{"id":100612,"date":"2021-06-28T10:23:04","date_gmt":"2021-06-28T08:23:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-13"},"modified":"2021-06-28T10:23:04","modified_gmt":"2021-06-28T08:23:04","slug":"reliz-yadra-linux-5-13","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-yadra-linux-5-13","title":{"rendered":"Lansarea kernelului Linux 5.13","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dup\u0103 dou\u0103 luni de dezvoltare, Linus Torvalds a prezentat versiunea nucleului Linux 5.13. Printre cele mai notabile schimb\u0103ri se num\u0103r\u0103: sistemul de fi\u0219iere EROFS, suportul ini\u021bial pentru cipurile Apple M1, controlerul cgroup \u201emisc\u201d, \u00eencetarea suportului pentru \/dev\/kmem, suportul pentru noi GPU-uri de la Intel \u0219i AMD, posibilitatea de a apela direct func\u021biile nucleului din programele BPF, randomizarea stivei nucleului pentru fiecare apel de sistem, posibilitatea de a compila \u00een Clang cu protec\u021bie CFI (Control Flow Integrity), modulul LSM Landlock pentru restric\u021bionarea suplimentar\u0103 a proceselor, un dispozitiv audio virtual bazat pe virtio, \u0219i modul multi-shot \u00een io_uring.       <\/p>\n<p>Noua versiune include 17189 de corecturi de la 2150 de dezvoltatori (cel mai mare num\u0103r din istorie), dimensiunea patch-ului fiind de 60 MB (modific\u0103rile au afectat 12996 de fi\u0219iere, ad\u0103ug\u00e2nd 794705 de linii de cod \u0219i elimin\u00e2nd 399590 de linii). Aproximativ 47% din toate modific\u0103rile propuse \u00een 5.13 sunt legate de driverele de dispozitive, aproximativ 14% se refer\u0103 la actualizarea codului specific arhitecturilor hardware, 13% sunt legate de stiva de re\u021bea, 5% se refer\u0103 la sistemele de fi\u0219iere \u0219i 4% la subsistemele interne ale nucleului.    <\/p>\n<p>Nout\u0103\u021bi principale:  <\/p>\n<ul>\n<li class=\"l\"> <b>Subsistemul de disc, I\/O \u0219i sistemele de fi\u0219iere<\/b>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat suport pentru sistemul de fi\u0219iere EROFS (Enhanced Read-Only File System), propus de compania Huawei pentru utilizarea pe parti\u021bii accesibile \u00een modul de citire. Noua FS suport\u0103 stocarea datelor \u00eentr-o form\u0103 comprimat\u0103 \u0219i, comparativ cu Ext4, arat\u0103 o performan\u021b\u0103 similar\u0103 \u00een execu\u021bia opera\u021biunilor de citire secven\u021bial\u0103, dar dep\u0103\u0219e\u0219te de c\u00e2teva ori Ext4 \u00een accesul aleatoriu la date. De exemplu, la un nivel de compresie de 4 \u0219i testat pe <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-dronten\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2637\">server<\/a> hard disk, FS EROFS a dep\u0103\u0219it Ext4 \u00een opera\u021biunile de citire aleatorie de mai mult de \u0219ase ori, iar \u00een utilizarea unui smartphone Android cu Flash de aproape trei ori. Ca \u0219i \u00een alte FS-uri de tip read-only, structura EROFS este semnificativ simplificat\u0103 prin eliminarea la implementare a unor domenii de metadate, precum harta de blocuri libere.\n<li class=\"l\"> Pentru sistemul de fi\u0219iere SMB3, a fost implementat\u0103 op\u021biunea de montare \u201erasize\u201d, care permite definirea dimensiunii ferestrei de citire anticipat\u0103 (readahead) pentru a cre\u0219te performan\u021ba unor tipuri de sarcini.