Sistemụ njikwa sistemụ 257

Mgbe ọnwa isii nke mmepe gasịrị, ewepụtara ntọhapụ nke usoro njikwa systemd 257 mgbanwe dị mkpa: ihe ọhụrụ systemd-sbsign na systemd-keyutil, nkwado maka MPTCP mgbe a na-arụ ọrụ n'elu oghere, nkwado mbụ maka ụlọ na ụlọ akwụkwọ Musl C. updatectl maka ijikwa nrụnye mmelite site na systemd-sysupdate, ikike ịmalite ọrụ na oghere aha PID dị iche iche, nchebe pụọ na ihichapụ faịlụ na mberede mgbe ị na-eji "systemd-tmpfiles -purge".

N'ime mgbanwe ndị dị na mwepụta ọhụrụ:

• E tinyela ngwa ọhụrụ, systemd-sbsign, maka ịdenye aha faịlụ ndị a na-arụ ọrụ na dijitalụ na usoro PE (Portable Executable) nke e zubere iji mgbe a na-ebido na ọnọdụ EFI Secure Boot. Enwere ike iji injin na ndị na-enye ọrụ nke ọbá akwụkwọ OpenSSL nyere maka imepụta mbinye aka. Enwere ike iji systemd-sbsign dị ka ihe ọzọ na ngwa sbsigntool na pesign na ukify utility mgbe a na-emepụta onyonyo kernel zuru ụwa ọnụ (UKIs), nke na-ejikọta UEFI bootloader (UEFI boot stub) na onyonyo kernel n'otu faịlụ. Linux na gburugburu sistemụ initrd nke etinyere n'ime ebe nchekwa.
• Agbakwunyere akụrụngwa ọhụrụ, systemd-keyutil, nke na-arụ ọrụ dị iche iche na igodo nzuzo yana asambodo X.509. Dịka ọmụmaatụ, enwere ike iji systemd-keyutil nwalee ike ibu igodo nzuzo na asambodo, wee wepụ igodo ọha na ha n'ụdị PEM.
• Na nkeji ".socket" ejiri hụ na ọrụ nke usoro mkpali soket (usoro mmalite mgbe ị na-agbalị ịmepụta njikọ netwọk), a na-etinye nkwado maka MPTCP (Multipath TCP), ndọtị nke usoro TCP maka ịhazi ọrụ nke njikọ TCP na nnyefe nke ngwugwu n'otu oge n'ọtụtụ ụzọ site na njikọ netwọk dị iche iche jikọtara na nke dị iche iche. Adreesị IP m.
• Na-agụnye mgbanwe ndị dị mkpa iji wuo site na iji ọkọlọtọ Musl C ọba akwụkwọ.
• Ọtụtụ ihe dị na sistemụ ndị na-egosi ihe ngosi ọganihu (dịka ọmụmaatụ, systemd-repart, systemd-sysupdate/updatectl, na importctl) na-akwado ugbu a iji usoro ANSI mee ka ngosipụta ọganihu na-akpali akpali. Usoro ndị a ka na-akwado ugbu a naanị na Windows Terminal (a na-atụ anya na ka oge na-aga, a ga-ebufe atụmatụ yiri ya na ndị na-eme ihe ngosi njedebe maka Linux).
• A gbasaala ikike nke sistemu-sysupdate akụrụngwa, jiri chọpụta na-akpaghị aka, budata na wụnye mmelite site na iji usoro atọm maka iji dochie akụkụ, faịlụ ma ọ bụ akwụkwọ ndekọ (a na-eji akụkụ abụọ / faịlụ / akwụkwọ ndekọ aha kwụụrụ onwe ya, otu n'ime ha nwere ọrụ ugbu a. akụ, na nke ọzọ na-etinye nke na-esote) melite, mgbe nke a gasịrị, a na-agbanwe ngalaba / faịlụ / akwụkwọ ndekọ). Na omume, sistemu-sysupdate ejirila na GNOME OS.

