{"id":101213,"date":"2021-09-07T16:23:45","date_gmt":"2021-09-07T14:23:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/yadro-linux-5-14"},"modified":"2021-09-07T16:23:45","modified_gmt":"2021-09-07T14:23:45","slug":"yadro-linux-5-14","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/yadro-linux-5-14","title":{"rendered":"Linux-kernen 5.14","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/19872\/original.png\" itemprop=\"contentURL\">       <img decoding=\"async\" alt=\"Linux-kernen 5.14\" src=\"\/wp-content\/uploads\/2021\/09\/6c08ca34b060a8523af78f555746ff24.jpg\" style=\"display:block;margin: 0 auto;\" \/>            <\/a>                    <noindex>      <noindex><\/p>\n<p>Efter to m\u00e5neders udvikling pr\u00e6senterede Linus Torvalds <a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2021\/8\/29\/382\">den<\/a> kerneleudgivelse <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/\">Linux 5.14<\/a>. Blandt de mest bem\u00e6rkelsesv\u00e6rdige \u00e6ndringer er: nye systemopkald quotactl_fd() og memfd_secret(), fjernelse af ide- og raw-drivere, en ny input\/output-prioritetskontrol for cgroup, opgaveplanl\u00e6gningsmetoden SCHED_CORE og infrastrukturen til at skabe bootere for verificerede BPF-programmer.<\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>Den nye version indeholder 15883 rettelser fra 2002 udviklere, patchst\u00f8rrelsen er 69 MB (\u00e6ndringerne ber\u00f8rte 12580 filer, tilf\u00f8jet 861501 linjer kode, fjernet 321654 linjer). Omtrent 47% af alle \u00e6ndringerne i 5.14 er relateret til enhedsdrivere, cirka 14% ang\u00e5r opdatering af kode specifik for hardwarearkitekturer, 13% er relateret til netv\u00e6rksstakken, 3% til filsystemer og 3% til interne subsystems i kernen.<\/p>\n<p>  <noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861695\/\">Vigtige<\/a> <a rel=\"nofollow\" href=\"https:\/\/kernelnewbies.org\/Linux_5.14\">nyheder<\/a>:<\/p>\n<p><\/noindex> <\/p>\n<ul>\n<li>disk subsystem, input\/output og filsystemer:\n<ul>\n<li>for cgroup <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/556910e39249\">implementeret<\/a> Den nye input\/output prioriteringscontroller -- rq-qos, som kan styre behandlingsprioriteten af anmodninger til blok-enheder genereret af deltagere i hver cgroup. Underst\u00f8ttelse af den nye prioritetscontroller er tilf\u00f8jet til mq-deadline input\/output scheduler;<\/li>\n<li>i filsystemet ext4 <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=fd7b23be9205\">er implementeret<\/a> ny ioctl-kommando EXT4_IOC_CHECKPOINT, der tvangsm\u00e6ssigt skriver alle ventende transaktioner fra journalen og relaterede buffere til disken samt overskriver det omr\u00e5de, der bruges af journalen i lageret. \u00c6ndringen er blevet forberedt som led i en initiativ for at forhindre l\u00e6kage af information fra filsystemer;<\/li>\n<li>i Btrfs <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/cover.1624891843.git.dsterba@suse.com\/\">er indf\u00f8rt<\/a> ydelsesoptimeringer: ved at undg\u00e5 un\u00f8dvendig journalisering af udvidede attributter under fsync-udf\u00f8relsen er ydeevnen for intensive operationer med udvidede attributter blevet forbedret med op til 17%. Derudover er fuld synkronisering blevet deaktiveret under sk\u00e6ringsoperationer, der ikke p\u00e5virker extent, hvilket har reduceret operationens udf\u00f8relsestid med 12%. Der er tilf\u00f8jet en ops\u00e6tning i sysfs til at begr\u00e6nse input\/output-b\u00e5ndbredden under filsystemkontrol. ioctl-opkald er blevet tilf\u00f8jet for at annullere \u00e6ndringer i st\u00f8rrelse og sletning af enheder;<\/li>\n<li>i XFS <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/20210702201643.GA13765@locust\/\">genarbejdet<\/a> implementering af buffer cache, som er blevet overf\u00f8rt til sideallokering i batchmode. Effektiviteten af cachen er blevet forbedret;<\/li>\n<li>I F2FS er der tilf\u00f8jet en mulighed for at arbejde i skrivebeskyttet tilstand, og der er implementeret en