{"id":119836,"date":"2024-09-16T15:43:01","date_gmt":"2024-09-16T13:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-6-11"},"modified":"2024-09-16T15:43:01","modified_gmt":"2024-09-16T13:43:01","slug":"reliz-yadra-linux-6-11","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-11","title":{"rendered":"Vyd\u00e1n\u00ed j\u00e1dra Linux 6.11","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 6.11. Mezi nejv\u00fdrazn\u011bj\u0161\u00edmi zm\u011bnami: podpora atom\u00e1rn\u00edch z\u00e1pisov\u00fdch operac\u00ed na blokov\u00e9 \u00farovni, podpora operac\u00ed bind() a listen() v io_uring, nov\u00fd mechanismus blokov\u00e1n\u00ed softwarov\u00fdch zpracovatel\u016f p\u0159eru\u0161en\u00ed, mo\u017enost z\u00e1pisu do odrazov\u011b zrcadlen\u00fdch spustiteln\u00fdch soubor\u016f, podpora psan\u00ed ovlada\u010d\u016f blokov\u00fdch za\u0159\u00edzen\u00ed v jazyce Rust, optimalizace vol\u00e1n\u00ed getrandom(), nov\u00e1 implementace AES-GCM.                <\/p>\n<p>Nov\u00e1 verze obsahuje 15130 oprav od 2078 v\u00fdvoj\u00e1\u0159\u016f, velikost patche je 85 MB (zm\u011bny se dotkly 13282 soubor\u016f, p\u0159id\u00e1no 985857 \u0159\u00e1dk\u016f k\u00f3du, odstran\u011bno 268915 \u0159\u00e1dk\u016f). V p\u0159edchoz\u00ed verzi bylo 14564 oprav od 1989 v\u00fdvoj\u00e1\u0159\u016f, velikost patche byla 41 MB (dvojn\u00e1sobn\u011b m\u00e9n\u011b ne\u017e patch pro j\u00e1dro 6.11). P\u0159ibli\u017en\u011b 46% v\u0161ech zm\u011bn v 6.11 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, zhruba 17% zm\u011bn se t\u00fdk\u00e1 aktualizace k\u00f3du specifick\u00e9ho pro hardwarov\u00e9 architektury, 10% se vztahuje k s\u00ed\u0165ov\u00e9mu z\u00e1sobn\u00edku, 5% k souborov\u00fdm syst\u00e9m\u016fm a 3% k intern\u00edm subsyst\u00e9m\u016fm j\u00e1dra.      <\/p>\n<p>Hlavn\u00ed novinky v j\u00e1d\u0159e 6.11:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Byla zavedena podpora atom\u00e1rn\u00edch z\u00e1pisov\u00fdch operac\u00ed na blokov\u00e9 \u00farovni, p\u0159i kter\u00e9 je na \u00falo\u017ei\u0161t\u011b zaps\u00e1n bu\u010f cel\u00fd specifikovan\u00fd soubor blok\u016f, nebo \u017e\u00e1dn\u00fd z blok\u016f, co\u017e umo\u017e\u0148uje chr\u00e1nit se proti situac\u00edm, kdy po selh\u00e1n\u00ed hardwaru je zaps\u00e1na pouze \u010d\u00e1st blok\u016f, zat\u00edmco ve zbytku z\u016fst\u00e1v\u00e1 star\u00e1 informace. Pro aktivaci atom\u00e1rn\u00edho re\u017eimu z\u00e1pisu byl do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed pwritev() p\u0159id\u00e1n p\u0159\u00edznak RWF_ATOMIC. Informace o podpo\u0159e atom\u00e1rn\u00edho z\u00e1pisu (atomic_write_unit_min, atomic_write_unit_max a atomic_write_segments_max) v\u00e1zan\u00e9 na jednotliv\u00e9 soubory lze z\u00edskat pomoc\u00ed funkce statx().\n<li class=\"l\"> Byla zavedena podpora z\u00e1pisu do spustiteln\u00fdch soubor\u016f, kter\u00e9 jsou spojeny s b\u011b\u017e\u00edc\u00edmi procesy. D\u0159\u00edve, stejn\u011b jako v jin\u00fdch Unixov\u00fdch syst\u00e9mech, j\u00e1dro vyhazovalo chybu p\u0159i pokusu o z\u00e1pis do spustiteln\u00e9ho souboru spu\u0161t\u011bn\u00e9ho procesu. Tento limit byl odstran\u011bn, proto\u017ee postr\u00e1dal praktick\u00fd smysl.