\n<li class=\"l\"> \u00cen FS ext4 a fost asigurat\u0103 rescrierea elementelor de catalog la \u0219tergerea fi\u0219ierelor. \u00cen ext4, de asemenea, este permis\u0103 utilizarea simultan\u0103 a modului de operare f\u0103r\u0103 a \u021bine cont de literele majuscule \u0219i criptare.\n<li class=\"l\"> \u00cen FS exFAT a fost ad\u0103ugat suport pentru comanda ioctl FITRIM (discard), pentru a informa unitatea de stocare despre blocurile nefolosite din FS.\n<li class=\"l\"> \u00cen FS XFS a fost ad\u0103ugat\u0103 posibilitatea de a restaura spa\u021biul din ultima grup\u0103 de alocare din FS, ceea ce a devenit primul pas \u00een implementarea func\u021biei de reducere a dimensiunii sec\u021biunilor existente din FS XFS.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 o nou\u0103 apelare de sistem quotactl_path, care difer\u0103 de quotactl \u00een sensul c\u0103 permite gestionarea cotelor nu printr-un fi\u0219ier special, ci prin specificarea unei c\u0103i c\u0103tre punctul de montare al FS.\n<li class=\"l\"> \u00cen mecanismul fanotify au fost extinse capacit\u0103\u021bile disponibile utilizatorilor f\u0103r\u0103 privilegii. De exemplu, \u00een mod similar cu inotify, f\u0103r\u0103 drepturi SYS_CAP_ADMIN, acum este posibil s\u0103 urm\u0103ri\u021bi evenimentele OPEN, ACCESS, MODIFY \u0219i CLOSE pentru fi\u0219iere \u0219i directoare.                                    <\/ul>\n<li class=\"l\"> <b>Memorie \u0219i servicii de sistem<\/b>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat un nou controler cgroup \u2014 \u201eMisc\u201d (CONFIG_CGROUP_MISC), destinat limit\u0103rii \u0219i monitoriz\u0103rii resurselor scalare, care pot fi gestionate folosind un contor simplu \u0219i limitate, stabilind valori maxime acceptabile. Ca exemplu al aplic\u0103rii noului controler cgroup, se men\u021bioneaz\u0103 gestionarea identificatorilor spa\u021biului de adres\u0103, utiliza\u021bi \u00een mecanismul AMD SEV (Secure Encrypted Virtualization).\n<li class=\"l\"> \u00cen interfa\u021ba de intrare\/ie\u0219ire asincron\u0103 io_uring, pentru cererile POLL a fost implementat modul \u201emulti-shot\u201d, \u00een care POLL nu este eliminat dup\u0103 generarea unui eveniment, ci r\u0103m\u00e2ne activ \u0219i poate genera mai multe evenimente.\n<li class=\"l\"> Din ramura realtime a nucleului a fost transferat codul care asigur\u0103 procesarea \u00eentreruperilor generate software \u00een firele nucleului, ceea ce permite \u00eenlocuirea lor cu procese cu prioritate mai mare.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 o bibliotec\u0103 intern\u0103 netfs, \u00een care au fost extrase func\u021biile tipice utilizate \u00een sistemele de fi\u0219iere de re\u021bea.\n<li class=\"l\"> Pentru arhitectura PowerPC a fost implementat suport pentru spa\u021bii de nume de timp (time namespaces), care permit utilizarea unui timp specific \u00een container.\n<li class=\"l\"> Pentru arhitectura RISC-V a fost implementat suport pentru kexec, crash dump, kprobe \u0219i rularea nucleului \u00een loc (execute-in-place, execu\u021bia de pe suportul original, f\u0103r\u0103 copiere \u00een RAM).\n<li class=\"l\"> \u00cen programele de urm\u0103rire BPF a ap\u0103rut posibilitatea de a utiliza stocarea de date local\u0103 pentru sarcin\u0103 (task-local storage), asigur\u00e2nd o performan\u021b\u0103 mai bun\u0103 datorit\u0103 leg\u0103rii datelor la un anumit handler BPF.\n<li class=\"l\"> A fost implementat un nou mecanism pentru apelarea direct\u0103 a func\u021biilor nucleului din programele BPF, care este deja utilizat \u00een realizarea algoritmelor de suprasarcin\u0103 TCP. Pentru a asigura securitatea, func\u021biile apelate trebuie s\u0103 fie definite explicit \u00eentr-o list\u0103 alb\u0103.