{"id":52353,"date":"2019-11-06T00:00:00","date_gmt":"2019-11-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/reliz-distributiva-red-hat-enterprise-linux-8-1"},"modified":"2020-02-18T14:00:03","modified_gmt":"2020-02-18T11:00:03","slug":"reliz-distributiva-red-hat-enterprise-linux-8-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1","title":{"rendered":"Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 8.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spole\u010dnost Red Hat <noindex><a rel=\"nofollow\" href=\"https:\/\/www.redhat.com\/en\/about\/press-releases\/red-hat-ups-iq-intelligent-operating-system-latest-release-red-hat-enterprise-linux-8\">vyu\u017eila<\/a><\/noindex> distribuce <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/products\/red-hat-enterprise-linux\/\">Red Hat Enterprise Linux 8.1<\/a><\/noindex>. Instala\u010dn\u00ed sestavy jsou p\u0159ipraveny pro architektury x86_64, s390x (IBM System z), ppc64le a Aarch64, ale  <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/downloads\/\">jsou k dispozici<\/a><\/noindex> pro <noindex><a rel=\"nofollow\" href=\"https:\/\/www.redhat.com\/en\/technologies\/linux-platforms\/enterprise-linux\/try-it\">ke sta\u017een\u00ed<\/a><\/noindex> pouze registrovan\u00fdm u\u017eivatel\u016fm Red Hat Customer Portal. Zdrojov\u00e9 k\u00f3dy rpm bal\u00ed\u010dk\u016f Red Hat Enterprise Linux 8 jsou distribuov\u00e1ny prost\u0159ednictv\u00edm <noindex><a rel=\"nofollow\" href=\"https:\/\/git.centos.org\/\">Git repozit\u00e1\u0159e<\/a><\/noindex> CentOS. V\u011btev RHEL 8.x bude podporov\u00e1na minim\u00e1ln\u011b do roku 2029.<\/p>\n<p>Red Hat Enterprise Linux 8.1 se stal prvn\u00ed verz\u00ed, p\u0159ipravenou podle nov\u00e9ho p\u0159edv\u00eddateln\u00e9ho v\u00fdvojov\u00e9ho cyklu, kter\u00fd p\u0159edpokl\u00e1d\u00e1 vytv\u00e1\u0159en\u00ed vyd\u00e1n\u00ed ka\u017ed\u00fdch \u0161est m\u011bs\u00edc\u016f ve stanoven\u00e9m \u010dasov\u00e9m r\u00e1mci. P\u0159esn\u00e9 informace o \u010dase vyd\u00e1n\u00ed nov\u00e9ho vyd\u00e1n\u00ed umo\u017e\u0148uj\u00ed synchronizaci v\u00fdvojov\u00fdch pl\u00e1n\u016f r\u016fzn\u00fdch projekt\u016f, p\u0159ipravit se na nov\u00e9 vyd\u00e1n\u00ed a napl\u00e1novat dobu nasazen\u00ed aktualizac\u00ed. <\/p>\n<p>Je pozoruhodn\u00e9, \u017ee nov\u00fd <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/support\/policy\/updates\/errata\/\">\u017eivotn\u00ed cyklus<\/a><\/noindex> produkt\u016f RHEL zahrnuje n\u011bkolik \u00farovn\u00ed, v\u010detn\u011b Fedory jako z\u00e1kladny pro realizaci nov\u00fdch funkc\u00ed,  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51556\">CentOS Stream<\/a><\/noindex> pro p\u0159\u00edstup k bal\u00ed\u010dk\u016fm vytv\u00e1\u0159en\u00fdm pro n\u00e1sleduj\u00edc\u00ed mezivyd\u00e1n\u00ed RHEL (rolling verze RHEL),<br \/>\n minimalistick\u00fd univerz\u00e1ln\u00ed z\u00e1kladn\u00ed obraz (UBI, Universal Base Image) pro spou\u0161t\u011bn\u00ed aplikac\u00ed v izolovan\u00fdch kontejnerech a  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51366\">RHEL Developer Subscription<\/a><\/noindex> pro bezplatn\u00e9 pou\u017e\u00edv\u00e1n\u00ed RHEL v pr\u016fb\u011bhu v\u00fdvoje.