\n<li class=\"l\"> Byla zavedena mo\u017enost v\u00fdvoje ovlada\u010d\u016f blokov\u00fdch za\u0159\u00edzen\u00ed v jazyce Rust. Jako p\u0159\u00edklad byl do j\u00e1dra p\u0159id\u00e1n ovlada\u010d rnull, kter\u00fd p\u0159edstavuje analog ovlada\u010de null_blk napsan\u00e9ho v jazyce Rust.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu Btrfs byla implementov\u00e1na podpora nov\u00fdch re\u017eim\u016f &#171;rescue=&#187; s n\u00e1zvy &#171;ignoremetacsums&#187; a &#171;ignoresuperflags&#187;, kter\u00e9 lze pou\u017e\u00edt k p\u0159enesen\u00ed n\u011bkter\u00fdch kontrol do u\u017eivatelsk\u00e9ho prostoru b\u011bhem obnovy FS po selh\u00e1n\u00ed. Implementace operace dynamick\u00e9ho vracen\u00ed skupin blok\u016f byla p\u0159epracov\u00e1na tak, aby se vylou\u010dila situace nedostatku voln\u00e9ho prostoru p\u0159i nedostate\u010dn\u00e9m zapln\u011bn\u00ed FS.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu ntfs3 byla implementov\u00e1na podpora atribut\u016f &#171;compressed&#187; a &#171;immutable&#187;, kter\u00e9 definuj\u00ed komprimovan\u00e9 a nem\u011bnn\u00e9 soubory.\n<li class=\"l\"> Ve FS F2FS a Ext4 byla zjednodu\u0161ena zpracov\u00e1n\u00ed n\u00e1zv\u016f soubor\u016f bez ohledu na velikost p\u00edsmen (casefold) prost\u0159ednictv\u00edm ukl\u00e1d\u00e1n\u00ed n\u00e1zv\u016f ve form\u011b qstr-\u0159et\u011bzc\u016f bez zbyte\u010dn\u00fdch \u00faprav velikosti p\u00edsmen.\n<li class=\"l\"> Ve FS Ext4 byla realizace funkce jbd2_transaction_committed optimalizov\u00e1na pro zv\u00fd\u0161en\u00ed v\u00fdkonu na velmi rychl\u00fdch \u00falo\u017ei\u0161t\u00edch (v testech byl zaznamen\u00e1n n\u00e1r\u016fst zpracov\u00e1van\u00fdch operac\u00ed za sekundu dosahuj\u00edc\u00ed 20%).\n<li class=\"l\"> V syst\u00e9mov\u00e9m vol\u00e1n\u00ed statx() bylo povoleno p\u0159edat ukazatel NULL nam\u00edsto pr\u00e1zdn\u00e9ho \u0159et\u011bzce s cestou k souboru, pokud je nastaven p\u0159\u00edznak AT_EMPTY_PATH.\n<li class=\"l\"> V syst\u00e9mov\u00e9m vol\u00e1n\u00ed open_by_handle_at() byla uvoln\u011bna kontrola p\u0159\u00edstupov\u00fdch pr\u00e1v k souboru, pokud chyb\u00ed opr\u00e1vn\u011bn\u00ed CAP_DAC_READ_SEARCH pro hled\u00e1n\u00ed v po\u010d\u00e1te\u010dn\u00edm jmenn\u00e9m prostoru. D\u0159\u00edv\u011bj\u0161\u00ed po\u017eadavek na opr\u00e1vn\u011bn\u00ed CAP_DAC_READ_SEARCH pro po\u010d\u00e1te\u010dn\u00ed jmenn\u00fd prostor znemo\u017enil pou\u017eit\u00ed syst\u00e9mov\u00e9ho vol\u00e1n\u00ed open_by_handle_at() v kontejnerech.