- \n
- V Device Mapper bol pridan\u00fd spracovate\u013e dm-pcache pre pou\u017e\u00edvanie trvalej pam\u00e4te (CXL pam\u00e4\u0165, adresovate\u013en\u00e1 cez DAX zariadenie) ako dodato\u010dn\u00e1 vysokov\u00fdkonn\u00e1 cache pred pomal\u0161\u00edmi tradi\u010dn\u00fdmi diskov\u00fdmi alebo flash pam\u00e4\u0165ami. Dm-pcache zabezpe\u010duje uchovanie obsahu cache v pr\u00edpade hav\u00e1rie (crash-safe) pomocou nepou\u017eite\u013enej pam\u00e4te, duplik\u00e1cie metad\u00e1t a kontroly integrity d\u00e1t a metad\u00e1t pomocou kontroln\u00fdch s\u00fa\u010dtov CRC32. V s\u00fa\u010dasnosti sa podporuje iba cache v re\u017eime odlo\u017eenej z\u00e1pisu (write-back).\n
- Z jadra bol odstr\u00e1nen\u00fd k\u00f3d s\u00faborov\u00e9ho syst\u00e9mu Bcachefs, ktor\u00fd teraz bude distribuovan\u00fd vo forme extern\u00e9ho modulu kompilovan\u00e9ho pomocou n\u00e1strojov DKMS (Dynamic Kernel Module Support). K\u00f3d Bcachefs m\u00f4\u017ee by\u0165 v bud\u00facnosti vr\u00e1ten\u00fd do jadra po tom, \u010do Kent Overstreet preuk\u00e1\u017ee jeho schopnos\u0165 spolupracova\u0165 s ostatn\u00fdmi v\u00fdvoj\u00e1rmi jadra a dodr\u017eiava\u0165 ust\u00e1len\u00e9 pravidl\u00e1 v\u00fdvoja.\n
- Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed pwritev2() byl p\u0159id\u00e1n p\u0159\u00edznak RWF_NOSIGNAL, kter\u00fd deaktivuje odes\u00edl\u00e1n\u00ed sign\u00e1lu SIGPIPE p\u0159i zapisov\u00e1n\u00ed do roztr\u017een\u00fdch nepojmenovan\u00fdch kan\u00e1l\u016f nebo soket\u016f.\n
- Do Procfs bola pridan\u00e1 mo\u017enos\u0165 mont\u00e1\u017ee \"pidns\" na ur\u010denie priestorov n\u00e1zvov identifik\u00e1torov procesov (PID namespace). Napr\u00edklad: \"mount -t proc -o pidns=\\\/proc\\\/self\\\/ns\\\/pid proc \\\/tmp\\\/proc\".\n
- Ve XFS byla vyhl\u00e1\u0161ena stabiln\u00ed a ve v\u00fdchoz\u00edm nastaven\u00ed byla aktivov\u00e1na mo\u017enost pou\u017eit\u00ed utilit fsck pro kontrolu a opravu zji\u0161t\u011bn\u00fdch probl\u00e9m\u016f v online re\u017eimu, bez odpojen\u00ed souborov\u00e9ho syst\u00e9mu. Byla p\u0159id\u00e1na syst\u00e9mov\u00e1 vol\u00e1n\u00ed file_getattr a file_setattr pro zm\u011bnu atribut\u016f speci\u00e1ln\u00edch soubor\u016f (jak\u00fdchkoli inode). V KConfig byly ve v\u00fdchoz\u00edm nastaven\u00ed deaktivov\u00e1ny mo\u017enosti XFS_SUPPORT_V4 (4. verze XFS) a XFS_SUPPORT_ASCII_CI (re\u017eim bez ohledu na velikost p\u00edsmen ASCII), kter\u00e9 byly ozna\u010deny za zastaral\u00e9. Byly odstran\u011bny zastaral\u00e9 mo\u017enosti p\u0159ipojen\u00ed attr2, noattr2, ikeep a noikeep.\n
- V MD RAID bol implementovan\u00fd nov\u00fd typ bitov\u00fdch m\u00e1p - llbitmap (lockless bitmap), ktor\u00fd funguje bez blokovania a poskytuje vy\u0161\u0161\u00ed v\u00fdkon.\n
- Z celkovej \u0161trukt\u00fary \"inode\" bola vy\u0148at\u00e1 inform\u00e1cia s\u00favisiaca so \u0161ifrovan\u00edm a verifik\u00e1ciou (ukazovatele i_crypt_info a i_verity_info). T\u00e1to zmena umo\u017e\u0148uje zn\u00ed\u017eenie spotreby pam\u00e4te v s\u00faborov\u00fdch syst\u00e9moch, ktor\u00e9 nepodporuj\u00fa \u0161ifrovanie a verifik\u00e1ciu.\n
