Ana samun sakin aikin Wifibox 0.10 don magance matsala tare da amfani da FreeBSD na adaftar mara waya waɗanda ba su da direbobin da suka dace. Ana ba da adaftar da ke da matsala don FreeBSD ta hanyar gudanar da baƙo na Linux, wanda ke ɗaukar direbobin na'urar mara waya ta Linux na asali.
Shigar da tsarin baƙo tare da direbobi ana sarrafa su ta atomatik, kuma duk abubuwan da ake buƙata an haɗa su azaman fakitin wifibox da aka shirya, wanda aka ƙaddamar a taya ta amfani da sabis na rc da aka kawo. Ciki har da canzawa zuwa yanayin bacci ana sarrafa shi daidai. Ana iya amfani da mahallin zuwa kowane katin WiFi da aka tallafa akan Linux, amma an gwada shi da farko akan kwakwalwan kwamfuta na Intel. Mun kuma gwada daidaitaccen aiki akan tsarin tare da Qualcomm Atheros da AMD RZ608 (MediaTek MT7921K) kwakwalwan kwamfuta mara waya.
An ƙaddamar da tsarin baƙon ta amfani da Bhyve hypervisor, wanda ke tsara hanyar isar da kai zuwa katin waya. Yana buƙatar tsarin da ke goyan bayan ƙirƙira kayan aiki (AMD-Vi ko Intel VT-d). Tsarin baƙo ya dogara ne akan rarraba Linux Alpine, wanda aka gina akan ɗakin karatu na tsarin Musl da saitin mai amfani na BusyBox. Girman hoton yana kusan 30MB akan faifai kuma yana cinye kusan 90MB na RAM.
Don haɗa zuwa cibiyar sadarwar mara waya, ana amfani da fakitin wpa_supplicant, fayilolin sanyi waɗanda aka daidaita su tare da saitunan daga babban yanayin FreeBSD. Ana tura soket ɗin sarrafa Unix wanda wpa_supplicant ya ƙirƙira zuwa wurin mai masaukin baki, wanda ke ba ku damar amfani da daidaitattun kayan aikin FreeBSD don haɗawa da aiki tare da hanyar sadarwa mara waya, gami da kayan aikin wpa_cli da wpa_gui (net/wpa_supplicant_gui).
A cikin sabon sakin, an sake fasalin tsarin isar da WPA zuwa babban mahalli, wanda ya ba da damar yin aiki tare da duka wpa_supplicant da hostapd. An rage adadin ƙwaƙwalwar da ake buƙata don tsarin baƙo. An yi watsi da tallafi don FreeBSD 13.0-SAUKI.
Bugu da ƙari, ana iya lura da aikin haɓaka direbobi don katunan mara waya bisa ga kwakwalwan Intel da Realtek, waɗanda aka bayar a cikin FreeBSD. Tare da tallafi daga Gidauniyar FreeBSD, ci gaba yana ci gaba akan sabon direban iwlwifi wanda aka haɗa tare da FreeBSD 13.1. Direban ya dogara ne akan direban Linux da lambar daga tsarin net80211 Linux, yana goyan bayan 802.11ac kuma ana iya amfani dashi tare da sabbin kwakwalwan kwamfuta mara waya ta Intel. Ana loda direba ta atomatik a lokacin taya lokacin da aka samo madaidaicin katin mara waya. Abubuwan da ke cikin tari mara waya ta Linux suna da ƙarfi ta Layer LinuxKPI. A baya can, an tura direban iwm zuwa FreeBSD ta irin wannan hanya.
A layi daya, ci gaban rtw88 da rtw89 direbobi na Realtek RTW88 da RTW89 kwakwalwan kwamfuta mara waya ta fara, waɗanda kuma aka haɓaka ta hanyar jigilar direbobi masu dacewa daga Linux kuma suna aiki ta amfani da Layer LinuxKPI. Direban rtw88 yana shirye don gwaji na farko, yayin da direban rtw89 ke kan ci gaba.
Bugu da ƙari, za mu iya ambaton buga bayanai da ƙayyadaddun amfani masu alaƙa da rauni (CVE-2022-23088) a cikin tari mara waya ta FreeBSD, gyarawa a cikin sabuntawar Afrilu. Rashin lahani yana ba da damar yin amfani da lambar a matakin kwaya ta hanyar aika firam ɗin da aka kera na musamman lokacin da abokin ciniki ke cikin yanayin binciken hanyar sadarwa (a mataki kafin ɗaure SSID). Matsalar ta samo asali ne ta hanyar buffer ambaliya a cikin aikin ieee80211_parse_beacon() yayin da ake rarraba firam ɗin tambarin da wurin shiga ke watsawa. An sami yuwuwar ambaliya ta rashin bincika cewa ainihin girman bayanan ya yi daidai da girman da aka ƙayyade a cikin filin taken. Matsalar tana bayyana kanta a cikin nau'ikan FreeBSD da aka kafa tun 2009.
Daga cikin sauye-sauye mara waya mara waya ta kwanan nan a cikin FreeBSD: haɓaka lokacin taya, wanda aka rage daga 10 seconds zuwa 8 seconds akan tsarin gwaji; aiwatar da gunion GEOM-module don canja wurin zuwa wani sauye-sauyen faifai da aka yi a saman faifai da ke samuwa a cikin yanayin karantawa kawai; don API ɗin kernel crypto API, an shirya XChaCha20-Poly1305 AEAD da curve25519 abubuwan da ake buƙata don direban WireGuard na VPN.
source: budenet.ru