\n<li class=\"l\"> Byly roz\u0161\u00ed\u0159eny mo\u017enosti syst\u00e9mov\u00fdch vol\u00e1n\u00ed listmount() a statmount(). V listmount() byl p\u0159id\u00e1n p\u0159\u00edznak LISTMOUNT_REVERSE pro zobrazen\u00ed obsahu tabulky montovac\u00edch bod\u016f v opa\u010dn\u00e9m po\u0159ad\u00ed (nejnov\u011bj\u0161\u00ed z\u00e1pisy naho\u0159e). V statmount() byl realizov\u00e1n v\u00fdstup mo\u017enost\u00ed nastaven\u00fdch p\u0159i montov\u00e1n\u00ed FS. V obou syst\u00e9mov\u00fdch vol\u00e1n\u00edch byl povolen provoz p\u0159i absenci p\u0159\u00edstupu k po\u010d\u00e1te\u010dn\u00edmu jmenn\u00e9mu prostoru (kdy\u017e je k dispozici pouze p\u0159\u00edstup k m\u00edstn\u00edmu nebo extern\u00edmu jmenn\u00e9mu prostoru).\n<li class=\"l\"> V syst\u00e9mu Bcachefs byla implementov\u00e1na podpora automatick\u00e9ho transparentn\u00edho obnovov\u00e1n\u00ed problematick\u00fdch dat pomoc\u00ed k\u00f3d\u016f pro obnovu chyb - pokud p\u0159i \u010dten\u00ed dojde k chyb\u011b I\/O nebo je zji\u0161t\u011bna nesrovnalost v kontroln\u00ed sou\u010dtu, problematick\u00fd blok dat je automaticky p\u0159episov\u00e1n, pokud je k dispozici redundantn\u00ed data pro jeho obnovu.                                      <\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Byla p\u0159ijata oprava, kter\u00e1 implementuje nov\u00fd mechanismus blokov\u00e1n\u00ed softwarov\u00fdch zpracovatel\u016f p\u0159eru\u0161en\u00ed (BH, bottom-half), kter\u00fd zaji\u0161\u0165uje blokaci pou\u017e\u00edvan\u00fdch datov\u00fdch struktur, ani\u017e by v\u0161ak blokoval paraleln\u00ed prov\u00e1d\u011bn\u00ed nep\u0159\u00edbuzn\u00e9ho k\u00f3du. Bylo poznamen\u00e1no, \u017ee zm\u011bna nejen sn\u00ed\u017eila latenci pro j\u00e1dra pracuj\u00edc\u00ed v re\u00e1ln\u00e9m \u010dase, ale tak\u00e9 zv\u00fd\u0161ila v\u00fdkon b\u011b\u017en\u00fdch jader (nap\u0159\u00edklad v n\u011bkter\u00fdch typech z\u00e1t\u011b\u017ee do\u0161lo k n\u00e1r\u016fstu v\u00fdkonu s\u00ed\u0165ov\u00e9ho subsyst\u00e9mu o 14,5 %).\n<li class=\"l\"> Do subsyst\u00e9mu asynchronn\u00edho vstupu\/v\u00fdstupu io_uring byla p\u0159id\u00e1na podpora operac\u00ed pro implementaci funkc\u00ed bind() a listen(), kter\u00e9 se pou\u017e\u00edvaj\u00ed pro vytv\u00e1\u0159en\u00ed p\u0159ij\u00edmaj\u00edc\u00edch spojen\u00ed s\u00ed\u0165ov\u00fdch socket\u016f.\n<li class=\"l\"> Byla p\u0159id\u00e1na sada ioctl operac\u00ed pro pseudo-FS NSFS (NameSpace FS), pou\u017e\u00edvanou pro pr\u00e1ci s prostorami n\u00e1zv\u016f. Nov\u00e9 ioctl umo\u017e\u0148uj\u00ed p\u0159ev\u00e1d\u011bt identifik\u00e1tory proces\u016f a skupin vl\u00e1ken mezi r\u016fzn\u00fdmi prostory n\u00e1zv\u016f identifik\u00e1tor\u016f proces\u016f (PID namespace). Podobn\u00e9 ioctl, kter\u00e9 na z\u00e1klad\u011b pidfd identifik\u00e1tor\u016f ur\u010duj\u00ed souborov\u00e9 popisova\u010de proces\u016f v jednotliv\u00fdch prostor\u00e1ch n\u00e1zv\u016f, byly tak\u00e9 p\u0159id\u00e1ny do pseudo-FS pidfd.