Systemd System Manager release 253

Bayan watanni uku da rabi na ci gaba, an gabatar da sakin tsarin sarrafa tsarin 253.

Daga cikin canje-canje a cikin sabon sakin:

• Kunshin ya haɗa da kayan aikin 'ukify', wanda aka tsara don ginawa, tabbatarwa, da samar da sa hannu don hotunan kernel masu haɗin kai (UKI, Unified Kernel Image), waɗanda ke haɗa mai sarrafawa don loda kernel daga UEFI (UEFI boot stub), hoton kernel Linux da kuma yanayin tsarin initrd da aka ɗora a cikin ƙwaƙwalwa, wanda ake amfani da shi don farawa kafin a ɗora tushen fayil ɗin. Wannan kayan aikin yana maye gurbin aikin da umarnin 'dracut --uefi' ya bayar a baya kuma yana ƙara damar yin lissafin canje-canje ta atomatik a cikin fayilolin PE, haɗa initrds, sanya hannu kan hotunan kernel da aka saka, ƙirƙirar hotuna tare da sbsign, amfani da heuristics don tantance kernel uname, tabbatar da hoton splash, da ƙara manufofin PCR da aka sanya hannu waɗanda kayan aikin systemd-measure suka samar.
• Ƙara goyon baya ga mahallin initrd ba'a iyakance ta wurin ajiyar ƙwaƙwalwar ajiya ba, wanda ake amfani da overlayfs maimakon tmpfs. Don irin waɗannan mahallin, systemd baya share duk fayiloli a cikin initrd bayan canza tsarin fayil ɗin tushen.
• An ƙara ma'aunin "OpenFile" zuwa sabis don buɗe fayilolin sabani a cikin tsarin fayil (ko haɗawa zuwa sockets Unix) da wuce bayanan fayil ɗin da aka haɗa zuwa tsarin ƙaddamarwa (misali, lokacin da kuke buƙatar tsara damar yin amfani da fayil don wani abu. sabis mara gata ba tare da canza haƙƙin samun dama ga fayil ba).
• A cikin systemd-cryptenroll, lokacin yin rijistar sabbin maɓallai, yana yiwuwa a buɗe ɓoyayyen ɓoyayyen ɓoyayyen ɓoyayyiyar alamar FIDO2 (-unlock-fido2-na'urar) ba tare da buƙatar kalmar sirri ba. Ana adana takamaiman lambar PIN na mai amfani tare da gishiri don dagula gano ƙarfi.
• Ƙara ReloadLimitIntervalSec da ReloadLimitBurst saituna, da kuma zaɓuɓɓukan layin umarni na kernel (systemd.reload_limit_interval_sec da /systemd.reload_limit_burst) don iyakance ƙarfin aikin baya yana sake farawa.
• Don raka'a, an aiwatar da zaɓin "MemoryZSwapMax" don saita kayan ƙwaƙwalwar ajiya.zswap.max, wanda ke ƙayyade matsakaicin girman zswap.
• Don raka'a, an aiwatar da zaɓin "LogFilterPatterns", wanda ke ba ku damar saita maganganu na yau da kullun don tace fitar da bayanai zuwa log ɗin (ana iya amfani da shi don ware wasu fitarwa ko adana wasu bayanai kawai).
• Raka'o'in iyaka yanzu suna goyan bayan saitin "OOMpolicy" don saita ɗabi'a yayin ƙoƙarin ƙaddamarwa lokacin da ƙananan ƙwaƙwalwar ajiya (an saita zaman shiga zuwa OOMpolicy = ci gaba don kada mai kashe OOM ya ƙare su da ƙarfi).
• An bayyana sabon nau'in sabis - "Nau'in = sanar da-sake saukewa", wanda ke tsawaita nau'in "Nau'i = sanarwa" tare da ikon jira siginar sake farawa don kammala aiki (SIGHUP). Ayyukan systemd-networkd.service, systemd-udevd.service da systemd-logind an canza su zuwa sabon nau'in.
• udev yana amfani da sabon tsarin suna don na'urorin cibiyar sadarwa, bambancin shine na na'urorin USB waɗanda ba a haɗa su da bas ɗin PCI ba, ID_NET_NAME_PATH yanzu an saita don tabbatar da ƙarin sunaye. An aiwatar da ma'aikacin '-=' don masu canjin SYMLINK, yana barin hanyoyin haɗin gwiwa ba a tsara su ba idan an bayyana ƙa'idar ƙara su a baya.
