FreeBSD 14.0 saki

Bayan shekaru biyu da rabi daga buga reshen 13.0, an kafa sakin FreeBSD 14.0. An shirya hotunan shigarwa don amd64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv7, aarch64 da riscv64 gine-gine. Bugu da ƙari, an shirya taruka don tsarin ƙirƙira (QCOW2, VHD, VMDK, raw) da yanayin girgije Amazon EC2, Google Compute Engine da Vagrant. Reshen FreeBSD 14 zai zama na ƙarshe don tallafawa dandamali 32-bit. FreeBSD 15 kawai zai goyi bayan tsarin 64-bit, amma zai riƙe ikon gina shirye-shiryen 32-bit da amfani da yanayin COMPAT_FREEBSD32 don gudanar da aiwatar da 32-bit a cikin yanayin 64-bit.

Babban canje-canje:

• Tsohuwar harsashi don tushen mai amfani shine /bin/sh.
• Don na'urorin NVME, ana kunna direba nda ta tsohuwa akan duk dandamali. Don dawo da tsohon direban nvd, an samar da saitin “hw.nvme.use_nvd=1” a loader.conf.
• An ƙara sabon mai amfani "fwget" wanda ke gano kayan aikin da ke buƙatar firmware da shigar da fakitin firmware masu dacewa. A halin yanzu na'urorin PCI da firmware don Intel da AMD GPUs kawai ake tallafawa.
• Ƙara sabon kayan aiki na base64 don ɓoyewa da yanke bayanan base64.
• Ƙara tcpsso mai amfani, wanda ke ba ku damar saita zaɓuɓɓukan soket don haɗin TCP da ke gudana (misali, zaku iya canza tsarin sarrafa cunkoso ko tari na TCP).
• Tsohuwar wakili na isar da saƙo shine dma (DragonFly Mail Agent) maimakon aika saƙo. An ajiye aikawa a cikin ainihin kunshin kuma an sabunta shi zuwa sigar 8.17.1.
• KTLS, aiwatar da kernel na FreeBSD na ka'idar TLS, yana ƙara tallafi don haɓaka kayan aikin TLS 1.3 akan ɓangaren karɓa. Ana tabbatar da hanzari ta matsar da wasu ayyuka masu alaƙa da sarrafa fakitin rufaffiyar zuwa gefen katin cibiyar sadarwa.
• An ƙara umarnin ".include" a cikin fayil ɗin sanyi na jail.conf, wanda ke ba ku damar haɗa ƙarin fayiloli lokacin ɗora saitunan, hanyoyin da ke ba da damar amfani da masks. An faɗaɗa sysctl parameter security.bsd.see_jail_proc, tare da taimakon wanda masu amfani mara izini a cikin wani muhallin gidan yari daban yanzu ana iya hana su tilasta dakatarwa, canza fifiko, da aiwatar da gyara kuskure.
• Shirye-shiryen pw da bsdinstall yanzu suna ƙirƙirar masu amfani a cikin / gida directory ta tsohuwa maimakon /usr/gida. Alamar hanyar haɗin yanar gizo don "/ gida" tana nuni zuwa "/usr/home" ba a ƙara ƙirƙira shi ba.
• An kashe shi ta tsohuwa saitin ginin PROFILE - ba a ƙara samar da nau'ikan ɗakunan karatu na tsarin ba, kayan aikin bayanan kayan masarufi (hwpmc) yakamata a yi amfani da su maimakon.
• An kunna gina fayilolin da za a iya aiwatarwa don gine-ginen 64-bit a cikin yanayin PIE (Matsayi Mai Zaman Kanta).
• Ikon tura damar zuwa TPM (Trusted Platform Module) da GPU (a cikin mahalli mai kama da AMD da kwakwalwan kwamfuta na Intel) an ƙara su zuwa hypervisor Bhyve.
• An sabunta aiwatar da tsarin fayil na ZFS zuwa sakin OpenZFS 2.2. Kayan aikin makefs ya ƙara tallafi ga tsarin fayil ɗin ZFS. Yana ba da ikon ƙirƙirar tafkin ZFS mai alaƙa da faifan faifan vdev guda ɗaya.
• Adadin goyan bayan cores CPU (parameter MAXCPU) a cikin tsarin da ya danganci gine-ginen amd256 da arm1024 an ƙara su daga 64 zuwa 64.
• A cikin UFS, don daidaitawa wanda aka kunna shiga (sabuntawa mai laushi), ana ba da izinin duba bayanan tsarin fayil ta amfani da hotunan UFS. An ƙara ƙarin binciken hash ɗin zuwa manyan katange, taswirorin rukunin Silinda, da inodes don gano cin hanci da rashawa.
• An ƙara tsarin fayil ɗin tarfs, wanda za'a iya amfani dashi tare da rumbun adana kayan tarihi da aka matsa tare da zstd.
• Ƙara kayan aikin boottrace don bin diddigin abubuwan da suka faru yayin taya da kashe tsarin.
