{"id":115726,"date":"2024-05-13T13:52:06","date_gmt":"2024-05-13T11:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-6-9"},"modified":"2024-05-13T13:52:06","modified_gmt":"2024-05-13T11:52:06","slug":"reliz-yadra-linux-6-9","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-9","title":{"rendered":"Vydanie jadra Linux 6.9","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvoch mesiacoch v\u00fdvoja predstavil Linus Torvalds vydanie jadra Linux 6.9. Medzi najv\u00fdraznej\u0161ie zmeny patr\u00ed modul dm-vdo na deduplik\u00e1ciu a kompresiu blokov\u00fdch zariaden\u00ed, re\u017eim priameho pr\u00edstupu k s\u00faborom vo FUSE, podpora vytv\u00e1rania pidfd pre jednotliv\u00e9 vl\u00e1kna, mechanizmus BPF-tokenov, podpora Rust na syst\u00e9moch ARM64, zaradenie FS Ext2 medzi zastaran\u00e9, odstr\u00e1nenie star\u00e9ho ovl\u00e1da\u010da NTFS a podpora mechanizmu Intel FRED.        <\/p>\n<p>Do novej verzie bolo pridan\u00fdch 15680 opr\u00e1v od 2106 v\u00fdvoj\u00e1rov, ve\u013ekos\u0165 z\u00e1platy je 54 MB (zmeny sa dotkli 11825 s\u00faborov, pridalo sa 687954 riadkov k\u00f3du, odstr\u00e1nilo sa 225344 riadkov). V predch\u00e1dzaj\u00facej verzii bolo 15641 opr\u00e1v od 2018 v\u00fdvoj\u00e1rov, ve\u013ekos\u0165 z\u00e1platy bola 44 MB. Pribli\u017ene 42% zo v\u0161etk\u00fdch zmien predstavovan\u00fdch vo verzii 6.9 sa t\u00fdka ovl\u00e1da\u010dov zariaden\u00ed, asi 17% zmien s\u00favis\u00ed s aktualiz\u00e1ciou k\u00f3du \u0161pecifick\u00e9ho pre hardv\u00e9rov\u00e9 architekt\u00fary, 13% sa t\u00fdka sie\u0165ov\u00e9ho stacku, 7% s\u00favis\u00ed so s\u00faborov\u00fdmi syst\u00e9mami a 4% s vn\u00fatorn\u00fdmi subsyst\u00e9mami jadra.      <\/p>\n<p>Hlavn\u00e9 novinky v jadre 6.9:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, I\/O a s\u00faborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Do Device Mapper (DM) bol pridan\u00fd nov\u00fd spracovate\u013e dm-vdo (virtual data optimizer), ktor\u00fd umo\u017e\u0148uje na z\u00e1klade existuj\u00facich blokov\u00fdch zariaden\u00ed implementova\u0165 virtu\u00e1lne blokov\u00e9 zariadenie s tak\u00fdmi mo\u017enos\u0165ami, ako s\u00fa deduplik\u00e1cia opakuj\u00facich sa d\u00e1t, kompresia d\u00e1t, vyl\u00fa\u010denie pr\u00e1zdnych blokov a zvy\u0161ovanie ve\u013ekosti blokov\u00e9ho zariadenia pod\u013ea potreby (thin provisioning). Tieto mo\u017enosti sa realizuj\u00fa na \u00farovni blokov\u00e9ho zariadenia a nez\u00e1visia od pou\u017eit\u00e9ho s\u00faborov\u00e9ho syst\u00e9mu (napr\u00edklad pomocou dm-vdo je mo\u017en\u00e9 implementova\u0165 automatick\u00e9 sp\u00e1janie duplicovan\u00fdch d\u00e1t a uchov\u00e1vanie inform\u00e1ci\u00ed v komprimovanej podobe pre ak\u00e9ko\u013evek FS). Podporuje sa pou\u017eitie dm-vdo pre fyzick\u00e9 \u00falo\u017eisk\u00e1 s ve\u013ekos\u0165ou a\u017e 256TB a vytv\u00e1ranie logick\u00fdch objemov s ve\u013ekos\u0165ou a\u017e 4PB. Na spr\u00e1vu oddielov vdo sa odpor\u00fa\u010da pou\u017e\u00edva\u0165 lvm. Technol\u00f3gia VDO bola vyvinut\u00e1 spolo\u010dnos\u0165ou Permabit a bola otvoren\u00e1 po jej akviz\u00edcii spolo\u010dnos\u0165ou Red Hat v roku 2017.\n<li class=\"l\"> V subsyst\u00e9me FUSE, ktor\u00fd sa pou\u017e\u00edva na implement\u00e1ciu s\u00faborov\u00fdch syst\u00e9mov v priestore pou\u017e\u00edvate\u013ea, bola pridan\u00e1 po\u010diato\u010dn\u00e1 implement\u00e1cia re\u017eimu \u201epassthrough\u201c, ktor\u00fd umo\u017e\u0148uje priamo na \u00farovni jadra pristupova\u0165 k \u00fadajom s\u00faborov, pri\u010dom sa ob\u00edde proces be\u017eiaci v priestore pou\u017e\u00edvate\u013ea, \u010do v niektor\u00fdch situ\u00e1ci\u00e1ch v\u00fdrazne zvy\u0161uje v\u00fdkon. Napr\u00edklad, FUSE-implement\u00e1cie FS, ktor\u00e9 funguj\u00fa v re\u017eime iba na \u010d\u00edtanie a obmedzuj\u00fa pr\u00edstup k s\u00faborom, m\u00f4\u017eu vraca\u0165 obsah s\u00faborov z p\u00f4vodn\u00e9ho FS bez toho, aby ich pren\u00e1\u0161ali do procesu FUSE.