{"id":101213,"date":"2021-09-07T16:23:45","date_gmt":"2021-09-07T14:23:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/yadro-linux-5-14"},"modified":"2021-09-07T16:23:45","modified_gmt":"2021-09-07T14:23:45","slug":"yadro-linux-5-14","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/yadro-linux-5-14","title":{"rendered":"Linuxi kerneli versioon 5.14","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/19872\/original.png\" itemprop=\"contentURL\">       <img decoding=\"async\" alt=\"Linuxi kerneli versioon 5.14\" src=\"\/wp-content\/uploads\/2021\/09\/6c08ca34b060a8523af78f555746ff24.jpg\" style=\"display:block;margin: 0 auto;\" \/>            <\/a>                    <noindex>      <noindex><\/p>\n<p>P\u00e4rast kahte kuud arendusteline Linus Torvalds <a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2021\/8\/29\/382\">esitles<\/a> tuumade v\u00e4ljaanne <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/\">Linux 5.14<\/a>. Oluliste muudatuste hulka kuuluvad uued s\u00fcsteemikutsed quotactl_fd() ja memfd_secret(), ide- ja raw-draiverite eemaldamine, uusi cgroupide sisend-\/v\u00e4ljundprioriteetide kontroller, SCHED_CORE \u00fclesande ajastamise re\u017eiim, infrastruktuur kinnitatud BPF-programmide laadijate loomiseks.<\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 \u041c\u0411 (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 12580 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043e 861501 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430, \u0443\u0434\u0430\u043b\u0435\u043d\u043e 321654 \u0441\u0442\u0440\u043e\u043a). \u041e\u043a\u043e\u043b\u043e 47% \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 5.14 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 14% \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, 13% \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, 3% &#8212; \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 3% c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.<\/p>\n<p>  <noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861695\/\">Peamised<\/a> <a rel=\"nofollow\" href=\"https:\/\/kernelnewbies.org\/Linux_5.14\">uuendused<\/a>:<\/p>\n<p><\/noindex> <\/p>\n<ul>\n<li>ketta alams\u00fcsteem, sisend-v\u00e4ljund ja failis\u00fcsteemid:\n<ul>\n<li>cgroupide jaoks <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/556910e39249\">rakendatud<\/a> \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0437\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 &#8212; rq-qos, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0431\u043b\u043e\u0447\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 cgroup. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 mq-deadline;<\/li>\n<li>failis\u00fcsteemis ext4 <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=fd7b23be9205\">on rakendatud<\/a> uue ioctl-k\u00e4sk EXT4_IOC_CHECKPOINT, mis sunnib k\u00f5ik ootel tehingud ajaloost ja nendega seotud puhverdused kettale kirjutama, samuti kirjutab \u00fcmber ajaloos kasutatava ala salvestusse. Muudatus on valmistatud ette teabe lekkimise ennetamise algatuse raames failis\u00fcsteemidest;<\/li>\n<li>Btrfs-s; <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/cover.1624891843.git.dsterba@suse.com\/\">tehtud<\/a> tulemuste optimeerimine: liigsest ajaloost erandite tegemise t\u00f5ttu suurenes intensiivsete operatsioonide j\u00f5udlus laiendatud atribuutide osas kuni 17%. Lisaks on l\u00f5ikamisoperatsioonide k\u00e4igus, mis ei h\u00f5lma ulatusi, t\u00e4ieliku s\u00fcnkroniseerimise teostamine keelatud, mis v\u00e4hendab operatsiooni kestust 12%. Sysfs-s on lisatud seadistus, et piirata I\/O l\u00e4bilaskev\u00f5imet failis\u00fcsteemi kontrollimisel. Lisatud on ioctl-kutsed suuruse muutmise ja seadme kustutamise operatsioonide