{"id":182060,"date":"2026-06-15T02:48:07","date_gmt":"2026-06-15T00:48:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-7-1"},"modified":"2026-06-15T02:48:07","modified_gmt":"2026-06-15T00:48:07","slug":"reliz-yadra-linux-7-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-7-1","title":{"rendered":"Uveden\u00ed j\u00e1dra Linux 7.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 7.1. Mezi nejv\u00fdznamn\u011bj\u0161\u00edmi zm\u011bnami: nov\u00fd ovlada\u010d ntfsplus, prvn\u00ed f\u00e1ze ukon\u010den\u00ed podpory CPU i486, odstran\u011bn\u00ed star\u00fdch Ethernet adapt\u00e9r\u016f, odstran\u011bn\u00ed protokol\u016f ISDN a AX.25, zahrnut\u00ed mechanismu Intel FRED jako v\u00fdchoz\u00edho, podpora BPF zpracovatel\u016f v io_uring, optimalizace subsyst\u00e9mu swapu, podpora subpl\u00e1nova\u010d\u016f v sched_ext, vstup\/v\u00fdstup v re\u017eimu zero-copy v ovlada\u010di ublk, ioctl operace \u201eshutdown\u201c v Btrfs, dynamick\u00e9 p\u0159ep\u00edn\u00e1n\u00ed v\u00fdkonov\u00e9ho re\u017eimu v ovlada\u010di amd-pstate, podpora xattr pro Unix sokety.<\/p>\n<p>V nov\u00e9 verzi bylo p\u0159ijato 17275 oprav od 2589 v\u00fdvoj\u00e1\u0159\u016f,<br \/>\nVelikost patchu \u2014 57 MB (zm\u011bny se t\u00fdkaly 13528 soubor\u016f, p\u0159id\u00e1no 751785 \u0159\u00e1dk\u016f k\u00f3du, odstran\u011bno 405916 \u0159\u00e1dk\u016f). V minul\u00e9m vyd\u00e1n\u00ed bylo 15624 oprav od 2477 v\u00fdvoj\u00e1\u0159\u016f, velikost patchu \u2014 56 MB. P\u0159ibli\u017en\u011b 41 % v\u0161ech zm\u011bn v 7.1 se t\u00fdk\u00e1 ovlada\u010d\u016f za\u0159\u00edzen\u00ed, asi 12 % zm\u011bn souvis\u00ed s aktualizac\u00ed k\u00f3du specifick\u00e9ho pro architektury hardwaru, 14 % s s\u00ed\u0165ov\u00fdm stackem, 5 % s file syst\u00e9my a 3 % s intern\u00edmi subsyst\u00e9my j\u00e1dra. <\/p>\n<p>Hlavn\u00ed novinky v j\u00e1d\u0159e 7.1 (1, 2, 3):<\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, vstup\/v\u00fdstup a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Byla p\u0159ijata nov\u00e1 implementace souborov\u00e9ho syst\u00e9mu NTFS \u2014 ntfsplus, zalo\u017een\u00e1 na k\u00f3du odstran\u011bn\u00e9m z j\u00e1dra klasick\u00e9ho ovlada\u010de ntfs. Star\u00fd ovlada\u010d byl p\u0159epracov\u00e1n, roz\u0161\u00ed\u0159en o mo\u017enost z\u00e1pisu dat a p\u0159izp\u016fsoben pro podporu modern\u00edch funkc\u00ed, jako je pou\u017eit\u00ed z\u00e1znam\u016f str\u00e1nek pam\u011bti (folios) m\u00edsto struktury buffer_head. V nov\u00e9m ovlada\u010di byla implementov\u00e1na odlo\u017een\u00e1 alokace blok\u016f, co\u017e vedlo k vysok\u00e9mu v\u00fdkonu z\u00e1pisov\u00fdch operac\u00ed a sn\u00ed\u017een\u00ed fragmentace. Pro vyrovn\u00e1vac\u00ed operace z\u00e1pisu\/\u010dten\u00ed, p\u0159\u00edmou vstup\/v\u00fdstup, mapov\u00e1n\u00ed extenz\u00ed a operace str\u00e1nkov\u00e9ho z\u00e1pisu\/\u010dten\u00ed byla vyu\u017eita knihovna iomap. V testech iozone se ovlada\u010d ntfsplus uk\u00e1zal b\u00fdt o 3-5 % rychlej\u0161\u00ed ne\u017e ntfs3 p\u0159i z\u00e1pisu v jednovl\u00e1knov\u00e9m re\u017eimu a o 35-110 % p\u0159i pou\u017eit\u00ed 4 vl\u00e1ken. Rychlost \u010dten\u00ed ntfsplus a ntfs3 je p\u0159ibli\u017en\u011b na stejn\u00e9 \u00farovni. Ovlada\u010d ntfs3 z\u016fst\u00e1v\u00e1 sou\u010d\u00e1st\u00ed j\u00e1dra a byly do n\u011bj provedeny opravy a drobn\u00e9 vylep\u0161en\u00ed.