Sakin OpenBSD 7.0

An gabatar da sigar giciye na kyauta mai kama da UNIX OpenBSD 7.0. An lura cewa wannan shi ne karo na 51 da aka saki aikin, wanda zai cika shekaru 18 a ranar 26 ga watan Oktoba. Theo de Raadt ne ya kafa aikin OpenBSD a cikin 1995 bayan rikici da masu haɓaka NetBSD, sakamakon haka an hana Theo damar shiga ma'ajiyar NetBSD CVS. Bayan haka, Theo de Raadt da gungun mutane masu ra'ayi iri ɗaya sun ƙirƙiri sabon tsarin aiki na buɗewa bisa tushen bishiyar NetBSD, babban burin ci gaba wanda shine ɗaukar hoto (ana tallafawa dandamali na kayan masarufi 13), daidaitawa, daidaitaccen aiki, tsaro mai ƙarfi. da hadedde kayan aikin sirri. Cikakken hoton ISO na tsarin tushen OpenBSD 7.0 shine 554 MB.

Baya ga tsarin aiki da kansa, aikin OpenBSD sananne ne don abubuwan da aka haɗa, waɗanda suka zama tartsatsi a cikin sauran tsarin kuma sun tabbatar da kansu a matsayin ɗayan mafi aminci da ingantaccen mafita. Daga cikin su: LibreSSL (cokali mai yatsu na OpenSSL), OpenSSH, PF fakiti tace, OpenBGPD da OpenOSPFD routing daemons, OpenNTPD NTP uwar garken, OpenSMTPD mail uwar garken, rubutu m multiplexer (mai kama da allon GNU) tmux, gano daemon tare da aiwatar da yarjejeniya ta IDENT, madadin BSDL. GNU groff kunshin - mandoc, yarjejeniya don tsara tsarin masu haƙuri da kuskure CARP (Ka'idar Redundancy Address), uwar garken http mai nauyi, mai amfani da aiki tare na fayil na OpenRSYNC.

Babban haɓakawa:

