{"id":117586,"date":"2024-07-15T15:43:01","date_gmt":"2024-07-15T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-6-10"},"modified":"2024-07-15T15:43:01","modified_gmt":"2024-07-15T13:43:01","slug":"reliz-yadra-linux-6-10","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-10","title":{"rendered":"Vyd\u00e1n\u00ed j\u00e1dra Linux 6.10","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 6.10. Mezi nejv\u00fdznamn\u011bj\u0161\u00ed zm\u011bny pat\u0159\u00ed: ovlada\u010d ntsync s primitivy synchronizace Windows NT, komponenty DRM Panic pro implementaci analogie \u201emodr\u00e9 obrazovky smrti\u201c, ukon\u010den\u00ed podpory star\u00fdch CPU Alpha, mo\u017enost verifikace integrity v syst\u00e9mu soubor\u016f na b\u00e1zi FUSE, omezen\u00ed p\u0159\u00edstupu k ioctl prost\u0159ednictv\u00edm mechanismu Landlock, subsyst\u00e9m pro profilaci operac\u00ed alokace pam\u011bti, syst\u00e9mov\u00fd vol\u00e1n\u00ed mseal(), mo\u017enost \u0161ifrovan\u00e9 v\u00fdm\u011bny dat s za\u0159\u00edzen\u00edmi TPM, podpora vysoce prioritn\u00edch pracovn\u00edch front v dm-crypt, ovlada\u010d panthor pro des\u00e1tou generaci GPU Mali.      <\/p>\n<p>Nov\u00e1 verze obsahuje 14564 oprav od 1989 v\u00fdvoj\u00e1\u0159\u016f, velikost patche \u2014 41 MB (zm\u011bny se dotkly 12509 soubor\u016f, p\u0159id\u00e1no 547663 \u0159\u00e1dk\u016f k\u00f3du, odstran\u011bno 312464 \u0159\u00e1dk\u016f). V p\u0159edchoz\u00edm vyd\u00e1n\u00ed bylo 15680 oprav od 2106 v\u00fdvoj\u00e1\u0159\u016f, velikost patche \u2014 54 MB. P\u0159ibli\u017en\u011b 41% v\u0161ech zm\u011bn uveden\u00fdch v 6.10 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, zhruba 15% zm\u011bn souvis\u00ed s aktualizac\u00ed k\u00f3du specifick\u00e9ho pro hardwarov\u00e9 architektury, 13% je spojeno se s\u00ed\u0165ov\u00fdm stackem, 5% s \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 syst\u00e9my a 4% s vnit\u0159n\u00edmi subsyst\u00e9my j\u00e1dra.            <\/p>\n<p>Hlavn\u00ed novinky v j\u00e1dru 6.10:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Byla p\u0159id\u00e1na nov\u00e1 fcntl operace F_DUPFD_QUERY, pomoc\u00ed kter\u00e9 m\u016f\u017ee proces ur\u010dit, \u017ee dva r\u016fzn\u00e9 souborov\u00e9 deskriptory odkazuj\u00ed na jeden a ten sam\u00fd soubor. Na rozd\u00edl od podobn\u00fdch mo\u017enost\u00ed, kter\u00e9 poskytuje syst\u00e9mov\u00e9 vol\u00e1n\u00ed kcmp(), F_DUPFD_QUERY neodhaluje zbyte\u010dn\u00e9 informace a funguje na syst\u00e9mech s vypnut\u00fdm kcmp().\n<li class=\"l\"> V subsyst\u00e9mu FUSE, pou\u017e\u00edvan\u00e9m pro implementaci souborov\u00fdch syst\u00e9m\u016f v u\u017eivatelsk\u00e9m prostoru, byla implementov\u00e1na mo\u017enost pou\u017eit\u00ed mechanismu fs-verity pro ov\u011b\u0159en\u00ed integrity a autenticity soubor\u016f.\n<li class=\"l\"> Do modulu dm-crypt, kter\u00fd se pou\u017e\u00edv\u00e1 pro \u0161ifrov\u00e1n\u00ed blokov\u00fdch za\u0159\u00edzen\u00ed, byla p\u0159id\u00e1na mo\u017enost \u201ehigh_priority\u201c, kter\u00e1 umo\u017e\u0148uje vyu\u017eit\u00ed vysoce prioritn\u00edch pracovn\u00edch front pro zv\u00fd\u0161en\u00ed v\u00fdkonu na v\u00fdkonn\u00fdch. