{"id":53304,"date":"2019-11-29T00:00:00","date_gmt":"2019-11-28T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda"},"modified":"2020-02-18T14:01:11","modified_gmt":"2020-02-18T11:01:11","slug":"otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda","title":{"rendered":"Zpr\u00e1va o v\u00fdvoji FreeBSD za t\u0159et\u00ed \u010dtvrtlet\u00ed 2019","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/news\/status\/report-2019-07-2019-09.html\">Byl zve\u0159ejn\u011bn<\/a><\/noindex> Zpr\u00e1va o v\u00fdvoji projektu FreeBSD od \u010dervence do z\u00e1\u0159\u00ed 2019. Mezi zm\u011bnami lze zm\u00ednit:<\/p>\n<ul>\n<li class=\"l\"> <b>Obecn\u00e9 a syst\u00e9mov\u00e9 ot\u00e1zky<\/b>\n<ul>\n<li class=\"l\"> T\u00fdm Core v z\u00e1sad\u011b schv\u00e1lil mo\u017enost zahrnout do syst\u00e9mu k\u00f3d dod\u00e1van\u00fd pod licenc\u00ed BSD s dodate\u010dnou dohodou o pou\u017e\u00edv\u00e1n\u00ed patent\u016f (<noindex><a rel=\"nofollow\" href=\"https:\/\/opensource.org\/licenses\/BSDplusPatent\">BSD+Patent<\/a><\/noindex>), av\u0161ak rozhodnut\u00ed o zahrnut\u00ed ka\u017ed\u00e9 komponenty pod touto licenc\u00ed mus\u00ed b\u00fdt schv\u00e1leno samostatn\u011b;\n<li class=\"l\"> Prob\u011bhlo prvn\u00ed zased\u00e1n\u00ed pracovn\u00ed skupiny, kter\u00e1 byla z\u0159\u00edzena pro migraci zdrojov\u00fdch text\u016f z centralizovan\u00e9ho syst\u00e9mu spr\u00e1vy zdrojov\u00e9ho k\u00f3du Subversion do decentralizovan\u00e9ho syst\u00e9mu Git. Diskuze o \u00fa\u010delnosti migrace st\u00e1le prob\u00edh\u00e1 a v mnoha ot\u00e1zk\u00e1ch je\u0161t\u011b zb\u00fdv\u00e1 nal\u00e9zt \u0159e\u0161en\u00ed (nap\u0159\u00edklad jak postupovat s contrib\/, zda je t\u0159eba regenerovat hash v aktu\u00e1ln\u00edm git-repozit\u00e1\u0159i a jak nejl\u00e9pe prov\u00e1d\u011bt testov\u00e1n\u00ed commit\u016f);\n<li class=\"l\"> Z NetBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/freebsd\/freebsd\/commit\/6e5970c8f44eec5f975888cbfafd1ee5fb5bf4b3\">portov\u00e1no<\/a><\/noindex> n\u00e1stroj KCSAN (Kernel Concurrency Sanitizer), kter\u00fd umo\u017e\u0148uje odhalit vznik\u00e1n\u00ed z\u00e1vodn\u00edch podm\u00ednek mezi vl\u00e1kny j\u00e1dra b\u011b\u017e\u00edc\u00edmi na r\u016fzn\u00fdch CPU;\n<li class=\"l\"> Pracuje se na vyu\u017eit\u00ed vestav\u011bn\u00e9ho assembl\u00e9ru Clang (IAS) nam\u00edsto assembl\u00e9ru z GNU binutils;\n<li class=\"l\"> Infrastruktura emulace Linuxov\u00e9ho prost\u0159ed\u00ed (Linuxulator) je p\u0159izp\u016fsobena pro architekturu ARM64. Byla implementov\u00e1na syst\u00e9mov\u00e1 v\u00fdzva \"renameat2\". N\u00e1stroj strace byl vylep\u0161en pro diagnostiku probl\u00e9m\u016f v provediteln\u00fdch souborech Linuxu, kter\u00e9 se spou\u0161t\u00ed v Linuxulatoru. Byla \u0159e\u0161ena probl\u00e9m vzniku selh\u00e1n\u00ed p\u0159i spojov\u00e1n\u00ed provediteln\u00fdch soubor\u016f s nov\u00fdm glibc. Porty s Linux komponenty pro Linuxulator byly aktualizov\u00e1ny na CentOS 7.7;\n<li class=\"l\"> V r\u00e1mci programu Google Summer of Code studenti \u00fasp\u011b\u0161n\u011b realizovali \u0161est projekt\u016f: byla p\u0159ipravena implementace unifikovan\u00e9ho (IPv4\/IPv6) n\u00e1stroje ping, byly vyvinuty