<\/p>\n<p>Kl\u00ed\u010dov\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/8\/html-single\/8.1_release_notes\/index\">zm\u011bny<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Byla zaji\u0161t\u011bna pln\u00e1 podpora mechanismu aplikace Live-patch\u016f (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=39235\">kpatch<\/a><\/noindex>) pro odstran\u011bn\u00ed zranitelnost\u00ed v j\u00e1d\u0159e Linuxu bez restartov\u00e1n\u00ed syst\u00e9mu a bez zastaven\u00ed \u010dinnosti. D\u0159\u00edve byl kpatch pova\u017eov\u00e1n za experiment\u00e1ln\u00ed funkci;\n<li class=\"l\"> Na z\u00e1klad\u011b r\u00e1mce <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/linux-application-whitelisting\/fapolicyd\">fapolicyd<\/a><\/noindex> byla implementov\u00e1na mo\u017enost vytv\u00e1\u0159en\u00ed b\u00edl\u00fdch a \u010dern\u00fdch seznam\u016f aplikac\u00ed, kter\u00e9 umo\u017e\u0148uj\u00ed vymezit, kter\u00e9 programy m\u016f\u017ee u\u017eivatel spou\u0161t\u011bt a kter\u00e9 ne (nap\u0159\u00edklad pro blokov\u00e1n\u00ed spou\u0161t\u011bn\u00ed neov\u011b\u0159en\u00fdch extern\u00edch spustiteln\u00fdch soubor\u016f). Rozhodnut\u00ed o blokaci nebo povolen\u00ed spu\u0161t\u011bn\u00ed m\u016f\u017ee b\u00fdt p\u0159ijato na z\u00e1klad\u011b n\u00e1zvu aplikace, cesty, hashe obsahu a MIME typu. Kontrola pravidel se prov\u00e1d\u00ed b\u011bhem syst\u00e9mov\u00fdch vol\u00e1n\u00ed open() a exec(), a proto m\u016f\u017ee negativn\u011b ovlivnit v\u00fdkon;\n<li class=\"l\"> Sou\u010d\u00e1st\u00ed jsou profily SELinux zam\u011b\u0159en\u00e9 na pou\u017eit\u00ed s izolovan\u00fdmi kontejnery a umo\u017e\u0148uj\u00edc\u00ed jemn\u011bj\u0161\u00ed \u0159\u00edzen\u00ed p\u0159\u00edstupu slu\u017eeb spou\u0161t\u011bn\u00fdch v kontejnerech k prost\u0159edk\u016fm hostitelsk\u00e9ho syst\u00e9mu. Pro generaci pravidel SELinux pro kontejnery byla navr\u017eena nov\u00e1 utilita udica, kter\u00e1 s ohledem na specifika konkr\u00e9tn\u00edho kontejneru poskytuje p\u0159\u00edstup pouze k nezbytn\u00fdm extern\u00edm prost\u0159edk\u016fm, jako jsou \u00falo\u017ei\u0161t\u011b, za\u0159\u00edzen\u00ed a s\u00ed\u0165. N\u00e1stroje SELinux (libsepol, libselinux, libsemanage, policycoreutils, checkpolicy, mcstrans) byly aktualizov\u00e1ny na verzi 2.9, a bal\u00ed\u010dek SETools na verzi 4.2.2.