{"id":183913,"date":"2026-10-21T11:41:23","date_gmt":"2026-10-21T09:41:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/reliz-yadra-linux-7-3"},"modified":"2026-10-21T11:41:23","modified_gmt":"2026-10-21T09:41:23","slug":"reliz-yadra-linux-7-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-7-3","title":{"rendered":"Vydanie jadra Linux 7.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvoch mesiacoch v\u00fdvoja predstavil Linus Torvalds vydanie jadra Linux 7.3. Medzi najv\u00fdraznej\u0161ie zmeny patr\u00ed mechanizmus izol\u00e1cie s\u00faborov\u00e9ho syst\u00e9mu zalo\u017een\u00fd na pseudo-s\u00faborovom syst\u00e9me failfs a syst\u00e9mov\u00fd hovor fchroot(), podpora vytv\u00e1rania vnoren\u00fdch pl\u00e1nova\u010dov SCHED_EXT, BPF spracovate\u013eov sp\u00fa\u0161\u0165ania spustite\u013en\u00fdch s\u00faborov, alternat\u00edvne d\u00e1tov\u00e9 pr\u00fady v NTFS3, optimaliz\u00e1cie v\u00fdkonu FUSE, Btrfs a Ext4, podpora Apple Time Machine v ksmbd, odstr\u00e1nenie s\u00faborov\u00fdch syst\u00e9mov EFS a FreeVxFS, re\u017eim priameho pr\u00edstupu k blokov\u00fdm zariadeniam, zlep\u0161enie spracovania nedostatku grafickej pam\u00e4te, sledovanie pr\u00edstupov do pam\u00e4te hos\u0165ovsk\u00e9ho syst\u00e9mu cez userfaultfd, kompresia pravidiel AppArmor, obmedzenie pr\u00edstupu k AF_ALG, podpora \u010dipov Apple M3 Pro, Max a Ultra.<\/p>\n<p>Do novej verzie bolo prijat\u00fdch 20260 opr\u00e1v od 3171 v\u00fdvoj\u00e1ra, z ktor\u00fdch 807 po prv\u00fdkr\u00e1t poslalo svoje zmeny do jadra. Ve\u013ekos\u0165 z\u00e1platy je 63 MB (zmeny sa t\u00fdkali 14923 s\u00faborov, pridalo sa 943849 riadkov k\u00f3du,<br \/>\nodstr\u00e1nen\u00fdch 297515 riadkov). V predch\u00e1dzaj\u00facej verzii bolo 17833 opr\u00e1v od 2766 v\u00fdvoj\u00e1rov, ve\u013ekos\u0165 z\u00e1platy bola 68 MB. Pribli\u017ene 44 % v\u0161etk\u00fdch zmien predlo\u017een\u00fdch v 7.3 s\u00favis\u00ed s ovl\u00e1da\u010dmi zariaden\u00ed, asi 12 % zmien sa t\u00fdka aktualiz\u00e1cie k\u00f3du \u0161pecifick\u00e9ho pre hardv\u00e9rov\u00e9 architekt\u00fary, 12 % je spojen\u00fdch so sie\u0165ov\u00fdm stackom, 5 % s filesyst\u00e9mami a 3 % s intern\u00fdmi subsyst\u00e9mami jadra. <\/p>\n<p>Hlavn\u00e9 novinky v jadre 7.3 (1, 2, 3):\n<\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, I\/O a s\u00faborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> Bola vykonan\u00e1 optimaliz\u00e1cia v\u00fdkonu s\u00faborov\u00e9ho syst\u00e9mu Btrfs. Pre ne-SSD \u00falo\u017eisk\u00e1 bola odstr\u00e1nen\u00e1 zbyto\u010dn\u00e1 latencia, \u010do viedlo k p\u00e4\u0165n\u00e1sobn\u00e9mu zv\u00fd\u0161eniu priepustnosti pre za\u0165a\u017eenia s akt\u00edvnym pou\u017eit\u00edm funkcie fsync, ako je zapisovanie logov. V fsync bola vypnut\u00e1 identifik\u00e1cia pr\u00e1zdnoty v s\u00faboroch s ve\u013ek\u00fdm po\u010dtom ext\u00e9ntov a bez pr\u00e1zdnoty, \u010do ur\u00fdchlilo vykon\u00e1vanie niektor\u00fdch \u0161pecifick\u00fdch testov p\u00e4\u0165kr\u00e1t.\n<p>Pri sledovan\u00ed nekovate\u013en\u00fdch b\u00faferov ext\u00e9ntov bola \u0161trukt\u00fara xarray nahraden\u00e1 lok\u00e1lnym LRU zoznamom, \u010do viedlo k trojn\u00e1sobn\u00e9mu zlep\u0161eniu v\u00fdkonu t\u00fdchto oper\u00e1ci\u00ed. Boli odstr\u00e1nen\u00e9 poklesy v\u00fdkonu pri pou\u017eit\u00ed re\u017eimu priameho vstupu\/v\u00fdstupu sp\u00f4soben\u00e9 regresiami v predch\u00e1dzaj\u00facich vydaniach jadra. Zn\u00ed\u017eili sa zamykania pri predbe\u017enom \u010d\u00edtan\u00ed ext\u00e9ntov, \u010do zn\u00ed\u017eilo re\u017eijn\u00e9 n\u00e1klady pri pr\u00edstupe r\u00f4znych \u00faloh k prekr\u00fdvaj\u00facim sa oblastiam. <\/p>\n<li class=\"l\"> V Btrfs bola odstr\u00e1nen\u00e1 podpora prvej verzie cache s inform\u00e1ciami o vo\u013enom mieste. FS vytvoren\u00e9 na star\u0161\u00edch syst\u00e9moch je potrebn\u00e9 previes\u0165 na druh\u00fa verziu cache pomocou utilitky btrfstune, inak bud\u00fa pracova\u0165 pomal\u0161ie. Bola tie\u017e odstr\u00e1nen\u00e1 mo\u017enos\u0165 pripojenia \u201eusebackuproot\u201c, namiesto ktorej sa odpor\u00fa\u010da pou\u017ei\u0165 \u201erescue=usebackuproot\u201c.