cache til komprimerede blokke (compress_cache) for at \u00f8ge ydelsen ved tilf\u00e6ldig l\u00e6sning. Der er implementeret support til komprimering af filer, der afspejles i hukommelsen ved hj\u00e6lp af mmap()-operationen. For selektivt at deaktivere komprimering af filer efter maske er der foresl\u00e5et et nyt monteringstype nocompress;<\/li>\n<li>I exFAT-driveren er der udf\u00f8rt arbejde for at forbedre kompatibiliteten med lagerenheder fra visse digitale kameraer;<\/li>\n<li>et systemopkald er tilf\u00f8jet <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/859679\/\">quotactl_fd()<\/a>, som g\u00f8r det muligt at styre kvoter ikke via en speciel enhedsfil, men gennem angivelse af en filbeskrivelse, der er knyttet til det filsystem, hvormed kvoten anvendes;<\/li>\n<li>Gamle drivere til blokenheder med IDE-interface er fjernet fra kernen, som l\u00e6nge er blevet erstattet af libata-subsystemet. St\u00f8tten til gamle enheder er bevareret fuldt ud, \u00e6ndringerne vedr\u00f8rer kun muligheden for at bruge gamle drivere, hvorved lagringsenheder blev navngivet \/dev\/hd* og ikke \/dev\/sd*;<\/li>\n<li>Driveren &laquo;raw&raquo;, der giver ubufferet adgang til blok-enheder via gr\u00e6nsefladen \/dev\/raw, er fjernet fra kernen. Den n\u00e6vnte funktionalitet har l\u00e6nge v\u00e6ret implementeret i applikationer ved hj\u00e6lp af flaget O_DIRECT;<\/li>\n<\/ul>\n<\/li>\n<li>Hukommelse og systemtjenester:\n<ul>\n<li>I taskplanl\u00e6ggeren er der implementeret en ny planl\u00e6gningsmode <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861251\/\">SCHED_CORE<\/a>, som g\u00f8r det muligt at styre, hvilke processer der kan k\u00f8re samtidig p\u00e5 et enkelt CPU-kerne. Hver proces kan tildeles et cookie-id, der definerer tillidsomr\u00e5det mellem processerne (for eksempel tilh\u00f8righed til en bruger eller container). Ved organisering af kodeudf\u00f8relse kan planl\u00e6ggeren sikre, at et CPU-kerne kun deles mellem processer relateret til en ejer, hvilket kan bruges til at blokere visse Spectre-type angreb ved at forhindre udf\u00f8relsen af betroede og ikke-betroede opgaver i en enkelt tr\u00e5d SMT (Hyper Threading);<\/li>\n<li>Cgroup-mekanismen har f\u00e5et underst\u00f8ttelse af kill-operationen, som g\u00f8r det muligt at afslutte alle processer tilknyttet gruppen p\u00e5 \u00e9n gang (sende SIGKILL) ved at skrive &laquo;1&raquo; til den virtuelle fil cgroup.kill;<\/li>\n<li>Mulighederne relateret til reaktionen p\u00e5 opdagelse af split-locks (&laquo;split lock&raquo;), som opst\u00e5r ved adgang til ikke-justerede data i hukommelsen, er udvidet, da de under udf\u00f8relsen af en atomisk instruktion krydser to CPU-cache-linjer. S\u00e5danne l\u00e5se f\u00f8rer til betydelige fald i ydeevnen, s\u00e5 tidligere blev der givet mulighed for at tvinge afslutning af den applikation, der for\u00e5rsagede l\u00e5sen. I den nye version er en kernel command-line parameter &laquo;split_lock_detect=ratelimit:N&raquo; tilf\u00f8jet, hvilket g\u00f8r det muligt at bestemme det generelle systemgr\u00e6nse for intensiteten af l\u00e5sningsoperationer pr. sekund, efter hvilket enhver proces, der bliver kilden til en split-l\u00e5s, i stedet for at blive afsluttet vil blive tvunget stoppet i 20 ms;<\/li>\n<li>I CFS-b\u00e5ndbreddekontrolsystemet, der bestemmer, hvor meget CPU-tid der kan tildeles hver cgroup, er muligheden for at definere tidsbegr\u00e6nsede gr\u00e6nser implementeret, hvilket muligg\u00f8r bedre regulering af belastninger, der er f\u00f8lsomme over for forsinkelser. For eksempel vil ops\u00e6tning af cpu.cfs_quota_us til 50000 og cpu.cfs_period_us til 100000 tillade en gruppe processer at bruge 50 ms CPU-tid hver 100 ms.<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853489\">tilf\u00f8jet<\/a> Den indledende infrastruktur til oprettelse af BPF-program-loader, som senere vil muligg\u00f8re indl\u00e6sning af kun BPF-programmer, der er underskrevet med en betroet digital n\u00f8gle.