- \n
- Do Device Mapperu byl p\u0159id\u00e1n zpracovatel dm-pcache pro pou\u017eit\u00ed trval\u00e9 pam\u011bti (CXL pam\u011b\u0165, adresovateln\u00e1 p\u0159es DAX za\u0159\u00edzen\u00ed) jako dodate\u010dn\u00e9ho vysoce v\u00fdkonn\u00e9ho cachu p\u0159ed pomalej\u0161\u00edmi tradi\u010dn\u00edmi diskov\u00fdmi nebo flash ulo\u017ei\u0161ti. Dm-pcache zaji\u0161\u0165uje uchov\u00e1n\u00ed obsahu cache v p\u0159\u00edpad\u011b hav\u00e1rie (crash-safe) d\u00edky pou\u017eit\u00ed nep\u0159etr\u017eit\u00e9 pam\u011bti, duplikaci metadat a kontrole integrity dat a metadat pomoc\u00ed kontroln\u00edch sou\u010dt\u016f CRC32. V sou\u010dasnosti je podporov\u00e1no pouze cachov\u00e1n\u00ed v re\u017eimu odlo\u017een\u00e9ho z\u00e1pisu (write-back).\n
- Z j\u00e1dra byl odstran\u011bn k\u00f3d souborov\u00e9ho syst\u00e9mu Bcachefs, kter\u00fd nyn\u00ed bude distribuov\u00e1n ve form\u011b extern\u00edho modulu, sestavovan\u00e9ho pomoc\u00ed n\u00e1stroj\u016f DKMS (Dynamic Kernel Module Support). K\u00f3d Bcachefs m\u016f\u017ee b\u00fdt vr\u00e1cen do j\u00e1dra pot\u00e9, co Kent Overstreet skute\u010dn\u011b prok\u00e1\u017ee mo\u017enost spr\u00e1vn\u00e9 spolupr\u00e1ce s ostatn\u00edmi v\u00fdvoj\u00e1\u0159i j\u00e1dra a schopnost dodr\u017eovat ust\u00e1len\u00e1 pravidla v\u00fdvoje.\n
- Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed pwritev2() byl p\u0159id\u00e1n p\u0159\u00edznak RWF_NOSIGNAL, kter\u00fd vyp\u00edn\u00e1 ozn\u00e1men\u00ed sign\u00e1lu SIGPIPE p\u0159i z\u00e1pisu do p\u0159eru\u0161en\u00fdch anonymn\u00edch kan\u00e1l\u016f nebo soket\u016f.\n
- Do Procfs byla p\u0159id\u00e1na mo\u017enost montov\u00e1n\u00ed \u201epidns\u201c pro ur\u010den\u00ed prostor\u016f jmen identifik\u00e1tor\u016f proces\u016f (PID namespace). Nap\u0159\u00edklad: \u201emount -t proc -o pidns=\\\/proc\\\/self\\\/ns\\\/pid proc \\\/tmp\\\/proc\u201c.\n
- Ve XFS byla prohl\u00e1\u0161ena za stabiln\u00ed a standardn\u011b povolena mo\u017enost pou\u017eit\u00ed n\u00e1stroje fsck pro kontrolu a opravu zji\u0161t\u011bn\u00fdch probl\u00e9m\u016f v online re\u017eimu, bez odpojen\u00ed souborov\u00e9ho syst\u00e9mu. Byly p\u0159id\u00e1ny syst\u00e9mov\u00e9 vol\u00e1n\u00ed file_getattr a file_setattr pro zm\u011bnu atribut\u016f speci\u00e1ln\u00edch soubor\u016f (jak\u00fdchkoli inode). V KConfig byly standardn\u011b vypnuty mo\u017enosti XFS_SUPPORT_V4 (4. verze XFS) a XFS_SUPPORT_ASCII_CI (re\u017eim bez ohledu na velikost p\u00edsmen ASCII), prohl\u00e1\u0161en\u00e9 za zastaral\u00e9. Byly odstran\u011bny zastaral\u00e9 mo\u017enosti p\u0159ipojen\u00ed attr2, noattr2, ikeep a noikeep.\n
- V MD RAID byl implementov\u00e1n nov\u00fd typ bitmap \u201ellbitmap\u201c (lockless bitmap), kter\u00fd pracuje bez zamyk\u00e1n\u00ed a zaji\u0161\u0165uje vy\u0161\u0161\u00ed v\u00fdkon.\n
- Z celkov\u00e9 struktury \u201einode\u201c byla vyjmuta informace souvisej\u00edc\u00ed s \u0161ifrov\u00e1n\u00edm a verifikac\u00ed (ukazatele i_crypt_info a i_verity_info). Zm\u011bna umo\u017e\u0148uje sn\u00ed\u017eit spot\u0159ebu pam\u011bti v souborov\u00fdch syst\u00e9mech, kter\u00e9 nepodporuj\u00ed \u0161ifrov\u00e1n\u00ed a verifikaci.\n
- Do subsyst\u00e9mu FUSE byla p\u0159id\u00e1na podpora syst\u00e9mov\u00e9ho vol\u00e1n\u00ed copy_file_range() a p\u0159\u00edm\u00e9ho kop\u00edrov\u00e1n\u00ed rozsah\u016f s velikost\u00ed s 64bitov\u00fdm typem (d\u0159\u00edve byla podporov\u00e1na pouze 32bitov\u00e1 velikost). Byla p\u0159id\u00e1na podpora pro inicializaci v synchronn\u00edm re\u017eimu b\u011bhem p\u0159ipojen\u00ed (FUSE_DEV_IOC_SYNC_INIT).\n
