Bayan kusan shekaru hudu na ci gaba, an saki tsarin aiki na Qubes 4.1, yana aiwatar da ra'ayin yin amfani da hypervisor don keɓance aikace-aikacen da kayan aikin OS (kowane aji na aikace-aikacen da sabis na tsarin yana gudana a cikin injunan kama-da-wane). Don aiki, kuna buƙatar tsarin tare da 6 GB na RAM da 64-bit Intel ko AMD CPU tare da goyan bayan VT-x tare da EPT/AMD-v tare da fasahar RVI da VT-d/AMD IOMMU, zai fi dacewa da Intel GPU (NVIDIA). kuma AMD GPUs ba a gwada su da kyau ba). Girman hoton shigarwa shine 6 GB.
Aikace-aikace a cikin Qubes an raba su zuwa azuzuwan dangane da mahimmancin bayanan da ake sarrafa da ayyukan da ake warwarewa. Kowane nau'in aikace-aikacen (misali aiki, nishaɗi, banki) da kuma sabis na tsarin (tsarin cibiyar sadarwa, bangon wuta, ajiya, tari na USB, da sauransu) suna gudana a cikin injunan ƙira daban-daban waɗanda ke gudana ta amfani da Xen hypervisor. A lokaci guda, waɗannan aikace-aikacen suna samuwa a cikin tebur iri ɗaya kuma ana bambanta su don tsabta ta launuka daban-daban na firam ɗin taga. Kowane yanayi ya karanta damar yin amfani da tushen tushen FS da ma'ajin gida wanda ba ya haɗuwa tare da ma'ajiyar wasu mahalli; ana amfani da sabis na musamman don tsara hulɗar aikace-aikacen.
Za a iya amfani da tushen fakitin Fedora da Debian a matsayin tushen samar da mahalli, kuma samfuran Ubuntu, Gentoo da Arch Linux kuma al'umma suna tallafawa. Yana yiwuwa a tsara damar yin amfani da aikace-aikace a cikin injin kama-da-wane na Windows, da kuma ƙirƙira injunan kama-da-wane na Whonix don ba da damar shiga ta Tor. Harsashin mai amfani yana dogara ne akan Xfce. Lokacin da mai amfani ya ƙaddamar da aikace-aikace daga menu, wannan aikace-aikacen yana farawa a cikin takamaiman injin kama-da-wane. An bayyana abun ciki na mahallin kama-da-wane ta hanyar saitin samfuri.
Babban canje-canje:
- Ikon yin amfani da keɓantaccen muhallin yanki na GUI tare da abubuwan haɗin gwiwa don tabbatar da aiwatar da aikin keɓancewar hoto. A baya can, a cikin mahallin kama-da-wane, kowane nau'in aikace-aikacen yana gudanar da uwar garken X daban, mai sauƙin sarrafa taga, da direban bidiyo mai taurin kai wanda ya fassara fitarwa zuwa yanayin sarrafawa a cikin yanayin haɗaka, amma abubuwan da aka haɗa tari mai hoto, babban manajan taga tebur, allo. sarrafawa, da direbobi masu zane-zane suna gudana a cikin babban wurin sarrafawa Dom0. Yanzu ana iya motsa ayyukan da ke da alaƙa da zane daga Dom0 zuwa wani yanki na GUI na daban kuma an raba shi da abubuwan sarrafa tsarin. Dom0 kawai yana barin tsarin baya na musamman don samar da dama ga wasu shafukan ƙwaƙwalwar ajiya. Goyan bayan yankin GUI har yanzu gwaji ne kuma ba a kunna shi ta tsohuwa ba.
- Ƙara goyan bayan gwaji don Domain Audio, yanayi daban don gudanar da sabar mai jiwuwa wanda ke ba ku damar raba abubuwan da aka haɗa don sarrafa sauti daga Dom0.
- Ƙarin tsarin bayanan qrexec-policy da sabon tsarin ƙa'idodi don tsarin Qrexec RPC, wanda ke ba ku damar aiwatar da umarni a cikin mahallin ƙayyadaddun mahallin kama-da-wane. Tsarin dokokin Qrexec yana ƙayyade wanda zai iya yin abin da kuma inda a cikin Qubes. Sabuwar sigar ƙa'idodin tana da tsari mai sassauƙa, haɓakar haɓakar haɓaka aiki, da tsarin sanarwa wanda ke sauƙaƙa gano matsalolin. An ƙara ikon gudanar da ayyukan Qrexec azaman sabar mai samun dama ta uwar garken soket.
- Sabbin samfura guda uku don mahallin kama-da-wane dangane da Gentoo Linux an gabatar da su - kaɗan, tare da Xfce kuma tare da GNOME.
- An aiwatar da sabon kayan aikin don kiyayewa, haɗuwa ta atomatik da gwajin ƙarin samfuran yanayi mai kama-da-wane. Baya ga Gentoo, abubuwan more rayuwa suna ba da tallafi ga samfuri tare da gwajin Arch Linux da Linux.
- An inganta tsarin ginawa da gwaji, an ƙara tallafi don tabbatarwa a cikin ci gaba da tsarin haɗin kai bisa GitLab CI.
- An yi aiki don aiwatar da tallafi don sake gina gine-gine na tushen Debian, wanda za'a iya amfani dashi don tabbatar da cewa an gina abubuwan Qubes daidai daga lambobin tushen da aka bayyana kuma basu ƙunshi canje-canje na ban mamaki ba, wanda, alal misali, na iya zama canji. wanda aka yi ta hanyar kai hari kan kayan aikin taro ko alamun shafi a cikin mai tarawa.
- An sake rubuta aiwatar da aikin tacewar zaɓi.
- Wurin sys-firewall da sys-usb yanzu suna aiki a cikin yanayin "zaɓi" ta tsohuwa, watau. ana iya zubarwa kuma ana iya ƙirƙira akan buƙata.
- Ingantattun tallafi don girman girman pixel.
- Ƙara goyon baya don siffofi daban-daban na siginan kwamfuta.
- Sanarwa da aka aiwatar game da rashin sarari diski kyauta.
- Ƙara goyon baya don yanayin dawo da ma'auni na paranoid, wanda ke amfani da yanayin kama-da-wane na lokaci ɗaya don farfadowa.
- Mai sakawa yana ba ku damar zaɓar tsakanin Debian da Fedora don samfuran injin kama-da-wane.
- An ƙara sabon ƙirar hoto don sarrafa ɗaukakawa.
- Ƙara kayan aikin Manajan Samfura don shigarwa, sharewa da ɗaukaka samfuri.
- Ingantacciyar hanyar rarraba samfuri.
- An sabunta yanayin Dom0 na tushe zuwa tushen fakitin Fedora 32. An sabunta samfura don ƙirƙirar yanayin kama-da-wane zuwa Fedora 34, Debian 11 da Whonix 16. Ana ba da kernel Linux 5.10 ta tsohuwa. Xen 4.14 hypervisor da Xfce 4.14 yanayin hoto an sabunta su.
source: budenet.ru