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-gdansk\/\"   title=\"serverech\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4559\">serverech<\/a>. Ve v\u00fdchoz\u00edm nastaven\u00ed je re\u017eim vypnut\u00fd, proto\u017ee m\u016f\u017ee na b\u011b\u017en\u00fdch PC v\u00e9st k v\u011bt\u0161\u00edm prodlev\u00e1m p\u0159i prov\u00e1d\u011bn\u00ed \u00faloh nesouvisej\u00edc\u00edch se \u0161ifrov\u00e1n\u00edm, jako je zpracov\u00e1n\u00ed zvuku.\n<li class=\"l\"> Byl p\u0159id\u00e1n protokol zalo\u017een\u00fd na netlink pro spr\u00e1vu NFS serveru v j\u00e1d\u0159e. Ve u\u017eivatelsk\u00e9m prostoru byla na z\u00e1klad\u011b tohoto protokolu p\u0159ipravena utilita nfsdctl. Podpora montov\u00e1n\u00ed NFS v2 je ve v\u00fdchoz\u00edm nastaven\u00ed zak\u00e1z\u00e1na (podpora NFS v2 byla v utilit\u011b mount.nfs zastavena ji\u017e v roce 2021).\n<li class=\"l\"> Ve souborov\u00e9m syst\u00e9mu XFS pokra\u010duje pr\u00e1ce na implementaci mo\u017enosti pou\u017eit\u00ed utility fsck pro kontrolu a opravu zji\u0161t\u011bn\u00fdch probl\u00e9m\u016f v online re\u017eimu, bez odmontov\u00e1n\u00ed souborov\u00e9ho syst\u00e9mu. Byl p\u0159id\u00e1n ioctl XFS_IOC_EXCHANGE_RANGE pro v\u00fdm\u011bnu bajtov\u00fdch rozsah\u016f mezi dv\u011bma soubory v atomick\u00e9m re\u017eimu.\n<li class=\"l\"> V Btrfs byla implementov\u00e1na podpora zmen\u0161ova\u010de (shrinker) nezaji\u0161t\u011bn\u00fdch map extent\u016f, co\u017e m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 pro sn\u00ed\u017een\u00ed spot\u0159eby pam\u011bti v p\u0159\u00edpad\u011b nedostatku pam\u011bti v syst\u00e9mu. K\u00f3d pro kompresi dat a funkce put_file_data() byly p\u0159evedeny na pou\u017e\u00edv\u00e1n\u00ed bled\u00fdch r\u00e1mc\u016f pam\u011bti (page folios). Byla p\u0159epracov\u00e1na mechanismus z\u00e1mku extent\u016f p\u0159i prov\u00e1d\u011bn\u00ed operac\u00ed zp\u011btn\u00e9ho z\u00e1pisu.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu Ext4 byla p\u0159id\u00e1na podpora ioctl FS_IOC_GETFSSYSFSPATH pro ur\u010den\u00ed um\u00edst\u011bn\u00ed dan\u00e9ho p\u0159ipojen\u00e9ho FS v hierarchii \/sys\/fs.\n<li class=\"l\"> Souborov\u00e9 syst\u00e9my OPENPROMFS, ISOFS, QNX6, NILFS2, MINIX a FREEVXFS byly p\u0159evedeny na pou\u017eit\u00ed nov\u00e9ho API pro montov\u00e1n\u00ed odd\u00edl\u016f.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu EROFS (Extendable Read-Only File System), ur\u010den\u00e9m pro pou\u017eit\u00ed na odd\u00edlech dostupn\u00fdch v re\u017eimu pouze pro \u010dten\u00ed, byla p\u0159id\u00e1na podpora algoritmu komprese Zstandard.\n<li class=\"l\"> V Bcachefs byla p\u0159ipravena mo\u017enost prov\u00e1d\u011bt fsck bez odpojen\u00ed odd\u00edlu (online kontrola). Byly p\u0159id\u00e1ny zm\u011bny a opravy pro zv\u00fd\u0161en\u00ed spolehlivosti provozu. Byla realizov\u00e1na mo\u017enost aktualizace a n\u00e1vratu form\u00e1tu FS v re\u017eimu \u201enochanges\u201c, kter\u00fd zakazuje z\u00e1pis a uchov\u00e1v\u00e1 metadata pouze v pam\u011bti.