n\u00e1stroje pro testov\u00e1n\u00ed firewall\u016f a odhalov\u00e1n\u00ed chyb v j\u00e1d\u0159e (Kernel sanitizer), byl navr\u017een modul mac_ipacl, byl naps\u00e1n k\u00f3d pro kompresi virtu\u00e1ln\u00ed pam\u011bti a byla provedena pr\u00e1ce na odd\u011blen\u00ed procesu sestaven\u00ed port\u016f od m\u00edstn\u00ed instalace;\n<li class=\"l\"> Projekt fuzzingov\u00e9ho testov\u00e1n\u00ed j\u00e1dra FreeBSD s vyu\u017eit\u00edm syst\u00e9mu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/google\/syzkaller\/\">syzkaller<\/a><\/noindex>. B\u011bhem hodnot\u00edc\u00edho obdob\u00ed bylo pomoc\u00ed syzkalleru odhaleno a odstran\u011bno v\u00edce ne\u017e deset chyb. Pro spu\u0161t\u011bn\u00ed syzkalleru ve virtu\u00e1ln\u00edch stroj\u00edch na b\u00e1zi bhyve byl vy\u010dlen\u011bn samostatn\u00fd server, a pomoc\u00ed<br \/>\n Syzbot zaji\u0161\u0165uje kontrolu r\u016fzn\u00fdch subsyst\u00e9m\u016f FreeBSD v infrastruktu\u0159e Google. Byla zorganizov\u00e1na v\u00fdm\u011bna informac\u00ed o v\u0161ech p\u00e1dech do slu\u017eby backtrace.io pro usnadn\u011bn\u00ed jejich seskupen\u00ed a anal\u00fdzy;<\/p>\n<li class=\"l\"> Prob\u00edh\u00e1 pr\u00e1ce na aktualizaci implementace zlib na \u00farovni j\u00e1dra.<br \/>\nK\u00f3d spojen\u00fd se zpracov\u00e1n\u00edm dat byl p\u0159eveden ze zlib 1.0.4, vydan\u00e9ho p\u0159ed v\u00edce ne\u017e 20 lety, na aktu\u00e1ln\u00ed k\u00f3dovou z\u00e1kladnu zlib 1.2.11. Pro sjednocen\u00ed p\u0159\u00edstupu k zlib byly do j\u00e1dra p\u0159id\u00e1ny funkce compress, compress2 a uncompress. K\u00f3d zaji\u0161\u0165uj\u00edc\u00ed provoz protokolu PPP v subsyst\u00e9mu netgraph byl p\u0159eveden na syst\u00e9movou implementaci zlib m\u00edsto vlastn\u00ed verze t\u00e9to knihovny. Na novou verzi zlib byly tak\u00e9 p\u0159evedeny subsyst\u00e9my kern_ctf.c, opencryptodeflate, geom_uzip, subr_compressor,<br \/>\n    if_mxge, bxe aktualizov\u00e1no a ng_deflate;<\/p>\n<li class=\"l\"> Vyv\u00edj\u00ed se nov\u00e9 rozhran\u00ed j\u00e1dra <noindex><a rel=\"nofollow\" href=\"https:\/\/gitlab.com\/alfix\/sysctlinfo\">sysctlinfo<\/a><\/noindex>, kter\u00e9 umo\u017e\u0148uje naj\u00edt prvky v datab\u00e1zi parametr\u016f sysctl, zpracov\u00e1van\u00e9 ve form\u00e1tu MIB (Management Information Base), a p\u0159ed\u00e1vat informace o objektech do u\u017eivatelsk\u00e9ho prostoru.\n<\/ul>\n<li class=\"l\"> <b>Bezpe\u010dnost<\/b>\n<ul>\n<li class=\"l\"> Byl vyvinut modul j\u00e1dra <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/shivankgarg98\/freebsd\/tree\/shivank_MACPolicyIPAddressJail\/sys\/security\/mac_ipacl\">mac_ipacl<\/a><\/noindex>, zalo\u017een\u00fd na TrustedBSD MAC Framework a implementuj\u00edc\u00ed syst\u00e9m \u0159\u00edzen\u00ed p\u0159\u00edstupu k nastaven\u00edm s\u00ed\u0165ov\u00e9ho z\u00e1sobn\u00edku pro jail prostory. Nap\u0159\u00edklad pomoc\u00ed mac_ipacl m\u016f\u017ee spr\u00e1vce hostitelsk\u00e9ho syst\u00e9mu zabr\u00e1nit u\u017eivateli root v jailu m\u011bnit nebo nastavovat IP adresy nebo parametry pods\u00edt\u00ed pro ur\u010dit\u00e9 s\u00ed\u0165ov\u00e9 rozhran\u00ed. Navrhovan\u00fd syst\u00e9m mandantn\u00edho \u0159\u00edzen\u00ed