{"id":101213,"date":"2021-09-07T16:23:45","date_gmt":"2021-09-07T14:23:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/yadro-linux-5-14"},"modified":"2021-09-07T16:23:45","modified_gmt":"2021-09-07T14:23:45","slug":"yadro-linux-5-14","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/yadro-linux-5-14","title":{"rendered":"Linuxi kern 5.14","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/19872\/original.png\" itemprop=\"contentURL\">       <img decoding=\"async\" alt=\"Linuxi kern 5.14\" src=\"\/wp-content\/uploads\/2021\/09\/6c08ca34b060a8523af78f555746ff24.jpg\" style=\"display:block;margin: 0 auto;\" \/>            <\/a>                    <noindex>      <noindex><\/p>\n<p>P\u00e4rast kahte kuud arendust Linus Torvalds <a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2021\/8\/29\/382\">esitles<\/a> kutsus v\u00e4lja kernel <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/\">Linux 5.14<\/a>. Oluliste muudatuste seas: uued s\u00fcsteemi k\u00f5ned quotactl_fd() ja memfd_secret(), ide ja raw draiverite eemaldamine, uus sisendi\/v\u00e4ljundi prioriteedikontroller cgroup jaoks, graafikute plaanimisre\u017eiim SCHED_CORE ja infrastruktuur allkirjastatud BPF-programmide laadijate loomiseks.<\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 \u041c\u0411 (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 12580 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043e 861501 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430, \u0443\u0434\u0430\u043b\u0435\u043d\u043e 321654 \u0441\u0442\u0440\u043e\u043a). \u041e\u043a\u043e\u043b\u043e 47% \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 5.14 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 14% \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, 13% \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, 3% &#8212; \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 3% c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.<\/p>\n<p>  <noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861695\/\">Peamised<\/a> <a rel=\"nofollow\" href=\"https:\/\/kernelnewbies.org\/Linux_5.14\">uuendused<\/a>:<\/p>\n<p><\/noindex> <\/p>\n<ul>\n<li>kettas\u00fcsteem, sisendi\/v\u00e4ljundi ja failis\u00fcsteemid:\n<ul>\n<li>cgroup jaoks <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/556910e39249\">rakendatud<\/a> \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0437\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 &#8212; rq-qos, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0431\u043b\u043e\u0447\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 cgroup. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 mq-deadline;<\/li>\n<li>failis\u00fcsteemis ext4 <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=fd7b23be9205\">rakendatud<\/a> uus ioctl-k\u00e4sk EXT4_IOC_CHECKPOINT, mis sunnib kirjutama k\u00f5ik ootel tehingud ketta logisse ning nendega seotud bufrid v\u00e4lja, samuti kirjutama \u00fcmber logimisalale eraldatud ala salvestusse. Muudatus on ette valmistatud algatuse raames, et v\u00e4ltida teabe leket failis\u00fcsteemidest;<\/li>\n<li>Btrfs's <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/cover.1624891843.git.dsterba@suse.com\/\">tehtud<\/a> toimivuse optimeerimised: eemaldades ebaolulise ajakirjanemise laiendatud atribuutide t\u00f6\u00f6tlemise k\u00e4igus fsync, t\u00f5usis intensiivsete operatsioonide toimivus, mis h\u00f5lmab laiendatud atribuute, kuni 17%. Lisaks on pooleliolevate operatsioonide korral, mis ei h\u00f5lma ulatusi, v\u00e4lja l\u00fclitatud t\u00e4ieliku s\u00fcnkroniseerimise t\u00e4itmine, mis v\u00e4hendas operatsiooni t\u00e4itmise aega 12%. Sysfs'i