\n<li class=\"l\"> Do souborov\u00e9ho syst\u00e9mu OverlayFS byla p\u0159id\u00e1na podpora pro vytv\u00e1\u0159en\u00ed do\u010dasn\u00fdch soubor\u016f s pou\u017eit\u00edm mo\u017enosti O_TMPFILE.\n<li class=\"l\"> Byla ukon\u010dena podpora mechanismu omezen\u00ed propustnosti blokov\u00fdch za\u0159\u00edzen\u00ed \u201eCONFIG_BLK_DEV_THROTTLING_LOW\u201c, kter\u00fd od roku 2017 z\u016fstal v experiment\u00e1ln\u00edm stavu, nebyl prakticky roz\u0161\u00ed\u0159en a zt\u011b\u017eoval \u00fadr\u017ebu subsyst\u00e9mu blokov\u00fdch za\u0159\u00edzen\u00ed.                                                        <\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> P\u0159id\u00e1n, ale p\u0159i sestaven\u00ed deaktivov\u00e1n, ovlada\u010d ntsync, kter\u00fd implementuje symbolick\u00e9 za\u0159\u00edzen\u00ed \/dev\/ntsync a sadu primitiv pro synchronizaci pou\u017e\u00edvan\u00fdch v j\u00e1d\u0159e Windows NT. Implementace t\u011bchto primitiv na \u00farovni j\u00e1dra v\u00fdrazn\u011b zvy\u0161uje v\u00fdkon her pro Windows spou\u0161t\u011bn\u00fdch pomoc\u00ed Wine. Zv\u00fd\u0161en\u00ed v\u00fdkonu je dosa\u017eeno d\u00edky odstran\u011bn\u00ed re\u017eijn\u00edch n\u00e1klad\u016f spojen\u00fdch s pou\u017eit\u00edm RPC ve v\u00edcerozm\u011brn\u00e9m prostoru. Vytvo\u0159en\u00ed samostatn\u00e9ho ovlada\u010de pro j\u00e1dro Linux je od\u016fvodn\u011bno probl\u00e9movost\u00ed spr\u00e1vn\u00e9 implementace synchroniza\u010dn\u00edho API NT nad existuj\u00edc\u00edmi primitivy v j\u00e1d\u0159e.\n<li class=\"l\"> P\u0159id\u00e1na subsyst\u00e9m pro profilov\u00e1n\u00ed operac\u00ed alokace pam\u011bti v j\u00e1d\u0159e Linux, kter\u00fd umo\u017e\u0148uje odhalovat \u00faniky pam\u011bti v j\u00e1d\u0159e a usnad\u0148uje optimalizaci spot\u0159eby pam\u011bti. Subsyst\u00e9m zaji\u0161\u0165uje n\u00edzk\u00e9 re\u017eijn\u00ed n\u00e1klady, co\u017e umo\u017e\u0148uje pou\u017e\u00edvat ho nejen v ladic\u00edch sestav\u00e1ch j\u00e1dra, ale i na pracovn\u00edch syst\u00e9mech.\n<li class=\"l\"> Byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed implementace zpracovatele havarijn\u00edch situac\u00ed v j\u00e1d\u0159e \u2014 DRM Panic, kter\u00fd pou\u017e\u00edv\u00e1 podsystem DRM (Direct Rendering Manager) k zobrazen\u00ed vizu\u00e1ln\u00ed barevn\u00e9 zpr\u00e1vy ve stylu \u201emodr\u00e9 obrazovky smrti\u201c. V p\u0159\u00ed\u0161t\u00edm vyd\u00e1n\u00ed pl\u00e1nujeme p\u0159idat mo\u017enost zobrazen\u00ed loga a QR k\u00f3du na obrazovce p\u0159i v\u00fdskytu havarijn\u00edho stavu.