\n<li class=\"l\"> \u00cen sistemul de urm\u0103rire a func\u021biilor ftrace a fost ad\u0103ugat\u0103 op\u021biunea func-no-repeats, care permite reflectarea apelurilor de func\u021bie consecutive repetate sub form\u0103 de contor.\n<li class=\"l\"> \u00cen apelul de sistem userfaultfd(), destinat gestion\u0103rii erorilor de pagin\u0103 (accesarea paginilor de memorie nealocate) \u00een spa\u021biul utilizatorului, a fost ad\u0103ugat\u0103 posibilitatea de gestionare a erorilor par\u021biale, \u00een cadrul c\u0103rora pagina de memorie este prezent\u0103, dar nu exist\u0103 o \u00eenregistrare \u00een tabela paginilor de memorie.\n<li class=\"l\"> A fost oprit suportul pentru fi\u0219ierul special \/dev\/kmem, prin intermediul c\u0103ruia se poate accesa \u00eentregul spa\u021biu de adresare al nucleului. Acest fi\u0219ier a fost considerat \u00eenvechit \u0219i a creat probleme de securitate.\n<li class=\"l\"> Pentru cipurile Intel a fost implementat un nou driver pentru gestionarea r\u0103cirii, care permite reducerea frecven\u021bei procesorului \u00een cazul unei posibile supra\u00eenc\u0103lziri. Spre deosebire de mecanismul existent de activare TCC (Thermal Control Circuit), noul driver manipuleaz\u0103 valori relative, adic\u0103 poate reduce frecven\u021ba \u00een stadiul de \u00eenceput al cre\u0219terii semnificative a temperaturii, f\u0103r\u0103 a a\u0219tepta dep\u0103\u0219irea unei limite critice.                <\/ul>\n<li class=\"l\"> <b>Virtualizare \u0219i securitate<\/b>\n<ul>\n<li class=\"l\"> A fost inclus un modul LSM pentru asigurarea izol\u0103rii aplica\u021biilor, Landlock, care permite limitarea interac\u021biunii cu mediul extern al unui grup de procese \u0219i care a fost dezvoltat av\u00e2nd \u00een vedere mecanismele de izolare precum XNU Sandbox, FreeBSD Capsicum \u0219i OpenBSD Pledge\/Unveil. Logica de acordare a accesului este determinat\u0103 printr-un program BPF, dar spre deosebire de seccomp-bpf, Landlock nu filtraz\u0103 apelurile de sistem \u0219i argumentele acestora, ci permite limitarea utiliz\u0103rii obiectelor nucleului, cum ar fi ierarhiile de fi\u0219iere. Prin intermediul Landlock, orice proces, inclusiv unul neprivilegiat, \u00ee\u0219i poate izola \u00een siguran\u021b\u0103 sine \u0219i poate preveni ocolirea izola\u021biei \u00een cazul descoperirii vulnerabilit\u0103\u021bilor sau modific\u0103rilor r\u0103u inten\u021bionate \u00een aplica\u021bie. Landlock permite procesului s\u0103 creeze medii izolate protejate, realizate sub forma unei straturi suplimentare deasupra mecanismelor existente de control al accesului.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 posibilitatea de a randomiza deplas\u0103rile \u00een stiva kernel-ului \u00een timpul proces\u0103rii apelurilor de sistem pentru a complica atacurile asupra stivei. Esen\u021ba protec\u021biei propuse este alegerea unei deplas\u0103ri aleatoare a stivei la fiecare apel de sistem, ceea ce \u00eengreuneaz\u0103 determinarea a\u0219ez\u0103rii stivei \u00een memorie chiar \u0219i \u00een cazul ob\u021binerii de informa\u021bii despre adres\u0103ri, deoarece la urm\u0103torul apel de sistem, adresa de baz\u0103 a stivei se va schimba. Pentru activarea randomiz\u0103rii, au fost propuse parametrii de linie de comand\u0103 pentru kernel \u201erandomize_kstack_offset=on\/off\u201d \u0219i setarea CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT. Costurile suplimentare sunt estimate la aproximativ 1% pierdere de performan\u021b\u0103.