{"id":111490,"date":"2023-11-13T21:10:28","date_gmt":"2023-11-13T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-distributiva-red-hat-enterprise-linux-9-3"},"modified":"2023-11-13T21:10:28","modified_gmt":"2023-11-13T19:10:28","slug":"reliz-distributiva-red-hat-enterprise-linux-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3","title":{"rendered":"Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 9.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spole\u010dnost Red Hat vydala verzi distribuce Red Hat Enterprise Linux 9.3 (nov\u00e1 v\u011btev byla ozn\u00e1mena minul\u00fd t\u00fdden, av\u0161ak pozn\u00e1mky k vyd\u00e1n\u00ed byly zve\u0159ejn\u011bny a\u017e v\u010dera, do t\u00e9 doby byla na str\u00e1nk\u00e1ch viditeln\u00e1 beta verze). Aktualizace p\u0159edchoz\u00ed v\u011btve RHEL 8.9 se o\u010dek\u00e1v\u00e1 15. listopadu. Hotov\u00e9 instala\u010dn\u00ed obrazy jsou k dispozici pro registrovan\u00e9 u\u017eivatele port\u00e1lu Red Hat Customer Portal (pro hodnocen\u00ed funk\u010dnosti lze tak\u00e9 vyu\u017e\u00edt iso-obrazy CentOS Stream 9 a bezplatn\u00e9 verze RHEL pro v\u00fdvoj\u00e1\u0159e). Vyd\u00e1n\u00ed je sestaveno pro architektury x86_64, s390x (IBM System z), ppc64le a Aarch64 (ARM64).       <\/p>\n<p>V\u011btev RHEL 9 se vyv\u00edj\u00ed s otev\u0159en\u011bj\u0161\u00edm procesem v\u00fdvoje a pou\u017e\u00edv\u00e1 jako z\u00e1klad bal\u00ed\u010dkovou z\u00e1kladnu CentOS Stream 9. CentOS Stream je prezentov\u00e1n jako upstream projekt pro RHEL, kter\u00fd d\u00e1v\u00e1 mo\u017enost t\u0159et\u00edm stran\u00e1m ovliv\u0148ovat p\u0159\u00edpravu bal\u00ed\u010dk\u016f pro RHEL, navrhovat sv\u00e9 zm\u011bny a m\u00edt vliv na p\u0159ijat\u00e1 rozhodnut\u00ed. V souladu s 10let\u00fdm cyklem podpory distribuce RHEL 9 bude doprov\u00e1zena a\u017e do roku 2032.     <\/p>\n<p>RHEL 9.3 se stal prvn\u00edm vyd\u00e1n\u00edm, jeho\u017e zdrojov\u00e9 k\u00f3dy rpm bal\u00ed\u010dk\u016f nejsou um\u00edst\u011bny v ve\u0159ejn\u00e9m repozit\u00e1\u0159i git.centos.org a jsou poskytov\u00e1ny z\u00e1kazn\u00edk\u016fm spole\u010dnosti pouze prost\u0159ednictv\u00edm uzav\u0159en\u00e9 sekce webov\u00fdch str\u00e1nek, na kter\u00e9 plat\u00ed u\u017eivatelsk\u00e9 smlouvy (EULA), zakazuj\u00edc\u00ed redistribuci t\u011bchto dat, co\u017e neumo\u017e\u0148uje pou\u017e\u00edt tyto bal\u00ed\u010dky pro v\u00fdrobu odvozen\u00fdch distribuc\u00ed. Zdrojov\u00e9 k\u00f3dy z\u016fst\u00e1vaj\u00ed dostupn\u00e9 v repozit\u00e1\u0159i CentOS Stream, ale ten nen\u00ed pln\u011b synchronizov\u00e1n s RHEL a v n\u011bm se ne v\u017edy nejnov\u011bj\u0161\u00ed verze bal\u00ed\u010dk\u016f shoduj\u00ed s bal\u00ed\u010dky z RHEL. Rocky Linux, Oracle a SUSE spojily s\u00edly a nyn\u00ed reprodukuj\u00ed zdrojov\u00e9 k\u00f3dy rpm bal\u00ed\u010dk\u016f vyd\u00e1n\u00ed RHEL v r\u00e1mci projektu OpenELA.      <\/p>\n<p>Kl\u00ed\u010dov\u00e9 zm\u011bny v RHEL 9.3:  <\/p>\n<ul>\n<li class=\"l\"> Sou\u010d\u00e1st\u00ed jsou nov\u00e9 verze kompil\u00e1tor\u016f a n\u00e1stroj\u016f pro v\u00fdvoj\u00e1\u0159e: GCC Toolset 13, LLVM Toolset 16.0.6, Rust Toolset 1.71.1, Go Toolset 1.20.10, GCC 11.4.1 (syst\u00e9mov\u00fd kompil\u00e1tor), Redis 7, Node.js 20, java-21-openjdk (tak\u00e9 pokra\u010duj\u00ed v dod\u00e1vk\u00e1ch java-17-openjdk, java-11-openjdk a java-1.8.0-openjdk), Valgrind 3.21, SystemTap 4.9, elfutils 0.189, PCP 6.0.5, Grafana 9.2.10.\n<li class=\"l\"> Byly aktualizov\u00e1ny serverov\u00e9 a syst\u00e9mov\u00e9 bal\u00ed\u010dky: samba 4.18.6, iproute 6.2.0, Apache httpd 2.4.57 (+ p\u0159id\u00e1n modul mod_authnz_fcgi), SEtools 4.4.3, OpenSCAP 1.3.8, opencryptoki 3.21.0, NetworkManager 1.44, xdp-tools 1.4.0, perf 6.2, dmpd 1.0.2, nvme-cli 2.4, Pacemaker 2.1.6, 389-ds-base 2.3.4.\n<li class=\"l\"> Do bal\u00ed\u010dkov\u00e9ho mana\u017eera DNF byla p\u0159id\u00e1na p\u0159\u00edkazov\u00e1 &#171;reboot&#187; pro automatick\u00e9 restartov\u00e1n\u00ed po dokon\u010den\u00ed aktualizace. Jsou k dispozici n\u00e1sleduj\u00edc\u00ed re\u017eimy: &#171;never&#187; (ve v\u00fdchoz\u00edm nastaven\u00ed) &#8212; bez restartu, &#171;when-changed&#187; &#8212; restart po jak\u00e9koli aktualizaci (dnf upgrade) a &#171;when-needed&#187; &#8212; restart pouze v p\u0159\u00edpad\u011b, \u017ee nainstalovan\u00e9 zm\u011bny to vy\u017eaduj\u00ed (nap\u0159\u00edklad po instalaci aktualizace j\u00e1dra nebo systemd). Pro vypnut\u00ed m\u00edsto restartu je k dispozici parametr &#171;&#8212;poweroff&#187;.\n<li class=\"l\"> V DNF byly p\u0159id\u00e1ny nov\u00e9 pluginy: &#171;dnf leaves&#187; pro zobrazen\u00ed v\u0161ech nainstalovan\u00fdch bal\u00ed\u010dk\u016f, kter\u00e9 nejsou z\u00e1vislostmi pro jin\u00e9 bal\u00ed\u010dky; &#171;show-leaves&#187; pro zobrazen\u00ed ned\u00e1vno nainstalovan\u00fdch podobn\u00fdch bal\u00ed\u010dk\u016f nebo bal\u00ed\u010dk\u016f, kter\u00e9 p\u0159estaly b\u00fdt pou\u017e\u00edv\u00e1ny jako z\u00e1vislosti po transakci.\n<li class=\"l\"> Z nov\u00e9 verze j\u00e1dra Linux byly p\u0159eneseny implementace protokol\u016f SCTP (Stream Control Transmission Protocol) a MPTCP (Multipath TCP).\n<li class=\"l\"> Na platform\u011b ARM64 byla pln\u011b implementov\u00e1na podpora kamer s rozhran\u00edm USB, bezdr\u00e1tov\u00fdch adapt\u00e9r\u016f (Wi-Fi) a Bluetooth.\n<li class=\"l\"> Byla zaji\u0161t\u011bna pln\u00e1 podpora diskr\u00e9tn\u00edch grafick\u00fdch karet Intel Arc A-Series (Alchemist nebo DG2).\n<li class=\"l\"> Implementace subsyst\u00e9mu eBPF byla synchronizov\u00e1na s j\u00e1drem Linux 6.3.