{"id":52353,"date":"2019-11-06T00:00:00","date_gmt":"2019-11-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/reliz-distributiva-red-hat-enterprise-linux-8-1"},"modified":"2020-02-18T14:00:03","modified_gmt":"2020-02-18T11:00:03","slug":"reliz-distributiva-red-hat-enterprise-linux-8-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1","title":{"rendered":"A Red Hat Enterprise Linux 8.1 disztrib\u00faci\u00f3 kiad\u00e1sa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A Red Hat v\u00e1llalat <noindex><a rel=\"nofollow\" href=\"https:\/\/www.redhat.com\/en\/about\/press-releases\/red-hat-ups-iq-intelligent-operating-system-latest-release-red-hat-enterprise-linux-8\">kiadta<\/a><\/noindex> disztrib\u00faci\u00f3 <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/products\/red-hat-enterprise-linux\/\">Red Hat Enterprise Linux 8.1<\/a><\/noindex>. A telep\u00edt\u0151csomagok x86_64, s390x (IBM System z), ppc64le \u00e9s Aarch64 architekt\u00far\u00e1kra k\u00e9sz\u00fcltek, de  <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/downloads\/\">el\u00e9rhet\u0151k<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/www.redhat.com\/en\/technologies\/linux-platforms\/enterprise-linux\/try-it\">let\u00f6lt\u00e9sre<\/a><\/noindex> csak a Red Hat Customer Portal regisztr\u00e1lt felhaszn\u00e1l\u00f3i sz\u00e1m\u00e1ra. A Red Hat Enterprise Linux 8 forr\u00e1sk\u00f3d\u00fa rpm-csomagjai a <noindex><a rel=\"nofollow\" href=\"https:\/\/git.centos.org\/\">Git-reposzitorium<\/a><\/noindex> CentOS-on kereszt\u00fcl terjeszt\u00e9sre ker\u00fclnek. A RHEL 8.x \u00e1g legal\u00e1bb 2029-ig t\u00e1mogatott lesz.<\/p>\n<p>A Red Hat Enterprise Linux 8.1 lett az els\u0151 kiad\u00e1s, amelyet az \u00faj el\u0151re megj\u00f3solhat\u00f3 fejleszt\u00e9si ciklus szerint k\u00e9sz\u00edtettek, ami f\u00e9l \u00e9vente, el\u0151re meghat\u00e1rozott id\u0151pontokban val\u00f3s\u00edtja meg a kiad\u00e1sokat. A pontos inform\u00e1ci\u00f3k a kiad\u00e1si id\u0151pontokr\u00f3l lehet\u0151v\u00e9 teszik a k\u00fcl\u00f6nb\u00f6z\u0151 projektek fejleszt\u00e9si \u00fctemterv\u00e9nek szinkroniz\u00e1l\u00e1s\u00e1t, a kiad\u00e1s el\u0151k\u00e9sz\u00edt\u00e9s\u00e9t \u00e9s a friss\u00edt\u00e9sek alkalmaz\u00e1s\u00e1nak id\u0151pontj\u00e1nak \u00fctemez\u00e9s\u00e9t. <\/p>\n<p>Megjegyzend\u0151, hogy az \u00faj <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/support\/policy\/updates\/errata\/\">\u00e9lettartam<\/a><\/noindex> a RHEL term\u00e9kek t\u00f6bb szintet \u00f6lel fel, bele\u00e9rtve a Fed\u00f3r\u00e1t is, mint a \u00faj lehet\u0151s\u00e9gek megval\u00f3s\u00edt\u00e1s\u00e1nak alapj\u00e1t,  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51556\">CentOS