\n<li class=\"l\"> Vo FS Ext4 bola zv\u00fd\u0161en\u00e1 v\u00fdkonnos\u0165 paraleln\u00fdch oper\u00e1ci\u00ed z\u00e1pisu pri priamej vstupnej\/v\u00fdstupnej oper\u00e1cii (Direct I\/O) a zr\u00fdchlilo sa rezervovanie pr\u00e1zdnych oblast\u00ed cez volanie fallocate(). Bolo odstr\u00e1nen\u00e9 zhor\u0161enie, ktor\u00e9 zni\u017eovalo v\u00fdkonnos\u0165 pri bufferovanom z\u00e1pise.\n<li class=\"l\"> V FS Ext4 bola mo\u017enos\u0165 pripojenia \u201edata=journal\u201c vyhl\u00e1sen\u00e1 za zastaran\u00fa. Podporu tejto mo\u017enosti pripojenia pl\u00e1nuj\u00fa ukon\u010di\u0165 v roku 2028. Mo\u017enos\u0165 \u201edata=journal\u201c zahr\u0148uje re\u017eim \u00fapln\u00e9ho \u017eurn\u00e1lovania, pri ktorom sa do \u017eurn\u00e1lu zapisuj\u00fa nielen metadata, ale aj samotn\u00e9 d\u00e1ta, \u010do zabezpe\u010duje vysok\u00fa odolnos\u0165 v pr\u00edpade v\u00fdpadku, ale komplikuje \u00fadr\u017ebu k\u00f3du a vedie k v\u00fdznamn\u00e9mu zn\u00ed\u017eeniu v\u00fdkonu v porovnan\u00ed s re\u017eimami \u201edata=ordered\u201c a \u201edata=writeback\u201c.\n<li class=\"l\"> S\u00faborov\u00fd syst\u00e9m EFS, ktor\u00fd sa pou\u017e\u00edval v ran\u00fdch verzi\u00e1ch OS IRIX, bol odstr\u00e1nen\u00fd, prestal sa pou\u017e\u00edva\u0165 pred pribli\u017ene 30 rokmi a u\u017e viac ako 20 rokov nie je udr\u017eiavan\u00fd. Pre t\u00fdch, ktor\u00ed potrebuj\u00fa pr\u00edstup k partiou s EFS, existuj\u00fa n\u00e1stroje pracuj\u00face v u\u017e\u00edvate\u013eskom priestore.\n<li class=\"l\"> S\u00faborov\u00fd syst\u00e9m FreeVxFS, implementuj\u00faci form\u00e1t FS VERITAS VxFS, pou\u017e\u00edvan\u00fd v SCO UnixWare v 90. rokoch, bol odstr\u00e1nen\u00fd a u\u017e d\u00e1vno sa nepou\u017e\u00edva v praxi.\n<li class=\"l\"> Vo mechanizme vytv\u00e1rania s\u00faborov\u00fdch syst\u00e9mov v u\u017e\u00edvate\u013eskom priestore FUSE bola zv\u00fd\u0161en\u00e1 v\u00fdkonnos\u0165 a zn\u00ed\u017een\u00e1 spotreba pam\u00e4te pri pou\u017e\u00edvan\u00ed syst\u00e9mu asynchronn\u00e9ho vstupu\/v\u00fdstupu io_uring. Zr\u00fdchlenie bolo dosiahnut\u00e9 pridan\u00edm mo\u017enosti pren\u00e1\u0161a\u0165 pooly bufferov z u\u017e\u00edvate\u013esk\u00e9ho priestoru do jadra a vyl\u00fa\u010den\u00edm nadbyto\u010dn\u00e9ho bufferovania (zero-copy) pri pr\u00edstupe FUSE-servera k str\u00e1nkam pam\u00e4te klientsk\u00e9ho procesu alebo str\u00e1nkov\u00e9mu cache.\n<li class=\"l\"> Pre blokov\u00e9 zariadenia bol implementovan\u00fd flag RWF_DONTCACHE, podobn\u00fd re\u017eimu priameho vstupu\/v\u00fdstupu.<br \/>\n(Direct I\/O), ktor\u00fd je mo\u017en\u00e9 pou\u017ei\u0165 vo funkci\u00e1ch preadv2() a pwritev2() alebo v po\u017eiadavk\u00e1ch na \u010d\u00edtanie a z\u00e1pis cez io_uring pre pr\u00edstup k blokov\u00e9mu zariadeniu obch\u00e1dzan\u00edm str\u00e1nkov\u00e9ho cache. Napr\u00edklad, flag m\u00f4\u017ee by\u0165 aplikovan\u00fd v DBMS pre n\u00edzko\u00farov\u0148ov\u00fa pr\u00e1cu s blokov\u00fdmi zariadeniami.<\/p>\n<li class=\"l\"> Vo FS overlayfs bola pridan\u00e1 podpora mapovania identifik\u00e1torov pou\u017e\u00edvate\u013eov, ktor\u00e1 sa pou\u017e\u00edva na priradenie s\u00faborov konkr\u00e9tneho pou\u017e\u00edvate\u013ea na pripojenej cudzom oddiele k in\u00e9mu pou\u017e\u00edvate\u013eovi v aktu\u00e1lnom syst\u00e9me.\n<li class=\"l\"> Bola vylep\u0161en\u00e1 podpora pre pripojenie viacer\u00fdch FS z jedn\u00e9ho blokov\u00e9ho zariadenia.\n<li class=\"l\"> V ovl\u00e1da\u010di ntfs3 bola implementovan\u00e1 z\u00e1kladn\u00e1 podpora alternat\u00edvnych tokov d\u00e1t, zdie\u013ean\u00fdch cez dvojbodku v n\u00e1zve s\u00faboru. Na vytvorenie nov\u00e9ho alternat\u00edvneho toku m\u00f4\u017eete pou\u017ei\u0165 pr\u00edkaz \u201etouch file:potok\u201c, na \u010d\u00edtanie \u201ecat file:potok\u201c, na odstr\u00e1nenie \u201erm file:potok\u201c, na v\u00fdstup dostupn\u00fdch tokov \u201ecat file:query_streams\u201c.