{"id":115726,"date":"2024-05-13T13:52:06","date_gmt":"2024-05-13T11:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-6-9"},"modified":"2024-05-13T13:52:06","modified_gmt":"2024-05-13T11:52:06","slug":"reliz-yadra-linux-6-9","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-9","title":{"rendered":"Uvoln\u011bn\u00ed j\u00e1dra Linux 6.9","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil uvoln\u011bn\u00ed j\u00e1dra Linux 6.9. Mezi nejv\u00fdznamn\u011bj\u0161\u00edmi zm\u011bnami je modul dm-vdo pro deduplikaci a kompresi blokov\u00fdch za\u0159\u00edzen\u00ed, re\u017eim p\u0159\u00edstupu k soubor\u016fm v FUSE, podpora vytv\u00e1\u0159en\u00ed pidfd pro jednotliv\u00e9 vl\u00e1kna, mechanismus BPF-token\u016f, podpora Rustu na syst\u00e9mech ARM64, p\u0159eveden\u00ed FS Ext2 do kategorie zastaral\u00fdch, odstran\u011bn\u00ed star\u00e9ho ovlada\u010de NTFS a podpora mechanismu Intel FRED.        <\/p>\n<p>Do nov\u00e9 verze bylo zapracov\u00e1no 15680 oprav od 2106 v\u00fdvoj\u00e1\u0159\u016f, velikost patche je 54 MB (zm\u011bny se dotkly 11825 soubor\u016f, bylo p\u0159id\u00e1no 687954 \u0159\u00e1dk\u016f k\u00f3du, 225344 \u0159\u00e1dk\u016f bylo odstran\u011bno). V minul\u00e9m vyd\u00e1n\u00ed bylo 15641 opravy od 2018 v\u00fdvoj\u00e1\u0159\u016f, velikost patche byla 44 MB. P\u0159ibli\u017en\u011b 42 % v\u0161ech zm\u011bn p\u0159edstaven\u00fdch ve verzi 6.9 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, asi 17 % zm\u011bn se vztahuje na aktualizaci k\u00f3du specifick\u00e9ho pro hardwarov\u00e9 architektury, 13 % je spojeno se s\u00ed\u0165ov\u00fdm stackem, 7 % s souborov\u00fdmi syst\u00e9my a 4 % s intern\u00edmi subsyst\u00e9my j\u00e1dra.      <\/p>\n<p>Hlavn\u00ed novinky v j\u00e1dru 6.9:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Do Device Mapper (DM) byl p\u0159id\u00e1n nov\u00fd zpracovatel dm-vdo (virtual data optimizer), kter\u00fd umo\u017e\u0148uje na z\u00e1klad\u011b existuj\u00edc\u00edch blokov\u00fdch za\u0159\u00edzen\u00ed implementovat virtu\u00e1ln\u00ed blokov\u00e9 za\u0159\u00edzen\u00ed disponuj\u00edc\u00ed takov\u00fdmi mo\u017enostmi, jako je deduplikace opakovan\u00fdch dat, komprese dat, vylou\u010den\u00ed pr\u00e1zdn\u00fdch blok\u016f a zvy\u0161ov\u00e1n\u00ed velikosti blokov\u00e9ho za\u0159\u00edzen\u00ed podle pot\u0159eby (thin provisioning). Tyto mo\u017enosti jsou realizov\u00e1ny na \u00farovni blokov\u00e9ho za\u0159\u00edzen\u00ed a nez\u00e1vis\u00ed na pou\u017e\u00edvan\u00e9m filesyst\u00e9mu (nap\u0159\u00edklad pomoc\u00ed dm-vdo lze implementovat automatick\u00e9 spojen\u00ed duplicitn\u00edch dat a uchov\u00e1n\u00ed informac\u00ed v komprimovan\u00e9 podob\u011b pro jak\u00fdkoli FS). Podporuje se pou\u017eit\u00ed dm-vdo pro fyzick\u00e1 \u00falo\u017ei\u0161t\u011b o velikosti a\u017e 256 TB a vytv\u00e1\u0159en\u00ed logick\u00fdch objem\u016f o velikosti a\u017e 4 PB. Pro spr\u00e1vu odd\u00edl\u016f vdo se doporu\u010duje pou\u017e\u00edvat lvm. Technologie VDO byla vyvinuta spole\u010dnost\u00ed Permabit a byla otev\u0159ena po jej\u00edm p\u0159evzet\u00ed firmou Red Hat v roce 2017.\n<li class=\"l\"> V subsyst\u00e9mu FUSE, kter\u00fd se pou\u017e\u00edv\u00e1 k implementaci souborov\u00fdch syst\u00e9m\u016f v u\u017eivatelsk\u00e9m prostoru, byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed implementace re\u017eimu \u201epassthrough\u201c, kter\u00e1 umo\u017e\u0148uje p\u0159\u00edmo na \u00farovni j\u00e1dra z\u00edsk\u00e1vat data soubor\u016f, \u010d\u00edm\u017e se obch\u00e1z\u00ed proces b\u011b\u017e\u00edc\u00ed v u\u017eivatelsk\u00e9m prostoru, co\u017e v n\u011bkter\u00fdch situac\u00edch m\u016f\u017ee v\u00fdrazn\u011b zv\u00fd\u0161it v\u00fdkon. Nap\u0159\u00edklad FUSE-implementace FS pracuj\u00edc\u00ed v re\u017eimu pouze pro \u010dten\u00ed a omezuj\u00edc\u00ed p\u0159\u00edstup k soubor\u016fm mohou dod\u00e1vat obsah soubor\u016f z p\u016fvodn\u00edho FS bez jejich p\u0159ed\u00e1n\u00ed do procesu FUSE.