Stream<\/a><\/noindex> a k\u00f6vetkez\u0151 RHEL k\u00f6ztes kiad\u00e1s\u00e1hoz (rolling-v\u00e1ltozat RHEL) k\u00e9sz\u00edtett csomagokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s \u00e9rdek\u00e9ben,<br \/>\n minimalista univerz\u00e1lis alapk\u00e9pet (UBI, Universal Base Image) az alkalmaz\u00e1sok izol\u00e1lt kont\u00e9nerekben val\u00f3 futtat\u00e1s\u00e1hoz \u00e9s  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51366\">RHEL Developer Subscription<\/a><\/noindex> a RHEL ingyenes haszn\u00e1lat\u00e1ra a fejleszt\u00e9s sor\u00e1n.<\/p>\n<p>Kulcsok <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/8\/html-single\/8.1_release_notes\/index\">v\u00e1ltoz\u00e1sok<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Teljes k\u00f6r\u0171 t\u00e1mogat\u00e1st kapott a Live-patch alkalmaz\u00e1si mechanizmus (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=39235\">kpatch<\/a><\/noindex>) a Linux kernel sebezhet\u0151s\u00e9geinek jav\u00edt\u00e1s\u00e1hoz a rendszer \u00fajraind\u00edt\u00e1sa \u00e9s le\u00e1ll\u00edt\u00e1sa n\u00e9lk\u00fcl. Kor\u00e1bban a kpatch a k\u00eds\u00e9rleti lehet\u0151s\u00e9gek k\u00f6z\u00e9 tartozott;\n<li class=\"l\"> A keretrendszer alapj\u00e1n <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/linux-application-whitelisting\/fapolicyd\">fapolicyd<\/a><\/noindex> lehet\u0151v\u00e9 teszi a feh\u00e9r- \u00e9s feketelista alkalmaz\u00e1sok l\u00e9trehoz\u00e1s\u00e1t, amelyek meghat\u00e1rozz\u00e1k, mely programokat futtathatja a felhaszn\u00e1l\u00f3, \u00e9s melyeket nem (p\u00e9ld\u00e1ul a nem ellen\u0151rz\u00f6tt k\u00fcls\u0151 v\u00e9grehajthat\u00f3 f\u00e1jlok futtat\u00e1s\u00e1nak blokkol\u00e1s\u00e1ra). A blokkol\u00e1sr\u00f3l vagy enged\u00e9lyez\u00e9sr\u0151l a program neve, el\u00e9r\u00e9si \u00fatja, tartalom hash-a \u00e9s MIME-t\u00edpusa alapj\u00e1n hozhat\u00f3 d\u00f6nt\u00e9s. A szab\u00e1lyok ellen\u0151rz\u00e9se a system call open() \u00e9s exec() h\u00edv\u00e1sok sor\u00e1n t\u00f6rt\u00e9nik, ami negat\u00edvan befoly\u00e1solhatja a teljes\u00edtm\u00e9nyt;\n<li class=\"l\"> Az SELinux profilok, amelyek az elszigetelt kont\u00e9nerekkel val\u00f3 haszn\u00e1latra \u00f6sszpontos\u00edtanak, lehet\u0151v\u00e9 teszik a futtatott szolg\u00e1ltat\u00e1sok hozz\u00e1f\u00e9r\u00e9s\u00e9nek finomabb kezel\u00e9s\u00e9t a gazda rendszer er\u0151forr\u00e1saihoz. Az adott kont\u00e9ner saj\u00e1toss\u00e1gainak figyelembev\u00e9tel\u00e9vel a kont\u00e9nerekhez val\u00f3 SELinux szab\u00e1lyok gener\u00e1l\u00e1s\u00e1hoz egy \u00faj udica seg\u00e9dprogram ker\u00fclt bevezet\u00e9sre, amely lehet\u0151v\u00e9 teszi, hogy hozz\u00e1f\u00e9r\u00e9st biztos\u00edtson csak a sz\u00fcks\u00e9ges k\u00fcls\u0151 er\u0151forr\u00e1sokhoz, mint p\u00e9ld\u00e1ul t\u00e1rol\u00f3k, eszk\u00f6z\u00f6k \u00e9s h\u00e1l\u00f3zat. Az SELinux seg\u00e9dprogramokat (libsepol, libselinux, libsemanage, policycoreutils, checkpolicy, mcstrans) 2.9-es kiad\u00e1sra friss\u00edtett\u00e9k, m\u00edg a SETools csomag 4.2.2-es verzi\u00f3ra friss\u00fclt.