  Na mgbakwunye na usoro sistemu-sysupdate, agbakwunyere ọrụ nke otu aha nke na-enye ohere iji D-Bus jikwaa mmelite sistemụ site n'aka onye ọrụ enweghị ohere. Iji jikwaa ọrụ ahụ, gụnyekwara akụrụngwa updatectl ọhụrụ. Agbakwunyere ọkọlọtọ "--offline" na systemd-sysupdate iji gbanyụọ nbudata metadata na netwọk wee jiri naanị ụdị ebudatara na sistemụ mpaghara. Nkwado agbakwunyere maka mmepụta na usoro JSON maka iwu niile.
• Emebela ihe ọhụrụ "PrivatePIDs" maka ọrụ, nke ị nwere ike iji PID 1 (usoro init) hazie mmalite nke usoro na oghere njirimara dị iche (PID namespace). Na gburugburu ebe a na-emepụta maka usoro mmalite, ọ bụ naanị usoro sitere na aha aha maka ya ka a ga-ahụ anya.
• agbakwunyere nkwado maka egwuregwu enweghị mmetụta na iwu udev (dịka 'ATTR{foo}==i»abcd»'). Iji udev, ọ ga-ekwe omume ịnye ndị ọrụ mpaghara na-enweghị ohere ịnweta ("uaccess") na ngwaọrụ / dev/udmabuf, nke dị mkpa maka ịrụ ọrụ na igwefoto IPMI site na libcamera. udev na-enye nkwado nke obere akpa crypto ngwaike dị iche iche na interface USB na ịtọ ntọala ID_HARDWARE_WALLET maka ha, nke na-enye gị ohere itinye ọnọdụ "uaccess" na ha maka ịnweta ndị ọrụ na-enweghị ohere.
• Agbakwunyela ubi ọhụrụ RELEASE_TYPE, EXPERIMENT na EXPERIMENT_URL na faịlụ /etc/os-release. "RELEASE_TYPE" nwere ike were ụkpụrụ "nnwale", "mmepe", "kwụsiri ike" na "lts" iji kewapụ nsụgharị kwụsiri ike na mmepe na ụlọ nnwale. Ebumnuche EXPERIMENT na EXPERIMENT_URL ka e bu n'obi kọwa isi ihe nrụpụta nnwale ahụ.
• Utility run0, nke emepụtara dị ka nnọchi maka mmemme sudo, agbakwunyela nhọrọ “-shell-prompt-prefix”, nke na-akọwapụta eriri prefix maka ngwa ngwa shei. Na ndabara, a na-egosipụta "🦸" emoji dị ka nganiihu iji gosipụta nnọkọ dị elu n'anya.
• Na systemd-tmpfiles, ka ịzena ihichapụ faịlụ na-ezighi ezi na mberede, nhọrọ "--purge" na-emetụta naanị ntọala na tmpfiles.d/ nwere ọkọlọtọ "$" nke edobere nke ọma. Ọrụ "--purge" na-achọkwa ịkọwapụta opekata mpe otu faịlụ site na tmpfiles.d/ directory. Maka eriri nwere ụdị 'L', agbakwunyere ọkọlọtọ '?', mgbe akọwapụtara ya, a ga-emepụta njikọ ihe atụ naanị ma ọ bụrụ na faịlụ ebumnuche dị.
• N'ime njikwa ọrụ yana ngwa ndị metụtara ya, a na-agbanwe koodu nsochi usoro ka iji PIDFD kama PID. A na-ejikọta PIDFD na usoro a kapịrị ọnụ na ọ naghị agbanwe, ebe PID nwere ike ijikọ na usoro ọzọ mgbe usoro dị ugbu a jikọtara na PID ahụ kwụsịrị.
• Maka ọrụ, ọ ga-ekwe omume ugbu a ịkọwa uru "debug" na paramita "RestartMode", nke a ga-amaliteghachi ọrụ dara ada site na iji ọnọdụ debug rụọ ọrụ (ngbanwe gburugburu ebe obibi DEBUG_INVOCATION = 1 ka edobere), na LogLevelMax uru ga-adị. ewelitere ruo nwa oge ruo n'ogo ndozi.
