{"id":111490,"date":"2023-11-13T21:10:28","date_gmt":"2023-11-13T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-distributiva-red-hat-enterprise-linux-9-3"},"modified":"2023-11-13T21:10:28","modified_gmt":"2023-11-13T19:10:28","slug":"reliz-distributiva-red-hat-enterprise-linux-9-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3","title":{"rendered":"Vyd\u00e1n\u00ed distribuce Red Hat Enterprise Linux 9.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spolo\u010dnos\u0165 Red Hat vydala distribu\u010dn\u00fa verziu Red Hat Enterprise Linux 9.3 (nov\u00e1 vetva bola ohl\u00e1sen\u00e1 minul\u00fd t\u00fd\u017ede\u0148, ale pozn\u00e1mky k vydaniu boli zverejnen\u00e9 a\u017e v\u010dera, a predt\u00fdm bola na str\u00e1nke len beta verzia). Aktualiz\u00e1cia predch\u00e1dzaj\u00facej vetvy RHEL 8.9 sa o\u010dak\u00e1va 15. novembra. Hotov\u00e9 in\u0161tala\u010dn\u00e9 obrazy s\u00fa dostupn\u00e9 pre registrovan\u00fdch pou\u017e\u00edvate\u013eov Red Hat Customer Portal (na hodnotenie funk\u010dnosti je mo\u017en\u00e9 tie\u017e pou\u017ei\u0165 iso-obrazy CentOS Stream 9 a bezplatn\u00e9 buildy RHEL pre v\u00fdvoj\u00e1rov). Vydanie bolo pripraven\u00e9 pre architekt\u00fary x86_64, s390x (IBM System z), ppc64le a Aarch64 (ARM64).       <\/p>\n<p>Vetva RHEL 9 sa vyv\u00edja s otvorenej\u0161\u00edm procesom v\u00fdvoja a vyu\u017e\u00edva ako z\u00e1klad bal\u00edkov\u00fa z\u00e1klad\u0148u CentOS Stream 9. CentOS Stream je pozicionovan\u00fd ako upstream projekt pre RHEL, ktor\u00fd umo\u017e\u0148uje extern\u00fdm \u00fa\u010dastn\u00edkom kontrolova\u0165 pr\u00edpravu bal\u00edkov pre RHEL, navrhova\u0165 svoje zmeny a ovplyv\u0148ova\u0165 prij\u00edman\u00e9 rozhodnutia. V s\u00falade s 10-ro\u010dn\u00fdm cyklom podpory distrib\u00facie RHEL 9 bude podporovan\u00e1 a\u017e do roku 2032.     <\/p>\n<p>RHEL 9.3 sa stal prv\u00fdm vydan\u00edm, ktor\u00e9ho zdrojov\u00e9 texty rpm-balen\u00ed nie s\u00fa zverejnen\u00e9 v verejnom repozit\u00e1ri git.centos.org a s\u00fa poskytovan\u00e9 klientom spolo\u010dnosti iba prostredn\u00edctvom uzavret\u00e9ho oddelenia str\u00e1nky, na ktorom plat\u00ed pou\u017e\u00edvate\u013esk\u00e1 zmluva (EULA), ktor\u00e1 zakazuje redistrib\u00faciu t\u00fdchto \u00fadajov, \u010do neumo\u017e\u0148uje pou\u017e\u00edva\u0165 tieto bal\u00edky na vytv\u00e1ranie odvoden\u00fdch distrib\u00faci\u00ed. Zdrojov\u00e9 texty zost\u00e1vaj\u00fa dostupn\u00e9 v repozit\u00e1ri CentOS Stream, ale nie s\u00fa plne synchronizovan\u00e9 s RHEL a nie v\u017edy najnov\u0161ie verzie bal\u00edkov sa zhoduj\u00fa s bal\u00edkmi z RHEL. Rocky Linux, Oracle a SUSE spojili sily a teraz reprodukuj\u00fa zdrojov\u00e9 texty rpm-balen\u00ed vydan\u00ed RHEL v r\u00e1mci projektu OpenELA.      <\/p>\n<p>K\u013e\u00fa\u010dov\u00e9 zmeny v RHEL 9.3:  <\/p>\n<ul>\n<li class=\"l\"> S\u00fa\u010das\u0165ou s\u00fa nov\u00e9 verzie kompil\u00e1torov a n\u00e1strojov pre v\u00fdvoj\u00e1rov: GCC Toolset 13, LLVM Toolset 16.0.6, Rust Toolset 1.71.1, Go Toolset 1.20.10, GCC 11.4.1 (syst\u00e9mov\u00fd kompil\u00e1tor), Redis 7, Node.js 20, java-21-openjdk (rovnako sa dod\u00e1vaj\u00fa aj java-17-openjdk, java-11-openjdk a java-1.8.0-openjdk), Valgrind 3.21, SystemTap 4.9, elfutils 0.189, PCP 6.0.5, Grafana 9.2.10.