Systemd System Manager release 253

Bayan watanni uku da rabi na ci gaba, an gabatar da sakin tsarin sarrafa tsarin 253.

Daga cikin canje-canje a cikin sabon sakin:

• Kunshin ya ƙunshi kayan aikin 'ukify', wanda aka ƙera don ginawa, tabbatarwa da samar da sa hannun hannu don haɗe-haɗen hotunan kwaya (UKI, Haɗin Kernel Hoton), haɗa mai sarrafa don loda kwaya daga UEFI (UEFI boot stub), hoton kernel Linux da yanayin tsarin da aka loda cikin ƙwaƙwalwar ajiya initrd, ana amfani da shi don farawa na farko a mataki kafin hawa tsarin fayil ɗin tushen. Mai amfani yana maye gurbin ayyukan da aka bayar a baya ta umarnin 'dracut -uefi' kuma ya cika shi tare da damar yin ƙididdige ƙididdigewa ta atomatik a cikin fayilolin PE, haɗa initrds, sanya hannu kan hotunan kwaya, ƙirƙirar hotuna tare da sbsign, heuristics don tantance sunan kernel, dubawa hoto tare da fantsama allo da ƙara sanya hannu kan manufofin PCR wanda tsarin amfani da ma'auni ya ƙirƙira.
• Ƙara goyon baya ga mahallin initrd ba'a iyakance ta wurin ajiyar ƙwaƙwalwar ajiya ba, wanda ake amfani da overlayfs maimakon tmpfs. Don irin waɗannan mahallin, systemd baya share duk fayiloli a cikin initrd bayan canza tsarin fayil ɗin tushen.
• An ƙara ma'aunin "OpenFile" zuwa sabis don buɗe fayilolin sabani a cikin tsarin fayil (ko haɗawa zuwa sockets Unix) da wuce bayanan fayil ɗin da aka haɗa zuwa tsarin ƙaddamarwa (misali, lokacin da kuke buƙatar tsara damar yin amfani da fayil don wani abu. sabis mara gata ba tare da canza haƙƙin samun dama ga fayil ba).
• A cikin systemd-cryptenroll, lokacin yin rijistar sabbin maɓallai, yana yiwuwa a buɗe ɓoyayyen ɓoyayyen ɓoyayyen ɓoyayyiyar alamar FIDO2 (-unlock-fido2-na'urar) ba tare da buƙatar kalmar sirri ba. Ana adana takamaiman lambar PIN na mai amfani tare da gishiri don dagula gano ƙarfi.
• Ƙara ReloadLimitIntervalSec da ReloadLimitBurst saituna, da kuma zaɓuɓɓukan layin umarni na kernel (systemd.reload_limit_interval_sec da /systemd.reload_limit_burst) don iyakance ƙarfin aikin baya yana sake farawa.
• Don raka'a, an aiwatar da zaɓin "MemoryZSwapMax" don saita kayan ƙwaƙwalwar ajiya.zswap.max, wanda ke ƙayyade matsakaicin girman zswap.
• Don raka'a, an aiwatar da zaɓin "LogFilterPatterns", wanda ke ba ku damar saita maganganu na yau da kullun don tace fitar da bayanai zuwa log ɗin (ana iya amfani da shi don ware wasu fitarwa ko adana wasu bayanai kawai).
• Raka'o'in iyaka yanzu suna goyan bayan saitin "OOMpolicy" don saita ɗabi'a yayin ƙoƙarin ƙaddamarwa lokacin da ƙananan ƙwaƙwalwar ajiya (an saita zaman shiga zuwa OOMpolicy = ci gaba don kada mai kashe OOM ya ƙare su da ƙarfi).
• An bayyana sabon nau'in sabis - "Nau'in = sanar da-sake saukewa", wanda ke tsawaita nau'in "Nau'i = sanarwa" tare da ikon jira siginar sake farawa don kammala aiki (SIGHUP). Ayyukan systemd-networkd.service, systemd-udevd.service da systemd-logind an canza su zuwa sabon nau'in.
• udev yana amfani da sabon tsarin suna don na'urorin cibiyar sadarwa, bambancin shine na na'urorin USB waɗanda ba a haɗa su da bas ɗin PCI ba, ID_NET_NAME_PATH yanzu an saita don tabbatar da ƙarin sunaye. An aiwatar da ma'aikacin '-=' don masu canjin SYMLINK, yana barin hanyoyin haɗin gwiwa ba a tsara su ba idan an bayyana ƙa'idar ƙara su a baya.