\n<li class=\"l\"> Byl p\u0159id\u00e1n n\u00e1stroj Stratis pro spr\u00e1vu lok\u00e1ln\u00edch \u00falo\u017ei\u0161\u0165, kter\u00fd poskytuje mo\u017enosti jako dynamick\u00e9 p\u0159id\u011blov\u00e1n\u00ed m\u00edsta ve skladu, sn\u00edmky, zaji\u0161t\u011bn\u00ed integrity a vytv\u00e1\u0159en\u00ed vrstev pro mezipam\u011b\u0165.\n<li class=\"l\"> Do systemd-udevd byly provedeny zm\u011bny, kter\u00e9 umo\u017e\u0148uj\u00ed p\u0159i\u0159azov\u00e1n\u00ed nem\u011bnn\u00fdch n\u00e1zv\u016f pro s\u00ed\u0165ov\u00e9 rozhran\u00ed InfiniBand.\n<li class=\"l\"> V Postfix byla implementov\u00e1na mo\u017enost kontroly DNS z\u00e1znam\u016f SRV k ur\u010den\u00ed hostitele a portu po\u0161tovn\u00edho serveru, kter\u00fd bude pou\u017eit pro p\u0159enos zpr\u00e1v. Tuto funkci lze vyu\u017e\u00edt v infrastruktur\u00e1ch, kde se pro doru\u010dov\u00e1n\u00ed po\u0161tovn\u00edch zpr\u00e1v pou\u017e\u00edvaj\u00ed slu\u017eby s dynamicky p\u0159id\u011blovan\u00fdmi \u010d\u00edsly s\u00ed\u0165ov\u00fdch port\u016f.\n<li class=\"l\"> Do bal\u00ed\u010dku cups-filters byl p\u0159id\u00e1n ovlada\u010d LF-to-CRLF, kter\u00fd lze pou\u017e\u00edt k p\u0159evodu znak\u016f &#171;&#092;n&#187; (nov\u00fd \u0159\u00e1dek) na &#171;&#092;r&#092;n&#187; (n\u00e1vrat voz\u00edku a nov\u00fd \u0159\u00e1dek) pro tisk\u00e1rny, kter\u00e9 podporuj\u00ed pouze zpracov\u00e1n\u00ed soubor\u016f s koncem \u0159\u00e1dku &#171;&#092;r&#092;n&#187;.\n<li class=\"l\"> Ve FUSE3 byla p\u0159id\u00e1na mo\u017enost zru\u0161en\u00ed prvku katalogu bez automatick\u00e9ho odmontov\u00e1n\u00ed mont\u00e1\u017en\u00edch bod\u016f souvisej\u00edc\u00edch s t\u00edmto prvkem.\n<li class=\"l\"> V NetworkManager byla p\u0159id\u00e1na podpora mo\u017enosti &#171;no-aaaa&#187; v resolv.conf, kter\u00e1 zakazuje odes\u00edl\u00e1n\u00ed DNS dotaz\u016f na z\u00e1znamy AAAA (ur\u010den\u00ed adresy IPv6 podle n\u00e1zvu hostitele). Byla p\u0159id\u00e1na podpora mo\u017enosti &#171;lacp_active&#187; pro \u0159\u00edzen\u00ed zpracov\u00e1n\u00ed r\u00e1mc\u016f LACPDU (Link Aggregation Control Protocol Data Units). Bylo realizov\u00e1no restartov\u00e1n\u00ed NetworkManageru po restartu slu\u017eby dbus. Existuje mo\u017enost v\u00fdstupu ozn\u00e1men\u00ed v p\u0159\u00edpad\u011b pou\u017eit\u00ed star\u00e9ho form\u00e1tu konfigurace ifcfg pro profily p\u0159ipojen\u00ed. Byla p\u0159id\u00e1na podpora vlastnost\u00ed: link.tx-queue-length, link.gro-max-size, link.gso-max-segments a link.gso-max-size.\n<li class=\"l\"> Pro jedno a to sam\u00e9 s\u00ed\u0165ov\u00e9 rozhran\u00ed v NetworkManageru je povoleno pou\u017e\u00edt jak statick\u00e9, tak dynamick\u00e9 (DHCP) nastaven\u00ed, nap\u0159\u00edklad pomoc\u00ed n\u00e1stroje nmstate lze nastavit statickou adresu pro rozhran\u00ed, na kter\u00e9m je povolena podpora DHCP. V nmstate je povoleno p\u0159i\u0159azen\u00ed nastaven\u00ed k s\u00ed\u0165ov\u00e9mu rozhran\u00ed podle MAC adresy nam\u00edsto jm\u00e9na rozhran\u00ed.