Sakin rarrabawar Red Hat Enterprise Linux 8.2

Kamfanin Red Hat aka buga kayan rarrabawa Red Hat Enterprise Linux 8.2. An shirya taron shigarwa don x86_64, s390x (IBM System z), ppc64le da gine-ginen Aarch64, amma akwai to saukarwa kawai ga masu amfani da Portal Abokin Ciniki na Red Hat. Ana rarraba tushen fakitin Linux 8rpm na Red Hat Enterprise ta hanyar Wurin ajiya na Git CentOS. Za a tallafawa reshen RHEL 8.x har zuwa aƙalla 2029.

Da farko, sanarwar RHEL 8.2 ta kasance buga akan gidan yanar gizon Red Hat a ranar 21 ga Afrilu, amma an sanar da sanarwar ba da wuri ba kuma ma'ajin don shigar da sabuntawa har yanzu suna nan. ba a shirya ba, amma a gaskiya sakin ya fito sai yau. Ana haɓaka reshen 8.x daidai da sabon tsarin ci gaban da ake iya faɗi, wanda ya haɗa da samar da sakewa kowane wata shida a ƙayyadadden lokaci. Sabo ci gaban sake zagayowar Samfuran RHEL sun zana yadudduka da yawa, gami da Fedora a matsayin tushen tushe don sabbin iyakoki, Ruwan CentOS don samun damar yin amfani da fakitin da aka samar don sakin tsaka-tsaki na gaba na RHEL (nau'in juyi na RHEL), hoton tushe mafi ƙaranci na duniya (UBI, Universal Base Image) don gudanar da aikace-aikacen a cikin keɓaɓɓen kwantena da Biyan kuɗi na Developer RHEL don amfani da RHEL kyauta a cikin tsarin ci gaba.

Maɓalli canji:

• Amintacce cikakken goyon baya ga sarrafa albarkatun ta amfani da haɗe-haɗe matsayi kungiyoyi v2, wanda a baya ya kasance a matakin yuwuwar gwaji. Za a iya amfani da ƙungiyoyi v2, misali, don iyakance ƙwaƙwalwar ajiya, CPU da yawan amfani da I/O. Bambanci mai mahimmanci tsakanin ƙungiyoyi v2 da v1 shine amfani da tsarin ƙungiyoyin gama gari don kowane nau'in albarkatu, maimakon matsayi daban-daban don rarraba albarkatun CPU, don daidaita yawan ƙwaƙwalwar ajiya, da na I/O. Matsayi daban-daban ya haifar da matsaloli wajen tsara hulɗa tsakanin masu gudanarwa da ƙarin farashin albarkatun kwaya lokacin amfani da ƙa'idodi don tsarin da aka ambata a cikin manyan mukamai daban-daban.
• Kara Convert2RHEL kayan aiki don canza tsarin da ke gudana RHEL-kamar rabawa, kamar CentOS da Oracle Linux, zuwa RHEL.
• An ƙara ikon keɓance tsarin tsarin tsarin tsarin bayanan sirri (manufofin crypto-crypto), wanda ke rufe ka'idojin TLS, IPSec, SSH, DNSSec da Kerberos. A yanzu mai gudanarwa na iya ayyana manufofinsa ko canza wasu sigogi na waɗanda suke. An ƙara sabbin fakiti guda biyu setools-gui da setools-console-bincike don nazarin manufofin SELinux da duba kwararar bayanai. Ƙara bayanin martabar tsaro wanda ya dace da shawarwarin DISA STIG (Hukumar Kula da Bayanan Tsaro). An ƙara sabon kayan aiki, oscap-podman, don bincika abubuwan da ke cikin kwantena don nau'ikan shirye-shirye masu rauni.
• Kayan aikin sarrafa Identity yanzu sun haɗa da sabon kayan aikin Checkcheck wanda ke ba ku damar gano matsaloli a wuraren IdM (Gudanar da Shaida). Yana ba da goyan baya ga ayyuka masu yiwuwa da kayayyaki don sauƙaƙe shigarwa da sarrafa IdM.
• An canza ƙirar na'urar wasan bidiyo na yanar gizo, wanda aka canza zuwa yin amfani da ƙirar PatternFly 4, kama da ƙirar ƙirar OpenShift 4. An ƙara lokacin rashin aiki mai amfani, bayan haka an ƙare zaman tare da na'ura mai kwakwalwa ta yanar gizo. Ƙara tallafi don tantancewa ta amfani da takardar shaidar abokin ciniki. An sabunta sassan don sarrafa ma'aji da injuna.
• An canza hanyar sadarwa don sauya kwamfutoci masu kama-da-wane a cikin yanayin GNOME Classic; an matsa maɓallin sauyawa zuwa ƙananan kusurwar dama kuma an tsara shi azaman tsiri tare da ƙananan hotuna.
• DRM (Direct Rendering Manager) tsarin tsarin zane yana aiki tare da Linux kernel version 5.1. An sabunta direbobi masu zane don haɗawa da tallafi ga Intel Intel Comet Lake H da U (HD Graphics 610, 620, 630), Intel Ice Lake U (HD Graphics 910, Iris Plus Graphics 930, 940, 950), AMD Navi 10, Nvidia Turing TU116,
• An kunna zaman GNOME na tushen Wayland ta tsohuwa don tsarin tare da GPUs da yawa (a baya an yi amfani da X11 akan tsarin tare da zane-zane).
• Ƙarin tallafi don sababbin sigogin kwaya na Linux masu alaƙa da sarrafa haɗar kariya daga sabbin hare-hare akan tsarin aiwatar da ƙima na CPU: mds, tsx, ragewa. Ƙara siga
  mem_encrypt don sarrafa damar haɓakawar AMD SME (Tsarin Ƙofar Ƙwaƙwalwar Ƙwaƙwalwa). Ƙara siginar cpuidle.gwamna don zaɓar mai kula da jihar mara aiki na CPU (gwamnan cpuidle). Ƙara /proc/sys/kernel/panic_print siga don saita fitar da bayanin idan akwai haɗarin tsarin (yanayin tsoro). Ƙara siga
  /proc/sys/kernel/threads-max don ayyana matsakaicin adadin zaren da cokali mai yatsu () aikin zai iya ƙirƙirar. Ƙara /proc/sys/net/bpf_jit_enable zaɓi don sarrafa ko an kunna mai tara JIT don BPF.