• Onye na-ahụ maka PID 1 nwere ikike ịkwanye iwu maka IPE (Integrity Policy Enforcement) LSM modul, nke na-akọwapụta iwu iguzosi ike n'ezi ihe maka usoro dum (nke a na-ahapụ ọrụ yana otu esi enyocha eziokwu nke ihe mejupụtara).
• Agbakwunyela nhọrọ "DeferReactivation" na faịlụ nkeji ".timer", nke na-enye gị ohere ịwụgharị ngụ oge na-esote ma ọ bụrụ na ọrụ ahụ emechabeghị mmezu ya kemgbe mmalite ikpeazụ.
• N'ime oke faịlụ nkeonweUsers, ọ ga-ekwe omume ugbu a ịkọwa uru " njirimara" iji mee ka eserese nke NJ onye ọrụ nwee ike ịmepụta oghere aha njirimara.
• Nkwado agbakwunyere maka uru “kewapụrụ” na oke faịlụ nke PrivateTmp, nke ga-eji ụdị tmpfs dị iche iche maka /tmp/ na /var/tmp/ directories.
• Agbakwunyela nkwado maka ụdị “onwe” ọhụrụ na “dị siri ike” na oke faịlụ otu ProtectControlGroups, mgbe edobere ya, a na-emepụta oghere aha otu ọhụrụ maka ọrụ ahụ ma tinyekwa ndị otu. Mgbe edobere nhọrọ "siri ike", a na-etinye cgroupfs na ọnọdụ ọgụgụ naanị.
• StateDirectory, RuntimeDirectory, CacheDirectory, LogsDirectory na ConfigurationDirectory parameters na-enye ikike iji ọkọlọtọ ':ro' machibido ịnweta akwụkwọ ndekọ aha kwekọrọ na ụdị ọgụgụ naanị.
• Nkwado agbakwunyere maka uru “firmware” na “systemd.machine_id” kernel line parameter, nke a ga-agbakọ njirimara sistemụ (ID igwe) dabere na UUID sitere na SMBIOS/DeviceTree.
• Agbakwunyere nkwado maka oku sistemụ mseal(), listmount(), na statmount() ewebatara na mwepụta kernel ọhụrụ. Linux.
• Arụ ọrụ resolvectl, timedatectl na systemd-inhibit ugbu a na-akwado ikike mmekọrịta site na iji Polkit.
• Utility systemctl agbakwunyela ikike iji ọkọlọtọ "--now" na iwu "reenable".
• Agbakwunyere nhọrọ "--json" na sistemu-mount utility maka mmepụta n'ụdị JSON (dịka ọmụmaatụ, mgbe akọwapụtara ya yana "--list-devices", ndepụta ngwaọrụ ga-apụta n'ụdị JSON).
• Agbakwunyere nhọrọ "-l" na "-ful" na akụrụngwa "localectl" iji gbanyụọ mbelata ahịrị ogologo n'oge mmepụta.
• Agbakwunyela nhọrọ HibernateOnACPower na sleep.conf, nke na-enye gị ohere igbu oge ịgbanwe na ọnọdụ ihi ụra ruo mgbe ewepụsịrị ngwaọrụ ahụ na isi iyi ike kwụ ọtọ.
• Na systemd-sysusers, agbakwunyere nkwado maka “!” modifier na ahịrị “u” nke ị nwere ike iji mepụta akaụntụ onye ọrụ ekpochi kpamkpam (na mbụ, ejirila ịtọghe paswọọdụ ezighi ezi iji gbochie onye ọrụ, dịka ọmụmaatụ, edugaghị na igbochi n'oge nyocha isi na SSH).
• Systemd-coredump na-agbakwunye nhọrọ "EnterNamespace" nke na-enye ohere ịnweta oghere ugwu nke usoro ọ bụla dara ada iji nweta akara nbibi ha. Na omume, nhọrọ ahụ nwere ike ịba uru maka ịhazi azụ azụ nke faịlụ ndị sitere na ngwa na-agba n'ime akpa dịpụrụ adịpụ.
