Sakin rarrabawar Red Hat Enterprise Linux 8

Kamfanin Red Hat aka buga saki rabawa Red Hat Enterprise Linux 8. An shirya taron shigarwa don x86_64, s390x (IBM System z), ppc64le da gine-ginen Aarch64, amma akwai to saukarwa kawai ga masu amfani da Portal Abokin Ciniki na Red Hat. Ana rarraba tushen fakitin Linux 8rpm na Red Hat Enterprise ta hanyar Wurin ajiya na Git CentOS. Za a tallafa wa rarrabawar har zuwa aƙalla 2029.

Fasahar da aka haɗa a cikin Fedora 28. Sabuwar reshe sananne ne don canzawa zuwa Wayland ta tsohuwa, maye gurbin iptables tare da nftables, sabunta mahimman abubuwan haɗin gwiwa (kernel 4.18, GCC 8), ta amfani da mai sarrafa fakitin DNF maimakon YUM, ta amfani da ma'ajin na yau da kullun, yana ƙare tallafi ga KDE da Btrfs.

Maɓalli canji:

• Canzawa zuwa mai sarrafa fakiti DNF tare da samar da Layer don dacewa da Yum a matakin zaɓuɓɓukan layin umarni. Idan aka kwatanta da Yum, DNF yana da fa'ida mafi girma da sauri da ƙarancin amfani da ƙwaƙwalwar ajiya, mafi kyawun sarrafa abubuwan dogaro da goyan bayan haɗar fakitin cikin kayayyaki;
• Rarraba zuwa ainihin ma'ajiyar BaseOS da ma'ajin AppStream na zamani. BaseOS yana rarraba mafi ƙarancin fakitin da ake buƙata don tsarin yayi aiki; duk wani abu sake tsarawa zuwa wurin ajiyar AppStream. Ana iya amfani da AppStream a cikin nau'i biyu: azaman ma'ajin RPM na al'ada da azaman ma'ajiya a cikin tsari na zamani.

  Ma'ajiyar kayan masarufi yana ba da jeri na fakitin rpm da aka haɗa su cikin kayayyaki, waɗanda ake tallafawa ba tare da la'akari da sakin rarrabawa ba. Ana iya amfani da moduloli don shigar da madadin nau'ikan aikace-aikacen musamman (misali, zaku iya shigar da PostgreSQL 9.6 ko PostgreSQL 10). Ƙungiya mai mahimmanci ta ba da damar mai amfani don canzawa zuwa sababbin mahimman bayanai na aikace-aikacen ba tare da jiran sabon sakin rarraba ba kuma ya kasance a kan tsofaffi, amma har yanzu ana goyan bayan, sigogin bayan sabunta rarraba. Modules sun haɗa da aikace-aikacen tushe da dakunan karatu da suka wajaba don aiki (sauran kayayyaki za a iya amfani da su azaman abin dogaro);