\n<p>\u00daj SELinux t\u00edpus ker\u00fclt hozz\u00e1ad\u00e1sra &#8212; boltd_t, amely korl\u00e1tozza a boltd-t, a Thunderbolt 3 interf\u00e9sszel rendelkez\u0151 eszk\u00f6z\u00f6k kezel\u00e9s\u00e9re szolg\u00e1l\u00f3 folyamatot (a boltd mostant\u00f3l SELinux \u00e1ltal korl\u00e1tozott kont\u00e9nerben fut). \u00daj SELinux szab\u00e1lyoszt\u00e1ly ker\u00fclt hozz\u00e1ad\u00e1sra &#8212; bpf, amely kezeli a Berkeley Packet Filter (BPF) h\u00edv\u00e1sait \u00e9s vizsg\u00e1lja az eBPF alkalmaz\u00e1sokat;<\/p>\n<li class=\"l\"> A routing protokollok stackje ker\u00fclt bevezet\u00e9sre. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=46323\">FRRouting<\/a><\/noindex> (BGP4, MP-BGP, OSPFv2, OSPFv3, RIPv1, RIPv2, RIPng, PIM-SM\/MSDP, LDP, IS-IS), amely felv\u00e1ltotta a kor\u00e1bban haszn\u00e1lt Quagga csomagot (a FRRouting a Quagga el\u00e1gaz\u00e1sa, \u00edgy a kompatibilit\u00e1s megmaradt).\n<li class=\"l\"> A LUKS2 form\u00e1tum\u00fa titkos\u00edtott part\u00edci\u00f3khoz hozz\u00e1ad\u00f3dott a blokkeszk\u00f6z\u00f6k \u00e9l\u0151 \u00fajrak\u00f3dol\u00e1s\u00e1nak t\u00e1mogat\u00e1sa, an\u00e9lk\u00fcl, hogy megszak\u00edtan\u00e1k a haszn\u00e1latukat a rendszeren (p\u00e9ld\u00e1ul most m\u00e1r megv\u00e1ltoztathat\u00f3 a kulcs vagy a titkos\u00edt\u00e1si algoritmus a part\u00edci\u00f3 lev\u00e1laszt\u00e1sa n\u00e9lk\u00fcl).\n<li class=\"l\"> Az OpenSCAP keretrendszerben hozz\u00e1ad\u00f3dott az SCAP 1.3 (Security Content Automation Protocol) \u00faj verzi\u00f3j\u00e1nak t\u00e1mogat\u00e1sa.\n<li class=\"l\"> Az OpenSSH 8.0p1, Tuned 2.12, chrony 3.5, samba 4.10.4 verzi\u00f3k friss\u00edtve lettek. Az AppStream t\u00e1rol\u00f3ba \u00faj PHP 7.3, Ruby 2.6, Node.js 12 \u00e9s nginx 1.16 \u00e1gakkal rendelkez\u0151 modulok ker\u00fcltek hozz\u00e1ad\u00e1sra (a kor\u00e1bbi \u00e1gakkal rendelkez\u0151 modulok friss\u00edt\u00e9se folytat\u00f3dik). A Software Collection k\u00e9szletbe csomagok ker\u00fcltek GCC 9, LLVM 8.0.1, Rust 1.37 \u00e9s Go 1.12.8 verzi\u00f3kkal.\n<li class=\"l\"> A SystemTap nyomk\u00f6vet\u0151 eszk\u00f6zk\u00e9szlet friss\u00edtve lett 4.1-es \u00e1gra, m\u00edg a mem\u00f3ria debugol\u00e1si eszk\u00f6zk\u00e9szlet, a Valgrind 3.15-\u00f6s verzi\u00f3ra.