Bayan kusan shekaru biyu na haɓakawa, an gabatar da sakin tsarin aiki na Qubes 4.2.0, wanda ke aiwatar da ra'ayin yin amfani da hypervisor don keɓance aikace-aikace da abubuwan OS (kowane nau'ikan aikace-aikacen da sabis na tsarin suna gudana daban-daban. injunan kama-da-wane). Don aiki, muna ba da shawarar tsarin tare da 16 GB na RAM (mafi ƙarancin 6 GB) da 64-bit Intel ko AMD CPU tare da goyan bayan VT-x tare da EPT/AMD-v tare da fasahar RVI da VT-d/AMD IOMMU, zai fi dacewa. Intel GPU (GPU NVIDIA da AMD ba a gwada su sosai). Girman hoton shigarwa shine 6 GB (x86_64).
Aikace-aikace a cikin Qubes an raba su zuwa azuzuwan dangane da mahimmancin bayanan da ake sarrafa da ayyukan da ake warwarewa. Kowane nau'in aikace-aikacen (misali aiki, nishaɗi, banki) da kuma sabis na tsarin (tsarin cibiyar sadarwa, bangon wuta, ajiya, tari na USB, da sauransu) suna gudana a cikin injunan ƙira daban-daban waɗanda ke gudana ta amfani da Xen hypervisor. A lokaci guda, waɗannan aikace-aikacen suna samuwa a cikin tebur iri ɗaya kuma ana bambanta su don tsabta ta launuka daban-daban na firam ɗin taga. Kowane yanayi ya karanta damar yin amfani da tushen tushen FS da ma'ajin gida wanda ba ya haɗuwa tare da ma'ajiyar wasu mahalli; ana amfani da sabis na musamman don tsara hulɗar aikace-aikacen.
Za a iya amfani da tushen fakitin Fedora da Debian a matsayin tushen samar da mahalli, kuma samfuran Ubuntu, Gentoo da Arch Linux kuma al'umma suna tallafawa. Yana yiwuwa a tsara damar yin amfani da aikace-aikace a cikin injin kama-da-wane na Windows, da kuma ƙirƙira injunan kama-da-wane na Whonix don ba da damar shiga ta Tor. Harsashin mai amfani yana dogara ne akan Xfce. Lokacin da mai amfani ya ƙaddamar da aikace-aikace daga menu, wannan aikace-aikacen yana farawa a cikin takamaiman injin kama-da-wane. An bayyana abun ciki na mahallin kama-da-wane ta hanyar saitin samfuri.
Babban canje-canje:
- An sabunta yanayin tushen Dom0 zuwa tushen fakitin Fedora 37 (samfurin don mahallin kama-da-wane dangane da Fedora 37 an gabatar da shi a cikin sabuntawar Qubes 4.1.2 na ƙarshe).
- Samfurin ƙirƙirar mahalli mai kama-da-wane bisa Debian an sabunta shi zuwa reshen Debian 12.
- An sabunta Xen hypervisor zuwa reshe 4.17 (a da Xen 4.14 an yi amfani da shi).
- Samfura don ƙirƙirar yanayin kama-da-wane bisa Fedora da Debian an canza su zuwa amfani da yanayin mai amfani na Xfce maimakon GNOME ta tsohuwa.
- Samfurin mahalli na tushen Fedora ya ƙara tallafi don tsarin tilasta ikon samun damar SELinux.
- An sake rubuta aiwatar da menu na aikace-aikacen gaba ɗaya, da kuma musaya na hoto don daidaitawa (Qubes Global Settings), ƙirƙirar sabbin mahalli (Ƙirƙiri Sabon Qube) da haɓaka samfuran injin kama-da-wane (Qubes Update).
- Wurin fayil ɗin sanyi na GRUB (grub.cfg) yana haɗe don UEFI da BIOS na gargajiya.
- Ƙara goyon baya ga uwar garken watsa labarai na PipeWire.
- Ana amfani da kayan aikin fwupd don sabunta firmware.
- Ƙara wani zaɓi don share allo ta atomatik minti ɗaya bayan aikin manna na ƙarshe. Don kunna sharewa ta atomatik, yi amfani da umarnin qvm-service — kunna VMNAME gui-agent-clipboard-wipe
- Don gina fakitin hukuma, ana amfani da sabon kayan aikin taro na Qubes Builder v2, wanda ke haɓaka keɓance hanyoyin haɗuwa.
- Mai daidaitawa yana ba da sashe daban don sarrafa GPG.
- Sabis na Qrexec suna amfani da tsoho wani sabon tsari mai sassauƙa na ƙa'idodin Qrexec wanda ke ayyana wanda zai iya yin abin da kuma inda a cikin Qubes. Sabuwar sigar ƙa'idodin tana nuna haɓakar haɓaka aiki da tsarin sanarwa wanda ke sauƙaƙa gano matsalolin.
source: budenet.ru