p\u0159\u00edstupu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/shivankgarg98\/freebsd\/blob\/shivank_MACPolicyIPAddressJail\/share\/man\/man4\/mac_ipacl.4\">umo\u017e\u0148uje<\/a><\/noindex> umo\u017e\u0148uje definovat seznamy IP adres a pods\u00edt\u00ed povolen\u00fdch pro Jail, zakazovat nastavov\u00e1n\u00ed ur\u010dit\u00fdch IP a pods\u00edt\u00ed v Jail nebo omezovat zm\u011bnu parametr\u016f pouze pro ur\u010dit\u00e9 s\u00ed\u0165ov\u00e9 rozhran\u00ed;\n<li class=\"l\"> Spole\u010dnost Intel p\u0159edala projektu port softwarov\u00e9ho stacku  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tpm2-software\/\">TPM 2.0<\/a><\/noindex> (Trusted Platform Module) pro interakci s \u010dipem pro bezpe\u010dn\u00e9 v\u00fdpo\u010dty, kter\u00fd se obvykle pou\u017e\u00edv\u00e1 pro ov\u011b\u0159en\u00e9 na\u010d\u00edt\u00e1n\u00ed firmwaru a zav\u00e1d\u011bc\u00edho programu opera\u010dn\u00edho syst\u00e9mu. Slo\u017eky z\u00e1sobn\u00edku jsou prezentov\u00e1ny ve form\u011b port\u016f security\/tpm2-tss, security\/tpm2-tools a security\/tpm2-abrmd. Port tpm2-tss zahrnuje knihovny pro pou\u017e\u00edv\u00e1n\u00ed API TPM2, tpm2-tools poskytuje p\u0159\u00edkazov\u00e9 \u0159\u00e1dky pro prov\u00e1d\u011bn\u00ed operac\u00ed s TPM, a tpm2-abrmd obsahuje na pozad\u00ed b\u011b\u017e\u00edc\u00ed proces s implementac\u00ed komponent\u016f TPM Access Broker a Resource Manager, multiplexuj\u00edc\u00ed dotazy od r\u016fzn\u00fdch u\u017eivatel\u016f TPM na jedno za\u0159\u00edzen\u00ed. Krom\u011b ov\u011b\u0159en\u00e9ho na\u010d\u00edt\u00e1n\u00ed m\u016f\u017ee b\u00fdt TPM ve FreeBSD pou\u017eit pro pos\u00edlen\u00ed bezpe\u010dnosti Strongswan IPsec, SSH a TLS prov\u00e1d\u011bn\u00edm kryptografick\u00fdch operac\u00ed na samostatn\u00e9m \u010dipu;\n<li class=\"l\"> J\u00e1dro pro architekturu amd64 bylo p\u0159izp\u016fsobeno pro na\u010d\u00edt\u00e1n\u00ed pomoc\u00ed techniky ochrany W^X (write XOR execute), kter\u00e1 znamen\u00e1, \u017ee str\u00e1nky pam\u011bti nemohou b\u00fdt sou\u010dasn\u011b p\u0159\u00edstupn\u00e9 pro z\u00e1pis a proveden\u00ed (j\u00e1dro nyn\u00ed m\u016f\u017ee b\u00fdt na\u010d\u00edt\u00e1no s pou\u017eit\u00edm vykonateln\u00fdch str\u00e1nek pam\u011bti, pro kter\u00e9 je zak\u00e1z\u00e1n z\u00e1pis). Nov\u00e1 metoda ochrany j\u00e1dra byla zahrnuta do v\u011btve HEAD a bude sou\u010d\u00e1st\u00ed vyd\u00e1n\u00ed FreeBSD 13.0 a 12.2;\n<li class=\"l\"> Pro syst\u00e9mov\u00e9 vol\u00e1n\u00ed mmap a mprotect <noindex><a rel=\"nofollow\" href=\"https:\/\/reviews.freebsd.org\/rS349240\">realizov\u00e1no<\/a><\/noindex> makro PROT_MAX(), kter\u00e9 umo\u017e\u0148uje ur\u010dit povolen\u00fd soubor zna\u010dek omezen\u00ed p\u0159\u00edstupu p\u0159i dal\u0161\u00edm zm\u011bn\u011b (PROT_READ, PROT_WRITE, PROT_EXEC). Pomoc\u00ed PROT_MAX() m\u016f\u017ee v\u00fdvoj\u00e1\u0159 zak\u00e1zat p\u0159echod oblasti pam\u011bti do kategorie vykonateln\u00e9 nebo po\u017e\u00e1dat o pam\u011b\u0165, kter\u00e1 nepovoluje prov\u00e1d\u011bn\u00ed, ale m\u016f\u017ee b\u00fdt pozd\u011bji p\u0159evedena na vykonateln\u00e9. Nap\u0159\u00edklad, oblast pam\u011bti m\u016f\u017ee b\u00fdt otev\u0159ena pro z\u00e1pis pouze b\u011bhem