\n<li class=\"l\"> Byla roz\u0161\u00ed\u0159ena podpora hardwaru. P\u0159id\u00e1na podpora CPU ARM64 NVIDIA Grace. Z j\u00e1dra Linux 6.2 byl p\u0159enesen ovlada\u010d Intel QAT s podporou za\u0159\u00edzen\u00ed Intel Quick Assist Technology 401xx\/402xx.\n<li class=\"l\"> Aby bylo mo\u017en\u00e9 chr\u00e1nit proti \u00fatok\u016fm Spectre v2 souvisej\u00edc\u00edm s spekulativn\u00edm vykon\u00e1v\u00e1n\u00edm instrukc\u00ed, byl p\u0159id\u00e1n re\u017eim AutoIBRS (Automatick\u00e1 nep\u0159\u00edm\u00e1 pobo\u010dka omezen\u00e1 spekulac\u00ed), podporovan\u00fd v CPU AMD, po\u010d\u00ednaje rodinou EPYC 9004 Genoa.\n<li class=\"l\"> Pro kontejnery byla poskytnuta mo\u017enost pou\u017eit\u00ed virtu\u00e1ln\u00edch \u010dip\u016f pro ukl\u00e1d\u00e1n\u00ed kryptografick\u00fdch kl\u00ed\u010d\u016f (vTPM), kter\u00e9 jsou realizov\u00e1ny na z\u00e1klad\u011b sd\u00edlen\u00e9ho fyzick\u00e9ho TPM (Trusted Platform Module).\n<li class=\"l\"> V LVM byla p\u0159id\u00e1na podpora logick\u00fdch odd\u00edl\u016f vmcore pro v\u00fdpisy j\u00e1dra vytv\u00e1\u0159en\u00e9 subsyst\u00e9mem kdump.\n<li class=\"l\"> Do instala\u010dn\u00edch sestav byl p\u0159id\u00e1n parametr &#171;inst.wait_for_disks&#187;, kter\u00fd ur\u010duje dobu \u010dek\u00e1n\u00ed na na\u010dten\u00ed kickstart souboru nebo p\u0159ipravenost ovlada\u010d\u016f b\u011bhem procesu zav\u00e1d\u011bn\u00ed.\n<li class=\"l\"> V instal\u00e1toru p\u0159i instalaci na syst\u00e9my ARM byla poskytnuta mo\u017enost v\u00fdb\u011bru varianty instalovan\u00e9ho j\u00e1dra (nap\u0159. s 64 KB str\u00e1nkami pam\u011bti). Z minim\u00e1ln\u00edho re\u017eimu instalace byl vylou\u010den bal\u00ed\u010dek s390utils-base a zanech\u00e1n pouze s390utils-core.\n<li class=\"l\"> Ve sb\u011brn\u00e9m n\u00e1stroji pro obrazy RHEL byla p\u0159id\u00e1na mo\u017enost generov\u00e1n\u00ed soubor\u016f ve form\u00e1tu OVA pro VMware VSphere.\n<li class=\"l\"> Do kickstart soubor\u016f v p\u0159\u00edkazu network byly p\u0159id\u00e1ny nov\u00e9 mo\u017enosti &#171;&#8212;ipv4-dns-search&#187; a &#171;&#8212;ipv6-dns-search&#187; pro ur\u010den\u00ed z\u00e1kladn\u00edch dom\u00e9n pro direktivu &#171;search&#187; v \/etc\/resolv.conf, stejn\u011b jako mo\u017enosti &#171;&#8212;ipv4-ignore-auto-dns&#187; a &#171;&#8212;ipv6-ignore-auto-dns&#187; pro ignorov\u00e1n\u00ed z\u00edsk\u00e1v\u00e1n\u00ed nastaven\u00ed DNS prost\u0159ednictv\u00edm DHCP.\n<li class=\"l\"> Byla vylep\u0161ena podpora TLS roz\u0161\u00ed\u0159en\u00ed EMS (Extended Master Secret, RFC 7627), kter\u00e9 je nezbytn\u00e9 pro zaji\u0161t\u011bn\u00ed dodr\u017eov\u00e1n\u00ed po\u017eadavk\u016f FIPS-140-3 v TLS 1.2 spojen\u00edch.