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora generov\u00e1n\u00ed a ov\u011b\u0159ov\u00e1n\u00ed dat integrity T10 na \u00farovni souborov\u00e9ho syst\u00e9mu, nikoli blokov\u00e9ho za\u0159\u00edzen\u00ed, co\u017e zvy\u0161uje v\u00fdkon \u010dtec\u00edch operac\u00ed.\n<li class=\"l\"> Do ovlada\u010de blokov\u00fdch za\u0159\u00edzen\u00ed ublk, kter\u00fd umo\u017e\u0148uje p\u0159esunout specifickou logiku na stranu procesu v prostoru u\u017eivatele, byla p\u0159id\u00e1na podpora vstupu\/v\u00fdstupu prost\u0159ednictv\u00edm sd\u00edlen\u00e9 pam\u011bti bez kop\u00edrov\u00e1n\u00ed dat mezi buffery (re\u017eim zero-copy).\n<li class=\"l\"> Pro samo\u0161ifrovac\u00ed blokov\u00e1 za\u0159\u00edzen\u00ed SED-OPAL byly p\u0159id\u00e1ny ioctl pro spr\u00e1vu re\u017eimu Single User a byla implementov\u00e1na p\u0159\u00edkaz STACK_RESET.\n<li class=\"l\"> V Btrfs byla ozn\u00e1mena stabiln\u00ed podpora ioctl operace \u201eshutdown\u201c, kter\u00e1 umo\u017e\u0148uje p\u0159ev\u00e9st FS do stavu, v n\u011bm\u017e se pokou\u0161\u00ed dokon\u010dit ji\u017e spu\u0161t\u011bn\u00e9 operace, ale blokuje v\u0161echny nov\u00e9 operace.\n<li class=\"l\"> V exfat byla implementov\u00e1na mo\u017enost rezervace pr\u00e1zdn\u00fdch oblast\u00ed prost\u0159ednictv\u00edm vol\u00e1n\u00ed fallocate().\n<li class=\"l\"> V syst\u00e9mu CIFS byla p\u0159id\u00e1na podpora vytv\u00e1\u0159en\u00ed do\u010dasn\u00fdch soubor\u016f s flagem O_TMPFILE.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed fsmount() byla p\u0159id\u00e1na volba FSMOUNT_NAMESPACE, kter\u00e1 vytv\u00e1\u0159\u00ed nov\u00e9 jmenn\u00e9 prostor pro p\u0159ipojovanou souborov\u00fd syst\u00e9m. Do syst\u00e9mov\u00fdch vol\u00e1n\u00ed clone3() a unshare() byly p\u0159id\u00e1ny flagy pro vracen\u00ed nov\u00e9ho jmenn\u00e9ho prostoru, obsahuj\u00edc\u00edho pouze p\u0159ipojenou pr\u00e1zdnou FS-z\u00e1kladnu na b\u00e1zi nullfs, ovlada\u010d fs-dax s FS rozhran\u00edm k za\u0159\u00edzen\u00edm DAX (Direct Access).\n<li class=\"l\"> Na NFS server byla p\u0159id\u00e1na ochrana proti \u00fatok\u016fm skrze v\u00fdb\u011br popisova\u010d\u016f soubor\u016f, implementovan\u00e1 prost\u0159ednictv\u00edm podepisov\u00e1n\u00ed popisova\u010d\u016f kryptografick\u00fdm podpisem. Ochrana se aktivuje prost\u0159ednictv\u00edm mo\u017enosti montov\u00e1n\u00ed sign_fh.\n<li class=\"l\"> Byl p\u0159id\u00e1n symbolick\u00fd ovlada\u010d fs-dax, kter\u00fd poskytuje rozhran\u00ed pro interakci se za\u0159\u00edzen\u00edmi DAX (Direct Access), podporuj\u00edc\u00edmi obch\u00e1zen\u00ed str\u00e1nkov\u00e9ho cache. Toto rozhran\u00ed je nezbytn\u00e9 pro integraci do j\u00e1dra souborov\u00e9ho syst\u00e9mu famfs, um\u00edst\u011bn\u00e9ho v opera\u010dn\u00ed pam\u011bti.\n<li class=\"l\"> V souborov\u00e9m syst\u00e9mu Ceph byla implementov\u00e1na sb\u011br metrik o vstupu\/v\u00fdstupu v\u00e1zan\u00fd na pododd\u011blen\u00ed.