\n<p>Byl p\u0159id\u00e1n nov\u00fd typ SELinux \u2014 boltd_t, kter\u00fd omezuje boltd, proces pro spr\u00e1vu za\u0159\u00edzen\u00ed s rozhran\u00edm Thunderbolt 3 (boltd nyn\u00ed b\u011b\u017e\u00ed v kontejneru omezen\u00e9m SELinux). Byl p\u0159id\u00e1n nov\u00fd t\u0159\u00edda pravidel SELinux \u2014 bpf, kter\u00fd spravuje p\u0159\u00edstup k Berkeley Packet Filter (BPF) a inspektuje aplikace pro eBPF;<\/p>\n<li class=\"l\"> Do sestavy byl zahrnut stack protokol\u016f sm\u011brov\u00e1n\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=46323\">FRRouting<\/a><\/noindex> (BGP4, MP-BGP, OSPFv2, OSPFv3, RIPv1, RIPv2, RIPng, PIM-SM\/MSDP, LDP, IS-IS), kter\u00fd nahradil d\u0159\u00edve pou\u017eit\u00fd bal\u00ed\u010dek Quagga (FRRouting je odvozenina od Quagga, tak\u017ee kompatibilita nebyla ovlivn\u011bna);\n<li class=\"l\"> Pro \u0161ifrovan\u00e9 odd\u00edly ve form\u00e1tu LUKS2 byla p\u0159id\u00e1na podpora pro p\u0159ezna\u010dov\u00e1n\u00ed blokov\u00fdch za\u0159\u00edzen\u00ed za b\u011bhu, bez nutnosti p\u0159eru\u0161en\u00ed jejich pou\u017e\u00edv\u00e1n\u00ed v syst\u00e9mu (nap\u0159\u00edklad nyn\u00ed je mo\u017en\u00e9 zm\u011bnit kl\u00ed\u010d nebo \u0161ifrovac\u00ed algoritmus bez odpojen\u00ed odd\u00edlu);\n<li class=\"l\"> Do frameworku OpenSCAP byla p\u0159id\u00e1na podpora nov\u00e9 verze protokolu SCAP 1.3 (Security Content Automation Protocol);\n<li class=\"l\"> Byly aktualizov\u00e1ny verze OpenSSH 8.0p1, Tuned 2.12, chrony 3.5, samba 4.10.4. Do repozit\u00e1\u0159e AppStream byly p\u0159id\u00e1ny moduly s nov\u00fdmi v\u011btvemi PHP 7.3, Ruby 2.6, Node.js 12 a nginx 1.16 (aktualizace modul\u016f se star\u0161\u00edmi v\u011btvemi byla pokra\u010dov\u00e1na). Do souboru Software Collection byly p\u0159id\u00e1ny bal\u00ed\u010dky s GCC 9, LLVM 8.0.1, Rust 1.37 a Go 1.12.8;\n<li class=\"l\"> N\u00e1stroj pro sledov\u00e1n\u00ed SystemTap byl aktualizov\u00e1n na v\u011btev 4.1 a n\u00e1stroj pro lad\u011bn\u00ed pr\u00e1ce s pam\u011bt\u00ed Valgrind na verzi 3.15;\n<li class=\"l\"> Do n\u00e1stroj\u016f pro nasazen\u00ed serveru identity (IdM, Identity Management) byla p\u0159id\u00e1na nov\u00e1 utilita healthcheck, kter\u00e1 usnad\u0148uje identifikaci probl\u00e9m\u016f s provozem prost\u0159ed\u00ed se serverem identity. Byla zjednodu\u0161ena instalace a konfigurace prost\u0159ed\u00ed IdM d\u00edky podpo\u0159e rol\u00ed Ansible a mo\u017enosti instalace modul\u016f. P\u0159id\u00e1na podpora d\u016fv\u011bryhodn\u00fdch les\u016f (Active Directory Trusted Forest) na b\u00e1zi Windows Server 2019.\n<li class=\"l\"> Ve klasick\u00e9 relaci GNOME (GNOME Classic) byl zm\u011bn\u011bn p\u0159ep\u00edna\u010d virtu\u00e1ln\u00edch pracovn\u00edch ploch. Widget pro p\u0159ep\u00edn\u00e1n\u00ed mezi plochami se nyn\u00ed nach\u00e1z\u00ed na prav\u00e9 stran\u011b doln\u00edho panelu a je navr\u017een jako pruh s miniaturami pracovn\u00edch ploch (pro p\u0159epnut\u00ed na jinou pracovn\u00ed plochu sta\u010d\u00ed kliknout na miniaturu, kter\u00e1 