{"id":115500,"date":"2024-05-02T12:46:51","date_gmt":"2024-05-02T10:46:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-distributiva-red-hat-enterprise-linux-9-4"},"modified":"2024-05-02T12:46:51","modified_gmt":"2024-05-02T10:46:51","slug":"reliz-distributiva-red-hat-enterprise-linux-9-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-4","title":{"rendered":"Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 9.4","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spole\u010dnost Red Hat vydala distribuci Red Hat Enterprise Linux 9.4. Hotov\u00e9 instala\u010dn\u00ed obrazy jsou k dispozici pro registrovan\u00e9 u\u017eivatele Red Hat Customer Portal (pro vyhodnocen\u00ed funk\u010dnosti lze tak\u00e9 pou\u017e\u00edt iso-obrazy CentOS Stream 9 a bezplatn\u00e9 sestaven\u00ed RHEL pro v\u00fdvoj\u00e1\u0159e). Vyd\u00e1n\u00ed je ur\u010deno pro architektury x86_64, s390x (IBM System z), ppc64le a Aarch64 (ARM64).       <\/p>\n<p>V\u011btev RHEL 9 se vyv\u00edj\u00ed s otev\u0159en\u011bj\u0161\u00edm procesem v\u00fdvoje a pou\u017e\u00edv\u00e1 jako z\u00e1klad bal\u00ed\u010dkovou z\u00e1kladnu CentOS Stream 9. CentOS Stream je prezentov\u00e1n jako upstream projekt pro RHEL, kter\u00fd d\u00e1v\u00e1 mo\u017enost t\u0159et\u00edm stran\u00e1m ovliv\u0148ovat p\u0159\u00edpravu bal\u00ed\u010dk\u016f pro RHEL, navrhovat sv\u00e9 zm\u011bny a m\u00edt vliv na p\u0159ijat\u00e1 rozhodnut\u00ed. V souladu s 10let\u00fdm cyklem podpory distribuce RHEL 9 bude doprov\u00e1zena a\u017e do roku 2032.     <\/p>\n<p>Zdrojov\u00e9 texty rpm-bal\u00ed\u010dk\u016f RHEL 9.4 nejsou um\u00edst\u011bny v ve\u0159ejn\u00e9m repozit\u00e1\u0159i git.centos.org a jsou poskytov\u00e1ny klient\u016fm spole\u010dnosti pouze prost\u0159ednictv\u00edm uzav\u0159en\u00e9 \u010d\u00e1sti webu, kde plat\u00ed u\u017eivatelsk\u00e1 smlouva (EULA), kter\u00e1 zakazuje redistribuci t\u011bchto dat, co\u017e neumo\u017e\u0148uje pou\u017e\u00edvat tyto bal\u00ed\u010dky k vytv\u00e1\u0159en\u00ed odvozen\u00fdch distribuc\u00ed. Zdrojov\u00e9 texty z\u016fst\u00e1vaj\u00ed k dispozici v repozit\u00e1\u0159i CentOS Stream, ale ten nen\u00ed pln\u011b synchronizov\u00e1n s RHEL a ne v\u017edy nejnov\u011bj\u0161\u00ed verze bal\u00ed\u010dk\u016f odpov\u00eddaj\u00ed bal\u00ed\u010dk\u016fm z RHEL. Rocky Linux, Oracle a SUSE reprodukuj\u00ed zdrojov\u00e9 texty rpm-bal\u00ed\u010dk\u016f vyd\u00e1n\u00ed RHEL v r\u00e1mci projektu OpenELA.    <\/p>\n<p>Kl\u00ed\u010dov\u00e9 zm\u011bny v RHEL 9.4:  <\/p>\n<ul>\n<li class=\"l\"> Byla zaji\u0161t\u011bna pln\u00e1 podpora technologie pro vytv\u00e1\u0159en\u00ed izolovan\u00fdch enclaves Intel SGX (Software Guard Extensions). Podporov\u00e1ny jsou verze SGX 1 a 2, kter\u00e9 umo\u017e\u0148uj\u00ed vyu\u017eit\u00ed mechanism\u016f FLC (Flexible Launch Control) a EDMM (Enclave Dynamic Memory Management) pro zm\u011bnu opr\u00e1vn\u011bn\u00ed k jednotliv\u00fdm str\u00e1nk\u00e1m pam\u011bti enclavy, dynamick\u00e9 p\u0159id\u00e1v\u00e1n\u00ed\/odeb\u00edr\u00e1n\u00ed str\u00e1nek pam\u011bti k enclav\u011b a roz\u0161\u00ed\u0159en\u00ed enclavy.