\n<li class=\"l\"> Aktualizovan\u00e9 serverov\u00e9 a syst\u00e9mov\u00e9 bal\u00edky: samba 4.18.6, iproute 6.2.0, Apache httpd 2.4.57 (+ pridan\u00fd modul mod_authnz_fcgi), SEtools 4.4.3, OpenSCAP 1.3.8, opencryptoki 3.21.0, NetworkManager 1.44, xdp-tools 1.4.0, perf 6.2, dmpd 1.0.2, nvme-cli 2.4, Pacemaker 2.1.6, 389-ds-base 2.3.4.\n<li class=\"l\"> Do bal\u00edka spr\u00e1vcu DNF bola pridan\u00e1 pr\u00edkaz \u201ereboot\u201c na automatick\u00e9 re\u0161tartovanie po ukon\u010den\u00ed aktualiz\u00e1cie. K dispoz\u00edcii s\u00fa nasleduj\u00face re\u017eimy: \u201enever\u201c (predvolen\u00e9) \u2014 bez re\u0161tartovania, \u201ewhen-changed\u201c \u2014 re\u0161tart po akejko\u013evek aktualiz\u00e1cii (dnf upgrade) a \u201ewhen-needed\u201c \u2014 re\u0161tart, iba ak to vy\u017eaduje vykonan\u00e1 zmena (napr\u00edklad po in\u0161tal\u00e1cii aktualiz\u00e1cie jadra alebo systemd). Na vypnutie namiesto re\u0161tartovania je k dispoz\u00edcii parameter \u201e--poweroff\u201c.\n<li class=\"l\"> Do DNF boli pridan\u00e9 nov\u00e9 pluginy: \u201ednf leaves\u201c na zobrazenie v\u0161etk\u00fdch nain\u0161talovan\u00fdch bal\u00edkov, ktor\u00e9 nie s\u00fa z\u00e1vislos\u0165ami pre in\u00e9 bal\u00edky; \u201eshow-leaves\u201c na zobrazenie ned\u00e1vno nain\u0161talovan\u00fdch podobn\u00fdch bal\u00edkov alebo bal\u00edkov, ktor\u00e9 prestali by\u0165 pou\u017e\u00edvan\u00e9 ako z\u00e1vislosti po transakcii.\n<li class=\"l\"> Z najnov\u0161ej verzie jadra Linux boli prenesen\u00e9 implement\u00e1cie protokolov SCTP (Stream Control Transmission Protocol) a MPTCP (Multipath TCP).\n<li class=\"l\"> Na platforme ARM64 bola implementovan\u00e1 \u00fapln\u00e1 podpora kamier s USB rozhran\u00edm, bezdr\u00f4tov\u00fdch adapt\u00e9r\u016f (Wi-Fi) a Bluetooth.\n<li class=\"l\"> Zabezpe\u010den\u00e1 pln\u00e1 podpora diskr\u00e9tnych grafick\u00fdch kariet Intel Arc A-Series (Alchemist alebo DG2).\n<li class=\"l\"> Implement\u00e1cia subsyst\u00e9mu eBPF bola zos\u00faladen\u00e1 s jadrom Linux 6.3.\n<li class=\"l\"> Bol pridan\u00fd n\u00e1stroj Stratis na spr\u00e1vu lok\u00e1lnych \u00falo\u017e\u00edsk, ktor\u00fd poskytuje mo\u017enosti ako dynamick\u00e9 pride\u013eovanie miesta v \u00falo\u017eisku, sn\u00edmky, zabezpe\u010denie integrity a vytv\u00e1ranie vrstiev na cacheovanie.\n<li class=\"l\"> V systemd-udevd boli vykonan\u00e9 zmeny, ktor\u00e9 umo\u017e\u0148uj\u00fa priradi\u0165 nemenn\u00e9 n\u00e1zvy pre sie\u0165ov\u00e9 rozhrania InfiniBand.\n<li class=\"l\"> V Postfix bola implementovan\u00e1 mo\u017enos\u0165 kontroly DNS z\u00e1znamov SRV na ur\u010denie hostite\u013ea a portu po\u0161tov\u00e9ho servera, ktor\u00fd bude pou\u017eit\u00fd na prenos spr\u00e1v. T\u00fato mo\u017enos\u0165 je mo\u017en\u00e9 vyu\u017ei\u0165 v infra\u0161trukt\u00farach, v ktor\u00fdch s\u00fa pre dod\u00e1vanie po\u0161tov\u00fdch spr\u00e1v vyu\u017e\u00edvan\u00e9 slu\u017eby s dynamicky pride\u013eovan\u00fdmi \u010d\u00edslami sie\u0165ov\u00fdch portov.