00e1v\u00e1n\u00ed p\u0159\u00edkaz\u016f Intel IBT (Indirect Branch Tracking), kter\u00fd br\u00e1n\u00ed pou\u017eit\u00ed technik pro vytv\u00e1\u0159en\u00ed exploit\u016f pomoc\u00ed metod n\u00e1vratov\u00e9ho orientovan\u00e9ho programov\u00e1n\u00ed (ROP, Return-Oriented Programming), p\u0159i kter\u00e9m je exploit formov\u00e1n ve form\u011b \u0159et\u011bzce vol\u00e1n\u00ed ji\u017e existuj\u00edc\u00edch v pam\u011bti kus\u016f strojov\u00fdch instrukc\u00ed, kon\u010d\u00edc\u00edch instrukc\u00ed n\u00e1vratu \u0159\u00edzen\u00ed (obvykle to jsou konce funkc\u00ed). Podstata realizovan\u00e9 ochrany spo\u010d\u00edv\u00e1 v blokov\u00e1n\u00ed nep\u0159\u00edm\u00fdch skok\u016f do t\u011bla funkce p\u0159id\u00e1n\u00edm speci\u00e1ln\u00ed instrukce ENDBR na za\u010d\u00e1tek funkce a povolen\u00ed prov\u00e1d\u011bn\u00ed skrze nep\u0159\u00edm\u00fd skok pouze v p\u0159\u00edpad\u011b skoku na tuto instrukci (nep\u0159\u00edm\u00e9 vol\u00e1n\u00ed p\u0159es JMP a CALL mus\u00ed v\u017edy sm\u011b\u0159ovat na instrukci ENDBR, kter\u00e1 je um\u00edst\u011bna na sam\u00e9m za\u010d\u00e1tku funkce).\n<li class=\"l\"> Byla zavedena p\u0159\u00edsn\u011bj\u0161\u00ed kontrola mez\u00ed buffer\u016f ve funkc\u00edch memcpy(), memmove() a memset(), prov\u00e1d\u011bn\u00e1 na f\u00e1zi kompilace p\u0159i zapnut\u00ed re\u017eimu CONFIG_FORTIFY_SOURCE. P\u0159idan\u00e1 \u00faprava spo\u010d\u00edv\u00e1 v kontrole p\u0159ekro\u010den\u00ed mez\u00ed element\u016f struktur, jejich\u017e velikost je zn\u00e1m\u00e1. Uv\u00e1d\u00ed se, \u017ee realizovan\u00e1 mo\u017enost by umo\u017enila zablokovat v\u0161echna souvisej\u00edc\u00ed s memcpy() p\u0159ekro\u010den\u00ed bufferu v j\u00e1d\u0159e, identifikovan\u00e1 minim\u00e1ln\u011b za posledn\u00ed t\u0159i roky.\n<li class=\"l\"> Byla p\u0159id\u00e1na druh\u00e1 \u010d\u00e1st k\u00f3du aktualizovan\u00e9 implementace gener\u00e1toru pseudon\u00e1hodn\u00fdch \u010d\u00edsel RDRAND, kter\u00e1 odpov\u00edd\u00e1 za funkci za\u0159\u00edzen\u00ed \/dev\/random a \/dev\/urandom. Nov\u00e1 implementace se vyzna\u010duje unifikac\u00ed pr\u00e1ce \/dev\/random a \/dev\/urandom, p\u0159id\u00e1n\u00edm ochrany proti vzniku duplicit v toku n\u00e1hodn\u00fdch \u010d\u00edsel p\u0159i spu\u0161t\u011bn\u00ed. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/\"   title=\"virtu\u00e1ln\u00edch stroj\u016f\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2100\">virtu\u00e1ln\u00edch stroj\u016f<\/a> a p\u0159echodem na pou\u017e\u00edv\u00e1n\u00ed hashovac\u00ed funkce BLAKE2s nam\u00edsto SHA1 pro operace m\u00edch\u00e1n\u00ed entropie. Tato zm\u011bna umo\u017enila zv\u00fd\u0161it bezpe\u010dnost gener\u00e1toru pseudon\u00e1hodn\u00fdch \u010d\u00edsel d\u00edky zbaven\u00ed se problematick\u00e9ho algoritmu SHA1 a vylou\u010den\u00ed p\u0159episov\u00e1n\u00ed inicializa\u010dn\u00edho vektoru RNG. Proto\u017ee algorithmus BLAKE2s p\u0159ekon\u00e1v\u00e1 SHA1 z hlediska v\u00fdkonu, m\u00e1 jeho vyu\u017eit\u00ed tak\u00e9 pozitivn\u00ed dopad na v\u00fdkon.