dynamick\u00e9ho vazby nebo generace k\u00f3du JIT, ale po dokon\u010den\u00ed z\u00e1pisu je omezena pouze na \u010dten\u00ed a prov\u00e1d\u011bn\u00ed, a v p\u0159\u00edpad\u011b kompromitace nebude \u00fato\u010dn\u00edk schopen povolit z\u00e1pis pro tento blok pam\u011bti. Krom\u011b PROT_MAX() je tak\u00e9 implementov\u00e1n sysctl vm.imply_prot_max, p\u0159i jeho\u017e aktivaci je sada povolen\u00fdch zna\u010dek ur\u010dena na z\u00e1klad\u011b po\u010d\u00e1te\u010dn\u00edch parametr\u016f prvn\u00edho vol\u00e1n\u00ed mmap;\n<li class=\"l\"> Pro zaji\u0161t\u011bn\u00ed ochrany p\u0159ed zneu\u017e\u00edv\u00e1n\u00edm zranitelnost\u00ed byl krom\u011b techniky randomizace adresn\u00edho prostoru (ASLR) navr\u017een mechanismus randomizace posun\u016f ukazatel\u016f, kter\u00e9 adresuj\u00ed po\u010d\u00e1te\u010dn\u00ed r\u00e1mec z\u00e1sobn\u00edku a struktury um\u00edst\u011bn\u00e9 ve z\u00e1sobn\u00edku obsahuj\u00edc\u00ed informace o prost\u0159ed\u00ed, parametrech spu\u0161t\u011bn\u00ed programu a datech pro spustiteln\u00e9 obrazy ve form\u00e1tu ELF;\n<li class=\"l\"> Byla provedena pr\u00e1ce na odstran\u011bn\u00ed nebezpe\u010dn\u00e9 funkce gets z libc (tato funkce byla vy\u0159azena ze specifikace od standardu C11) a na \u00faprav\u011b port\u016f, kter\u00e9 tuto funkci st\u00e1le pou\u017e\u00edvaj\u00ed. Zm\u011bna se pl\u00e1nuje navrhnout ve FreeBSD 13.0;\n<li class=\"l\"> Byl spu\u0161t\u011bn experiment\u00e1ln\u00ed projekt na vytvo\u0159en\u00ed prost\u0159edk\u016f pro orchestraci jail-\u016f na z\u00e1klad\u011b r\u00e1mce <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/pizzamig\/pot\">pot<\/a><\/noindex> pro vytv\u00e1\u0159en\u00ed a exportov\u00e1n\u00ed obraz\u016f, realizovan\u00e9ho podle analogie s Dockerem, a ovlada\u010de <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/trivago\/nomad-pot-driver\">nomad<\/a><\/noindex>, kter\u00fd poskytuje rozhran\u00ed pro dynamick\u00e9 spou\u0161t\u011bn\u00ed aplikac\u00ed v jail-ov\u00e9m prost\u0159ed\u00ed. Navr\u017een\u00fd model umo\u017e\u0148uje odd\u011blit procesy vytv\u00e1\u0159en\u00ed jail-ov\u00fdch prost\u0159ed\u00ed a nasazen\u00ed v nich aplikac\u00ed. Jedn\u00edm z c\u00edl\u016f projektu je poskytnout prost\u0159edek pro manipulaci s jaily jako kontejnery ve stylu Docker;\n<\/ul>\n<li class=\"l\"> <b>Syst\u00e9my ukl\u00e1d\u00e1n\u00ed a souborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Z NetBSD do n\u00e1stroje \"makefs\" <noindex><a rel=\"nofollow\" href=\"https:\/\/reviews.freebsd.org\/rS351273\">byla p\u0159enesena<\/a><\/noindex> podporuj\u00ed souborov\u00fd syst\u00e9m FAT (msdosfs). P\u0159ipraven\u00e9 zm\u011bny umo\u017e\u0148uj\u00ed vytv\u00e1\u0159et obrazy FS s FAT bez pou\u017eit\u00ed ovlada\u010de md a bez opr\u00e1vn\u011bn\u00ed root;\n<li class=\"l\"> Bylo dokon\u010deno p\u0159epracov\u00e1n\u00ed ovlada\u010de subsyst\u00e9mu FUSE (File system in USErspace), kter\u00fd umo\u017e\u0148uje vytv\u00e1\u0159et implementace souborov\u00fdch syst\u00e9m\u016f v u\u017eivatelsk\u00e9m prostoru. P\u016fvodn\u011b dod\u00e1van\u00fd ovlada\u010d obsahoval mnoho chyb a byl zalo\u017een na verzi FUSE 7.8, vydan\u00e9 p\u0159ed 11 lety. V