\n<li class=\"l\"> Do bal\u00edka cups-filters bol pridan\u00fd ovl\u00e1da\u010d LF-to-CRLF, ktor\u00fd m\u00f4\u017eete pou\u017ei\u0165 na konverziu znakov \u201e\n\u201c (nov\u00fd riadok) na \u201e\r\n\u201c (n\u00e1vrat na za\u010diatok riadku a nov\u00fd riadok) pre tla\u010diarne, ktor\u00e9 podporuj\u00fa iba spracovanie s\u00faborov s koncom riadku \u201e\r\n\u201c.\n<li class=\"l\"> Vo FUSE3 bola pridan\u00e1 mo\u017enos\u0165 zru\u0161i\u0165 element adres\u00e1ra bez automatick\u00e9ho odmountovania mont\u00e1\u017enych bodov s t\u00fdmto elementom.\n<li class=\"l\"> V NetworkManager bola pridan\u00e1 podpora vo\u013eby \u201eno-aaaa\u201c v resolv.conf, ktor\u00e1 vyp\u00edna odosielanie DNS dotazov na z\u00e1znamy AAAA (ur\u010denie adresy IPv6 pod\u013ea n\u00e1zvu hostite\u013ea). Bola pridan\u00e1 podpora vo\u013eby \u201elacp_active\u201c na riadenie spracovania r\u00e1mcov LACPDU (Link Aggregation Control Protocol Data Units). Implementovan\u00fd je re\u0161tart NetworkManager po re\u0161tarte slu\u017eby dbus. K dispoz\u00edcii je v\u00fdstup ozn\u00e1menia v pr\u00edpade pou\u017eitia star\u00e9ho konfigura\u010dn\u00e9ho form\u00e1tu ifcfg pre profily pripojen\u00ed. Pridan\u00e1 podpora vlastnost\u00ed: link.tx-queue-length, link.gro-max-size, link.gso-max-segments a link.gso-max-size.\n<li class=\"l\"> Pre jeden a ten ist\u00fd sie\u0165ov\u00fd rozhranie v NetworkManager je povolen\u00e9 pou\u017eitie ako statick\u00fdch, tak aj dynamick\u00fdch (DHCP) nastaven\u00ed, napr\u00edklad pomocou n\u00e1stroja nmstate je mo\u017en\u00e9 nastavi\u0165 statick\u00fa adresu pre rozhranie, na ktorom je povolen\u00e1 podpora DHCP. V nmstate je povolen\u00e9 viazanie nastaven\u00ed na sie\u0165ov\u00e9 rozhranie pod\u013ea MAC adresy, namiesto n\u00e1zvu rozhrania.\n<li class=\"l\"> Roz\u0161\u00edren\u00e1 podpora hardv\u00e9ru. Pridan\u00e1 podpora CPU ARM64 NVIDIA Grace. Z jadra Linux 6.2 bol prenesen\u00fd ovl\u00e1da\u010d Intel QAT s podporou zariaden\u00ed Intel Quick Assist Technology 401xx\/402xx.\n<li class=\"l\"> Na ochranu pred \u00fatokmi Spectre v2, ktor\u00e9 s\u00fa spojen\u00e9 so \u0161pekulat\u00edvnym vykon\u00e1van\u00edm in\u0161trukci\u00ed, bol pridan\u00fd re\u017eim AutoIBRS (Automatick\u00e1 nepriamy obmedzen\u00e1 \u0161pekul\u00e1cia vetvenia), ktor\u00fd podporuje CPU AMD, za\u010d\u00ednaj\u00fac s rodinou EPYC 9004 Genoa.\n<li class=\"l\"> Pre kontajnery je poskytnut\u00e1 mo\u017enos\u0165 pou\u017e\u00edva\u0165 virtu\u00e1lne \u010dipy na uchov\u00e1vanie kryptografick\u00fdch k\u013e\u00fa\u010dov (vTPM), realizovan\u00fdch na b\u00e1ze spolo\u010dn\u00e9ho fyzick\u00e9ho TPM (Trusted Platform Module).\n<li class=\"l\"> V LVM bola pridan\u00e1 podpora logick\u00fdch oddielov vmcore pre dumpy jadra, vytv\u00e1ran\u00e9 subsyst\u00e9mom kdump.\n<li class=\"l\"> Do in\u0161tala\u010dn\u00fdch zost\u00e1v bol pridan\u00fd parameter \u201einst.wait_for_disks\u201c, ktor\u00fd ur\u010duje \u010das \u010dakania na na\u010d\u00edtanie kickstart s\u00faboru alebo pripravenos\u0165 ovl\u00e1da\u010dov po\u010das zav\u00e1dzania.