- Do subsyst\u00e9mu FUSE byla p\u0159id\u00e1na podpora syst\u00e9mov\u00e9ho vol\u00e1n\u00ed copy_file_range() a p\u0159\u00edm\u00e9ho kop\u00edrov\u00e1n\u00ed oblast\u00ed s vyu\u017eit\u00edm velikosti s 64bitov\u00fdm typem (d\u0159\u00edve byla podporov\u00e1na pouze 32bitov\u00e1 velikost). Byla p\u0159id\u00e1na podpora inicializace v synchronn\u00edm re\u017eimu b\u011bhem p\u0159ipojen\u00ed (FUSE_DEV_IOC_SYNC_INIT).\n
- Ve FS ext4 byla realizov\u00e1na mo\u017enost pou\u017eit\u00ed 32bitov\u00fdch identifik\u00e1tor\u016f u\u017eivatel\u016f (uid) a skupin (gid) p\u0159i p\u0159\u00edstupu k rezervovan\u00fdm blok\u016fm. Byly p\u0159id\u00e1ny ioctl operace pro nastaven\u00ed a \u010dten\u00ed parametr\u016f superbloku p\u0159ipojen\u00fdch FS (tune2fs bude moci m\u011bnit parametry v superbloku bez pr\u00e1va na z\u00e1pis do blokov\u00e9ho za\u0159\u00edzen\u00ed). Byly zcela odstran\u011bny zastaral\u00e9 nastaven\u00ed specifick\u00e1 pro ext3.\n
- Do f2fs bola pridan\u00e1 mo\u017enos\u0165 mont\u00e1\u017ee \"lookup_mode\" na v\u00fdber re\u017eimu vyh\u013ead\u00e1vania: perf - vyh\u013ead\u00e1vanie pod\u013ea hash, compat - line\u00e1rne vyh\u013ead\u00e1vanie, auto - automatick\u00fd v\u00fdber. Zmena re\u017eimu m\u00e1 zmysel pre konfigur\u00e1cie s adres\u00e1rmi, v ktor\u00fdch sa nezoh\u013ead\u0148uje ve\u013ekos\u0165 p\u00edsmen. Aktu\u00e1lny re\u017eim vyh\u013ead\u00e1vania si m\u00f4\u017eete zisti\u0165 prostredn\u00edctvom s\u00faboru \"\\\/sys\\\/fs\\\/f2fs\\\/\\\/effective_lookup_mode\". Pridan\u00e1 mo\u017enos\u0165 rezerv\u00e1cie inode, dostupn\u00fdch len privilegovan\u00fdm pou\u017e\u00edvate\u013eom.\n
- Do Overlayfs bol pridan\u00fd re\u017eim prev\u00e1dzky bez zoh\u013eadnenia ve\u013ekosti p\u00edsmen, ktor\u00fd sa aktivuje na \u00farovni vrstiev FS (nastavenie pre jednotliv\u00e9 adres\u00e1re zatia\u013e nie je podporovan\u00e9).\n
- V BTRFS bolo vylep\u0161en\u00e9 paralelizovanie oper\u00e1ci\u00ed pri vysokej z\u00e1\u0165a\u017ei \u010d\u00edtania a n\u00edzkej z\u00e1pisu, zn\u00ed\u017een\u00fd \u010das potvrdenia transakci\u00ed, v\u00fdrazne skr\u00e1ten\u00fd \u010das synchroniz\u00e1cie (z min\u00fat na desiatky sek\u00fand). Poskytnut\u00e1 mo\u017enos\u0165 pou\u017e\u00edva\u0165 bloky (bs) v\u00e4\u010d\u0161ie ako ve\u013ekos\u0165 pam\u00e4\u0165ovej str\u00e1nky (ps).\n
- Do ksmbd (pracuje na \u00farovni jadra SMB servera) bola pridan\u00e1 mo\u017enos\u0165 na obmedzenie maxim\u00e1lneho po\u010dtu pripojen\u00ed z jedn\u00e9ho. IP adresy<\/a>. smbdirect, smbclient a smbserver boli prechod na pou\u017e\u00edvanie typov\u00fdch \u0161trukt\u00far jadra.\n
- Do SQUASHFS bola pridan\u00e1 mo\u017enos\u0165 pou\u017e\u00edvania v syst\u00e9movom volan\u00ed lseek() volieb SEEK_DATA a SEEK_HOLE na vyh\u013ead\u00e1vanie d\u00e1t a pr\u00e1zdnych miest v riedkych s\u00faboroch. V niektor\u00fdch testoch bolo zaznamenan\u00e9 zv\u00fd\u0161enie v\u00fdkonu kop\u00edrovania riedkych s\u00faborov a\u017e 150-n\u00e1sobne.\n
- Do EXFAT bola pridan\u00e1 podpora ioctl FS_IOC_GETFSLABEL a FS_IOC_SETFSLABEL na \u010d\u00edtanie a z\u00e1pis ozna\u010den\u00ed oddielov. Poskytnut\u00e1 mo\u017enos\u0165 zmeny mo\u017enost\u00ed montovania po\u010das pre-montovania. Ur\u00fdchlen\u00e9 na\u010d\u00edtanie bitmap.\n
- Do NTFS3 bola pridan\u00e1 podpora ioctl FS_IOC_GETFSLABEL a FS_IOC_SETFSLABEL pre \u010d\u00edtanie a nastavenie ozna\u010den\u00ed oddielov. <\/ul>\n
- Pam\u00e4\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n
