Sakin OpenBSD 7.1

An gabatar da tsarin tsarin aiki na UNIX-kamar OpenBSD 7.1 kyauta. Theo de Raadt ne ya kafa aikin OpenBSD a cikin 1995 bayan rikici da masu haɓaka NetBSD, sakamakon haka an hana Theo damar shiga ma'ajiyar NetBSD CVS. Bayan wannan, Theo de Raadt da gungun mutane masu ra'ayi iri ɗaya sun ƙirƙiri sabon tsarin aiki na buɗewa bisa tushen bishiyar NetBSD, babban burin ci gaba wanda shine ɗaukar hoto (ana tallafawa dandamali na kayan masarufi 13), daidaitawa, ingantaccen aiki, tsaro mai ƙarfi. da hadedde kayan aikin sirri. Cikakken hoton ISO na tsarin tushen OpenBSD 7.1 shine 580 MB.

Baya ga tsarin aiki da kansa, aikin OpenBSD sananne ne don abubuwan da aka haɗa, waɗanda suka zama tartsatsi a cikin sauran tsarin kuma sun tabbatar da kansu a matsayin ɗayan mafi aminci da ingantaccen mafita. Daga cikin su: LibreSSL (cokali mai yatsu na OpenSSL), OpenSSH, PF fakiti tace, OpenBGPD da OpenOSPFD routing daemons, OpenNTPD NTP uwar garken, OpenSMTPD mail uwar garken, rubutu m multiplexer (mai kama da allon GNU) tmux, gano daemon tare da aiwatar da yarjejeniya ta IDENT, madadin BSDL. GNU groff kunshin - mandoc, yarjejeniya don tsara tsarin masu haƙuri da kuskure CARP (Ka'idar Redundancy Address), uwar garken http mai nauyi, mai amfani da aiki tare na fayil na OpenRSYNC.

Babban haɓakawa:

  • Tallafi ga kwamfutocin Mac sanye take da guntu na Apple M1 (Apple Silicon) ARM, kamar Apple M1 Pro/Max da Apple T2 Macs, an sanar da su azaman shirye-shiryen amfani. Ƙara direbobi don SPI, I2C, DMA mai sarrafa, madannai, tabawa, iko da sarrafa ayyuka. Yana ba da goyan baya don Wi-Fi, GPIO, framebuffer, USB, allo, na'urorin tafiyar NVMe.
  • Ingantattun tallafi don gine-ginen ARM64. Ƙara direbobi gpiocharger, gpiolds da gpiokeys, suna ba da tallafi don caji, fitilu da maɓallan da aka haɗa zuwa GPIO (misali, ana yin wannan a cikin Pinebook Pro). An ƙara sabbin direbobi: mpfclock (PolarFire SoC MSS mai kula da agogo), cdsdhc (Cadence SD/SDIO/eMMC mai kula da masaukin baki), mpfiic (PolarFire SoC MSS I2C mai sarrafa) da mpfgpio (PolarFire SoC MSS GPIO).
  • Ingantattun tallafi don gine-ginen RISC-V 64, wanda aka haɗa da direbobin uhid da fido, da goyan bayan shigarwa akan fayafai na GPT.
  • Mai amfani mount_msdos yana ba da damar amfani da dogon sunayen fayil ta tsohuwa.
  • An sake yin aikin lambar tattara shara don kwasfa na unix.
  • sysctl hw.perfpolicy an saita zuwa “atomatik” ta tsohuwa, wanda ke nufin cewa ana kunna cikakken yanayin aiki lokacin da aka haɗa wutar lantarki kuma ana amfani da algorithm daidaitacce lokacin da baturi ya kunna.