\n<li class=\"l\"> V in\u0161tal\u00e1tore pri in\u0161tal\u00e1cii na syst\u00e9my ARM je poskytnut\u00e1 mo\u017enos\u0165 v\u00fdberu variantu in\u0161talovan\u00e9ho jadra (napr\u00edklad s 64 KB str\u00e1nkami pam\u00e4te). Z minim\u00e1lneho re\u017eimu in\u0161tal\u00e1cie bol vyl\u00fa\u010den\u00fd bal\u00edk s390utils-base a ponechan\u00fd bol len s390utils-core.\n<li class=\"l\"> V RHEL builderi obrazov bola pridan\u00e1 mo\u017enos\u0165 generova\u0165 s\u00fabory vo form\u00e1te OVA pre VMware VSphere.\n<li class=\"l\"> Do kickstart s\u00faborov v pr\u00edkaze network boli pridan\u00e9 nov\u00e9 mo\u017enosti \u201e--ipv4-dns-search\u201c a \u201e--ipv6-dns-search\u201c na definovanie z\u00e1kladn\u00fdch dom\u00e9n pre direkt\u00edvu \u201esearch\u201c v \/etc\/resolv.conf, ako aj mo\u017enosti \u201e--ipv4-ignore-auto-dns\u201c a \u201e--ipv6-ignore-auto-dns\u201c na ignorovanie z\u00edskavania nastaven\u00ed DNS cez DHCP.\n<li class=\"l\"> Zlep\u0161en\u00e1 podpora TLS roz\u0161\u00edrenia EMS (Extended Master Secret, RFC 7627, potrebn\u00e9ho na zabezpe\u010denie dodr\u017eiavania po\u017eiadaviek FIPS-140-3 v pripojeniach na b\u00e1ze TLS 1.2.\n<li class=\"l\"> V OpenSSH za\u010dalo odstr\u00e1nenie pou\u017e\u00edvania algoritmov na b\u00e1ze hashov SHA-1 v prospech SHA-2. Ak na <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-newyork\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2711\">serveri<\/a> neexistuj\u00fa k\u013e\u00fa\u010de na b\u00e1ze SHA-1, v sshd sa teraz bude pou\u017e\u00edva\u0165 iba SHA-2 na potvrdenie hostite\u013esk\u00fdch k\u013e\u00fa\u010dov, \u010do m\u00f4\u017ee vies\u0165 k nekompatibilite s klientmi RHEL 8 a star\u0161\u00edch verzi\u00ed.\n<li class=\"l\"> V OpenSSL bola pridan\u00e1 podpora nastavenia parametrov zabezpe\u010den\u00fdch eliptick\u00fdch kriviek Brainpool a implementovan\u00e1 ochrana pred \u00fatokmi na de\u0161ifrovanie RSA na z\u00e1klade merania \u010dasu oper\u00e1ci\u00ed, ktor\u00e9 pou\u017e\u00edvaj\u00fa varianty met\u00f3dy Bleichenbacher.\n<li class=\"l\"> Vo verzii RPCSEC GSS Kerberos V5 bola pridan\u00e1 podpora \u0161ifrovac\u00edch met\u00f3d camellia128-cts-cmac, camellia256-cts-cmac, aes128-cts-hmac-sha256-128 a aes256-cts-hmac-sha384-192.\n<li class=\"l\"> Do n\u00e1strojov auditu bola pridan\u00e1 podpora udalost\u00ed FANOTIFY a realizovan\u00e9 uchovanie v logu pol\u00ed fan_type (typ udalosti), fan_info (s\u00favisiace inform\u00e1cie), sub_trust a obj_trust (\u00farovne d\u00f4very pre subjekt a objekt udalosti). Do slu\u017eby fapolicyd bola pridan\u00e1 prenosnos\u0165 \u010d\u00edsel pravidiel pre zamietnut\u00e9 po\u017eiadavky na API fanotify pre u\u013eah\u010denie ladenia probl\u00e9mov.