{"id":101213,"date":"2021-09-07T16:23:45","date_gmt":"2021-09-07T14:23:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/yadro-linux-5-14"},"modified":"2021-09-07T16:23:45","modified_gmt":"2021-09-07T14:23:45","slug":"yadro-linux-5-14","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/yadro-linux-5-14","title":{"rendered":"Kernel Linux 5.14","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/19872\/original.png\" itemprop=\"contentURL\">       <img decoding=\"async\" alt=\"Kernel Linux 5.14\" src=\"\/wp-content\/uploads\/2021\/09\/6c08ca34b060a8523af78f555746ff24.jpg\" style=\"display:block;margin: 0 auto;\" \/>            <\/a>                    <noindex>      <noindex><\/p>\n<p>Dopo due mesi di sviluppo, Linus Torvalds <a rel=\"nofollow\" href=\"https:\/\/lkml.org\/lkml\/2021\/8\/29\/382\">ha presentato<\/a> rilascio del kernel <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/\">Linux 5.14<\/a>. Tra le modifiche pi\u00f9 significative ci sono: nuove chiamate di sistema quotactl_fd() e memfd_secret(), rimozione dei driver ide e raw, un nuovo controllore delle priorit\u00e0 I\/O per cgroup, la modalit\u00e0 di pianificazione SCHED_CORE, e un'infrastruttura per la creazione di bootloader di programmi BPF verificati.<\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 \u041c\u0411 (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 12580 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043e 861501 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430, \u0443\u0434\u0430\u043b\u0435\u043d\u043e 321654 \u0441\u0442\u0440\u043e\u043a). \u041e\u043a\u043e\u043b\u043e 47% \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 5.14 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 14% \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440, 13% \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c, 3% &#8212; \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 3% c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.<\/p>\n<p>  <noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861695\/\">Principali<\/a> <a rel=\"nofollow\" href=\"https:\/\/kernelnewbies.org\/Linux_5.14\">novit\u00e0<\/a>:<\/p>\n<p><\/noindex> <\/p>\n<ul>\n<li>sottosistema disco, I\/O e filesystem:\n<ul>\n<li>per cgroup <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/556910e39249\">implementato<\/a> \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0437\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 &#8212; rq-qos, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0431\u043b\u043e\u0447\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 cgroup. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 mq-deadline;<\/li>\n<li>nel filesystem ext4 <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=fd7b23be9205\">\u00e8 stata realizzata<\/a> nuovo comando ioctl EXT4_IOC_CHECKPOINT, che costringe il ripristino su disco di tutte le transazioni in attesa dal registro e dei relativi buffer, oltre a riscrivere l'area usata dal registro nello storage. La modifica \u00e8 stata preparata nell'ambito di un'iniziativa per prevenire perdite di informazioni dai file system;<\/li>\n<li>in Btrfs <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/cover.1624891843.git.dsterba@suse.com\/\">sono stati apportati<\/a> ottimizzazione delle prestazioni: grazie all'esclusione di registrazioni non necessarie degli attributi estesi durante l'esecuzione di fsync, le prestazioni delle operazioni intensive sugli attributi estesi sono aumentate fino al 17%. Inoltre, durante le operazioni di troncamento che non interessano gli extent, \u00e8 stata disabilitata l'esecuzione della sincronizzazione completa, riducendo il tempo di esecuzione dell'operazione del 12%. \u00c8 stata aggiunta una configurazione in sysfs per limitare la capacit\u00e0 di input\/output durante il controllo del file system. Sono state aggiunte chiamate ioctl per annullare operazioni di ridimensionamento e rimozione del dispositivo;<\/li>\n<li>in XFS <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/20210702201643.GA13765@locust\/\">ri-strutturata<\/a> l'implementazione della cache buffer, che \u00e8 stata convertita in allocazione di pagine di memoria in modalit\u00e0 batch. L'efficienza del lavoro della cache \u00e8 aumentata;<\/li>\n<li>In F2FS, an option for read-only mode has been added, along with a compressed block caching mode (compress_cache) to enhance random read performance. Support for file compression reflected in memory using the mmap() operation has been implemented. A new mount option, nocompress, has been proposed for selectively disabling file compression by mask.<\/li>\n<li>Improvements have been made in the exFAT driver for better compatibility with storage devices from certain digital cameras.<\/li>\n<li>A system call has been added <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/859679\/\">quotactl_fd()<\/a>, which allows managing quotas not via a special device file, but through specifying a file descriptor associated with the filesystem to which the quota applies.