\n<li class=\"l\"> Do kateg\u00f3rie zastaran\u00fdch (deprecated) bol zaraden\u00fd ovl\u00e1da\u010d s implement\u00e1ciou s\u00faborov\u00e9ho syst\u00e9mu Ext2. D\u00f4vodom je podpora v ovl\u00e1da\u010di iba 32-bitov\u00fdch po\u010d\u00edtadiel \u010dasu v inode, ktor\u00e9 sa preplnia 19. janu\u00e1ra 2038. Namiesto ovl\u00e1da\u010da ext2 sa odpor\u00fa\u010da pou\u017e\u00edva\u0165 ovl\u00e1da\u010d ext4, ktor\u00fd podporuje pr\u00e1cu so s\u00faborov\u00fdm syst\u00e9mom Ext2 a je s n\u00edm plne kompatibiln\u00fd, pri\u010dom m\u00f4\u017ee v ext2 oddieloch pou\u017e\u00edva\u0165 \u010dasov\u00e9 pe\u010diatky, ktor\u00e9 nie s\u00fa ovplyvnen\u00e9 probl\u00e9mom roku 2038, ak bol FS vytvoren\u00fd s inode v\u00e4\u010d\u0161\u00edm ako 255 bajtov (v ovl\u00e1da\u010di ext2 sa 32-bitov\u00e9 po\u010d\u00edtadl\u00e1 \u010dasu pou\u017e\u00edvali nez\u00e1visle od ve\u013ekosti inode).\n<li class=\"l\"> Star\u00fd ovl\u00e1da\u010d s\u00faborov\u00e9ho syst\u00e9mu NTFS bol odstr\u00e1nen\u00fd, nahradil ho nov\u00fd ovl\u00e1da\u010d NTFS3, ktor\u00fd pri\u0161iel so zverejnen\u00edm 5.15. Dod\u00e1vka dvoch ovl\u00e1da\u010dov s implement\u00e1ciou NTFS v jadre bola pova\u017eovan\u00e1 za nevhodn\u00fa, preto\u017ee star\u00fd ovl\u00e1da\u010d sa u\u017e dlh\u00e9 roky neaktualizoval, nach\u00e1dza sa v z\u00fafalom stave a m\u00f4\u017ee fungova\u0165 iba v re\u017eime \u010d\u00edtania.\n<li class=\"l\"> Do s\u00faborov\u00fdch syst\u00e9mov zonefs a hugetlbfs bola pridan\u00e1 podpora mapovania identifik\u00e1torov pou\u017e\u00edvate\u013eov pripojen\u00fdch s\u00faborov\u00fdch syst\u00e9mov, ktor\u00e1 sa pou\u017e\u00edva na priradenie s\u00faborov ur\u010dit\u00e9ho pou\u017e\u00edvate\u013ea na pripojenom cudzom oddiele k in\u00e9mu pou\u017e\u00edvate\u013eovi v aktu\u00e1lnom syst\u00e9me.\n<li class=\"l\"> V NFSv4 sa spr\u00e1vcov sna\u010f pon\u00faka mo\u017enos\u0165 vy\u010distenia stavov otvorenia a blokovania s\u00faborov.\n<li class=\"l\"> Pre s\u00faborov\u00fd syst\u00e9m Ext4 sa zaznamen\u00e1va len oprava ch\u00fdb a aktualiz\u00e1cia kunit testov.\n<li class=\"l\"> V Btrfs pokra\u010duje prevod funkci\u00ed na pou\u017e\u00edvanie foliantov str\u00e1nok pam\u00e4ti (page folios).\n<li class=\"l\">  V s\u00faborovom syst\u00e9me XFS sa pokra\u010duje v implement\u00e1cii mo\u017enosti pou\u017e\u00edvania utilitky fsck na kontrolu a opravu zisten\u00fdch probl\u00e9mov v online re\u017eime, bez odmontovania s\u00faborov\u00e9ho syst\u00e9mu.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho volania pwritev2() bol pridan\u00fd flag RWF_NOAPPEND, ktor\u00fd umo\u017e\u0148uje ur\u010di\u0165 posun pre z\u00e1pis, aj ke\u010f bol s\u00fabor otvoren\u00fd v re\u017eime iba na prid\u00e1vanie d\u00e1t na koniec s\u00faboru.\n<li class=\"l\"> Boli pridan\u00e9 nov\u00e9 ioctl-pr\u00edkazy: FS_IOC_GETUUID \u2014 vracia UUID-identifik\u00e1tor uveden\u00e9ho s\u00faborov\u00e9ho syst\u00e9mu a FS_IOC_GETFSSYSFSPATH \u2014 ur\u010duje umiestnenie v \/sys\/fs zn\u00e1mej pripojenej FS.\n<li class=\"l\"> S\u00faborov\u00e9 syst\u00e9my efs, qnx4 a coda boli preveden\u00e9 na pou\u017e\u00edvanie nov\u00e9ho API na pripojenie oddielov.\n<li class=\"l\"> Vylep\u0161en\u00e1 implement\u00e1cia oper\u00e1ci\u00ed so s\u00fabormi, vykon\u00e1van\u00fdch bez oh\u013eadu na ve\u013ekos\u0165 p\u00edsmen. Zv\u00fd\u0161en\u00fd v\u00fdkon prostredn\u00edctvom porovnania s oh\u013eadom na ve\u013ekos\u0165 p\u00edsmen na za\u010diatku a prechodu na vyh\u013ead\u00e1vanie bez oh\u013eadu na ve\u013ekos\u0165 p\u00edsmen. Rie\u0161en\u00e9 probl\u00e9my pri pripojen\u00ed overlayfs nad adres\u00e1rmi, pre ktor\u00e9 je nastaven\u00fd re\u017eim bez oh\u013eadu na ve\u013ekos\u0165 p\u00edsmen.                  <\/ul>\n<li class=\"l\"> <b>Pam\u00e4\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Implementovan\u00e1 podpora mechanizmu Intel FRED (Flexible Return and Event Delivery), vytvoren\u00e9ho na zv\u00fd\u0161enie efekt\u00edvnosti a spo\u013eahlivosti dod\u00e1vania inform\u00e1ci\u00ed o n\u00edzko\u00farov\u0148ov\u00fdch udalostiach v porovnan\u00ed s aktu\u00e1lne pou\u017e\u00edvan\u00fdm mechanizmom IDT (Interrupt Descriptor Table). Zlep\u0161enie v\u00fdkonu a skr\u00e1tenie oneskoren\u00ed je dosiahnut\u00e9 v\u010faka vracaniu udalost\u00ed pomocou procesorovej in\u0161trukcie IRET namiesto pren\u00e1\u0161ania udalost\u00ed cez tabu\u013eku IDT. Zlep\u0161enie spo\u013eahlivosti je zabezpe\u010den\u00e9 oddelen\u00fdm spracovan\u00edm pr\u00edchodu udalosti v kontexte jadra a kontexte pou\u017e\u00edvate\u013ea, ochranou pred vnoren\u00fdm vykon\u00e1van\u00edm NMI a uchov\u00e1van\u00edm v roz\u0161\u00edrenom z\u00e1sobn\u00edku v\u0161etk\u00fdch registrov CPU s\u00favisiacich s v\u00fdnimkami.\n<li class=\"l\"> Pridan\u00e1 mo\u017enos\u0165 optimaliz\u00e1cie pr\u00edstupu k \u00fadajom jednotliv\u00fdch jadier CPU prostredn\u00edctvom pou\u017e\u00edvania pomenovan\u00fdch adresn\u00fdch priestorov (Named Address Spaces) implementovan\u00fdch v GCC ako roz\u0161\u00edrenia GNU C.\n<li class=\"l\"> Do funkcie pidfd_open() bol pridan\u00fd pr\u00edznak PIDFD_THREAD, ktor\u00fd umo\u017e\u0148uje vytvorenie pidfd pre jednotliv\u00e9 vl\u00e1kna, a nie len pou\u017e\u00edva\u0165 pidfd v kontexte ved\u00faceho vl\u00e1kna. Bol tie\u017e navrhnut\u00fd pseudo-FS na pr\u00edstup k pidfd cez virtu\u00e1lny s\u00faborov\u00fd syst\u00e9m. Na rozdiel od identifik\u00e1cie procesov pomocou pid, identifik\u00e1tor pidfd je viazan\u00fd na konkr\u00e9tny proces a nemen\u00ed sa, zatia\u013e \u010do PID po ukon\u010den\u00ed aktu\u00e1lneho procesu m\u00f4\u017ee by\u0165 viazan\u00fd k in\u00e9mu procesu.\n<li class=\"l\"> Do subsyst\u00e9mu BPF bol pridan\u00fd mechanizmus BPF tokenov, ktor\u00fd umo\u017e\u0148uje selekt\u00edvne delegovanie pr\u00e1vomoc\u00ed programom na pr\u00edstup k privilegovan\u00fdm oper\u00e1ci\u00e1m BPF, napr\u00edklad je mo\u017en\u00e9 poskytn\u00fa\u0165 neprivilegovanej aplik\u00e1cii pr\u00edstup k jednotliv\u00fdm subsyst\u00e9mom BPF bez udelenia pln\u00fdch pr\u00e1v CAP_BPF.\n<li class=\"l\"> Do subsyst\u00e9me BPF bol pridan\u00fd nov\u00fd typ zdie\u013eanej pam\u00e4te bpf_arena, ktor\u00fd ur\u010duje oblas\u0165 dostupn\u00fa na zdie\u013eanie programami BPF a procesmi v u\u017e\u00edvate\u013eskom priestore. Pridan\u00e1 in\u0161trukcia may_goto, ktor\u00e1 umo\u017e\u0148uje organizova\u0165 cykly, ktor\u00e9 m\u00f4\u017eu by\u0165 preru\u0161en\u00e9 overova\u010dom. Pridan\u00e1 mo\u017enos\u0165 generova\u0165 v programoch BPF \u013eubovo\u013en\u00e9 TCP SYN cookie a vytv\u00e1ra\u0165 BPF spracov\u00e1vate\u013eov na boj proti SYN floodu.\n<li class=\"l\"> Pokra\u010doval prenos zmien z vetvy Rust-for-Linux, ktor\u00e9 s\u00favisia s pou\u017e\u00edvan\u00edm jazyka Rust ako druh\u00e9ho jazyka na v\u00fdvoj ovl\u00e1da\u010dov a modulov jadra (podpora Rust nie je predvolene akt\u00edvna a nevedie k zahrnutiu Rust medzi povinn\u00e9 z\u00e1vislosti pre zostavenie jadra). Bola pridan\u00e1 podpora pou\u017e\u00edvania jazyka Rust na 64-bitov\u00fdch procesoroch ARM. Pre\u0161lo sa na pou\u017e\u00edvanie verzie Rust 1.76. Bolo pridan\u00e9 makro \u2018container_of!