• An canza algorithm ƙaddamar dnf-automatic.timer don kiran tsarin shigarwa ta atomatik. Maimakon yin amfani da mai ƙidayar lokaci guda ɗaya wanda ke haifar da kunnawa a lokacin da ba a iya faɗi ba bayan taya, ƙayyadadden naúrar yanzu yana farawa tsakanin 6 da 7 na safe. Idan a wannan lokacin an kashe tsarin, amma yana farawa a cikin awa daya bayan kunna shi.
• Modules tare da sababbin rassan Python 3.8 (ya kasance 3.6) da Maven 3.6 an ƙara su zuwa ma'ajiyar AppStream. Abubuwan da aka sabunta tare da GCC 9.2.1, Clang/LLVM 9.0.1, Rust 1.41 da Go 1.13.
• Sabbin fakitin da aka sabunta powertop 2.11 (tare da goyan bayan dandamali na EHL, TGL, ICL/ICX), opencv 3.4.6, kunna 2.13.0, rsyslog 8.1911.0, duba 3.0-0.14, fapolicyd 0.9.1-2, sudo 1.8.29 - 3, 8.
  firewalld 0.8, tpm2-kayan aikin 3.2.1, mod_md (tare da goyon bayan ACMEv2), grafana 6.3.6, pcp 5.0.2, elfutils 0.178, SystemTap 4.2, 389-ds-base 1.4.2.4,
  samba 4.11.2.