r\u00e1mci projektu modernizace ovlada\u010de byla implementov\u00e1na podpora protokolu FUSE 7.23, byl p\u0159id\u00e1n k\u00f3d pro kontrolu p\u0159\u00edstupov\u00fdch pr\u00e1v na \u00farovni j\u00e1dra (\"-o default_permissions\"), byly p\u0159id\u00e1ny v\u00fdzvy VOP_MKNOD, VOP_BMAP a VOP_ADVLOCK, byla zaji\u0161t\u011bna mo\u017enost p\u0159eru\u0161en\u00ed operac\u00ed FUSE, byla p\u0159id\u00e1na podpora bezejmenn\u00fdch kan\u00e1l\u016f a unixov\u00fdch soket\u016f v fusefs, objevila se mo\u017enost vyu\u017eit\u00ed kqueue pro \/dev\/fuse, bylo povoleno aktualizaci parametr\u016f montov\u00e1n\u00ed prost\u0159ednictv\u00edm \"mount -u\", byla p\u0159id\u00e1na podpora exportu fusefs p\u0159es NFS, byla implementov\u00e1na evidence RLIMIT_FSIZE, byly p\u0159id\u00e1ny p\u0159\u00edznaky FOPEN_KEEP_CACHE a FUSE_ASYNC_READ, byly provedeny v\u00fdznamn\u00e9 optimalizace v\u00fdkonu a vylep\u0161ena organizace cachingu. Nov\u00fd ovlada\u010d byl zahrnut do v\u011btv\u00ed head a stable\/12 (sou\u010d\u00e1st\u00ed FreeBSD 12.1);\n<li class=\"l\"> Pr\u00e1ce na implementaci NFSv4.2 (RFC-7862) pro FreeBSD je t\u00e9m\u011b\u0159 u konce. V r\u00e1mci zpr\u00e1vy bylo hlavn\u00ed pozornost v\u011bnov\u00e1na testov\u00e1n\u00ed. Dokon\u010deny testy pro ov\u011b\u0159en\u00ed kompatibility s implementac\u00ed z Linuxu, ale pokra\u010duje kontrola funk\u010dnosti serveru pNFS s NFSv4.2. V celkov\u00e9m pohledu je k\u00f3d ji\u017e pova\u017eov\u00e1n za p\u0159ipraven\u00fd k integraci do v\u011btv\u00ed FreeBSD head\/current. V nov\u00e9 verzi NFS byla p\u0159id\u00e1na podpora funkc\u00ed posix_fadvise, posix_fallocate a re\u017eim\u016f SEEKHOLE\/SEEKDATA v lseek, operace m\u00edstn\u00edho kop\u00edrov\u00e1n\u00ed \u010d\u00e1st\u00ed souboru na serveru (bez p\u0159enosu klientovi);\n<\/ul>\n<li class=\"l\"> <b>Podpora hardwaru<\/b>\n<ul>\n<li class=\"l\"> Byl zah\u00e1jen projekt na zlep\u0161en\u00ed fungov\u00e1n\u00ed FreeBSD na notech. Prvn\u00edm za\u0159\u00edzen\u00edm, pro kter\u00e9 byl proveden audit podpory hardwaru ve FreeBSD, byl notebook Lenovo X1 Carbon sedm\u00e9 generace;\n<li class=\"l\"> CheriBSD, odvozenina od FreeBSD pro v\u00fdzkumnou procesorovou architekturu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cl.cam.ac.uk\/research\/security\/ctsrd\/cheri\/\">CHERI<\/a><\/noindex> (Capability Hardware Enhanced RISC Instructions), aktualizov\u00e1no pro podporu nadch\u00e1zej\u00edc\u00edho procesoru ARM Morello, kter\u00fd bude podporovat syst\u00e9m spr\u00e1vy p\u0159\u00edstupu k pam\u011bti CHERI, zalo\u017een\u00fd na ochrann\u00e9m modelu projektu Capsicum. \u010cip Morello <noindex><a rel=\"nofollow\" href=\"https:\/\/www.arm.com\/blogs\/blueprint\/digital-security-by-design\">pl\u00e1nuj\u00ed<\/a><\/noindex> m\u00e1 b\u00fdt vyd\u00e1n v roce 2021. V\u00fdvoj\u00e1\u0159i CheriBSD tak\u00e9 pokra\u010duj\u00ed v sledov\u00e1n\u00ed v\u00fdvoje referen\u010dn\u00edho prototypu CHERI na z\u00e1klad\u011b architektury MIPS;\n<li class=\"l\"> Byla roz\u0161\u00ed\u0159ena podpora \u010dip\u016f RockChip RK3399, pou\u017e\u00edvan\u00fdch v desk\u00e1ch RockPro64 a NanoPC-T4. Nejv\u00fdznamn\u011bj\u0161\u00edm vylep\u0161en\u00edm