- Ve FS ext4 byla implementov\u00e1na mo\u017enost pou\u017eit\u00ed 32bitov\u00fdch identifik\u00e1tor\u016f u\u017eivatel\u016f (uid) a skupin (gid) p\u0159i p\u0159\u00edstupu k rezervovan\u00fdm blok\u016fm. Byly p\u0159id\u00e1ny ioctl operace pro nastaven\u00ed a \u010dten\u00ed parametr\u016f superbloku p\u0159ipojen\u00fdch FS (tune2fs bude moci m\u011bnit parametry v superbloku bez pr\u00e1v na z\u00e1pis do blokov\u00e9ho za\u0159\u00edzen\u00ed). Byly zcela odstran\u011bny zastaral\u00e9 nastaven\u00ed specifick\u00e1 pro ext3.\n
- Do f2fs byla p\u0159id\u00e1na mo\u017enost montov\u00e1n\u00ed \u201elookup_mode\u201c pro v\u00fdb\u011br re\u017eimu vyhled\u00e1v\u00e1n\u00ed: perf - vyhled\u00e1v\u00e1n\u00ed podle hash, compat - line\u00e1rn\u00ed vyhled\u00e1v\u00e1n\u00ed, auto - automatick\u00fd v\u00fdb\u011br. Zm\u011bna re\u017eimu d\u00e1v\u00e1 smysl v konfigurac\u00edch s adres\u00e1\u0159i, kde se nezohled\u0148uje velikost p\u00edsmen. Aktu\u00e1ln\u00ed re\u017eim vyhled\u00e1v\u00e1n\u00ed lze zjistit prost\u0159ednictv\u00edm souboru \u201e\\\/sys\\\/fs\\\/f2fs\\\/\\\/effective_lookup_mode\u201c. Byla p\u0159id\u00e1na mo\u017enost rezervace inode dostupn\u00fdch pouze privilegovan\u00fdm u\u017eivatel\u016fm.\n
- Ve Overlayfs byl p\u0159id\u00e1n re\u017eim pr\u00e1ce bez zohledn\u011bn\u00ed velikosti p\u00edsmen, kter\u00fd se aktivuje na \u00farovni vrstev FS (nastaven\u00ed pro jednotliv\u00e9 adres\u00e1\u0159e zat\u00edm nen\u00ed podporov\u00e1no).\n
- V BTRFS byla vylep\u0161ena paralelizace operac\u00ed p\u0159i vysok\u00e9m zat\u00ed\u017een\u00ed \u010dten\u00ed a n\u00edzk\u00e9m zat\u00ed\u017een\u00ed z\u00e1pisu, doba potvrzen\u00ed transakc\u00ed se zkr\u00e1tila a doba synchronizace se podstatn\u011b zkr\u00e1tila (z minut na des\u00edtky sekund). Byla zp\u0159\u00edstupn\u011bna mo\u017enost pou\u017eit\u00ed blok\u016f (bs), jejich\u017e velikost p\u0159esahuje velikost str\u00e1nky (ps).\n
- V ksmbd (SMB server b\u011b\u017e\u00edc\u00ed na \u00farovni j\u00e1dra) byl p\u0159id\u00e1n parametr pro omezen\u00ed maxim\u00e1ln\u00edho po\u010dtu p\u0159ipojen\u00ed z jednoho zdroje. IP adres<\/a>. smbdirect, smbclient a smbserver byly p\u0159evedeny na pou\u017e\u00edv\u00e1n\u00ed standardn\u00edch struktur j\u00e1dra.\n
- Ve SQUASHFS byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed v syst\u00e9mov\u00e9m vol\u00e1n\u00ed lseek() mo\u017enost\u00ed SEEK_DATA a SEEK_HOLE pro vyhled\u00e1v\u00e1n\u00ed dat a mezer v \u0159\u00eddk\u00fdch souborech. V n\u011bkter\u00fdch testech byla zaznamen\u00e1na zv\u00fd\u0161en\u00e1 v\u00fdkonnost p\u0159i kop\u00edrov\u00e1n\u00ed \u0159\u00eddk\u00fdch soubor\u016f a\u017e 150kr\u00e1t.\n
- V EXFAT byla p\u0159id\u00e1na podpora ioctl FS_IOC_GETFSLABEL a FS_IOC_SETFSLABEL pro \u010dten\u00ed a z\u00e1pis \u0161t\u00edtk\u016f odd\u00edl\u016f. Byla zp\u0159\u00edstupn\u011bna mo\u017enost m\u011bnit mo\u017enosti p\u0159ipojen\u00ed b\u011bhem op\u011btovn\u00e9ho p\u0159ipojen\u00ed. Bylo urychleno na\u010d\u00edt\u00e1n\u00ed bitmap.\n
- V NTFS3 byla p\u0159id\u00e1na podpora ioctl FS_IOC_GETFSLABEL a FS_IOC_SETFSLABEL pro \u010dten\u00ed a nastavov\u00e1n\u00ed \u0161t\u00edtk\u016f odd\u00edl\u016f. <\/ul>\n
- Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n
- \n