\n<li class=\"l\"> Do kategorie zastaral\u00fdch (deprecated) byl p\u0159eveden ovlada\u010d s implementac\u00ed souborov\u00e9ho syst\u00e9mu Ext2. Jako d\u016fvod je uvedena podpora pouze 32bitov\u00fdch \u010dasov\u00fdch \u010d\u00edta\u010d\u016f v inode, kter\u00e9 se p\u0159epln\u00ed 19. ledna 2038. M\u00edsto ovlada\u010de ext2 se doporu\u010duje pou\u017e\u00edvat ovlada\u010d ext4, kter\u00fd podporuje pr\u00e1ci s souborov\u00fdm syst\u00e9mem Ext2 a je s n\u00edm pln\u011b kompatibiln\u00ed, av\u0161ak m\u016f\u017ee vyu\u017e\u00edvat v ext2 odd\u00edlech \u010dasov\u00e9 zna\u010dky, kter\u00e9 nejsou vystaveny probl\u00e9mu 2038, pokud byl FS vytvo\u0159en s inode v\u011bt\u0161\u00edm ne\u017e 255 bajt\u016f (ve ovlada\u010di ext2 byly 32bitov\u00e9 \u010dasov\u00e9 \u010d\u00edta\u010de pou\u017e\u00edvan\u00e9 bez ohledu na velikost inode).\n<li class=\"l\"> Byl odstran\u011bn star\u00fd ovlada\u010d souborov\u00e9ho syst\u00e9mu NTFS, kter\u00e9ho se od vyd\u00e1n\u00ed 5.15 ujme nov\u00fd ovlada\u010d NTFS3. Dod\u00e1vka dvou ovlada\u010d\u016f s implementac\u00ed NTFS v j\u00e1d\u0159e byla pova\u017eov\u00e1na za nevhodnou, vzhledem k tomu, \u017ee star\u00fd ovlada\u010d nebyl aktualizov\u00e1n ji\u017e mnoho let, je v \u017ealostn\u00e9m stavu a m\u016f\u017ee fungovat pouze v re\u017eimu \u010dten\u00ed.\n<li class=\"l\"> Do souborov\u00fdch syst\u00e9m\u016f zonefs a hugetlbfs byla p\u0159id\u00e1na podpora mapov\u00e1n\u00ed identifik\u00e1tor\u016f u\u017eivatel\u016f p\u0159ipojen\u00fdch souborov\u00fdch syst\u00e9m\u016f, kter\u00e1 se pou\u017e\u00edv\u00e1 pro p\u0159i\u0159azen\u00ed soubor\u016f ur\u010dit\u00e9ho u\u017eivatele v p\u0159ipojen\u00e9m ciz\u00edm odd\u00edlu k jin\u00e9mu u\u017eivateli v aktu\u00e1ln\u00edm syst\u00e9mu.\n<li class=\"l\"> Pro administr\u00e1tory byla v NFSv4 poskytnuta mo\u017enost vymaz\u00e1n\u00ed otvorov\u00fdch a blokovac\u00edch stav\u016f soubor\u016f.\n<li class=\"l\"> Pro souborov\u00fd syst\u00e9m Ext4 se zaznamen\u00e1vaj\u00ed pouze opravy chyb a aktualizace kunit test\u016f.\n<li class=\"l\"> V Btrfs pokra\u010duje p\u0159evod funkc\u00ed na pou\u017e\u00edv\u00e1n\u00ed svazk\u016f pam\u011bti (page folios).\n<li class=\"l\">  V souborov\u00e9m syst\u00e9mu XFS bylo pokra\u010dov\u00e1no v pr\u00e1ci na implementaci mo\u017enosti vyu\u017eit\u00ed n\u00e1stroje fsck pro kontrolu a opravu zji\u0161t\u011bn\u00fdch probl\u00e9m\u016f v online re\u017eimu, bez pot\u0159eby odpojen\u00ed souborov\u00e9ho syst\u00e9mu.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed pwritev2() byl p\u0159id\u00e1n p\u0159\u00edznak RWF_NOAPPEND, kter\u00fd umo\u017e\u0148uje specifikovat offset pro z\u00e1pis, i kdy\u017e byl soubor otev\u0159en v re\u017eimu pouze pro p\u0159id\u00e1v\u00e1n\u00ed dat na konec souboru.\n<li class=\"l\"> Byly p\u0159id\u00e1ny nov\u00e9 ioctl-p\u0159\u00edkazy: FS_IOC_GETUUID \u2013 vrac\u00ed UUID identifik\u00e1tor dan\u00e9ho souborov\u00e9ho syst\u00e9mu, a FS_IOC_GETFSSYSFSPATH \u2013 ur\u010duje um\u00edst\u011bn\u00ed v \/sys\/fs dan\u00e9ho p\u0159ipojen\u00e9ho FS.\n<li class=\"l\"> Soubory syst\u00e9m\u016f efs, qnx4 a coda byly p\u0159evedeny na pou\u017e\u00edv\u00e1n\u00ed nov\u00e9ho API pro mont\u00e1\u017e odd\u00edl\u016f.\n<li class=\"l\"> Byla vylep\u0161ena implementace operac\u00ed se soubory prov\u00e1d\u011bn\u00fdch v re\u017eimu bez ohledu na velikost p\u00edsmen. V\u00fdkon byl zlep\u0161en prov\u00e1d\u011bn\u00edm porovn\u00e1n\u00ed pro za\u010d\u00e1tek s ohledem na velikost p\u00edsmen a zp\u011btn\u00fdm p\u0159echodem na bezohledn\u00e9 vyhled\u00e1v\u00e1n\u00ed. Byly vy\u0159e\u0161eny probl\u00e9my p\u0159i mont\u00e1\u017ei overlayfs na adres\u00e1\u0159e, kter\u00e9 maj\u00ed nastaven\u00fd re\u017eim bez ohledu na velikost p\u00edsmen.                  <\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Byla implementov\u00e1na podpora mechanismu Intel FRED (Flexible Return and Event Delivery), vytvo\u0159en\u00e9ho pro zv\u00fd\u0161en\u00ed efektivity a spolehlivosti p\u0159enosu informac\u00ed o n\u00edzko\u00farov\u0148ov\u00fdch ud\u00e1lostech ve srovn\u00e1n\u00ed se sou\u010dasn\u00fdm mechanismem IDT (Interrupt Descriptor Table). Zlep\u0161en\u00ed v\u00fdkonu a sn\u00ed\u017een\u00ed latenc\u00ed je zaji\u0161t\u011bno n\u00e1vratem ud\u00e1lost\u00ed procesorov\u00fdm pokynem IRET m\u00edsto p\u0159enosu ud\u00e1lost\u00ed prost\u0159ednictv\u00edm tabulky IDT. Zv\u00fd\u0161en\u00ed spolehlivosti je dosa\u017eeno d\u00edky odd\u011blen\u00e9mu zpracov\u00e1n\u00ed p\u0159\u00edchoz\u00ed ud\u00e1losti v kontextu j\u00e1dra a kontextu u\u017eivatele, ochran\u011b p\u0159ed vno\u0159en\u00fdm prov\u00e1d\u011bn\u00edm NMI a uchov\u00e1v\u00e1n\u00ed v roz\u0161\u00ed\u0159en\u00e9m r\u00e1mci z\u00e1sobn\u00edku v\u0161ech spojen\u00fdch s v\u00fdjimkou registr\u016f CPU.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost optimalizace p\u0159\u00edstupu k dat\u016fm jednotliv\u00fdch jader CPU prost\u0159ednictv\u00edm vyu\u017eit\u00ed v k\u00f3du j\u00e1dra pojmenovan\u00fdch adresn\u00edch prostor\u016f (Named Address Spaces), realizovan\u00fdch v GCC ve form\u011b roz\u0161\u00ed\u0159en\u00ed GNU C.\n<li class=\"l\"> Do funkce pidfd_open() byl p\u0159id\u00e1n p\u0159\u00edznak PIDFD_THREAD, kter\u00fd umo\u017e\u0148uje vytv\u00e1\u0159et pidfd pro jednotliv\u00e9 vl\u00e1knov\u00e9 procesy, a ne pouze pou\u017e\u00edvat pidfd v kontextu l\u00eddra skupiny vl\u00e1ken. Byla tak\u00e9 navr\u017eena implementace pseudo-FS pro p\u0159\u00edstup k pidfd prost\u0159ednictv\u00edm virtu\u00e1ln\u00ed souborov\u00e9 syst\u00e9mu. Na rozd\u00edl od identifikace proces\u016f pomoc\u00ed pid, identifik\u00e1tor pidfd je v\u00e1z\u00e1n na konkr\u00e9tn\u00ed proces a nem\u011bn\u00ed se, zat\u00edmco PID po ukon\u010den\u00ed aktu\u00e1ln\u00edho procesu m\u016f\u017ee b\u00fdt p\u0159id\u011blen jin\u00e9mu procesu.\n<li class=\"l\"> Do subsyst\u00e9my BPF byl p\u0159id\u00e1n mechanismus BPF token\u016f, kter\u00fd umo\u017e\u0148uje selektivn\u011b delegovat program\u016fm pr\u00e1va p\u0159\u00edstupu k privilegovan\u00fdm operac\u00edm BPF. Nap\u0159\u00edklad je mo\u017en\u00e9 poskytnout neprivilegovan\u00e9 aplikaci p\u0159\u00edstup k jednotliv\u00fdm subsyst\u00e9m\u016fm BPF bez ud\u011blen\u00ed pln\u00fdch pr\u00e1v CAP_BPF.\n<li class=\"l\"> Do subsyst\u00e9my BPF byl p\u0159id\u00e1n nov\u00fd typ sd\u00edlen\u00e9 pam\u011bti bpf_arena, kter\u00e1 definuje oblast dostupnou pro sd\u00edlen\u00ed mezi programy BPF a procesy ve virtu\u00e1ln\u00edm prostoru. Byla p\u0159id\u00e1na instrukce may_goto, kter\u00e1 umo\u017e\u0148uje organizovat pr\u00e1ci cykl\u016f, kter\u00e9 mohou b\u00fdt p\u0159eru\u0161eny verifik\u00e1torem. P\u0159id\u00e1na mo\u017enost generov\u00e1n\u00ed libovoln\u00fdch TCP SYN cookie z program\u016f BPF a vytvo\u0159en\u00ed BPF handler\u016f pro boj proti SYN flood\u016fm.\n<li class=\"l\"> Pokra\u010duje p\u0159enos zm\u011bn z v\u011btve Rust-for-Linux, kter\u00e9 se t\u00fdkaj\u00ed pou\u017eit\u00ed jazyka Rust jako druh\u00e9ho jazyka pro v\u00fdvoj ovlada\u010d\u016f a modul\u016f j\u00e1dra (podpora Rustu nen\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed aktivov\u00e1na a nevede k tomu, \u017ee by Rust byl zahrnut mezi povinn\u00e9 z\u00e1vislosti pro kompilaci j\u00e1dra). Byla p\u0159id\u00e1na podpora pou\u017eit\u00ed jazyka Rust na 64bitov\u00fdch procesorech ARM. Prob\u011bhl p\u0159echod na vyd\u00e1n\u00ed Rust 1.76. Byl p\u0159id\u00e1n makro 'container_of!'