\n<li class=\"l\"> V novej implement\u00e1cii NTFS (ntfsplus) v re\u017eime iba na \u010d\u00edtanie bola pridan\u00e1 podpora technol\u00f3gie prieh\u013eadn\u00e9ho kompresie s\u00faborov s pou\u017eit\u00edm overlay filtrov WOF (Windows Overlay Filter).\n<li class=\"l\"> Na NFS server bola pridan\u00e1 podpora oper\u00e1cie CB_NOTIFY, ktor\u00e1 umo\u017e\u0148uje klientovi uklada\u0165 metadata adres\u00e1rov na vlastnej strane a z\u00edskava\u0165 upozornenia o zmen\u00e1ch od servera.\n<li class=\"l\"> Vo FS F2FS bola pridan\u00e1 podpora dynamick\u00e9ho (bez odmontovania FS) mazania oddielov z v\u0161eobecn\u00e9ho poolu s automatick\u00fdm pren\u00e1\u0161an\u00edm \u00fadajov na in\u00e9 oddiely a ich vr\u00e1ten\u00edm sp\u00e4\u0165 (napr\u00edklad je mo\u017en\u00e9 do\u010dasne vy\u0148a\u0165 z\u00e1sobn\u00edk na in\u00e9 \u00fa\u010dely).\n<li class=\"l\"> V XFS bola pridan\u00e1 podpora flagu FALLOC_FL_WRITE_ZEROES v syst\u00e9movom volan\u00ed fallocate(), ktor\u00fd umo\u017e\u0148uje naplni\u0165 nulami ur\u010den\u00fd rozsah v s\u00fabore pomocou pr\u00edkazu WRITE_ZERO, ktor\u00fd podporuje niektor\u00e9 SSD disky a vykon\u00e1va nulovanie bez vstupno-v\u00fdstupn\u00fdch oper\u00e1ci\u00ed.\n<\/ul>\n<li class=\"l\"> <b>Pam\u00e4\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Vylep\u0161en\u00e9 spracovanie nedostatku video pam\u00e4te. V situ\u00e1cii, ke\u010f d\u00f4jde k vy\u010derpaniu vo\u013enej video pam\u00e4te, jadro teraz sk\u00fa\u0161a prelo\u017ei\u0165 z video pam\u00e4te do syst\u00e9movej pam\u00e4te (GTT) buffery aplik\u00e1ci\u00ed, ktor\u00e9 nemaj\u00fa zaru\u010den\u00fa kv\u00f3tu pam\u00e4te (dmem cgroup), namiesto toho, aby okam\u017eite odmietlo pridelenie video pam\u00e4te. Tento pr\u00edstup zabezpe\u010duje pridelenie zdrojov aplik\u00e1cii, ktorej syst\u00e9m rezervoval ur\u010dit\u00fd objem video pam\u00e4te, aj ke\u010f bola pam\u00e4\u0165 u\u017e pridelen\u00e1 in\u00fdm aplik\u00e1ci\u00e1m. Predt\u00fdm, ak bola aplik\u00e1cii bez kv\u00f3t u\u017e pridelen\u00e1 video pam\u00e4\u0165, tak v situ\u00e1cii nedostatku video pam\u00e4te nemohla aplik\u00e1cia s garantovan\u00fdmi kv\u00f3tami z\u00edska\u0165 pam\u00e4\u0165 a namiesto video pam\u00e4te bola aplik\u00e1cii cez subsyst\u00e9m TTM (Translation Table Maps) pridelen\u00e1 pomal\u0161ia syst\u00e9mov\u00e1 RAM adresovan\u00e1 z GPU (GTT).<br \/>\nPodpora dmem cgroup bola implementovan\u00e1 pre ovl\u00e1da\u010de nouveau, xe a amdgpu.<\/p>\n<li class=\"l\"> V mechanizme SCHED_EXT, ktor\u00fd umo\u017e\u0148uje pou\u017e\u00edvanie BPF na vytv\u00e1ranie pl\u00e1nova\u010dov CPU, bola dokon\u010den\u00e1 pr\u00e1ca na mo\u017enosti vytv\u00e1ra\u0165 vnoren\u00e9 pl\u00e1nova\u010de (sub-scheduler), pomocou ktor\u00fdch m\u00f4\u017ee ma\u0165 ka\u017ed\u00fd cgroup svoj vlastn\u00fd pl\u00e1nova\u010d \u00faloh.\n<li class=\"l\"> Do pl\u00e1nova\u010da \u00faloh boli pridan\u00e9 vylep\u0161enia t\u00fdkaj\u00face sa spracovania cgroup a rie\u0161enia probl\u00e9mov s rozdelen\u00edm v\u00e1h, ktor\u00e9 sp\u00f4sobovali dodato\u010dn\u00e9 n\u00e1klady a oneskorenia. Navrhnut\u00fdch je nieko\u013eko met\u00f3d rozdelenia v\u00e1h pre cgroup - 'up', 'max', 'concur' a 'tasks', ktor\u00e9 s\u00fa nastaven\u00e9 pomocou parametra cgroup_mode. Bola zaveden\u00e1 jednotn\u00e1 rada na vykon\u00e1vanie (runqueue) pre pl\u00e1novanie \u00faloh v r\u00e1mci cgroup. Zn\u00ed\u017een\u00e9 s\u00fa oneskorenia pri pl\u00e1novan\u00ed \u00faloh, ktor\u00fdm s\u00fa pridelen\u00e9 kr\u00e1tke kvant\u00e1 procesorov\u00e9ho \u010dasu, v\u010faka<br \/>\nmo\u017enosti zru\u0161i\u0165, aktualizova\u0165 alebo minimalizova\u0165 \u010das vykon\u00e1vania \u00faloh chr\u00e1nen\u00fdch pred vytesnen\u00edm, ak je to potrebn\u00e9.