- Byla p\u0159ijata implementace mechanismu meziprocesov\u00e9ho zpracov\u00e1n\u00ed Binder napsan\u00e1 v jazyce Rust. Binder se pou\u017e\u00edv\u00e1 v syst\u00e9mu Android pro organizaci interakce mezi procesy a vzd\u00e1len\u00e9 vol\u00e1n\u00ed metod (jeden proces Android m\u016f\u017ee volat metodu nebo funkci v jin\u00e9m procesu Android pomoc\u00ed Binderu k identifikaci, vol\u00e1n\u00ed a p\u0159ed\u00e1n\u00ed argument\u016f mezi procesy). K\u00f3d Binderu byl p\u0159eps\u00e1n v jazyce Rust v r\u00e1mci iniciativy Google na zv\u00fd\u0161en\u00ed bezpe\u010dnosti Androidu.\n
- V SLUB, alok\u00e1toru pam\u011bti j\u00e1dra, byl implementov\u00e1n voliteln\u00fd vrstva vyrovn\u00e1vac\u00ed pam\u011bti \u201esheaves\u201c, kter\u00e1 vyu\u017e\u00edv\u00e1 n\u011bkolik vyrovn\u00e1vac\u00edch pam\u011bt\u00ed, z nich\u017e ka\u017ed\u00e1 je p\u0159idru\u017eena k jednotliv\u00e9mu j\u00e1dru CPU, co\u017e umo\u017e\u0148uje lokalizovat operace p\u0159i alokaci nebo uvol\u0148ov\u00e1n\u00ed pam\u011bti jedn\u00edm j\u00e1drem. Takov\u00fd vyrovn\u00e1vac\u00ed pam\u011b\u0165 zv\u00fd\u0161il v\u00fdkon alokace a uvoln\u011bn\u00ed pam\u011bti v j\u00e1d\u0159e, d\u00edky odstran\u011bn\u00ed nadbyte\u010dn\u00fdch synchroniza\u010dn\u00edch primitiv nutn\u00fdch p\u0159i zapojen\u00ed r\u016fzn\u00fdch jader CPU. V proveden\u00fdch testech byl n\u00e1r\u016fst v\u00fdkonu mezi 6.3 % a 31 % v z\u00e1vislosti na typu z\u00e1t\u011b\u017ee.\n
- Pridan\u00e1 mo\u017enos\u0165 vytvorenia s\u00faborov\u00fdch deskriptorov, ktor\u00e9 s\u00fa identifikovan\u00e9 s konkr\u00e9tnym priestorom n\u00e1zvov (namespace). Na rozdiel od pr\u00edstupu k priestorom n\u00e1zvov pod\u013ea identifik\u00e1torov (\\\/proc\\\/\\\/ns\\\/), s\u00faborov\u00fd deskriptor je viazan\u00fd na konkr\u00e9tny in\u0161tanciu priestoru n\u00e1zvov a zabra\u0148uje situ\u00e1cii, kedy je identifik\u00e1tor op\u00e4tovne pride\u013eovan\u00fd a odkazuje u\u017e na in\u00fd objekt. Anal\u00f3giu s pou\u017eit\u00edm pidfds umo\u017e\u0148uje otv\u00e1ranie s\u00faborov\u00fdch deskriptorov, odkazuj\u00facich na priestory n\u00e1zvov, prostredn\u00edctvom funkci\u00ed open_by_handle_at() a name_to_handle_at().\n
- Byl implementov\u00e1n mechanismus \u201eSwap Table\u201c, kter\u00fd zvy\u0161uje v\u00fdkon swapov\u00e1n\u00ed. Zrychlen\u00ed je dosa\u017eeno d\u00edky sn\u00ed\u017een\u00ed konkurence o p\u0159\u00edstup do swap cache, efektivn\u011bj\u0161\u00edmu vyhled\u00e1v\u00e1n\u00ed v cache a sn\u00ed\u017een\u00ed fragmentace. Backend zalo\u017een\u00fd na Swap Table je pou\u017eit pro caching swapu m\u00edsto backendu XArray a umo\u017enil v pr\u016fm\u011bru zv\u00fd\u0161it v\u00fdkon o 5-20 %. V testu usemem se propustnost zv\u00fd\u0161ila o 17-28 %, v testu pro multi-threading doba sestaven\u00ed poklesla o 1.12-3.19 %, test redis-benchmark s BGSAVE uk\u00e1zal n\u00e1r\u016fst po\u010dtu zpracovan\u00fdch po\u017eadavk\u016f o 6-7 %.\n
- Pod syst\u00e9m Zswap pre\u0161iel na priamke pou\u017e\u00edvanie syst\u00e9mu alok\u00e1cie pam\u00e4te zsmalloc namiesto vrstvy zpool, ktor\u00fd sa u\u017e nikde nepou\u017e\u00edva a bol z jadra odstr\u00e1nen\u00fd.\n
- Pro \u0159\u00edzen\u00ed chov\u00e1n\u00ed mikrok\u00f3du na syst\u00e9mech x86 byla zavedena volba p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku \u201emicrocode=seznam flag\u016f\u201c. V aktu\u00e1ln\u00ed podob\u011b nov\u00e1 volba nahradila \u201emicrocode.force_minrev\u201c a tak\u00e9 umo\u017e\u0148uje nastavit minim\u00e1ln\u011b p\u0159\u00edpustnou verzi mikrok\u00f3du pro zaveden\u00ed.\n