. M\u00edsto nestabiln\u00ed funkce 'ptr_metadata' byl pou\u017eit stabiln\u00ed p\u0159\u00edstup 'byte_sub'. Byl p\u0159id\u00e1n modul 'time' s funkc\u00ed pro p\u0159evod \u010dasu 'msecs_to_jiffies()'.\n<li class=\"l\"> Do subsyst\u00e9my io_uring byla p\u0159id\u00e1na mo\u017enost zkr\u00e1cen\u00ed soubor\u016f (ftruncate_file).\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd typ pracovn\u00edch front WQ_BH (workqueue Bottom Halves) pro asynchronn\u00ed vykon\u00e1v\u00e1n\u00ed k\u00f3du v kontextu softwarov\u00fdch p\u0159eru\u0161en\u00ed, zam\u011b\u0159en\u00fd na vyu\u017eit\u00ed m\u00edsto zastaral\u00fdch tasklet\u016f.\n<li class=\"l\"> Byla v\u00fdrazn\u011b p\u0159epracov\u00e1na subsyst\u00e9m pro pr\u00e1ci s \u010dasova\u010dem, ve kter\u00e9m byla vylep\u0161ena logika v\u00fdb\u011bru aktivn\u00edho j\u00e1dra CPU pro prov\u00e1d\u011bn\u00ed spu\u0161t\u011bn\u00e9ho \u010dasova\u010de, aby se neprobouzela neaktivn\u00ed j\u00e1dra.\n<li class=\"l\"> Byla implementov\u00e1na mo\u017enost aktualizace modelu spot\u0159eby energie j\u00e1dra (EM, Energy Model) b\u011bhem provozu, co\u017e m\u016f\u017ee b\u00fdt vyu\u017eito nap\u0159\u00edklad pro zohledn\u011bn\u00ed vlivu pracovn\u00ed teploty na energetickou efektivitu CPU. V\u00fdznamn\u011b byla zlep\u0161ena v\u00fdkon funkce em_cpu_energy(), kter\u00e1 nyn\u00ed v testech na stacion\u00e1rn\u00edm syst\u00e9mu funguje 1,43kr\u00e1t rychleji, a v testu na desce RockPi 4B dokonce 1,69kr\u00e1t.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora pro spu\u0161t\u011bn\u00ed syst\u00e9m\u016f zalo\u017een\u00fdch na architektu\u0159e ARM64 v re\u017eimu LPA2 s 52bitov\u00fdm virtu\u00e1ln\u00edm adresov\u00fdm prostorem.\n<li class=\"l\"> Pro syst\u00e9my ARM64 byla implementov\u00e1na podpora pro kontinu\u00e1ln\u00ed z\u00e1znamy PTE (Page Table Entry), co\u017e zvy\u0161uje v\u00fdkon d\u00edky efektivn\u011bj\u0161\u00edmu vyu\u017eit\u00ed TLB (Translation Lookaside Buffer).\n<li class=\"l\"> Byly p\u0159ijaty patche pro zlep\u0161en\u00ed v\u00fdkonu subsyst\u00e9mu spr\u00e1vy pam\u011bti sn\u00ed\u017een\u00edm v\u00fdskytu konkuren\u010dn\u00edch zablokov\u00e1n\u00ed ve vmalloc().\n<li class=\"l\"> Pro architekturu LoongArch byl implementov\u00e1n mechanismus \u017eiv\u00e9ho patchov\u00e1n\u00ed j\u00e1dra (live patching), kter\u00fd umo\u017e\u0148uje aplikaci oprav na j\u00e1dro bez restartu.\n<li class=\"l\"> Pro syst\u00e9my RISC-V byla implementov\u00e1na podpora syst\u00e9mov\u00e9ho vol\u00e1n\u00ed membarrier(), kter\u00e9 zaji\u0161\u0165uje nastaven\u00ed bari\u00e9r na pam\u011b\u0165 pro aktivn\u00ed vl\u00e1kna v syst\u00e9mu.\n<li class=\"l\"> Byly zv\u00fd\u0161eny po\u017eadavky na verzi LLVM\/Clang, kterou lze pou\u017e\u00edt pro sestaven\u00ed j\u00e1dra. Nyn\u00ed je pro sestaven\u00ed vy\u017eadov\u00e1na alespo\u0148 verze LLVM 13.0.1 (d\u0159\u00edve bylo mo\u017en\u00e9 sestavovat i s LLVM 11+).\n<li class=\"l\"> Do mechanismu \u201eUser trace events\u201c, kter\u00fd umo\u017e\u0148uje vytv\u00e1\u0159et ud\u00e1losti sledov\u00e1n\u00ed z u\u017eivatelsk\u00fdch proces\u016f pro sledov\u00e1n\u00ed aktivity v u\u017eivatelsk\u00e9m prostoru, byla p\u0159id\u00e1na podpora exportu informac\u00ed o ud\u00e1losti v r\u016fzn\u00fdch form\u00e1tech (USER_EVENT_REG_MULTI_FORMAT).\n<li class=\"l\"> Do mechanismu sledov\u00e1n\u00ed vol\u00e1n\u00ed funkc\u00ed byla p\u0159id\u00e1na mo\u017enost sledov\u00e1n\u00ed stavu vstupn\u00edch argument\u016f funkce p\u0159i sledov\u00e1n\u00ed v\u00fdstupu z funkce. Hodnoty oper\u00e1toru return nyn\u00ed lze porovnat s argumenty pou\u017eit\u00fdmi p\u0159i vol\u00e1n\u00ed funkce.