\u2019. Namiesto nestabilnej funkcionality \u2018ptr_metadata\u2019 bol pou\u017eit\u00fd stabiln\u00fd pr\u00edstup \u2018byte_sub\u2019. Bol pridan\u00fd modul \u2018time\u2019 s funkciou premeny \u010dasu \u2018msecs_to_jiffies()\u2019.\n<li class=\"l\"> Do subsyst\u00e9mu io_uring bola pridan\u00e1 mo\u017enos\u0165 skracovania s\u00faborov (ftruncate_file).\n<li class=\"l\"> Pridan\u00fd nov\u00fd typ pracovn\u00fdch frontov WQ_BH (workqueue Bottom Halves) pre asynchr\u00f3nne vykon\u00e1vanie k\u00f3du v kontexte softv\u00e9rov\u00fdch preru\u0161en\u00ed, zameran\u00fd na pou\u017eitie namiesto zastaran\u00fdch tasklet-ov.\n<li class=\"l\"> V\u00fdrazne prepracovan\u00e1 subsyst\u00e9m pr\u00e1ce s \u010dasova\u010dom, v ktorom bola vylep\u0161en\u00e1 logika v\u00fdberu akt\u00edvneho CPU jadra na vykonanie spusten\u00e9ho \u010dasova\u010da, aby sa neprebudili neakt\u00edvne jadr\u00e1.\n<li class=\"l\"> Implementovan\u00e9 bolo mo\u017en\u00e9 aktualizova\u0165 model spotreby energie jadra (EM, Energy Model) po\u010das \u010dinnosti, \u010do m\u00f4\u017ee by\u0165 vyu\u017eit\u00e9 napr\u00edklad na zoh\u013eadnenie vplyvu prev\u00e1dzkovej teploty na energetick\u00fa \u00fa\u010dinnos\u0165 CPU. V\u00fdrazne sa zv\u00fd\u0161ila v\u00fdkonnos\u0165 funkcie em_cpu_energy(), ktor\u00e1 sa v testoch na stacion\u00e1rnom syst\u00e9me teraz vykon\u00e1va r\u00fdchlej\u0161ie o 1,43-kr\u00e1t, a v teste na doske RockPi 4B \u2014 o 1,69-kr\u00e1t.\n<li class=\"l\"> Pridan\u00e1 podpora sp\u00fa\u0161\u0165ania syst\u00e9mov zalo\u017een\u00fdch na architekt\u00fare ARM64 v re\u017eime LPA2 s 52-bitov\u00fdm virtu\u00e1lnym adresn\u00fdm priestorom.\n<li class=\"l\"> Pre syst\u00e9my ARM64 bola implementovan\u00e1 podpora kontinu\u00e1lnych z\u00e1znamov PTE (Page Table Entry), ktor\u00e9 umo\u017e\u0148uj\u00fa zv\u00fd\u0161i\u0165 v\u00fdkonnos\u0165 v\u010faka zlep\u0161eniu efekt\u00edvnosti vyu\u017eitia TLB (Translation Lookaside Buffer).\n<li class=\"l\"> Prijali sme opravy pre zlep\u0161enie v\u00fdkonu subsyst\u00e9mu spr\u00e1vy pam\u00e4te zn\u00ed\u017een\u00edm v\u00fdskytu konkuruj\u00facich z\u00e1mkov vo vmalloc().\n<li class=\"l\"> Pre architekt\u00faru LoongArch bol implementovan\u00fd mechanizmus hor\u00faceho prekr\u00fdvania opr\u00e1v (live patching), ktor\u00fd umo\u017e\u0148uje aplikova\u0165 opravy na jadro bez re\u0161tartu.\n<li class=\"l\"> Pre syst\u00e9my RISC-V bola implementovan\u00e1 podpora syst\u00e9mov\u00e9ho volania membarrier(), ktor\u00e1 zabezpe\u010duje nastavenie bari\u00e9r na pam\u00e4\u0165 pre be\u017eiace vl\u00e1kna v syst\u00e9me.\n<li class=\"l\"> Zv\u00fd\u0161ili sa po\u017eiadavky na verziu LLVM\/Clang, ktor\u00fa je mo\u017en\u00e9 pou\u017ei\u0165 na zostavenie jadra. Na zostavenie je teraz potrebn\u00e9 minim\u00e1lne vydanie LLVM 13.0.1 (predt\u00fdm bola podporovan\u00e1 aj zostava v LLVM 11+).\n<li class=\"l\"> Do mechanizmu \u201eUser trace events\u201c, ktor\u00fd umo\u017e\u0148uje vytv\u00e1ra\u0165 udalosti trasovania z pou\u017e\u00edvate\u013esk\u00fdch procesov na sledovanie aktivity v priestore pou\u017e\u00edvate\u013ea, bola pridan\u00e1 podpora exportu inform\u00e1ci\u00ed o udalosti v r\u00f4znych form\u00e1toch (USER_EVENT_REG_MULTI_FORMAT).\n<li class=\"l\"> Do mechanizmu sledovania volan\u00ed funkci\u00ed bola pridan\u00e1 mo\u017enos\u0165 sledovania stavu vstupn\u00fdch argumentov funkcie pri sledovan\u00ed v\u00fdstupu z funkcie. Hodnoty oper\u00e1tora return je teraz mo\u017en\u00e9 porovna\u0165 s argumentmi pou\u017eit\u00fdmi pri volan\u00ed funkcie.