\n<\/ul>\n<li class=\"l\"> <b>Pam\u011b\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Byla p\u0159ijata prvn\u00ed s\u00e9rie zm\u011bn pro ukon\u010den\u00ed podpory procesor\u016f i486. Z Kconfig byly odstran\u011bny mo\u017enosti pro sestaven\u00ed j\u00e1dra s podporou procesor\u016f 486DX, 486SX a AMD ELAN (CONFIG_M486, CONFIG_M486SX a CONFIG_MELAN), a z Makefile byly vylou\u010deny mo\u017enosti kompilace pro syst\u00e9my i486 (-march=i486). K\u00f3d pro skute\u010dnou podporu b\u011bhu na procesorech i486 z\u016fstal v j\u00e1d\u0159e, ale sestaven\u00ed pro takov\u00e9 syst\u00e9my nyn\u00ed vy\u017eaduje pou\u017eit\u00ed patch\u016f na sestavovac\u00ed soubory. D\u016fvody odstran\u011bn\u00ed podpory procesor\u016f i486 jsou d\u00e1ny snahou zbavit j\u00e1dro slo\u017eit\u00e9ho k\u00f3du, emuluj\u00edc\u00edho n\u011bkter\u00e9 hardwarov\u00e9 operace, jako jsou CX8 (srovnat a vym\u011bnit 8 byt\u016f) a TSC (po\u010d\u00edta\u010d cykl\u016f CPU, pou\u017e\u00edvan\u00fd v pl\u00e1nova\u010di \u00faloh).\n<li class=\"l\"> V ovlada\u010di amd-pstate, kter\u00fd se pou\u017e\u00edv\u00e1 pro spr\u00e1vu spot\u0159eby energie na syst\u00e9mech s procesory AMD, bylo implementov\u00e1no dynamick\u00e9 p\u0159ep\u00edn\u00e1n\u00ed v\u00fdkonov\u00fdch nastaven\u00ed a zm\u011bna chov\u00e1n\u00ed spr\u00e1vy nap\u00e1jen\u00ed v z\u00e1vislosti na tom, zda je za\u0159\u00edzen\u00ed p\u0159ipojeno k s\u00edti nebo pracuje na baterii. P\u0159i p\u0159ipojen\u00ed k s\u00edti se nyn\u00ed aktivuje re\u017eim \u201eperformance\u201c, zat\u00edmco p\u0159i pr\u00e1ci na baterii se nastav\u00ed \u201ebalance_performance\u201c.\n<li class=\"l\"> Byl aktivov\u00e1n v\u00fdchoz\u00ed mechanismus Intel FRED (Flexible Return and Event Delivery), kter\u00fd zvy\u0161uje efektivitu a spolehlivost dod\u00e1v\u00e1n\u00ed informac\u00ed o n\u00edzko\u00farov\u0148ov\u00fdch ud\u00e1lostech. Zlep\u0161en\u00ed v\u00fdkonu a zkr\u00e1cen\u00ed latenc\u00ed je dosa\u017eeno vracen\u00edm ud\u00e1lost\u00ed pomoc\u00ed procesorov\u00e9 instrukce IRET nam\u00edsto p\u0159ed\u00e1v\u00e1n\u00ed ud\u00e1lost\u00ed prost\u0159ednictv\u00edm tabulky IDT (Interrupt Descriptor Table). Zv\u00fd\u0161en\u00ed spolehlivosti je dosa\u017eeno d\u00edky odd\u011blen\u00e9mu zpracov\u00e1n\u00ed p\u0159\u00edchodu ud\u00e1losti v kontextu j\u00e1dra a u\u017eivatelsk\u00e9ho kontextu, ochran\u011b p\u0159ed vno\u0159en\u00fdm vykon\u00e1v\u00e1n\u00edm NMI a uchov\u00e1n\u00edm v\u0161ech registr\u016f CPU souvisej\u00edc\u00edch s v\u00fdjimkou v roz\u0161\u00ed\u0159en\u00e9m r\u00e1mci z\u00e1sobn\u00edku.\n<li class=\"l\"> Do subsyst\u00e9mu perf byla p\u0159id\u00e1na podpora blok\u016f pro monitorov\u00e1n\u00ed v\u00fdkonu pam\u011bti (PMU \u2013 Performance Monitoring Unit), kter\u00e9 se pou\u017e\u00edvaj\u00ed v SoC NVIDIA Tegra410.\n<li class=\"l\"> Zrychleno prov\u00e1d\u011bn\u00ed operac\u00ed futex na syst\u00e9mech ARM d\u00edky vyu\u017eit\u00ed instrukc\u00ed Arm 9.6 LSUI, kter\u00e9 umo\u017e\u0148uj\u00ed j\u00e1dru p\u0159istupovat k pam\u011bti u\u017eivatelsk\u00e9ho prostoru bez p\u0159edchoz\u00edho vypnut\u00ed ochrann\u00e9ho re\u017eimu PAN (Privileged Access Never).