{"id":115013,"date":"2024-04-12T14:30:14","date_gmt":"2024-04-12T12:30:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/beta-vypusk-ubuntu-24-04"},"modified":"2024-04-12T14:30:14","modified_gmt":"2024-04-12T12:30:14","slug":"beta-vypusk-ubuntu-24-04","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/beta-vypusk-ubuntu-24-04","title":{"rendered":"Beta release of Ubuntu 24.04","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The beta release of the Ubuntu 24.04 distribution, titled 'Noble Numbat', has been presented. After the package base was fully frozen, developers moved on to final testing and bug fixing. The release is scheduled for April 25. The 24.04 branch is categorized as a long-term support (LTS) release, with updates provided for 12 years (5 years are public, plus an additional 7 years for users of the Ubuntu Pro service). Ready test images have been created for Ubuntu, Ubuntu Server, Lubuntu, Kubuntu, Ubuntu Mate, Ubuntu Budgie, Ubuntu Studio, Xubuntu, UbuntuKylin (the edition for China), Ubuntu Unity, Edubuntu, and Ubuntu Cinnamon. <\/p>\n
Key Changes: <\/p>\n
\n
The desktop has been updated to GNOME 46, featuring a global search function, improved performance for the file manager and terminal emulators, experimental support for VRR (Variable Refresh Rate), enhanced output quality with fractional scaling, expanded connectivity options to external services, an updated configurator, and improved notification system. A new rendering engine based on the Vulkan API has been implemented in GTK. The Cheese camera application has been replaced with GNOME Snapshot.\n
The Linux kernel has been updated to version 6.8.\n
Similar to the changes in Arch Linux and Fedora Linux, the sysctl param vm.max_map_count, which defines the maximum number of memory mapping areas available to a process, has been increased by default from 65530 to 1048576. This change has improved compatibility with Windows games run through Wine (for instance, with the old value, games like DayZ, Hogwarts Legacy, Counter Strike 2, Star Citizen, and THE FINALS could not be launched) and resolved some performance issues with memory-intensive applications.\n
Updated versions include GCC 14-pre, LLVM 18, Python 3.12, OpenJDK 21 (with optional OpenJDK 8, 11, and 17), Rust 1.76, Go 1.22, .NET 8, PHP 8.3.3, and Ruby 3.2.3.\n
User applications have been updated: Firefox 124 (built with Wayland support), LibreOffice 24.2, Thunderbird 115, Ardour 8.4.0, OBS Studio 30.0.2, Audacity 3.4.2, Transmission 4.0, digiKam 8.2.0, Kdenlive 23.08.5, and Krita 5.2.2.\n
Subsystems have been updated: Mesa 24.0.3, systemd 253.5, BlueZ 5.72, Cairo 1.18, NetworkManager 1.46, Pipewire 1.0.4, Poppler 24.02, and xdg-desktop-portal 1.18.\n
The Thunderbird email client is now only available in snap format. The DEB package for Thunderbird contains a placeholder for installing the snap package.\n
For applications using gnutls, support for TLS 1.0, TLS 1.1, and DTLS 1.0 protocols has been forcibly disabled, which were officially deprecated three years ago by the IETF (Internet Engineering Task Force). A similar change has been implemented for OpenSSL in Ubuntu 20.04.\n
In AppArmor, access to configuration files of GnuTLS and OpenSSL libraries is granted to any applications by default. The previously used selective access led to issues that were difficult to diagnose due to the lack of error output when access to configuration files was denied.\n
The pptpd and bcrelay packages have been removed due to potential security issues and the cessation of maintenance for their core codebases. The PAM module pam_lastlog.so has also been removed, as the issue from 2038 has not been resolved.\n
When building packages, compiler options are enabled by default to complicate the exploitation of vulnerabilities. In gcc and dpkg, the '-D_FORTIFY_SOURCE=3' mode is enabled by default, which detects possible buffer overflows when executing string functions defined in the string.h header file. The distinction from the previously used '_FORTIFY_SOURCE=2' mode lies in additional checks. Theoretically, these additional checks could lead to reduced performance, but in practice, tests such as SPEC2000 and SPEC2017 showed no differences, and no user complaints regarding performance drops were reported during testing.\n
A flag '-mbranch-protection=standard' has been added to dpkg to enable execution protection for instruction sets on ARM64 systems, which should not execute branches (ARMv8.5-BTI - Branch Target Indicator). Blocking transitions to arbitrary code sections is implemented to counteract the creation of gadgets in exploits that use Return-Oriented Programming (ROP) techniques.\n
In the APT package manager, the priority for the 'proposed pocket' repository has been changed. This is where new package versions are pre-tested before being made available in the main repositories for the public. The change aims to reduce the likelihood of automated installations of unstable updates when the 'proposed pocket' repository is enabled, which could lead to system instability. After enabling 'proposed pocket', not all updates will be automatically transferred; however, users will be able to selectively install updates for necessary packages using the command 'apt install \/ -proposed'.\n
The default service irqbalance, which distributes the handling of hardware interrupts across different CPU cores, has been discontinued. Currently, in most situations, the built-in mechanisms for distributing handlers provided by the Linux kernel are sufficient. The use of irqbalance may be justified in specific situations, but only with proper configuration by an administrator. Additionally, irqbalance can cause issues in certain configurations, such as when used in virtualization systems, and can interfere with manual adjustments of parameters affecting power consumption and latency.\n
The network setup uses the release of the Netplan 1.0 toolkit, which stores configurations in YAML format and provides backends that abstract access to configurations for NetworkManager and systemd-networkd. The new version introduces the ability to use WPA2 and WPA3 simultaneously, adds support for Mellanox VF-LAG network devices with SR-IOV (Single-Root I\/O Virtualization), and implements the command \u2018netplan status \u2014diff\u2019 to visually assess the differences between the actual state of the settings and the configuration files. In Ubuntu Desktop, NetworkManager is enabled as the default backend for configuration.\n
The ubuntu-desktop-installer has been modernized and is now being developed as part of a larger project called ubuntu-desktop-provision and has been renamed to ubuntu-desktop-bootstrap. The essence of the new project is to separate the installer into stages performed before installation (disk partitioning and package copying) and during the first system boot (initial system setup). Notable changes include an enhanced installer interface design, the addition of a page for specifying the URL to download the automated installation script autoinstall.yaml, and the ability to change default behaviors and styling through a configuration file. Support for updating the installer itself has been added; when a new version is available early in the installation process, a prompt for updating the installer will now be shown.\n
The installer also features capabilities introduced in the previous Ubuntu 23.10 release, such as support for the ZFS file system and disk encryption that does not require entering a disk unlock password at boot, thanks to storing decryption key information in TPM (Trusted Platform Module). <\/p>\n
The Active Directory Certificate Auto Enrollment (ADSys) mechanism has been enabled, allowing automatic retrieval of certificates from Active Directory services when group policies are enabled. Automatic certificate retrieval through Active Directory is also applied when connecting to corporate wireless networks. VPN<\/a>.\n