on lisatud seadistus, et piirata sisendi\/v\u00e4ljundi l\u00e4bilaskev\u00f5imet FS-i kontrollimisel. Lisatud on ioctl-k\u00f5ned seadmete suuruse muutmise ja eemaldamise toimingute t\u00fchistamiseks;<\/li>\n<li>XFS-is <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/20210702201643.GA13765@locust\/\">\u00fcmberehitatud<\/a> puhvri vahem\u00e4lu teostus, mis on \u00fcle viidud m\u00e4lulehtede grupiviisi eraldamisele. Suurenenud vahem\u00e4lu t\u00f5husus;<\/li>\n<li>F2FS-i on lisatud v\u00f5imalus t\u00f6\u00f6tada ainult lugemise re\u017eiimis ning rakendatud on ka kokkupressitud plokkide vahem\u00e4lu re\u017eiim (compress_cache), et parandada juhuslike lugemiste sooritust. Toetatakse failide kokkupressimist, mis on kaardistatud m\u00e4llu tehes mmap() operatsiooni. Failide kokkupressimise valikulise v\u00e4ljal\u00fclitamise v\u00f5imaldamiseks pakutakse uut mount'i valikut nocompress;<\/li>\n<li>exFAT draiveris on tehtud t\u00f6\u00f6d, et parandada \u00fchilduvust m\u00f5nede digitaalsete kaamerate salvestusseadmetega;<\/li>\n<li>s\u00fcsteemi kutsumine <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/859679\/\">quotactl_fd()<\/a>, mis v\u00f5imaldab hallata kvotaid, kasutades mitte spetsiaalset seadme faili, vaid faili deskriptorit, mis on seotud failis\u00fcsteemiga, millele kvota kehtib;<\/li>\n<li>Tuumast on eemaldatud vanad draiverid IDE liidese alusel olevatele plokiseadmetele, millele on juba ammu asenduseks tulnud libata koosseis. Vanade seadmete tugi on t\u00e4ielikult s\u00e4ilinud, muudatused puudutavad ainult vanade draiverite kasutamise v\u00f5imalust, mille korral seadmed olid nimetatud \/dev\/hd*, mitte \/dev\/sd*;<\/li>\n<li>\u0438\u0437 \u044f\u0434\u0440\u0430 \u0443\u0434\u0430\u043b\u0451\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &laquo;raw&raquo;, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0431\u0443\u0444\u0435\u0440\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u043b\u043e\u0447\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \/dev\/raw. \u0423\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0444\u043b\u0430\u0433\u0430 O_DIRECT;<\/li>\n<\/ul>\n<\/li>\n<li>m\u00e4lu ja s\u00fcsteemiteenused:\n<ul>\n<li>\u00fclesannete planeerijas on rakendatud uus planeerimisre\u017eiim <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861251\/\">SCHED_CORE<\/a>, mis v\u00f5imaldab hallata, millised protsessid v\u00f5ivad t\u00f6\u00f6tada sama CPU tuumas koos. Iga protsessile v\u00f5ib m\u00e4\u00e4rata k\u00fcpsise identifikaatori, mis m\u00e4\u00e4rab usaldusala protsesside vahel (n\u00e4iteks kuuluvuse sama kasutaja v\u00f5i konteineri alla). Koodeksite t\u00e4itmise korral v\u00f5ib planeerija tagada sama CPU tuuma jagamise ainult ainult \u00fche omaniku seotud protsesside vahel, mis v\u00f5ib aidata peatada m\u00f5ningaid Spectre-t\u00fc\u00fcpi r\u00fcnnakuid, takistades usaldusv\u00e4\u00e4rsete ja mitteusaldusv\u00e4\u00e4rsete \u00fclesannete t\u00e4itmist sama SMT (Hyper Threading) joone raames;<\/li>\n<li>\u0434\u043b\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 cgroup \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 kill, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043a \u0433\u0440\u0443\u043f\u043f\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b (\u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c SIGKILL), \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0438\u0441\u044c &laquo;1&raquo; \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b cgroup.kill;<\/li>\n<li>\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0449\u0435\u043f\u043b\u0451\u043d\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a (&laquo;split lock&raquo;), \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u043d\u0435\u0432\u044b\u0440\u043e\u0432\u043d\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0430\u0442\u043e\u043c\u0430\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u044e\u0442 \u0434\u0432\u0435 \u043b\u0438\u043d\u0438\u0438 \u043a\u0435\u0448\u0430 CPU. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0430\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u043d\u0435\u0435 \u044f\u0440\u043e\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443. \u0412 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 &laquo;split_lock_detect=ratelimit:N&raquo;, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043b\u0438\u043c\u0438\u0442 \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443, \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0441\u0442\u0430\u0432\u0448\u0438\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0440\u0430\u0441\u0449\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 20 \u043c\u0441;<\/li>\n<li>CFS (CFS bandwidth controller) cgroup-kontrolleris, mis m\u00e4\u00e4rab, kui palju protsessoriaega iga cgroupile eraldatakse, on rakendatud v\u00f5imalus m\u00e4\u00e4rata ajaliselt piiratud limiite, mis v\u00f5imaldab paremini reguleerida hilinemiselt tundlikke koormusi. N\u00e4iteks cpu.cfs_quota_us v\u00e4\u00e4rtuse seadmine 50000 ja cpu.cfs_period_us v\u00e4\u00e4rtuse seadmine 100000 annab protsesside gruppidele v\u00f5imaluse kulutada igal 100 ms 50 ms CPU aega;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853489\">lisatud<\/a> algne infrastruktuur BPF-programmide laadimise loomiseks, mis tulevikus v\u00f5imaldab laadida ainult usaldusv\u00e4\u00e4rse digitaalse v\u00f5tmega allkirjastatud BPF-programme;<\/li>\n<li>lisatud uus futex-operatsioon FUTEX_LOCK_PI2, mis kasutab monotoonset taimerit ajakulu arvutamiseks, arvestades s\u00fcsteemi magamise ajal veedetud aega;<\/li>\n<li>RISC-V arhitektuurile on rakendatud suurte m\u00e4lulehtede toetamine (Transparent Huge-Pages) ja v\u00f5imalus rakendada mehhanismi <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54671\">KFENCE<\/a> m\u00e4luhalduse vigade tuvastamiseks;<\/li>\n<li>s\u00fcsteemi k\u00f5ne madvise() kohta, mis pakub vahendeid protsessi m\u00e4luhalduse optimeerimiseks, <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/linux-api\/6c7543e4-23c8-8f2d-dc89-480be13738b3@redhat.com\/T\/\">on lisatud<\/a> \u0444\u043b\u0430\u0433\u0438 MADV_POPULATE_READ \u0438 MADV_POPULATE_WRITE \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 &laquo;page fault&raquo; \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438, \u043e\u0442\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 (prefault). \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0444\u043b\u0430\u0433\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 &laquo;page fault&raquo; \u0440\u0430\u0437\u043e\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043d\u0435\u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u044f\u0441\u044c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c;<\/li>\n<li>unit-testimise s\u00fcsteem <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/dev-tools\/kunit\/index.html\">kunit<\/a> <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=12ca7a893d54\">lisatud<\/a> testide k\u00e4ivitamise tugi QEMU keskkonnas;<\/li>\n<li>\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438: &laquo;<a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/bce29ac9ce0b\">osnoise<\/a>&raquo; \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u0439, \u0438 &laquo;timerlat&raquo; \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430\u0445 \u043f\u0440\u0438 \u043f\u0440\u043e\u0431\u0443\u0436\u0434\u0435\u043d\u0438\u044f\u0445 \u043f\u043e \u0441\u0438\u0433\u043d\u0430\u043b\u0443 \u0442\u0430\u0439\u043c\u0435\u0440\u0430;<\/li>\n<\/ul>\n<\/li>\n<li>virtualiseerimine ja turvalisus:\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=1507f51255c9\">on lisatud<\/a> s\u00fcsteemik\u00f5ne <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/835342\/\">memfd_secret()<\/a>, mis v\u00f5imaldab luua privaatse m\u00e4lupiiri isoleeritud aadressiruumis, n\u00e4htav ainult omanikprotsessile, mitte peegeldatav teistesse protsessidesse ning otse mittejuurdep\u00e4\u00e4setav tuumale;<\/li>\n<li>s\u00fcsteemik\u00f5nede filtreerimiss\u00fcsteemis seccomp, kui lukustuse t\u00f6\u00f6tlejad viidakse kasutajaruumi, on antud v\u00f5imalus kasutada \u00fchte aatomset toimingut failideskirjeldaja loomiseks isoleeritavaks \u00fclesandeks ja selle tagastamiseks, kui t\u00f6\u00f6tlus toimub s\u00fcsteemik\u00f5nes. Pakutav toiming lahendab <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/851813\/\">probleem<\/a> katkestuse t\u00f6\u00f6tlejaga kasutajaruumi, kui signaal j\u00f5uab;<\/li>\n<li>on lisatud <a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/kernel-hardening\/cover\/cover.1616533074.git.gladkov.alexey@gmail.com\/\">uue mehhanismi<\/a> \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0438\u043c\u0451\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0438 rlimit \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432 &laquo;user namespace&raquo;. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0440\u0435\u0448\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0438\u0445 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u043e\u0432 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043e\u0434\u043d\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445;<\/li>\n<li>KVM h\u00fcperviisoris ARM64 s\u00fcsteemide jaoks on lisatud tugi k\u00fclalis\u00fcsteemide MTE (MemTag, M\u00e4lu sildimise t\u00e4iendamise) kasutamiseks, mis v\u00f5imaldab igale m\u00e4lukasutuse tehingule seondada sildid ja korraldada pointeride \u00f5iguse kontrollimise, et blokeerida haavatavusi, mis tulenevad juba vabastatud m\u00e4lupindadele, puhvrivigadele, varajastele juurdep\u00e4\u00e4sudele ja konteksti \u00fcletamisele;<\/li>\n<li>ARM64 platvormi pakutavad pointerite autentimise vahendid v\u00f5ivad n\u00fc\u00fcd olla eraldi seadistatud tuuma ja kasutajaruumiga. Tehnoloogia v\u00f5imaldab kasutada spetsialiseeritud ARM64 k\u00e4ske tagastusadresste kontrollimiseks digitaalse allkirjade abil, mis on salvestatud kasutamata \u00fclemm\u00e4gedesse ise aadressi;<\/li>\n<li>User-mode Linuxis <a rel=\"nofollow\" href=\"https:\/\/patchwork.ozlabs.org\/project\/linux-um\/patch\/20210305123552.a89b33363589.I21b27d26611ebecd8c918e20728e37b184d817bb@changeid\/\">lisatud<\/a> toetatakse PCI-seadmete draiverite kasutamist virtuaalses PCI-bussis, mida rakendab PCI-over-virtio draiver;<\/li>\n<li>x86 s\u00fcsteemide jaoks on lisatud virtio-iommu parajituletatud seadme tugi, mis v\u00f5imaldab edastada IOMMU-p\u00e4ringuid, nagu ATTACH, DETACH, MAP ja UNMAP, virtio transportimise kaudu ilma m\u00e4lulehtede tabelite emuleerimiseta;<\/li>\n<li>Intel CPU-dele, alates Skylake'i perekonnast kuni Coffee Lake'ini, on vaikimisi keelatud Intel TSX (Transactional Synchronization Extensions) laiendite kasutamine, mis pakuvad vahendeid mitme keermega rakenduste j\u00f5udluse suurendamiseks d\u00fcnaamilise liigsete s\u00fcnkroniseerimisoperatsioonide k\u00f5rvaldamise kaudu. Laiendid on keelatud r\u00fcnnakute