t\u00fchistamiseks;<\/li>\n<li>XFS-s; <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/20210702201643.GA13765@locust\/\">\u00fclesanne on \u00fcmber t\u00f6\u00f6tatud;<\/a> puhvri vahem\u00e4lu rakendamine, mis on muudetud lehek\u00fclgede m\u00e4llu m\u00e4\u00e4ratlemise partii-re\u017eiimile. Vahem\u00e4lu t\u00f6\u00f6 efektiivsust on parandatud;<\/li>\n<li>F2FS-is on lisatud v\u00f5imalus t\u00f6\u00f6tada ainult lugemisre\u017eiimis ja implementatsiooni on teostatav kompressitud plokkide vahem\u00e4lu re\u017eiim (compress_cache), et parandada juhusliku lugemise j\u00f5udlust. Toetatakse faili kompressiooni, mis peegeldatakse m\u00e4lus mmap() operatsiooni abil. Failide kompressiooni valikulise keelamiseks maski abil on pakutud uus montaa\u017ei valik nocompress;<\/li>\n<li>exFAT draiveris on tehtud t\u00f6\u00f6d teatud digikaamerate salvestuslahendustega \u00fchilduvuse parandamiseks;<\/li>\n<li>lisatud s\u00fcsteemi k\u00f5ne <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/859679\/\">quotactl_fd()<\/a>, mis v\u00f5imaldab hallata kvoote, mitte l\u00e4bi spetsiaalse seadme faili, vaid m\u00e4\u00e4rates faili deskriptor, mis on seotud failis\u00fcsteemiga, millele kvoot rakendub;<\/li>\n<li>tuumast on eemaldatud vanad IDE-liidese plokkseadmestiku draiverid, mille asemel on juba ammu kasutusele v\u00f5etud libata alams\u00fcsteem. Vanade seadmete tugi on t\u00e4ielikult s\u00e4ilinud, muudatused puudutavad ainult v\u00f5imalust kasutada vanu draivereid, mille kasutamisel nimetati salvestusseadmeid \/dev\/hd*, mitte \/dev\/sd*;<\/li>\n<li>\u0438\u0437 \u044f\u0434\u0440\u0430 \u0443\u0434\u0430\u043b\u0451\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &laquo;raw&raquo;, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0431\u0443\u0444\u0435\u0440\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u043b\u043e\u0447\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \/dev\/raw. \u0423\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0444\u043b\u0430\u0433\u0430 O_DIRECT;<\/li>\n<\/ul>\n<\/li>\n<li>m\u00e4lu ja s\u00fcsteemiteenused:\n<ul>\n<li>\u00fclesande ajakava halduses on rakendatud uus ajakava re\u017eiim <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861251\/\">SCHED_CORE<\/a>, mis v\u00f5imaldab kontrollida, millised protsessid saavad \u00fchel CPU tuumal samaaegselt t\u00f6\u00f6tada. Iga protsessile v\u00f5ib m\u00e4\u00e4rata k\u00fcpsise identifikaatori, mis m\u00e4\u00e4ratleb usalduspiirkonna protsesside vahel (n\u00e4iteks kuuluvus \u00fchele kasutajale v\u00f5i konteinerile). Koodi t\u00e4itmise korral suudab ajakava haldur tagada sama tuuma CPU jagamise ainult \u00fche omaniku protsesside vahel, mis v\u00f5ib aidata blokeerida teatud Spectre klassi r\u00fcnnakuid, takistades usaldusv\u00e4\u00e4rset ja usaldusv\u00e4\u00e4rset t\u00f6\u00f6d samas SMT (Hyper Threading) l\u00f5imes;<\/li>\n<li>\u0434\u043b\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 cgroup \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 kill, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043a \u0433\u0440\u0443\u043f\u043f\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b (\u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c SIGKILL), \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0438\u0441\u044c &laquo;1&raquo; \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b cgroup.kill;<\/li>\n<li>\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0449\u0435\u043f\u043b\u0451\u043d\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a (&laquo;split lock&raquo;), \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u043d\u0435\u0432\u044b\u0440\u043e\u0432\u043d\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0430\u0442\u043e\u043c\u0430\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u044e\u0442 \u0434\u0432\u0435 \u043b\u0438\u043d\u0438\u0438 \u043a\u0435\u0448\u0430 CPU. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0430\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u043d\u0435\u0435 \u044f\u0440\u043e\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443. \u0412 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 &laquo;split_lock_detect=ratelimit:N&raquo;, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043b\u0438\u043c\u0438\u0442 \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443, \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0441\u0442\u0430\u0432\u0448\u0438\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0440\u0430\u0441\u0449\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 20 \u043c\u0441;<\/li>\n<li>CFS (CFS bandwidth controller) cgroup-kontrolleris, mis m\u00e4\u00e4rab, kui palju protsessor aega saab iga cgroup, on rakendatud limiitide m\u00e4\u00e4ramise v\u00f5imalus, mis on piiratud antud kehtivusajaga, v\u00f5imaldades paremini reguleerida viivitustundlikke koormusi. N\u00e4iteks, kui seadistada cpu.cfs_quota_us v\u00e4\u00e4rtuseks 50000 ja cpu.cfs_period_us v\u00e4\u00e4rtuseks 100000, saavad protsessigrupp iga 100 ms jooksul kasutada 50 ms CPU aega;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853489\">on lisatud<\/a> algne infrastruktuur BPF programmide laadijate loomiseks, mis v\u00f5imaldab tulevikus laadida ainult usaldusv\u00e4\u00e4rse digitaalse v\u00f5tmega allkirjastatud BPF programme;<\/li>\n<li>uue futex-operatsiooni FUTEX_LOCK_PI2 lisamine, mis kasutab monotoonset taimerit ajutiste seadete arvutamiseks, mis arvestab s\u00fcsteemi magamisseisundis veedetud aega;<\/li>\n<li>RISC-V arhitektuuri jaoks on rakendatud suurte m\u00e4lu lehtede (Transparent Huge Pages) ja mehhanismi rakendamise tugi <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54671\">KFENCE<\/a> m\u00e4luhalduse vigade tuvastamiseks;<\/li>\n<li>s\u00fcsteemik\u00f5ne madvise(), mis pakub vahendeid protsessi m\u00e4lu juhtimise optimeerimiseks, <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/linux-api\/6c7543e4-23c8-8f2d-dc89-480be13738b3@redhat.com\/T\/\">lisatud<\/a> \u0444\u043b\u0430\u0433\u0438 MADV_POPULATE_READ \u0438 MADV_POPULATE_WRITE \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 &laquo;page fault&raquo; \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438, \u043e\u0442\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 (prefault). \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0444\u043b\u0430\u0433\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 &laquo;page fault&raquo; \u0440\u0430\u0437\u043e\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043d\u0435\u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u044f\u0441\u044c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c;<\/li>\n<li>\u00fcksuste testimise s\u00fcsteemis <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/dev-tools\/kunit\/index.html\">kunit<\/a> <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=12ca7a893d54\">on lisatud<\/a> toetab testide k\u00e4ivitamist QEMU keskkonnas;<\/li>\n<li>\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438: &laquo;<a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/bce29ac9ce0b\">osnoise<\/a>&raquo; \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u0439, \u0438 &laquo;timerlat&raquo; \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430\u0445 \u043f\u0440\u0438 \u043f\u0440\u043e\u0431\u0443\u0436\u0434\u0435\u043d\u0438\u044f\u0445 \u043f\u043e \u0441\u0438\u0433\u043d\u0430\u043b\u0443 \u0442\u0430\u0439\u043c\u0435\u0440\u0430;<\/li>\n<\/ul>\n<\/li>\n<li>virtualiseerimine ja turvalisus:\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=1507f51255c9\">lisatud<\/a> s\u00fcsteemikutsumine <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/835342\/\">memfd_secret()<\/a>, mis v\u00f5imaldab luua privaatse m\u00e4luala isoleeritud aadressiruumis, n\u00e4htav ainult omanikprotsessile, mitte peegeldatav teistele protsessidele ning otse mitte ligip\u00e4\u00e4setav k\u00e4rjele;<\/li>\n<li>seccomp s\u00fcsteemi s\u00fcsteemikutsungite filtreerimisel on kasutajaruumi blokeerimisk\u00e4itlate v\u00e4ljat\u00f5stmisel ette n\u00e4htud, et kasutada \u00fchte aatomaarset operatsiooni isoleeritud \u00fclesande jaoks faili deskripti loomiseks ja selle tagastamiseks s\u00fcsteemikutsungi t\u00f6\u00f6tlemisel. Ettepanek lahendab <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/851813\/\">probleem<\/a> k\u00e4itleja katkestamise kasutajaruumis, kui saabub signaal;<\/li>\n<li>lisatud <a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/kernel-hardening\/cover\/cover.1616533074.git.gladkov.alexey@gmail.com\/\">uus mehhanism<\/a> \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0438\u043c\u0451\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0438 rlimit \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432 &laquo;user namespace&raquo;. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0440\u0435\u0448\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0438\u0445 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u043e\u0432 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043e\u0434\u043d\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445;<\/li>\n<li>KVM h\u00fcperviisoris, mis t\u00f6\u00f6tab ARM64 s\u00fcsteemides, on lisatud v\u00f5imalus kasutada k\u00fclaliss\u00fcsteemides MTE-d (MemTag, m\u00e4lu m\u00e4rgistamise laiendus), mis v\u00f5imaldab siduda m\u00e4rgiseid iga m\u00e4ludelegatsiooni operatsiooniga ja korraldada pointerite \u00f5igsuse kontrollimist, et \u00e4ra hoida haavatavuste \u00e4rakasutamist, mis tuleneb juba vabastatud m\u00e4luplokkidele, puhver\u00fclev\u00f5ttudele, initsialiseerimise v\u00f5i k\u00e4imasoleva konteksti all olevate p\u00e4ringute tegemisest.<\/li>\n<li>ARM64 platvorm pakub pointerite autentimise (Pointer Authentication) vahendeid, mis v\u00f5ivad n\u00fc\u00fcd olla eraldi seadistatud tuuma ja kasutaja ruumi jaoks. Tehnoloogia v\u00f5imaldab kasutada spetsialiseeritud ARM64 k\u00e4sklusi tagastusadresside kontrollimiseks, kasutades digitaalallkirju, mis hoitakse ise pointeri kasutamata \u00fclemistes bittides.<\/li>\n<li>Kasutaja re\u017eiimi Linuxis <a rel=\"nofollow\" href=\"https:\/\/patchwork.ozlabs.org\/project\/linux-um\/patch\/20210305123552.a89b33363589.I21b27d26611ebecd8c918e20728e37b184d817bb@changeid\/\">on lisatud<\/a> toe pakkumine PCI-seadmete draiverite jaoks, mida rakendab PCI virtuaalbus, mida haldab PCI-over-virtio draiver.<\/li>\n<li>x86-s\u00fcsteemide jaoks on lisatud toetus paravirtuaalsetele seadmetele virtio-iommu, mis v\u00f5imaldab edastada IOMMU-p\u00e4ringuid, nagu ATTACH, DETACH, MAP ja UNMAP, virtio transporti kaudu m\u00e4lulehtede tabelite emuleerimata;<\/li>\n<li>Intel CPU-de puhul, alates Skylake'i perekonnast kuni Coffee Lake'ini, on vaikimisi keelatud Intel TSX (Transactional Synchronization Extensions) laienduste kasutamine, mis pakuvad vahendeid mitme l\u00f5ime rakenduste j\u00f5udluse parandamiseks d\u00fcnaamilise liialduste v\u00e4ltimise kaudu. Laiendused on v\u00e4lja l\u00fclitatud potentsiaalsete r\u00fcnnakute t\u00f5ttu, <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">Zombieload<\/a>, mis manipuleerib k\u00fclgkanalite teabelekete (TAA, TSX Asynchronous Abort) ajal, kui toimib as\u00fcnkroonselt katkestamisoperatsioonide mehhanism;<\/li>\n<\/ul>\n<\/li>\n<li>v\u00f5rgusubsystem:\n<ul>\n<li>MPTCP (MultiPath TCP) tuumasse integreerimine j\u00e4tkub, TCP-protokolli laienduste abil, et korraldada TCP-\u00fchenduse t\u00f6\u00f6 