  • Ingantattun tallafi don tsarin multiprocessor (SMP). Matsalolin taron don tashoshi marasa suna, kqread, audio da soket, da kuma tsarin BPF, an canza su zuwa nau'in mai-mp-aminci. An sake rubuta tsarin zabe, zaɓi, ppoll da pselect kuma yanzu ana aiwatar da su a saman kqueue. An cire kevent, getsockname, samun peername, karɓa da karɓar kiran tsarin4 daga toshewa. An ƙara ƙirar kernel don kaya da adana ayyukan atomic, yana ba da damar yin amfani da int da dogayen iri a cikin abubuwan tsarin da ake amfani da kirgawa.
  • Ana aiki tare da aiwatar da tsarin drm (Direct Rendering Manager) tare da Linux kernel 5.15.26 (saki na ƙarshe - 5.10.65). Direban inteldrm ya ƙara tallafi ga kwakwalwan kwamfuta na Intel bisa tushen Elkhart Lake, Jasper Lake da microarchitectures Lake Lake. Direban amdgpu yana goyan bayan APU/GPU Van Gogh, Rembrandt "Yellow Carp" Ryzen 6000, Navi 22 "Navy Flounder", Navi 23 "Dimgrey Cavefish" da Navi 24 "Beige Goby".
  • An kunna ma'anar rubutun Subpixel a cikin ɗakin karatu na FreeType.
  • Ƙara mai amfani na ainihi don nuna cikakkiyar hanyar zuwa fayil.
  • Ƙara umarnin "ls rogue" zuwa mai amfani na rcctl don nuna tsarin tsarin baya waɗanda ke gudana amma ba a haɗa su cikin rc.conf.local.
  • BPFtrace yanzu yana goyan bayan masu canji don cak. Rubutun kprofile.bt don yin bayanin bayanan kernel da runqlat.bt don gano jinkiri a cikin mai tsarawa an ƙara su zuwa btrace.
  • Ƙara goyon baya ga RFC6840 zuwa libc, wanda ke bayyana goyon baya ga tutar AD da saitin 'trust-ad' na DNSSEC.
  • Apm da apmd sun haɗa da nuna lokacin cajin baturi da aka annabta.
  • An ba da ikon adana bayanan iyawa a /etc/login.conf.d don sauƙaƙe ƙara azuzuwan asusun ku daga fakiti.
  • Malloc yana ba da caching don yankunan ƙwaƙwalwar ajiya masu girma daga 128k zuwa 2M.
  • Rumbun tarihin pax yana goyan bayan faɗuwar kanun labarai tare da bayanan mtime, atime da ctime.
  • Ƙara wani zaɓi na "-k" zuwa gzip da gunzip utilities don ajiye tushen fayil.
  • An ƙara waɗannan zaɓuɓɓuka masu zuwa zuwa mai amfani na openrsync: “—compare-dest” don bincika kasancewar fayiloli a cikin ƙarin kundayen adireshi; "-max-size" da "-min-size" don iyakance girman fayil.
  • Ƙara umarnin seq don buga jerin lambobi.
  • An motsa aiwatar da software na duniya na ayyukan trigonometric daga FreeBSD 13 (aiwatar da masu tarawa don x86 an kashe su).
  • An motsa aiwatar da ayyukan lrint, lrintf, llrint da llrintf daga FreeBSD (a da an yi amfani da aiwatarwa daga NetBSD).
  • Fdisk mai amfani ya ƙunshi sauye-sauye da yawa da gyare-gyare masu alaƙa da aiki tare da sassan diski.
  • Ƙara goyon baya don sabon kayan aiki, gami da Intel PCH GPIO mai sarrafa (don dandamali na Cannon Lake H da Tiger Lake H), NXP PCF85063A/TP RTC, Synopsys Designware UART, Intel 2.5Gb Ethernet, SIMCom SIM7600, RTL8156B, MediaTek MT7601U USB wifi, wifi4387 wifiXNUMXU
  • Kunshin ya haɗa da firmware mai lasisi don kwakwalwan kwamfuta mara waya ta Realtek, yana ba ku damar amfani da rsu, rtwn da direbobin urtwn ba tare da zazzage firmware da hannu ba.