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suportul pentru compilarea kernel-ului cu activarea mecanismului de protec\u021bie CFI (Control Flow Integrity) \u00een compilatorul Clang, care adaug\u0103 o verificare \u00eenainte de fiecare apel indirect al func\u021biei pentru a identifica anumite forme de comportament nedefinit, care ar putea duce la perturbarea ordinii normale de execu\u021bie (control flow) ca urmare a exploat\u0103rilor care modific\u0103 pointerii la func\u021bii stoca\u021bi \u00een memorie. Pentru a activa CFI, este propus parametru CONFIG_CFI_CLANG.\n<li class=\"l\"> \u00cen serviciul de stocare a cheilor de criptare oferit de kernel, mecanismul de chei de \u00eencredere (Trusted Keys) acoper\u0103 acum nu doar cheile din modulele TPM, ci \u0219i din medii TEE (Trusted Execution Environment). Pentru a gestiona sursa cheilor de \u00eencredere a fost propus un parametru de boot \u201etrusted.source\u201d. De asemenea, a fost ad\u0103ugat\u0103 posibilitatea de a procesa chei de \u00eencredere \u00een format ASN.1.\n<li class=\"l\"> A fost ad\u0103ugat un parametru pentru \u00eenc\u0103rcarea anticipat\u0103 a listei certificatelor revocate \u00een timpul boot-ului kernel-ului. A fost rezolvat\u0103 problema (CVE-2020-26541) legat\u0103 de ignorarea certificatelor UEFI Secure Boot din lista neagr\u0103, livrate \u00een format EFI_CERT_X509_GUID, care permitea \u00eenc\u0103rcarea sistemului cu un certificat revocat.\n<li class=\"l\"> \u00cen subsystema criptografic\u0103 a kernel-ului a fost ad\u0103ugat suportul pentru verificarea semn\u0103turilor digitale ECDSA pe baza curbelor eliptice.\n<li class=\"l\"> A fost implementat\u0103 posibilitatea de verificare a politicilor SELinux prin intermediul subsystemului IMA (Integrity Measurement Architecture), care asigur\u0103 men\u021binerea unei baze de hash-uri pentru verificarea integrit\u0103\u021bii datelor.                              <\/ul>\n<li class=\"l\"> <b>Subsystema de re\u021bea<\/b>\n<ul>\n<li class=\"l\"> Suportul pentru tehnologia WiMAX a fost eliminat, aceasta nefiind utilizat\u0103 \u00een re\u021belele publice, iar \u00een nucleu singurul driver care poate utiliza WiMAX r\u0103m\u00e2ne vechiul driver Intel 2400m. \u00cen configuratorul de re\u021bea NetworkManager, suportul pentru WiMAX a fost oprit \u00een 2015. \u00cen prezent, WiMAX este practic complet \u00eenlocuit de tehnologii precum LTE, HSPA+ \u0219i Wi-Fi 802.11n.\n<li class=\"l\"> A fost ad\u0103ugat driverul pentru adaptorul de re\u021bea MANA (Microsoft Azure Network Adapter).\n<li class=\"l\"> Driverul ath11k a primit suport pentru modulele wireless Qualcomm QCN9074 cu suport pentru 802.11ax.\n<li class=\"l\"> \u00cen driverul iwlwifi a fost implementat\u0103 posibilitatea de scanare pasiv\u0103 a canalelor \u00een banda de 6GHz. Pentru Ucraina, a fost ad\u0103ugat suportul pentru activarea\/dezactivarea IEEE 802.11ax pe baza parametrilor din BIOS.\n<li class=\"l\"> A fost realizat\u0103 optimizarea subsistemului XDP (eXpress Data Path), permi\u021b\u00e2nd manipularea pachetelor de re\u021bea \u00eenainte de procesarea acestora de c\u0103tre stiva de re\u021bea a nucleului Linux. Testele efectuate demonstreaz\u0103 o cre\u0219tere a performan\u021bei XDP de 4-8%. Pentru dispozitivele virtio, cre\u0219terea performan\u021bei prelucr\u0103rii software AF_XDP poate ajunge la 33%.