\n<li class=\"l\"> Pro architekturu ARM64 byla p\u0159id\u00e1na podpora nov\u00e9ho algoritmu ov\u011b\u0159ov\u00e1n\u00ed ukazatel\u016f \u2014 \u201eQARMA3\u201c, kter\u00fd je rychlej\u0161\u00ed ne\u017e algoritmus QARMA p\u0159itom si zachov\u00e1v\u00e1 po\u017eadovanou \u00farove\u0148 ochrany. Technologii lze pou\u017e\u00edt ke kontrole adres n\u00e1vratu pomoc\u00ed digit\u00e1ln\u00edch podpis\u016f, kter\u00e9 jsou ulo\u017eeny v nepou\u017eit\u00fdch vy\u0161\u0161\u00edch bitech samotn\u00e9ho ukazatele.\n<li class=\"l\"> Pro architekturu ARM64 byla implementov\u00e1na podpora sestaven\u00ed s aktivac\u00ed v GCC 12 re\u017eimu ochrany proti p\u0159eps\u00e1n\u00ed adresy n\u00e1vratu z funkce v p\u0159\u00edpad\u011b p\u0159ete\u010den\u00ed bufferu na z\u00e1sobn\u00edku. Podstata ochrany spo\u010d\u00edv\u00e1 v uchov\u00e1n\u00ed adresy n\u00e1vratu do funkce v samostatn\u00e9m \u201est\u00ednov\u00e9m\u201c z\u00e1sobn\u00edku a jej\u00edho vyta\u017een\u00ed p\u0159ed vystoupen\u00edm z funkce.\n<li class=\"l\"> Bylo p\u0159id\u00e1no nov\u00e9 \u00falo\u017ei\u0161t\u011b kl\u00ed\u010d\u016f (keyring) \u2014 \u201emachine\u201c, obsahuj\u00edc\u00ed kl\u00ed\u010de vlastn\u00edka syst\u00e9mu (MOK, Machine Owner Keys), kter\u00e9 jsou podporov\u00e1ny v shim zav\u00e1d\u011b\u010di. Tyto kl\u00ed\u010de lze pou\u017e\u00edt k podepisov\u00e1n\u00ed digit\u00e1ln\u00edch podpis\u016f komponent\u016f j\u00e1dra, kter\u00e9 jsou na\u010d\u00edt\u00e1ny po po\u010d\u00e1te\u010dn\u00edm zaveden\u00ed (nap\u0159. modul\u016f j\u00e1dra).\n<li class=\"l\"> Byla odstran\u011bna podpora asymetrick\u00fdch soukrom\u00fdch kl\u00ed\u010d\u016f pro TPM, kter\u00e9 byly navr\u017eeny ve zastaral\u00e9 verzi TPM, obsahuj\u00ed zn\u00e1m\u00e9 bezpe\u010dnostn\u00ed probl\u00e9my a v praxi se neujaly.\n<li class=\"l\"> Byla p\u0159id\u00e1na ochrana dat typu size_t p\u0159ed p\u0159ete\u010den\u00edm cel\u00fdch \u010d\u00edsel. V k\u00f3du jsou pou\u017eity zpracovatele size_mul(), size_add() a size_sub(), kter\u00e9 umo\u017e\u0148uj\u00ed bezpe\u010dn\u011b prov\u00e1d\u011bt n\u00e1soben\u00ed, s\u010d\u00edt\u00e1n\u00ed a od\u010d\u00edt\u00e1n\u00ed velikost\u00ed typu size_t.\n<li class=\"l\"> P\u0159i sestavov\u00e1n\u00ed j\u00e1dra byly zahrnuty p\u0159\u00edznaky \u201e-Warray-bounds\u201c a \u201e-Wzero-length-bounds\u201c, kter\u00e9 generuj\u00ed upozorn\u011bn\u00ed p\u0159i p\u0159ekro\u010den\u00ed indexu za hranici pole a pou\u017e\u00edv\u00e1n\u00ed pol\u00ed nulov\u00e9 d\u00e9lky.\n<li class=\"l\"> Do za\u0159\u00edzen\u00ed virtio-crypto byla p\u0159id\u00e1na podpora \u0161ifrov\u00e1n\u00ed pomoc\u00ed algoritmu RSA.                                 <\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> Do implementace s\u00ed\u0165ov\u00fdch most\u016f byla p\u0159id\u00e1na podpora re\u017eimu uzam\u010den\u00ed port\u016f (locked mode), ve kter\u00e9m u\u017eivatel m\u016f\u017ee pos\u00edlat provoz p\u0159es port pouze s povolenou MAC adresou. Tak\u00e9 byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed n\u011bkolika struktur pro hodnocen\u00ed stavu protokolu STP (Spanning Tree Protocol). D\u0159\u00edve mohla b\u00fdt pro VLAN prov\u00e1d\u011bna pouze p\u0159\u00edm\u00e1 vazba na STP (1:1), kdy ka\u017ed\u00fd VLAN byl spravov\u00e1n nez\u00e1visle. V nov\u00e9 verzi byl p\u0159id\u00e1n parametr mst_enable, p\u0159i jeho\u017e aktivaci je stav VLAN kontrolov\u00e1n modulem MST (Multiple Spanning Trees) a vazba VLAN m\u016f\u017ee odpov\u00eddat modelu M:N.\n<li class=\"l\"> Pokra\u010duje pr\u00e1ce na integraci do s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku prost\u0159edk\u016f pro sledov\u00e1n\u00ed p\u0159\u00ed\u010din odm\u00edtnut\u00ed paket\u016f (k\u00f3dy reason). K\u00f3d p\u0159\u00ed\u010diny je p\u0159ed\u00e1v\u00e1n b\u011bhem uvoln\u011bn\u00ed pam\u011bti spojen\u00e9 s paketem a umo\u017e\u0148uje br\u00e1t v \u00favahu takov\u00e9 situace, jako je odm\u00edtnut\u00ed paketu z d\u016fvodu chyb p\u0159i vypln\u011bn\u00ed pol\u00ed v hlavi\u010dce, detekce spoofingu filtrem rp_filter, nespr\u00e1vn\u00e1 kontroln\u00ed suma, nedostatek pam\u011bti, aktivace pravidel IPSec XFRM, nespr\u00e1vn\u00e9 po\u0159adov\u00e9 \u010d\u00edslo TCP atd.\n<li class=\"l\"> Byla poskytnuta mo\u017enost p\u0159enosu s\u00ed\u0165ov\u00fdch paket\u016f z BPF program\u016f spu\u0161t\u011bn\u00fdch z u\u017eivatelsk\u00e9ho prostoru v re\u017eimu BPF_PROG_RUN, kde se BPF programy vykon\u00e1vaj\u00ed v j\u00e1d\u0159e, ale vrac\u00ed v\u00fdsledek do u\u017eivatelsk\u00e9ho prostoru. Pakety jsou p\u0159en\u00e1\u0161eny pomoc\u00ed subsyst\u00e9mu XDP (eXpress Data Path). Podporov\u00e1n je \u017eiv\u00fd re\u017eim zpracov\u00e1n\u00ed paket\u016f, p\u0159i kter\u00e9m m\u016f\u017ee XDP zpracovatel na m\u00edst\u011b p\u0159esm\u011brov\u00e1vat s\u00ed\u0165ov\u00e9 pakety do s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku nebo na jin\u00e1 za\u0159\u00edzen\u00ed. Tak\u00e9 je mo\u017en\u00e9 vytv\u00e1\u0159et programov\u00e9 gener\u00e1tory extern\u00edho provozu nebo vkl\u00e1dat s\u00ed\u0165ov\u00e9 r\u00e1mce do s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku.\n<li class=\"l\"> Pro BPF programy p\u0159ipojovan\u00e9 k s\u00ed\u0165ov\u00fdm cgroups byly navr\u017eeny pomocn\u00e9 funkce pro explicitn\u00ed nastaven\u00ed hodnoty vracen\u00e9 syst\u00e9mov\u00fdmi vol\u00e1n\u00edmi, co\u017e umo\u017e\u0148uje p\u0159edat \u00fapln\u011bj\u0161\u00ed informace o p\u0159\u00ed\u010din\u00e1ch blokov\u00e1n\u00ed syst\u00e9mov\u00e9ho vol\u00e1n\u00ed.\n<li class=\"l\"> Do pod syst\u00e9mu XDP (eXpress Data Path) byla p\u0159id\u00e1na podpora fragmentovan\u00fdch paket\u016f um\u00edst\u011bn\u00fdch v n\u011bkolika bufferech, co\u017e umo\u017e\u0148uje zpracov\u00e1n\u00ed jumbo r\u00e1mc\u016f a pou\u017eit\u00ed TSO\/GRO (TCP Segmentation Offload\/Generic Receive Offload) pro XDP_REDIRECT.\n<li class=\"l\"> Proces odstra\u0148ov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch prostor\u016f n\u00e1zv\u016f byl zna\u010dn\u011b urychlen, co\u017e bylo po\u017eadov\u00e1no v n\u011bkter\u00fdch velk\u00fdch syst\u00e9mech s vysok\u00fdm objemem provozu.                      <\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> Ve vyt\u011bra\u010dn\u00e9m ovlada\u010di amdgpu je v\u00fdchoz\u00ed aktivov\u00e1na technologie adaptivn\u00ed synchronizace FreeSync, kter\u00e1 umo\u017e\u0148uje upravovat frekvenci obnovov\u00e1n\u00ed obrazovky, zaji\u0161\u0165uj\u00edc\u00ed plynulost a nep\u0159eru\u0161ovan\u00e9 zobrazen\u00ed b\u011bhem her a sledov\u00e1n\u00ed videa. Byla deklarov\u00e1na stabiln\u00ed podpora GPU Aldebaran.\n<li class=\"l\"> V ovlada\u010di i915 byla p\u0159id\u00e1na podpora \u010dip\u016f Intel Alder Lake N a diskr\u00e9tn\u00edch grafick\u00fdch karet Intel DG2-G12 (Arc Alchemist).\n<li class=\"l\"> V ovlada\u010di nouveau byla zaji\u0161t\u011bna podpora vy\u0161\u0161\u00edch bitrates pro rozhran\u00ed DP\/eDP a podpora prodlu\u017eova\u010d\u016f kabelu lttprs (Link-Training Tunable PHY Repeaters).\n<li class=\"l\"> V pod syst\u00e9mu drm (Direct Rendering Manager) byla v ovlada\u010d\u00edch armada, exynos, gma500, hyperv, imx, ingenic, mcde, mediatek, msm, omap, rcar-du, rockchip, sprd, sti, tegra, tilcdc, xen a vc4 p\u0159id\u00e1na podpora parametru nomodeset, kter\u00fd umo\u017e\u0148uje deaktivaci p\u0159ep\u00edn\u00e1n\u00ed video re\u017eim\u016f na \u00farovni j\u00e1dra a pou\u017eit\u00ed prost\u0159edk\u016f pro hardwarovou akceleraci vykreslov\u00e1n\u00ed, p\u0159i\u010dem\u017e ponech\u00e1v\u00e1 pouze funkcionalitu spojenou se syst\u00e9mov\u00fdm framebifferem.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM SoC Qualcomm Snapdragon 625\/632 (pou\u017e\u00edv\u00e1no ve smartphonech LG Nexus 5X a Fairphone FP3), Samsung Exynos 850, Samsung Exynos 7885 (pou\u017e\u00edv\u00e1no v Samsung Galaxy A8), Airoha (Mediatek\/EcoNet) EN7523, Mediatek mt6582 (tablet Prestigio PMT5008 3G), Microchip Lan966, Renesas RZ\/G2LC, RZ\/V2L, Tesla FSD, TI K3\/AM62 a i.MXRTxxxx.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM za\u0159\u00edzen\u00ed a desek Broadcom (Raspberry Pi Zero 2 W), Qualcomm (Google Herobrine R1 Chromebook, SHIFT6mq, Samsung Galaxy Book2), Rockchip (Pine64 PineNote, Bananapi-R2-Pro, STM32 Emtrion emSBS, Samsung Galaxy Tab S, tablet Prestigio PMT5008 3G), Allwinner (A20-Marsboard), Amlogic (Amediatek X96-AIR, CYX A95XF3-AIR, Haochuangy H96-Max, Amlogic AQ222 a OSMC Vero 4K+), Aspeed (Quanta S6Q, ASRock ROMED8HM3), Marvell MVEBU\/Armada (Ctera C200 V1 a V2 NAS), Mstar (DongShanPiOne, Miyoo Mini), NXP i.MX (Protonic PRT8MM, emCON-MX8M Mini, Toradex Verdin, Gateworks GW7903).\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora zvukov\u00fdch syst\u00e9m\u016f a kodek\u016f AMD PDM, Atmel PDMC, Awinic AW8738, i.MX TLV320AIC31xx, Intel CS35L41, ESSX8336, Mediatek MT8181, nVidia Tegra234, Qualcomm SC7280, Renesas RZ\/V2L, Texas Instruments TAS585M. Byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed implementace zvukov\u00e9ho ovlada\u010de pro DSP \u010dip Intel AVS. Byla aktualizov\u00e1na podpora ovlada\u010d\u016f pro Intel ADL a Tegra234 a byly provedeny zm\u011bny ke zlep\u0161en\u00ed podpory zvuku na za\u0159\u00edzen\u00edch Dell, HP, Lenovo, ASUS, Samsung a Clevo.    <\/ul>\n<p>Z\u00e1rove\u0148 latinskoamerick\u00e1 Nadace svobodn\u00e9ho softwaru vytvo\u0159ila variantu zcela svobodn\u00e9ho j\u00e1dra 5.18 \u2014 Linux-libre 5.18-gnu, vy\u010di\u0161t\u011bn\u00e9ho od prvk\u016f firmwaru a ovlada\u010d\u016f obsahuj\u00edc\u00edch nesvobodn\u00e9 komponenty nebo \u010d\u00e1sti k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobce. V nov\u00e9m vyd\u00e1n\u00ed do\u0161lo k vy\u010di\u0161t\u011bn\u00ed ovlada\u010d\u016f pro panely MIPI DBI, VPU Amphion, WiFi MediaTek MT7986 WMAC, Mediatek MT7921U (USB) a Realtek 8852a\/8852c, zvukov\u00fdch \u010dip\u016f Intel AVS a Texas Instruments TAS5805M. Tak\u00e9 do\u0161lo k vy\u010di\u0161t\u011bn\u00ed DTS-soubor\u016f pro r\u016fzn\u00e9 SoC Qualcomm s procesory zalo\u017een\u00fdmi na architektu\u0159e AArch64. Byl aktualizov\u00e1n k\u00f3d pro \u010di\u0161t\u011bn\u00ed blob\u016f v ovlada\u010d\u00edch a subsyst\u00e9mech AMD GPU, MediaTek MT7915, Silicon Labs WF200+ WiFi, Mellanox Spectru Ethernet, Realtek rtw8852c, Qualcomm Q6V5, Wolfson ADSP, MediaTek HCI UART.                         <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57235\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0438\u0441\u0442\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0424\u0421 Reiserfs, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 Intel IBT, \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0440\u0435\u0436\u0438\u043c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u043e\u0432 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 memcpy(), \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 fprobe, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104123","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-18\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-18\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-05-23T13:36:40+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-05-23T13:36:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed j\u00e1dra Linux 5.18 | ProHoster","description":"Po dvou m\u011bs\u00edcich v\u00fdvoje Linus Torvalds p\u0159edstavil vyd\u00e1n\u00ed j\u00e1dra Linux 5.18.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-18","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.18.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-5-18","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-23T13:36:40+00:00","article:modified_time":"2022-05-23T13:36:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104123","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 18:15:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-23 13:37:44","updated":"2026-02-09 18:15:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104123"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104123\/revisions"}],"predecessor-version":[{"id":159344,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104123\/revisions\/159344"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}