  • Direbobin ixl (Intel Ethernet 700), ix (Intel 82598/82599/X540/X550) da kuma aq (Aquantia AQC1xx) direbobi sun haɗa da goyan bayan sarrafa kayan aikin na alamun VLAN da ƙididdigewa / tabbatarwa ga IPV4, TCP4/6 da UDP4/6.
  • Ƙara direban sauti don kwakwalwan kwamfuta na Intel Jasper Lake. Ƙara goyon baya ga mai sarrafa wasan XBox One.
  • Tarin mara waya ta IEEE 802.11 yana ba da tallafi ga tashoshi 40MHz don yanayin 802.11n da tallafi na farko don daidaitaccen 802.11ac (VHT). An ƙara mai sarrafa bayanan baya na zaɓi don direbobi. Lokacin zabar wurin shiga, maki tare da tashoshi 5GHz yanzu ana ba da fifiko, sannan kawai an zaɓi maki tare da tashoshi 2GHz.
  • An sake rubuta aiwatar da direban vxlan, wanda yanzu yana aiki ba tare da tsarin gada ba.
  • Mai sakawa ya sake yin dabara don kiran aikin pkg_add don rage girman motsin fayil yayin aiwatar da sabuntawa. Fayil ɗin install.site ya rubuta tsarin shigarwa da haɓaka tsarin saitin. Ga duk gine-gine, an ƙara firmware, wanda aka ba da izinin rarrabawa a cikin samfuran ɓangare na uku. Don shigar da firmware na mallakar mallakar da ke kan kafofin watsa labarai na shigarwa, ana amfani da fw_update mai amfani.
  • A cikin xterm, an kashe bin diddigin linzamin kwamfuta ta tsohuwa saboda dalilai na tsaro.
  • usbhidctl da usbhidaction suna ba da keɓancewar hanyar shiga tsarin fayil ta amfani da kiran tsarin buɗewa.
  • Ta hanyar tsoho, dhcpd kuma yana ba da haɗe-haɗe zuwa musaya na cibiyar sadarwa waɗanda ke cikin yanayin rashin aiki ('ƙasa'), don tabbatar da cewa an karɓi fakiti nan da nan bayan an kunna haɗin cibiyar sadarwa.
  • OpenSMTPD (smtpd) yana da damar duba TLS ta tsohuwa don haɗin "smtps://" da "smtp+tls: //" masu fita.
  • httpd ya aiwatar da duba sigar ka'ida, ya ƙara ikon ayyana nasa fayilolin tare da rubutun kuskure, da haɓaka sarrafa bayanan da aka matsa, gami da ƙari na zaɓin gzip-static zuwa httpd.conf don isar da fayilolin da aka riga aka matsa tare da saitin tutar gzip. a cikin rubutun abun ciki.
  • A cikin IPsec, sigar proto daga iked.conf tana ba da damar tantance jerin ladabi. Ƙara umarnin "show certinfo" zuwa ikectl mai amfani don nuna amintattun CAs da takaddun shaida. iked ya inganta sarrafa rarrabuwar kawuna.
  • Ƙara goyon baya don duba maɓallan jama'a na na'ura mai ba da hanya tsakanin hanyoyin sadarwa BGPsec zuwa abokin ciniki rpki da ingantaccen duba takaddun shaida na X509. Ƙara cache na ingantattun fayiloli. Ingantattun daidaituwa tare da RFC 6488.
  • bgpd ya kara ma'aunin "tashar jiragen ruwa", wanda za'a iya amfani dashi a cikin sassan "saurara" da "makwabci" don ɗaure zuwa lambar tashar tashar jiragen ruwa mara daidaito. An sake fasalin lambar don yin aiki tare da RIB (Base Information Base), wanda aka yi tare da ido don ba da tallafin hanyoyi masu yawa a nan gaba.