\n<li class=\"l\"> Do stabiln\u00ed verze byl za\u0159azen ovlada\u010d IDXD (Data Streaming Accelerator) pro vyu\u017eit\u00ed zrychlova\u010d\u016f p\u0159enosu dat integrovan\u00fdch v CPU Intel. D\u0159\u00edve byly SGX a IDXD klasifikov\u00e1ny jako experiment\u00e1ln\u00ed mo\u017enosti (Technology Preview).\n<li class=\"l\"> Realizace subsyst\u00e9mu eBPF byla synchronizov\u00e1na s j\u00e1drem Linux 6.6 (v minul\u00e9m vyd\u00e1n\u00ed byla pou\u017eita realizace eBPF z j\u00e1dra Linux 6.3).\n<li class=\"l\"> Do zav\u00e1d\u011bc\u00edho programu GRUB a vrstvy shim byla p\u0159id\u00e1na mo\u017enost aplikovat mechanismy ochrany pam\u011bti DEP (Data Execution Prevention), NX (No Execute) a XD (Execute Disable) k z\u00e1kazu vykon\u00e1v\u00e1n\u00ed instrukc\u00ed v ur\u010dit\u00fdch oblastech pam\u011bti ve f\u00e1zi p\u0159ed zah\u00e1jen\u00edm zav\u00e1d\u011bn\u00ed syst\u00e9mu.\n<li class=\"l\"> Byly za\u0159azeny nov\u00e9 verze kompil\u00e1tor\u016f a n\u00e1stroj\u016f pro v\u00fdvoj\u00e1\u0159e: GCC Toolset 13, LLVM Toolset 17.0.6, Rust Toolset 1.75.1 a Go Toolset 1.21.7.\n<li class=\"l\"> Byly p\u0159id\u00e1ny samostatn\u00e9 bal\u00ed\u010dky (Application Streams) s nov\u00fdmi verzemi Python 3.12, Ruby 3.3, PHP 8.2, nginx 1.24, MariaDB 10.11, PostgreSQL 16.\n<li class=\"l\"> Byly aktualizov\u00e1ny verze Git 2.43.0, Git LFS 3.4.1, Valgrind 3.22, SystemTap 5.0, elfutils 0.190, cmake 3.26. P\u0159id\u00e1ny nov\u00e9 bal\u00ed\u010dky maven-openjdk21 a libzip-tools.\n<li class=\"l\"> Byly aktualizov\u00e1ny bal\u00ed\u010dky souvisej\u00edc\u00ed s bezpe\u010dnost\u00ed: GnuTLS 3.8.3, nettle 3.9.1, p11-kit 0.25.3, libkcapi 1.4.0, stunnel 5.71, audit 3.1.2, SSG (SCAP Security Guide) 0.1.72, openCryptoki 3.22.0, ipa 4.11.\n<li class=\"l\"> Byly aktualizov\u00e1ny serverov\u00e9 a syst\u00e9mov\u00e9 bal\u00ed\u010dky: chrony 4.5, linuxptp 4.2, Rsyslog 8.2310, iptables 1.8.10, nftables 1.0.9, firewalld 1.3, stratis-cli 3.6.0, boom 1.6.0, 389-ds-base 2.4.5, samba 4.19.4, Podman 4.9.\n<li class=\"l\"> N\u00e1stroje SELinux pracuj\u00edc\u00ed v u\u017eivatelsk\u00e9m prostoru (libsepol, libselinux, libsemanage, policycoreutils, checkpolicy, mcstrans) byly aktualizov\u00e1ny na verzi 3.6, kter\u00e1 do jazyka CIL (Common Intermediate Language) p\u0159idala podporu pro pravidla \u201edeny\u201c a kl\u00ed\u010dov\u00e1 slova \u201enotself\u201c a \u201eother\u201c. Byl p\u0159id\u00e1n spustiteln\u00fd soubor getpolicyload pro zobrazen\u00ed po\u010dtu restart\u016f pravidel SELinux. Slu\u017eby nvme-stas, rust-afterburn, rust-coreos-installer a bootc, kter\u00e9 d\u0159\u00edve b\u011b\u017eely v re\u017eimu unconfined_service_t, byly p\u0159evedeny pod ochranu SELinux. Byla p\u0159id\u00e1na pravidla SELinux pro SAP HANA. Byl p\u0159id\u00e1n nov\u00fd slu\u017eba chronyd-restricted, chr\u00e1n\u011bn\u00e1 pomoc\u00ed SELinux. Byl p\u0159id\u00e1n bal\u00ed\u010dek grafana-selinux pro spu\u0161t\u011bn\u00ed grafana s ochranou SELinux.