\n<li class=\"l\"> Az azonos\u00edt\u00f3 menedzsment (IdM) szerver telep\u00edt\u00e9si eszk\u00f6zeibe \u00faj healthcheck seg\u00e9dprogram ker\u00fclt bevezet\u00e9sre, amely megk\u00f6nny\u00edti a probl\u00e9m\u00e1k felder\u00edt\u00e9s\u00e9t az azonos\u00edt\u00f3 szerver k\u00f6rnyezet\u00e9ben. Az IdM-k\u00f6rnyezetek telep\u00edt\u00e9se \u00e9s konfigur\u00e1l\u00e1sa egyszer\u0171s\u00f6d\u00f6tt az Ansible szerepek t\u00e1mogat\u00e1s\u00e1nak \u00e9s a modulok telep\u00edt\u00e9s\u00e9nek lehet\u0151s\u00e9ge r\u00e9v\u00e9n. Hozz\u00e1adva a megb\u00edzhat\u00f3 erd\u0151k (Active Directory Trusted Forest) t\u00e1mogat\u00e1sa Windows Server 2019 alapokon.\n<li class=\"l\"> A klasszikus GNOME (GNOME Classic) munkamenetben megv\u00e1ltozott a virtu\u00e1lis asztalok k\u00f6z\u00f6tti v\u00e1lt\u00e1s m\u00f3dja. Az asztalok k\u00f6z\u00f6tti v\u00e1lt\u00e1s widgetje most a jobb oldalon, az als\u00f3 panelen tal\u00e1lhat\u00f3, \u00e9s egy miniat\u0171r\u00f6kkel ell\u00e1tott s\u00e1v form\u00e1j\u00e1ban van kialak\u00edtva (a m\u00e1sik asztalra val\u00f3 v\u00e1lt\u00e1shoz elegend\u0151 r\u00e1kattintani a miniat\u0171rre, amely a tartalm\u00e1t t\u00fckr\u00f6zi);\n<li class=\"l\"> A DRM (Direct Rendering Manager) alrendszer \u00e9s az alacsony szint\u0171 grafikus illeszt\u0151programok (amdgpu, nouveau, i915, mgag200) friss\u00edtve lettek a Linux 5.1 kernelnek megfelel\u0151 \u00e1llapotra. T\u00e1mogat\u00e1s ker\u00fclt hozz\u00e1ad\u00e1sra az AMD Raven 2, AMD Picasso, AMD Vega, Intel Amber Lake-Y \u00e9s Intel Comet Lake-U vide\u00f3alrendszerekhez;\n<li class=\"l\"> A RHEL 7.6 RHEL 8.1-re t\u00f6rt\u00e9n\u0151 friss\u00edt\u00e9s\u00e9hez sz\u00fcks\u00e9ges eszk\u00f6zk\u00e9szlet t\u00e1mogat\u00e1st kapott a telep\u00edt\u00e9s \u00fajrarak\u00e1sa n\u00e9lk\u00fcli friss\u00edt\u00e9shez ARM64, IBM POWER (little endian) \u00e9s IBM Z architekt\u00far\u00e1k eset\u00e9n. A webkonzolba beker\u00fclt egy rendszerellen\u0151rz\u00e9si m\u00f3d a friss\u00edt\u00e9s el\u0151tt. A cockpit-leapp plugin ker\u00fclt hozz\u00e1ad\u00e1sra az esetleges probl\u00e9m\u00e1k helyre\u00e1ll\u00edt\u00e1s\u00e1hoz a friss\u00edt\u00e9s sor\u00e1n. Biztos\u00edtott\u00e1k a \/var \u00e9s \/usr k\u00f6nyvt\u00e1rak k\u00fcl\u00f6n part\u00edci\u00f3kba val\u00f3 helyez\u00e9s\u00e9t. Tov\u00e1bb\u00e1, az UEFI t\u00e1mogat\u00e1sa is beker\u00fclt. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/oamg\/leapp\">Leapp<\/a><\/noindex> biztos\u00edtja a kieg\u00e9sz\u00edt\u0151 (Supplementary) t\u00e1rol\u00f3b\u00f3l val\u00f3 csomagfriss\u00edt\u00e9st (amely a z\u00e1rt forr\u00e1s\u00fa csomagokat is tartalmazza);\n<li class=\"l\"> Az Image Builderben hozz\u00e1adt\u00e1k a k\u00e9pek k\u00e9sz\u00edt\u00e9s\u00e9nek t\u00e1mogat\u00e1s\u00e1t