\n<li class=\"l\"> Pokra\u010doval p\u0159enos zm\u011bn z v\u011btve Rust-for-Linux, kter\u00e9 se t\u00fdkaj\u00ed pou\u017eit\u00ed jazyka Rust jako druh\u00e9ho jazyka pro v\u00fdvoj ovlada\u010d\u016f a modul\u016f j\u00e1dra (podpora Rust nen\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed aktivov\u00e1na a nevede k zahrnut\u00ed Rust mezi povinn\u00e9 z\u00e1vislosti pro sestaven\u00ed j\u00e1dra). Do\u0161lo k p\u0159echodu na pou\u017eit\u00ed verze Rust 1.78, co\u017e umo\u017enilo p\u0159epnout na vyu\u017e\u00edv\u00e1n\u00ed standardn\u00ed knihovny alloc m\u00edsto vlastn\u00edho odvozen\u00ed. P\u0159id\u00e1ny abstrakce pro pr\u00e1ci s \u010dasem v j\u00e1d\u0159e (wrapper nad strukturou ktime_t). P\u0159id\u00e1na podpora pro pou\u017e\u00edv\u00e1n\u00ed komponent j\u00e1dra v jazyce Rust na syst\u00e9mech s architekturou RISC-V.\n<li class=\"l\"> V BPF programech byla implementov\u00e1na mo\u017enost vyu\u017eit\u00ed front \u010dek\u00e1n\u00ed (wait queue) v j\u00e1d\u0159e. Byly p\u0159id\u00e1ny funkce bpf_preempt_disable a bpf_preempt_enable, kter\u00e9 umo\u017e\u0148uj\u00ed vytv\u00e1\u0159et ne p\u0159eru\u0161iteln\u00e9 sekce k\u00f3du \u0159\u00edzen\u00e9 pl\u00e1nova\u010dem \u00faloh. Byl poskytnut p\u0159\u00edstup BPF program\u016f k kryptografick\u00fdm funkc\u00edm j\u00e1dra (crypto). Byla implementov\u00e1na podpora JIT kompilace BPF program\u016f na syst\u00e9mech s 32bitov\u00fdmi procesory ARCv2.\n<li class=\"l\"> Pro 32bitov\u00e9 syst\u00e9my ARM byla implementov\u00e1na podpora pro sestavov\u00e1n\u00ed j\u00e1dra kompil\u00e1torem Clang se zapnut\u00fdm re\u017eimem ochrany CFI (Control Flow Integrity), kter\u00fd blokuje poru\u0161en\u00ed norm\u00e1ln\u00edho postupu vykon\u00e1v\u00e1n\u00ed (control flow) v d\u016fsledku exploit\u016f m\u011bn\u00edc\u00edch ulo\u017een\u00e9 ukazatele na funkce v pam\u011bti.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost p\u0159\u00edm\u00e9ho zrcadlen\u00ed pomoc\u00ed mmap() kruhov\u00fdch buffer\u016f sledov\u00e1n\u00ed pro p\u0159enos jejich obsahu do u\u017eivatelsk\u00e9ho prostoru bez dal\u0161\u00edho kop\u00edrov\u00e1n\u00ed.\n<li class=\"l\"> Byl p\u0159id\u00e1n syst\u00e9mov\u00fd vol\u00e1n\u00ed \u201emseal\u201c, kter\u00e9 umo\u017e\u0148uje proces\u016fm blokovat zm\u011bny ur\u010dit\u00fdch \u010d\u00e1st\u00ed jejich adresn\u00edho prostoru. V praxi se tento nov\u00fd syst\u00e9mov\u00fd vol\u00e1n\u00ed pl\u00e1nuje pou\u017e\u00edvat v prohl\u00ed\u017ee\u010di Chrome k pos\u00edlen\u00ed sandboxov\u00e9 izolace.\n<li class=\"l\"> Pro subarchitekturu x32, kter\u00e1 poskytuje hybridn\u00ed x86_64 ABI umo\u017e\u0148uj\u00edc\u00ed vyu\u017eit\u00ed 32bitov\u00e9ho modelu adresov\u00e1n\u00ed pam\u011bti na 64bitov\u00fdch syst\u00e9mech (procesor pracuje v 64bitov\u00e9m re\u017eimu, ale pou\u017e\u00edv\u00e1 32bitov\u00e9 ukazatele a aritmetick\u00e9 operace), byla p\u0159id\u00e1na podpora mechanismu Shadow Stack, kter\u00fd blokuje \u010dinnost mnoha exploit\u016f pomoc\u00ed hardwarov\u00fdch schopnost\u00ed procesor\u016f Intel pro ochranu proti p\u0159eps\u00e1n\u00ed adresy n\u00e1vratu z funkce v d\u016fsledku p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku.\n<li class=\"l\"> Na syst\u00e9mech s architekturou ARM64 byly v syst\u00e9mov\u00e9m vol\u00e1n\u00ed userfaultfd(), kter\u00e9 umo\u017e\u0148uje vytv\u00e1\u0159et zpracovatele p\u0159\u00edstup\u016f k nevyd\u011blan\u00fdm str\u00e1nk\u00e1m pam\u011bti (page faults) v u\u017eivatelsk\u00e9m prostoru, implementov\u00e1ny mo\u017enosti souvisej\u00edc\u00ed s ochranou proti z\u00e1pisu do oblast\u00ed pam\u011bti a polo\u017eek tabulky str\u00e1nek pam\u011bti.\n<li class=\"l\"> Byl odstran\u011bn k\u00f3d pro podporu procesor\u016f Alpha 21164 (EV5) a star\u0161\u00edch s\u00e9ri\u00ed vyd\u00e1van\u00fdch od roku 1995. Udr\u017eov\u00e1n\u00ed k\u00f3du pro tyto procesory bylo zkomplikov\u00e1no kv\u016fli absenci mo\u017enosti p\u0159\u00edstupu k pam\u011bti na \u00farovni jednotliv\u00fdch byt\u016f. Alpha byla prvn\u00ed architekturou, na kterou bylo portov\u00e1no j\u00e1dro Linux, kter\u00e9 bylo p\u016fvodn\u011b dostupn\u00e9 pouze pro syst\u00e9my x86.                                <\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora \u0161ifrovan\u00e9 v\u00fdm\u011bny dat s za\u0159\u00edzen\u00edmi TPM (Trusted Platform Module) a ov\u011b\u0159ov\u00e1n\u00ed integrity transakc\u00ed.\n<li class=\"l\"> Do modulu LSM Landlock, kter\u00fd umo\u017e\u0148uje omezit interakci skupiny proces\u016f s extern\u00edm prost\u0159ed\u00edm, byla p\u0159id\u00e1na mo\u017enost aplikace pravidel pro omezen\u00ed p\u0159\u00edstupu k vol\u00e1n\u00edm ioctl().\n<li class=\"l\"> Byla navr\u017eena volba init_mlocked_on_free, kter\u00e1 zaji\u0161\u0165uje vynulov\u00e1n\u00ed obsahu pam\u011bti chr\u00e1n\u011bn\u00e9 proti vyhozen\u00ed do swapu pomoc\u00ed vol\u00e1n\u00ed mlock(), pokud je tato pam\u011b\u0165 uvoln\u011bna bez odem\u010den\u00ed vol\u00e1n\u00edm munlock(). Pou\u017eit\u00ed t\u00e9to volby vylu\u010duje ulo\u017een\u00ed kryptografick\u00fdch kl\u00ed\u010d\u016f v pam\u011bti p\u0159i hav\u00e1rii aplikace, kter\u00e1 s nimi pracuje.\n<li class=\"l\"> V podsyst\u00e9mu crypto bylo urychleno prov\u00e1d\u011bn\u00ed operac\u00ed diskov\u00e9ho \u0161ifrov\u00e1n\u00ed pomoc\u00ed algoritmu AES-XTS na syst\u00e9mech x86_64 s procesory Intel a AMD, kter\u00e9 podporuj\u00ed roz\u0161\u00ed\u0159en\u00ed VAES, AVX2, VPCLMULQDQ, AVX10 nebo AVX512.\n<li class=\"l\"> Byla odstran\u011bna mo\u017enost sb\u011bru statistik o pou\u017e\u00edv\u00e1n\u00ed kryptosyst\u00e9mu j\u00e1dra (CONFIG_CRYPTO_STATS). Tato mo\u017enost se v praxi nepou\u017e\u00edvala a vedla k v\u00fdrazn\u00e9mu sn\u00ed\u017een\u00ed v\u00fdkonu, stejn\u011b jako vytv\u00e1\u0159ela zna\u010dn\u00e9 dodate\u010dn\u00e9 zat\u00ed\u017een\u00ed na spr\u00e1vce.                    <\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> Byl v\u00fdrazn\u011b zlep\u0161en v\u00fdkon operac\u00ed odes\u00edl\u00e1n\u00ed dat v re\u017eimu zero-copy p\u0159i pou\u017e\u00edv\u00e1n\u00ed podsystemu io_uring. Byla p\u0159id\u00e1na mo\u017enost slou\u010den\u00ed (\u201ebundle\u201c) n\u011bkolika buffer\u016f pro operace odes\u00edl\u00e1n\u00ed a p\u0159ij\u00edm\u00e1n\u00ed dat.