\n<li class=\"l\"> Registr\u00e1tor a ov\u011b\u0159ovatel Keylime, pou\u017e\u00edv\u00e1n pro potvrzen\u00ed autenticity a neust\u00e1l\u00e9 sledov\u00e1n\u00ed integrity extern\u00edch syst\u00e9m\u016f, lze nyn\u00ed spustit uvnit\u0159 kontejner\u016f, izolovan\u00fdch od hlavn\u00edho syst\u00e9mu.\n<li class=\"l\"> V syst\u00e9mu pro spr\u00e1vu protokol\u016f Rsyslog byla poskytnuta mo\u017enost zm\u011bny nastaven\u00ed \u0161ifrov\u00e1n\u00ed pro TLS\/SSL a byly p\u0159id\u00e1ny dal\u0161\u00ed mo\u017enosti pro resetov\u00e1n\u00ed opr\u00e1vn\u011bn\u00ed.\n<li class=\"l\"> V OpenSSL byla poskytnuta mo\u017enost um\u00edstit soubory s nastaven\u00edm TLS do samostatn\u00e9ho adres\u00e1\u0159e \/etc\/pki\/tls\/openssl.d, co\u017e umo\u017e\u0148uje p\u0159epsat parametry dodate\u010dn\u00fdch kryptografick\u00fdch modul\u016f bez zm\u011bny hlavn\u00edho konfigura\u010dn\u00edho souboru OpenSSL.\n<li class=\"l\"> V SSSD (System Security Services Daemon) byla poskytnuta mo\u017enost povolit a nastavit bezheslovou autentizaci s vyu\u017eit\u00edm biometrick\u00fdch senzor\u016f podporuj\u00edc\u00edch specifikaci FIDO2, jako jsou za\u0159\u00edzen\u00ed YubiKey.\n<li class=\"l\"> Byl p\u0159id\u00e1n experiment\u00e1ln\u00ed p\u0159\u00edkaz \u201epodman build farm\u201c pro vytv\u00e1\u0159en\u00ed obraz\u016f kontejner\u016f sou\u010dasn\u011b pro n\u011bkolik architektur. V Podman byla p\u0159id\u00e1na \u00fapln\u00e1 podpora backendu zalo\u017een\u00e9ho na SQLite a byla poskytnuta mo\u017enost pou\u017eit\u00ed modul\u016f containers.conf pro selektivn\u00ed na\u010d\u00edt\u00e1n\u00ed nastaven\u00ed. V Containerfile byly povoleny v\u00edcerozm\u011brn\u00e9 p\u0159\u00edkazy HereDoc. S\u00ed\u0165ov\u00e1 z\u00e1suvka CNI (Container Network Interface) byla prohl\u00e1\u0161ena za zastaralou. Pomoc\u00ed p\u0159\u00edkazu \u201epodman machine\u201c byla implementov\u00e1na mo\u017enost p\u0159esm\u011brov\u00e1n\u00ed USB za\u0159\u00edzen\u00ed do virtu\u00e1ln\u00edch stroj\u016f QEMU.\n<li class=\"l\"> V IdM (Identity Management) byla poskytnuta mo\u017enost povolit povinnou dvoufaktorovou autentifikaci LDAP klient\u016f pomoc\u00ed jednor\u00e1zov\u00fdch hesel (OTP). API IdM bylo stabilizov\u00e1no, d\u0159\u00edve prezentovan\u00e9 jako experiment\u00e1ln\u00ed. Do 389 Directory Server byla p\u0159id\u00e1na podpora protokolu HAProxy, co\u017e umo\u017e\u0148uje spr\u00e1vn\u00e9 ur\u010dov\u00e1n\u00ed IP adres klient\u016f p\u0159ipojuj\u00edc\u00edch se p\u0159es proxy.\n<li class=\"l\"> Ve sb\u011bra\u010d\u00edch obraz\u016f RHEL byla poskytnuta mo\u017enost ur\u010den\u00ed libovoln\u00fdch bod\u016f p\u0159ipojen\u00ed a vytv\u00e1\u0159en\u00ed r\u016fzn\u00fdch re\u017eim\u016f rozd\u011blen\u00ed na odd\u00edly (auto-lvm, lvm, raw).