• An ƙara sabbin fakiti whois, graphviz-python3 (an rarraba ta hanyar ma'ajiyar CRB (CodeReady Linux Builder) maras tallafi), perl-LDAP, perl-Convert-ASN1.
• An sabunta uwar garken BIND DNS zuwa nau'in 9.11.13 kuma an canza shi zuwa amfani da bayanan dauri na wurin GeoIP2 a cikin tsarin libmaxminddb maimakon GeoIP wanda ya tsufa, wanda ba a tallafawa. Ƙara saitunan sabis-stale (stale-answer), wanda ke ba ku damar dawo da bayanan DNS da suka wuce idan ba zai yiwu a sami sababbi ba.
• An ƙara plugin ɗin omhttp zuwa rsyslog don hulɗa ta hanyar haɗin HTTP REST.
• Canje-canje masu dacewa da Linux 5.5 kernel an canza su zuwa tsarin bincike.
• Kayan aikin saiti na iya ƙara tallafi don nazarin gazawar samun dama saboda rashin ƙwaƙwalwar ajiya da amsa ta atomatik don warware irin waɗannan matsalolin.
• Ana ba masu amfani da SELinux taƙaice ana ba su ikon sarrafa ayyukan da ke da alaƙa da zaman mai amfani. Semanage ya ƙara goyan baya don kimantawa da canza SCTP da tashar tashar sadarwa ta DCCP (a da TCP da UDP ana tallafawa). Ayyukan lvmdbusd (D-Bus API don LVM), lldpd, rrdcached, stratisd, timedatex ana sarrafa su a ƙarƙashin yankunan su na SELinux.
• An matsar da Firewalld zuwa libnftables JSON dubawa yayin hulɗa tare da nftables, wanda ya haifar da ƙara yawan aiki da aminci. NFTables yana ƙara tallafi don nau'ikan nau'ikan wurare a cikin IP, wanda zai iya haɗawa da ƙungiyoyi da kewayawa. Dokokin Firewalld yanzu na iya amfani da masu kulawa don saka idanu kan haɗin kai don ayyukan da ke gudana akan tashoshin sadarwa marasa daidaituwa.
• Tc (Traffic Control) kernel subsystem yana ba da cikakken tallafi
  eBPF, wanda ke ba ku damar amfani da tc mai amfani don haɗa shirye-shiryen eBPF don rarraba fakiti da aiwatar da layukan masu shigowa da masu fita.

• An aiwatar da ingantaccen goyon baya ga wasu ƙananan tsarin eBPF: BCC (BPF Compiler Collection) kayan aiki da ɗakin karatu don ƙirƙirar BPF da shirye-shiryen lalatawa, goyan bayan eBPF a tc. Abubuwan bpftrace da eXpress Data Path (XDP) sun kasance a matakin Preview Technology.
• Abubuwan da aka haɗa na lokaci-lokaci (kernel-rt) suna aiki tare da saitin faci don kernel 5.2.21-rt13.
• Yanzu yana yiwuwa a gudanar da tsarin rngd (daemon don ciyar da entropy a cikin janareta na lamba bazuwar) ba tare da haƙƙin tushen ba.
• LVM ya ƙara tallafi don hanyar caching dm-writecache ban da cache dm ɗin da aka samo a baya. Dm-cache cache mafi yawan amfani da rubutu da karanta ayyukan, kuma dm-writecache cache kawai rubuta ayyuka ta hanyar sanya su farko akan saurin SSD ko PMEM sannan kuma matsar da su zuwa faifai a hankali a bango.
• XFS ta ƙara goyan baya don yanayin rubutu na rukuni-sane.
• FUSE ta kara tallafi don aikin copy_file_range(), wanda ke ba ka damar hanzarta kwafin bayanai daga wannan fayil zuwa wani ta hanyar aiwatar da aikin kawai a gefen kwaya ba tare da fara karanta bayanan cikin ƙwaƙwalwar ajiya ba. Ana ganin haɓakawa a fili a cikin GlusterFS.
• Ƙara zaɓin "--preload" zuwa mai haɗawa mai ƙarfi, yana ba ku damar tantance ɗakunan karatu a sarari don tilastawa a loda su da aikace-aikacen. Wannan zaɓin yana ba da damar gujewa amfani da LD_PRELOAD canjin yanayi, wanda tsarin yara ya gada.
• KVM hypervisor yana ba da cikakken goyan baya don gudanar da injunan kama-da-wane.
• An kara sabbin direbobi, ciki har da
  gVNIC, Broadcom UniMAC MDIO, Software iWARP, DRM VRAM, cpuidle-haltpoll, stm_ftrace, stm_console,
  Intel Trace Hub, PMEM DAX,
  Intel PMC Core,
  Farashin Intel RAPL
  Matsakaicin Matsakaicin Powerarfin Lokaci na Intel (RAPL).

• DSA da aka soke, TLS 1.0 da TLS 1.1 an kashe su ta tsohuwa kuma ana samunsu kawai a cikin LEGACY suite.
• Bayar da goyan bayan gwaji (Tsarin Fasaha) don nmstate, AF_XDP, XDP, KTLS, dracut, kexec saurin sake yi, eBPF, libbpf, igc, NVMe akan TCP/IP, DAX a cikin ext4 da xfs, OverlayFS, Stratis, DNSSEC, GNOME akan tsarin ARM , AMD SEV don KVM, Intel vGPU

source: budenet.ru