After two years of development, Debian GNU/Linux 11.0 (Bullseye) is now available for nine officially supported architectures: Intel IA-32/x86 (i686), AMD64 / x86-64, ARM EABI (armel), 64-bit ARM (arm64 ), ARMv7 (armhf), mipsel, mips64el, PowerPC 64 (ppc64el), and IBM System z (s390x). Updates for Debian 11 will be released over a period of 5 years.
Installation images are available for download, which can be downloaded via HTTP, jigdo or BitTorrent. An unofficial nonfree installation image has also been formed, which includes proprietary firmware. For the amd64 and i386 architectures, there are LiveUSBs available in GNOME, KDE, and Xfce variants, as well as a multi-architecture DVD that combines packages for the amd64 platform with additional packages for the i386 architecture.
The repository contains 59551 binary packages (42821 source packages), which is about 1848 packages more than what was offered in Debian 10. Compared to Debian 10, 11294 new binary packages were added, 9519 (16%) obsolete or abandoned packages were removed, 42821 were updated (72%) packages. The total total size of all source texts offered in the distribution is 1 lines of code. 152 developers took part in the preparation of the release.
For 95.7% of packages, support for repeatable builds is provided, which allows you to confirm that the executable file is built exactly from the declared sources and does not contain extraneous changes, the substitution of which, for example, can be done by attacking the build infrastructure or bookmarks in the compiler.
Key changes in Debian 11.0:
- Linux kernel updated to version 5.10 (Debian 10 shipped kernel 4.19).
- Updated graphics stack and user environments: GNOME 3.38, KDE Plasma 5.20, LXDE 11, LXQt 0.16, MATE 1.24, Xfce 4.16. The LibreOffice office suite has been updated to release 7.0, and Calligra to release 3.2. Updated GIMP 2.10.22, Inkscape 1.0.2, Vim 8.2.
- Updated server applications, including Apache httpd 2.4.48, BIND 9.16, Dovecot 2.3.13, Exim 4.94, Postfix 3.5, MariaDB 10.5, nginx 1.18, PostgreSQL 13, Samba 4.13, OpenSSH 8.4.
- Updated development tools GCC 10.2, LLVM/Clang 11.0.1, OpenJDK 11, Perl 5.32, PHP 7.4, Python 3.9.1, Rust 1.48, Glibc 2.31.
- The CUPS and SANE packages provide the ability to print and scan without first installing drivers on printers and scanners connected to the system via a USB port. Driverless mode is supported for printers supporting the IPP Everywhere protocol, and for scanners - the eSCL and WSD protocols (using the sane-escl and sane-airscan backends). To interact with a USB device as a network printer or scanner, the ipp-usb background process with the implementation of the IPP-over-USB protocol is used.
- A new "open" command has been added to open a file in the default program for the specified file type. By default, the command is associated with the xdg-open utility, but can also be attached to the run-mailcap handler, which takes into account the update-alternatives subsystem binding when it starts.
- systemd uses a single unified cgroup hierarchy (cgroup v2) by default. Cgroups v2 can be used, for example, to limit memory, CPU, and I/O consumption. The key difference between cgroups v2 and v1 is the use of a common cgroups hierarchy for all resource types, instead of separate hierarchies for CPU allocation, memory management, and I/O. Separate hierarchies led to difficulties in organizing interaction between handlers and to additional costs of kernel resources when applying rules for a process mentioned in different hierarchies. For those who do not intend to switch to cgroup v2, the opportunity to continue using cgroups v1 is provided.
- systemd has separate logging enabled (systemd-journald service enabled), which is stored in the /var/log/journal/ directory and does not affect traditional logging maintained by processes such as rsyslog (users can now remove rsyslog and rely only on systemd -journald). In addition to the systemd-journal group, users from the adm group have access to reading information from the journal. Support for regular expression filtering has been added to the journalctl utility.
- The new exFAT file system driver is enabled by default in the kernel, which no longer requires installation of the exfat-fuse package. The package also includes the exfatprogs package with a new set of utilities for creating and checking the exFAT FS (the old exfat-utils set is also available for installation, but is not recommended for use).
- Official support for the mips architecture has been discontinued.
- Password hashing uses yescrypt instead of SHA-512 by default.
- Added the ability to use the toolkit for managing isolated Podman containers, including as a transparent replacement for Docker.
- Changed the format of lines in the /etc/apt/sources.list file related to the elimination of security issues. The {dist}-updates lines have been renamed to {dist}-security. In sources.list, it is allowed to separate "[]" blocks with multiple spaces.
- The package includes Panfrost and Lima drivers, which provide support for Mali GPUs used in boards with processors based on the ARM architecture.
- The intel-media-va-driver is used to use the video decoding hardware acceleration provided by Intel GPUs based on the Broadwell microarchitecture and later.
- Grub2 adds support for the SBAT (UEFI Secure Boot Advanced Targeting) mechanism, which solves certificate revocation problems for UEFI Secure Boot.
- The graphical installer now builds with libinput instead of the evdev driver, which improves touchpad support. Allowed the use of the underscore character in the username specified during installation for the first account. Provided installation of packages to support virtualization systems if running in environments under their control is detected. Involved new theme Homeworld.
- The installer provides the ability to install the GNOME Flashback desktop, which continues the development of the classic GNOME panel code, the Metacity window manager, and applets previously available as part of the GNOME 3 fallback mode.
- Added support for UEFI and Secure Boot to the win32-loader application, which allows you to install Debian from Windows without creating a separate installation media.
- For the ARM64 architecture, a graphical installer is involved.
- Added support for ARM boards and devices puma-rk3399, Orange Pi One Plus, ROCK Pi 4 (A,B,C), Banana Pi BPI-M2-Ultra, Banana Pi BPI-M3, NanoPi NEO Air, FriendlyARM NanoPi NEO Plus2, Pinebook, Pinebook Pro, Olimex A64-Olinuxino, A64-Olinuxino-eMMC, SolidRun LX2160A Honeycomb, Clearfog CX, SolidRun Cubox-i Solo/DualLite, Turris MOX, Librem 5 and OLPC XO-1.75.
- Discontinued single CD imaging with Xfce, and discontinued creation of 2nd and 3rd DVD ISOs for amd64/i386 systems.
Source: opennet.ru