\n<li class=\"l\"> Pro BPF programy byla p\u0159id\u00e1na podpora nov\u00e9ho iter\u00e1toru pro pr\u00e1ci s bitov\u00fdmi maskami, kter\u00fd lze pou\u017e\u00edt nap\u0159\u00edklad pro proch\u00e1zen\u00ed jednotliv\u00fdch bit\u016f v pam\u011b\u0165ov\u00fdch oblastech, jako je cpumask. Byl p\u0159id\u00e1n mechanismus pro odes\u00edl\u00e1n\u00ed proces\u016fm v u\u017eivatelsk\u00e9m prostoru upozorn\u011bn\u00ed na odpojen\u00ed (detach\/unregister) objektu struct_ops. Roz\u0161\u00ed\u0159il se spektrum typ\u016f, kter\u00e9 lze pou\u017e\u00edvat v pol\u00edch (nap\u0159\u00edklad nyn\u00ed lze deklarovat pole s prvky typu kptr, bpf_rb_root a bpf_list_head). Byl navr\u017een spolehliv\u011bj\u0161\u00ed mechanismus Split BTF (BPF Type Format), kter\u00fd se pou\u017e\u00edv\u00e1 pro ov\u011b\u0159ov\u00e1n\u00ed typ\u016f v pseudok\u00f3du BPF.\n<li class=\"l\"> Byl p\u0159id\u00e1n subsyst\u00e9m, kter\u00fd umo\u017e\u0148uje organizovat dod\u00e1vku energie do za\u0159\u00edzen\u00ed v ur\u010den\u00e9m po\u0159ad\u00ed, pro p\u0159\u00edpady, kdy mus\u00ed b\u00fdt jedno za\u0159\u00edzen\u00ed aktivov\u00e1no d\u0159\u00edve ne\u017e jin\u00e9 (nap\u0159\u00edklad p\u0159i aktivaci bezdr\u00e1tov\u00fdch \u010dip\u016f na platform\u00e1ch Qualcomm).\n<li class=\"l\"> Byl p\u0159id\u00e1n modul &#171;Sloppy logic analyzer&#187;, kter\u00fd umo\u017e\u0148uje vytv\u00e1\u0159et jednoduch\u00e9 logick\u00e9 analyz\u00e1tory sign\u00e1lu, kter\u00e9 vyu\u017e\u00edvaj\u00ed GPIO a pracuj\u00ed na samostatn\u00e9m j\u00e1dru CPU.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora runtime konstant, kter\u00e9 mohou b\u00fdt pou\u017e\u00edv\u00e1ny m\u00edsto prom\u011bnn\u00fdch, je\u017e jsou inicializov\u00e1ny jednou. Nap\u0159\u00edklad, runtime konstanty mohou b\u00fdt aplikov\u00e1ny m\u00edsto prom\u011bnn\u00fdch, kter\u00e9 uchov\u00e1vaj\u00ed ukazatel a velikost pro cache dentry. Tyto prom\u011bnn\u00e9 jsou nastaveny b\u011bhem na\u010d\u00edt\u00e1n\u00ed a pot\u00e9 se nikdy nem\u011bn\u00ed. My\u0161lenkou je vlo\u017eit hodnoty podobn\u00fdch prom\u011bnn\u00fdch p\u0159\u00edmo do instrukc\u00ed v k\u00f3du, \u010d\u00edm\u017e se vylou\u010d\u00ed n\u00e1klady spojen\u00e9 s manipulac\u00ed s ukazateli.\n<li class=\"l\"> Byl pokra\u010dov\u00e1n p\u0159enos zm\u011bn z v\u011btve Rust-for-Linux, souvisej\u00edc\u00edch s pou\u017eit\u00edm jazyka Rust jako druh\u00e9ho jazyka pro v\u00fdvoj ovlada\u010d\u016f a modul\u016f j\u00e1dra (podpora Rust nen\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed aktivn\u00ed a nezp\u016fsobuje zahrnut\u00ed Rustu mezi povinn\u00e9 z\u00e1vislosti pro sestaven\u00ed j\u00e1dra). Byla p\u0159id\u00e1na podpora vyd\u00e1n\u00ed Rust 1.80 (jako minim\u00e1ln\u00ed verze je st\u00e1le podporov\u00e1n Rust 1.78). Krom\u011b d\u0159\u00edve zm\u00edn\u011bn\u00fdch n\u00e1stroj\u016f pro v\u00fdvoj ovlada\u010d\u016f blokov\u00fdch za\u0159\u00edzen\u00ed byly v nov\u00e9 verzi p\u0159id\u00e1ny abstrakce pro na\u010d\u00edt\u00e1n\u00ed firmware, p\u0159\u00edstup k u\u017eivatelsk\u00e9mu prostoru (uaccess) a pr\u00e1ci se strukturou &#171;page&#187;.\n<li class=\"l\"> Pro syst\u00e9my x86-64 byl implementov\u00e1n nov\u00fd syst\u00e9mov\u00fd syst\u00e9mov\u00fd vol\u00e1n\u00ed uretprobe(), kter\u00fd optimalizuje fungov\u00e1n\u00ed mechanismu sledov\u00e1n\u00ed uretprobe, co\u017e umo\u017e\u0148uje sledovat hodnoty vracen\u00e9 funkcemi v aplikac\u00edch prostoru u\u017eivatele.