- \n
- Do t\u00edmu bola akceptovan\u00e1 implement\u00e1cia mechanizmu medziprocesovej komunik\u00e1cie Binder, nap\u00edsan\u00e1 v jazyku Rust. Binder sa pou\u017e\u00edva v Androide na organizovanie interakcie medzi procesmi a vzdialen\u00e9 volanie met\u00f3d (jeden proces Android m\u00f4\u017ee zavola\u0165 met\u00f3du alebo funkciu v inom procese Android pomocou Bindera na identifik\u00e1ciu, volanie a prenos argumentov medzi procesmi). K\u00f3d Binder bol prepisovan\u00fd v jazyku Rust v r\u00e1mci iniciat\u00edvy Google na posilnenie bezpe\u010dnosti Androidu.\n
- V SLUB, alok\u00e1tore pam\u00e4te jadra, bol implementovan\u00fd volite\u013en\u00fd vrstven\u00fd cache \"sheaves\", ktor\u00fd vyu\u017e\u00edva nieko\u013eko cache, z ktor\u00fdch ka\u017ed\u00e1 je viazan\u00e1 na samostatn\u00e9 jadro CPU, \u010do umo\u017e\u0148uje lokalizova\u0165 jedn\u00fdm jadrom oper\u00e1cie pri prerozde\u013eovan\u00ed alebo uvo\u013e\u0148ovan\u00ed pam\u00e4te. Tak\u00e1to cache zv\u00fd\u0161ila v\u00fdkon prerozde\u013eovania a uvo\u013e\u0148ovania pam\u00e4te v jadre, v\u010faka odstr\u00e1neniu nadbyto\u010dn\u00fdch synchroniza\u010dn\u00fdch primit\u00edv, ktor\u00e9 s\u00fa potrebn\u00e9 pri zapojen\u00ed r\u00f4znych jadier CPU. V vykonan\u00fdch testoch dosiahol n\u00e1rast v\u00fdkonu od 6.3% do 31% v z\u00e1vislosti od typu z\u00e1\u0165a\u017ee.\n
- Pridan\u00e1 mo\u017enos\u0165 vytv\u00e1rania s\u00faborov\u00fdch deskriptorov, ktor\u00e9 s\u00fa identifikovan\u00e9 s konkr\u00e9tnym priestorom mien (namespace). Na rozdiel od pr\u00edstupu k priestorom mien cez identifik\u00e1tory (\\\/proc\\\/\\\/ns\\\/), s\u00faborov\u00fd deskriptor je viazan\u00fd na konkr\u00e9tny pr\u00edpad priestoru mien a zabra\u0148uje situ\u00e1cii, kedy by identifik\u00e1tor bol op\u00e4tovne pridelen\u00fd a ukazoval u\u017e na in\u00fd objekt. Podobne ako pri pou\u017eite\u013enosti pidfds, otvorenie s\u00faborov\u00fdch deskriptorov, ktor\u00e9 odkazuj\u00fa na priestory mien, sa realizuje cez funkcie open_by_handle_at() a name_to_handle_at().\n
- Bol mechanizmus \u201eSwap Table\u201c, ktor\u00fd zvy\u0161uje v\u00fdkon swapovania. Zr\u00fdchlenie sa dosahuje zn\u00ed\u017een\u00edm konkurencie o pr\u00edstup do cache, efekt\u00edvnej\u0161\u00edm vyh\u013ead\u00e1van\u00edm v cache a zn\u00ed\u017een\u00edm fragment\u00e1cie. Backend zalo\u017een\u00fd na Swap Table sa pou\u017e\u00edva na cacheovanie swapu namiesto backendu XArray a vo v\u0161eobecnosti umo\u017enil zv\u00fd\u0161i\u0165 v\u00fdkon o 5-20 %. V teste usemem vzr\u00e1stla priepustnos\u0165 o 17-28 %, v teste viacn\u00e1sobnej prekompil\u00e1cie jadra sa \u010das kompil\u00e1cie zn\u00ed\u017eil o 1,12-3,19 %, test redis-benchmark s BGSAVE vyk\u00e1zal zv\u00fd\u0161enie po\u010dtu spracovan\u00fdch po\u017eiadaviek o 6-7 %.\n
- Subsystem Zswap bol prelo\u017een\u00fd na priame pou\u017e\u00edvanie syst\u00e9mu pridelenia pam\u00e4te zsmalloc namiesto vrstvy zpool, ktor\u00e1 sa u\u017e nikde nepou\u017e\u00edva a teraz bola odstr\u00e1nen\u00e1 z jadra.\n
- Na riadenie spr\u00e1vania bootloadera mikrok\u00f3du na syst\u00e9moch x86 bola implementovan\u00e1 mo\u017enos\u0165 pr\u00edkazov\u00e9ho riadka \u201emicrocode=zoznam pr\u00edznakov\u201c. V s\u00fa\u010dasnej podobe nov\u00e1 mo\u017enos\u0165 nahr\u00e1dza \u201emicrocode.force_minrev\u201c a tie\u017e umo\u017e\u0148uje zada\u0165 minim\u00e1lne akceptovate\u013en\u00fa verziu mikrok\u00f3du na bootovanie.\n