byla podpora eMMC a v\u00fdvoj nov\u00e9ho ovlada\u010de pro pou\u017eit\u00e9 v desce \u0159adi\u010de eMMC;\n<li class=\"l\"> Pokra\u010duje pr\u00e1ce na podpo\u0159e ARM64 SoC Broadcom BCM5871X s procesory ARMv8 Cortex-A57, zam\u011b\u0159en\u00fdmi na pou\u017eit\u00ed v routerech, br\u00e1n\u00e1ch a s\u00ed\u0165ov\u00fdch \u00falo\u017ei\u0161t\u00edch. V pr\u016fb\u011bhu zpr\u00e1vy<br \/>\nbyla roz\u0161\u00ed\u0159ena podpora iProc PCIe a p\u0159id\u00e1na mo\u017enost vyu\u017eit\u00ed hardwarov\u00fdch kryptografick\u00fdch operac\u00ed pro zrychlen\u00ed v\u00fdkonu IPsec.<br \/>\nIntegrace k\u00f3du do v\u011btve HEAD se o\u010dek\u00e1v\u00e1 ve \u010dtvrt\u00e9m \u010dtvrtlet\u00ed;<\/p>\n<li class=\"l\"> Byly zaznamen\u00e1ny v\u00fdrazn\u00e9 \u00fasp\u011bchy ve v\u00fdvoji portu FreeBSD pro platformu powerpc64. Hlavn\u00ed d\u016fraz je kladen na zaji\u0161t\u011bn\u00ed kvalitn\u00edho fungov\u00e1n\u00ed na syst\u00e9mech s procesory IBM POWER8 a POWER9, ale voliteln\u011b je podporov\u00e1na tak\u00e9 pr\u00e1ce na star\u0161\u00edch Apple Power Mac, x500 a Amiga A1222. V\u011btev powerpc*\/12 st\u00e1le dod\u00e1v\u00e1 gcc 4.2.1, a v\u011btev powerpc*\/13 bude brzy p\u0159evedena na llvm90. Z 33306 port\u016f bylo \u00fasp\u011b\u0161n\u011b zkompilov\u00e1no 30514;\n<li class=\"l\"> Pokra\u010duje portov\u00e1n\u00ed FreeBSD pro 64bitov\u00fd SoC NXP LS1046A zalo\u017een\u00fd na procesoru ARMv8 Cortex-A72 s integrovan\u00fdm akceler\u00e1torem zpracov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch paket\u016f, 10 Gb Ethernet, PCIe 3.0, SATA 3.0 a USB 3.0. V hl\u00e1\u0161en\u00e9m obdob\u00ed byla implementov\u00e1na podpora USB 3.0, SD\/MMC, I2C, s\u00ed\u0165ov\u00e9ho rozhran\u00ed DPAA a GPIO. Pl\u00e1nov\u00e1na je podpora QSPI a optimalizace v\u00fdkonu s\u00ed\u0165ov\u00e9ho rozhran\u00ed. Dokon\u010den\u00ed pr\u00e1ce a za\u0159azen\u00ed do v\u011btve HEAD se o\u010dek\u00e1v\u00e1 ve 4. kvart\u00e1lu 2019;\n<li class=\"l\"> Byl aktualizov\u00e1n ovlada\u010d ena s podporou druh\u00e9 generace s\u00ed\u0165ov\u00fdch adapt\u00e9r\u016f ENAv2 (Elastic Network Adapter), pou\u017e\u00edvan\u00fdch v infrastruktu\u0159e Elastic Compute Cloud (EC2) pro zaji\u0161t\u011bn\u00ed komunikace mezi uzly EC2 p\u0159i rychlostech a\u017e 25 Gb\/s. Do ovlada\u010de ena byla p\u0159id\u00e1na a otestov\u00e1na podpora NETMAP a tak\u00e9 byla provedena adaptace rozlo\u017een\u00ed pam\u011bti pro zahrnut\u00ed re\u017eimu LLQ v prost\u0159ed\u00edch Amazon EC2 A1;\n<\/ul>\n<li class=\"l\"> <b>Aplikace a syst\u00e9m port\u016f<\/b>\n<ul>\n<li class=\"l\"> Byly aktualizov\u00e1ny komponenty grafick\u00e9ho stacku a porty t\u00fdkaj\u00edc\u00ed se xorg. Porty vyu\u017e\u00edvaj\u00edc\u00ed USE_XORG a XORG_CAT byly p\u0159evedeny na framework USES m\u00edsto vol\u00e1n\u00ed bsd.xorg.mk p\u0159es bsd.port.mk. Takov\u00e9 porty nyn\u00ed obsahuj\u00ed p\u0159\u00edznak \"USES=xorg\" v make souborech. Funkce XORG_CAT byla odd\u011blena z bsd.xorg.mk a nyn\u00ed se aktivuje p\u0159\u00edznakem \"USES=xorg-cat\". Byla p\u0159id\u00e1na sada n\u00e1stroj\u016f pro p\u0159\u00edm\u00e9 vytv\u00e1\u0159en\u00ed port\u016f xorg z git repozit\u00e1\u0159e.