\n<li class=\"l\"> Do n\u00e1stroja perf bola pridan\u00e1 podpora re\u017eimu agreg\u00e1cie v\u00fdstupu \u201ecluster\u201c (\u201eperf stat -a \u2014per-cluster\u201c) na zlu\u010dovanie \u0161tatistiky zdie\u013ean\u00fdch zdrojov. Bol implementovan\u00fd aj mechanizmus vyu\u017eitia kni\u017enice libcapstone na disasemblerovanie in\u0161trukci\u00ed procesora (\u201eperf script -F disasm\u201c). Boli vykonan\u00e9 optimaliz\u00e1cie spotreby pam\u00e4te pri vykon\u00e1van\u00ed pr\u00edkazov perf report a perf annotate.                    <\/ul>\n<li class=\"l\"> <b>Virtualiz\u00e1cia a bezpe\u010dnos\u0165<\/b>\n<ul>\n<li class=\"l\"> Pridan\u00e1 ochrana proti zranite\u013enosti RFDS (Register File Data Sampling) v procesoroch Intel Atom, ktor\u00e1 umo\u017e\u0148uje extrahova\u0165 zvy\u0161kov\u00e9 inform\u00e1cie z registra\u010dn\u00fdch s\u00faborov (RF, Register File) procesora, ktor\u00e9 sa pou\u017e\u00edvaj\u00fa na spolo\u010dn\u00e9 uchov\u00e1vanie obsahu registrov vo v\u0161etk\u00fdch \u00faloh\u00e1ch na rovnakom jadre CPU. Na zablokovanie zranite\u013enosti je potrebn\u00e1 aktualiz\u00e1cia mikroprogramu a pou\u017eitie in\u0161trukcie VERW na vy\u010distenie obsahu mikroarchitektonick\u00fdch b\u00faferov v momente n\u00e1vratu z jadra do priestoru pou\u017e\u00edvate\u013ea. Na zapnutie ochrany pri zav\u00e1dzan\u00ed jadra je mo\u017en\u00e9 zada\u0165 pr\u00edznak \u201ereg_file_data_sampling=on\u201c. Inform\u00e1cie o zranite\u013enosti a dostupnosti potrebn\u00e9ho mikroprogramu na ochranu je mo\u017en\u00e9 hodnoti\u0165 v s\u00fabore \u201e\/sys\/devices\/system\/cpu\/vulnerabilities\/reg_file_data_sampling\u201c.\n<li class=\"l\"> Pridan\u00e1 z\u00e1kladn\u00e1 podpora ochrany hostite\u013esk\u00fdch syst\u00e9mov pomocou roz\u0161\u00edrenia AMD SEV-SNP (Secure Nested Paging), ktor\u00e9 zabezpe\u010duje bezpe\u010dn\u00fa pr\u00e1cu s vnoren\u00fdmi tabu\u013ekami str\u00e1n pam\u00e4te a chr\u00e1ni proti \u00fatokom \u201eundeSErVed\u201c a \u201eSEVerity\u201c na procesory AMD EPYC, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 ochrann\u00fd mechanizmus AMD SEV (Secure Encrypted Virtualization). <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/vps\/abuzoustojchivye-vps\/\"   title=\"KVM\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4384\">KVM<\/a> potrebn\u00e9 na vyu\u017eitie SNP zmeny sa pl\u00e1nuj\u00fa prida\u0165 do vetvy 6.10.\n<li class=\"l\"> Moduly s implement\u00e1ciou technol\u00f3gi\u00ed IMA (Integrity Measurement Architecture) a EVM (Extended Verification Module) boli preveden\u00e9 na vyu\u017e\u00edvanie r\u00e1mca LSM (Linux Security Modules), \u010do bez straty funk\u010dnosti umo\u017enilo v\u00fdrazne zjednodu\u0161i\u0165 k\u00f3d, skombinova\u0165 duplicitn\u00e9 funk\u010dnosti a vyu\u017ei\u0165 dostupn\u00e9 prostredn\u00edctvom LSM norm\u00e1lne mo\u017enosti. Modul IMA je ur\u010den\u00fd na kontrolu integrity komponentov opera\u010dn\u00e9ho syst\u00e9mu pomocou digit\u00e1lnych podpisov a hashov. Modul EVM chr\u00e1ni roz\u0161\u00edren\u00e9 atrib\u00faty s\u00faborov (xattrs) pred \u00fatokmi zameran\u00fdmi na naru\u0161enie ich integrity (EVM neumo\u017en\u00ed vykona\u0165 offline \u00fatok, pri ktorom by \u00fato\u010dn\u00edk mohol zmeni\u0165 metad\u00e1ta, napr\u00edklad na\u0161tartovan\u00edm z vlastn\u00e9ho \u00falo\u017eiska).\n<li class=\"l\"> Prepracovan\u00e9 pre v\u00e4\u010d\u0161iu kompatibilitu s 32-bitov\u00fdmi prostrediami syst\u00e9mov\u00e9 volania lsm_list_modules(), lsm_get_self_attr() a lsm_set_self_attr(), ur\u010den\u00e9 na zobrazenie zoznamu na\u010d\u00edtan\u00fdch LSM modulov (Linux Security Modules) a z\u00edskanie\/nastavenie atrib\u00fatov LSM modulu. Zmena naru\u0161uje sp\u00e4tn\u00fa kompatibilitu, no ke\u010f\u017ee nov\u00e9 syst\u00e9mov\u00e9 volania boli pridan\u00e9 v predch\u00e1dzaj\u00facej verzii jadra a zatia\u013e sa nepou\u017e\u00edvaj\u00fa v aplik\u00e1ci\u00e1ch, Linus Torvalds pova\u017eoval t\u00fato zmenu za pr\u00edpustn\u00fa.