\n<li class=\"l\"> Byl p\u0159epracov\u00e1n k\u00f3d pro garbage collection, pou\u017e\u00edvan\u00fd p\u0159i odes\u00edl\u00e1n\u00ed souborov\u00fdch popisova\u010d\u016f p\u0159es Unixov\u00e9 sockety s pou\u017eit\u00edm zpr\u00e1v SCM_RIGHTS. Zm\u011bna umo\u017e\u0148uje vy\u0159e\u0161it probl\u00e9m s akumulac\u00ed cyklick\u00fdch \u010d\u00edta\u010d\u016f odkaz\u016f.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost nastavov\u00e1n\u00ed filtr\u016f pro protokol PFCP (Packet Forwarding Control Protocol), pou\u017e\u00edvan\u00fd v s\u00edt\u00edch 4G a 5G.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora mo\u017enosti s\u00ed\u0165ov\u00fdch soket\u016f SO_PEEK_OFF, kter\u00e1 podobn\u011b jako stejn\u00e1 mo\u017enost pro Unix-sokety umo\u017e\u0148uje ur\u010dit offset dat v front\u011b, pou\u017e\u00edvan\u00fd syst\u00e9mov\u00fdm vol\u00e1n\u00edm recv p\u0159i zad\u00e1n\u00ed p\u0159\u00edznaku MSG_PEEK (ozna\u010duje data jako nep\u0159e\u010dten\u00e1 a ta budou znovu vyd\u00e1na p\u0159i dal\u0161\u00edm vol\u00e1n\u00ed recv).\n<li class=\"l\"> Do subsyst\u00e9mu io_uring byla p\u0159id\u00e1na podpora operace IORING_CQE_F_SOCK_NONEMPTY, kter\u00e1 umo\u017e\u0148uje ur\u010dit u s\u00ed\u0165ov\u00e9ho soketu p\u0159\u00edtomnost po\u017eadavk\u016f na spojen\u00ed \u010dekaj\u00edc\u00edch na zpracov\u00e1n\u00ed.\n<li class=\"l\"> Byla navr\u017eena implementace technologie PoE (Power over Ethernet), zalo\u017een\u00e1 na d\u0159\u00edve dostupn\u00e9m k\u00f3du pro podporu PoDL (Power over Data Line) a kompatibiln\u00ed s PoE-kontrol\u00e9ry Microchip PD692x0 a TI TPS23881.\n<li class=\"l\"> Pro protokoly TCP, DCCP a MPTC byla p\u0159id\u00e1na podpora mechanismu rstreason, kter\u00fd umo\u017e\u0148uje ur\u010dit d\u016fvod odesl\u00e1n\u00ed RST paket\u016f (nap\u0159. NO_SOCKET).                    <\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> Byl za\u0159azen ovlada\u010d panthor pro des\u00e1tou generaci GPU Mali (G310, G510, G710), kter\u00fd vyu\u017e\u00edv\u00e1 technologii CSF (Command Stream Frontend), je\u017e p\u0159en\u00e1\u0161\u00ed n\u011bkter\u00e9 funkce ovlada\u010de na stranu firmwaru, aby se sn\u00ed\u017eilo zat\u00ed\u017een\u00ed CPU, a nab\u00edz\u00ed nov\u00fd model organizace vykon\u00e1v\u00e1n\u00ed \u00fakol\u016f na GPU. Zm\u011bny na podporu nov\u00e9ho ovlada\u010de byly tak\u00e9 p\u0159ijaty v Mesa a zahrnuty do Gallium-ovlada\u010de panfrost pro GPU Mali.\n<li class=\"l\"> Do ovlada\u010de i915 byly p\u0159id\u00e1ny PCI identifik\u00e1tory nov\u00fdch diskr\u00e9tn\u00edch grafick\u00fdch karet Intel Arc (DG2\/Alchemist).\n<li class=\"l\"> Byla pokra\u010dov\u00e1na pr\u00e1ce na drm-ovlada\u010di (Direct Rendering Manager) Xe pro GPU zalo\u017een\u00e9 na architektu\u0159e Intel Xe, kter\u00e1 se pou\u017e\u00edv\u00e1 v grafick\u00fdch kart\u00e1ch Intel z rodiny Arc a integrovan\u00e9 grafice po\u010d\u00ednaje procesory Tiger Lake. Byla p\u0159id\u00e1na podpora CPU Arrow Lake H. Pokra\u010dovala realizace podpory procesor\u016f Lunar Lake. Byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed podpora mechanismu SR-IOV (Single Root I\/O Virtualization).