<\/p>\n<li class=\"l\"> V mechanizme binfmt_misc (\/proc\/sys\/fs\/binfmt_misc) bola implementovan\u00e1<br \/>\nmo\u017enos\u0165 pripoji\u0165 BPF-handler, aby sa pridala podpora nov\u00fdch form\u00e1tov spustite\u013en\u00fdch s\u00faborov. Zmena umo\u017e\u0148uje programovo analyzova\u0165 typ spustite\u013en\u00e9ho s\u00faboru pri ka\u017edom spusten\u00ed a vybra\u0165 pre\u0148 interpretera alebo dynamick\u00e9ho na\u010d\u00edta\u010da bez hackov typu vyu\u017e\u00edvania n\u00e1stroja patchelf a skriptov\u00fdch obalov. Napr\u00edklad, v BPF-programoch je mo\u017en\u00e9 definova\u0165 spustite\u013en\u00e9 s\u00fabory pre in\u00e9 architekt\u00fary alebo platformy a sp\u00fa\u0161\u0165a\u0165 pr\u00edslu\u0161n\u00e9 emul\u00e1tory alebo Wine, ako aj zjednodu\u0161i\u0165 organiz\u00e1ciu sp\u00fa\u0161\u0165ania spustite\u013en\u00fdch s\u00faborov v bal\u00ed\u010dkoch umiestnen\u00fdch v r\u00f4znych adres\u00e1roch v syst\u00e9moch s bal\u00ed\u010dkov\u00fdm mana\u017e\u00e9rom Nix.<\/p>\n<li class=\"l\">  Pokra\u010duje prenos zmien z vetvy Rust-for-Linux, s\u00favisiacich s pou\u017eit\u00edm jazyka Rust ako druh\u00e9ho jazyka pre v\u00fdvoj ovl\u00e1da\u010dov a modulov jadra (podpora Rust nie je predvolene aktivovan\u00e1 a nevedie k zaradeniu Rust medzi povinn\u00e9 z\u00e1vislosti pre jadro). Objavila sa mo\u017enos\u0165 pou\u017e\u00edvania Rust pre architekt\u00faru PowerPC. Boli implementovan\u00e9: modul pre celo\u010d\u00edseln\u00e9 prevody bez str\u00e1t, re\u017eim obfusk\u00e1cie logovania hodn\u00f4t ukazovate\u013eov na zabr\u00e1nenie \u00faniku inform\u00e1ci\u00ed o adresnom priestore, obal nad funkciou synchronize_rcu(), pam\u00e4\u0165ov\u00e9 bari\u00e9ry, modul interrupt na zap\u00ednanie\/vyp\u00ednanie preru\u0161enia, typy pre vstup\/v\u00fdstup, obalenia nad fwctl, mechanizmus SRCU (sleepable read-copy-update), obalenia nad gem shmem.<br \/>\nspinlock-z\u00e1mky SpinLockIrq, ktor\u00e9 neumo\u017e\u0148uj\u00fa preru\u0161enia v kritick\u00fdch sekci\u00e1ch.<\/p>\n<li class=\"l\"> Pridan\u00fd sysctl-parametr syscall_user_dispatch na riadenie zapnutia re\u017eimu rozde\u013eovania syst\u00e9mov\u00fdch volan\u00ed v u\u017e\u00edvate\u013eskom priestore, ktor\u00fd umo\u017e\u0148uje jedn\u00e9mu procesu zachyti\u0165 syst\u00e9mov\u00e9 volania in\u00e9ho procesu (vyu\u017e\u00edva sa v Wine na emul\u00e1ciu syst\u00e9mov\u00fdch volan\u00ed Windows).\n<li class=\"l\"> Do BPF bola pridan\u00e1 funkcia bpf_sock_read_xattr(), pomocou ktorej BPF-programy m\u00f4\u017eu \u010d\u00edta\u0165 u\u017e\u00edvate\u013eom nastaven\u00e9 roz\u0161\u00edren\u00e9 atrib\u00faty<br \/>\n(user.*) z inode soketov. V BPF-aplik\u00e1ci\u00e1ch sa objavila mo\u017enos\u0165 definovania glob\u00e1lnych premenn\u00fdch, viazan\u00fdch na CPU. V overova\u010di BPF-programov bola poskytnut\u00e1 dodato\u010dn\u00e1 inform\u00e1cia o zisten\u00fdch chyb\u00e1ch, ktor\u00e1 u\u013eah\u010duje identifik\u00e1ciu pr\u00ed\u010din probl\u00e9mov.<\/p>\n<li class=\"l\"> V mechanizmoch trasirovki kprobes, uprobes a fprobes bola implementovan\u00e1 podpora konverzie typov, pri\u010dom sa vyu\u017e\u00edvaj\u00fa \u00fadaje BTF (BPF Type Format) s inform\u00e1ciami na kontrolu typov v pseudok\u00f3de BPF, ako aj vylep\u0161en\u00e9 z\u00edskavanie inform\u00e1ci\u00ed o premenn\u00fdch.\n<li class=\"l\"> Do subsyst\u00e9mu DAMON (Data Access MONitor), ktor\u00fd umo\u017e\u0148uje sledova\u0165 pr\u00edstup procesu k \u00fadajom v opera\u010dnej pam\u00e4ti (napr\u00edklad je mo\u017en\u00e9 zisti\u0165, ku ktor\u00fdm oblastiam pam\u00e4te proces pristupoval a ktor\u00e9 oblasti pam\u00e4te zostali nevyu\u017eit\u00e9), bola pridan\u00e1 funkcia monitorovania zmien atrib\u00fatov \u00fadajov (anonymn\u00e1 pam\u00e4\u0165, mapovan\u00e9 v pam\u00e4ti s\u00fabory, pr\u00edstup len na \u010d\u00edtanie, \u017eiadne pr\u00edstupy k pam\u00e4ti a pod.).\n<li class=\"l\"> V Mechanizme KHO (Kexec HandOver), pou\u017e\u00edvanom na spustenie nov\u00e9ho jadra zo star\u00e9ho bez straty stavu syst\u00e9mu, bola zabezpe\u010den\u00e1 podpora pridelenia ve\u013ek\u00fdch str\u00e1nok pam\u00e4te (huge pages) po\u010das na\u010d\u00edtania. Tieto str\u00e1nky pam\u00e4te s\u00fa teraz ozna\u010dovan\u00e9 a uchov\u00e1van\u00e9 po spusten\u00ed nov\u00e9ho jadra.