• An gabatar da shi azaman tsoho tebur GNOME 3.28 ta amfani da uwar garken nuni na tushen Wayland ta tsohuwa. Ana samun tushen tushen uwar garken X.Org azaman zaɓi. An cire fakitin tare da tebur na KDE, suna barin tallafin GNOME kawai;
• Kunshin kernel na Linux ya dogara ne akan sakin 4.18. An kunna azaman tsoho mai tarawa GCC 8.2. Laburaren tsarin Glibc an sabunta shi don fitarwa 2.28.
• Tsohuwar aiwatar da yaren shirye-shiryen Python shine Python 3.6. Ana ba da tallafi mai iyaka don Python 2.7. Ba a haɗa Python a cikin ainihin kunshin ba; dole ne a saka shi ƙari. Sabuntawa na Ruby 2.5, PHP 7.2, Perl 5.26, Node.js 10, Java 8 da 11, Clang/LLVM Toolset 6.0, .NET Core 2.1, Git 2.17, Mercurial 4.8, Subversion 1.10. An haɗa tsarin ginin CMake (3.11);
• Ƙara goyon baya don shigar da tsarin akan abubuwan NVDIMM zuwa mai sakawa Anaconda;
• An ƙara ikon ɓoye fayafai ta amfani da tsarin LUKS2 zuwa mai sakawa da tsarin, wanda ya maye gurbin tsarin LUKS1 da aka yi amfani da shi a baya (a dm-crypt da cryptsetup LUKS2 yanzu ana bayarwa ta tsohuwa). LUKS2 sananne ne don tsarin sarrafa maɓalli mai sauƙi, ikon yin amfani da manyan sassa (4096 maimakon 512, yana rage nauyi yayin ɓarna), masu gano ɓangarori na alama (lakabin) da kayan aikin madadin metadata tare da ikon dawo da su ta atomatik daga kwafi idan an gano lalacewa.
• An ƙara sabon mai amfani da Mawaƙa, yana samar da kayan aiki don ƙirƙirar hotunan tsarin bootable na musamman wanda ya dace da turawa a cikin mahalli na dandamali daban-daban na girgije;
• Cire tallafi don tsarin fayil ɗin Btrfs. Modul btrfs.ko kernel, btrfs-progs utilities, da fakitin snapper ba a haɗa su ba;
• An haɗa kayan aikin Stratis, wanda ke ba da kayan aiki don haɗawa da sauƙaƙe saiti da sarrafa tafki ɗaya ko fiye na gida. Ana aiwatar da Stratis a matsayin Layer (stratisd daemon) wanda aka gina a saman na'urar na'urar da kuma tsarin tsarin XFS, kuma yana ba ku damar amfani da fasali kamar rarraba ajiya mai ƙarfi, ɗaukar hoto, tabbatar da aminci da ƙirƙirar yadudduka na caching, ba tare da cancantar ƙwararru ba. sarrafa tsarin ajiya;
• An aiwatar da tsare-tsare masu fa'ida don kafa ƙa'idodin ƙididdiga, waɗanda ke rufe ka'idojin TLS, IPSec, SSH, DNSSec da Kerberos. Yin amfani da umarnin sabuntawa-crypto-manufofin za ku iya zaɓar ɗaya daga cikin yanzu
  hanyoyi don zaɓar algorithms na sirri: tsoho, gado, gaba da fips. An kunna saki ta tsohuwa Buɗe SSL 1.1.1 tare da tallafin TLS 1.3;

• Bayar da tallafi mai faɗin tsarin don katunan wayo da HSM (Modules Tsaro na Hardware) tare da alamun ɓoye na PKCS#11;
• An maye gurbin iptables, ip6tables, arptables da ebtables fakiti tace ta nftables fakiti tace, wanda yanzu ana amfani da shi ta tsohuwa kuma sananne ne don haɗewar hanyoyin tace fakiti don IPv4, IPv6, ARP da gadoji na cibiyar sadarwa. Nftables yana ba da ƙayyadaddun ƙayyadaddun ƙayyadaddun ƙayyadaddun ƙayyadaddun tsari a matakin kwaya wanda ke ba da ayyuka na asali don ciro bayanai daga fakiti, yin ayyukan bayanai, da sarrafa kwarara. Ana tattara ma'anar tacewa kanta da ƙayyadaddun ƙa'idodin ƙa'ida zuwa bytecode a cikin sarari mai amfani, bayan haka ana loda wannan bytecode a cikin kernel ta amfani da mahallin Netlink kuma a aiwatar da shi a cikin injin kama-da-wane na musamman wanda ke tunawa da BPF (Berkeley Packet Filters). An canza daemon ta wuta don amfani da nftables azaman tsohuwar baya. Don canza tsoffin ƙa'idodi, an ƙara iptables-fassara da ip6tables-fassara abubuwan amfani;
• Don tabbatar da sadarwar cibiyar sadarwa tsakanin kwantena da yawa, an ƙara goyan bayan direbobi don gina hanyar sadarwa ta IPVLAN;
• Kunshin asali ya haɗa da uwar garken nginx http (1.14). Apache httpd an sabunta shi zuwa sigar 2.4.35, da OpenSSH zuwa 7.8p1.