pakkide kohaletoimetamiseks samaaegselt mitme marsruudi kaudu, erinevate v\u00f5rguinterf\u00f6\u00f6ride kaudu, mis on seotud erinevate IP-aadressidega. Uues v\u00e4ljaandes <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=22ba9d0d6c0d\">lisatud<\/a> IPv4 ja IPv6 (multipath hash policy) liikluse hashimise poliitikate m\u00e4\u00e4ramise mehhanism, mis v\u00f5imaldab kasutaja ruumist m\u00e4\u00e4rata, milliseid v\u00e4lju pakettides, sealhulgas kapseldatud, kasutatakse hash'i arvestamisel, mis m\u00e4\u00e4rab paketi marsruudi;<\/li>\n<li>virtio virtuaalsesse transporti on lisatud pistikute toetus <a rel=\"nofollow\" href=\"https:\/\/man7.org\/linux\/man-pages\/man2\/socket.2.html\">SOCK_SEQPACKET<\/a> (j\u00e4rjestatud ja usaldusv\u00e4\u00e4rne datagrammide edastamine);<\/li>\n<li>SO_REUSEPORT soklite mehhanismi v\u00f5imekust on laiendatud, v\u00f5imaldades mitmel kuulaval sokkel \u00fchenduda \u00fche porti kaudu, et vastu v\u00f5tta \u00fchendusi, jagades samaaegselt saabuvaid p\u00e4ringuid k\u00f5igi SO_REUSEPORT soklite vahel, mis lihtsustab mitme l\u00f5imega serveri rakenduste loomist. Uues versioonis <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853637\/\">lisatud<\/a> vahendid juhtimiskontrolli edastamiseks teisele soklile juhul, kui algselt valitud sokkel ei suuda p\u00e4ringut t\u00f6\u00f6delda (lahendab probleemi, mis on seotud \u00fcksikute \u00fchenduste kadumisega teenuste taask\u00e4ivitusel);<\/li>\n<\/ul>\n<\/li>\n<li>seade:\n<ul>\n<li>amdgpu draiveris <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e058a84bfddc42ba356a2316f2cf1141974625c9\">on rakendatud<\/a> \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0438\u0439 GPU AMD Radeon RX 6000, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 &laquo;Beige Goby&raquo; (Navi 24) \u0438 &laquo;Yellow Carp&raquo;, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 GPU Aldebaran (gfx90a) \u0438 APU Van Gogh. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u043f\u0430\u043d\u0435\u043b\u044f\u043c\u0438 eDP. \u0414\u043b\u044f APU Renoir \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430\u043c\u0438 \u0432 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438 (TMZ, Trusted Memory Zone). \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0433\u043e\u0440\u044f\u0447\u0435\u0433\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0430\u0440\u0442 (hot-unplug). \u0414\u043b\u044f GPU Radeon RX 6000 (Navi 2x) \u0438 \u0441\u0442\u0430\u0440\u044b\u0445 GPU AMD \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u044d\u043d\u0435\u0440\u0433\u043e\u0441\u0431\u0435\u0440\u0435\u0436\u0435\u043d\u0438\u044f ASPM (Active State Power Management), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f GPU Navi 1x, Vega \u0438 Polaris;<\/li>\n<li>AMD kiipide jaoks on lisatud jagatud virtuaalse m\u00e4luhalduse (SVM, shared virtual memory) tugi HMM (Heterogeneous memory management) alusel, mis v\u00f5imaldab kasutada seadmeid, millel on oma m\u00e4luhalduse \u00fcksused (MMU, memory management unit), mis saavad juurde p\u00e4\u00e4seda p\u00f5himen\u00fc\u00fcle. Sealhulgas HMM-i abil on v\u00f5imalik korraldada \u00fchine aadressiruumi GPU ja CPU vahel, milles GPU v\u00f5ib ligip\u00e4\u00e4su saada protsessi p\u00f5himen\u00fc\u00fcle;<\/li>\n<li>lisatud on algne toetus tehnoloogiale <a rel=\"nofollow\" href=\"https:\/\/www.amd.com\/en\/technologies\/smartshift\">AMD Smart Shift<\/a>, d\u00fcnaamiliselt muutes AMD kiibistikuga ja graafikakaardiga s\u00fclearvutite CPU ja GPU energiatarbimise parameetreid, et saavutada maksimaalne j\u00f5udlus m\u00e4ngudes, videote redigeerimisel ja 3D-renderduses;<\/li>\n<li>Inteli i915 draiveris <a rel=\"nofollow\" href=\"https:\/\/lists.freedesktop.org\/archives\/intel-gfx\/2021-May\/266616.html\">lisatud<\/a> Inteli