\n<li class=\"l\"> \u00cen ICMP a fost implementat suportul pentru mesaje PROBE extinse, definite \u00een RFC 8335.\n<li class=\"l\"> Continua integrarea \u00een nucleu a MPTCP (MultiPath TCP), extensia protocolului TCP pentru organizarea func\u021bion\u0103rii conexiunii TCP cu livrarea pachetelor simultan pe mai multe rute prin diferite interfete de re\u021bea, legate de diferite. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/lir\/ipv4\/\"   title=\"adrese IP.\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4455\">adrese IP.<\/a>. \u00cen noua versiune a fost ad\u0103ugat suport pentru sockopt pentru setarea op\u021biunilor tipice TCP. A fost realizat\u0103 posibilitatea de resetare a anumitor subfluxuri (subflow).\n<li class=\"l\"> \u00cen netfilter a fost ad\u0103ugat suportul pentru gestionarea resurselor printr-o ierarhie unificat\u0103 cgroups v2.\n<li class=\"l\"> \u00cen ethtool a fost implementat un interfa\u021b\u0103 pentru citirea statisticilor IEEE MIB cu suport pentru mlx5 \u0219i bnxt. Driverelor de re\u021bea li s-a permis extragerea de date arbitrare din SFP EEPROM, manipul\u00e2nd nu un offset+dimensiune legat, ci paginile de memorie.        <\/ul>\n<li class=\"l\"> <b>Echipament<\/b>\n<ul>\n<li class=\"l\"> A fost implementat suportul ini\u021bial pentru chipul ARM Apple M1, acoperind controlerul de \u00eentreruperi, timerul, UART, SMP, func\u021bii pentru organizarea intr\u0103rii\/ie\u0219irii \u0219i MMIO. Ingineria invers\u0103 a GPU-ului nu este \u00eenc\u0103 finalizat\u0103, pentru organizarea ie\u0219irii fiind disponibil suport pentru frame buffer \u0219i consol\u0103 prin portul serial.\n<li class=\"l\"> Continu\u0103m cur\u0103\u021barea kernel-ului de drivere vechi, fiind eliminate driverele \u201egasket\u201d (Google ASIC), \u201esysace\u201d, \u201eumem\u201d \u0219i c\u00e2teva drivere vechi pentru porturi seriale.\n<li class=\"l\"> Dup\u0103 13 ani \u00een ramura staging, driverul \u201ecomedi\u201d a fost stabilizat \u0219i mutat \u00een compunerea principal\u0103 pentru suportul dispozitivelor de colectare a datelor.\n<li class=\"l\"> A fost ad\u0103ugat driverul GUD (Generic USB Display) cu implementarea unui driver de baz\u0103 pentru monitoare \u0219i adaptoare TV conectate prin interfa\u021ba USB. Driverul furnizeaz\u0103 propriet\u0103\u021bi DRM (Direct Rendering Manager) pentru rotirea imaginii, controlul luminozit\u0103\u021bii, accesul la EDID, configurarea modurilor video \u0219i conectarea TV, care pot fi utilizate ca baz\u0103 pentru crearea driverelor pentru dispozitive specifice.\n<li class=\"l\"> A fost ad\u0103ugat un driver audio \u201evirtio\u201d cu implementarea unui dispozitiv audio virtual care poate fi utilizat \u00een sistemele gazd\u0103 pentru redarea \u0219i \u00eenregistrarea sunetului f\u0103r\u0103 a necesita acces la placa de sunet \u0219i f\u0103r\u0103 emulare.\n<li class=\"l\"> \u00cen driverul amdgpu a fost ad\u0103ugat\u0103 suportul ini\u021bial pentru GPU Aldebaran (gfx90a). A fost activat suportul ini\u021bial pentru tehnologia de sincronizare adaptiv\u0103 FreeSync pentru HDMI (anterior disponibil doar pentru DisplayPort), care permite ajustarea ratei de re\u00eemprosp\u0103tare a informa\u021biilor de pe ecran. A fost inclus suport pentru ASSR (Alternate Scrambler Seed Reset). A fost ad\u0103ugat ioctl pentru a solicita capabilit\u0103\u021bi legate de codificarea \u0219i decodificarea video. A fost ad\u0103ugat modul CONFIG_DRM_AMD_SECURE_DISPLAY pentru detectarea modific\u0103rilor \u00een ecranele care afi\u0219eaz\u0103 informa\u021bii critice. A fost inclus suport pentru mecanismul de economisire a energiei ASPM.