• systemd-logind gụnyere nhazi nke nchikota Ctrl-Alt-Shift-Esc iji zipu akara ngosi org.freedesktop.login1.SecureAttentionKey na mpaghara mpaghara onye ọrụ yana arịrịọ iji gosipụta mkparịta ụka nbanye echekwara. Mejuputa ntọala "DesignatedMaintenanceTime" iji hazie ọrụ na-akpaghị aka iji wuchaa n'oge a kapịrị ọnụ. Site na ntụnyere na nkwado maka ngwaọrụ DRM na evdev, agbakwunyela nkwado maka ịhazi ohere maka ndị ọrụ na-enweghị ohere iji zoo ngwaọrụ (ndị na-ahụ maka egwuregwu na joysticks).
• systemd-machined na-akwado ugbu a nbanye ndị ahịa na-enweghị ihe ùgwù. igwe mebere na akpa. Enwere ike ịnweta ọrụ sistemụ site na Varlink API, tinyere D-Bus.
• Agbakwunyela ngalaba ọhụrụ "[IPv6AddressLabel]" na faịlụ nhazi networkd.conf iji hazie akara na prefixes maka adreesị IPv6.
• Agbakwunyere nhọrọ "-stdin" na iwu 'networkctl edit' iji nweta ọdịnaya faịlụ site na iyi ọkọlọtọ. Nkwado agbakwunyere maka idezi na igosipụta faịlụ .netdev site na ịkọwapụta interface netwọk na iwu 'networkctl edit' na 'networkctl cat'. Nhọrọ agbakwunyere "--no-ask-password" iji gbanyụọ ikike mmekọrịta.
• Agbakwunyere nhọrọ "--certificate-source" na ukify, bootctl, systemd-keyutil, systemd-measure, systemd-repart, na systemd-sbsign utilities iji buo asambodo X.509 site na onye na-eweta OpenSSL kama ibunye ya ozugbo site na faịlụ.
• systemd-boot na-agbakwụnye ikike iji bọtịnụ olu na-ebuli elu na ala site na menu buut, nke nwere ike ịba uru na ngwaọrụ ndị dị ka smartphones. Nkwado maka ịwụnye nchekwa data UEFI Secure Boot na usoro ESL(db/dbx/…) maka systemd-boot agbakwunyere na ọrụ bootctl.
• agbakwunyere nhọrọ “-list-invocation” na journalctl iji gosi ndepụta oku otu yana nhọrọ “--invocation” (“-I”) iji gosi ndekọ metụtara naanị otu oku.
• systemd-nspawn na-agbakwụnye nkwado maka iji FUSE (Filesystem in Userspace) na-enweghị ihe ọ bụla n'ime akpa. Mgbe ị na-eji nhọrọ "-bind-user", igodo SSH onye ọrụ chọrọ maka ịnweta site na SSH na-ebuga na akpa.
• libsystemd agbakwunyela interface mmemme ọhụrụ "sd-json" nke na-eji usoro JSON, yana interface "sd-varlink" nke na-eji IPC Varlink.
• Ebulila ụdị kernel base akwadoro ka ọ bụrụ 5.4, hiwere na 2019. N'afọ na-abịa, ha na-eme atụmatụ ịkwụsị ịkwado kernels ndị okenye ma kaa akara ngosi 5.4 dị ka ụdị ntọala kacha nta na-akwado.
• Nkwado maka cgroups v1 emebiela ma nwee nkwarụ site na ndabara (iji mee ya, ị ga-ezipụta SYSTEMD_CGROUP_ENABLE_LEGACY_FORCE=1 na ahịrị iwu kernel na mgbakwunye na-enyere ya aka na ntọala sistemu). Mwepụta na-esote nke systemd 258 na-ezube iwepụ koodu metụtara cgroups v1 kpamkpam. Ụdị 258 nke Sistem ka ewepụrụ iwepụ nkwado maka script ọrụ Sistem V.

isi: opennet.ru