<\/li>\n<li>En ny futex-operation FUTEX_LOCK_PI2 er blevet tilf\u00f8jet, der bruger en monoton timer til at beregne timeout, som tager h\u00f8jde for den tid, systemet har v\u00e6ret i dvaletilstand.<\/li>\n<li>Der er implementeret st\u00f8tte til store hukommelsessider (Transparent Huge-Pages) for RISC-V-arkitekturen og muligheden for at anvende mekanismen KFENCE til at opdage fejl i arbejdet med hukommelse. <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54671\">KFENCE<\/a> til at opdage fejl under arbejdet med hukommelsen.<\/li>\n<li>I systemopkaldet madvise(), der tilbyder midler til at optimere hukommelsesadministrationen i processen, <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/linux-api\/6c7543e4-23c8-8f2d-dc89-480be13738b3@redhat.com\/T\/\">er tilf\u00f8jet<\/a> MADV_POPULATE_READ og MADV_POPULATE_WRITE flags til at generere \u00abpage fault\u00bb p\u00e5 alle hukommelsessider, der er afspejlet til l\u00e6se- eller skriveoperationer, uden faktisk at udf\u00f8re l\u00e6sning eller skrivning (prefault). Anvendelse af flagene kan v\u00e6re nyttigt til at reducere forsinkelser i programmets k\u00f8rsel ved at udf\u00f8re \u00abpage fault\u00bb behandleren for alle ikke-allokerede sider p\u00e5 forh\u00e5nd uden at vente p\u00e5 faktisk adgang til dem;<\/li>\n<li>i unit-testningssystemet <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/dev-tools\/kunit\/index.html\">kunit<\/a> <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=12ca7a893d54\">tilf\u00f8jet<\/a> underst\u00f8ttelse af testk\u00f8rsler i QEMU-milj\u00f8et;<\/li>\n<li>nye tracers er blevet tilf\u00f8jet: \u00ab<a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/bce29ac9ce0b\">osnoise<\/a>\u00bb til at spore forsinkelser i applikationer for\u00e5rsaget af afbrydsningsbehandling, samt \u00abtimerlat\u00bb for at give detaljerede oplysninger om forsinkelser ved opv\u00e5gninger via timer signal;<\/li>\n<\/ul>\n<\/li>\n<li>virtualisering og sikkerhed:\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=1507f51255c9\">tilf\u00f8jet<\/a> systemopkaldet <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/835342\/\">memfd_secret()<\/a>, der muligg\u00f8r oprettelse af et privat hukommelsesomr\u00e5de i et isoleret adresseomr\u00e5de, der kun er synligt for ejerprocessen, ikke synligt for andre processer og direkte utilg\u00e6ngeligt for kernen;<\/li>\n<li>i seccomp systemkaldfilteret er det blevet muligt at bruge en atomar operation til at oprette en filbeskrivelse for den isolerede opgave og returnere den ved h\u00e5ndtering af systemkaldet. Den foresl\u00e5ede operation l\u00f8ser <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/851813\/\">problemet<\/a> med afbrydelsen af h\u00e5ndtereren i brugerens rum ved modtagelse af et signal;<\/li>\n<li>tilf\u00f8jet <a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/kernel-hardening\/cover\/cover.1616533074.git.gladkov.alexey@gmail.com\/\">en ny mekanisme<\/a> til at styre ressourcegr\u00e6nsen i bruger-id namespaces, som knytter individuelle rlimit t\u00e6llere til brugeren i \u00abuser namespace\u00bb. \u00c6ndringen l\u00f8ser et problem med anvendelse af delte ressourcet\u00e6llere, n\u00e5r en bruger k\u00f8rer processer i forskellige containere;<\/li>\n<li>i KVM-hypervisoren for ARM64-systemer er muligheden for at bruge MTE (MemTag, Memory Tagging Extension) blevet tilf\u00f8jet i g\u00e6stesystemer, hvilket muligg\u00f8r binding af tags til hver hukommelsesallokeringsoperation og organisering af validering af korrekt brug af pointers for at blokere udnyttelse af s\u00e5rbarheder for\u00e5rsaget af adgang til allerede frigjorte hukommelsesblokke, buffer overflow, adgang f\u00f8r initialisering og brug uden for den aktuelle kontekst;<\/li>\n<li>dev\u00e6rkt\u00f8jer til pointerautentifikation (Pointer Authentication) leveret af ARM64-platformen kan nu konfigureres separat for kernen og brugerummet. Teknologien muligg\u00f8r brug af specialiserede ARM64-instruktioner til at verificere returadresser ved