- Byla zah\u00e1jena pr\u00e1ce na reorganizaci nadm\u011brn\u011b roz\u0161\u00ed\u0159en\u00e9 struktury \u201epage\u201c, kter\u00e1 je pou\u017eita pro spr\u00e1vu str\u00e1nek opera\u010dn\u00ed pam\u011bti. Byl p\u0159id\u00e1n typ \u2018memdesc_flags_t\u2019 pro pole s univerz\u00e1ln\u00edmi flagy, kter\u00e9 budou moci b\u00fdt pou\u017eity po o\u010dek\u00e1van\u00e9m budouc\u00edm vy\u010dlen\u011bn\u00ed ze struktury \u201epage\u201c jednotliv\u00fdch struktur pro slab a folianty (folio).\n
- Pro architekturu nios2, pou\u017e\u00edvanou v procesorech Altera Nios II (soft-procesor na b\u00e1zi FPGA), byla implementov\u00e1na podpora syst\u00e9mov\u00e9ho vol\u00e1n\u00ed clone3().\n
- Do konfigurace j\u00e1dra (KConfig) byl p\u0159id\u00e1n atribut \u201etransitional\u201c, kter\u00fd lze pou\u017e\u00edt k ozna\u010den\u00ed nastaven\u00ed, kter\u00e1 se nezobrazuj\u00ed v u\u017eivatelsk\u00fdch rozhran\u00edch, jako je \u201emake menuconfig\u201c, a nejsou zahrnuta do generovan\u00fdch konfigura\u010dn\u00edch soubor\u016f. Hlavn\u00edm \u00fa\u010delem atributu je usnadnit p\u0159ejmenov\u00e1n\u00ed mo\u017enost\u00ed p\u0159i zachov\u00e1n\u00ed zp\u011btn\u00e9 kompatibility.\n
- Minim\u00e1ln\u00ed verze kompil\u00e1toru Clang, kterou lze pou\u017e\u00edt pro sestaven\u00ed j\u00e1dra, byla zv\u00fd\u0161ena na n\u00e1stroje LLVM 15. Debian 12 a Ubuntu 22.04 dod\u00e1vaj\u00ed LLVM 14.\n
- Pokra\u010doval p\u0159enos zm\u011bn z v\u011btve Rust-for-Linux, t\u00fdkaj\u00edc\u00edch se pou\u017eit\u00ed jazyka Rust jako druh\u00e9ho jazyka pro v\u00fdvoj ovlada\u010d\u016f a modul\u016f j\u00e1dra (podpora Rust nen\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed aktivn\u00ed a nevede k za\u0159azen\u00ed Rust do povinn\u00fdch komponent\u016f pro sestaven\u00ed j\u00e1dra). V nov\u00e9 verzi pro k\u00f3d napsan\u00fd v jazyce Rust byly implementov\u00e1ny atomick\u00e9 operace s pam\u011bt\u00ed, struktura maple tree, mo\u017enost vytv\u00e1\u0159en\u00ed soubor\u016f DebugFS a funkce pro manipulaci s bitmapami. Byla roz\u0161\u00ed\u0159ena p\u0159\u00edstupnost API pro v\u00fdvoj ovlada\u010d\u016f. Byl p\u0159id\u00e1n kompletn\u00ed soubor abstrakc\u00ed pro v\u00fdvoj ovlada\u010d\u016f USB za\u0159\u00edzen\u00ed (p\u0159\u00edklad USB ovlada\u010de). Do n\u00e1stroje perf byla p\u0159id\u00e1na podpora ladic\u00edch symbol\u016f generovan\u00fdch kompil\u00e1torem rustc. <\/ul>\n
- Virtualizace a bezpe\u010dnost<\/b>\n
- \n
- Byla p\u0159id\u00e1na podpora kryptografick\u00e9 verifikace nahr\u00e1van\u00fdch BPF program\u016f pomoc\u00ed digit\u00e1ln\u00edho podpisu. V budoucnu bude tato schopnost roz\u0161\u00ed\u0159ena o prost\u0159edky pro ur\u010den\u00ed pravidel nahr\u00e1v\u00e1n\u00ed podepsan\u00fdch BPF program\u016f a poskytnut\u00ed neprivilegovan\u00fdm u\u017eivatel\u016fm mo\u017enost pou\u017e\u00edvat verifikovan\u00e9 BPF programy.\n
- V hypervizoru KVM byla implementov\u00e1na podpora virtualizace technologie Intel CET (Control-flow Enforcement Technology), pou\u017e\u00edvan\u00e9 k ochran\u011b p\u0159ed exploity vyu\u017e\u00edvaj\u00edc\u00edmi metody n\u00e1vratov\u00e9ho orientovan\u00e9ho programov\u00e1n\u00ed (ROP \u2014 Return-Oriented Programming). Podstata ochrany spo\u010d\u00edv\u00e1 v tom, \u017ee po p\u0159ed\u00e1n\u00ed \u0159\u00edzen\u00ed funkci, je adresa n\u00e1vratu ulo\u017eena procesorem nejen v obvykl\u00e9m z\u00e1sobn\u00edku, ale tak\u00e9 v odd\u011blen\u00e9m st\u00ednov\u00e9m z\u00e1sobn\u00edku, kter\u00fd nem\u016f\u017ee b\u00fdt p\u0159\u00edmo zm\u011bn\u011bn.\n
- Byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed v\u00edce ne\u017e 255 CPU v hostovan\u00fdch syst\u00e9mech b\u011b\u017e\u00edc\u00edch pod hypervizorem Bhyve na hostitel\u00edch s FreeBSD 15.\n
- Byla p\u0159id\u00e1na vrstven\u00ed dibs (Direct Internal Buffer Sharing) pro \u0159\u00edzen\u00e9 sd\u00edlen\u00ed vyrovn\u00e1vac\u00edch pam\u011bt\u00ed uvnit\u0159 izolovan\u00e9ho prost\u0159ed\u00ed, jako je hypervizor nebo instance j\u00e1dra Linux.\n
- Do auditn\u00edho subsyst\u00e9mu byla p\u0159id\u00e1na podpora provozu s n\u011bkolika sou\u010dasn\u011b zapnut\u00fdmi moduly LSM (Linux Security Module).\n
- Byl p\u0159id\u00e1n virtio ovlada\u010d spi-virtio pro p\u0159\u00edstup k za\u0159\u00edzen\u00ed SPI (Serial Peripheral Interface) z virtu\u00e1ln\u00edch stroj\u016f<\/a>.\n
- Do hypervizoru KVM byla p\u0159id\u00e1na podpora re\u017eimu SEV-SNP CipherText Hiding, kter\u00fd blokuje \u010dten\u00ed \u0161ifrovan\u00e9ho textu pam\u011bti chr\u00e1n\u011bn\u00fdch hostovan\u00fdch syst\u00e9m\u016f z neautorizovan\u00e9ho CPU.\n
- Byl p\u0159id\u00e1n ovlada\u010d qtee pro TEE prost\u0159ed\u00ed (Trusted Execution Environment) \u010dip\u016f Qualcomm. <\/ul>\n
- S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n
- \n
- Byla p\u0159id\u00e1na podpora \u0161ifrov\u00e1n\u00ed TCP spojen\u00ed pomoc\u00ed protokolu PSP (PSP Security Protocol), vyvinut\u00e9ho spole\u010dnost\u00ed Google pro \u0161ifrov\u00e1n\u00ed provozu mezi datov\u00fdmi centry. PSP zaji\u0161\u0165uje \u0161ifrov\u00e1n\u00ed, kryptografickou kontrolu integrity a autentizaci zdroje, \u010d\u00edm\u017e realizuje kombinaci mo\u017enost\u00ed protokol\u016f TLS a IPsec. V PSP se aplikuje \u0161ifrov\u00e1n\u00ed na \u00farovni jednotliv\u00fdch s\u00ed\u0165ov\u00fdch spojen\u00ed, nikoli cel\u00e9ho komunika\u010dn\u00edho kan\u00e1lu. PSP pou\u017e\u00edv\u00e1 samostatn\u00e9 \u0161ifrovac\u00ed kl\u00ed\u010de pro r\u016fzn\u00e1 tunelovan\u00e1 TCP spojen\u00ed pro p\u0159\u00edsnou izolaci provozu r\u016fzn\u00fdch aplikac\u00ed a zpracovatel\u016f. Pro sn\u00ed\u017een\u00ed z\u00e1t\u011b\u017ee na CPU je podporov\u00e1no odsunov\u00e1n\u00ed \u0161ifrovac\u00edch a de\u0161ifrovac\u00edch operac\u00ed na stranu s\u00ed\u0165ov\u00fdch karet (offload). Pro transport dat je pou\u017e\u00edv\u00e1n protokol UDP, na kter\u00fd je p\u0159epos\u00edl\u00e1n obsah p\u016fvodn\u00edho TCP paketu. <\/p>\n
![\"Vyd\u00e1n\u00ed](\"\/wp-content\/uploads\/2025\/12\/180701a9b56890a55860d65207471472.png\")
<\/center> <\/p>\n- Byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed podpora pro roz\u0161\u00ed\u0159en\u00ed AccECN (Accurate Explicit Congestion Notification), co\u017e je vylep\u0161en\u00e1 verze roz\u0161\u00ed\u0159en\u00ed ECN, kter\u00e1 umo\u017e\u0148uje hostitel\u016fm p\u0159i p\u0159et\u00ed\u017een\u00ed zna\u010dit IP pakety m\u00edsto jejich zahazov\u00e1n\u00ed. To d\u00e1v\u00e1 mo\u017enost identifikovat po\u010d\u00e1te\u010dn\u00ed f\u00e1zi z\u00e1cpy v komunika\u010dn\u00edch kan\u00e1lech bez ztr\u00e1ty paket\u016f. P\u016fvodn\u00ed roz\u0161\u00ed\u0159en\u00ed ECN m\u011blo omezen\u00ed, kter\u00e9 umo\u017e\u0148ovalo zasl\u00e1n\u00ed pouze jednoho sign\u00e1lu o