odr\u00e1\u017e\u00ed jej\u00ed obsah);\n<li class=\"l\"> Subsystem DRM (Direct Rendering Manager) a n\u00edzko\u00farov\u0148ov\u00e9 grafick\u00e9 ovlada\u010de (amdgpu, nouveau, i915, mgag200) byly aktualizov\u00e1ny na stav odpov\u00eddaj\u00edc\u00ed j\u00e1dru Linux 5.1. Byla p\u0159id\u00e1na podpora video subsyst\u00e9mu AMD Raven 2, AMD Picasso, AMD Vega, Intel Amber Lake-Y a Intel Comet Lake-U;\n<li class=\"l\"> Do n\u00e1stroj\u016f pro aktualizaci RHEL 7.6 na RHEL 8.1 byla p\u0159id\u00e1na podpora pro aktualizaci bez p\u0159einstalace pro architektury ARM64, IBM POWER (little endian) a IBM Z. Do webov\u00e9 konzole byla p\u0159id\u00e1na funkce p\u0159edb\u011b\u017en\u00e9 kontroly syst\u00e9mu p\u0159ed aktualizac\u00ed. Byl p\u0159id\u00e1n plugin cockpit-leapp pro obnoven\u00ed stavu v p\u0159\u00edpad\u011b probl\u00e9m\u016f b\u011bhem aktualizace. Bylo zaji\u0161t\u011bno odd\u011blen\u00ed adres\u00e1\u0159\u016f \/var a \/usr do samostatn\u00fdch odd\u00edl\u016f. Byla p\u0159id\u00e1na podpora UEFI. V <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/oamg\/leapp\">Leapp<\/a><\/noindex> byla zaji\u0161t\u011bna aktualizace bal\u00ed\u010dk\u016f z repozit\u00e1\u0159e Supplementary (v\u010detn\u011b propriet\u00e1rn\u00edch bal\u00ed\u010dk\u016f);\n<li class=\"l\"> V Image Builder byla p\u0159id\u00e1na podpora pro sestavov\u00e1n\u00ed obraz\u016f pro cloudov\u00e1 prost\u0159ed\u00ed Google Cloud a Alibaba Cloud. P\u0159i vytv\u00e1\u0159en\u00ed obsahu obraz\u016f byla p\u0159id\u00e1na mo\u017enost pou\u017eit\u00ed repo.git k zahrnut\u00ed dodate\u010dn\u00fdch soubor\u016f z libovoln\u00fdch Git repozit\u00e1\u0159\u016f;\n<li class=\"l\"> V Glibc pro malloc byly p\u0159id\u00e1ny dodate\u010dn\u00e9 kontroly pro odhalen\u00ed situac\u00ed po\u0161kozen\u00ed p\u0159id\u011blen\u00fdch blok\u016f pam\u011bti;\n<li class=\"l\"> Bal\u00ed\u010dek dnf-utils byl p\u0159ejmenov\u00e1n na yum-utils pro zaji\u0161t\u011bn\u00ed kompatibility (mo\u017enost instalace dnf-utils z\u016fstala, ale tento bal\u00ed\u010dek bude automaticky nahrazen yum-utils);\n<li class=\"l\"> Byla p\u0159id\u00e1na nov\u00e1 edice Red Hat Enterprise Linux System Roles, <noindex><a rel=\"nofollow\" href=\"https:\/\/linux-system-roles.github.io\/\">poskytuj\u00edc\u00ed<\/a><\/noindex> sada modul\u016f a rol\u00ed pro nasazen\u00ed syst\u00e9mu centralizovan\u00e9ho \u0159\u00edzen\u00ed konfigurace na z\u00e1klad\u011b Ansible a konfiguraci subsyst\u00e9m\u016f pro vyu\u017eit\u00ed specifick\u00fdch funkc\u00ed souvisej\u00edc\u00edch se storage, s\u00ed\u0165ov\u00fdmi schopnostmi, synchronizac\u00ed \u010dasu, pravidly SElinux a aplikac\u00ed mechanismu kdump. Nap\u0159\u00edklad nov\u00e1 role<br \/>\nstorage umo\u017e\u0148uje prov\u00e1d\u011bt \u00fakoly, jako je spr\u00e1va syst\u00e9mu soubor\u016f na disku, pr\u00e1ce