<\/li>\n<li>Old drivers for block devices using the IDE interface have been removed from the kernel, which have long been replaced by the libata subsystem. Support for older devices remains fully intact; changes only pertain to the ability to use old drivers, where drives were named \/dev\/hd* instead of \/dev\/sd*.<\/li>\n<li>\u0438\u0437 \u044f\u0434\u0440\u0430 \u0443\u0434\u0430\u043b\u0451\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440 &laquo;raw&raquo;, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0431\u0443\u0444\u0435\u0440\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u043b\u043e\u0447\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \/dev\/raw. \u0423\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u0432\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0444\u043b\u0430\u0433\u0430 O_DIRECT;<\/li>\n<\/ul>\n<\/li>\n<li>memoria e servizi di sistema:\n<ul>\n<li>\u00e8 stata implementata una nuova modalit\u00e0 di scheduling nel pianificatore dei processi <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/861251\/\">SCHED_CORE<\/a>, che consente di gestire quali processi possano essere eseguiti congiuntamente su un singolo core CPU. A ciascun processo pu\u00f2 essere assegnato un identificatore cookie, che definisce l'area di fiducia tra i processi (ad esempio, appartenenza a un utente o contenitore specifico). Quando si organizza l'esecuzione del codice, il pianificatore pu\u00f2 garantire l'uso condiviso di un core CPU solo per i processi collegati a un singolo proprietario, il che pu\u00f2 essere utilizzato per bloccare alcuni attacchi di tipo Spectre evitando l'esecuzione in un unico thread SMT (Hyper-Threading) di compiti fidati e non fidati;<\/li>\n<li>\u0434\u043b\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 cgroup \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 kill, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043a \u0433\u0440\u0443\u043f\u043f\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b (\u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c SIGKILL), \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0438\u0441\u044c &laquo;1&raquo; \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b cgroup.kill;<\/li>\n<li>\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0449\u0435\u043f\u043b\u0451\u043d\u043d\u044b\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a (&laquo;split lock&raquo;), \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u043d\u0435\u0432\u044b\u0440\u043e\u0432\u043d\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0430\u0442\u043e\u043c\u0430\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u044e\u0442 \u0434\u0432\u0435 \u043b\u0438\u043d\u0438\u0438 \u043a\u0435\u0448\u0430 CPU. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0430\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u043d\u0435\u0435 \u044f\u0440\u043e\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u044b\u0437\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443. \u0412 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u044f\u0434\u0440\u0430 &laquo;split_lock_detect=ratelimit:N&raquo;, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043e\u0431\u0449\u0435\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u043b\u0438\u043c\u0438\u0442 \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443, \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0441\u0442\u0430\u0432\u0448\u0438\u0439 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0440\u0430\u0441\u0449\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 20 \u043c\u0441;<\/li>\n<li>Nel controller del bandwidth CFS (CFS bandwidth controller), che determina quanto tempo di CPU pu\u00f2 essere allocato a ciascun cgroup, \u00e8 stata implementata la possibilit\u00e0 di definire limiti temporizzati, consentendo una migliore regolazione dei carichi sensibili alla latenza. Ad esempio, impostare il valore cpu.cfs_quota_us a 50000 e cpu.cfs_period_us a 100000 permetter\u00e0 a un gruppo di processi di utilizzare 50ms di tempo CPU ogni 100ms;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853489\">aggiunta<\/a> infrastruttura iniziale per la creazione di caricamenti di programmi BPF, che permetter\u00e0 in seguito di consentire il caricamento solo di programmi BPF firmati con una chiave digitale di fiducia;<\/li>\n<li>\u00e8 stata aggiunta una nuova operazione futex FUTEX_LOCK_PI2, che utilizza un timer monotono per calcolare il timeout, tenendo conto del tempo trascorso dal sistema in modalit\u00e0 di sospensione;<\/li>\n<li>per l'architettura RISC-V \u00e8 stata implementata la supporto per le grandi pagine di memoria (Transparent Huge-Pages) e la possibilit\u00e0 di applicare il meccanismo <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54671\">KFENCE<\/a> per identificare gli errori nella gestione della memoria;<\/li>\n<li>nella chiamata di sistema madvise(), che fornisce