Alder Lake P kiipide tugi;<\/li>\n<li>lisatud drm\/hyperv draiver Hyper-V virtuaalse graafikaadapteri jaoks;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/dri-devel\/cover\/20210416090048.11492-1-tzimmermann@suse.de\/\">lisatud<\/a> grafikadraiver simpledrm, mis kasutab EFI-GOP v\u00f5i VESA raami v\u00e4ljundiks, mille pakub UEFI-p suhvr v\u00f5i BIOS. Draiveri peamine eesm\u00e4rk on v\u00f5imaldada graafilist v\u00e4ljundit alglaadimise varajastes etappides, enne kui saab kasutada t\u00e4isversiooni DRM-draiverit. Draiverit saab kasutada ka ajutise lahendusena riistvarale, mille jaoks ei ole veel kohalikke DRM-drajereid olemus;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/soc\/soc.git\/commit\/?h=for-next&amp;id=1c701accecf21932ebcbd8acacb4557af3797e77\">on lisatud<\/a> monoblock arvuti tugi <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54015\">Raspberry Pi 400<\/a>;<\/li>\n<li>lisatud dell-wmi-privacy draiver Dell s\u00fclearvutites tarnitud kaamera ja mikrofoni riistvaraliste l\u00fclitite toe jaoks;<\/li>\n<li>Lenovo s\u00fclearvutitele <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/pdx86\/platform-drivers-x86.git\/commit\/?h=review-hans&amp;id=a40cd7ef22fbb11229cf982920f4ec96c1f49282\">lisatud<\/a> WMI liides BIOS-i parameetrite muutmiseks sysfs \/sys\/class\/firmware-attributes\/ kaudu;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/YOM9yTZZsEicMW3f@kroah.com\/\">laiendatud<\/a> USB4 liidese toega seadmete tugi;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/s5hbl7li0fe.wl-tiwai@suse.de\/\">on lisatud<\/a> toetab AmLogic SM1 TOACODEC, Intel AlderLake-M, NXP i.MX8, NXP TFA1, TDF9897, Rockchip RK817, Qualcomm Quinary MI2 ja Texas Instruments TAS2505 helikaardid ja koodekid. Parandatud helitugi HP ja ASUS s\u00fclearvutites. <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/tiwai\/sound.git\/commit\/?h=for-next&amp;id=9ce650a75a3b262c90789b42aedee8fc2ee04d53\">Lisatud<\/a> patchid, et v\u00e4hendada heli esitamise viivitusi USB-liidesega seadmetes.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a &ndash; opennet.ru.<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/linux-general\/16502291\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101214,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 - 69\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/yadro-linux-5-14\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 - 69\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/yadro-linux-5-14\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linuxi tuum 5.14 | ProHoster","description":"P\u00e4rast kahte kuud arendust tutvustas Linus Torvalds Linuxi tuuma versiooni 5.14. M\u00e4rgatavamate muudatuste seas on uued s\u00fcsteemikutsed quotactl_fd() ja memfd_secret(), ide- ja raw-draiverite eemaldamine, uus sisendi \/ v\u00e4ljundi prioriteedikontroller cgroupi jaoks, \u00fclesannete planeerimise re\u017eiim SCHED_CORE ja infrastruktuur BPF-programmide allkirjastamiseks. Uutesse versioonidesse on lisatud 15883 parandust 2002 arendajalt, patchi suurus - 69.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/yadro-linux-5-14","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 - 69","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/yadro-linux-5-14","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-07T14:23:45+00:00","article:modified_time":"2021-09-07T14:23:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101213","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-07 14:59:23","updated":"2022-10-03 17:14:49"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101213"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101213\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/101214"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}