\n<li class=\"l\"> Do utilit perf byla p\u0159id\u00e1na podpora agregovan\u00e9ho v\u00fdstupu \u201ecluster\u201c (\u201eperf stat -a --per-cluster\u201c) pro kombinaci statistik sd\u00edlen\u00fdch zdroj\u016f. Byla implementov\u00e1na mo\u017enost vyu\u017eit\u00ed knihovny libcapstone pro disasemblerov\u00e1n\u00ed instrukc\u00ed procesoru (\u201eperf script -F disasm\u201c). Byla provedena optimalizace spot\u0159eby pam\u011bti p\u0159i vykon\u00e1v\u00e1n\u00ed p\u0159\u00edkaz\u016f perf report a perf annotate.                    <\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Byla p\u0159id\u00e1na ochrana p\u0159ed zranitelnost\u00ed RFDS (Register File Data Sampling) v procesorech Intel Atom, kter\u00e1 umo\u017e\u0148uje extrakci zbytkov\u00fdch informac\u00ed z registr\u016f procesorov\u00fdch soubor\u016f (RF, Register File), kter\u00e9 se pou\u017e\u00edvaj\u00ed ke spole\u010dn\u00e9mu ulo\u017een\u00ed obsahu registr\u016f ve v\u0161ech \u00faloh\u00e1ch na stejn\u00e9m j\u00e1d\u0159e CPU. Pro blokaci zranitelnosti je vy\u017eadov\u00e1na aktualizace mikro k\u00f3du a pou\u017eit\u00ed instrukce VERW pro vy\u010di\u0161t\u011bn\u00ed obsahu mikroarchitektonick\u00fdch buffer\u016f v okam\u017eiku n\u00e1vratu z j\u00e1dra do u\u017eivatelsk\u00e9ho prostoru. Pro aktivaci ochrany p\u0159i zav\u00e1d\u011bn\u00ed j\u00e1dra lze uv\u00e9st p\u0159\u00edznak \u201ereg_file_data_sampling=on\u201c. Informace o zranitelnosti a dostupnosti pot\u0159ebn\u00e9ho mikro k\u00f3du k ochran\u011b lze vyhodnotit v souboru \u201e\/sys\/devices\/system\/cpu\/vulnerabilities\/reg_file_data_sampling\u201c.\n<li class=\"l\"> Byla p\u0159id\u00e1na z\u00e1kladn\u00ed podpora ochrany hostitelsk\u00fdch syst\u00e9m\u016f pomoc\u00ed roz\u0161\u00ed\u0159en\u00ed AMD SEV-SNP (Secure Nested Paging), kter\u00e9 zaji\u0161\u0165uje bezpe\u010dnou pr\u00e1ci s vno\u0159en\u00fdmi tabulkami pam\u011b\u0165ov\u00fdch str\u00e1nek a chr\u00e1n\u00ed p\u0159ed \u00fatoky \u201eundeSErVed\u201c a \u201eSEVerity\u201c na procesory AMD EPYC, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt ochrann\u00fd mechanismus AMD SEV (Secure Encrypted Virtualization). V <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/abuzoustojchivye-vps\/\"   title=\"KVM\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4384\">KVM<\/a> Nezbytn\u00e9 \u00fapravy pro pou\u017eit\u00ed SNP se pl\u00e1nuj\u00ed p\u0159idat ve v\u011btvi 6.10.\n<li class=\"l\"> Moduly s implementac\u00ed technologi\u00ed IMA (Integrity Measurement Architecture) a EVM (Extended Verification Module) byly p\u0159evedeny na pou\u017eit\u00ed r\u00e1mce LSM (Linux Security Modules), co\u017e bez ztr\u00e1ty funk\u010dnosti umo\u017enilo v\u00fdrazn\u00e9 zjednodu\u0161en\u00ed k\u00f3du, slou\u010den\u00ed duplicitn\u00ed funk\u010dnosti a vyu\u017eit\u00ed dostupn\u00fdch typov\u00fdch mo\u017enost\u00ed prost\u0159ednictv\u00edm LSM. Modul IMA je ur\u010den k ov\u011b\u0159ov\u00e1n\u00ed integrity komponent opera\u010dn\u00edho syst\u00e9mu podle digit\u00e1ln\u00edch podpis\u016f a hash\u016f. Modul EVM umo\u017e\u0148uje chr\u00e1nit roz\u0161\u00ed\u0159en\u00e9 atributy soubor\u016f (xattrs) p\u0159ed \u00fatoky, kter\u00e9 by mohly naru\u0161it jejich integritu (EVM neumo\u017en\u00ed offline \u00fatok, p\u0159i n\u011bm\u017e by \u00fato\u010dn\u00edk mohl m\u011bnit metadata, nap\u0159\u00edklad nasazen\u00edm z vlastn\u00edho za\u0159\u00edzen\u00ed).\n<li class=\"l\"> Syst\u00e9mov\u00e9 vol\u00e1n\u00ed lsm_list_modules(), lsm_get_self_attr() a lsm_set_self_attr() byly p\u0159epracov\u00e1ny pro lep\u0161\u00ed kompatibilitu s 32bitov\u00fdmi prost\u0159ed\u00edmi, jsou ur\u010deny k v\u00fdpisu seznamu na\u010dten\u00fdch modul\u016f LSM (Linux Security Modules) a k z\u00edsk\u00e1n\u00ed\/nastaven\u00ed atribut\u016f modulu LSM. Zm\u011bna poru\u0161uje zp\u011btnou kompatibilitu, ale proto\u017ee nov\u00e9 syst\u00e9mov\u00e9 vol\u00e1n\u00ed byla p\u0159id\u00e1na v minul\u00e9m vyd\u00e1n\u00ed j\u00e1dra a zat\u00edm nejsou pou\u017e\u00edv\u00e1na v aplikac\u00edch, Linus Torvalds pova\u017eoval tuto zm\u011bnu za p\u0159ijatelnou.