\n<li class=\"l\"> Bola pridan\u00e1 syst\u00e9mov\u00e1 rola pre n\u00e1stroj keylime, ktor\u00e1 zjednodu\u0161uje nastavenie registr\u00e1tora a overova\u010da Keylime, pou\u017e\u00edvan\u00e9ho na potvrdenie autenticity a nepretr\u017eit\u00e9 sledovanie integrity extern\u00e9ho syst\u00e9mu. Napr\u00edklad je mo\u017en\u00e9 overi\u0165 autenticitu zariaden\u00ed Edge a IoT umiestnen\u00fdch na nepr\u00edstupn\u00fdch miestach, kde m\u00f4\u017ee d\u00f4js\u0165 k neopr\u00e1vnen\u00e9mu pr\u00edstupu. Bol uvo\u013enen\u00fd nov\u00fd bal\u00edk keylime 7.3.\n<li class=\"l\"> Bola pridan\u00e1 syst\u00e9mov\u00e1 rola pre spr\u00e1vu jednotiek systemd a ich in\u0161tal\u00e1ciu. Bola pridan\u00e1 syst\u00e9mov\u00e1 rola pre in\u0161tal\u00e1ciu, konfigur\u00e1ciu, spr\u00e1vu a sp\u00fa\u0161\u0165anie SODB PostgreSQL. Do syst\u00e9movej role firewall bola pridan\u00e1 podpora pre definovanie, \u00fapravu a odstra\u0148ovanie ipset-ov.\n<li class=\"l\"> V SELinux bola pridan\u00e1 mo\u017enos\u0165 virt_qemu_ga_run_unconfined, ktor\u00e1 umo\u017e\u0148uje procesu qemu-ga (QEMU Guest Agent) vykon\u00e1va\u0165 v neza\u0161ifrovanej (domena unconfined_t) re\u017eime pr\u00edkazy, ako je mount, ktor\u00e9 boli p\u00f4vodne obmedzen\u00e9 cez SELinux. Boli pridan\u00e9 politiky SELinux na ochranu slu\u017eieb qat, systemd-pstore, boothd, fdo-manufacturing-server, fdo-rendezvous-server, fdo-client-linuxapp a fdo-owner-onboarding-server.\n<li class=\"l\"> Bola pridan\u00e1 podpora pre virtualiza\u010dn\u00e9 prostriedky 4. gener\u00e1cie procesorov Intel Xeon Scalable (Sapphire Rapids), \u010do umo\u017e\u0148uje vyu\u017e\u00edva\u0165 model CPU SapphireRapids vo virtu\u00e1lnych strojoch a vyu\u017ei\u0165 dostupn\u00e9 roz\u0161\u00edren\u00e9 mo\u017enosti virtualiz\u00e1cie v t\u00fdchto procesoroch.\n<li class=\"l\"> V Podman bola pridan\u00e1 podpora pre kontajnery komprimovan\u00e9 pomocou algoritmu zstd. Bola pridan\u00e1 mo\u017enos\u0165 pou\u017eitia Quadlets pre automatick\u00fa gener\u00e1ciu slu\u017eieb systemd z popisov kontajnerov. Bola pridan\u00e1 shell podmansh, ktor\u00fa je mo\u017en\u00e9 pou\u017ei\u0165 namiesto \/usr\/bin\/bash na spustenie u\u017e\u00edvate\u013eskej rel\u00e1cie v kontajneri. Boli aktualizovan\u00e9 verzie Podman, Buildah, Skopeo, crun a runc.\n<li class=\"l\"> Boli pridan\u00e9 nov\u00e9 parametre pr\u00edkazov\u00e9ho riadku jadra:\n<ul>\n<li class=\"l\"> amd_pstate na riadenie re\u017eimov energetickej spotreby CPU AMD;\n<li class=\"l\"> arm64.nosve na vypnutie SVE (Scalable Vector Extension);\n<li class=\"l\"> arm64.nosme na vypnutie SME (Scalable Matrix Extension);\n<li class=\"l\">  gather_data_sampling pre spr\u00e1vu re\u017eimu ochrany proti \u00fatokom GDS (Gather Data Sampling alebo Downfall);\n<li class=\"l\"> nospectre_bhb na vypnutie ochrany Spectre-BHB;\n<li class=\"l\"> trace_clock na nastavenie \u010dasova\u010da udalost\u00ed trasovania.  <\/ul>\n<li class=\"l\"> Roz\u0161\u00edren\u00e9 mo\u017enosti pre klastre a syst\u00e9m s vysokou dostupnos\u0165ou: Do agenta LVM-activate bola pridan\u00e1 podpora pre v\u00fdmenu (failover) skup\u00edn oddielov, v ktor\u00fdch ch\u00fdbaj\u00fa fyzick\u00e9 oddiely. Do agentov zdrojov klastra IPaddr2 a IPsrcaddr bola pridan\u00e1 podpora policy routing. Do agenta ocf:heartbeat:Filesystem bola pridan\u00e1 podpora pre FS EFS (Amazon Elastic File System).