• An ƙara zaɓin daidaitawar kwaya na FIRECRACKER don ba da damar FreeBSD ta yi aiki akan tsarin ƙirƙira na Firecracker, wanda aka ƙera don sarrafa injunan kama-da-wane tare da ƙaramin sama. The FreeBSD 14 kernel boot boot time Gudun Firecracker an ƙara shi zuwa 25 millise seconds, yana ba da damar ƙaddamar da yanayin FreeBSD kamar yadda ake buƙata don aiwatar da kayan aikin kwamfuta mara sabar.
• Loader, wanda aka rubuta a cikin Lua, a cikin yanayi na musamman na akwatin sandbox, yana goyan bayan aiwatar da fayilolin lua da ke cikin kundin adireshin loader_conf_files.
• An fadada tallafin NFS. An ƙara sabon zaɓin dutsen "syskrb5" don tallafawa Kerberos a cikin NFSv 4.1/4.2, da ƙarin tallafi don aikin ExchangeID. An aiwatar da ikon tafiyar da nfsd, nfsuserd, sakawa, gssd da rpc.tlsservd a cikin keɓantaccen mahallin cibiyar sadarwa na vnet.
• Rubutun Grofs yana aiwatar da ikon sanya ɓangaren musanyawa a ƙarshen yanki mai faɗaɗawa akan faifai.
• An ƙara sabon mai bada DTrace kinst (dtrace_kinst), yana ba da damar gano sifofin kwaya.
• An ƙara tallafi ga tsarin ɓoye bayanai na XChaCha20-Poly1035 AEAD zuwa tsarin ɓoye bayanai na kernel, kuma an ƙara API don amfani da curve25519 elliptic curve (don WireGuard).
• Rage lokacin sake kunnawa. Ƙara sysctl parameter kern.reboot_wait_time, ta inda za ku iya canza jinkiri kafin ainihin sake yi bayan an fitar da duk saƙon bincike zuwa na'ura wasan bidiyo. Ta hanyar tsoho, an cire jinkirin.
• An ƙara tsarin timerfd zuwa kernel, yana sauƙaƙa jigilar shirye-shirye daga Linux.
• An ƙara sysctl machdep.mitigations.zenbleed.enable don toshe raunin Zenbleed akan na'urori na AMD Zen2.
• An ƙara tallafin Wi-Fi 6 zuwa wpa_supplicant da hostapd. Direban iwlwifi yana goyan bayan Intel chips waɗanda ke goyan bayan Wi-Fi 6E AX411/AX211/AX210.
• Kwaya akan tsarin amd64 yana ba da tallafi ga AddressSanitizer da kayan aikin MemorySanitizer daga aikin LLVM.
• Rubutun rc.d suna ba da damar amfani da hanyar matsayi, ko da sunan shirin (procname) da fayil ɗin PID ba a bayyana su a cikin rubutun ba.
• An ƙara ƙimar kernel ɗin tsoho, bootloader, da siriyal na sararin mai amfani daga 9600 bps zuwa 115200 bps. An saita sautin ƙarar tsoho zuwa 800Hz. Ana ba da haɗin kai tare da devd don fitar da ƙararrawa ta katin sauti. Don na'urar wasan bidiyo ta vt, an kashe ƙarar ta tsohuwa (don kunna shi, kuna buƙatar aiwatar da umarnin "sysctl kern.vt.enable_bell=1" da "kbdcontrol -b normal").
• Ingantattun tallafi don NXP DPAA2 (Data Path Acceleration Architecture Gen2) fasahar haɓaka kayan aikin cibiyar sadarwa.
• Ƙara direban igc don masu sarrafa Intel I225 Ethernet, yana tallafawa saurin 2.5 Gbps.
• Ta hanyar tsoho, an kunna saitin net.inet.tcp.nolocaltimewait, wanda ke hana ƙirƙirar bayanan jiran lokaci don haɗin TCP waɗanda aka ƙare a gefen tsarin gida.
• Tallafi ga yarjejeniyar sadarwa ta Netlink (RFC 3549) da aka yi amfani da ita a cikin Linux don tsara hulɗa tsakanin tsarin kernel da tsarin sararin mai amfani. An canza wasu kayan aikin cibiyar sadarwa zuwa amfani da Netlink.
• Tacewar fakitin pf yana ba da dacewa tare da daidaitawa da halayyar ayyukan fakiti na daidaitawa (shafewa) na sigar OpenBSD na pf. pfsync yana aiwatar da ikon amfani da jigilar IPv6. An tsawaita tsarin fakitin pfsync don tallafawa jerin gwano, daidaita fakiti, da hanya-zuwa dokoki.
• An ƙara zuwa hanyar sadarwa ta if_stf (IPv6 akan IPv4) Tallafin IPv6 Saurin Shigarwa (RFC 5969). Yanayin nodeinfo na IPv6 (RFC 4620) ana kashe shi ta hanyar tsoho.
• An kunna siginar net.inet.tcp.nolocaltimewait sysctl ta tsohuwa, yana kashe ƙirƙirar shigarwar lokacin jiran lokaci don haɗin TCP da ke cikin gida.