\n<li class=\"l\"> Byla u\u010din\u011bna pokus o obnoven\u00ed pou\u017eit\u00ed mechanismu UBSAN (Undefined Behavior Sanitizer). Podstatou probl\u00e9mu je, \u017ee kompil\u00e1tory r\u016fzn\u00e9 zpracov\u00e1vaj\u00ed celo\u010d\u00edseln\u00e9 p\u0159ete\u010den\u00ed zn\u00e1m\u00fdch a beze znam\u00e9nkov\u00fdch typ\u016f. Zn\u00e1m\u00e1 p\u0159ete\u010den\u00ed a p\u0159ete\u010den\u00ed ukazatel\u016f spadaj\u00ed do kategorie nedefinovan\u00e9ho chov\u00e1n\u00ed, zat\u00edmco beze znam\u00e9nkov\u00e1 p\u0159ete\u010den\u00ed se omezuj\u00ed modulo 2n s uchov\u00e1n\u00edm pouze doln\u00edch bit\u016f v\u00fdsledku (\"wrap-around\") a nepadaj\u00ed pod nedefinovan\u00e9 chov\u00e1n\u00ed. Aby se vylou\u010dily situace s v\u00fdskytem nedefinovan\u00e9ho chov\u00e1n\u00ed, j\u00e1dro se skl\u00e1d\u00e1 s volbou \"-fno-strict-overflow\", kter\u00e1 vede k pou\u017eit\u00ed \"wrap-around\" pro v\u0161echna celo\u010d\u00edseln\u00e1 p\u0159ete\u010den\u00ed. GCC a Clang nedok\u00e1\u017e\u00ed spr\u00e1vn\u011b diagnostikovat n\u011bkter\u00e9 probl\u00e9my p\u0159i pou\u017eit\u00ed p\u0159\u00edznaku \"-fno-strict-overflow\" a zapnut\u00ed UBSAN je zam\u011b\u0159eno na proveden\u00ed spole\u010dn\u00e9 \u010dinnosti s v\u00fdvoj\u00e1\u0159i kompil\u00e1tor\u016f na odstran\u011bn\u00ed vznikaj\u00edc\u00edch fale\u0161n\u00fdch alarm\u016f a zji\u0161t\u011bn\u00ed celo\u010d\u00edseln\u00fdch p\u0159ete\u010den\u00ed na m\u00edstech, kde chyb\u00ed jasn\u00e9 kontroly.\n<p>Pro kontrolu mo\u017en\u00fdch p\u0159ete\u010den\u00ed v j\u00e1d\u0159e se pou\u017e\u00edvaj\u00ed konstrukce ve form\u00e1tu \"var + offset <var> PAGE_SHIFT) &lt; pgoff){..}&quot;), kter\u00e9 jsou sv\u00e1z\u00e1ny se sestavou s flagem &quot;-fno-strict-overflow&quot; a nezahrnuj\u00ed cel\u00fd k\u00f3d, ve kter\u00e9m by potenci\u00e1ln\u011b mohlo doj\u00edt k p\u0159ete\u010den\u00ed. Probl\u00e9m je v tom, \u017ee p\u0159i pou\u017eit\u00ed UBSAN tyto kontroly vyvolaly velk\u00e9 mno\u017estv\u00ed fale\u0161n\u00fdch varov\u00e1n\u00ed, a proto bylo v roce 2021 nutn\u00e9 UBSAN vypnout. V aktualizovan\u00e9 implementaci bylo navr\u017eeno pou\u017e\u00edt speci\u00e1ln\u00ed anotace __signed_wrap a __unsigned_wrap, a tak\u00e9 hotov\u00e9 makra s kontrolami add_would_overflow(a, b) a add_wrap(a, b), kter\u00e9 umo\u017e\u0148uj\u00ed odd\u011blit zam\u00fd\u0161len\u00e9 pou\u017e\u00edv\u00e1n\u00ed celo\u010d\u00edseln\u00fdch p\u0159ete\u010den\u00ed od vzniku nahodil\u00fdch p\u0159ete\u010den\u00ed, kter\u00e9 mohou v\u00e9st k zranitelnostem. N\u00e1vrh na rozs\u00e1hlej\u0161\u00ed p\u0159ed\u011bl\u00e1vku j\u00e1dra s zaveden\u00edm dal\u0161\u00edch definic typ\u016f byl odm\u00edtnut Linusem Torvaldsem.                      <\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\">  V s\u00ed\u0165ov\u00e9m subsyst\u00e9mu byla provedena pr\u00e1ce na sn\u00ed\u017een\u00ed v\u00fdskytu konkuren\u010dn\u00edch z\u00e1mk\u016f (\"lock contention\", pokus z\u00edskat z\u00e1mek, kter\u00fd je dr\u017een jin\u00fdm vl\u00e1knem). Bylo sn\u00ed\u017eeno pou\u017e\u00edv\u00e1n\u00ed z\u00e1mk\u016f RTNL.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost aktivn\u00edho polling socket\u016f (busy polling) v kontextu jednotliv\u00fdch vol\u00e1n\u00ed epoll. Velikost poolu a parametry rozpo\u010dtu mohou b\u00fdt nastaveny nez\u00e1visle na syst\u00e9mov\u00fdch v\u00fdchoz\u00edch parametrech.\n<li class=\"l\"> Byla implementov\u00e1na struktura net_hotdata pro zv\u00fd\u0161en\u00ed efektivity cacheov\u00e1n\u00ed nej\u010dast\u011bji pou\u017e\u00edvan\u00fdch prom\u011bnn\u00fdch s\u00ed\u0165ov\u00e9 konfigurace.