• A cikin tsarin systemd-boot, an sake yin amfani da shukar samar da lambobi na karya a cikin kernel da kuma na bayan faifan. An ƙara tallafi don loda kernel daga ɓangarorin da ba ESP (EFI System Partition) ba, misali, daga firmware ko kai tsaye don QEMU. Yanzu an tantance sigogin SMBIOS don tantance ko za a gudanar da su a cikin yanayin kama-da-wane. An aiwatar da sabon yanayin 'idan-safe', wanda a ciki ake loda takardar shaidar UEFI Secure Boot daga ESP kawai idan an yi la'akari da shi lafiya (yana gudana a cikin injin kama-da-wane).
• Bootctl mai amfani yana aiwatar da ƙirƙira alamun tsarin akan duk tsarin EFI, ban da yanayin haɓakawa. An ƙara 'kernel-identify' da 'kernel-inspect' umarni don nuna nau'in hoton kernel da bayani game da zaɓuɓɓukan layin umarni da sigar kernel, 'cire haɗin kai' don cire fayil ɗin da ke da alaƙa da nau'in rikodin taya na farko, 'cleanup' don cire duka. fayiloli daga kundin adireshin "shiga-token" a cikin ESP da XBOOTLDR, ba su da alaƙa da nau'in rikodin taya na farko. An samar da aiwatar da canjin KERNEL_INSTALL_CONF_ROOT.
• Umurnin 'systemctl list-dependencies' yanzu yana goyan bayan aiwatar da zaɓuɓɓukan ''-type' da '--state', kuma umurnin 'systemctl kexec' yana ƙara goyan baya ga mahalli dangane da Xen hypervisor.
• A cikin fayilolin hanyar sadarwa a cikin sashin [DHCPv4], goyan bayan SocketPriority da QuickAck, RouteMetric=high|matsakaici|ƙananan zaɓuɓɓuka an ƙara yanzu.
• Systemd-repart ya kara zaɓuɓɓukan "- sun haɗa-bangarori", "- ban-bangarori" da "--defer-partitions" don tace ɓangarori ta nau'in UUID, wanda, alal misali, yana ba ku damar gina hotuna a cikin abin da bangare ɗaya yake. an gina shi bisa abubuwan da ke cikin wani bangare . Hakanan an ƙara zaɓin "--sector-size" don ƙayyade girman sashin da aka yi amfani da shi lokacin ƙirƙirar ɓangaren. Ƙara tallafi don ƙirƙirar fayil ɗin erofs. Rage girman saitin yana aiwatar da sarrafa ƙimar "mafi kyau" don zaɓar mafi ƙarancin girman girman hoto.
• systemd-journal-remote yana ba da damar amfani da MaxUse, KeepFree, MaxFileSize da MaxFiles saituna don iyakance yawan amfani da sarari.
• systemd-cryptsetup yana ƙara goyan baya don aika buƙatun aiki zuwa alamun FIDO2 don tantance kasancewar su kafin tantancewa.
• Sabbin sigogi tpm2-measure-bank da tpm2-measure-pcr an ƙara su zuwa crypttab.
• systemd-gpt-auto-generator yana aiwatar da hawan ESP da XBOOTLDR partitions a cikin yanayin "noexec, nosuid, nodev", kuma yana ƙara lissafin tushen tushen da sigogin tushen tushen da suka wuce ta layin umarni na kernel.
• systemd-resolved yana ba da damar saita sigogi masu warwarewa ta hanyar tantance sunan uwar garke, yanki, network.dns da network.search_domains akan layin umarni na kernel.
• Umurnin "systemd-analyze plot" yanzu yana da ikon fitarwa a tsarin JSON lokacin da aka ƙayyade tutar "-json". Hakanan an ƙara sabbin zaɓuɓɓuka "--table" da "-no-legend" don sarrafa fitarwa.
• A cikin 2023, muna shirin kawo ƙarshen tallafi ga ƙungiyoyin v1 da rarrabuwar tsarin shugabanci (inda / usr ke hawa daban daga tushen, ko / bin da / usr / bin, / lib da / usr / lib sun rabu).

source: budenet.ru