strumenti per ottimizzare la gestione della memoria del processo, <a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/linux-api\/6c7543e4-23c8-8f2d-dc89-480be13738b3@redhat.com\/T\/\">sono stati aggiunti<\/a> \u0444\u043b\u0430\u0433\u0438 MADV_POPULATE_READ \u0438 MADV_POPULATE_WRITE \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 &laquo;page fault&raquo; \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043f\u0430\u043c\u044f\u0442\u0438, \u043e\u0442\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 (prefault). \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0444\u043b\u0430\u0433\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u043c \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 &laquo;page fault&raquo; \u0440\u0430\u0437\u043e\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043d\u0435\u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u044f\u0441\u044c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c;<\/li>\n<li>nel sistema di unit testing <a rel=\"nofollow\" href=\"https:\/\/www.kernel.org\/doc\/html\/latest\/dev-tools\/kunit\/index.html\">kunit<\/a> <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=12ca7a893d54\">aggiunta<\/a> supporto per l'esecuzione dei test in ambiente QEMU;<\/li>\n<li>\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438: &laquo;<a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/linus\/bce29ac9ce0b\">osnoise<\/a>&raquo; \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u0439, \u0438 &laquo;timerlat&raquo; \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0430\u0445 \u043f\u0440\u0438 \u043f\u0440\u043e\u0431\u0443\u0436\u0434\u0435\u043d\u0438\u044f\u0445 \u043f\u043e \u0441\u0438\u0433\u043d\u0430\u043b\u0443 \u0442\u0430\u0439\u043c\u0435\u0440\u0430;<\/li>\n<\/ul>\n<\/li>\n<li>virtualizzazione e sicurezza:\n<ul>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=1507f51255c9\">\u00e8 stato aggiunto<\/a> chiamata di sistema <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/835342\/\">memfd_secret()<\/a>, che consente di creare un'area di memoria privata in uno spazio indirizzi isolato, visibile solo al processo proprietario, non riflessa in altri processi e direttamente inaccessibile al kernel;<\/li>\n<li>Nel sistema di filtraggio delle chiamate di sistema seccomp, l'estrazione dei gestori di blocco nello spazio utente offre la possibilit\u00e0 di utilizzare un'unica operazione atomica per creare un descrittore di file per un'attivit\u00e0 isolata e restituirlo durante l'elaborazione della chiamata di sistema. L'operazione proposta risolve <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/851813\/\">il problema<\/a> con l'interruzione del gestore nello spazio utente al ricevimento di un segnale;<\/li>\n<li>\u00e8 stato aggiunto <a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/kernel-hardening\/cover\/cover.1616533074.git.gladkov.alexey@gmail.com\/\">un nuovo meccanismo<\/a> \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0438\u043c\u0451\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u0438 rlimit \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432 &laquo;user namespace&raquo;. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0440\u0435\u0448\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0438\u0445 \u0441\u0447\u0451\u0442\u0447\u0438\u043a\u043e\u0432 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043e\u0434\u043d\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445;<\/li>\n<li>Nel hypervisor KVM per sistemi ARM64 \u00e8 stata aggiunta la possibilit\u00e0 di utilizzare nelle macchine virtuali le estensioni MTE (MemTag, Memory Tagging Extension), che consentono di associare tag a ogni operazione di allocazione della memoria e organizzare il controllo della correttezza dell'uso dei puntatori per prevenire il sfruttamento di vulnerabilit\u00e0 causate dall'accesso a blocchi di memoria gi\u00e0 liberati, overflow di buffer, accessi prima dell'inizializzazione e utilizzo al di fuori del contesto attuale;<\/li>\n<li>Gli strumenti forniti dalla piattaforma ARM64 per l'autenticazione dei puntatori (Pointer Authentication) possono ora essere configurati separatamente per il kernel e lo spazio utente. Questa tecnologia permette di utilizzare istruzioni ARM64 specializzate per verificare gli indirizzi di ritorno tramite firme digitali memorizzate nei bit superiori inutilizzati dello stesso puntatore;<\/li>\n<li>in User-mode Linux <a rel=\"nofollow\" href=\"https:\/\/patchwork.ozlabs.org\/project\/linux-um\/patch\/20210305123552.a89b33363589.I21b27d26611ebecd8c918e20728e37b184d817bb@changeid\/\">aggiunta<\/a> supporto per l'uso di driver per dispositivi PCI con bus virtuale PCI, implementato dal driver PCI-over-virtio;<\/li>\n<li>Per i sistemi x86 \u00e8 stata aggiunta la supporto per il dispositivo para-virtualizzato virtio-iommu, che consente di inviare richieste IOMMU come ATTACH, DETACH, MAP e UNMAP sopra il trasporto virtio senza emulare le tabelle di pagina della