\n<li class=\"l\"> V OpenSSH za\u010dalo odstra\u0148ov\u00e1n\u00ed pou\u017e\u00edv\u00e1n\u00ed algoritm\u016f na b\u00e1zi hash\u016f SHA-1 ve prosp\u011bch SHA-2. Pokud na <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-newyork\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2711\">serveru<\/a> neexistuj\u00ed kl\u00ed\u010de na b\u00e1zi SHA-1, sshd nyn\u00ed pou\u017eije pouze SHA-2 pro potvrzen\u00ed hostitelsk\u00fdch kl\u00ed\u010d\u016f, co\u017e m\u016f\u017ee v\u00e9st k nekompatibilit\u011b se star\u0161\u00edmi klienty RHEL 8 a p\u0159edchoz\u00edch verz\u00ed.\n<li class=\"l\"> V OpenSSL byla p\u0159id\u00e1na podpora nastaven\u00ed parametr\u016f zabezpe\u010den\u00fdch eliptick\u00fdch k\u0159ivek Brainpool a byla implementov\u00e1na ochrana p\u0159ed \u00fatoky na de\u0161ifrov\u00e1n\u00ed RSA zalo\u017een\u00e9 na m\u011b\u0159en\u00ed \u010dasu operac\u00ed, kter\u00e9 pou\u017e\u00edvaj\u00ed varianty metody Bleichenbacha.\n<li class=\"l\"> Do RPCSEC GSS Kerberos V5 byla p\u0159id\u00e1na podpora \u0161ifrovac\u00edch metod camellia128-cts-cmac, camellia256-cts-cmac, aes128-cts-hmac-sha256-128 a aes256-cts-hmac-sha384-192.\n<li class=\"l\"> Do auditorsk\u00fdch n\u00e1stroj\u016f byla p\u0159id\u00e1na podpora ud\u00e1lost\u00ed FANOTIFY a byla implementov\u00e1na mo\u017enost uchov\u00e1n\u00ed pol\u00ed fan_type (typ ud\u00e1losti), fan_info (p\u0159\u00edslu\u0161n\u00e9 informace), sub_trust a obj_trust (\u00farovn\u011b d\u016fv\u011bry pro subjekt a objekt ud\u00e1losti) do logu. Do slu\u017eby fapolicyd byla p\u0159id\u00e1na mo\u017enost p\u0159ed\u00e1vat \u010d\u00edsla pravidel pro odm\u00edtnut\u00e9 API po\u017eadavky za \u00fa\u010delem usnadn\u011bn\u00ed lad\u011bn\u00ed probl\u00e9m\u016f.\n<li class=\"l\"> Byla p\u0159id\u00e1na syst\u00e9mov\u00e1 role pro n\u00e1stroj keylime, kter\u00e1 usnad\u0148uje nastaven\u00ed registru a ov\u011b\u0159ovatele Keylime pou\u017e\u00edvan\u00e9ho pro autentizaci a nep\u0159etr\u017eit\u00e9 sledov\u00e1n\u00ed integrity extern\u00edho syst\u00e9mu. Nap\u0159\u00edklad je mo\u017en\u00e9 ov\u011b\u0159it autenticitu Edge a IoT za\u0159\u00edzen\u00ed nach\u00e1zej\u00edc\u00edch se na nezabezpe\u010den\u00fdch m\u00edstech, kde je mo\u017en\u00fd neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup. Byla vyd\u00e1na nov\u00e1 verze keylime 7.3.\n<li class=\"l\"> Byla p\u0159id\u00e1na syst\u00e9mov\u00e1 role pro spr\u00e1vu jednotek systemd a jejich instalaci. Byla p\u0159id\u00e1na syst\u00e9mov\u00e1 role pro instalaci, nastaven\u00ed, spr\u00e1vu a spu\u0161t\u011bn\u00ed datab\u00e1zov\u00e9ho syst\u00e9mu PostgreSQL. Do syst\u00e9mov\u00e9 role firewall byla p\u0159id\u00e1na podpora definice, zm\u011bny a odstran\u011bn\u00ed ipset\u016f.