p\u0159et\u00ed\u017een\u00ed v r\u00e1mci jednoho cyklu p\u0159\u00edjmu-p\u0159enosu TCP (RTT, Round-Trip Time, odesl\u00e1n\u00ed \u017e\u00e1dosti a p\u0159ijet\u00ed odpov\u011bdi). AccECN toto omezen\u00ed odstra\u0148uje a umo\u017e\u0148uje p\u0159\u00edjemci zaslat odes\u00edlateli v\u00edce ne\u017e jedno ozna\u010den\u00ed p\u0159et\u00ed\u017een\u00ed v TCP hlavi\u010dce. Algoritmy \u0159\u00edzen\u00ed p\u0159et\u00ed\u017een\u00ed mohou z\u00edskan\u00e9 informace vyu\u017e\u00edt k p\u0159esn\u011bj\u0161\u00edmu reagov\u00e1n\u00ed na p\u0159et\u00ed\u017een\u00ed a vyhnout se n\u00e1hl\u00e9mu sn\u00ed\u017een\u00ed intenzity odes\u00edl\u00e1n\u00ed paket\u016f p\u0159i m\u00edrn\u00e9m p\u0159et\u00ed\u017een\u00ed.\n
- Ve UDP z\u00e1sobn\u00edku byla optimalizov\u00e1na \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 p\u0159\u00edchoz\u00edch paket\u016f v podm\u00ednk\u00e1ch DDoS \u00fatok\u016f, kter\u00e9 vedou k p\u0159\u00edjmu velk\u00e9ho mno\u017estv\u00ed paket\u016f do jednoho nebo v\u00edce UDP soket\u016f. Proveden\u00e9 optimalizace, jako sn\u00ed\u017een\u00ed konkurenceschopn\u00e9ho z\u00e1mku, optimalizace um\u00edst\u011bn\u00ed datov\u00fdch struktur v pam\u011bti a vyu\u017eit\u00ed z\u00e1mk\u016f zohled\u0148uj\u00edc\u00edch architekturu NUMA (Non-Uniform Memory Access), umo\u017enily zv\u00fd\u0161it v\u00fdkon p\u0159i p\u0159\u00edjmu UDP paket\u016f o 47 % a v\u00edce v extr\u00e9mn\u00edch podm\u00ednk\u00e1ch.\n
- Byla implementov\u00e1na mo\u017enost vypnut\u00ed cache vstupu\/v\u00fdstupu na NFS serveru, co\u017e umo\u017e\u0148uje pou\u017eit\u00ed NFS serveru v syst\u00e9mech s mal\u00fdm objemem pam\u011bti (nap\u0159\u00edklad v redukovan\u00fdch cloudov\u00fdch prost\u0159ed\u00edch). Vypnut\u00ed cache m\u016f\u017ee b\u00fdt tak\u00e9 u\u017eite\u010dn\u00e9 na zat\u00ed\u017een\u00fdch NFS serverech, aby se p\u0159ede\u0161lo vyt\u011bs\u0148ov\u00e1n\u00ed dat souvisej\u00edc\u00edch s m\u00edstn\u00edmi \u00falo\u017ei\u0161ti z cache kv\u016fli uvoln\u011bn\u00ed pam\u011bti pro NFS cache.\n
- Maxim\u00e1ln\u00ed velikost buffer\u016f p\u0159\u00edchoz\u00edch a odes\u00edlan\u00fdch paket\u016f pro s\u00ed\u0165ov\u00e9 sockety (net.core.rmem_max a net.core.wmem_max) byla zv\u00fd\u0161ena ze 2 MB na 4 MB. V\u00fdchoz\u00ed velikost nebyla zm\u011bn\u011bna (net.core.rmem_default a net.core.wmem_default = 2 MB).\n
- Byl p\u0159id\u00e1n ovlada\u010d pro akceler\u00e1tor s\u00ed\u0165ov\u00fdch operac\u00ed Qualcomm PPE (Packet Processing Engine), pou\u017e\u00edvan\u00fd v SoC Qualcomm IPQ9574. <\/ul>\n
- Hardware<\/b>\n
- \n
- J\u00e1dro obsahuje ovlada\u010d Tyr, napsan\u00fd v jazyce Rust, kter\u00fd zaji\u0161\u0165uje pr\u00e1ci s GPU ARM Mali, kter\u00e1 vyu\u017e\u00edvaj\u00ed technologii CSF (Command Stream Frontend), jako jsou Mali G310, G510 a G710. Ovlada\u010d zat\u00edm nen\u00ed p\u0159ipraven pro pravideln\u00e9 vyu\u017e\u00edv\u00e1n\u00ed b\u011b\u017en\u00fdmi u\u017eivateli a je pova\u017eov\u00e1n za experiment\u00e1ln\u00ed prototyp pro testov\u00e1n\u00ed abstrakc\u00ed pro v\u00fdvoj ovlada\u010d\u016f v jazyce Rust.\n
- Do ovlada\u010d\u016f pro za\u0159\u00edzen\u00ed vstupu s rozhran\u00edm HID (Human Interface Device) byla p\u0159id\u00e1na podpora touchpad\u016f s hmatovou odezvou a senzory s\u00edly stisku.\n