v\u00f5imaluse t\u00f5ttu, <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">Zombieload<\/a>, mis manipuleerivad teabe lekkeid k\u00f5rvaliste kanalite kaudu, mis tekivad as\u00fcnkroonsete katkestuste t\u00f6\u00f6mehhanismide (TAA, TSX Asynchronous Abort) korral;<\/li>\n<\/ul>\n<\/li>\n<li>v\u00f5rgus\u00fcsteem:\n<ul>\n<li>MPTCP (MultiPath TCP) tuuma integreerimine on j\u00e4tkunud, see on TCP protokolli laiendus, mis v\u00f5imaldab TCP-\u00fchenduse toimimist, edastades pakette samaaegselt mitmete marsruutide kaudu erinevate v\u00f5rgu liideste kaudu, mis on seotud erinevate IP-aadressidega. Uues v\u00e4ljaandes <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=22ba9d0d6c0d\">on lisatud<\/a> on rakendatud mehhanism, mis m\u00e4\u00e4ratleb omaenda liikluse r\u00e4simis poliitika IPv4 ja IPv6 jaoks (multipath hash policy), mis v\u00f5imaldab kasutajaruumi m\u00e4\u00e4rata, milliseid v\u00e4lju pakettides, sealhulgas kapseldatud, kasutatakse r\u00e4simiste m\u00e4\u00e4ramiseks, et valida paketi marsruut;<\/li>\n<li>virtio transpordisse on lisatud soklite tugi <a rel=\"nofollow\" href=\"https:\/\/man7.org\/linux\/man-pages\/man2\/socket.2.html\">SOCK_SEQPACKET<\/a> (j\u00e4rjekindel ja usaldusv\u00e4\u00e4rne datagrammide edastamine);<\/li>\n<li>sokli mehhanismi SO_REUSEPORT v\u00f5imalusi on laiendatud, mis v\u00f5imaldab mitmel kuulaval sokkil \u00fchineda \u00fchele pordile, et vastu v\u00f5tta \u00fchendusi, jaotades sissetulevaid p\u00e4ringud samaaegselt k\u00f5ikide SO_REUSEPORT soklite vahel, mis lihtsustab mitme keermega serveri rakenduste loomist. Uues versioonis <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853637\/\">on lisatud<\/a> on rakendatud vahendid juhtimise edastamiseks teisele soklile, kui algne sokkel ei suuda p\u00e4ringut t\u00f6\u00f6delda (lahendab probleemi \u00fcksikute \u00fchenduste kadumisega teenuste taask\u00e4ivitamisel);<\/li>\n<\/ul>\n<\/li>\n<li>riistvara:\n<ul>\n<li>amdgpu draiveris <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e058a84bfddc42ba356a2316f2cf1141974625c9\">rakendatud<\/a> \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0438\u0439 GPU AMD Radeon RX 6000, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 &laquo;Beige Goby&raquo; (Navi 24) \u0438 &laquo;Yellow Carp&raquo;, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 GPU Aldebaran (gfx90a) \u0438 APU Van Gogh. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u043f\u0430\u043d\u0435\u043b\u044f\u043c\u0438 eDP. \u0414\u043b\u044f APU Renoir \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430\u043c\u0438 \u0432 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438 (TMZ, Trusted Memory Zone). \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0433\u043e\u0440\u044f\u0447\u0435\u0433\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0430\u0440\u0442 (hot-unplug). \u0414\u043b\u044f GPU Radeon RX 6000 (Navi 2x) \u0438 \u0441\u0442\u0430\u0440\u044b\u0445 GPU AMD \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u044d\u043d\u0435\u0440\u0433\u043e\u0441\u0431\u0435\u0440\u0435\u0436\u0435\u043d\u0438\u044f ASPM (Active State Power Management), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f GPU Navi 1x, Vega \u0438 Polaris;<\/li>\n<li>AMD kiipide jaoks on lisatud jagatud virtuaalse m\u00e4lu (SVM, shared virtual memory) tugi HMM (Heterogeneous memory management) alusel, mis v\u00f5imaldab kasutada seadmeid omaette m\u00e4lu haldamise asjadega (MMU, memory management unit), millel on juurdep\u00e4\u00e4s peamisele m\u00e4lule. HMM abil saab samuti korraldada \u00fchist aadressiruumi GPU ja CPU vahel, kus GPU saab juurde p\u00e4\u00e4seda