Kev tso tawm ntawm Fedora 38 tawm tswv yim los siv thawj theem ntawm kev hloov pauv mus rau cov txheej txheem khau raj niaj hnub yav dhau los tau hais los ntawm Lennart Potting rau kev kuaj xyuas tag nrho, npog tag nrho cov theem ntawm firmware mus rau cov neeg siv qhov chaw, tsis yog cov ntsiav thiab bootloader xwb. Lub tswv yim tseem tsis tau raug txiav txim siab los ntawm FESCo (Fedora Engineering Steering Committee), uas yog lub luag haujlwm rau kev tsim kho ntawm Fedora faib.
Cov khoom siv rau kev siv lub tswv yim tau muab tso rau hauv systemd 252 thiab boil rau siv, es tsis txhob ntawm cov duab initrd tsim nyob rau hauv lub zos system thaum txhim kho lub pob kernel, ib tug unified kernel duab UKI (Unified Kernel Image), generated nyob rau hauv lub tis. infrastructure thiab digitally kos npe los ntawm kev faib khoom. UKI sib xyaw ua ke hauv ib cov ntaub ntawv tus neeg tuav ntaub ntawv rau thauj cov ntsiav los ntawm UEFI (UEFI khau raj stub), lub Linux ntsiav duab thiab initrd system ib puag ncig loaded rau hauv nco. Thaum hu rau UKI duab los ntawm UEFI, nws muaj peev xwm txheeb xyuas qhov ncaj ncees thiab kev ntseeg siab ntawm cov kos npe digital tsis yog tsuas yog cov ntsiav xwb, tab sis kuj tseem muaj cov ntsiab lus ntawm initrd, kev kuaj xyuas qhov tseeb uas yog qhov tseem ceeb txij li hauv ib puag ncig no cov yuam sij rau decrypting. lub hauv paus FS yog retrieve.
Vim muaj kev hloov pauv tseem ceeb ua ntej, qhov kev siv tau npaj yuav muab faib ua ntau theem. Hauv thawj theem, UKI kev txhawb nqa yuav raug ntxiv rau bootloader thiab kev tshaj tawm ntawm cov duab xaiv UKI yuav pib, uas yuav tsom mus rau booting virtual machines nrog cov txheej txheem txwv thiab cov tsav tsheb, nrog rau cov cuab yeej cuam tshuam nrog kev txhim kho thiab hloov kho UKI . Nyob rau theem thib ob thiab thib peb, nws tau npaj kom txav mus deb ntawm qhov chaw dhau ntawm cov kab hais kom ua kab thiab tsis txhob khaws cov yuam sij hauv initrd.
Tau qhov twg los: opennet.ru