\n<li class=\"l\"> \u00cen driverul i915 pentru pl\u0103cile grafice Intel a fost activat suportul pentru cipurile Intel Alderlake-S. A fost inclus suport pentru eDP MSO (Embedded DisplayPort Multi-SST Operation).\n<li class=\"l\"> A fost ad\u0103ugat suport pentru controlerul de joc Luna (Amazon) \u0219i pentru ecranele tactile Hycon HY46XX, ILITEK Lego Series \u0219i MStar MSG2638.      <\/ul>\n<\/ul>\n<p>\u00cen acela\u0219i timp, Funda\u021bia Software-ului Liber din America Latin\u0103 a format o variant\u0103 complet liber\u0103 a kernel-ului 5.11 \u2013 Linux-libre 5.11-gnu, cur\u0103\u021bat\u0103 de elemente de firmware \u0219i drivere care con\u021bin componente sau por\u021biuni de cod care nu sunt libere, iar domeniul de aplicare este limitat de produc\u0103tor. \u00cen noua versiune, s-a realizat cur\u0103\u021barea driverului comedi. Cur\u0103\u021barea driverelor cyclades, isicom tty \u0219i i2400m wimax, care au fost eliminate din kernel, a fost oprit\u0103. A fost actualizat codul de cur\u0103\u021bare a bloburilor \u00een driverele \u0219i subsistemele amdgpu, i915 csr, r8152 usb, mhi bus, x86 touchscreen \u0219i qualcomm arm64.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55397\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u0444\u0430\u0439\u043b\u043e\u0432\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 EROFS, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0447\u0438\u043f\u043e\u0432 Apple M1, cgroup-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 &#171;misc&#187;, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \/dev\/kmem, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 GPU Intel \u0438 AMD, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438\u0437 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0430\u043d\u0434\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0432 Clang \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 CFI [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100612","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-yadra-linux-5-13\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-yadra-linux-5-13\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-28T08:23:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-28T08:23:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea nucleului Linux 5.13 | ProHoster","description":"Dup\u0103 dou\u0103 luni de dezvoltare, Linus Torvalds a prezentat versiunea nucleului Linux 5.13.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-yadra-linux-5-13","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.13.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-yadra-linux-5-13","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-28T08:23:04+00:00","article:modified_time":"2021-06-28T08:23:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-28 08:57:57","updated":"2026-02-09 21:38:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100612"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100612\/revisions"}],"predecessor-version":[{"id":164333,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100612\/revisions\/164333"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}