- Za\u010dala sa pr\u00e1ca na reorganiz\u00e1cii pr\u00edli\u0161 zlo\u017eit\u00fdch \u0161trukt\u00far \u201epage\u201c, ktor\u00e9 sa pou\u017e\u00edvaj\u00fa na riadenie str\u00e1nok opera\u010dnej pam\u00e4te. Bol pridan\u00fd typ \u2018memdesc_flags_t\u2019 pre polia s univerz\u00e1lnymi pr\u00edznakmi, ktor\u00e9 sa bud\u00fa m\u00f4c\u0165 pou\u017ei\u0165 po o\u010dak\u00e1vanom bud\u00facom vy\u010dlenen\u00ed jednotliv\u00fdch \u0161trukt\u00far zo \u0161trukt\u00fary \u201epage\u201c pre slab a folianty (folio).\n
- Pre architekt\u00faru nios2, pou\u017e\u00edvan\u00fa v procesoroch Altera Nios II (soft-procesor na b\u00e1ze FPGA), bola implementovan\u00e1 podpora syst\u00e9mov\u00e9ho volania clone3().\n
- Do konfigur\u00e1cie jadra (KConfig) bol pridan\u00fd atrib\u00fat \u201etransitional\u201c, ktor\u00fd sa m\u00f4\u017ee pou\u017ei\u0165 na ozna\u010denie nastaven\u00ed, ktor\u00e9 sa nezobrazuj\u00fa v pou\u017e\u00edvate\u013esk\u00fdch rozhran\u00ed, ako je \u201emake menuconfig\u201c, a nie s\u00fa zahrnut\u00e9 v generovan\u00fdch konfigura\u010dn\u00fdch s\u00faboroch. Hlavn\u00fdm \u00fa\u010delom atrib\u00fatu je zjednodu\u0161i\u0165 premenovanie mo\u017enost\u00ed pri zachovan\u00ed sp\u00e4tnej kompatibility.\n
- Minim\u00e1lna verzia kompil\u00e1tora Clang, ktor\u00fdm m\u00f4\u017ee by\u0165 vybudovan\u00e9 jadro, bola zv\u00fd\u0161en\u00e1 na n\u00e1stroje LLVM 15. V Debian 12 a Ubuntu 22.04 sa dod\u00e1va LLVM 14.\n
- Pokra\u010doval prenos zmien z vetvy Rust-for-Linux, ktor\u00e9 s\u00favisia s pou\u017eit\u00edm jazyka Rust ako druh\u00e9ho jazyka na v\u00fdvoj ovl\u00e1da\u010dov a modulov jadra (podpora Rust nie je predvolene akt\u00edvna a nevedie k zaradeniu Rust medzi povinn\u00e9 z\u00e1vislosti kompil\u00e1cie jadra). V novej verzii pre k\u00f3d v jazyku Rust boli implementovan\u00e9 at\u00f3mov\u00e9 oper\u00e1cie s pam\u00e4\u0165ou, \u0161trukt\u00fara maple tree, mo\u017enos\u0165 vytv\u00e1rania s\u00faborov DebugFS a funkcie na manipul\u00e1ciu s bitmapami. Roz\u0161\u00edren\u00fd pr\u00edstup k API pre v\u00fdvoj ovl\u00e1da\u010dov. Pridan\u00fd kompletn\u00fd s\u00fabor abstrakci\u00ed pre v\u00fdvoj ovl\u00e1da\u010dov USB zariaden\u00ed (pr\u00edklad USB ovl\u00e1da\u010da). Do n\u00e1stroja perf bola pridan\u00e1 podpora laden\u00fdch symbolov generovan\u00fdch kompil\u00e1torom rustc. <\/ul>\n
- Virtualiz\u00e1cia a bezpe\u010dnos\u0165<\/b>\n
- \n
- Pridan\u00e1 podpora kryptografickej verifik\u00e1cie na\u010d\u00edtavan\u00fdch BPF programov pod\u013ea digit\u00e1lneho podpisu. V bud\u00facnosti bude t\u00e1to mo\u017enos\u0165 roz\u0161\u00edren\u00e1 o prostriedky na ur\u010dovanie pravidiel na\u010d\u00edtania podp\u00edsan\u00fdch BPF programov a poskytovanie nepriviligovan\u00fdm pou\u017e\u00edvate\u013eom mo\u017enosti pou\u017e\u00edva\u0165 verifikovan\u00e9 BPF programy.\n