\n<li class=\"l\"> A\u017e do verze 1.0.0 byla aktualizov\u00e1na implementace protokolu synce4l, kter\u00fd poskytuje podporu technologie synchronizace frekvence SyncE (Synchronous Ethernet), podporovan\u00e9 v n\u011bkter\u00fdch s\u00ed\u0165ov\u00fdch kart\u00e1ch a p\u0159ep\u00edna\u010d\u00edch, a umo\u017e\u0148uje zv\u00fd\u0161it efektivitu v\u00fdm\u011bny dat v aplikac\u00edch RAN (Radio Access Network) d\u00edky p\u0159esn\u011bj\u0161\u00ed synchronizaci \u010dasu. Byla p\u0159id\u00e1na podpora j\u00e1drem poskytovan\u00e9ho rozhran\u00ed DPLL (Digital Phase Locked Loop).\n<li class=\"l\"> Do pod syst\u00e9mu nftables byla p\u0159esunuta mo\u017enost kontroly pol\u00ed intern\u00edch hlavi\u010dek paket\u016f p\u0159en\u00e1\u0161en\u00fdch tunely. Do utilit nft byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed p\u0159\u00edkazu \u201enft reset\u201c pro resetov\u00e1n\u00ed stav\u016f pravidel nftables, jako jsou po\u010d\u00edtadla paket\u016f a hodnoty kv\u00f3t. V firewalld byla zastavena odstran\u011bn\u00ed pravidel p\u0159idan\u00fdch prost\u0159ednictv\u00edm iptables, pokud je v firewalld pou\u017e\u00edv\u00e1n backend nftables a nejsou p\u0159\u00edtomna pravidla vytvo\u0159en\u00e1 s volbou \u201e--direct.\u201c\n<li class=\"l\"> Do utility ss, kter\u00e1 je sou\u010d\u00e1st\u00ed bal\u00edku iproute2, byla p\u0159id\u00e1na mo\u017enost &#171;&#8212;bound-inactive&#187; k zobrazen\u00ed neaktivn\u00edch s\u00ed\u0165ov\u00fdch soket\u016f TCP, kter\u00e9 jsou p\u0159ipojen\u00e9 k <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/lir\/ipv4\/\"   title=\"IP adresu\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"599\">IP adresu<\/a> a s\u00ed\u0165ov\u00e9mu portu (byl proveden p\u0159\u00edkaz bind), ale nejsou spojena (p\u0159\u00edkaz connect) nebo nejsou p\u0159evedena do re\u017eimu \u010dek\u00e1n\u00ed na spojen\u00ed (p\u0159\u00edkaz listen).\n<li class=\"l\"> V NetworkManager byla p\u0159id\u00e1na mo\u017enost m\u011bnit po\u010det kan\u00e1l\u016f (\u0159ad paket\u016f p\u0159ipojen\u00fdch k obsluh\u00e1m p\u0159eru\u0161en\u00ed) pro s\u00ed\u0165ov\u00e9 rozhran\u00ed a nastavit re\u017eim SwitchDev, kter\u00fd umo\u017e\u0148uje delegovat operace p\u0159esm\u011brov\u00e1n\u00ed r\u00e1mc\u016f a zpracov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch paket\u016f specializovan\u00fdm hardwarov\u00fdm \u010dip\u016fm. Byla p\u0159id\u00e1na podpora s\u00ed\u0165ov\u00fdch rozhran\u00ed MACsec. Pro bezdr\u00e1tov\u00e1 spojen\u00ed byla poskytnuta mo\u017enost p\u0159i\u0159adit samostatnou trvalou MAC adresu (re\u017eim stable-ssid).\n<li class=\"l\"> V Nmstate bylo zaji\u0161t\u011bno vytvo\u0159en\u00ed YAML souboru pro n\u00e1vrat k p\u0159edchoz\u00edmu stavu nastaven\u00ed. Pro spr\u00e1vu priorit v agregovan\u00fdch s\u00ed\u0165ov\u00fdch rozhran\u00edch (bond) byla p\u0159id\u00e1na vlastnost priority. Byly p\u0159id\u00e1ny dal\u0161\u00ed atributy pro VLAN: registration-protocol, mvrp, reorder-headers a loose-binding. Byla poskytnuta mo\u017enost nastaven\u00ed VLAN tag\u016f na s\u00ed\u0165ov\u00fdch za\u0159\u00edzen\u00edch s podporou SR-IOV (Single Root I\/O Virtualization).