- Pokra\u010duje pr\u00e1ce na drm-ovlada\u010di (Direct Rendering Manager) Xe pro GPU zalo\u017een\u00e9 na architektu\u0159e Intel Xe, kter\u00e1 se pou\u017e\u00edv\u00e1 ve grafick\u00fdch kart\u00e1ch Intel rodiny Arc a integrovan\u00e9 grafice od procesor\u016f Tiger Lake. V nov\u00e9 verzi byl p\u0159id\u00e1n rozhran\u00ed madvise, byla zapnuta podpora SR-IOV PF (Single Root I\/O Virtualization Physical Function), byla p\u0159id\u00e1na podpora re\u017eimu Intel PSMI pro validaci hardwaru, byla zaji\u0161t\u011bna zpracov\u00e1n\u00ed informac\u00ed o chyb\u00e1ch p\u0159ed\u00e1van\u00fdch firmwary a byl realizov\u00e1n profil spot\u0159eby energie SLPC, byla p\u0159id\u00e1na podpora na\u010d\u00edt\u00e1n\u00ed pomocn\u00fdch firmwar\u016f (nap\u0159\u00edklad pro regul\u00e1tor chlazen\u00ed a nap\u011bt\u00ed) b\u011bhem prov\u011b\u0159ov\u00e1n\u00ed ovlada\u010de.\n
- Do ovlada\u010de AMDGPU byla p\u0159id\u00e1na podpora za\u0159\u00edzen\u00ed s APU Cyan Skillfish, vylep\u0161ena podpora AMD GCN 1.0, byla realizov\u00e1na kompatibilita s n\u00e1strojem criu, v sysfs byly p\u0159id\u00e1ny metriky teploty, bylo povoleno vy\u017eadov\u00e1n\u00ed p\u0159emapov\u00e1n\u00ed MMIO z u\u017eivatelsk\u00e9ho prostoru.\n
- V ovlada\u010di i915 byla p\u0159id\u00e1na podpora \u010dip\u016f rodiny Wildcat Lake a byla vylep\u0161ena pr\u00e1ce s GPU Jasper Lake, Elkhart Lake, Gen7 a Gen6.\n
- V ovlada\u010di Nouveau byly standardn\u011b aktivov\u00e1ny GSP firmwary NVIDIA a vylep\u0161ena zpracov\u00e1n\u00ed chyb.\n
- Byla pokra\u010dov\u00e1na integrace komponent ovlada\u010de Nova pro GPU NVIDIA, vybaven\u00e9 firmwarem GSP, pou\u017e\u00edvan\u00fdm od s\u00e9rie NVIDIA GeForce RTX 2000 postaven\u00e9 na mikroarchitektu\u0159e Turing. Ovlada\u010d je naps\u00e1n v jazyce Rust. V nov\u00e9 verzi byla roz\u0161\u00ed\u0159ena podpora firmware GSP, vylep\u0161ena implementace makra \u201eregister!\u201c, byla p\u0159id\u00e1na podpora t\u0159\u00edd PCI za\u0159\u00edzen\u00ed a identifik\u00e1tor\u016f v\u00fdrobc\u016f.\n
- Byl p\u0159id\u00e1n ovlada\u010d rocket pro akceler\u00e1tory NPU, pou\u017e\u00edvaj\u00edc\u00ed se v SoC Rockchip RK3588.\n
- Byl p\u0159id\u00e1n parametr j\u00e1dra \u201eboot_display\u201c pro v\u00fdb\u011br v\u00fdstupn\u00edho za\u0159\u00edzen\u00ed pro zobrazen\u00ed procesu zav\u00e1d\u011bn\u00ed na syst\u00e9mech s v\u00edce GPU.\n
- V ovlada\u010di vesadrm byla realizov\u00e1na podpora 8-bitov\u00fdch palet.\n
- Do ovlada\u010de msm byla p\u0159id\u00e1na podpora GPU Adreno 663 a byla implementov\u00e1na podpora technologie sni\u017eov\u00e1n\u00ed energetick\u00e9 n\u00e1ro\u010dnosti IFPC (Inter Frame Power Collapse).\n
- Do ovlada\u010de panthor byla p\u0159id\u00e1na podpora GPU Mali-G710, Mali-G510, Mali-G310, Mali-Gx15, Mali-Gx20 a Mali-Gx25.\n
- Byla p\u0159id\u00e1na podpora zvukov\u00fdch syst\u00e9m\u016f ASoC Qualcomm Glymur a PM4125, Realtek RT1321, Shanghai FourSemi FS2104\/5S, Texas Instruments PCM1754 a TAS2783A, qcs615, CS35L56 B2, tas2118, tas2x20, tas5825. Byla p\u0159id\u00e1na podpora zvukov\u00fdch USB-karet Tascam US-144mkII a Presonus S1824c.\n
- Byla p\u0159id\u00e1na podpora ARM CPU Cortex-A320\/A520AE\/A720AE a C1-Nano\/Pro\/Premium\/Ultra.\n
- Byla p\u0159id\u00e1na podpora ARM platforem, SoC a za\u0159\u00edzen\u00ed: Apple M2 Pro, M2 Max a M2 Ultr, Sony Xperia SP, Samsung Galaxy S22, Samsung Galaxy S20 FE, ASUS Eee Pad Slider SL101, Lenovo ThinkBook 16, HP Omnibook X14 X1P42100, Dell Inspiron 7441 \/ Latitude 7455, Sige1, NanoPi Zero2, Axis Artpec8, NXP i.MX91, ROCK 2A\/2F, Qualcomm Lemans Auto, Renesas RZ\/T2H, RZ\/N2H, RZ\/T2H a RZ\/N2H, Aspeed AST27xx, Meta Clemente BMC, Netcube Nagami som, Tqma91xx, Ultratronik i.MX8MP Ultra-MACH, i.MX8ULP EVK9, Buffalo WXR-1750DHP. <\/ul>\n<\/ul>\n