a Google Cloud \u00e9s az Alibaba Cloud felh\u0151 k\u00f6rnyezetekhez. A k\u00e9pek \u00f6ssze\u00e1ll\u00edt\u00e1sakor lehet\u0151s\u00e9g van repo.git haszn\u00e1lat\u00e1ra, amely \u00e1ltal tov\u00e1bbi f\u00e1jlok vehet\u0151k fel k\u00fcl\u00f6nb\u00f6z\u0151 Git-repozit\u00f3riumokb\u00f3l;\n<li class=\"l\"> A Glibc malloc-hoz tov\u00e1bbi ellen\u0151rz\u00e9sek lettek hozz\u00e1adva a mem\u00f3riablokkok megs\u00e9r\u00fcl\u00e9s\u00e9nek azonos\u00edt\u00e1s\u00e1ra;\n<li class=\"l\"> A dnf-utils csomagot yum-utils-ra nevezt\u00e9k \u00e1t a kompatibilit\u00e1s biztos\u00edt\u00e1sa \u00e9rdek\u00e9ben (a dnf-utils telep\u00edt\u00e9se tov\u00e1bbra is lehets\u00e9ges, de ezt a csomagot automatikusan yum-utils-ra cser\u00e9lik);\n<li class=\"l\"> \u00daj kiad\u00e1s ker\u00fclt hozz\u00e1ad\u00e1sra a Red Hat Enterprise Linux System Roles-hoz, <noindex><a rel=\"nofollow\" href=\"https:\/\/linux-system-roles.github.io\/\">amely<\/a><\/noindex> a modulok \u00e9s szerepek k\u00e9szlet\u00e9hez, amely a k\u00f6zpontos\u00edtott konfigur\u00e1ci\u00f3-ir\u00e1ny\u00edt\u00e1s Ansible alap\u00fa telep\u00edt\u00e9s\u00e9re \u00e9s a t\u00e1rol\u00f3k, h\u00e1l\u00f3zati lehet\u0151s\u00e9gek, id\u0151szinkroniz\u00e1l\u00e1s, SElinux szab\u00e1lyok \u00e9s a kdump mechanizmus alkalmaz\u00e1s\u00e1hoz kapcsol\u00f3d\u00f3 specifikus funkci\u00f3k be\u00e1ll\u00edt\u00e1s\u00e1ra szolg\u00e1l. P\u00e9ld\u00e1ul az \u00faj szerep,<br \/>\nstorage lehet\u0151v\u00e9 teszi olyan feladatok v\u00e9grehajt\u00e1s\u00e1t, mint a lemez f\u00e1jlrendszer\u00e9nek kezel\u00e9se, LVM csoportokkal \u00e9s logikai part\u00edci\u00f3kkal val\u00f3 munka;<\/p>\n<li class=\"l\"> A VXLAN \u00e9s GENEVE alag\u00fat h\u00e1l\u00f3zati verem\u00e9ben megval\u00f3s\u00edt\u00e1sra ker\u00fclt az ICMP csomagok &#171;Destination Unreachable&#187;, &#171;Packet Too Big&#187; \u00e9s &#171;Redirect Message&#187; kezel\u00e9se, \u00edgy megold\u00f3dott a probl\u00e9m\u00e1s \u00fatvonal\u00e1tir\u00e1ny\u00edt\u00e1sok \u00e9s Path MTU Discovery haszn\u00e1lata VXLAN-ban \u00e9s GENEVE-ben.\n<li class=\"l\"> K\u00eds\u00e9rleti megval\u00f3s\u00edt\u00e1sa k\u00e9sz\u00fclt az XDP (eXpress Data Path) alrendszernek, amely lehet\u0151v\u00e9 teszi a Linuxban a BPF programok futtat\u00e1s\u00e1t a h\u00e1l\u00f3zati meghajt\u00f3 szintj\u00e9n, k\u00f6zvetlen hozz\u00e1f\u00e9r\u00e9ssel a csomagok DMA puffer\u00e9hez \u00e9s a szakk\u00e9pzett skbuff puffer eloszt\u00e1s\u00e1nak f\u00e1zisa el\u0151tt, valamint az eBPF komponensei szinkroniz\u00e1lva lettek a Linux 5.0 kernel verzi\u00f3val. K\u00eds\u00e9rleti t\u00e1mogat\u00e1s ker\u00fclt bevezet\u00e9sre az AF_XDP kernel alrendszerhez.