• A cikin boot-boot, watsa iri don masu samar da lambar bazuwar a cikin kernel da kuma bayan diski an sake yin aiki. Ƙara goyon baya don loda kernel ba kawai daga ESP (EFI System Partition), misali, daga firmware ko kai tsaye don QEMU. Ana ba da tantance sigogin SMBIOS don tantance farawa a cikin yanayin haɓakawa. An aiwatar da sabon yanayin 'idan-lafiya' wanda a cikinsa ana ɗora takaddun takaddun Boot na UEFI Secure Boot daga ESP kawai idan ana ɗaukar shi lafiya (yana gudana a cikin injin kama-da-wane).
• Bootctl mai amfani yana aiwatar da ƙirƙira alamun tsarin akan duk tsarin EFI, ban da yanayin haɓakawa. An ƙara 'kernel-identify' da 'kernel-inspect' umarni don nuna nau'in hoton kernel da bayani game da zaɓuɓɓukan layin umarni da sigar kernel, 'cire haɗin kai' don cire fayil ɗin da ke da alaƙa da nau'in rikodin taya na farko, 'cleanup' don cire duka. fayiloli daga kundin adireshin "shiga-token" a cikin ESP da XBOOTLDR, ba su da alaƙa da nau'in rikodin taya na farko. An samar da aiwatar da canjin KERNEL_INSTALL_CONF_ROOT.
• Umurnin 'systemctl list-dependencies' yanzu yana goyan bayan aiwatar da zaɓuɓɓukan ''-type' da '--state', kuma umurnin 'systemctl kexec' yana ƙara goyan baya ga mahalli dangane da Xen hypervisor.
• A cikin fayilolin hanyar sadarwa a cikin sashin [DHCPv4], goyan bayan SocketPriority da QuickAck, RouteMetric=high|matsakaici|ƙananan zaɓuɓɓuka an ƙara yanzu.
• Systemd-repart ya kara zaɓuɓɓukan "- sun haɗa-bangarori", "- ban-bangarori" da "--defer-partitions" don tace ɓangarori ta nau'in UUID, wanda, alal misali, yana ba ku damar gina hotuna a cikin abin da bangare ɗaya yake. an gina shi bisa abubuwan da ke cikin wani bangare . Hakanan an ƙara zaɓin "--sector-size" don ƙayyade girman sashin da aka yi amfani da shi lokacin ƙirƙirar ɓangaren. Ƙara tallafi don ƙirƙirar fayil ɗin erofs. Rage girman saitin yana aiwatar da sarrafa ƙimar "mafi kyau" don zaɓar mafi ƙarancin girman girman hoto.
• systemd-journal-remote yana ba da damar amfani da MaxUse, KeepFree, MaxFileSize da MaxFiles saituna don iyakance yawan amfani da sarari.
• systemd-cryptsetup yana ƙara goyan baya don aika buƙatun aiki zuwa alamun FIDO2 don tantance kasancewar su kafin tantancewa.
• Sabbin sigogi tpm2-measure-bank da tpm2-measure-pcr an ƙara su zuwa crypttab.
• systemd-gpt-auto-generator yana aiwatar da hawan ESP da XBOOTLDR partitions a cikin yanayin "noexec, nosuid, nodev", kuma yana ƙara lissafin tushen tushen da sigogin tushen tushen da suka wuce ta layin umarni na kernel.
• systemd-resolved yana ba da damar saita sigogi masu warwarewa ta hanyar tantance sunan uwar garke, yanki, network.dns da network.search_domains akan layin umarni na kernel.
• Umurnin "systemd-analyze plot" yanzu yana da ikon fitarwa a tsarin JSON lokacin da aka ƙayyade tutar "-json". Hakanan an ƙara sabbin zaɓuɓɓuka "--table" da "-no-legend" don sarrafa fitarwa.
• A cikin 2023, muna shirin kawo ƙarshen tallafi ga ƙungiyoyin v1 da rarrabuwar tsarin shugabanci (inda / usr ke hawa daban daga tushen, ko / bin da / usr / bin, / lib da / usr / lib sun rabu).

source: budenet.ru