\n<li class=\"l\"> Do SELinux byla p\u0159id\u00e1na mo\u017enost virt_qemu_ga_run_unconfined, kter\u00e1 umo\u017e\u0148uje procesu qemu-ga (QEMU Guest Agent) vykon\u00e1vat p\u0159\u00edkazy, jako je mount, v nechr\u00e1n\u011bn\u00e9m re\u017eimu (domena unconfined_t), kter\u00e9 byly p\u016fvodn\u011b omezeny pomoc\u00ed SELinux. Byly p\u0159id\u00e1ny politiky SELinux pro ochranu slu\u017eeb qat, systemd-pstore, boothd, fdo-manufacturing-server, fdo-rendezvous-server, fdo-client-linuxapp a fdo-owner-onboarding-server.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora virtualizace 4. generace procesor\u016f Intel Xeon Scalable (Sapphire Rapids), kter\u00e1 umo\u017e\u0148uje pou\u017e\u00edt v virtu\u00e1ln\u00edch stroj\u00edch model CPU SapphireRapids a vyu\u017e\u00edt pokro\u010dil\u00e9 virtualiza\u010dn\u00ed mo\u017enosti t\u011bchto procesor\u016f.\n<li class=\"l\"> V Podman byla p\u0159id\u00e1na podpora kontejner\u016f komprimovan\u00fdch pomoc\u00ed algoritmu zstd. Byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed Quadlets pro automatickou generaci systemd slu\u017eeb z popis\u016f kontejner\u016f. Byla p\u0159id\u00e1na shell podmansh, kterou lze pou\u017e\u00edt nam\u00edsto \/usr\/bin\/bash pro spu\u0161t\u011bn\u00ed u\u017eivatelsk\u00e9ho sezen\u00ed v kontejneru. Byly aktualizov\u00e1ny verze Podman, Buildah, Skopeo, crun a runc.\n<li class=\"l\"> Byly p\u0159id\u00e1ny nov\u00e9 parametry p\u0159\u00edkazov\u00e9 \u0159\u00e1dky j\u00e1dra:\n<ul>\n<li class=\"l\"> amd_pstate pro \u0159\u00edzen\u00ed re\u017eim\u016f spot\u0159eby energie CPU AMD;\n<li class=\"l\"> arm64.nosve pro vypnut\u00ed SVE (Scalable Vector Extension);\n<li class=\"l\"> arm64.nosme pro vypnut\u00ed SME (Scalable Matrix Extension);\n<li class=\"l\">  gather_data_sampling pro \u0159\u00edzen\u00ed re\u017eimu ochrany proti \u00fatok\u016fm GDS (Gather Data Sampling neboli Downfall);\n<li class=\"l\"> nospectre_bhb pro vypnut\u00ed ochrany Spectre-BHB;\n<li class=\"l\"> trace_clock pro nastaven\u00ed \u010dasova\u010de ud\u00e1lost\u00ed sledov\u00e1n\u00ed.  <\/ul>\n<li class=\"l\"> Byly roz\u0161\u00ed\u0159eny mo\u017enosti pro clustery a vysoce dostupn\u00e9 syst\u00e9my: Do agenta LVM-activate byla p\u0159id\u00e1na podpora pro v\u00fdm\u011bnu (failover) skupin odd\u00edl\u016f, v nich\u017e chyb\u00ed fyzick\u00e9 odd\u00edly. Do agent\u016f zdroj\u016f clusteru IPaddr2 a IPsrcaddr byla p\u0159id\u00e1na podpora pro policy routing. Do agenta ocf:heartbeat:Filesystem byla p\u0159id\u00e1na podpora pro FS EFS (Amazon Elastic File System).