- V hyperv\u00edzore KVM bola implementovan\u00e1 podpora virtualiz\u00e1cie roz\u0161\u00edrenia Intel CET (Control-flow Enforcement Technology), ktor\u00e9 sa pou\u017e\u00edva na ochranu pred exploitmi vyu\u017e\u00edvaj\u00facimi met\u00f3dy n\u00e1vratovo orientovan\u00e9ho programovania (ROP - Return-Oriented Programming). Podstata ochrany spo\u010d\u00edva v tom, \u017ee po predan\u00ed riadenia funkcii sa adresa n\u00e1vratu uchov\u00e1va procesorom nielen v be\u017enej z\u00e1sobn\u00edku, ale aj v samostatnej tienistej z\u00e1sobn\u00edku, ktor\u00fd nemo\u017eno priamo upravi\u0165.\n
- Pridan\u00e1 mo\u017enos\u0165 pou\u017e\u00edva\u0165 viac ako 255 CPU v hos\u0165uj\u00facich syst\u00e9moch be\u017eiacich pod hyperv\u00edzorom Bhyve na hostite\u013eoch s FreeBSD 15.\n
- Pridan\u00e1 vrstva dibs (Direct Internal Buffer Sharing) pre spravovan\u00e9 zdie\u013eanie b\u00faferov v izolovanom prostred\u00ed, ako je hyperv\u00edzor alebo in\u0161tancia jadra Linux.\n
- Do auditu bola pridan\u00e1 podpora pr\u00e1ce s viacer\u00fdmi s\u00fa\u010dasne zapnut\u00fdmi modulmi LSM (Linux Security Module).\n
- Pridan\u00fd virtio ovl\u00e1da\u010d spi-virtio na pr\u00edstup k SPI zariadeniu (Serial Peripheral Interface) z virtu\u00e1ln\u00edch stroj\u016f<\/a>.\n
- Do hyperv\u00edzora KVM bola pridan\u00e1 podpora re\u017eimu SEV-SNP CipherText Hiding, ktor\u00fd blokuje \u010d\u00edtanie \u0161ifrovan\u00e9ho textu pam\u00e4te chr\u00e1nen\u00fdch hostite\u013esk\u00fdch syst\u00e9mov v neautorizovanom CPU.\n
- Pridan\u00fd ovl\u00e1da\u010d qtee pre TEE prostredia (Trusted Execution Environment) \u010dipov Qualcomm. <\/ul>\n
- Sie\u0165ov\u00fd subsyst\u00e9m<\/b>\n
- \n
- Pridan\u00e1 podpora \u0161ifrovania TCP pripojen\u00ed pomocou protokolu PSP (PSP Security Protocol), vyvinut\u00e9ho spolo\u010dnos\u0165ou Google na \u0161ifrovanie prev\u00e1dzky medzi d\u00e1tov\u00fdmi centrami. PSP zaru\u010duje \u0161ifrovanie, kryptografick\u00fa kontrolu integrity a autentifik\u00e1ciu zdroja, pri\u010dom realizuje ak\u00fasi kombin\u00e1ciu mo\u017enost\u00ed protokolov TLS a IPsec. V PSP sa pou\u017e\u00edva \u0161ifrovanie na \u00farovni jednotliv\u00fdch sie\u0165ov\u00fdch pripojen\u00ed, nie cel\u00e9ho komunika\u010dn\u00e9ho kan\u00e1la. PSP vyu\u017e\u00edva samostatn\u00e9 \u0161ifrovacie k\u013e\u00fa\u010de pre r\u00f4zne tunelovan\u00e9 TCP pripojenia na pr\u00edsnu izol\u00e1ciu prev\u00e1dzky medzi r\u00f4znymi aplik\u00e1ciami a spracovate\u013emi. Na zn\u00ed\u017eenie za\u0165a\u017eenia CPU sa podporuje odovzd\u00e1vanie oper\u00e1ci\u00ed \u0161ifrovania a de\u0161ifrovania na stranu sie\u0165ov\u00fdch kariet (offload). Ako transportn\u00fd protokol na prenos d\u00e1t sa pou\u017e\u00edva protokol UDP, nad ktor\u00fdm je pos\u00favan\u00fd obsah p\u00f4vodn\u00e9ho TCP paketu. <\/p>\n
![\"Uvo\u013enenie](\"\/wp-content\/uploads\/2025\/12\/180701a9b56890a55860d65207471472.png\")
<\/center> <\/p>\n- Pridan\u00e1 po\u010diato\u010dn\u00e1 podpora roz\u0161\u00edrenia AccECN (Presn\u00e9 Explicitn\u00e9 Ozn\u00e1menie o Pre\u0165a\u017een\u00ed), ktor\u00e9 predstavuje vylep\u0161en\u00fa verziu roz\u0161\u00edrenia ECN, umo\u017e\u0148uj\u00facu hostite\u013eom v pr\u00edpade pre\u0165a\u017eenia ozna\u010dova\u0165 IP pakety namiesto ich zahodenia. To d\u00e1va mo\u017enos\u0165 ur\u010di\u0165 vznik po\u010diato\u010dnej f\u00e1zy z\u00e1pchy v komunika\u010dn\u00fdch kan\u00e1loch bez straty paketov. P\u00f4vodn\u00e9 roz\u0161\u00edrenie ECN m\u00e1 obmedzenie, ktor\u00e9 povo\u013euje vystavovanie len jedn\u00e9ho sign\u00e1lu o pre\u0165a\u017een\u00ed