• Ta hanyar tsoho, TCP yana amfani da tsarin kula da cunkoso na cibiyar sadarwa na CUBIC maimakon NewReno, wanda ke ba da damar yin amfani da babban bandwidth da ake samu.
• IPV4 yana hana aika fakitin watsa shirye-shirye zuwa sifilin adireshin subnet sai dai idan an ayyana wannan adireshin a fili a matsayin adireshin watsa shirye-shirye. Canjin yana ba masu masauki damar amfani da adiresoshin da ke ƙarewa a ".0".
• An canza saitunan OpenSSH: a cikin scp an kunna ka'idar SFTP ta tsohuwa maimakon scp/rcp, goyon bayan sa hannu na RSA/SHA-1 an kashe, an saita sigogin VerifyHostKeyDNS da X11 Forwarding zuwa "a'a", an cire umarnin VersionAddendum, an cire goyon bayan saitunan HPN.
• Ƙara wani zaɓi na "-z" zuwa kwanan wata mai amfani don canza yankunan lokaci.
• An ƙara zaɓin "--launi" zuwa mai amfani iri-iri don ganin canje-canjen launi.
• Aikin barci yanzu yana goyan bayan raka'a ban da daƙiƙa (misali, zaku iya tantance "barci 1h 30m").
• An ƙara goyon baya ga zaɓuɓɓukan "-q" da "-h" zuwa kayan aikin kai da wutsiya, kuma an aiwatar da ikon tantance ƙima tare da ƙari a cikin tsarin ƙasa da ƙasa na sassan SI. A kai, an cire iyaka akan iyakar adadin layukan 2^31.
• An ƙara umarnin "iolat" zuwa mai amfani na syst don nuna bayanai game da latency na I/O wanda mai tsara tsarin CAM ya ƙidaya.
• An raba ɗakin karatu na libncursesw zuwa ɗakunan karatu biyu, libtinfow da libncursesw. Ƙara goyon baya don amfani da bayanan bayanan ƙarshe a cikin ɓarna, kuma ba kawai tabo ba.
• Don tsarin gine-gine na aarch64 (arm64), zaɓin ginin COMPAT_LIB32 an aiwatar da shi kuma an kunna shi ta tsohuwa, yana ba da haɗin ɗakunan karatu na 32-bit don tsarin ARM64 waɗanda ke ba da damar gudanar da fayilolin aiwatarwa da aka haɗa don dandamali na armv7.
• Ingantattun tallafi don tsarin girgije. Gina gwaji tare da tsarin tushen ZFS da girgije-init an ƙara don AWS EC2. Don Azure, ana ba da hotuna don gine-gine na arm64 da amd64, tare da zaɓi na UFS ko ZFS. Ƙara direba don katin cibiyar sadarwa na gve (Google Virtual NIC).
• Tsarin ACPI ya ƙara tallafi don ƙimar kofa _CR3, wanda ke ba ku damar saita zafin jiki lokacin isa wanda tsarin zai canza zuwa yanayin bacci (S3).
• Sabbin nau'ikan aikace-aikacen ɓangare na uku da ɗakunan karatu waɗanda aka haɗa a cikin tsarin tushe: OpenSSH 9.5p1, OpenSSL 3.0.12 (an yi amfani da reshe a baya 1.1.1), awk 2021072, bc 6.6.0, libbsdxml 2.4.7, libfido2 1.13.0. , tcpdump 4.99.4 , libpcap 1.10.4, xz 5.4.3, zlib 1.3, zstd 1.5.2. An maye gurbin aiwatar da aikin objdump da lvm-objump. An sabunta Clang compiler zuwa reshe 16.
• An tsaftace tsoffin tsarin:
  • An cire tallafi ga kalmomin shiga na OPIE na lokaci ɗaya daga tsarin tushe (ana iya saita tashar tsaro/opi don ci gaba da amfani).
  • An cire direbobin katunan sauti masu amfani da ISA.
  • An cire kayan aikin fmtree da minigzip.
  • Abubuwan da aka cire ATM a cikin netgraph (NgATM).
  • An cire tsarin bayanan telnetd (zaka iya amfani da tashar net/freebsd-telnetd).
  • An cire ajin VINUM a cikin geom.
  • An cire mr, iscsi_initiator, iir, mn, mly, nlmrsa da direbobin twa.
  • An cire ma'aunin VESA daga ma'aunin GENERIC da MINIMAL.
  • An cire goyan bayan ayyukan asymmetric cryptographic daga kernel-level cryptographic framework OCF (Open Cryptographic Framework).
  • An soke abin amfani da mergemaster kuma yakamata a maye gurbinsu da sabuntawa.
  • An cire kayan aikin tashar jiragen ruwa (ya kamata ku yi amfani da "git clone https://git.FreeBSD.org/ports.git/usr/ports" don fitar da tashar jiragen ruwa).
  • An dakatar da ƙarni na majalisai don gine-ginen armv6.
  • Cire tallafi don gine-ginen MIPS.

source: budenet.ru