\n<li class=\"l\"> V MPTCP byla p\u0159id\u00e1na podpora pro nastaven\u00ed pro sokety volby TCP_NOTSENT_LOWAT, co\u017e umo\u017e\u0148uje omezit velikost odes\u00edlac\u00edho bufferu. V API pro sokety MCTP byla p\u0159id\u00e1na podpora identifik\u00e1tor\u016f s\u00edt\u011b (&#171;network ID&#187;), kter\u00e9 umo\u017e\u0148uj\u00ed pou\u017e\u00edvat na jednom hostiteli n\u011bkolik nespojit\u00fdch s\u00edt\u00ed MCTP.\n<li class=\"l\"> V IPSec byla p\u0159id\u00e1na podpora p\u0159esm\u011brov\u00e1n\u00ed ICMP zpr\u00e1v s informacemi o chyb\u00e1ch (RFC 4301).\n<li class=\"l\"> Byl urychlen proces skenov\u00e1n\u00ed tras s vypr\u0161elou \u017eivotnost\u00ed.\n<li class=\"l\"> Byla urychlena pr\u00e1ce XDP d\u00edky p\u0159\u00edsn\u011bj\u0161\u00edmu vyh\u00fdb\u00e1n\u00ed se alokaci velk\u00fdch blok\u016f pam\u011bti.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost p\u0159ipojen\u00ed metadat k zpr\u00e1v\u00e1m netconsole.\n<li class=\"l\"> V Netfilter bylo povoleno definov\u00e1n\u00ed z u\u017eivatelsk\u00e9ho prostoru tabulek, kter\u00e9 se v\u00e1\u017eou na ovl\u00e1dac\u00ed proces na pozad\u00ed a po ukon\u010den\u00ed u\u017eivatelsk\u00e9 aplikace se automaticky nezru\u0161\u00ed.\n<li class=\"l\"> V nftables byl urychlen proces p\u0159id\u00e1v\u00e1n\u00ed prvk\u016f do set\u016f se slou\u010den\u00fdmi rozsahy.                      <\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> V ovlada\u010di i915 pokra\u010dovala pr\u00e1ce na implementaci podpory \u010dip\u016f Intel LunarLake (Xe 2). Byly p\u0159id\u00e1ny nov\u00e9 PCI identifik\u00e1tory pro za\u0159\u00edzen\u00ed zalo\u017een\u00e1 na \u010dipech Intel Arrow Lake a Alder Lake N. Pro DisplayPort byla p\u0159id\u00e1na podpora tunelov\u00e1n\u00ed (DP tunneling) a p\u0159id\u011blov\u00e1n\u00ed \u0161\u00ed\u0159ky p\u00e1sma (bandwidth allocation). Pro v\u0161echny platformy byl zapnut re\u017eim fastboot. Byla p\u0159id\u00e1na podpora ladic\u00edho v\u00fdstupu v\u00e1zan\u00e9ho k jednotliv\u00fdm za\u0159\u00edzen\u00edm.\n<li class=\"l\"> V ovlada\u010di AMDGPU byla provedena p\u0159\u00edprava na implementaci podpory GPU AMD RDNA3.5 a RDNA4. Byla p\u0159id\u00e1na podpora ATHUB 4.1, LSDMA 7.0, JPEG DPG, IH 7.0, HDP 7.0, VCN 5.0, SMU 13.0.6, NBIO 7.11, SDMA 6.1, MMHUB 3.3, DCN 3.5.1, NBIF 6.3.1, VPE 6.1.1 a r\u00e1mce RAS ACA. P\u0159id\u00e1n parametr freesync_video pro zapnut\u00ed experiment\u00e1ln\u00ed podpory optimalizace p\u0159ep\u00edn\u00e1n\u00ed video re\u017eim\u016f pomoc\u00ed technologie adaptivn\u00ed synchronizace FreeSync.\n<li class=\"l\"> V ovlada\u010di Nouveau byl k\u00f3d pro spr\u00e1vu obrazovky p\u0159eveden na pou\u017eit\u00ed funkce kmemdup().\n<li class=\"l\"> Pokra\u010duje pr\u00e1ce na drm ovlada\u010di (Direct Rendering Manager) Xe pro GPU zalo\u017een\u00e9 na architektu\u0159e Intel Xe, kter\u00fd se pou\u017e\u00edv\u00e1 ve grafick\u00fdch kart\u00e1ch Intel rodiny Arc a integrovan\u00e9 grafice, po\u010d\u00ednaje procesory Tiger Lake.\n<li class=\"l\"> Byl p\u0159id\u00e1n DRM ovlada\u010d pro \u010dipy Mediatek MT8188 VDOSYS1.\n<li class=\"l\"> Nastaven\u00ed souvisej\u00edc\u00ed s video subsyst\u00e9my byla p\u0159esunuta do sekce CONFIG_VIDEO.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM64 SoC: Mediatek MT7981B (Filogic 820), MT7988A (Filogic 880), NXP i.MX8DXP, Renesas R8A779G2 (R-Car V4H ES2.0), R8A779H0 (R-Car V4M), TI J722S.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM platforem a za\u0159\u00edzen\u00ed: Android telefony zalo\u017een\u00e9 na \u010dipu Tegra30, modely Chromebook na b\u00e1zi Mediatek MT8186, NAS, tablety a hern\u00ed konzole na b\u00e1zi Rockchips RK35xx, desky White Hawk na b\u00e1zi SoC Renesas, desky na b\u00e1zi Qualcomm SM8550 (Snapdragon 8 Gen 2), Apalis Evaluation Board, Sielaff i.MX6 Solo Board, Samsung Galaxy Tab 4 10.1 LTE.