Z\u00e1rove\u0148 latinskoamerick\u00fd Fond svobodn\u00e9ho softwaru vytvo\u0159il variantu zcela svobodn\u00e9ho j\u00e1dra 6.18 \u2014 Linux-libre 6.18-gnu, kter\u00e1 byla o\u010di\u0161t\u011bna od prvk\u016f firmwaru a ovlada\u010d\u016f obsahuj\u00edc\u00edch nesvobodn\u00e9 komponenty nebo \u010d\u00e1sti k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobcem. V vyd\u00e1n\u00ed 6.18 byl aktualizov\u00e1n k\u00f3d pro \u010di\u0161t\u011bn\u00ed blob\u016f v ovlada\u010d\u00edch Nova-Core, Intel XE, TI PRUeth, Lantiq GSWIP, Marvell WiFi-Ex. Bylo provedeno \u010di\u0161t\u011bn\u00ed n\u00e1zv\u016f blob\u016f v dts souborech (devicetree) pro ARM \u010dipy Qualcomm, Mediatek a TI ARM64. Bylo neutralizov\u00e1no na\u010d\u00edt\u00e1n\u00ed blob\u016f v nov\u00fdch ovlada\u010d\u00edch FourSemi fs2104\/5s, TI TAS2783 a Qualcomm GENI.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.18. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: dm-pcache \u0434\u043b\u044f \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u044d\u043d\u0435\u0440\u0433\u043e\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (PMEM), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 Bcachefs, online-\u0440\u0435\u0436\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 XFS, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b Binder (Android IPC) \u0438 Tyr (GPU Mali) \u043d\u0430 Rust, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f USB-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 Rust, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0430\u043b\u043b\u043e\u043a\u0430\u0442\u043e\u0440\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SLUB, \u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432 \u0438\u043c\u0451\u043d \u043f\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u0430\u043c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":150191,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150190","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed j\u00e1dra Linux 6.18 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje Linus Torvalds p\u0159edstavil vyd\u00e1n\u00ed j\u00e1dra Linux 6.18.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-18","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.18 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.18.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-6-18","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-01T09:11:58+00:00","article:modified_time":"2025-12-01T09:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150190","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:19:20","updated":"2026-02-09 17:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/150190","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=150190"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/150190\/revisions"}],"predecessor-version":[{"id":159483,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/150190\/revisions\/159483"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/150191"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=150190"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=150190"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=150190"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}