<noindex><a rel=\"nofollow\" href=\"https:\/\/www.iovisor.org\/technology\/xdp\">eXpress Data Path<\/a><\/noindex>);\n<li class=\"l\"> Teljes k\u00f6r\u0171 t\u00e1mogat\u00e1s biztos\u00edtott a <noindex><a rel=\"nofollow\" href=\"http:\/\/tipc.sourceforge.net\/\">TIPC<\/a><\/noindex> (\u00c1tl\u00e1that\u00f3 Inter-process Communication) h\u00e1l\u00f3zati protokoll sz\u00e1m\u00e1ra, melyet a klaszterek k\u00f6z\u00f6tti folyamatok k\u00f6z\u00f6tti interakci\u00f3hoz terveztek. A protokoll gyors \u00e9s megb\u00edzhat\u00f3 hozz\u00e1j\u00e1rul\u00e1st biztos\u00edt az alkalmaz\u00e1sok sz\u00e1m\u00e1ra, f\u00fcggetlen\u00fcl att\u00f3l, hogy a klaszter mely csom\u00f3pontjain futnak.\n<li class=\"l\"> Az initramfs-hez \u00faj m\u00f3d ker\u00fclt hozz\u00e1ad\u00e1sra a kernel-dump ment\u00e9s\u00e9re hiba eset\u00e9n &#8212; &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/lists.fedoraproject.org\/archives\/list\/kexec@lists.fedoraproject.org\/thread\/5WI7USMD4QDZ5XGXGPKZ5NH7LCW74QU2\/\">korai kdump<\/a><\/noindex>&#171;, ami a bet\u00f6lt\u00e9si folyamat korai szakaszaiban m\u0171k\u00f6dik;\n<li class=\"l\"> \u00daj kernel param\u00e9ter ker\u00fclt bevezet\u00e9sre, az ipcmni_extend, amely kiterjeszti az IPC azonos\u00edt\u00f3k hat\u00e1r\u00e9rt\u00e9k\u00e9t 32 KB (15 bit) - 16 MB (24 bit), lehet\u0151v\u00e9 t\u00e9ve a programok sz\u00e1m\u00e1ra, hogy t\u00f6bb megosztott mem\u00f3ria szegmenst haszn\u00e1ljanak.\n<li class=\"l\"> Az Ipset friss\u00edtve lett a 7.1 verzi\u00f3ra, amely t\u00e1mogatja az IPSET_CMD_GET_BYNAME \u00e9s IPSET_CMD_GET_BYINDEX m\u0171veleteket.\n<li class=\"l\"> Az rngd d\u00e9mon, amely a pszeudo v\u00e9letlensz\u00e1m-gener\u00e1tor entropia medenc\u00e9j\u00e9nek felt\u00f6lt\u00e9s\u00e9t v\u00e9gzi, mentes\u00fclt a root jogokkal val\u00f3 ind\u00edt\u00e1s sz\u00fcks\u00e9gess\u00e9ge al\u00f3l.\n<li class=\"l\"> Teljes k\u00f6r\u0171 t\u00e1mogat\u00e1s biztos\u00edtott <noindex><a rel=\"nofollow\" href=\"https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/616368\">Intel OPA<\/a><\/noindex> (Omni-Path Architecture) a Host Fabric Interface (HFI) eszk\u00f6z\u00f6k sz\u00e1m\u00e1ra, valamint teljes k\u00f6r\u0171 t\u00e1mogat\u00e1s az Intel Optane DC Persistent Memory \u00e1lland\u00f3 mem\u00f3riaeszk\u00f6z\u00f6k sz\u00e1m\u00e1ra.\n<li class=\"l\"> A debug kernelek alap\u00e9rtelmez\u00e9s szerint megszerezt\u00e9k a UBSAN (Undefined Behavior Sanitizer) detektorral val\u00f3 ford\u00edt\u00e1st, amely tov\u00e1bbi ellen\u0151rz\u00e9seket ad a leford\u00edtott k\u00f3dhoz az olyan helyzetek felismer\u00e9s\u00e9re, amikor a program viselked\u00e9se meghat\u00e1rozatlan lesz (p\u00e9ld\u00e1ul nem statikus v\u00e1ltoz\u00f3k haszn\u00e1lata inicializ\u00e1l\u00e1suk el\u0151tt, eg\u00e9sz sz\u00e1mok nulla oszt\u00e1sa, eg\u00e9sz sz\u00e1m\u00fa jelezett t\u00edpusok t\u00falcsordul\u00e1sa, NULL mutat\u00f3k dereferenci\u00e1l\u00e1sa, mutat\u00f3k igaz\u00edt\u00e1si probl\u00e9m\u00e1i stb.).