• Ƙara tashar jiragen ruwa don tsarin 64-bit dangane da gine-ginen RISC-V. A halin yanzu ana goyan bayan aiki akan allunan HiFive Unmatched kuma wani bangare akan PolarFire SoC Icicle Kit.
• Tashar jiragen ruwa don dandamali na ARM64 yana ba da ingantaccen, amma har yanzu bai cika ba, tallafi ga na'urorin Apple tare da na'urar M1. A cikin sigar sa na yanzu, yana goyan bayan shigar da OpenBSD akan faifan GPT kuma yana da direbobi don USB 3, NVME, GPIO da SPMI. Baya ga M1, tashar tashar ARM64 kuma tana faɗaɗa tallafi don Rasberi Pi 3 Model B+ da allunan dangane da Rockchip RK3399 SoC.
• Don gine-ginen AMD64, GCC mai tarawa an kashe ta tsohuwa (Clang kawai ya rage). A baya can, GCC an kashe shi don gine-ginen armv7 da i386.
• An daina goyan bayan dandalin SGI.
• Don amd64, arm64, i386, sparc64 da powerpc64 dandali, kernel gini tare da goyan bayan dt tsauri tsarin ana kunna ta tsohuwa. Ƙara mai bada kprobes don tattara bayanai game da abubuwan da suka faru-matakin kernel.
• btrace yana aiwatar da goyan baya ga ma'aikatan "<" da ">" a cikin masu tacewa kuma yana ba da fitarwa na lokacin da aka kashe a cikin sararin mai amfani lokacin nazarin tarin kernel.
• Ƙara /etc/bsd.re-config file sanyi, wanda za'a iya amfani dashi don saita kernel a lokacin taya da kunna / musaki wasu na'urori.
• Yana tabbatar da gano kasancewar na'urorin TPM 2.0 da aiwatar da daidaitaccen umarni don shigar da yanayin bacci (yana magance matsalar tare da farkawa ThinkPad X1 Carbon Gen 9 da kwamfutar tafi-da-gidanka na ThinkPad X1 Nano).
• An canza aiwatar da kqueue zuwa amfani da mutexes.
• An aiwatar da ikon daidaita girman buffer don PF_UNIX soket ta sysctl. An ƙara girman tsohowar buffer zuwa 8 KB.
• Ingantattun tallafi don tsarin multiprocessor (SMP). An motsa kiran pmap_extract() zuwa mp-lafiya akan tsarin hppa da amd64. Lambar don kirga nassoshi zuwa abubuwan da ba a san su ba, wani ɓangare na keɓancewar mai sarrafa, da neman, haɗi, da ayyuka masu daidaitawa an samo su ne daga kulle kernel gabaɗaya. Aiwatar raba saƙon firgici daban-daban don kowane ainihin CPU.
• An daidaita aiwatar da tsarin drm (Direct Rendering Manager) tare da Linux kernel 5.10.65. Direban inteldrm ya inganta tallafi ga kwakwalwan kwamfuta na Intel dangane da microarchitecture na Tiger Lake. Direban amdgpu yana goyan bayan Navi 12, Navi 21 “Sienna Cichlid”, Arcturus GPUs da Cezanne “Green Sardine” Ryzen 5000 APUs.
• Ƙara goyon baya don sababbin kayan aiki, ciki har da Aquantia AQC111U/AQC112U USB Ethernet, Aquantia 1/2.5/5/10Gb/s PCIe Ethernet, Cadence GEM, Broadcom BCM5725, RTL8168FP/RTL8111FP/RTL8117 Ingantattun goyon baya ga Tiger Lake microspots Ƙara direban ucc don maɓallan sarrafa masu amfani na USB HID masu amfani da aikace-aikace, sauti, da maɓallin ƙara.
• An sami ingantuwa ga mai ɗaukar nauyi na VMM. Ƙara iyaka na 512 VCPU kowace injin kama-da-wane. An warware matsalolin tarewar VCPU. Ƙididdiga don sarrafa injunan kama-da-wane na vmd yanzu ya haɗa da tallafi don kariya daga tsarin baƙo tare da direbobin ƙeta.
• An matsar da mai amfani da lokaci daga NetBSD, yana ba ku damar iyakance lokacin aiwatar da umarni.
• Fayil ɗin openrsync na aiki tare yana aiwatar da zaɓuɓɓukan "haɗa" da "ban".
• Mai amfani ps yana ba da bayanai game da ƙungiyoyi masu alaƙa.
• An ƙara umarnin "dired-jump" zuwa editan rubutu na mg.
• Fdisk da abubuwan amfani na newfs sun inganta tallafi don fayafai tare da girman sassan 4K. A cikin fdisk, lambar farawa ta MBR/GPT an sake yin aiki kuma an gane sassan GPT "BIOS Boot", "APFS", "APFS ISC", "APFS Recovry" (sic), "HiFive FSBL" da "HiFive BBL" sun kasance. kara da cewa. Ƙara zaɓi na "-A" don fara GPT ba tare da cire sassan taya ba.
• Don hanzarta aikin, mai amfani da traceroute yana aiwatar da sarrafa fakitin gwaji da buƙatun DNS a cikin yanayin asynchronous.
• Doas mai amfani yana ba da ƙoƙarin shigar da kalmar sirri guda uku.
• xterm yana ba da keɓancewar hanyar shiga tsarin fayil ta amfani da kiran tsarin buɗewa (). Ana kiyaye matakan ftpd ta amfani da kiran jingina.
• Aiwatar da fitarwa zuwa log na bayanai game da kuskuren amfani da sigar tsara "% n" a cikin aikin bugawa.
• Aiwatar da IPsec a cikin iked yana ƙara goyan baya don daidaitawar DNS na gefen abokin ciniki.
• A cikin snmpd, an kashe goyan bayan ka'idojin SNMPv1 da SNMPv2c ta tsohuwa don amfani da SNMPv3.
• Ta hanyar tsoho, ana kunna tsarin jin daɗin dhcc da warwarewa, suna ba da ikon daidaita adiresoshin IPv4 ta DHCP. An bar abin amfani dhclient akan tsarin azaman zaɓi. An ƙara umarnin "server" zuwa hanyar amfani don canja wurin bayanai game da uwar garken DNS don warwarewa.
• LibreSSL ya ƙara tallafi don TLSv3 API OpenSSL 1.1.1 kuma ya kunna sabon mai fa'ida X.509 wanda ke goyan bayan ingantaccen tabbaci na takaddun shaida masu rattaba hannu.
• OpenSMTPD yana ƙara goyan bayan zaɓuɓɓukan TLS "cafile=(hanya)", "nosni", "noverify" da "sunan uwar garke = (suna)". smtp yana ba ku damar zaɓar cipher TLS da zaɓuɓɓukan yarjejeniya.
• Fakitin BudeSSH da aka sabunta. Ana iya samun cikakken bayyani na haɓakawa anan: OpenSSH 8.7, OpenSSH 8.8. An kashe goyan bayan sa hannun dijital na rsa-sha.
• Adadin tashar jiragen ruwa na gine-ginen AMD64 shine 11325, don aarch64 - 11034, don i386 - 10248. Daga cikin nau'ikan aikace-aikacen a cikin tashar jiragen ruwa: FFmpeg 4.4 GCC 8.4.0 da 11.2.0 GNOME 40.4 Go 1.17DK, da 8DK 302 KDE Aikace-aikacen 11.0.12 KDE Frameworks 16.0.2 LLVM/Clang 21.08.1 LibreOffice 5.85.0 Lua 11.1.0, 7.2.1.2 da 5.1.5 MariaDB 5.2.4 Node.j.5.3.6 PHP 10.6.4 da 12.22.6 .7.3.30 Postfix 7.4.23 PostgreSQL 8.0.10 Python 3.5.12, 13.4 da 2.7.18 Qt 3.8.12 da 3.9.7 Ruby 5.15.2, 6.0.4 da 2.6.8Qte Rust. 2.7.4 Xfce 3.0.2
• Abubuwan da aka sabunta na ɓangare na uku sun haɗa tare da OpenBSD 7.0:
  • Xenocara graphics stack dangane da X.Org 7.7 tare da xserver 1.20.13 + faci, freetype 2.10.4, fontconfig 2.12.4, Mesa 21.1.8, xterm 367, xkeyboard-config 2.20, fonttosfnt 1.2.2.
  • LLVM/Clang 11.1.0 (+ faci)
  • GCC 4.2.1 (+ faci) da 3.3.6 (+ faci)
  • Perl 5.32.1 (+ faci)
  • NSD 4.3.7
  • Zazzagewa 1.13.3
  • Zazzagewa 5.7
  • Binutils 2.17 (+ faci)
  • Gdb 6.3 (+ faci)
  • Laraba 18.12.2020
  • Shafin 2.4.1

source: budenet.ru