\n<li class=\"l\"> N\u00edzko\u00farov\u0148ov\u00fd k\u00f3d syst\u00e9mu swap bol preveden\u00fd na nov\u00fa n\u00edzko\u00farov\u0148ov\u00fa \u0161trukt\u00faru \u00fadajov swap_ops, ktor\u00e1 zjednodu\u0161ila \u00fadr\u017ebu k\u00f3du a implementovala abstrakcie potrebn\u00e9 na roz\u0161\u00edrenie funkcionality v bud\u00facnosti.\n<li class=\"l\"> Boli pridan\u00e9 ioctl pr\u00edkazy ALLOCINFO_IOC_CONTENT_ID, ALLOCINFO_IOC_GET_AT a ALLOCINFO_IOC_GET_NEXT, ktor\u00e9 umo\u017e\u0148uj\u00fa selekt\u00edvne posiela\u0165 do priestor pou\u017e\u00edvate\u013ea \u00fadaje profilovania alok\u00e1cie pam\u00e4te. V porovnan\u00ed so star\u0161\u00edm dostupn\u00fdm rozhran\u00edm \/proc\/allocinfo navrhovan\u00e9 ioctl volania umo\u017e\u0148uj\u00fa a\u017e 20-n\u00e1sobne zv\u00fd\u0161i\u0165 v\u00fdkon po\u017eiadaviek na profilovanie v\u010faka filtrovan\u00ed nadbyto\u010dn\u00fdch \u00fadajov.\n<\/ul>\n<li class=\"l\"> <b>Virtualiz\u00e1cia a bezpe\u010dnos\u0165<\/b>\n<ul>\n<li class=\"l\"> Bol navrhnut\u00fd nov\u00fd mechanizmus izol\u00e1cie, ktor\u00fd blokuje pr\u00edstup k obsahu s\u00faborov\u00fdch syst\u00e9mov, s v\u00fdnimkou zdrojov, ktor\u00e9 boli explicitne prenesen\u00e9 do sandbox prostredia prostredn\u00edctvom s\u00faborov\u00fdch deskriptorov. Mechanizmus je realizovan\u00fd pomocou pseudo-FS failfs a syst\u00e9mov\u00e9ho volania fchroot.\n<p>Pseudo-s\u00faborov\u00fd syst\u00e9m failfs pripom\u00edna s\u00faborov\u00fd syst\u00e9m nullfs, ale na rozdiel od posledn\u00e9ho realizuje princ\u00edp \u201eni\u010d nie je podporovan\u00e9\u201c namiesto \u201eni\u010d nie je ulo\u017een\u00e9\u201c. Tak\u00e1to vlastnos\u0165 neumo\u017e\u0148uje montova\u0165 \u010doko\u013evek nad failfs, klonova\u0165 s\u00faborov\u00fd syst\u00e9m a sledova\u0165 stav cez statmount(), listmount(), \/proc\/\/mountinfo a \/proc\/filesystems. Ak je kore\u0148ov\u00fd alebo pracovn\u00fd adres\u00e1r procesu v failfs, blokuj\u00fa sa ak\u00e9ko\u013evek pokusy o navig\u00e1ciu v s\u00faborovom syst\u00e9me pomocou absol\u00fatnych s\u00faborov\u00fdch ciest, symbolick\u00fdch odkazov a relat\u00edvnych ciest z\u00e1visl\u00fdch od aktu\u00e1lneho pracovn\u00e9ho adres\u00e1ra. Procesu zost\u00e1va iba mo\u017enos\u0165 pr\u00edstupu k ur\u010dit\u00e9mu adres\u00e1ru cez s\u00faborov\u00e9 popisova\u010de otvoren\u00e9 pred izol\u00e1ciou.<\/p>\n<p>Na prechod do nov\u00e9ho re\u017eimu izol\u00e1cie bol pridan\u00fd syst\u00e9mov\u00fd volanie fchroot, podobn\u00fd syst\u00e9mov\u00e9mu volaniu chroot, ale pracuj\u00faci na \u00farovni s\u00faborov\u00fdch descriptorov. Do syst\u00e9mov\u00fdch volan\u00ed fchdir bol pridan\u00fd flag FD_FAILFS_ROOT na presun pracovn\u00e9ho adres\u00e1ra procesu do FS failfs.<br \/>\nPodobn\u00fd flag je k dispoz\u00edcii v syst\u00e9movom volan\u00ed fchroot.<\/p>\n<li class=\"l\"> Bola pridan\u00e1 mo\u017enos\u0165 sledovania pr\u00edstupov k pam\u00e4ti hostite\u013esk\u00e9ho syst\u00e9mu pomocou mechanizmu userfaultfd, ktor\u00fd umo\u017e\u0148uje vytv\u00e1ra\u0165 obsluhy pr\u00edstupov k nealokovan\u00fdm alebo chr\u00e1nen\u00fdm str\u00e1nkam pam\u00e4te v priestore pou\u017e\u00edvate\u013ea. V praxi navrhnut\u00e1 mo\u017enos\u0165 umo\u017e\u0148uje hyperv\u00edzoru identifikova\u0165 str\u00e1nky pam\u00e4te, ku ktor\u00fdm v virtu\u00e1lnom stroji nedo\u0161lo k pr\u00edstupom, aby ich mohol presun\u00fa\u0165 do pomal\u0161ej pam\u00e4te alebo do extern\u00e9ho \u00falo\u017eiska. Na sledovanie poru\u0161en\u00ed stanoven\u00e9ho z\u00e1kazu \u010d\u00edtania a p\u00edsania v sledovanej oblasti pam\u00e4te bol pridan\u00fd flag UFFDIO_REGISTER_MODE_RWP, ktor\u00fd m\u00f4\u017ee by\u0165 pou\u017eit\u00fd ako v\u00fdkonovo lep\u0161\u00ed ekvivalent pou\u017eitia mprotect(PROT_NONE) spolu s obsluhou sign\u00e1lu generovan\u00e9ho pri pr\u00edstupe k pam\u00e4ti, pre ktor\u00fa je nastaven\u00fd z\u00e1kaz na \u010d\u00edtanie a p\u00edsanie (v pr\u00edpade userfaultfd je generovan\u00e1 v\u00fdnimka, ktor\u00e1 je spracov\u00e1van\u00e1 v priestore pou\u017e\u00edvate\u013ea). Zmena bola pripraven\u00e1 pomocou AI (\u201eAssisted-by: Claude:claude-opus-4-6\u201c).