\n<li class=\"l\"> V ovlada\u010di AMDGPU byla p\u0159id\u00e1na podpora SMU 14.0 (System Management Unit). Byla p\u0159id\u00e1na mo\u017enost vyu\u017eit\u00ed nov\u00fdch GPU AMD na syst\u00e9mech s architekturou RISC-V.\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d pro akceler\u00e1tor kryptografick\u00fdch operac\u00ed Tegra Security Engine, kter\u00fd lze pou\u017e\u00edt pro zrychlen\u00ed AES a r\u016fzn\u00fdch hashovac\u00edch algoritm\u016f.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora obrazov\u00fdch panel\u016f LG SW43408, Innolux G121XCE-L01 LVDS, RK3326 GameForce Chi, Crystal Clear CMT430B19N00, POWERTIP PH128800T006-ZHC01, Startek KD050HDFIA020-C020A, Pixel 3a, Khadas TS050 V2, Raydium RM69380, BOE NT116WHM-N44, CMN N116BCA-EA1 a AUO B120XAN01.0.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora zvukov\u00e9ho subsyst\u00e9mu notebook\u016f Lenovo Thinkbook 13x Gen 4, Lenovo Thinkbook 16P Gen 5, Lenovo Thinkbook 13X a ASUS Zenbook 2024 HN7306W. Byla p\u0159id\u00e1na podpora extern\u00edch zvukov\u00fdch karet Vocaster One a Vocaster Two. Byl p\u0159id\u00e1n ovlada\u010d pro zesilova\u010de NAU8325 od spole\u010dnosti Nuvoton Technology.\n<li class=\"l\"> Ovlada\u010d HID-Steam nyn\u00ed podporuje IMU (Inertial Measurement Unit) hern\u00edho ovlada\u010de Steam Deck, co\u017e umo\u017e\u0148uje pou\u017e\u00edt samostatn\u00fd uzel evdev pro p\u0159\u00edstup k dat\u016fm gyroskopu a akcelerometru.\n<li class=\"l\"> Byly zahrnuty zm\u011bny pro podporu ARM SoC Snapdragon X Elite, kter\u00fd pou\u017e\u00edv\u00e1 vlastn\u00ed 12j\u00e1drov\u00fd CPU Qualcomm Oryon a GPU Qualcomm Adreno. \u010cip je ur\u010den pro pou\u017eit\u00ed v notebooc\u00edch a PC a p\u0159ekon\u00e1v\u00e1 v mnoha v\u00fdkonnostn\u00edch testech \u010dipy Apple M3 a Intel Core Ultra 155H.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM platforem, SoC a za\u0159\u00edzen\u00ed: PocketBook 614 Plus, Sony Xperia Z3, Xperia 1 V, Samsung Galaxy S5 China, Motorola Moto G, RK3326 GameForce Chi, Anbernic RG35XX (Plus\/H\/2024), Airoha EN7581, Radxa ROCK 3C, ArmSom Sige7, Tanix TX1, Toradex Colibri iMX8DX, Renesas RZ\/V2H, Forlinx OK3588-C, Protonic MECSBC, Emcraft Systems NavQ+, NXP S32G3, Wolfvision pf5, Amlogic A4\/A5, ASUS RT-AC3200, ASUS RT-AC5300, ASrock E3C256D4I, IBM system1 BMC, Meta Harma BMC(AST2600), ASRock X570D4U BMC, Au-Zone Maivin AI Vision Starter Kit.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora desek Milk-V Mars, kter\u00e9 pou\u017e\u00edvaj\u00ed SoC Starfive JH7110 zalo\u017een\u00fd na architektu\u0159e RISC-V.                                <\/ul>\n<\/ul>\n<p>Z\u00e1rove\u0148 latinskoamerick\u00fd Fond svobodn\u00e9ho softwaru vytvo\u0159il variantu zcela svobodn\u00e9ho j\u00e1dra 6.10 \u2014 Linux-libre 6.10-gnu, vy\u010di\u0161t\u011bn\u00e9ho od prvk\u016f firmwaru a ovlada\u010d\u016f, kter\u00e9 obsahuj\u00ed nesvobodn\u00e9 komponenty nebo \u010d\u00e1sti k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobcem. V vyd\u00e1n\u00ed 6.10 byl aktualizov\u00e1n k\u00f3d pro \u010di\u0161t\u011bn\u00ed