\n<li class=\"l\"> Pridan\u00e9 nov\u00e9 kontajnerov\u00e9 obrazy s nastaveniami FDO (FIDO Device Onboard): fdo-manufacturing-server, fdo-owner-onboarding-server, fdo-rendezvous-server a fdo-serviceinfo-api-server. Pridan\u00fd nov\u00fd kontajnerov\u00fd obraz rhel9\/squid s proxy serverom Squid. V ed\u00edcii \u201eRHEL for Edge\u201c bola implementovan\u00e1 podpora nov\u00fdch typov obrazov \u201eminimal-raw\u201c, \u201eedge-vsphere\u201c (*.vmdk) a \u201eedge-ami\u201c (*.ami).\n<li class=\"l\"> Do AMI obrazov pre cloudov\u00e9 prostredia AWS EC2 bola pridan\u00e1 podpora bootovania v UEFI re\u017eime.\n<li class=\"l\"> Na pr\u00e1cu so smartkartami a USB tokenmi CCID (Chip Card Interface Device) a ICCD (Integrated Circuit Card Device) bol nasaden\u00fd nov\u00fd vydanie ovl\u00e1da\u010da pcsc-lite-ccid 1.5.2, v ktorom boli vyrie\u0161en\u00e9 probl\u00e9my s ovl\u00e1da\u010dom Alcor Micro AU9560 a pridan\u00e1 podpora pre nov\u00e9 \u010d\u00edta\u010dky smart kariet.\n<li class=\"l\"> Boli vyhl\u00e1sen\u00e9 za zastaran\u00e9 bal\u00edky initial-setup a pmdk (Persistent Memory Development Kit).\n<li class=\"l\"> Pridan\u00e1 experiment\u00e1lna podpora protokolov PRP (Parallel Redundancy Protocol) a HSR (High-availability Seamless Redundancy).\n<li class=\"l\"> Pridan\u00e1 experiment\u00e1lna mo\u017enos\u0165 hardv\u00e9rov\u00e9ho akcelerovania IPsec cez presun oper\u00e1ci\u00ed enkapsul\u00e1cie paketov na stranu sie\u0165ovej karty.\n<li class=\"l\"> Pridan\u00e1 experiment\u00e1lna podpora SRv6 (Segment Routing over IPv6).\n<li class=\"l\"> Experiment\u00e1lna implement\u00e1cia kTLS (TLS na \u00farovni jadra) bola \u0441\u0438\u043d\u0445ro\u0438\u0437\u043e\u0432\u0430\u043d\u00e1 s jadrom 6.3. Pridan\u00e1 podpora pre pou\u017eitie kTLS na ur\u00fdchlenie GnuTLS.\n<li class=\"l\"> Pridan\u00e1 experiment\u00e1lna podpora rozhrania asynchr\u00f3nneho vstupu\/v\u00fdstupu io_uring, pozoruhodn\u00e1 podporou polingom (polling) vstupu\/v\u00fdstupu a mo\u017enos\u0165ou pr\u00e1ce s vyrovn\u00e1van\u00edm pam\u00e4te aj bez neho. V API io_uring sa v\u00fdvoj\u00e1ri jadra sna\u017eili odstr\u00e1ni\u0165 nedostatky star\u00e9ho rozhrania aio. Pod\u013ea v\u00fdkonnosti je io_uring ve\u013emi bl\u00edzko k SPDK a v\u00fdrazne prekon\u00e1va libaio pri pr\u00e1ci s povolen\u00fdm polingom.\n<li class=\"l\"> V IdM (Identity Management) bola pridan\u00e1 experiment\u00e1lna podpora protokolu na spr\u00e1vu certifik\u00e1tov ACME (Automated Certificate Management Environment), pou\u017e\u00edvan\u00e9ho v certifika\u010dnej autorite Let\u2019s Encrypt.\n<li class=\"l\"> V Podman sa pridala experiment\u00e1lna mo\u017enos\u0165 pou\u017e\u00edvania backendu \u00falo\u017eiska na b\u00e1ze SQLite (namiesto BoltDB).