\n<li class=\"l\"> Na syst\u00e9mech s procesory ARM byla vylep\u0161ena podpora roz\u0161\u00ed\u0159en\u00ed architektury MPAM (Memory System Resource Partitioning and Monitoring) a byla p\u0159id\u00e1na mo\u017enost jej\u00edho pou\u017eit\u00ed v u\u017eivatelsk\u00e9m prostoru pro spr\u00e1vu prost\u0159edk\u016f prost\u0159ednictv\u00edm mechanismu resctrl. MPAM zaji\u0161\u0165uje ozna\u010den\u00ed ka\u017ed\u00e9ho p\u0159\u00edstupu do pam\u011bti identifik\u00e1torem sekce (PARTID, Partition ID) a identifik\u00e1torem monitorovac\u00ed skupiny (PMG, Monitoring Group ID). V\u00e1z\u00e1n\u00ed na PARTID m\u016f\u017ee omezit spot\u0159ebu prost\u0159edk\u016f, jako je \u0161\u00ed\u0159ka p\u00e1sma pam\u011bti nebo velikost cache, aby n\u011bjak\u00e1 skupina \u00faloh nezab\u00edrala v\u0161echny prost\u0159edky. V kontextu monitorov\u00e1n\u00ed lze kombinaci PMG a PARTID pou\u017e\u00edt k sledov\u00e1n\u00ed spot\u0159eby pam\u011b\u0165ov\u00fdch prost\u0159edk\u016f p\u0159i ur\u010dit\u00fdch typech zat\u00ed\u017een\u00ed.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost pou\u017e\u00edv\u00e1n\u00ed re\u017eimu re\u00e1ln\u00e9ho \u010dasu (PREEMPT_RT) na 32bitov\u00fdch procesorech ARM. D\u0159\u00edve byla podpora PREEMPT_RT zaji\u0161t\u011bna pro architektury x86 a x86-64, ARM64, RISC-V a LoongArch.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed clone3() byly p\u0159id\u00e1ny nov\u00e9 p\u0159\u00edznaky: CLONE_NNP \u2013 z\u00e1kaz z\u00edsk\u00e1n\u00ed nov\u00fdch privilegi\u00ed ve vytvo\u0159en\u00e9m procesu; CLONE_AUTOREAP \u2013 automatick\u00e9 ukon\u010den\u00ed procesu m\u00edsto jeho p\u0159em\u011bny na zombie proces do doby, ne\u017e funkce wait() jeho rodi\u010dovsk\u00e9mu procesu.<br \/>\nCLONE_PIDFD_AUTOKILL \u2013 ukon\u010den\u00ed pod\u0159\u00edzen\u00e9ho procesu v p\u0159\u00edpad\u011b zav\u0159en\u00ed s n\u00edm spojen\u00e9ho deskriptoru pidfd (nap\u0159\u00edklad p\u0159i ukon\u010den\u00ed rodi\u010dovsk\u00e9ho procesu).<\/p>\n<li class=\"l\"> Pro ka\u017ed\u00fd modul j\u00e1dra v adres\u00e1\u0159i \/sys\/module byl p\u0159id\u00e1n soubor import_ns, kter\u00fd obsahuje seznam importovan\u00fdch prostor\u016f jmen symbol\u016f (symbol namespace).\n<li class=\"l\"> Do syst\u00e9mu asynchronn\u00edho vstupu\/v\u00fdstupu io_uring byla p\u0159id\u00e1na podpora pou\u017e\u00edv\u00e1n\u00ed subsyst\u00e9mu BPF pro vytv\u00e1\u0159en\u00ed obslu\u017en\u00fdch rutin. Nap\u0159\u00edklad lze nahradit hlavn\u00ed cyklus zpracov\u00e1n\u00ed BPF programem.\n<li class=\"l\"> V subsyst\u00e9mu BPF byla modernizov\u00e1na anal\u00fdza vyu\u017eit\u00ed z\u00e1sobn\u00edku, co\u017e v\u00fdrazn\u011b zrychlilo ov\u011b\u0159en\u00ed mnoha BPF program\u016f.\n<li class=\"l\"> Za \u00fa\u010delem optimalizace v\u00fdkonu byla p\u0159eps\u00e1na podsyst\u00e9m hrtimer (high resolution timer). Pl\u00e1nova\u010d \u00faloh nyn\u00ed m\u016f\u017ee pou\u017e\u00edvat vysoce p\u0159esn\u00e9 \u010dasova\u010de bez ztr\u00e1ty v\u00fdkonu m\u00edsto m\u00e9n\u011b p\u0159esn\u00fdch \u010dasova\u010d\u016f.\n<li class=\"l\"> Pokra\u010duje p\u0159enos zm\u011bn z v\u011btve Rust-for-Linux, t\u00fdkaj\u00edc\u00edch se pou\u017eit\u00ed jazyka Rust jako druh\u00e9ho jazyka pro v\u00fdvoj ovlada\u010d\u016f a modul\u016f j\u00e1dra (podpora Rust nen\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed aktivn\u00ed a nezp\u016fsobuje, \u017ee by Rust byl povinnou sou\u010d\u00e1st\u00ed build z\u00e1vislost\u00ed j\u00e1dra). A\u017e do verze 1.85 (dod\u00e1van\u00e9 v Debian 13) byly zv\u00fd\u0161eny po\u017eadavky na verzi Rust pot\u0159ebnou k sestaven\u00ed komponent j\u00e1dra. Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed Kconfig mo\u017enost CONFIG_RUST_INLINE_HELPERS pro zabudov\u00e1v\u00e1n\u00ed C wrapper\u016f do Rust k\u00f3du b\u011bhem kompilace (optimalizace urychlila pr\u00e1ci block driveru null o 2 %). Byl p\u0159id\u00e1n makro \u201aconst_assert!\u2018. Roz\u0161\u00ed\u0159eny mo\u017enosti modul\u016f \u201asizes\u2018, \u201aclk\u2018, \u201aptr\u2018, \u201async\u2018, \u201aerror\u2018.\n<li class=\"l\"> Do mechanismu SCHED_EXT, kter\u00fd umo\u017e\u0148uje pou\u017e\u00edvat BPF k vytv\u00e1\u0159en\u00ed pl\u00e1nova\u010d\u016f CPU, byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed mo\u017enost vytv\u00e1\u0159en\u00ed vno\u0159en\u00fdch pl\u00e1nova\u010d\u016f (sub-scheduler), d\u00edky nim\u017e m\u016f\u017ee m\u00edt ka\u017ed\u00e1 cgroup sv\u016fj vlastn\u00ed pl\u00e1nova\u010d \u00faloh.\n<li class=\"l\"> Pokra\u010duje optimalizace subsyst\u00e9mu swapu. Byla odstran\u011bna star\u00e1 struktura swap_map, nahrazena mechanismem \u201eSwap Table\u201c. Tato zm\u011bna umo\u017enila zv\u00fd\u0161it v\u00fdkon a sn\u00ed\u017eit spot\u0159ebu pam\u011bti v subsyst\u00e9mu swapu.\n<li class=\"l\"> Do subsyst\u00e9mu DAMON (Data Access MONitor), kter\u00fd umo\u017e\u0148uje sledovat p\u0159\u00edstup procesu k dat\u016fm v opera\u010dn\u00ed pam\u011bti (nap\u0159\u00edklad lze zjistit, kter\u00e9 oblasti pam\u011bti proces nav\u0161t\u00edvil, a kter\u00e9 oblasti pam\u011bti z\u016fstaly nevyu\u017eit\u00e9), byla p\u0159id\u00e1na podpora r\u016fzn\u00fdch algoritm\u016f automatick\u00e9ho lad\u011bn\u00ed kv\u00f3t.\n<li class=\"l\"> V subsyst\u00e9mu sledov\u00e1n\u00ed byla realizov\u00e1na koncepce extern\u00edch kruhov\u00fdch buffer\u016f, kter\u00e1 umo\u017e\u0148uje z\u00edsk\u00e1vat sledovac\u00ed data z <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/\" title=\"virtu\u00e1ln\u00edch stroj\u016f\" data-wpil-keyword-link=\"linked\">virtu\u00e1ln\u00edch stroj\u016f<\/a>. Mo\u017enost je aktivov\u00e1na v hypervisorech <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vps\/abuzoustojchivye-vps\/\" title=\"KVM\" data-wpil-keyword-link=\"linked\">KVM<\/a> a nVHE pro p\u0159enos sledovac\u00edch dat z hostovan\u00e9 syst\u00e9my na stranu hostitele.\n<li class=\"l\"> Do subsyst\u00e9mu RV (Runtime Verification), ur\u010den\u00e9ho pro ov\u011b\u0159ov\u00e1n\u00ed spr\u00e1vnosti \u010dinnosti vysoce spolehliv\u00fdch syst\u00e9m\u016f, byly p\u0159id\u00e1ny komponenty monitorov\u00e1n\u00ed \u201estall\u201c pro sledov\u00e1n\u00ed \u00faloh, jejich\u017e prov\u00e1d\u011bn\u00ed bylo do\u010dasn\u011b pozastaveno nebo zablokov\u00e1no, a \u201edeadline\u201c pro anal\u00fdzu chov\u00e1n\u00ed pl\u00e1nova\u010de \u00faloh.\n<\/ul>\n<li class=\"l\"> <b>Virtualizace a bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Ve v\u00fdchoz\u00edm nastaven\u00ed je nastaven b\u011bhov\u00fd p\u0159\u00edznak PROC_MEM_FORCE_PTRACE, kter\u00fd umo\u017e\u0148uje obch\u00e1zet pr\u00e1va p\u0159\u00edstupu k pam\u011bti procesu p\u0159es soubor \/proc\/PID\/mem pouze pro procesy, kter\u00e9 pou\u017e\u00edvaj\u00ed pro lad\u011bn\u00ed syst\u00e9mov\u00fd vol\u00e1n\u00ed ptrace().