blob\u016f v ovlada\u010d\u00edch Intel i915, rtl8xxxu, qla2xxx a QCAI sahara. Bylo provedeno \u010di\u0161t\u011bn\u00ed jmen blob\u016f v dts-souboru (devicetree) pro architekturu Aarch64. Nov\u00e9 soubory p\u0159idan\u00e9 v ovlada\u010d\u00edch Adreno, Intel IPU3 a PRUEth byly vy\u010di\u0161t\u011bny od blob\u016f. Bylo provedeno \u010di\u0161t\u011bn\u00ed nov\u00fdch ovlada\u010d\u016f Panthor, Intel IPU6, PRUEth SR1, rtw8703b, tps23881, air_en8811h, Intel ISH HID a pcm6240. \u010ci\u0161t\u011bn\u00ed USB-ovlada\u010de Prism2.5\/3 USB, kter\u00fd byl odstran\u011bn z j\u00e1dra, bylo zastaveno.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61521\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.10. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0434\u0440\u0430\u0439\u0432\u0435\u0440 ntsync c \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Windows NT, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b DRM Panic \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0430 &#171;\u0441\u0438\u043d\u0435\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0441\u043c\u0435\u0440\u0442\u0438&#187;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 CPU Alpha, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432 \u0424\u0421 \u043d\u0430 \u0431\u0430\u0437\u0435 FUSE, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a ioctl \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c Landlock, \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.10.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-10\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.10 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.10.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-10\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-07-15T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-07-15T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed j\u00e1dra Linux 6.10 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil vyd\u00e1n\u00ed j\u00e1dra Linux 6.10.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-10","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.10 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.10.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-10","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-15T13:43:01+00:00","article:modified_time":"2024-07-15T13:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 04:16:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 04:16:19","updated":"2026-01-23 04:16:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/117586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=117586"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/117586\/revisions"}],"predecessor-version":[{"id":164437,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/117586\/revisions\/164437"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=117586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=117586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=117586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}