\n<li class=\"l\"> Bola podniknut\u00e1 snaha obnovi\u0165 pou\u017e\u00edvanie mechanizmu UBSAN (Undefined Behavior Sanitizer). Podstatou probl\u00e9mu je, \u017ee kompil\u00e1tory r\u00f4zne spracov\u00e1vaj\u00fa celo\u010d\u00edseln\u00e9 preteky v znamienkov\u00fdch a neznamienkov\u00fdch typoch. Znamienkov\u00e9 preteky a preteky ukazovate\u013eov patria do kateg\u00f3rie neur\u010dit\u00e9ho spr\u00e1vania, zatia\u013e \u010do neznamienkov\u00e9 preteky sa orez\u00e1vaj\u00fa pod\u013ea modulu 2n a zachovaj\u00fa iba ni\u017e\u0161ie bity v\u00fdsledku (\"wrap-around\") a nepadaj\u00fa pod neur\u010dit\u00e9 spr\u00e1vanie. Aby sa vyl\u00fa\u010dili situ\u00e1cie s v\u00fdskytom neur\u010dit\u00fdch spr\u00e1van\u00ed, jadro sa zostavuje s mo\u017enos\u0165ou \"-fno-strict-overflow\", \u010do vedie k pou\u017e\u00edvaniu \"wrap-around\" pre v\u0161etky celo\u010d\u00edseln\u00e9 preteky. GCC a Clang nem\u00f4\u017eu spr\u00e1vne diagnostikova\u0165 niektor\u00e9 probl\u00e9my pri pou\u017eit\u00ed prep\u00edna\u010da \"-fno-strict-overflow\" a zapnutie UBSAN je zameran\u00e9 na vykon\u00e1vanie spolupr\u00e1ce s v\u00fdvoj\u00e1rmi kompil\u00e1torov na odstr\u00e1nen\u00ed falo\u0161n\u00fdch pozit\u00edv a odhalen\u00ed celo\u010d\u00edseln\u00fdch pretekov na miestach, kde nie s\u00fa explicitn\u00e9 kontroly.\n<p>Na kontrolu mo\u017en\u00fdch pretekov v jadre sa pou\u017e\u00edvaj\u00fa kon\u0161trukcie typu \"var + offset <var> PAGE_SHIFT) &lt; pgoff){..}&quot;), ktor\u00e9 s\u00fa viazan\u00e9 na zostavenie s prep\u00edna\u010dom &quot;-fno-strict-overflow&quot; a nepokr\u00fdvaj\u00fa cel\u00fd k\u00f3d, v ktorom m\u00f4\u017ee potenci\u00e1lne d\u00f4js\u0165 k preteku. Probl\u00e9m spo\u010d\u00edva v tom, \u017ee pri pou\u017eit\u00ed UBSAN tak\u00e9to kontroly viedli k v\u00fdstupu ve\u013ek\u00e9ho mno\u017estva falo\u0161n\u00fdch varovan\u00ed, a preto v roku 2021 musel by\u0165 UBSAN vypnut\u00fd. V aktualizovanej implement\u00e1cii sa navrhuje pou\u017ei\u0165 \u0161peci\u00e1lne anot\u00e1cie __signed_wrap a __unsigned_wrap, ako aj hotov\u00e9 makr\u00e1 s kontrolami add_would_overflow(a, b) a add_wrap(a, b), ktor\u00e9 umo\u017e\u0148uj\u00fa oddeli\u0165 zam\u00fd\u0161\u013ean\u00e9 pou\u017eitie celo\u010d\u00edseln\u00fdch pretekov od n\u00e1hodn\u00fdch pretekov, ktor\u00e9 m\u00f4\u017eu vies\u0165 k zranite\u013enostiam. N\u00e1vrh na rozsiahlej\u0161iu transform\u00e1ciu jadra so zaveden\u00edm dodato\u010dn\u00fdch defin\u00edci\u00ed typov bol zamietnut\u00fd Linusom Torvaldsom.                      <\/ul>\n<li class=\"l\"> <b>Sie\u0165ov\u00fd subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\">  V sie\u0165ovej subsyst\u00e9me bola vykonan\u00e1 pr\u00e1ca na zn\u00ed\u017een\u00ed vzniku konkuruj\u00facich z\u00e1mkov (\"lock contention\", pokus o z\u00edskanie z\u00e1mku, ktor\u00fd je dr\u017een\u00fd in\u00fdm vl\u00e1knom). Zn\u00ed\u017eila sa potreba z\u00e1mkov RTNL.\n<li class=\"l\"> Pridan\u00e1 mo\u017enos\u0165 zapn\u00fa\u0165 podporu akt\u00edvneho polling-u soketov (busy polling) v kontexte jednotliv\u00fdch volan\u00ed epoll. Ve\u013ekos\u0165 poolu a parametre rozpo\u010dtu m\u00f4\u017eu by\u0165 nastaven\u00e9 oddelene od syst\u00e9mov\u00fdch predvolen\u00fdch parametrov.\n<li class=\"l\"> Implementovan\u00e1 \u0161trukt\u00fara net_hotdata na zlep\u0161enie efektivity caching-u naj\u010dastej\u0161ie pou\u017e\u00edvan\u00fdch premenn\u00fdch sie\u0165ovej konfigur\u00e1cie.