\n<li class=\"l\"> Byly p\u0159id\u00e1ny parametry p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku j\u00e1dra: \u201ereserve_mem\u201c pro rezervaci pojmenovan\u00e9 oblasti pam\u011bti b\u011bhem spu\u0161t\u011bn\u00ed a \u201eramoops.mem_name\u201c pro pou\u017eit\u00ed v oblasti pam\u011bti pstore vytvo\u0159en\u00e9 pomoc\u00ed reserve_mem.\n<li class=\"l\"> Do pam\u011b\u0165ov\u00e9ho ovlada\u010de zalo\u017een\u00e9ho na cgroup byl p\u0159id\u00e1n parametr \u201eswappiness\u201c do souboru memory.reclaim, kter\u00fd ur\u010duje nastaven\u00ed vyhazov\u00e1n\u00ed pam\u011bti, co\u017e umo\u017e\u0148uje zm\u011bnit rovnov\u00e1hu mezi vyhazov\u00e1n\u00edm anonymn\u00edch str\u00e1nek pam\u011bti na swap a uvol\u0148ov\u00e1n\u00edm str\u00e1nek pam\u011bti zabran\u00fdch pro souborovou mezipam\u011b\u0165.\n<li class=\"l\"> Byl p\u0159id\u00e1n ioctl rozhran\u00ed PROCMAP_QUERY pro efektivn\u011bj\u0161\u00ed hled\u00e1n\u00ed virtu\u00e1ln\u00edch oblast\u00ed pam\u011bti (Virtual Memory Area) v \/proc\/PID\/maps.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed mmap() byl p\u0159id\u00e1n flag MAP_DROPPABLE pro po\u017eadov\u00e1n\u00ed pam\u011bti, kter\u00e1 nikdy nebude p\u0159esunuta do swapu, a v p\u0159\u00edpad\u011b nedostatku pam\u011bti m\u016f\u017ee b\u00fdt odstran\u011bna.\n<li class=\"l\"> Pro architekturu ARM64 byla implementov\u00e1na podpora hork\u00e9ho p\u0159ipojen\u00ed (p\u0159epnut\u00ed do re\u017eim\u016f online\/offline) fyzick\u00fdch a virtu\u00e1ln\u00edch CPU v syst\u00e9mech s ACPI.\n<li class=\"l\"> Pro architekturu RISC-V byla zaji\u0161t\u011bna podpora hork\u00e9ho p\u0159ipojen\u00ed pam\u011bti a p\u0159id\u00e1na podpora pluginu GCC STACKLEAK (prov\u00e1d\u00ed inicializaci v\u0161ech prom\u011bnn\u00fdch ulo\u017een\u00fdch na z\u00e1sobn\u00edku, aby se zabr\u00e1nilo \u00faniku informac\u00ed z j\u00e1dra skrze neini\u010dalizovan\u00e9 prom\u011bnn\u00e9, kter\u00e9 mohou obsahovat zbytky d\u0159\u00edve ulo\u017een\u00fdch dat na z\u00e1sobn\u00edku).\n<li class=\"l\"> Byl odstran\u011bn mechanismus fale\u0161n\u00e9ho mapov\u00e1n\u00ed pam\u011bti EFI (fake EFI memory map) p\u0159i spu\u0161t\u011bn\u00ed. Tento mechanismus nebyl v praxi vyu\u017e\u00edv\u00e1n a br\u00e1nil v\u00fdvoji v oblasti d\u016fv\u011brn\u00e9ho zpracov\u00e1n\u00ed. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/\"   title=\"virtu\u00e1ln\u00edch stroj\u016f\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2173\">virtu\u00e1ln\u00edch stroj\u016f<\/a>.\n<li class=\"l\"> Byla ukon\u010dena podpora platformy PowerPC 40x.\n<li class=\"l\"> Byly zv\u00fd\u0161eny po\u017eadavky na verzi GNU Make \u2014 pro sestaven\u00ed j\u00e1dra je vy\u017eadov\u00e1na alespo\u0148 verze GNU Make vydan\u00e1 v roce 2013.                      <\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Byly integrov\u00e1ny patche, kter\u00e9 v\u00fdznamn\u011b (a\u017e 15kr\u00e1t) zrychluj\u00ed generov\u00e1n\u00ed n\u00e1hodn\u00fdch \u010d\u00edsel skrze syst\u00e9mov\u00fd vol\u00e1n\u00ed getrandom(). Optimalizace je zalo\u017eena na pou\u017eit\u00ed mechanismu vDSO (virtual dynamic shared object), kter\u00fd umo\u017e\u0148uje p\u0159esunout obslu\u017enou rutinu syst\u00e9mov\u00e9ho vol\u00e1n\u00ed z j\u00e1dra do u\u017eivatelsk\u00e9ho prostoru a vyhnout se p\u0159ep\u00edna\u010d\u016fm kontextu. Implementace syst\u00e9mov\u00e9ho vol\u00e1n\u00ed je na\u010dtena do adresn\u00edho prostoru procesu p\u0159\u00edmo j\u00e1drem.\n<li class=\"l\"> Pro syst\u00e9my x86-64 byla zahrnuta nov\u00e1 implementace \u0161ifrovac\u00edho algoritmu AES-GCM, kter\u00e1 podporuje pou\u017eit\u00ed vektorov\u00fdch instrukc\u00ed VAES, VPCLMULQDQ a AVX512\/AVX10 pro zrychlen\u00ed v\u00fdpo\u010dt\u016f. V proveden\u00fdch testech dos\u00e1hla v\u00fdkonnostn\u00ed zisk po p\u0159echodu na novou implementaci a\u017e 156 %. Assemblerov\u00e1 implementace AES-GCM byla kompletn\u011b p\u0159epracov\u00e1na s ohledem na spr\u00e1vnost, v\u00fdkon, velikost a d\u016fkladnou dokumentaci k\u00f3du.\n<li class=\"l\"> Byla realizov\u00e1na mo\u017enost spu\u0161t\u011bn\u00ed j\u00e1dra jako hostuj\u00edc\u00edho syst\u00e9mu ve virtualizovan\u00fdch prost\u0159ed\u00edch s pou\u017eit\u00edm procesorov\u00e9 roz\u0161\u00ed\u0159en\u00ed AMD SEV-SNP (Secure Nested Paging), kter\u00e9 je ur\u010deno k zaji\u0161t\u011bn\u00ed bezpe\u010dn\u00e9 pr\u00e1ce s vlo\u017een\u00fdmi tabulkami str\u00e1nek pam\u011bti. Pro dodate\u010dnou izolaci p\u0159\u00edstupu k prost\u0159edk\u016fm z virtu\u00e1ln\u00edch stroj\u016f m\u016f\u017ee b\u00fdt pou\u017eit modul SVSM (Linux Secure VM Service Module). V hypervizoru <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/abuzoustojchivye-vps\/\"   title=\"KVM\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4428\">KVM<\/a> byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed podpora spu\u0161t\u011bn\u00ed hostuj\u00edc\u00edch syst\u00e9m\u016f chr\u00e1n\u011bn\u00fdch pomoc\u00ed AMD SEV-SNP.\n<li class=\"l\"> Byl p\u0159id\u00e1n samostatn\u00fd allocator bucket slab, kter\u00fd je mo\u017en\u00e9 aktivovat pomoc\u00ed parametru CONFIG_SLAB_BUCKETS a poskytuje ochranu proti \u00fatok\u016fm vyu\u017e\u00edvaj\u00edc\u00edm techniku \u201eheap spraying\u201c.\n<li class=\"l\"> Do hypervisor KVM byl p\u0159id\u00e1n ioctl-v\u00fd vol\u00e1n\u00ed pro p\u0159edb\u011b\u017en\u00e9 p\u0159id\u011blov\u00e1n\u00ed pam\u011bti hostitelsk\u00e9mu syst\u00e9mu p\u0159ed jeho skute\u010dn\u00fdm spu\u0161t\u011bn\u00edm.                        <\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> Byl p\u0159id\u00e1n sysctl parametr net.tcp_rto_min_us, kter\u00fdm lze nastavit minim\u00e1ln\u00ed \u010dasov\u00fd limit opakov\u00e1n\u00ed (retransmission timeout) pro TCP sokety.\n<li class=\"l\"> Do utilit ethtool byla p\u0159id\u00e1na mo\u017enost jemn\u00e9ho lad\u011bn\u00ed konfigurace obsluhy p\u0159eru\u0161en\u00ed pro s\u00ed\u0165ov\u00e1 rozhran\u00ed vyu\u017e\u00edvaj\u00edc\u00ed rozhran\u00ed Net DIM.                      <\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> V ovlada\u010di AMDGPU byla aktivov\u00e1na po\u010d\u00e1te\u010dn\u00ed podpora GPU AMD RDNA4 (\u201eGFX12\u201c). Byla p\u0159id\u00e1na podpora technologi\u00ed DCN 4.0.x, GC 12.0, GMC 12.0, SDMA 7.0, MES12 a MMHUB 4.1.\n<li class=\"l\"> Pokra\u010duje pr\u00e1ce na drm-ovlada\u010di (Direct Rendering Manager) Xe pro GPU zalo\u017een\u00e9 na architektu\u0159e Intel Xe, kter\u00e1 se pou\u017e\u00edv\u00e1 ve grafick\u00fdch kart\u00e1ch Intel rodiny Arc a integrovan\u00e9 grafice, po\u010d\u00ednaje procesory Tiger Lake. Byla vylep\u0161ena podpora GPU zalo\u017een\u00e9ho na mikroarchitektur\u00e1ch Battlemage, Arrow Lake a Lunar Lake.\n<li class=\"l\"> V subsyst\u00e9mu DRM (Direct Rendering Manager) byl p\u0159eps\u00e1n obslu\u017en\u00fd program pro parametry EDID (Extended Display Identification Data) vy\u017eadovan\u00e9 monitorem.\n<li class=\"l\"> V ovlada\u010di i915 byla p\u0159id\u00e1na podpora GPU Battlemage Xe2 a v\u00fdchoz\u00ed re\u017eim CMRR (Content Match Refresh Rate) byl povolen.\n<li class=\"l\"> V DRM-ovlada\u010di msm (GPU Qualcomm Adreno) byla p\u0159id\u00e1na podpora platformy SM7150 a GPU X185 a a505.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora obrazovkov\u00fdch panel\u016f Lincoln Tech Sol LCD185-101CT, Microtips Technology 13-101HIEBCAF0-C, Microtips Technology MF-103HIEB0GA0, BOE nv110wum-l60, IVO t109nw41, WL-355608-A8, PrimeView PM070WL4, Lincoln Technologies LCD197, Ortustech COM35H3P70ULC, AUO G104STN01, K&amp;d kd101ne3-40ti.\n<li class=\"l\"> V zvukov\u00e9m subsyst\u00e9mu byla p\u0159id\u00e1na podpora \u010dip\u016f a kod\u00e9r\u016f Intel Panther Lake, Asahi Kasei AK4619, Cirrus Logic CS530x, Everest Semiconductors ES8311, NXP i.MX95, LPC32xx, Qualcomm LPASS v2.5, WCD937x, Realtek RT1318, RT1320 a Texas Instruments PCM5242.\n<li class=\"l\"> Byla provedena fin\u00e1ln\u00ed sada zm\u011bn zaji\u0161\u0165uj\u00edc\u00edch podporu ARM SoC Snapdragon X Elite, kter\u00fd pou\u017e\u00edv\u00e1 vlastn\u00ed 12-j\u00e1drov\u00fd procesor Qualcomm Oryon a GPU Qualcomm Adreno. \u010cip je navr\u017een pro pou\u017eit\u00ed v notebooc\u00edch a PC a ve v\u011bt\u0161in\u011b v\u00fdkonov\u00fdch test\u016f p\u0159ed\u010d\u00ed \u010dipy Apple M3 a Intel Core Ultra 155H. P\u0159idan\u00e9 zm\u011bny v j\u00e1d\u0159e 6.11 se t\u00fdkaj\u00ed podpory GPU Adreno X1-85 a \u0159\u00edzen\u00ed spot\u0159eby energie. Mezi za\u0159\u00edzen\u00edmi zalo\u017een\u00fdmi na SoC Snapdragon X Elite je deklarov\u00e1na podpora notebook\u016f ASUS Vivobook S15 a Lenovo Yoga Slim7x.                                  <\/ul>\n<\/ul>\n<p>Sou\u010dasn\u011b latinskoamerick\u00e1 Nadace svobodn\u00e9ho softwaru vytvo\u0159ila variantu pln\u011b svobodn\u00e9ho j\u00e1dra 6.11 \u2014 Linux-libre 6.10-gnu, zbavenou prvk\u016f firmware a ovlada\u010d\u016f obsahuj\u00edc\u00edch nesvobodn\u00e9 komponenty nebo \u010d\u00e1sti k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobcem. V edici 6.11 byl aktualizov\u00e1n k\u00f3d pro \u010di\u0161t\u011bn\u00ed blob\u016f v ovlada\u010d\u00edch mdgpu, adreno, vgxy61, atomisp, btnxpuart, prueth a tas2781. Bylo provedeno \u010di\u0161t\u011bn\u00ed nov\u00fdch ovlada\u010d\u016f amdgpu isp, tn40, rtl8192du, cs40l50, rt1320 a pcie-rcar-gen4. Bylo vy\u010di\u0161t\u011bno jm\u00e9no blob\u016f v souborech dts (devicetree) pro architekturu Aarch64. Byla p\u0159id\u00e1na verze primitiv pro na\u010d\u00edt\u00e1n\u00ed firmwaru, kter\u00e1 nevyd\u00e1v\u00e1 varov\u00e1n\u00ed a po\u017eadavky (nowait-nowarn). Byl p\u0159id\u00e1n k\u00f3d pro rozpozn\u00e1v\u00e1n\u00ed primitiv pro na\u010d\u00edt\u00e1n\u00ed firmwaru v k\u00f3du napsan\u00e9m v jazyce Rust.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61869\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.11. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0430\u0442\u043e\u043c\u0430\u0440\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0431\u043b\u043e\u0447\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 bind() \u0438 listen() \u0432 io_uring, \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u0439, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043e\u0442\u0437\u0435\u0440\u043a\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0432\u044b\u0437\u043e\u0432\u0430 getrandom(), \u043d\u043e\u0432\u0430\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119836","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.11.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-11\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.11 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.11.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-11\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-09-16T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-09-16T13:43:01+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed j\u00e1dra Linux 6.11 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 6.11.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-11","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.11 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.11.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-11","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-16T13:43:01+00:00","article:modified_time":"2024-09-16T13:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119836","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:33:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:34:19","updated":"2026-02-09 17:33:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/119836","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=119836"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/119836\/revisions"}],"predecessor-version":[{"id":164306,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/119836\/revisions\/164306"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=119836"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=119836"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=119836"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}