  • Manajan taga na wasan bidiyo tmux ("terminal multiplexer") ya faɗaɗa iyawa don fitar da launi. Ƙara tsarin tsari-iyaka, siginan-launi da umarni-style siginan kwamfuta.
  • LibreSSL ya fitar da shi daga goyon bayan OpenSSL don RFC 3779 (X.509 kari don adiresoshin IP da tsarin masu zaman kansu) da tsarin fayyace takaddun shaida (takardar jama'a mai zaman kanta na duk takaddun takaddun da aka bayar da sokewa, wanda ke ba da damar duba duk canje-canje da ayyuka na kansa. hukumomin takaddun shaida, kuma suna ba ku damar bin diddigin duk wani yunƙuri na ƙirƙirar bayanan karya a ɓoye). Daidaituwa tare da OpenSSL 1.1 an inganta sosai kuma sunaye na TLSv1.3 sunyi daidai da OpenSSL. Yawancin ayyuka an canza su zuwa amfani da calloc(). An ƙara babban yanki na sababbin kira zuwa libssl da libcrypto.
  • Fakitin BudeSSH da aka sabunta. Don cikakken bayyani na haɓakawa, duba sake dubawa na OpenSSH 8.9 da OpenSSH 9.0. An matsar da kayan aikin scp ta tsohuwa don amfani da SFTP maimakon ƙa'idar SCP/RCP na gado.
  • Adadin tashar jiragen ruwa don gine-ginen AMD64 shine 11301 (daga 11325), don aarch64 - 11081 (daga 11034), don i386 - 10136 (daga 10248). Daga cikin nau'ikan aikace-aikacen a cikin tashar jiragen ruwa: Alamar 16.25.1, 18.11.1 da 19.3.1 Audacity 2.4.2 CMake 3.20.3 Chromium 100.0.4896.75 Emacs 27.2 FFmpeg 4.4.1 GCC da 8.4.0 GCC. .11.2.0 JDK 41.5u1.17.7, 8 da 322 KDE Aikace-aikace 11.0.14 KDE Frameworks 17.0.2 Krita 21.12.2 LLVM/Clang 5.91.0 LibreOffice 5.0.2 Lua, 13.0.0 da Maria 7.3.2.2. .5.1.5 Mono 5.2.4 Firefox 5.3.6 da ESR 10.6.7 Thunderbird 6.12.0.122 Mutt 99.0 da NeoMutt 91.8.0 Node.js 91.8.0 OpenLDAP 2.2.2x PHP 20211029 PostgreSQL 16.14.2 Python 2.4.59, 7.4.28, 8.0.17 da 8.1.4 Qt 3.5.14 da 14.2 R 2.7.18 Ruby 3.8.13, 3.9.12 da 3.10.4 Rust 5.15.2 S. da 6.0.4 .4.1.2 Shotcut 2.7.5 Sudo 3.0.3 Suricata 3.1.1 Tcl/Tk 1.59.0 da 2.8.17 TeX Live 3.38.2 Vim 21.10.31 da Neovim 1.9.10 Xfce 6.0.4
  • Abubuwan da aka sabunta na ɓangare na uku sun haɗa tare da OpenBSD 7.1:
    • Xenocara graphics stack dangane da X.Org 7.7 tare da xserver 1.21.1 + faci, freetype 2.11.0, fontconfig 2.12.94, Mesa 21.3.7, xterm 369, xkeyboard-config 2.20, fonttosfnt 1.2.2.
    • LLVM/Clang 13.0.0 (+ faci)
    • GCC 4.2.1 (+ faci) da 3.3.6 (+ faci)
    • Perl 5.32.1 (+ faci)
    • NSD 4.4.0
    • Zazzagewa 1.15.0
    • Zazzagewa 5.7
    • Binutils 2.17 (+ faci)
    • Gdb 6.3 (+ faci)
    • Laraba 12.10.2021
    • Shafin 2.4.7

source: budenet.ru

Add a comment