memoria;<\/li>\n<li>Per le CPU Intel, dalle famiglie Skylake a Coffee Lake, l'uso delle estensioni Intel TSX (Transactional Synchronization Extensions) \u00e8 disabilitato per impostazione predefinita. Queste estensioni forniscono strumenti per migliorare le prestazioni delle applicazioni multi-threading escludendo dinamicamente operazioni di sincronizzazione superflue. Le estensioni sono state disabilitate a causa della possibilit\u00e0 di attacchi <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51852\">Zombieload<\/a>, che manipolano la fuga di informazioni tramite canali laterali, che si verifica durante il funzionamento del meccanismo di interruzione asincrona delle operazioni (TAA, TSX Asynchronous Abort);<\/li>\n<\/ul>\n<\/li>\n<li>sottosistema di rete:\n<ul>\n<li>\u00e8 proseguita l'integrazione nel kernel MPTCP (MultiPath TCP), un'estensione del protocollo TCP per organizzare il funzionamento di una connessione TCP con la consegna dei pacchetti contemporaneamente su pi\u00f9 percorsi attraverso diverse interfacce di rete collegate a indirizzi IP diversi. Nella nuova versione <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=22ba9d0d6c0d\">\u00e8 stato aggiunto<\/a> meccanismo per impostare politiche di hashing del traffico personalizzate per IPv4 e IPv6 (politica hash multipath), che consente di determinare dallo spazio utente quali campi nei pacchetti, comprese le incapsulazioni, verranno utilizzati per calcolare l'hash che determina la scelta del percorso per il pacchetto;<\/li>\n<li>aggiunta del supporto per socket nel trasporto virtuale virtio <a rel=\"nofollow\" href=\"https:\/\/man7.org\/linux\/man-pages\/man2\/socket.2.html\">SOCK_SEQPACKET<\/a> (trasmissione di datagrammi ordinati e affidabili);<\/li>\n<li>ampliate le funzionalit\u00e0 del meccanismo dei socket SO_REUSEPORT, che consente a pi\u00f9 socket in ascolto di connettersi a una stessa porta per ricevere connessioni distribuendo simultaneamente le richieste in arrivo tra tutti i socket connessi tramite SO_REUSEPORT, semplificando cos\u00ec la creazione di applicazioni server multithread. Nella nuova versione <a rel=\"nofollow\" href=\"https:\/\/lwn.net\/Articles\/853637\/\">sono stati aggiunti<\/a> strumenti per trasferire il controllo a un altro socket in caso di errore durante l'elaborazione della richiesta da parte del socket inizialmente scelto (risolve il problema della perdita di singole connessioni durante il riavvio dei servizi);<\/li>\n<\/ul>\n<\/li>\n<li>hardware:\n<ul>\n<li>nel driver amdgpu <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=e058a84bfddc42ba356a2316f2cf1141974625c9\">\u00e8 stata realizzata<\/a> \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0438\u0439 GPU AMD Radeon RX 6000, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 &laquo;Beige Goby&raquo; (Navi 24) \u0438 &laquo;Yellow Carp&raquo;, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 GPU Aldebaran (gfx90a) \u0438 APU Van Gogh. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u043f\u0430\u043d\u0435\u043b\u044f\u043c\u0438 eDP. \u0414\u043b\u044f APU Renoir \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430\u043c\u0438 \u0432 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438 (TMZ, Trusted Memory Zone). \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0433\u043e\u0440\u044f\u0447\u0435\u0433\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0430\u0440\u0442 (hot-unplug). \u0414\u043b\u044f GPU Radeon RX 6000 (Navi 2x) \u0438 \u0441\u0442\u0430\u0440\u044b\u0445 GPU AMD \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u044d\u043d\u0435\u0440\u0433\u043e\u0441\u0431\u0435\u0440\u0435\u0436\u0435\u043d\u0438\u044f ASPM (Active State Power Management), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f GPU Navi 1x, Vega \u0438 Polaris;<\/li>\n<li>per i chip AMD \u00e8 stata introdotta la supporto per la memoria virtuale condivisa (SVM, shared virtual memory) basata sul sottosistema HMM (Heterogeneous memory management), che consente di utilizzare dispositivi con unit\u00e0 di gestione della memoria proprie (MMU, memory management unit) che possono accedere alla memoria principale. Inoltre, tramite HMM \u00e8 possibile organizzare uno spazio di indirizzamento condiviso tra GPU e CPU, in cui la GPU pu\u00f2 accedere alla memoria principale del processo;<\/li>\n<li>\u00e8 stato aggiunto il supporto iniziale per la tecnologia <a rel=\"nofollow\" href=\"https:\/\/www.amd.com\/en\/technologies\/smartshift\">AMD Smart Shift<\/a>, che modifica dinamicamente i parametri di consumo energetico della CPU e della GPU nei laptop con chipset e schede grafiche AMD per massimizzare le prestazioni durante il gioco, l'editing video e il rendering 3D;<\/li>\n<li>nel driver i915 per schede grafiche Intel <a rel=\"nofollow\" href=\"https:\/\/lists.freedesktop.org\/archives\/intel-gfx\/2021-May\/266616.html\">\u00e8 inclusa<\/a> supporto per i chip Intel Alder Lake P;<\/li>\n<li>aggiunto il driver drm\/hyperv per la scheda