<br \/>\nfreedesktop.org, co\u017e nap\u0159\u00edklad umo\u017e\u0148uje vytv\u00e1\u0159et porty pro je\u0161t\u011b nevydan\u00e9 verze. Do budoucna se pl\u00e1nuje p\u0159ipravit n\u00e1stroje pro pou\u017eit\u00ed build syst\u00e9mu meson m\u00edsto autotools pro kompilaci port\u016f xorg.  <\/p>\n<p>Byla provedena pr\u00e1ce na vy\u010di\u0161t\u011bn\u00ed star\u00fdch port\u016f xorg, kter\u00e9 se v\u00e1\u017eou na ji\u017e nepodporovan\u00e9 komponenty, nap\u0159\u00edklad byl odstran\u011bn port x11\/libXp, a porty x11\/Xxf86misc, x11-fonts\/libXfontcache a graphics\/libGLw byly p\u0159evedeny do kategorie zastaral\u00fdch;<\/p>\n<li class=\"l\"> Byla provedena pr\u00e1ce na zlep\u0161en\u00ed podpory Javy 11 a nov\u011bj\u0161\u00edch verz\u00ed ve FreeBSD, stejn\u011b jako na portov\u00e1n\u00ed n\u011bkter\u00fdch zm\u011bn do v\u011btve Java 8. Pot\u00e9, co pro FreeBSD byla implementov\u00e1na podpora nov\u00fdch funkc\u00ed Javy 11, jako jsou Java Flight Recorder, HotSpot Serviceability Agent, HotSpot Debugger, DTrace, Javac Server, Java Sound a SCTP, pr\u00e1ce p\u0159e\u0161la na zaji\u0161t\u011bn\u00ed \u00fasp\u011b\u0161n\u00e9ho projit\u00ed v\u0161ech test\u016f kompatibility. Po\u010det selh\u00e1n\u00ed p\u0159i pr\u016fchodu testy se sn\u00ed\u017eil z 50 na 2;\n<li class=\"l\"> Pracovn\u00ed plocha KDE Plasma, KDE Frameworks, KDE Applications a Qt byly udr\u017eov\u00e1ny aktu\u00e1ln\u00ed a aktualizov\u00e1ny na nejnov\u011bj\u0161\u00ed verze;\n<li class=\"l\"> Porty s pracovn\u00ed plochou Xfce byly aktualizov\u00e1ny na vydan\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51266\">4.14<\/a><\/noindex>;\n<li class=\"l\"> Strom port\u016f FreeBSD p\u0159ekonal hranici 38000 port\u016f, po\u010det neuzav\u0159en\u00fdch PR m\u00edrn\u011b p\u0159esahuje 2000, z nich\u017e 400 PR je\u0161t\u011b nebylo zpracov\u00e1no. V reportovan\u00e9m obdob\u00ed bylo provedeno 7340 zm\u011bn od 169 v\u00fdvoj\u00e1\u0159\u016f. Pr\u00e1va committera z\u00edskali dva nov\u00ed \u00fa\u010dastn\u00edci (Santhosh Raju a Dmitri Goutnik). Byl vyd\u00e1n nov\u00fd release bal\u00ed\u010dkov\u00e9ho mana\u017eera pkg 1.12 s podporou overlay v strom\u011b port\u016f a prov\u00e1d\u011bn\u00edm \u00fadr\u017eby bsd.sites.mk. Mezi v\u00fdznamn\u00fdmi aktualizacemi verz\u00ed v portech jsou: Lazarus 2.0.4, LLVM 9.0, Perl 5.30, PostgreSQL 11, Ruby 2.6, Firefox 69.0.1, Firefox-esr 68.1.0, Chromium 76.0;\n<li class=\"l\"> Pokra\u010duje v\u00fdvoj projektu <noindex><a rel=\"nofollow\" href=\"https:\/\/clonos.tekroutine.com\/\">ClonOS<\/a><\/noindex>,  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50043\">rozv\u00edjej\u00edc\u00edho<\/a><\/noindex> , specializovan\u00fd distribuce pro nasazen\u00ed infrastruktury virtu\u00e1ln\u00edch server\u016f. Co se t\u00fd\u010de \u0159e\u0161en\u00fdch \u00faloh, ClonOS p\u0159ipom\u00edn\u00e1 takov\u00e9 syst\u00e9my jako Proxmox, Triton (Joyent), OpenStack, OpenNebula a Amazon AWS, hlavn\u00edm rozd\u00edlem je pou\u017eit\u00ed FreeBSD a mo\u017enost spr\u00e1vy a nasazen\u00ed Jail kontejner\u016f FreeBSD a virtu\u00e1ln\u00edch prost\u0159ed\u00ed na z\u00e1klad\u011b hypervizor\u016f Bhyve a Xen. Mezi ned\u00e1vn\u00fdmi zm\u011bnami je podpora<br \/>\ncloud-init pro Linux\/BSD VM a cloudbase-init pro Windows VM, zah\u00e1jen\u00ed p\u0159echodu na pou\u017e\u00edv\u00e1n\u00ed vlastn\u00edch obraz\u016f, zapojen\u00ed Jenkins CI pro testov\u00e1n\u00ed build\u016f a nov\u00fd pkg-repozit\u00e1\u0159 pro instalaci<br \/>\nClonOS z bal\u00ed\u010dk\u016f.