\n<li class=\"l\"> Byly p\u0159id\u00e1ny nov\u00e9 kontejnery s nastaven\u00edm FDO (FIDO Device Onboard): fdo-manufacturing-server, fdo-owner-onboarding-server, fdo-rendezvous-server a fdo-serviceinfo-api-server. Byl p\u0159id\u00e1n nov\u00fd kontejner rhel9\/squid s proxy serverem Squid. V edici \u201eRHEL for Edge\u201c byla implementov\u00e1na podpora nov\u00fdch typ\u016f obraz\u016f \u201eminimal-raw\u201c, \u201eedge-vsphere\u201c (*.vmdk) a \u201eedge-ami\u201c (*.ami).\n<li class=\"l\"> Do AMI obraz\u016f pro cloudov\u00e1 prost\u0159ed\u00ed AWS EC2 byla p\u0159id\u00e1na podpora pro spou\u0161t\u011bn\u00ed v re\u017eimu UEFI.\n<li class=\"l\"> Pro pr\u00e1ci se smartcardami a USB tokeny CCID (Chip Card Interface Device) a ICCD (Integrated Circuit Card Device) byl zapojen nov\u00fd vyd\u00e1n\u00ed ovlada\u010de pcsc-lite-ccid 1.5.2, ve kter\u00e9m byly vy\u0159e\u0161eny probl\u00e9my s \u0159adi\u010dem Alcor Micro AU9560 a byla p\u0159id\u00e1na podpora pro nov\u00e9 \u010dte\u010dky smartkaret.\n<li class=\"l\"> Byly vyhl\u00e1\u0161eny za zastaral\u00e9 bal\u00ed\u010dky initial-setup a pmdk (Persistent Memory Development Kit).\n<li class=\"l\"> Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora protokol\u016f PRP (Parallel Redundancy Protocol) a HSR (High-availability Seamless Redundancy).\n<li class=\"l\"> Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed mo\u017enost hardwarov\u00e9ho urychlen\u00ed IPsec p\u0159es delegaci operac\u00ed encapsulace paket\u016f na s\u00ed\u0165ovou kartu.\n<li class=\"l\"> Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora SRv6 (Segment Routing over IPv6).\n<li class=\"l\"> Experiment\u00e1ln\u00ed implementace kTLS (TLS na \u00farovni j\u00e1dra) byla synchronizov\u00e1na s j\u00e1drem 6.3. Byla p\u0159id\u00e1na podpora pou\u017e\u00edv\u00e1n\u00ed kTLS pro zrychlen\u00ed GnuTLS.\n<li class=\"l\"> Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora rozhran\u00ed asynchronn\u00edho vstupu\/v\u00fdstupu io_uring, kter\u00e9 se vyzna\u010duje podporou poling (polling) vstupu\/v\u00fdstupu a mo\u017enost\u00ed pr\u00e1ce jak s vyrovn\u00e1v\u00e1n\u00edm pam\u011bti, tak bez vyrovn\u00e1v\u00e1n\u00ed pam\u011bti. V API io_uring se v\u00fdvoj\u00e1\u0159i j\u00e1dra sna\u017eili odstranit nedostatky star\u00e9ho rozhran\u00ed aio. V v\u00fdkonu je io_uring velmi bl\u00edzko SPDK a v\u00fdrazn\u011b p\u0159ed\u010d\u00ed libaio p\u0159i pr\u00e1ci s povolen\u00fdm polingem.\n<li class=\"l\"> Do syst\u00e9mu IdM (Identity Management) byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora protokolu pro spr\u00e1vu certifik\u00e1t\u016f ACME (Automated Certificate Management Environment), pou\u017e\u00edvan\u00e9ho v certifika\u010dn\u00edm centru Let\u2019s Encrypt.\n<li class=\"l\"> V Podman byla p\u0159id\u00e1na experiment\u00e1ln\u00ed mo\u017enost pou\u017eit\u00ed backendu \u00falo\u017ei\u0161t\u011b zalo\u017een\u00e9ho na SQLite (m\u00edsto BoltDB).