\n<li class=\"l\"> Byla provedena refaktorizace k\u00f3du zvukov\u00e9ho subsyst\u00e9mu ALSA. P\u0159id\u00e1na podpora zvukov\u00fdch syst\u00e9m\u016f Microchip SAM9x7, NXP i.MX95 a Qualcomm WCD939x. V ovlada\u010di SoundWire byla p\u0159id\u00e1na podpora ASoC se zvukov\u00fdmi koprocesory AMD ACP 6.3, a pro syst\u00e9my Intel byl realizov\u00e1n re\u017eim DSPless. Byla p\u0159id\u00e1na podpora dal\u0161\u00edch zvukov\u00fdch kodek\u016f Cirrus HD. V ovlada\u010di virtio bylo zlep\u0161eno \u0159\u00edzen\u00ed zvukov\u00fdch za\u0159\u00edzen\u00ed.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora Ethernetov\u00fdch \u0159adi\u010d\u016f Marvell Octeon PCI Endpoint NIC VF a Intel E825-C 100G.            <\/ul>\n<\/ul>\n<p>Sou\u010dasn\u011b latinskoamerick\u00fd Fond svobodn\u00e9ho softwaru vytvo\u0159il variantu zcela svobodn\u00e9ho j\u00e1dra 6.9 \u2014 Linux-libre 6.9-gnu, o\u010di\u0161t\u011bn\u00e9ho od prvk\u016f firmwaru a ovlada\u010d\u016f obsahuj\u00edc\u00edch nesvobodn\u00e9 komponenty nebo \u00faseky k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobcem. V vyd\u00e1n\u00ed 6.9 byl aktualizov\u00e1n k\u00f3d pro \u010di\u0161t\u011bn\u00ed blob\u016f v ovlada\u010d\u00edch amdgpu, ath12k, adreno, btusb a r8169. Bylo provedeno \u010di\u0161t\u011bn\u00ed nov\u00e9ho ovlada\u010de ptp_fc3. Bylo provedeno \u010di\u0161t\u011bn\u00ed n\u00e1zv\u016f blob\u016f v dts-souborech (devicetree) pro architekturu Aarch64. Byly odstran\u011bny probl\u00e9my s \u010di\u0161t\u011bn\u00edm ovlada\u010de i915, kter\u00e9 vedly k zav\u011b\u0161en\u00ed b\u011bhem inicializace. Byly provedeny zm\u011bny t\u00fdkaj\u00edc\u00ed se zpracov\u00e1n\u00ed blob\u016f dod\u00e1van\u00fdch ve form\u011b hexadecim\u00e1ln\u00edch dump\u016f.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61160\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043c\u043e\u0434\u0443\u043b\u044c dm-vdo \u0434\u043b\u044f \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u0436\u0430\u0442\u0438\u044f \u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0440\u0435\u0436\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432 FUSE, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f pidfd \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c BPF-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 Rust \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 ARM64, \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u0424\u0421 Ext2 \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NTFS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115726","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-9\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-9\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-05-13T11:52:06+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-05-13T11:52:06+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vyd\u00e1n\u00ed j\u00e1dra Linux 6.9 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 6.9.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-9","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-9","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-13T11:52:06+00:00","article:modified_time":"2024-05-13T11:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115726","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 00:14:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 00:14:20","updated":"2026-01-23 00:14:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115726","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=115726"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115726\/revisions"}],"predecessor-version":[{"id":164261,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/115726\/revisions\/164261"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=115726"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=115726"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=115726"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}