\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd soubor hook\u016f pro moduly LSM (Linux Security Module), kter\u00fd usnad\u0148uje implementaci politik pro z\u00e1sobn\u00edkov\u00e9 souborov\u00e9 syst\u00e9my, jako je overlayfs. Do LSM byl tak\u00e9 p\u0159id\u00e1n hook pro spr\u00e1vu p\u0159\u00edstupu k unixov\u00fdm socket\u016fm, kter\u00fd je zapojen v LSM modulu Landlock pro p\u0159i\u0159azen\u00ed p\u0159\u00edstupov\u00fdch politik k unixov\u00fdm socket\u016fm.\n<li class=\"l\"> Do integrovan\u00e9 kryptoknihovny lib\/crypto, kter\u00e1 poskytuje jednodu\u0161\u0161\u00ed a rychlej\u0161\u00ed funkce ne\u017e tradi\u010dn\u00ed crypto API, byla p\u0159id\u00e1na podpora algoritm\u016f AES-CMAC, AES-XCBC-MAC, AES-CBC-MAC, GHASH a SM3. Byla p\u0159id\u00e1na dokumentace k lib\/crypto.\n<li class=\"l\"> Byl implementov\u00e1n re\u017eim pKVM (Protected KVM) pro p\u0159\u00edsnou izolaci anonymn\u00ed pam\u011bti s vyu\u017eit\u00edm virtualiza\u010dn\u00edch roz\u0161\u00ed\u0159en\u00ed pro architekturu AArch64. V tomto re\u017eimu jsou str\u00e1nky pam\u011bti hosta vylou\u010deny z tabulky virtu\u00e1ln\u00edch adres hostitelsk\u00e9ho syst\u00e9mu.\n<li class=\"l\"> Do hypervizoru KVM byla p\u0159id\u00e1na podpora p\u00e1t\u00e9 verze virtu\u00e1ln\u00edho \u0159adi\u010de p\u0159eru\u0161en\u00ed ARM (VGICv5 \u2014 ARM Virtual Generic Interrupt Controller v5).\n<\/ul>\n<li class=\"l\"> <b>S\u00ed\u0165ov\u00e1 subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> Pro unixov\u00e9 sockety, kter\u00e9 vytv\u00e1\u0159\u00ed funkce socket(), byla implementov\u00e1na podpora roz\u0161\u00ed\u0159en\u00fdch atribut\u016f soubor\u016f (xattr) \u201euser.*\u201c. Mezi oblasti pou\u017eit\u00ed pat\u0159\u00ed p\u0159i\u0159azov\u00e1n\u00ed \u0161t\u00edtk\u016f pomoc\u00ed roz\u0161\u00ed\u0159en\u00fdch atribut\u016f k unixov\u00fdm socket\u016fm pou\u017e\u00edvan\u00fdm pro IPC Varlink, aby se odli\u0161ily pro inspekci a debugging IPC pomoc\u00ed program\u016f BPF. V systemd-journald maj\u00ed b\u00fdt roz\u0161\u00ed\u0159en\u00e9 atributy pou\u017eity k ur\u010den\u00ed form\u00e1tu protokolu v\u00e1zan\u00e9ho na socket \/dev\/log.\n<li class=\"l\"> Byla odstran\u011bna podpora protokolu UDP-Lite (RFC 3828), kter\u00fd umo\u017e\u0148uje doru\u010dov\u00e1n\u00ed paket\u016f s nespr\u00e1vnou kontroln\u00ed sou\u010dt\u011b s o\u010dek\u00e1v\u00e1n\u00edm, \u017ee nap\u0159\u00edklad \u010d\u00e1ste\u010dn\u011b po\u0161kozen\u00e1 audio a video data mohou b\u00fdt obnovena na \u00farovni kodeku. Protokol byl odstran\u011bn, proto\u017ee jej nikdo nepou\u017e\u00edv\u00e1.\n<li class=\"l\"> Byla odstran\u011bna mo\u017enost sestaven\u00ed z\u00e1sobn\u00edku IPv6 ve form\u011b modulu j\u00e1dra, kter\u00fd nebyl prakticky pou\u017e\u00edv\u00e1n (IPv6 se bu\u010f integruje do j\u00e1dra, nebo je zcela vypnut), ale komplikoval \u00fadr\u017ebu, proto\u017ee p\u0159i sestaven\u00ed IPv6 jako modulu j\u00e1dra (CONFIG_IPV6=m) muselo mnoho subsyst\u00e9m\u016f p\u0159id\u00e1vat zbyte\u010dn\u00e9 zpracovatele pro p\u0159\u00edpad vylo\u017een\u00ed modulu IPv6.