  Daga DBMS, MySQL 8.0, MariaDB 10.3, PostgreSQL 9.6/10 da Redis 4.0 suna samuwa a cikin ma'ajin. Ba a haɗa MongoDB DBMS ba saboda miƙa mulki don sabon lasisin SSPL, wanda har yanzu ba a gane shi a buɗe ba;

• An inganta abubuwan da aka haɗa don haɓakawa. Ta hanyar tsoho, lokacin ƙirƙirar injunan kama-da-wane, ana amfani da nau'in Q35 (ICH9 chipset emulation) tare da goyon bayan PCI Express. Yanzu zaku iya amfani da mahaɗin yanar gizo na Cockpit don ƙirƙira da sarrafa injunan kama-da-wane. An soke aikin dubawa-manajan. An sabunta QEMU zuwa sigar 2.12. QEMU tana aiwatar da yanayin keɓewar akwatin sandbox, wanda ke iyakance kiran tsarin da abubuwan QEMU zasu iya amfani da su;
• Ƙara goyon baya don hanyoyin gano tushen tushen eBPF, gami da amfani da kayan aikin SystemTap (4.0). Abun da ke ciki ya haɗa da abubuwan amfani don haɗawa da loda shirye-shiryen BPF;
• Ƙara goyon bayan gwaji don tsarin tsarin XDP (eXpress Data Path), wanda ke ba da damar gudanar da shirye-shiryen BPF akan Linux a matakin direba na cibiyar sadarwa tare da damar samun dama ga buffer fakitin DMA kai tsaye kuma a mataki kafin skbuff buffer an kasafta shi ta hanyar cibiyar sadarwa;
• An ƙara kayan aikin haɓaka don sarrafa saitunan bootloader. Boom yana sauƙaƙe aiwatar da ayyuka kamar ƙirƙirar sabbin shigarwar taya, alal misali, idan kuna buƙatar taya daga hoton LVM. Boom yana iyakance ne kawai don ƙara sabbin shigarwar taya kuma ba za a iya amfani da su don gyara waɗanda ke wanzu ba;
• Haɗaɗɗen kayan aiki masu nauyi don sarrafa keɓaɓɓen kwantena, waɗanda ake amfani da su don gina kwantena Buildah, don farawa - podman kuma don bincika shirye-shiryen hotuna - Scopeo;
• An faɗaɗa iyawar da ke da alaƙa da tari. An sabunta manajan kullin albarkatun mai bugun jini zuwa sigar 2.0. A cikin mai amfani inji mai kwakwalwa Cikakken tallafi don Corosync 3, knet da kiran sunan node an bayar da shi;
• Rubutun gargajiya don kafa hanyar sadarwa (rubutun-cibiyar sadarwa) an ayyana su sun daina aiki kuma ba a kawo su ta tsohuwa. Don tabbatar da dacewa da baya, maimakon rubutun ifup da ifdown, an ƙara ɗaure zuwa NetworkManager, aiki ta hanyar nmcli mai amfani;
• An cire fakiti: crypto-utils, cvs, dmraid, tausayawa, yatsa, gnote, gstreamer, ImageMagick, mgetty, phonon, pm-utils, rdist, ntp (maye gurbinsu da chrony), qemu (maye gurbin ta qemu-kvm), qt (maye gurbin ta qt5-qt), rsh, rt, rubygems (yanzu an haɗa su a cikin babban fakitin ruby), tsarin-tsarin wuta, tcp_wrappers, wxGTK.
• Shirya hoton tushe na duniya (UBI, Hoton Tushen Duniya) don ƙirƙirar kwantena masu keɓe, gami da ba ku damar ƙirƙirar kwantena don aikace-aikacen guda ɗaya. UBI ya haɗa da ƙaramin yanki da aka cire, ƙara lokacin aiki don tallafawa harsunan shirye-shirye (nodejs, ruby, python, php, perl) da saitin ƙarin fakiti a cikin ma'ajiyar.

source: budenet.ru