v r\u00e1mci jedn\u00e9ho cyklu prij\u00edmania a odosielania TCP (RTT, Round-Trip Time, odoslanie po\u017eiadavky a prijatie odpovede). AccECN toto obmedzenie zru\u0161\u00ed a umo\u017e\u0148uje prij\u00edmate\u013eovi posiela\u0165 odosielate\u013eovi viac ako jednu zna\u010dku o pre\u0165a\u017een\u00ed v hlavi\u010dke TCP paketu. Algoritmy riadenia pre\u0165a\u017eenia m\u00f4\u017eu pou\u017ei\u0165 prijat\u00e9 inform\u00e1cie na presnej\u0161ie reagovanie na pre\u0165a\u017eenia a vyhn\u00fa\u0165 sa prudk\u00e9mu zn\u00ed\u017eeniu intenzity odosielania paketov pri vzniku nev\u00fdznamn\u00e9ho pre\u0165a\u017eenia.\n
- V UDP z\u00e1sobn\u00edku je optimalizovan\u00e9 spracovanie prich\u00e1dzaj\u00facich paketov za podmienok DDoS \u00fatokov, ktor\u00e9 ved\u00fa k prij\u00edmaniu ve\u013ek\u00e9ho mno\u017estva paketov do jedn\u00e9ho alebo viacer\u00fdch UDP soketov. Vykonan\u00e9 optimaliz\u00e1cie, ako je zn\u00ed\u017eenie konkuren\u010dn\u00fdch z\u00e1mkov, optimaliz\u00e1cia umiestnenia d\u00e1tov\u00fdch \u0161trukt\u00far v pam\u00e4ti a vyu\u017eitie z\u00e1mkov zoh\u013ead\u0148uj\u00facich architekt\u00faru NUMA (Non-Uniform Memory Access), umo\u017enili zv\u00fd\u0161enie v\u00fdkonu pri prij\u00edman\u00ed UDP paketov o 47 % a viac za extr\u00e9mnych podmienok.\n
- Realizovan\u00e1 mo\u017enos\u0165 vypnutia vyrovn\u00e1vacej pam\u00e4te vstupu\/v\u00fdstupu na NFS serveri, \u010do umo\u017e\u0148uje pou\u017e\u00edva\u0165 NFS server v syst\u00e9moch s mal\u00fdm objemom pam\u00e4te (napr\u00edklad v obmedzen\u00fdch cloudov\u00fdch prostrediach). Vypnutie cache m\u00f4\u017ee by\u0165 tie\u017e u\u017eito\u010dn\u00e9 na pre\u0165a\u017een\u00fdch NFS serveroch na zabr\u00e1nenie vytesnenia z cache d\u00e1t s\u00favisiacich s lok\u00e1lnymi \u00falo\u017eiskami v d\u00f4sledku uvo\u013enenia pam\u00e4te pre cache NFS.\n
- Maxim\u00e1lna ve\u013ekos\u0165 bufferov prich\u00e1dzaj\u00facich a odosielan\u00fdch paketov pre sie\u0165ov\u00e9 sockety (net.core.rmem_max a net.core.wmem_max) bola zv\u00fd\u0161en\u00e1 z 2 MB na 4 MB. Prednastaven\u00e1 ve\u013ekos\u0165 sa nezmenila (net.core.rmem_default a net.core.wmem_default = 2 MB).\n
- Pridan\u00fd ovl\u00e1da\u010d pre akceler\u00e1tor sie\u0165ov\u00fdch oper\u00e1ci\u00ed Qualcomm PPE (Packet Processing Engine), pou\u017e\u00edvan\u00fd v SoC Qualcomm IPQ9574. <\/ul>\n
- Zariadenie<\/b>\n
- \n
- Do jadra bol zaraden\u00fd ovl\u00e1da\u010d Tyr, nap\u00edsan\u00fd v jazyku Rust, ktor\u00fd zabezpe\u010duje pr\u00e1cu s GPU ARM Mali, vyu\u017e\u00edvaj\u00facou technol\u00f3giu CSF (S\u00fahrn streamu pr\u00edkazov), ako s\u00fa Mali G310, G510 a G710. Ovl\u00e1da\u010d zatia\u013e nie je pripraven\u00fd na trval\u00e9 pou\u017eitie oby\u010dajn\u00fdmi pou\u017e\u00edvate\u013emi a pova\u017euje sa za experiment\u00e1lny prototyp na testovanie abstrakci\u00ed pre v\u00fdvoj ovl\u00e1da\u010dov v jazyku Rust.\n
- Do ovl\u00e1da\u010dov pre vstupn\u00e9 zariadenia s rozhran\u00edm HID (Human Interface Device) bola pridan\u00e1 podpora touchpadov s hmatovou sp\u00e4tnej v\u00e4zby a senzormi sily stla\u010denia.\n