protsessi p\u00f5hiraamatule;<\/li>\n<li>lisatud algne tugi tehnoloogiale <a rel=\"nofollow\" href=\"https:\/\/www.amd.com\/en\/technologies\/smartshift\">AMD Smart Shift<\/a>, mis d\u00fcnaamiliselt muudab CPU ja GPU energiatarbimise parameetreid AMD kiibistiku ja graafika kaardiga s\u00fclearvutites, et tagada j\u00f5udlus m\u00e4ngude, videote redigeerimise ja 3D-renderdamise ajal;<\/li>\n<li>intel i915 draiveris <a rel=\"nofollow\" href=\"https:\/\/lists.freedesktop.org\/archives\/intel-gfx\/2021-May\/266616.html\">on aktiveeritud<\/a> toetatakse Intel Alderlake P kiipe;<\/li>\n<li>lisatud drm\/hyperv draiver Hyper-V virtuaalse graafika adapteri jaoks;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/dri-devel\/cover\/20210416090048.11492-1-tzimmermann@suse.de\/\">on lisatud<\/a> grafikadraiver simpledrm, mis kasutab EFI-GOP v\u00f5i VESA raami, mida pakub UEFI firmware v\u00f5i BIOS. Draiveri peamine eesm\u00e4rk on v\u00f5imaldada graafilise v\u00e4ljundi kasutamist k\u00e4ivitamise algstaadiumis, enne kui on v\u00f5imalik t\u00e4ielikult kasutada DRM-draiverit. Draiverit saab kasutada ka ajutise lahendusena seadmetele, mille jaoks pole veel kohandatud DRM-draivereid;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/soc\/soc.git\/commit\/?h=for-next&amp;id=1c701accecf21932ebcbd8acacb4557af3797e77\">lisatud<\/a> toetatakse All-in-One arvutit <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54015\">Raspberry Pi 400<\/a>;<\/li>\n<li>lisatud dell-wmi-privacy draiver toele Dell s\u00fclearvutites tarnitud kaamera ja mikrofonide riistvaraliste l\u00fclitite toetamine;<\/li>\n<li>Lenovo s\u00fclearvutite jaoks <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/pdx86\/platform-drivers-x86.git\/commit\/?h=review-hans&amp;id=a40cd7ef22fbb11229cf982920f4ec96c1f49282\">on lisatud<\/a> WMI liides BIOS-i seadete muutmiseks sysfs \/sys\/class\/firmware-attributes\/ kaudu;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/YOM9yTZZsEicMW3f@kroah.com\/\">laiendatud<\/a> toetatakse USB4 liidese seadmeid;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/s5hbl7li0fe.wl-tiwai@suse.de\/\">lisatud<\/a> toetab kaartide ja kodeerijate AmLogic SM1 TOACODEC, Intel AlderLake-M, NXP i.MX8, NXP TFA1, TDF9897, Rockchip RK817, Qualcomm Quinary MI2 ja Texas Instruments TAS2505. Parandatud helitugi HP ja ASUS s\u00fclearvutites. <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/tiwai\/sound.git\/commit\/?h=for-next&amp;id=9ce650a75a3b262c90789b42aedee8fc2ee04d53\">Lisatud<\/a> karkassid helide esitamise viivituse v\u00e4hendamiseks USB-liidestega seadmetel.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a &ndash; opennet.ru.<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/linux-general\/16502291\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101214,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/yadro-linux-5-14\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/yadro-linux-5-14\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linux 5.14 tuum | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/yadro-linux-5-14","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/yadro-linux-5-14","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-07T14:23:45+00:00","article:modified_time":"2021-09-07T14:23:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101213","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-07 14:59:23","updated":"2022-10-03 17:14:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101213"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101213\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/101214"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}