\n<li class=\"l\"> Bolo posilnen\u00e9 rozdelenie medzi vl\u00e1knami jadra (kthread) a init procesom (PID 1). Predt\u00fdm sa vo vl\u00e1knach jadra a v PID 1 spolo\u010dne pou\u017e\u00edvalo spolo\u010dn\u00e9 stavov\u00e9 s\u00fabory syst\u00e9mu.<br \/>\n\u010do umo\u017e\u0148ovalo prostredn\u00edctvom volania pivot_root() predefinova\u0165 stav FS pre v\u0161etky vl\u00e1kna jadra. V novej verzii je v PID 1 zapojen\u00e1 \u00faplne samostatn\u00e1 \u0161trukt\u00fara fs_struct, pri\u010dom vl\u00e1kna jadra s\u00fa izolovan\u00e9 v samostatnom bodu pripojenia s nullfs.<\/p>\n<li class=\"l\"> Do integrovan\u00e9 kryptografick\u00e9 knihovny (libcrypto) byla p\u0159id\u00e1na podpora re\u017eim\u016f \u0161ifrov\u00e1n\u00ed AES \u2014 ECB, CBC, CBC-CTS, CTR, XCTR, XTS, GCM a CCM.\n<li class=\"l\"> V syst\u00e9me mand\u00e1tneho riadenia pr\u00edstupu AppArmor bola zaveden\u00e1 mo\u017enos\u0165 na\u010d\u00edtania komprimovan\u00fdch s\u00faborov s pravidlami a pridan\u00fd re\u017eim auditu.\n<li class=\"l\"> Bol pridan\u00fd parameter sysctl af_alg_restrict, ktor\u00fd spravuje povolenie pr\u00edstupu k kryptografick\u00e9mu API AF_ALG z u\u017e\u00edvate\u013esk\u00e9ho priestoru. AF_ALG umo\u017e\u0148uje zapoji\u0165 hardv\u00e9rov\u00e9 akceler\u00e1tory pre kryptografick\u00e9 v\u00fdpo\u010dty v Crypto API jadra, av\u0161ak je aplikovan\u00fd v pomerne \u0161pecifick\u00fdch situ\u00e1ci\u00e1ch a nie v\u017edy poskytuje zv\u00fd\u0161enie v\u00fdkonu v porovnan\u00ed s implement\u00e1ciou akceler\u00e1cie v u\u017e\u00edvate\u013eskom priestore. V s\u00favislosti s AF_ALG boli identifikovan\u00e9 viacer\u00e9 zranite\u013enosti, ako Copy Fail, ktor\u00e9 umo\u017e\u0148uj\u00fa zmenu \u00fadajov v str\u00e1nkovom cache. Na zn\u00ed\u017eenie povrchu \u00fatoku je pr\u00edstup k AF_ALG predvolene \u010diasto\u010dne obmedzen\u00fd. Uva\u017euje sa o mo\u017enosti odstr\u00e1nenia AF_ALG v niektor\u00fdch bud\u00facich vydaniach.\n<li class=\"l\"> Zosilnen\u00e1 bola verifik\u00e1cia programov BPF, overen\u00fdch digit\u00e1lnym podpisom. Bola pridan\u00e1 kontrola integrity metad\u00e1t BPF programu pred jeho na\u010d\u00edtan\u00edm.\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho volania landlock_restrict_self(), aplikovan\u00e9ho na aktiv\u00e1ciu z\u00e1mkov Landlock, bol pridan\u00fd pr\u00edznak<br \/>\nLANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS, ktor\u00fd zakazuje aktu\u00e1lnemu procesu z\u00edska\u0165 ak\u00e9ko\u013evek nov\u00e9 privil\u00e9gi\u00e1. Mechanizmus Landlock umo\u017e\u0148uje neprivilegovan\u00fdm programom zru\u0161i\u0165 nepotrebn\u00e9 privil\u00e9gi\u00e1 na pr\u00e1cu, dobrovo\u013ene obmedzuj\u00fac svoj \u010fal\u0161\u00ed pr\u00edstup k syst\u00e9mu s cie\u013eom zv\u00fd\u0161i\u0165 bezpe\u010dnos\u0165, napr\u00edklad na ochranu v pr\u00edpade pokusov o zneu\u017eitie zranite\u013enost\u00ed v programe. <\/p>\n<li class=\"l\"> V ovl\u00e1da\u010di VirtIO-GPU, zabezpe\u010duj\u00facom pr\u00e1cu virtu\u00e1lneho GPU, bola pridan\u00e1 podpora sp\u00e1nkov\u00e9ho re\u017eimu S4 (hibern\u00e1cia).\n<\/ul>\n<li class=\"l\"> <b>Sie\u0165ov\u00fd subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> V ksmbd, ktor\u00fd je s\u00fa\u010das\u0165ou jadra, bola pridan\u00e1 podpora pre roz\u0161\u00edrenia Apple Time Machine na ukladanie z\u00e1loh vytvoren\u00fdch v macOS pomocou tejto aplik\u00e1cie. Implementovan\u00fd mechanizmus izol\u00e1cie sekvenci\u00ed pr\u00edkazov SMB viazan\u00fd na MessageId na blokovanie \u00fatokov prostredn\u00edctvom zasielania neplatn\u00fdch alebo duplicitn\u00fdch po\u017eiadaviek. Pridan\u00e1 podpora na op\u00e4tovn\u00e9 zasielanie po\u017eiadaviek prostredn\u00edctvom protokolu SMB3 bez naru\u0161enia stavu rel\u00e1cie, ak bol predch\u00e1dzaj\u00faci po\u017eiadavok straten\u00fd. V SMB3 bola zaveden\u00e1 mo\u017enos\u0165 \u0161ifrovania na \u00farovni jednotliv\u00fdch zdie\u013ean\u00fdch \u00falo\u017e\u00edsk (share). Pridan\u00e1 podpora pre \u0161ifrovanie komunika\u010dn\u00e9ho kan\u00e1la SMB Direct, ktor\u00fd vyu\u017e\u00edva technol\u00f3giu RDMA (Remote Direct Memory Access).