\n<li class=\"l\"> Byl vr\u00e1cen modul j\u00e1dra s implementac\u00ed algoritmu kontroly p\u0159et\u00ed\u017een\u00ed TCP Illinois, kter\u00fd v pr\u016fm\u011bru umo\u017e\u0148uje dos\u00e1hnout v\u011bt\u0161\u00ed propustnosti a spravedliv\u011bj\u0161\u00edho rozd\u011blen\u00ed zdroj\u016f.\n<li class=\"l\"> Byly roz\u0161\u00ed\u0159eny mo\u017enosti utilit rteval, rtla a cyclicdeadline. Do rteval byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed prefix\u016f \u201e+\u201c a \u201e-\u201c pro p\u0159ipevn\u011bn\u00ed a odepnout j\u00e1dra CPU ze sledovan\u00fdch jader (measurement-cpulist). Utilita rtla byla aktualizov\u00e1na na stav odpov\u00eddaj\u00edc\u00ed j\u00e1dru Linux 6.6. Byla p\u0159id\u00e1na volba \u201ertla -C\u201c pro p\u0159ipevn\u011bn\u00ed dal\u0161\u00edch cgroup k vl\u00e1kn\u016fm. Do utilit cyclicdeadline byla p\u0159id\u00e1na mo\u017enost vizualizace zpo\u017ed\u011bn\u00ed ve form\u011b histogramu.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost nastavit maxim\u00e1ln\u00ed velikost FS p\u0159i dynamick\u00e9m zvy\u0161ov\u00e1n\u00ed velikosti FS slu\u017ebou stratisd, co\u017e umo\u017e\u0148uje vyhnout se poklesu v\u00fdkonu po nekontrolovan\u00e9m zv\u00fd\u0161en\u00ed velikosti XFS.\n<li class=\"l\"> Do utilitky lvconvert byla p\u0159id\u00e1na podpora konverze standardn\u00edch logick\u00fdch objem\u016f (LV) na variantu, kter\u00e1 umo\u017e\u0148uje dynamick\u00e9 p\u0159id\u011blov\u00e1n\u00ed m\u00edsta ve skladu (thin provisioning).\n<li class=\"l\"> Do multipathd byla p\u0159id\u00e1na podpora zpracov\u00e1n\u00ed ud\u00e1lost\u00ed FPIN-Li (Fabric Performance Impact Notification) pro optimalizaci p\u0159\u00edstupu k ulo\u017ei\u0161t\u00edm NVMe. Do sekce v\u00fdchoz\u00edch nastaven\u00ed v multipath.conf byly p\u0159id\u00e1ny parametry max_retries a auto_resize. Pro Device-mapper-multipath byly p\u0159id\u00e1ny nastaven\u00ed pro pou\u017eit\u00ed pole HPE Alletra 9000 NVMeFC a podporu re\u017eimu ANA (Asymmetric Namespace Access) v NVMeoFC.\n<li class=\"l\"> Byla p\u0159evedena mo\u017enost nahr\u00e1v\u00e1n\u00ed s adapt\u00e9ry NVMe\/FC (Non-volatile Memory Express (NVMe) p\u0159es Fibre Channel) do kategorie stabiln\u00edch.\n<li class=\"l\"> V webov\u00e9 konzole bylo zjednodu\u0161eno ovl\u00e1d\u00e1n\u00ed \u00falo\u017ei\u0161\u0165 a zm\u011bna velikosti odd\u00edl\u016f. Byla p\u0159id\u00e1na podpora generov\u00e1n\u00ed shell skript\u016f a sc\u00e9n\u00e1\u0159\u016f Ansible pro konfiguraci kdump. V sekci Virtu\u00e1ln\u00ed stroje byla implementov\u00e1na mo\u017enost p\u0159id\u00e1n\u00ed ve\u0159ejn\u00fdch kl\u00ed\u010d\u016f SSH a p\u0159ipojen\u00ed ji\u017e naform\u00e1tovan\u00fdch blokov\u00fdch za\u0159\u00edzen\u00ed. Pro p\u0159ipojen\u00ed k virtu\u00e1ln\u00edm stroj\u016fm byl m\u00edsto protokolu SPICE pou\u017eit VNC.\n<li class=\"l\"> Byly p\u0159id\u00e1ny nov\u00e9 syst\u00e9mov\u00e9 role pro spu\u0161t\u011bn\u00ed, spr\u00e1vu a konfiguraci fapolicyd a Microsoft SQL Server 2022. Byla p\u0159id\u00e1na role snapshot pro vytv\u00e1\u0159en\u00ed a spr\u00e1vu snapshot\u016f LVM. Do role sshd byla p\u0159id\u00e1na mo\u017enost ov\u011b\u0159ov\u00e1n\u00ed pomoc\u00ed certifik\u00e1t\u016f.