\n<li class=\"l\"> V MPTCP bola pridan\u00e1 podpora pre nastavenie pre z\u00e1suvky opcie TCP_NOTSENT_LOWAT, ktor\u00e1 umo\u017e\u0148uje obmedzi\u0165 ve\u013ekos\u0165 odosielacieho vyrovn\u00e1vacieho priestoru. V API pre z\u00e1suvky MCTP bola pridan\u00e1 podpora identifik\u00e1torov siete (&#171;network ID&#187;), ktor\u00e9 umo\u017e\u0148uj\u00fa pou\u017e\u00edva\u0165 na jednom hostite\u013eovi nieko\u013eko neprekryvn\u00fdch siet\u00ed MCTP.\n<li class=\"l\"> V IPSec bola pridan\u00e1 podpora pre presmerovanie ICMP spr\u00e1v s inform\u00e1ciami o chyb\u00e1ch (RFC 4301).\n<li class=\"l\"> Ur\u00fdchlen\u00fd proces skenovania tr\u00e1s s vypr\u0161anou dobou \u017eivota.\n<li class=\"l\"> Pr\u00e1ca XDP bola ur\u00fdchlen\u00e1 v\u010faka pr\u00edsnej\u0161iemu vyh\u00fdbaniu sa alok\u00e1cii ve\u013ek\u00fdch blokov pam\u00e4te.\n<li class=\"l\"> Pridan\u00e1 mo\u017enos\u0165 pripojenia metad\u00e1t k spr\u00e1vam netconsole.\n<li class=\"l\"> V Netfilter povolen\u00e9 definovanie z u\u017e\u00edvate\u013esk\u00e9ho priestoru tabuliek, ktor\u00e9 sa via\u017eu na riadiaci pozadov\u00fd proces a automaticky sa neodstra\u0148uj\u00fa po skon\u010den\u00ed u\u017e\u00edvate\u013eskej aplik\u00e1cie.\n<li class=\"l\"> V nftables ur\u00fdchlen\u00e9 prid\u00e1vanie prvkov do set-re\u0165azcov s kombinovan\u00fdmi rozsahmi.                      <\/ul>\n<li class=\"l\"> <b>Zariadenie<\/b>\n<ul>\n<li class=\"l\"> V ovl\u00e1da\u010di i915 pokra\u010dovali pr\u00e1ce na implement\u00e1cii podpory \u010dipov Intel LunarLake (Xe 2). Pridan\u00e9 nov\u00e9 PCI identifik\u00e1tory pre zariadenia zalo\u017een\u00e9 na \u010dipoch Intel Arrow Lake a Alder Lake N. Pre DisplayPort bola pridan\u00e1 podpora tunelovania (DP tunneling) a alok\u00e1cie \u0161\u00edrky p\u00e1sma (bandwidth allocation). Pre v\u0161etky platformy je zapnut\u00fd re\u017eim fastboot. Pridan\u00e1 podpora debug outputu viazan\u00e9ho na jednotliv\u00e9 zariadenia.\n<li class=\"l\"> V ovl\u00e1da\u010di AMDGPU bola vykonan\u00e1 pr\u00edprava na implement\u00e1ciu podpory GPU AMD RDNA3.5 a RDNA4. Pridan\u00e1 podpora ATHUB 4.1, LSDMA 7.0, JPEG DPG, IH 7.0, HDP 7.0, VCN 5.0, SMU 13.0.6, NBIO 7.11, SDMA 6.1, MMHUB 3.3, DCN 3.5.1, NBIF 6.3.1, VPE 6.1.1 a frameworku RAS ACA. Do jadrov\u00e9ho modulu bol pridan\u00fd parameter freesync_video na zapnutie experiment\u00e1lnej podpory optimaliz\u00e1cie prep\u00ednania videore\u017eimov pomocou technol\u00f3gie adapt\u00edvnej synchroniz\u00e1cie FreeSync.\n<li class=\"l\"> V ovl\u00e1da\u010di Nouveau k\u00f3d spr\u00e1vy obrazovky pre\u0161iel na pou\u017e\u00edvanie funkcie kmemdup().\n<li class=\"l\"> Pokra\u010duje sa na pr\u00e1ci na drm ovl\u00e1da\u010di (Direct Rendering Manager) Xe pre GPU zalo\u017een\u00e9 na architekt\u00fare Intel Xe, ktor\u00e1 sa pou\u017e\u00edva vo grafick\u00fdch kart\u00e1ch Intel rodiny Arc a integrovan\u00fdch grafik\u00e1ch, po\u010dn\u00fac procesormi Tiger Lake.\n<li class=\"l\"> Pridan\u00fd DRM ovl\u00e1da\u010d pre \u010dipy Mediatek MT8188 VDOSYS1.\n<li class=\"l\"> Nastavenia jadra s\u00favisiace s videopod syst\u00e9mami boli presunut\u00e9 do sekcie CONFIG_VIDEO.\n<li class=\"l\"> Pridan\u00e1 podpora ARM64 SoC: Mediatek MT7981B (Filogic 820), MT7988A (Filogic 880), NXP i.MX8DXP, Renesas R8A779G2 (R-Car V4H ES2.0), R8A779H0 (R-Car V4M), TI J722S.\n<li class=\"l\"> Pridan\u00e1 podpora ARM platforiem a zariaden\u00ed: Android telef\u00f3ny zalo\u017een\u00e9 na \u010dipe Tegra30, modely Chromebook zalo\u017een\u00e9 na Mediatek MT8186, NAS, tablety a hern\u00e9 konzoly na b\u00e1ze Rockchips RK35xx, dosky White Hawk zalo\u017een\u00e9 na SoC Renesas, dosky zalo\u017een\u00e9 na Qualcomm SM8550 (Snapdragon 8 Gen 2), Apalis Evaluation Board, Sielaff i.MX6 Solo Board, Samsung Galaxy Tab 4 10.1 LTE.