\n<\/ul>\n<li class=\"l\"> <b>Hardware<\/b>\n<ul>\n<li class=\"l\"> V ovlada\u010di AMDGPU byl za\u0159azen nov\u00fd zobrazovac\u00ed engine (DC) pro APU AMD s\u00e9rie HD 7000 (Sea Islands, GCN 1.1).\n<li class=\"l\"> V ovlada\u010di Nouveau byla p\u0159id\u00e1na po\u010d\u00e1te\u010dn\u00ed podpora GPU NVIDIA GA100 zalo\u017een\u00e9ho na mikroarchitektu\u0159e Ampere.\n<li class=\"l\"> Pokra\u010duje se v pr\u00e1ci na drivery drm (Direct Rendering Manager) Xe pro GPU s architekturou Intel Xe, kter\u00e1 se pou\u017e\u00edv\u00e1 u grafick\u00fdch karet Intel rodiny Arc a integrovan\u00e9 grafiky, po\u010d\u00ednaje procesory Tiger Lake. Byla p\u0159id\u00e1na podpora grafick\u00e9ho subsyst\u00e9mu procesor\u016f Intel Nova Lake-P. Byly implementov\u00e1ny \u010diteln\u00e9 vyrovn\u00e1vac\u00ed objekty (Purgeable Buffer Objects).\n<li class=\"l\"> Pokra\u010duje integrace komponent ovlada\u010de Nova pro GPU NVIDIA, vybaven\u00e9 GSP firmwary pou\u017e\u00edvan\u00fdmi od s\u00e9rie NVIDIA GeForce RTX 2000 na b\u00e1zi mikroarchitektury Turing. Ovlada\u010d je naps\u00e1n v jazyce Rust. Byla p\u0159id\u00e1na z\u00e1kladn\u00ed podpora GPU na b\u00e1zi mikroarchitektury Turing.\n<li class=\"l\"> Byl p\u0159id\u00e1n DRM ovlada\u010d corebootdrm pro v\u00fdstup grafiky p\u0159es framebuffer firmwaru zalo\u017een\u00e9ho na CoreBoot.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora zvukov\u00fdch ASoC AMD RPL DMIC, Cirrus Logic CS42L43, CS47L47, NVIDIA CPCAP a WM8962. Byla vylep\u0161ena podpora zvukov\u00fdch za\u0159\u00edzen\u00ed s rozhran\u00edm USB: Huawei Headset, Focusrite Novation, MV-Silicon, Studio 1824, Arturia AF16Rig, Hotone Audio, Feaulle Rainbow,<br \/>\n  PreSonus AudioBox, Moondrop Ju Jiu, Scarlett 18i20.<\/p>\n<li class=\"l\"> Byl p\u0159id\u00e1n ovlada\u010d yogafan pro sledov\u00e1n\u00ed rychlosti ot\u00e1\u010den\u00ed ventil\u00e1toru na notebooc\u00edch Lenovo Yoga, Legion a IdeaPad.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora ARM platforem, SoC a za\u0159\u00edzen\u00ed: Qualcomm Glymur, Qualcomm Mahua, Qualcomm Eliza, Qualcomm IPQ5210, Qualcomm apq8084 a ipq806x, Axis ARTPEC-9, ARM Zena, ARM corstone-1000-a320, Microchip LAN9691, Microchip PIC64GX, Rockchip RV1103B, Renesas RZ\/G3L, NXP S32N79.\n<li class=\"l\"> Byla odstran\u011bna podpora kontroler\u016f AHCI SATA a PCIe pou\u017e\u00edvan\u00fdch v SoC Baikal-T1, stejn\u011b jako ovlada\u010d\u016f \u010dasova\u010de, pam\u011bti, physmap, sb\u011brnice, hwmon, dwc a bt1-rom. D\u016fvodem odstran\u011bn\u00ed je nedostate\u010dn\u00e9 \u00fadr\u017eby a nedokon\u010den\u00e1 integrace sou\u010d\u00e1st\u00ed platformy Baikal, jej\u00ed\u017e v\u00fdroba v RF byla ukon\u010dena v listopadu 2025.\n<li class=\"l\"> Bylo odstran\u011bno 12 ovlada\u010d\u016f pro Ethernet za\u0159\u00edzen\u00ed s rozhran\u00edmi ISA a PCMCIA, vyr\u00e1b\u011bn\u00fdch p\u0159ed rokem 2002, pro kter\u00e9 se nena\u0161li u\u017eivatel\u00e9 pou\u017e\u00edvaj\u00edc\u00ed je v pracovn\u00edch syst\u00e9mech. Tak\u00e9 z j\u00e1dra byly vylou\u010deny<br \/>\npodsystem ISDN, implementace protokol\u016f AX.25, CAIF a Bluetooth CMTP (Common ISDN Application Programming Interface Message Transport Protocol), ovlada\u010de yellowfin (Yellowfin Gigabit-NIC), hamachi (Hamachi GNIC-II), hamradio (Amateur Radio), inport