- Pokra\u010duje sa v pr\u00e1ci na drm-ovl\u00e1da\u010di (Direct Rendering Manager) Xe pre GPU zalo\u017een\u00e9 na architekt\u00fare Intel Xe, ktor\u00e1 sa pou\u017e\u00edva vo grafick\u00fdch kart\u00e1ch Intel rodiny Arc a integrovan\u00fdch grafik\u00e1ch od procesorov Tiger Lake. V novej verzii bol pridan\u00fd rozhranie madvise, bola zapnut\u00e1 podpora SR-IOV PF (Single Root I\/O Virtualization Physical Function), pridan\u00e1 podpora re\u017eimu Intel PSMI na valid\u00e1ciu hardv\u00e9ru, bolo zabezpe\u010den\u00e9 spracovanie inform\u00e1ci\u00ed o chyb\u00e1ch predan\u00fdch firmv\u00e9rmi, bol realizovan\u00fd profil energetickej spotreby SLPC, bola pridan\u00e1 podpora na\u010d\u00edtania pomocn\u00fdch firmv\u00e9rov (napr\u00edklad pre ovl\u00e1da\u010d ventil\u00e1tora a regul\u00e1tor nap\u00e4tia) po\u010das kontroly ovl\u00e1da\u010da.\n
- V ovl\u00e1da\u010di AMDGPU bola pridan\u00e1 podpora zariaden\u00ed s APU Cyan Skillfish, zlep\u0161en\u00e1 podpora AMD GCN 1.0, bola realizovan\u00e1 kompatibilita s n\u00e1strojom criu, do sysfs boli pridan\u00e9 metriky teploty, povolen\u00e9 po\u017eiadavky na remapovanie MMIO z pou\u017e\u00edvate\u013esk\u00e9ho priestoru.\n
- V ovl\u00e1da\u010di i915 bola pridan\u00e1 podpora \u010dipov rodiny Wildcat Lake a zlep\u0161en\u00e1 pr\u00e1ca s GPU Jasper Lake, Elkhart Lake, Gen7 a Gen6.\n
- V ovl\u00e1da\u010di Nouveau s\u00fa predvolene zapnut\u00e9 GSP-firmv\u00e9ry NVIDIA a zlep\u0161en\u00e9 spracovanie ch\u00fdb.\n
- Pokra\u010duje integr\u00e1cia komponentov ovl\u00e1da\u010da Nova pre GPU NVIDIA s GSP firmv\u00e9rom, pou\u017e\u00edvan\u00fdm od s\u00e9rie NVIDIA GeForce RTX 2000 na b\u00e1ze mikroarchitekt\u00fary Turing. Ovl\u00e1da\u010d je nap\u00edsan\u00fd v jazyku Rust. V novej verzii bola roz\u0161\u00edren\u00e1 podpora GSP firmv\u00e9rov, vylep\u0161en\u00e1 implement\u00e1cia makra \u201eregister!\u201c, pridan\u00e1 podpora tried PCI zariaden\u00ed a identifik\u00e1torov v\u00fdrobcov.\n
- Bol pridan\u00fd ovl\u00e1da\u010d rocket pre NPU akceler\u00e1tory, ktor\u00e9 sa pou\u017e\u00edvaj\u00fa v SoC Rockchip RK3588.\n
- Bol pridan\u00fd parameter jadra \u201eboot_display\u201c na v\u00fdber v\u00fdstupn\u00e9ho zariadenia na zobrazenie procesu zav\u00e1dzania na syst\u00e9moch s viacer\u00fdmi GPU.\n
- V ovl\u00e1da\u010di vesadrm bola implementovan\u00e1 podpora 8-bitov\u00fdch paliet.\n
- V ovl\u00e1da\u010di msm bola pridan\u00e1 podpora GPU Adreno 663 a implementovan\u00e1 podpora technol\u00f3gie zni\u017eovania spotreby energie IFPC (Inter Frame Power Collapse).\n
- V ovl\u00e1da\u010di panthor bola pridan\u00e1 podpora GPU Mali-G710, Mali-G510, Mali-G310, Mali-Gx15, Mali-Gx20 a Mali-Gx25.\n
- Pridan\u00e1 podpora zvukov\u00fdch syst\u00e9mov ASoC Qualcomm Glymur a PM4125, Realtek RT1321, Shanghai FourSemi FS2104\/5S, Texas Instruments PCM1754 a TAS2783A, qcs615, CS35L56 B2, tas2118, tas2x20, tas5825. Pridan\u00e1 podpora zvukov\u00fdch USB kariet Tascam US-144mkII a Presonus S1824c.\n
- Pridan\u00e1 podpora ARM CPU Cortex-A320\/A520AE\/A720AE a C1-Nano\/Pro\/Premium\/Ultra.\n
- Pridan\u00e1 podpora ARM platforiem, SoC a zariaden\u00ed: Apple M2 Pro, M2 Max a M2 Ultra, Sony Xperia SP, Samsung Galaxy S22, Samsung Galaxy S20 FE, ASUS Eee Pad Slider SL101, Lenovo ThinkBook 16, HP Omnibook X14 X1P42100, Dell Inspiron 7441\/Latitude 7455, Sige1, NanoPi Zero2, Axis Artpec8, NXP i.MX91, ROCK 2A\/2F, Qualcomm Lemans Auto, Renesas RZ\/T2H, RZ\/N2H, RZ\/T2H a RZ\/N2H, Aspeed AST27xx, Meta Clemente BMC, Netcube Nagami som, Tqma91xx, Ultratronik i.MX8MP Ultra-MACH, i.MX8ULP EVK9, Buffalo WXR-1750DHP. <\/ul>\n<\/ul>\n