<\/p>\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51941\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 FreeBSD \u0441 \u0438\u044e\u043b\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2019 \u0433\u043e\u0434\u0430. \u0418\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c: \u041e\u0431\u0449\u0438\u0435 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b Core team \u0432 \u043e\u0431\u0449\u0435\u043c \u0432\u0438\u0434\u0435 \u043e\u0434\u043e\u0431\u0440\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u043e\u0434\u0430, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0442\u0435\u043d\u0442\u043e\u0432 (BSD+Patent), \u043d\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u043f\u043e\u0434 \u0434\u0430\u043d\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 \u0434\u043e\u043b\u0436\u043d\u043e \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0442\u044c\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 FreeBSD \u0441 \u0438\u044e\u043b\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2019 \u0433\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0442\u0447\u0451\u0442 \u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 FreeBSD \u0437\u0430 \u0442\u0440\u0435\u0442\u0438\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2019 \u0433\u043e\u0434\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 FreeBSD \u0441 \u0438\u044e\u043b\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2019 \u0433\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-28T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:01:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zpr\u00e1va o v\u00fdvoji FreeBSD za t\u0159et\u00ed kvart\u00e1l 2019 | ProHoster","description":"Byla zve\u0159ejn\u011bna zpr\u00e1va o v\u00fdvoji projektu FreeBSD od \u010dervence do z\u00e1\u0159\u00ed 2019.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0442\u0447\u0451\u0442 \u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 FreeBSD \u0437\u0430 \u0442\u0440\u0435\u0442\u0438\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b 2019 \u0433\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 FreeBSD \u0441 \u0438\u044e\u043b\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2019 \u0433\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/otchyot-o-razvitii-freebsd-za-tretij-kvartal-2019-goda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-28T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 06:51:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:27:38","updated":"2026-01-24 06:51:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=53304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=53304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=53304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=53304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}