\n<li class=\"l\"> Pokra\u010dovalo se v poskytov\u00e1n\u00ed experiment\u00e1ln\u00ed (Technology Preview) podpory:\n<ul>  <\/li>\n<li> <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"214\">VPN<\/a> WireGuard,   <\/li>\n<li> Intel SGX (Software Guard Extensions),   <\/li>\n<li> Intel IDXD (Data Streaming Accelerator),   <\/li>\n<li> DAX (Direct Access) pro ext4 a XFS,   <\/li>\n<li> AMD SEV a SEV-ES v hypervizoru KVM,  <\/li>\n<li> slu\u017eby systemd-resolved.   <\/li>\n<li> mechanismu Sigstore pro ov\u011b\u0159ov\u00e1n\u00ed kontejner\u016f pomoc\u00ed digit\u00e1ln\u00edch podpis\u016f,  <\/li>\n<li> bal\u00ed\u010dku s grafick\u00fdm editorem GIMP 2.99.8,   <\/li>\n<li> nastaven\u00ed MPTCP (Multipath TCP) p\u0159es NetworkManager,   <\/li>\n<li> DNSSEC v IdM,   <\/li>\n<li> virtio-mem,   <\/li>\n<li> hypervisor KVM pro ARM64,  <\/li>\n<li> instalace na NVMe nad Fibre Channel,   <\/li>\n<li> Socket API pro TuneD,  <\/li>\n<li> Soft-iWARP (Internet Wide-area RDMA Protocol),   <\/li>\n<li> GNOME pro ARM64 a IBM Z.  <\/li>\n<\/ul>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60104\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0438). \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 RHEL 8.9 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f 15 \u043d\u043e\u044f\u0431\u0440\u044f. \u0413\u043e\u0442\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Red Hat Customer Portal (\u0434\u043b\u044f \u043e\u0446\u0435\u043d\u043a\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111490","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-11-13T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-11-13T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 9.3 | ProHoster","description":"Spole\u010dnost Red Hat vydala verzi distribuce Red Hat Enterprise Linux 9.3 (nov\u00e1 v\u011btev byla ozn\u00e1mena minul\u00fd t\u00fdden, ale pozn\u00e1mky k vyd\u00e1n\u00ed byly zve\u0159ejn\u011bny a\u017e v\u010dera, a p\u0159edt\u00edm z\u016fst\u00e1valy na webu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-13T19:10:28+00:00","article:modified_time":"2023-11-13T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"111490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:23","updated":"2026-02-09 21:39:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=111490"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111490\/revisions"}],"predecessor-version":[{"id":159991,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111490\/revisions\/159991"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=111490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=111490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=111490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}