Z\u00e1rove\u0148 latinskoamerick\u00e1 Nad\u00e1cia vo\u013en\u00e9ho softv\u00e9ru vytvorila variant \u00faplne vo\u013en\u00e9ho jadra 6.18 \u2014 Linux-libre 6.18-gnu, vy\u010disten\u00e9ho od prvkov firmv\u00e9ru a ovl\u00e1da\u010dov, ktor\u00e9 obsahuj\u00fa neslobodn\u00e9 komponenty alebo \u00faseky k\u00f3du, ktor\u00fdch aplik\u00e1cia je obmedzen\u00e1 v\u00fdrobcom. V vydan\u00ed 6.18 bol aktualizovan\u00fd k\u00f3d \u010distenia blobov v ovl\u00e1da\u010doch Nova-Core, Intel XE, TI PRUeth, Lantiq GSWIP, Marvell WiFi-Ex. Bola vykonan\u00e1 \u010distka n\u00e1zvov blobov v dts s\u00faboroch (devicetree) pre ARM \u010dipy Qualcomm, Mediatek a TI ARM64. Bol neutralizovan\u00fd na\u010d\u00edtanie blobov v nov\u00fdch ovl\u00e1da\u010doch FourSemi fs2104\/5s, TI TAS2783 a Qualcomm GENI.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.18. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: dm-pcache \u0434\u043b\u044f \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u044d\u043d\u0435\u0440\u0433\u043e\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 (PMEM), \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 Bcachefs, online-\u0440\u0435\u0436\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 XFS, \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b Binder (Android IPC) \u0438 Tyr (GPU Mali) \u043d\u0430 Rust, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f USB-\u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 Rust, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0430\u043b\u043b\u043e\u043a\u0430\u0442\u043e\u0440\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SLUB, \u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432 \u0438\u043c\u0451\u043d \u043f\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u0430\u043c, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":150191,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150190","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie jadra Linux 6.18 | ProHoster","description":"Po dvoch mesiacoch v\u00fdvoja Linus Torvalds predstavil vydanie jadra Linux 6.18.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-18","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.18 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 6.18.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-6-18","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-01T09:11:58+00:00","article:modified_time":"2025-12-01T09:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150190","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:19:20","updated":"2026-02-09 17:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/150190","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=150190"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/150190\/revisions"}],"predecessor-version":[{"id":159483,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/150190\/revisions\/159483"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/150191"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=150190"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=150190"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=150190"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}