hj\u00e6lp af digitale signaturer, der er gemt i de ubrugte \u00f8verste bits af selve pointeren;<\/li>\n<li>i User-mode Linux <a rel=\"nofollow\" href=\"https:\/\/patchwork.ozlabs.org\/project\/linux-um\/patch\/20210305123552.a89b33363589.I21b27d26611ebecd8c918e20728e37b184d817bb@changeid\/\">tilf\u00f8jet<\/a> underst\u00f8ttelse af brugen af drivere til PCI-enheder med en virtuel PCI-bus implementeret af PCI-over-virtio driveren;<\/li>\n<li>For x86 systems, support has been added for the paravirtualized device virtio-iommu, allowing IOMMU requests such as ATTACH, DETACH, MAP, and UNMAP to be sent over the virtio transport without emulating memory page tables;<\/li>\n<li>For Intel CPUs, starting from the Skylake family up to Coffee Lake, the use of Intel TSX (Transactional Synchronization Extensions) is disabled by default, as it provides means to improve the performance of multi-threaded applications by dynamically eliminating unnecessary synchronization operations. The extensions are disabled due to the possibility of attacks <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">Zombieload<\/a>, manipulating the information leakage through side channels that occurs during the operation of the asynchronous interrupt mechanism (TAA, TSX Asynchronous Abort);<\/li>\n<\/ul>\n<\/li>\n<li>Network subsystem:\n<ul>\n<li>The integration into the MPTCP (MultiPath TCP) kernel continues, which is an extension of the TCP protocol to enable TCP connection operations for packet delivery simultaneously over multiple routes through different network interfaces associated with different IP addresses. In the new release, <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=22ba9d0d6c0d\">tilf\u00f8jet<\/a> a mechanism for defining custom traffic hash policies for IPv4 and IPv6 (multipath hash policy) has been added, allowing user space to determine which fields in packets, including encapsulated ones, will be used in the hash calculation that determines the path choice for the packet;<\/li>\n<li>Support for sockets has been added to the virtio transport <a rel=\"nofollow\" href=\"https:\/\/man7.org\/linux\/man-pages\/man2\/socket.2.html\">SOCK_SEQPACKET<\/a> (ordered and reliable delivery of datagrams);<\/li>\n<li>The capabilities of the SO_REUSEPORT socket mechanism have been expanded, allowing multiple listening sockets to connect to a single port for accepting connections, distributing incoming requests across all sockets connected through SO_REUSEPORT, which simplifies the creation of multi-threaded server applications. In the new version, <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853637\/\">er tilf\u00f8jet<\/a> tools for transferring control to another socket in case of a failure when processing a request by the initially selected socket (solving the issue of losing individual connections when restarting services);<\/li>\n<\/ul>\n<\/li>\n<li>Hardware:\n<ul>\n<li>in the amdgpu driver <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e058a84bfddc42ba356a2316f2cf1141974625c9\">er implementeret<\/a> underst\u00f8ttelse af nye serier GPU AMD Radeon RX 6000, udviklet under kodenavne \u00abBeige Goby\u00bb (Navi 24) og \u00abYellow Carp\u00bb, samt forbedret underst\u00f8ttelse af GPU Aldebaran (gfx90a) og APU Van Gogh. Mulighed for samtidig brug af flere eDP-paneler er tilf\u00f8jet. For APU Renoir er underst\u00f8ttelsen af arbejdende med krypterede buffere i videomemory (TMZ, Trusted Memory Zone) implementeret. Underst\u00f8ttelse af varm udtagning af grafikkort (hot-unplug) er tilf\u00f8jet. For GPU Radeon RX 6000 (Navi 2x) og \u00e6ldre AMD GPU'er er mekanismen for str\u00f8mbesparelse ASPM (Active State Power Management) som standard aktiveret, hvilket tidligere kun var aktiveret for GPU Navi 1x, Vega og Polaris;<\/li>\n<li>support for shared virtual memory (SVM) has been added for AMD chips, based on the HMM (Heterogeneous memory management) subsystem, allowing the use of devices with their own memory management units (MMU) that can access main memory. In particular, HMM can organize a shared address space between the GPU and CPU, in which the GPU can access the main memory of the process;<\/li>\n<li>initial support for the technology <a rel=\"nofollow\" href=\"https:\/\/www.amd.com\/en\/technologies\/smartshift\">AMD Smart Shift<\/a>, which dynamically adjusts power consumption parameters for CPU and GPU on laptops with AMD chipset and graphics card to boost performance during gaming, video editing, and 3D rendering;<\/li>\n<li>in the i915 driver for Intel graphics cards <a rel=\"nofollow\" href=\"https:\/\/lists.freedesktop.org\/archives\/intel-gfx\/2021-May\/266616.html\">er<\/a> support for Intel Alder Lake P chips;<\/li>\n<li>added drm\/hyperv driver for the Hyper-V virtual graphics adapter;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/dri-devel\/cover\/20210416090048.11492-1-tzimmermann@suse.de\/\">tilf\u00f8jet<\/a> the simpledrm graphics driver uses the EFI-GOP or VESA framebuffer provided by UEFI firmware or BIOS. The primary purpose of the driver is to provide graphics output at the early stages of booting, before a full DRM driver can be used. The driver can also be used as a temporary solution for hardware for which native DRM drivers are not yet available;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/soc\/soc.git\/commit\/?h=for-next&amp;id=1c701accecf21932ebcbd8acacb4557af3797e77\">tilf\u00f8jet<\/a> support for the all-in-one computer <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54015\">Raspberry Pi 400<\/a>;<\/li>\n<li>added dell-wmi-privacy driver for supporting hardware camera and microphone switches supplied in Dell laptops;<\/li>\n<li>for Lenovo laptops <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/pdx86\/platform-drivers-x86.git\/commit\/?h=review-hans&amp;id=a40cd7ef22fbb11229cf982920f4ec96c1f49282\">tilf\u00f8jet<\/a> WMI interface for changing BIOS settings via sysfs \/sys\/class\/firmware-attributes\/;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/YOM9yTZZsEicMW3f@kroah.com\/\">expanded<\/a> support for devices with USB4 interface;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/s5hbl7li0fe.wl-tiwai@suse.de\/\">tilf\u00f8jet<\/a> underst\u00f8ttelse af lydkort og codecs AmLogic SM1 TOACODEC, Intel AlderLake-M, NXP i.MX8, NXP TFA1, TDF9897, Rockchip RK817, Qualcomm Quinary MI2 og Texas Instruments TAS2505. Forbedret lydsupport p\u00e5 b\u00e6rbare computere fra HP og ASUS. <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/tiwai\/sound.git\/commit\/?h=for-next&amp;id=9ce650a75a3b262c90789b42aedee8fc2ee04d53\">Tilf\u00f8jet<\/a> patches til at reducere forsinkelser f\u00f8r lydafspilning p\u00e5 enheder med USB-gr\u00e6nseflade.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Kilde \u2013 opennet.ru.<\/p>\n<p>Kilde: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/linux-general\/16502291\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101214,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/yadro-linux-5-14\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/yadro-linux-5-14\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux-kernen 5.14 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/yadro-linux-5-14","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/yadro-linux-5-14","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-07T14:23:45+00:00","article:modified_time":"2021-09-07T14:23:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101213","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-07 14:59:23","updated":"2022-10-03 17:14:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=101213"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101213\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/101214"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=101213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=101213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=101213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}