grafica virtuale Hyper-V;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/patchwork.kernel.org\/project\/dri-devel\/cover\/20210416090048.11492-1-tzimmermann@suse.de\/\">\u00e8 stato aggiunto<\/a> driver grafico simpledrm, che utilizza il framebuffer EFI-GOP o VESA fornito dal firmware UEFI o dal BIOS. Lo scopo principale del driver \u00e8 fornire output grafico nelle fasi iniziali di avvio, prima che sia possibile utilizzare un driver DRM completo. Il driver pu\u00f2 anche essere utilizzato come soluzione temporanea per hardware per il quale non sono ancora disponibili driver DRM nativi;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/soc\/soc.git\/commit\/?h=for-next&amp;id=1c701accecf21932ebcbd8acacb4557af3797e77\">aggiunta<\/a> supporto per computer all-in-one <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54015\">Raspberry Pi 400<\/a>;<\/li>\n<li>aggiunto il driver dell-wmi-privacy per supportare gli interruttori hardware per la fotocamera e il microfono forniti nei laptop Dell;<\/li>\n<li>per laptop Lenovo <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/pdx86\/platform-drivers-x86.git\/commit\/?h=review-hans&amp;id=a40cd7ef22fbb11229cf982920f4ec96c1f49282\">\u00e8 stato aggiunto<\/a> interfaccia WMI per modificare i parametri BIOS tramite sysfs \/sys\/class\/firmware-attributes\/;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/YOM9yTZZsEicMW3f@kroah.com\/\">espansa<\/a> supporto per dispositivi con interfaccia USB4;<\/li>\n<li><a rel=\"nofollow\" href=\"https:\/\/lore.kernel.org\/lkml\/s5hbl7li0fe.wl-tiwai@suse.de\/\">aggiunta<\/a> supporto per schede audio e codec AmLogic SM1 TOACODEC, Intel AlderLake-M, NXP i.MX8, NXP TFA1, TDF9897, Rockchip RK817, Qualcomm Quinary MI2 e Texas Instruments TAS2505. Migliorato il supporto audio sui laptop HP e ASUS. <a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/tiwai\/sound.git\/commit\/?h=for-next&amp;id=9ce650a75a3b262c90789b42aedee8fc2ee04d53\">Aggiunti<\/a> patch per ridurre la latenza prima dell'inizio della riproduzione audio su dispositivi con interfaccia USB.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a &ndash; opennet.ru.<\/p>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/linux-general\/16502291\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 &#8212; 69 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101214,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 - 69\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/yadro-linux-5-14\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 - 69\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/yadro-linux-5-14\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-09-07T14:23:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kernel Linux 5.14 | ProHoster","description":"Dopo due mesi di sviluppo, Linus Torvalds ha presentato il rilascio del kernel Linux 5.14. Tra le modifiche pi\u00f9 significative: nuove chiamate di sistema quotactl_fd() e memfd_secret(), rimozione dei driver ide e raw, nuovo controller delle priorit\u00e0 di input\/output per cgroup, modalit\u00e0 di pianificazione dei task SCHED_CORE, infrastruttura per la creazione di boot loader di programmi BPF verificati. Nella nuova versione sono stati accettati 15883 correttivi da 2002 sviluppatori, la dimensione del patch \u00e8 di 69.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/yadro-linux-5-14","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042f\u0434\u0440\u043e Linux 5.14 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u044f\u0434\u0440\u0430 Linux 5.14. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0432\u044b\u0437\u043e\u0432\u044b quotactl_fd() \u0438 memfd_secret(), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 ide \u0438 raw, \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0432\u0432\u043e\u0434\u0430\/\u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u043b\u044f cgroup, \u0440\u0435\u0436\u0438\u043c \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 SCHED_CORE, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043d\u044f\u0442\u043e 15883 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0442 2002 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u0442\u0447\u0430 - 69","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/yadro-linux-5-14","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-07T14:23:45+00:00","article:modified_time":"2021-09-07T14:23:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101213","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-07 14:59:23","updated":"2022-10-03 17:14:49"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=101213"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101213\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/101214"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=101213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=101213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=101213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}