\n<li class=\"l\"> Implementovan\u00e1 podpora pre pou\u017eitie TCP paketov s roz\u0161\u00edren\u00edm BIG TCP, ktor\u00e9 umo\u017e\u0148uje zv\u00fd\u0161i\u0165 maxim\u00e1lnu ve\u013ekos\u0165 TCP paketu na 4GB, v UDP tuneloch zalo\u017een\u00fdch na protokoloch VXLAN a GENEVE.\n<li class=\"l\"> Pridan\u00e1 podpora pre prenos protokolu MCTP (Management Component Transport Protocol) cez USB (MCTP-over-USB 1.1).\n<li class=\"l\"> Poskytnut\u00e1 mo\u017enos\u0165 odhl\u00e1senia (unregistration) sie\u0165ov\u00fdch zariaden\u00ed (netkit, veth, vxcan, bareudp, geneve, ipvlan, macvlan a pod.) pre vybran\u00e9 namespaces.\n<li class=\"l\"> Pre Bluetooth 6.2+ bola implementovan\u00e1 podpora mechanizmu SCI (Shorter Connection Interval) na zn\u00ed\u017eenie latencie pri prenose d\u00e1t v re\u017eime Bluetooth LE (Low Energy).\n<li class=\"l\"> V API nl80211 bol pridan\u00fd jednotn\u00fd mechanizmus (NL80211_CMD_PROBE_PEER) na overenie pripojen\u00fdch peerov, ktor\u00fd funguje ako v bezdr\u00f4tov\u00fdch pr\u00edstupov\u00fdch bodoch, tak na strane klienta.\n<\/ul>\n<li class=\"l\"> <b>Zariadenie<\/b>\n<ul>\n<li class=\"l\"> Star\u00e9 ARM platformy, ktor\u00e9 sa takmer nepou\u017e\u00edvaj\u00fa a br\u00e1nia \u00fadr\u017ebe aktu\u00e1lnych subsyst\u00e9mov, boli vyhl\u00e1sen\u00e9 za zastaran\u00e9 a napl\u00e1novan\u00e9 na odstr\u00e1nenie v jadre 7.5. Na odstr\u00e1nenie je napl\u00e1novan\u00fdch pribli\u017ene 55 tis\u00edc riadkov k\u00f3du s\u00favisiaceho s podporou platforiem sa1100, omap24xx, i.MX31, samv7, lpc18xx, riscpc, axxia, footbridge, star\u00fdch dosiek pxa, orion, dove a mv78xx0, \u010dipov bez kontroln\u00e9ho obvodu pam\u00e4te (MMU) a mikrocontrollerov stm32f4\/f7\/h7.\n<li class=\"l\"> Pridan\u00e1 po\u010diato\u010dn\u00e1 podpora pre \u010dipy Apple M3 Pro, Max a Ultra. Implementovan\u00e1 kontrola stavu spotreby energie pre SoC Apple.\n<li class=\"l\"> Do subsyst\u00e9mu DRM (Direct Rendering Manager) byla p\u0159id\u00e1na vlastnost \u201ecolor format\u201c, kter\u00e1 umo\u017e\u0148uje u\u017eivateli p\u0159epnout form\u00e1t zobrazen\u00ed barev pro v\u00fdstupn\u00ed za\u0159\u00edzen\u00ed. Vlastnost byla implementov\u00e1na pro ovlada\u010de GPU i915 (HDMI, DP), amdgpu (HDMI, DP) a rockchip (HDMI). K testov\u00e1n\u00ed je mo\u017en\u00e9 pou\u017e\u00edt p\u0159\u00edkaz typu \u201emodetest -s 115:1920\u00d71080-60@NV12 -w 115:\u2018color format\u2019:4\u201c, kde 115 je identifik\u00e1tor konektoru a \u20184\u2019 je \u010d\u00edslo form\u00e1tu YUV420.\n<li class=\"l\"> Do ovl\u00e1da\u010da amdgpu bola pridan\u00e1 podpora DRM modifik\u00e1torov pre GPU AMD s\u00e9rie GFX6-8 (Southern Islands, Sea Islands a Volcanic Islands). Implementovan\u00e1 bola z\u00e1kladn\u00e1 podpora DCN 6.0.0 (Display Core Next). Prebehla \u00fadr\u017eba zastaran\u00e9ho k\u00f3du.<br \/>\nBola zahrnut\u00e1 podpora CACP (Content Adaptive Contrast and Power), ktor\u00e1 umo\u017e\u0148uje zn\u00ed\u017ei\u0165 spotrebu energie OLED panelov. Pre displejov\u00e9 motory na architekt\u00fare DCN4 bola zapnut\u00e1 podpora mechanizmu IPS (Idle Power State) na zn\u00ed\u017eenie spotreby energie po\u010das neaktivity. Pridan\u00e1 podpora grafick\u00fdch kariet AMD Barco.<\/p>\n<li class=\"l\"> V ovl\u00e1da\u010di i915 bol prepracovan\u00fd k\u00f3d na ur\u010denie schopnost\u00ed a obnovenie stavu konektorov DisplayPort. Pre GPU Novalake (NVL) bola pridan\u00e1 podpora CMTG (Common mode timing generator) a DC3DO (Display C3 with Clock Off).