\n<li class=\"l\"> Prebehlo refaktoring k\u00f3du zvukov\u00e9ho subsyst\u00e9mu ALSA. Pridan\u00e1 podpora zvukov\u00fdch syst\u00e9mov Microchip SAM9x7, NXP i.MX95 a Qualcomm WCD939x. V ovl\u00e1da\u010di SoundWire bola pridan\u00e1 podpora ASoC so zvukov\u00fdmi koprocesormi AMD ACP 6.3 a pre syst\u00e9my Intel bol implementovan\u00fd re\u017eim DSPless. Pridan\u00e1 podpora dodato\u010dn\u00fdch zvukov\u00fdch kodekov Cirrus HD. V ovl\u00e1da\u010di virtio bolo zlep\u0161en\u00e9 riadenie zvukov\u00fdch zariaden\u00ed.\n<li class=\"l\"> Pridan\u00e1 podpora Ethernet ovl\u00e1da\u010dov Marvell Octeon PCI Endpoint NIC VF a Intel E825-C 100G.            <\/ul>\n<\/ul>\n<p>Z\u00e1rove\u0148 latinskoamerick\u00fd Fond vo\u013en\u00e9ho softv\u00e9ru vytvoril variant \u00faplne vo\u013en\u00e9ho jadra 6.9 \u2014 Linux-libre 6.9-gnu, vy\u010disten\u00e9ho od prvkov firmv\u00e9ru a ovl\u00e1da\u010dov obsahuj\u00facich nevlastn\u00e9 komponenty alebo \u010dasti k\u00f3du, ktor\u00fdch pou\u017eitie je obmedzen\u00e9 v\u00fdrobcom. V vydan\u00ed 6.9 bol aktualizovan\u00fd k\u00f3d \u010distenia blobov v ovl\u00e1da\u010doch amdgpu, ath12k, adreno, btusb a r8169. Prebehlo \u010distenie nov\u00e9ho ovl\u00e1da\u010da ptp_fc3. Boli vy\u010disten\u00e9 men\u00e1 blobov v dts s\u00faboroch (devicetree) pre architekt\u00faru Aarch64. Boli odstr\u00e1nen\u00e9 probl\u00e9my s \u010disten\u00edm ovl\u00e1da\u010da i915, ktor\u00e9 sp\u00f4sobovali zamrznutie po\u010das inicializ\u00e1cie. Boli vykonan\u00e9 zmeny t\u00fdkaj\u00face sa spracovania blobov, dod\u00e1van\u00fdch vo forme hexadecim\u00e1lnych volan\u00ed.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61160\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043c\u043e\u0434\u0443\u043b\u044c dm-vdo \u0434\u043b\u044f \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u0436\u0430\u0442\u0438\u044f \u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0440\u0435\u0436\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0432 FUSE, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f pidfd \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c BPF-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 Rust \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 ARM64, \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u0424\u0421 Ext2 \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 NTFS, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115726","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-9\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-9\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-05-13T11:52:06+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-05-13T11:52:06+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie jadra Linux 6.9 | ProHoster","description":"Po dvoch mesiacoch v\u00fdvoja Linus Torvalds predstavil vydanie jadra Linux 6.9.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-9","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.9.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-9","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-13T11:52:06+00:00","article:modified_time":"2024-05-13T11:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115726","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 00:14:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 00:14:20","updated":"2026-01-23 00:14:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/115726","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=115726"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/115726\/revisions"}],"predecessor-version":[{"id":164261,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/115726\/revisions\/164261"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=115726"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=115726"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=115726"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}