\n<li class=\"l\"> Pokra\u010dujeme v poskytovan\u00ed experiment\u00e1lnej (Technology Preview) podpory:\n<ul>  <\/li>\n<li> <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"214\">VPN<\/a> WireGuard,   <\/li>\n<li> Intel SGX (Software Guard Extensions),   <\/li>\n<li> Intel IDXD (Data Streaming Accelerator),   <\/li>\n<li> DAX (Direct Access) pre ext4 a XFS,   <\/li>\n<li> AMD SEV a SEV-ES v hyperv\u00edzore KVM,  <\/li>\n<li> slu\u017eby systemd-resolved,   <\/li>\n<li> mechanizmu Sigstore na overovanie kontajnerov pod\u013ea digit\u00e1lnych podpisov,  <\/li>\n<li> bal\u00edka s grafick\u00fdm editorom GIMP 2.99.8,   <\/li>\n<li> nastavenia MPTCP (Multipath TCP) cez NetworkManager,   <\/li>\n<li> DNSSEC v IdM,   <\/li>\n<li> virtio-mem,   <\/li>\n<li> hyperv\u00edzor KVM pre ARM64,  <\/li>\n<li> in\u0161tal\u00e1cie na NVMe cez Fibre Channel,   <\/li>\n<li> Socket API pre TuneD,  <\/li>\n<li> Soft-iWARP (Internet Wide-area RDMA Protocol),   <\/li>\n<li> GNOME pre ARM64 a IBM Z.  <\/li>\n<\/ul>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60104\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u0438). \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 RHEL 8.9 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f 15 \u043d\u043e\u044f\u0431\u0440\u044f. \u0413\u043e\u0442\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Red Hat Customer Portal (\u0434\u043b\u044f \u043e\u0446\u0435\u043d\u043a\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111490","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-11-13T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-11-13T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie distrib\u00facie Red Hat Enterprise Linux 9.3 | ProHoster","description":"Spolo\u010dnos\u0165 Red Hat zverejnila vydanie distrib\u00facie Red Hat Enterprise Linux 9.3 (nov\u00e1 vetva bola ohl\u00e1sen\u00e1 minul\u00fd t\u00fd\u017ede\u0148, ale pozn\u00e1mky k vydaniu boli zverejnen\u00e9 a\u017e v\u010dera, pri\u010dom na str\u00e1nke zostali predt\u00fdm.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Red Hat \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Red Hat Enterprise Linux 9.3 (\u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0431\u044b\u043b\u0430 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u0440\u0435\u043b\u0438\u0437\u0443 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0447\u0435\u0440\u0430, \u0430 \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-distributiva-red-hat-enterprise-linux-9-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-13T19:10:28+00:00","article:modified_time":"2023-11-13T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"111490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:23","updated":"2026-02-09 21:39:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/111490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=111490"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/111490\/revisions"}],"predecessor-version":[{"id":159991,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/111490\/revisions\/159991"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=111490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=111490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=111490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}