s skupinami LVM a logick\u00fdmi odd\u00edly;<\/p>\n<li class=\"l\"> V s\u00ed\u0165ov\u00e9m z\u00e1sobn\u00edku pro VXLAN a tunely GENEVE byla implementov\u00e1na mo\u017enost zpracov\u00e1n\u00ed ICMP paket\u016f \u201eDestination Unreachable\u201c, \u201ePacket Too Big\u201c a \u201eRedirect Message\u201c, co\u017e vy\u0159e\u0161ilo probl\u00e9m s nemo\u017enost\u00ed pou\u017e\u00edvat p\u0159esm\u011brov\u00e1n\u00ed tras a Path MTU Discovery ve VXLAN a GENEVE.\n<li class=\"l\"> Experiment\u00e1ln\u00ed implementace subsyst\u00e9mu XDP (eXpress Data Path), kter\u00e1 umo\u017e\u0148uje v Linuxu spou\u0161t\u011bt BPF programy na \u00farovni s\u00ed\u0165ov\u00e9ho ovlada\u010de s mo\u017enost\u00ed p\u0159\u00edm\u00e9ho p\u0159\u00edstupu k DMA buffer\u016fm paket\u016f a ve st\u00e1diu p\u0159ed p\u0159id\u011blen\u00edm bufferu skbuff s\u00ed\u0165ov\u00fdm stackem, a tak\u00e9 komponenty eBPF, synchronizovan\u00e9 s j\u00e1drem Linux 5.0. Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora subsyst\u00e9mu j\u00e1dra AF_XDP (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.iovisor.org\/technology\/xdp\">eXpress Data Path<\/a><\/noindex>);\n<li class=\"l\"> Byla zaji\u0161t\u011bna pln\u00e1 podpora s\u00ed\u0165ov\u00e9ho protokolu <noindex><a rel=\"nofollow\" href=\"http:\/\/tipc.sourceforge.net\/\">TIPC<\/a><\/noindex> (Transparent Inter-process Communication), ur\u010den\u00fd k organizaci mezi procesn\u00ed interakce v clusteru. Protokol poskytuje prost\u0159edky pro rychlou a spolehlivou interakci aplikac\u00ed, bez ohledu na to, na jak\u00fdch uzlech v clusteru se prov\u00e1d\u011bj\u00ed;\n<li class=\"l\"> Do initramfs byl p\u0159id\u00e1n nov\u00fd re\u017eim ukl\u00e1d\u00e1n\u00ed j\u00e1drov\u00e9ho dumpu v p\u0159\u00edpad\u011b selh\u00e1n\u00ed \u2014 \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/lists.fedoraproject.org\/archives\/list\/kexec@lists.fedoraproject.org\/thread\/5WI7USMD4QDZ5XGXGPKZ5NH7LCW74QU2\/\">early kdump<\/a><\/noindex>\u201e, funguj\u00edc\u00ed v ran\u00fdch f\u00e1z\u00edch bootov\u00e1n\u00ed;\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd parametr j\u00e1dra ipcmni_extend, kter\u00fd roz\u0161iruje limit identifik\u00e1tor\u016f IPC z 32 KB (15 bit\u016f) na 16 MB (24 bity), co\u017e aplikac\u00edm umo\u017e\u0148uje pou\u017e\u00edvat v\u00edce segment\u016f sd\u00edlen\u00e9 pam\u011bti;\n<li class=\"l\"> Ipset byl aktualizov\u00e1n na verzi 7.1 s podporou operac\u00ed IPSET_CMD_GET_BYNAME a IPSET_CMD_GET_BYINDEX;\n<li class=\"l\"> D\u00e9mon rngd, zaji\u0161\u0165uj\u00edc\u00ed napln\u011bn\u00ed entropi\u00ed gener\u00e1toru pseudon\u00e1hodn\u00fdch \u010d\u00edsel, byl zbaven nutnosti spou\u0161t\u011bt se s pr\u00e1vy root;\n<li class=\"l\"> Zaji\u0161t\u011bna kompletn\u00ed podpora <noindex><a rel=\"nofollow\" href=\"https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/616368\">Intel OPA<\/a><\/noindex> (Omni-Path Architecture) pro za\u0159\u00edzen\u00ed s Host Fabric Interface (HFI) a kompletn\u00ed podpora za\u0159\u00edzen\u00ed trval\u00e9 pam\u011bti Intel Optane DC Persistent Memory.