\n<li class=\"l\"> A kernel forr\u00e1sk\u00f3d f\u00e1ja a val\u00f3s idej\u0171 m\u0171k\u00f6d\u00e9shez sz\u00fcks\u00e9ges kiterjeszt\u00e9sekkel (kernel-rt) szinkroniz\u00e1lva lett a RHEL 8 f\u0151 kernel k\u00f3dj\u00e1val.\n<li class=\"l\"> Ibnvinic illeszt\u0151program ker\u00fclt hozz\u00e1ad\u00e1sra a vNIC (Virtu\u00e1lis H\u00e1l\u00f3zati Interf\u00e9sz Vez\u00e9rl\u0151) h\u00e1l\u00f3zati vez\u00e9rl\u0151h\u00f6z a PowerVM virtu\u00e1lis h\u00e1l\u00f3zati technol\u00f3gia megval\u00f3s\u00edt\u00e1s\u00e1val. Az SR-IOV NIC-kel egy\u00fctt alkalmazva az \u00faj illeszt\u0151program lehet\u0151v\u00e9 teszi a s\u00e1vsz\u00e9less\u00e9g \u00e9s a szolg\u00e1ltat\u00e1smin\u0151s\u00e9g kezel\u00e9s\u00e9t a virtu\u00e1lis h\u00e1l\u00f3zati adapter szintj\u00e9n, jelent\u0151sen cs\u00f6kkentve a virtualiz\u00e1ci\u00f3s k\u00f6lts\u00e9geket \u00e9s cs\u00f6kkentve a CPU terhel\u00e9s\u00e9t;\n<li class=\"l\"> Hozz\u00e1adva az adatintegrit\u00e1s-ellen\u0151rz\u00e9s (Data Integrity Extensions) kiterjeszt\u00e9sek t\u00e1mogat\u00e1sa, amelyek lehet\u0151v\u00e9 teszik, hogy az adatok v\u00e9dve legyenek a t\u00e1rol\u00e1s sor\u00e1n fell\u00e9p\u0151 s\u00e9r\u00fcl\u00e9sekt\u0151l tov\u00e1bbi helyre\u00e1ll\u00edt\u00f3 blokkok ment\u00e9s\u00e9vel;\n<li class=\"l\"> Hozz\u00e1adva az k\u00eds\u00e9rleti t\u00e1mogat\u00e1s (Technology Preview) csomaghoz <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nmstate\/nmstate\/\">nmstate<\/a><\/noindex>, amely k\u00f6nyvt\u00e1rat \u00e9s nmstatectl seg\u00e9dprogramot ny\u00fajt a h\u00e1l\u00f3zati be\u00e1ll\u00edt\u00e1sok deklarat\u00edv API-n kereszt\u00fcli kezel\u00e9s\u00e9hez (a h\u00e1l\u00f3zat \u00e1llapot\u00e1t el\u0151re defini\u00e1lt s\u00e9mak\u00e9nt \u00edrj\u00e1k le);\n<li class=\"l\"> Hozz\u00e1adva az k\u00eds\u00e9rleti t\u00e1mogat\u00e1s a TLS protokoll kernel szint\u0171 megval\u00f3s\u00edt\u00e1s\u00e1hoz (KTLS) AES-GCM alap\u00fa titkos\u00edt\u00e1ssal, valamint k\u00eds\u00e9rleti t\u00e1mogat\u00e1s az OverlayFS, cgroup v2, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49381\">Stratis<\/a><\/noindex>, mdev (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=39370\">Intel vGPU<\/a><\/noindex>) \u00e9s DAX (k\u00f6zvetlen hozz\u00e1f\u00e9r\u00e9s a f\u00e1jlrendszerhez a lapkacsere megker\u00fcl\u00e9s\u00e9vel, blokkeszk\u00f6z szint\u0171 haszn\u00e1lata n\u00e9lk\u00fcl) az ext4 \u00e9s