\n<li class=\"l\"> Byla stabilizov\u00e1na podpora virtualizace na syst\u00e9mech ARM64 s hypervizorem KVM.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora migrace virtu\u00e1ln\u00edch stroj\u016f v re\u017eimu Multi-FD (v\u00edce popisova\u010d\u016f soubor\u016f), kde p\u0159i p\u0159esunu virtu\u00e1ln\u00edho stroje se nastavuje n\u011bkolik paraleln\u00edch spojen\u00ed, co\u017e umo\u017e\u0148uje zrychlen\u00ed p\u0159enosu dat p\u0159i vysokorychlostn\u00edm s\u00ed\u0165ov\u00e9m p\u0159ipojen\u00ed (20 Gbps a v\u00edce).\n<li class=\"l\"> Byl zv\u00fd\u0161en v\u00fdkon live migrace v re\u017eimu Postcopy, p\u0159i kter\u00e9m se virtu\u00e1ln\u00ed prost\u0159ed\u00ed spou\u0161t\u00ed t\u00e9m\u011b\u0159 okam\u017eit\u011b, a v\u0161echna chyb\u011bj\u00edc\u00ed data se na\u010d\u00edtaj\u00ed p\u0159i p\u0159\u00edstupu k nekop\u00edrovan\u00fdm str\u00e1nk\u00e1m pam\u011bti.\n<li class=\"l\"> Byla p\u0159id\u00e1na utilita toolbx, kter\u00e1 umo\u017e\u0148uje spustit dal\u0161\u00ed izolovan\u00e9 prost\u0159ed\u00ed, kter\u00e9 lze uspo\u0159\u00e1dat libovoln\u00fdm zp\u016fsobem pomoc\u00ed b\u011b\u017en\u00e9ho spr\u00e1vce bal\u00ed\u010dk\u016f DNF a pou\u017e\u00edvat pro instalaci experiment\u00e1ln\u00edch bal\u00edk\u016f bez vlivu na hlavn\u00ed syst\u00e9m.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora parametr\u016f p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku j\u00e1dra Linux: accept_memory, ia32_emulation, arm64.nomops, cgroup_favordynmods, early_page_ext, fw_devlink.sync_state, kunit.enable, mtrr=debug, rcupdate.rcu_cpu_stall_cputime, rcupdate.rcu_exp_stall_task_details, spec_rstack_overflow a workqueue.unbound_cpus.\n<li class=\"l\"> Byly p\u0159id\u00e1ny nov\u00e9 parametry sysctl: io_uring_group a numa_balancing_promote_rate_limit_MBps.\n<li class=\"l\"> Pou\u017eit\u00ed mechanismu io_uring je ve v\u00fdchoz\u00edm nastaven\u00ed zak\u00e1z\u00e1no pro v\u0161echny procesy (sysctl io_uring_disabled=2).\n<li class=\"l\"> Byla roz\u0161\u00ed\u0159ena podpora hardwaru. Byly p\u0159id\u00e1ny ovlada\u010de pro podporu technologi\u00ed Intel QuickAssist Technology, Intel TPMI, Intel Uncore Frequency, AMD HSMP, AMD XCP, AMD Platform Management a Mellanox PMC. Byl p\u0159id\u00e1n ovlada\u010d octeon_ep pro \u0159adi\u010de Marvell Octeon PCIe Endpoint Network Interface Controller.\n<li class=\"l\"> Pokra\u010dovalo se v poskytov\u00e1n\u00ed experiment\u00e1ln\u00ed (Technology Preview) podpory:\n<ul>\n<li> <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"146\">VPN<\/a> WireGuard,\n<li> kTLS (TLS na \u00farovni j\u00e1dra),\n<li> rozhran\u00ed asynchronn\u00edho vstupu\/v\u00fdstupu io_uring,  <\/li>\n<li> DAX (Direct Access) pro ext4 a XFS,   <\/li>\n<li> AMD SEV a SEV-ES v hypervizoru KVM,  <\/li>\n<li> slu\u017eby systemd-resolved.   <\/li>\n<li> mechanismu Sigstore pro ov\u011b\u0159ov\u00e1n\u00ed kontejner\u016f pomoc\u00ed digit\u00e1ln\u00edch podpis\u016f,\n<li> protokol\u016f PRP (Parallel Redundancy Protocol) a HSR (High-availability Seamless Redundancy),\n<li>  hardwarov\u00e9 akcelerace IPsec p\u0159es p\u0159esun operac\u00ed enkapsulace paket\u016f na stranu s\u00ed\u0165ov\u00e9 karty,\n<li>  protokolu \u0159\u00edzen\u00ed certifik\u00e1t\u016f ACME, kter\u00fd se pou\u017e\u00edv\u00e1 v Let\u2019s Encrypt,\n<li> SRv6 (Segment Routing over IPv6,  <\/li>\n<li> bal\u00ed\u010dku s grafick\u00fdm editorem GIMP 2.99.8,   <\/li>\n<li> nastaven\u00ed MPTCP (Multipath TCP) p\u0159es NetworkManager,   <\/li>\n<li> DNSSEC v IdM,   <\/li>\n<li> virtio-mem,   <\/li>\n<li> Socket API pro TuneD,  <\/li>\n<li> Soft-iWARP (Internet Wide-area RDMA Protocol),   <\/li>\n<li> GNOME pro ARM64 a IBM Z.  <\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61100\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.4. \u0413\u043e\u0442\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Red Hat Customer Portal (\u0434\u043b\u044f \u043e\u0446\u0435\u043d\u043a\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c iso-\u043e\u0431\u0440\u0430\u0437\u044b CentOS Stream 9 \u0438 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 RHEL \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432). \u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 x86_64, s390x (IBM System z), ppc64le \u0438 Aarch64 (ARM64). \u0412\u0435\u0442\u043a\u0430 RHEL 9 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115500","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.4.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-4\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.4 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.4.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-4\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-05-02T10:46:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-05-02T10:46:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 9.4 | ProHoster","description":"Spole\u010dnost Red Hat vydala novou verzi distribuce Red Hat Enterprise Linux 9.4.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.4 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.4.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-02T10:46:51+00:00","article:modified_time":"2024-05-02T10:46:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115500","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:29:57","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 23:33:19","updated":"2026-02-08 20:29:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=115500"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115500\/revisions"}],"predecessor-version":[{"id":157790,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115500\/revisions\/157790"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=115500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=115500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=115500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}