a logibm (busmouse). D\u016fvodem odstran\u011bn\u00ed je nedostatek aktivn\u00edch spr\u00e1vc\u016f na pozad\u00ed rostouc\u00edho po\u010dtu zji\u0161t\u011bn\u00fdch chyb pomoc\u00ed syzbot a AI n\u00e1stroj\u016f, kter\u00e9 nikdo nem\u00e1 v \u00famyslu opravit, a ve\u0161ker\u00e1 z\u00e1t\u011b\u017e na odstran\u011bn\u00ed v\u00e1\u017en\u00fdch probl\u00e9m\u016f le\u017e\u00ed na spr\u00e1vc\u00edch hlavn\u00edch s\u00ed\u0165ov\u00fdch subsyst\u00e9m\u016f j\u00e1dra. Celkem bylo odstran\u011bno v\u00edce ne\u017e 140 tis\u00edc \u0159\u00e1dk\u016f k\u00f3du.<\/p>\n<\/ul>\n<\/ul>\n<p>Zdroj: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65686\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.1. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 ntfsplus, \u043f\u0435\u0440\u0432\u0430\u044f \u0441\u0442\u0430\u0434\u0438\u044f \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 CPU i486, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u044b\u0445 Ethernet-\u0430\u0434\u0430\u043f\u0442\u0435\u0440\u043e\u0432, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 ISDN \u0438 AX.25, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 Intel FRED, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 BPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0432 io_uring, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u0434\u043a\u0430\u0447\u043a\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0443\u0431\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0432 sched_ext, \u0432\u0432\u043e\u0434\/\u0432\u044b\u0432\u043e\u0434 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 zero-copy \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182060","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.1.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-7-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.1.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-7-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-06-15T00:48:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-06-15T00:48:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vyd\u00e1n\u00ed j\u00e1dra Linux 7.1 | ProHoster","description":"Po dvou m\u011bs\u00edc\u00edch v\u00fdvoje p\u0159edstavil Linus Torvalds vyd\u00e1n\u00ed j\u00e1dra Linux 7.1.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-7-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.1 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.1.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-yadra-linux-7-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-15T00:48:07+00:00","article:modified_time":"2026-06-15T00:48:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182060","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:23","updated":"2026-08-05 12:22:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=182060"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182060\/revisions"}],"predecessor-version":[{"id":182066,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182060\/revisions\/182066"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=182060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=182060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=182060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}