\n<li class=\"l\"> V lad\u00edc\u00edch j\u00e1drech je ve v\u00fdchoz\u00edm nastaven\u00ed zahrnuto sestaven\u00ed s detektorem neur\u010dit\u00e9ho chov\u00e1n\u00ed UBSAN (Undefined Behavior Sanitizer), kter\u00fd do zkompilovan\u00e9ho k\u00f3du p\u0159id\u00e1v\u00e1 dal\u0161\u00ed kontroly pro odhalen\u00ed situac\u00ed, kdy se chov\u00e1n\u00ed programu st\u00e1v\u00e1 neur\u010dit\u00fdm (nap\u0159. pou\u017eit\u00ed nestatick\u00fdch prom\u011bnn\u00fdch p\u0159ed jejich inicializac\u00ed, d\u011blen\u00ed cel\u00fdch \u010d\u00edsel nulou, p\u0159ete\u010den\u00ed celo\u010d\u00edseln\u00fdch znakov\u00fdch typ\u016f, odkazov\u00e1n\u00ed na nulov\u00e9 ukazatele, probl\u00e9my s zarovn\u00e1n\u00edm ukazatel\u016f atd.);\n<li class=\"l\"> Strom zdrojov\u00fdch text\u016f j\u00e1dra s roz\u0161\u00ed\u0159en\u00edmi pro pr\u00e1ci v re\u00e1ln\u00e9m \u010dase (kernel-rt) byl synchronizov\u00e1n s k\u00f3dem hlavn\u00edho j\u00e1dra RHEL 8;\n<li class=\"l\"> P\u0159id\u00e1n ovlada\u010d ibmvnic pro s\u00ed\u0165ov\u00fd controller vNIC (Virtual Network Interface Controller) s implementac\u00ed technologie virtu\u00e1ln\u00edch s\u00edt\u00ed PowerVM. P\u0159i pou\u017e\u00edv\u00e1n\u00ed spolu se SR-IOV NIC nov\u00fd ovlada\u010d umo\u017e\u0148uje \u0159\u00edzen\u00ed propustnosti a kvality slu\u017eby na \u00farovni virtu\u00e1ln\u00edho s\u00ed\u0165ov\u00e9ho adapt\u00e9ru, \u010d\u00edm\u017e podstatn\u011b sni\u017euje re\u017eijn\u00ed n\u00e1klady v d\u016fsledku virtualizace a zmen\u0161uje z\u00e1t\u011b\u017e na CPU;\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora roz\u0161\u00ed\u0159en\u00ed pro kontrolu integrity dat (Data Integrity Extensions), kter\u00e9 chr\u00e1n\u00ed data p\u0159ed po\u0161kozen\u00edm p\u0159i zapisov\u00e1n\u00ed do \u00falo\u017ei\u0161t\u011b t\u00edm, \u017ee uchov\u00e1vaj\u00ed dal\u0161\u00ed korek\u010dn\u00ed bloky;\n<li class=\"l\"> Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora (Technology Preview) bal\u00ed\u010dku <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nmstate\/nmstate\/\">nmstate<\/a><\/noindex>, poskytuj\u00edc\u00ed knihovnu a n\u00e1stroj nmstatectl pro spr\u00e1vu s\u00ed\u0165ov\u00fdch nastaven\u00ed prost\u0159ednictv\u00edm deklarativn\u00edho API (stav s\u00edt\u011b je pops\u00e1n ve form\u011b p\u0159eddefinovan\u00e9 sch\u00e9my);\n<li class=\"l\"> Byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora implementace protokolu TLS na \u00farovni j\u00e1dra (KTLS) se \u0161ifrov\u00e1n\u00edm zalo\u017een\u00fdm na AES-GCM, stejn\u011b jako