XFS eset\u00e9ben;\n<li class=\"l\"> A DSA, TLS 1.0 \u00e9s TLS 1.1 t\u00e1mogat\u00e1sa elavultt\u00e1 nyilv\u00e1n\u00edt\u00e1sra ker\u00fclt, \u00e9s kiz\u00e1r\u00e1sra ker\u00fclt a DEFAULT halmazb\u00f3l, \u00e1tker\u00fclt a LEGACY-be (&#171;update-crypto-policies &#8212;set LEGACY&#187;);\n<li class=\"l\"> A 389-ds-base-legacy-tools csomagok elavultnak lettek nyilv\u00e1n\u00edtva,<br \/>\n    authd,<br \/>\n    custodia,<br \/>\n    hostname,<br \/>\n    libidn,<br \/>\n    net-tools,<br \/>\n    network-scripts,<br \/>\n    nss-pam-ldapd,<br \/>\n    sendmail,<br \/>\n    yp-tools,<br \/>\n    ypbind \u00e9s ypserv. A j\u00f6v\u0151beli jelent\u0151s kiad\u00e1sban a forgalmaz\u00e1suk megsz\u00fcntet\u00e9se v\u00e1rhat\u00f3;<\/p>\n<li class=\"l\"> Az ifup \u00e9s ifdown szkriptek helyett a NetworkManager-t a nmcli-n kereszt\u00fcl h\u00edv\u00f3 burkol\u00f3k ker\u00fcltek bevezet\u00e9sre (a r\u00e9gi szkriptek vissza\u00e1ll\u00edt\u00e1s\u00e1hoz futtassa &#171;yum install network-scripts&#187;).\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51818\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Red Hat Enterprise Linux 8.1. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 x86_64, s390x (IBM System z), ppc64le \u0438 Aarch64, \u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Red Hat Customer Portal. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b rpm-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 Red Hat Enterprise Linux 8 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 CentOS. \u0412\u0435\u0442\u043a\u0430 RHEL 8.x \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e 2029 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52353","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 8.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-05T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Red Hat Enterprise Linux 8.1 disztrib\u00faci\u00f3 kiad\u00e1sa | ProHoster","description":"A Red Hat kiadta.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 8.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-8-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-05T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52353","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:45:28","updated":"2026-01-24 03:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/52353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=52353"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/52353\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=52353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=52353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=52353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}