experiment\u00e1ln\u00ed podpora OverlayFS, cgroup v2, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49381\">Stratis<\/a><\/noindex>, mdev (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=39370\">Intel vGPU<\/a><\/noindex>) a DAX (p\u0159\u00edm\u00fd p\u0159\u00edstup k FS mimo str\u00e1nkovou mezipam\u011b\u0165 bez pou\u017eit\u00ed \u00farovn\u011b blokov\u00fdch za\u0159\u00edzen\u00ed) v ext4 a XFS;\n<li class=\"l\"> Byla vyhl\u00e1\u0161ena deprecated podpora DSA, TLS 1.0 a TLS 1.1, kter\u00e9 byly vy\u0159azeny ze sady DEFAULT a p\u0159esunuty do LEGACY (\u201eupdate-crypto-policies \u2014set LEGACY\u201c);\n<li class=\"l\"> Byly prohl\u00e1\u0161eny za zastaral\u00e9 bal\u00ed\u010dky 389-ds-base-legacy-tools,<br \/>\n    authd,<br \/>\n    custodia,<br \/>\n    hostname,<br \/>\n    libidn,<br \/>\n    net-tools,<br \/>\n    network-scripts,<br \/>\n    nss-pam-ldapd,<br \/>\n    sendmail,<br \/>\n    yp-tools,<br \/>\n    ypbind a ypserv. V budouc\u00edm v\u00fdznamn\u00e9m vyd\u00e1n\u00ed m\u016f\u017ee b\u00fdt jejich dod\u00e1v\u00e1n\u00ed ukon\u010deno;<\/p>\n<li class=\"l\"> Skripty ifup a ifdown byly nahrazeny obaly, kter\u00e9 volaj\u00ed NetworkManager prost\u0159ednictv\u00edm nmcli (pro vr\u00e1cen\u00ed star\u00fdch skript\u016f je t\u0159eba prov\u00e9st \u201eyum install network-scripts\u201c).\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51818\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Red Hat Enterprise Linux 8.1. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 x86_64, s390x (IBM System z), ppc64le \u0438 Aarch64, \u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Red Hat Customer Portal. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b rpm-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 Red Hat Enterprise Linux 8 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 CentOS. \u0412\u0435\u0442\u043a\u0430 RHEL 8.x \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e 2029 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52353","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 8.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-05T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 8.1 | ProHoster","description":"Spole\u010dnost Red Hat vydala.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 8.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-05T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52353","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:45:28","updated":"2026-01-24 03:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=52353"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52353\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=52353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=52353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=52353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}