\n<li class=\"l\"> Pokra\u010duje pr\u00e1ce na drm-ovlada\u010di (Direct Rendering Manager) Xe pro GPU na b\u00e1zi architektury Intel Xe, kter\u00e1 se pou\u017e\u00edv\u00e1 ve grafick\u00fdch kart\u00e1ch Intel rodiny Arc a integrovan\u00e9 grafice, po\u010d\u00ednaje procesory Tiger Lake. Byly p\u0159id\u00e1ny nov\u00e9 identifik\u00e1tory podporovan\u00fdch za\u0159\u00edzen\u00ed. V configfs byl implementov\u00e1n atribut 'enable_multi_queue' pro vypnut\u00ed simult\u00e1nn\u00edho pou\u017e\u00edv\u00e1n\u00ed v\u00edce front pro p\u0159enos p\u0159\u00edkaz\u016f. Zlep\u0161ena podpora p\u0159echodu do sp\u00e1nkov\u00e9ho re\u017eimu.\n<li class=\"l\"> Pokra\u010duje integr\u00e1cia komponentov ovl\u00e1da\u010da Nova pre GPU NVIDIA, vybaven\u00e9 GSP firmv\u00e9rmi, pou\u017e\u00edvan\u00fdmi od s\u00e9rie NVIDIA GeForce RTX 2000 na b\u00e1ze mikroarchitekt\u00fary Turing. Ovl\u00e1da\u010d je nap\u00edsan\u00fd v jazyku Rust. V novej verzii do\u0161lo k prechodu na nov\u00e9 obrazy firmv\u00e9ru TLV, namiesto star\u00fdch variantov pou\u017e\u00edvan\u00fdch v ovl\u00e1da\u010di Nouveau. Pridan\u00e1 podpora<br \/>\nsp\u00fa\u0161\u0165ania firmv\u00e9ru pre \u010dip GSP (GPU System Processor) so zapnut\u00edm vGPU. Pridan\u00e9 API na z\u00edskanie inform\u00e1ci\u00ed o ve\u013ekosti grafickej pam\u00e4te.<\/p>\n<li class=\"l\"> V ovl\u00e1da\u010di Tyr, nap\u00edsanom v jazyku Rust a zabezpe\u010duj\u00facom pr\u00e1cu s GPU ARM Mali, bola pridan\u00e1 mo\u017enos\u0165 nahr\u00e1vania firmv\u00e9rov vo form\u00e1te Mali CSF, aktiv\u00e1cie virtu\u00e1lnej pam\u00e4te GPU a sp\u00fa\u0161\u0165ania MCU.\n<li class=\"l\"> V ovl\u00e1da\u010di msm bola pridan\u00e1 podpora GPU Adreno Shikra (A704) a Eliza (722).\n<li class=\"l\"> Pridan\u00e1 podpora zvukov\u00fdch zariaden\u00ed a ASoC: Pioneer DJ DJM-S11,<br \/>\nAW88399 (Lenovo Legion Pro), AW88399 (Lenovo Legion), Lisuan, ALC235, RME HDSPe AIO, RT766\/RT767 SDCA, Maili, Hawi, CS35L62 (SoundWire), RT766\/RT767 VA1.<\/p>\n<li class=\"l\"> Pridan\u00e1 podpora Steam Controller (model 2026); my\u0161\u00ed Logitech G502 X Plus a G502 X Lightspeed; kl\u00e1vesn\u00edc Endorfy Thock TKL, Zenbook A16; sl\u00fachadiel Nova 5X, Nova 7 a Arctis 7; hern\u00e9ho volantu Turtle Beach VelocityOne Race; hern\u00e9ho ovl\u00e1da\u010da MSI Claw.\n<li class=\"l\"> Zlep\u0161en\u00e1 podpora zvuku na zariadeniach ASUS VivoBook M515DA\/X515DAP,<br \/>\nLG gram 16 (16Z90TR), Minisforum AI X1 Pro, HP Pavilion 15-eh2xxx, HP Laptop 15-dy0xxx a HP Spectre x360 16-aa0xxx, HP EliteBook 6 G1, HP OmniBook X Flip 14, Lenovo Yoga Pro 7, Huawei Matebook,<br \/>\nThinkPad X1 Carbon 6th, HP ProBook 440 G5, Acer Aspire A515-57. <\/p>\n<li class=\"l\"> Pridan\u00e1 podpora pre smartf\u00f3ny, tablety a notebooky: Motorola Edge 30, Motorola Moto G2, Xiaomi 12 Lite 5G, Microsoft Surface Pro, Honor MagicBook art 1412in, Sony Xperia M2, Vicharak Axon, Axon Mini a Vaaman2, Asus Zenbook A16, Lenovo Thinkedge se70.\n<li class=\"l\"> Byla p\u0159id\u00e1na podpora pro ARM platformy a SoC Samsung Exynos 1580 (pou\u017e\u00edvan\u00fd ve vlajkov\u00fdch smartphonech od roku 2024), Orange Pi 5 pro, Sophgo SG2000 (hybrid Arm\/RISC-V), BeagleBadge, Qualcomm \u201eShikra\u201c a \u201eAltera\u201c (Cortex-A78C), Agilex72 (Cortex-A720), Alientek ATK-DLRV1126, Variscite SoC DART-MX8M-PLUS, DART-MX8M-MINI, VAR-SOM-MX8QM a desky Sonata\/Symphony na jejich z\u00e1klad\u011b, 9Tripod X3568 v4, Youyeetoo YY3588, milk-v duo, ArmSoM CM5, Freescale Verdin iMX8M Mini, Anbernic rg vita-pro, Embedfire lubancat 4, Vicharak Vaaman, LincStation E1, HINLINK H28K.\n<\/ul>\n<\/ul>\n<p>Z\u00e1rove\u0148 latinskoamerick\u00fd Fond vo\u013en\u00e9ho softv\u00e9ru vytvoril<br \/>\nvarianta zcela svobodn\u00e9ho j\u00e1dra 7.3 \u2014 Linux-libre 7.3-gnu, vy\u010di\u0161t\u011bn\u00e9ho od prvk\u016f firmwaru a ovlada\u010d\u016f obsahuj\u00edc\u00edch nesvobodn\u00e9 komponenty nebo \u010d\u00e1sti k\u00f3du, jejich\u017e pou\u017eit\u00ed je omezeno v\u00fdrobcem. V verzi 7.3 byla provedena \u010distka od blob\u016f nov\u00fdch ovlada\u010d\u016f pro GPU Mali Tyr, Morse Micro mm81x wi-fi, NXP wi-fi, a s\u00ed\u0165ov\u00fdch karet na \u010dipech Realtek. Bylo aktualizov\u00e1no k\u00f3dov\u00e9 \u010di\u0161t\u011bn\u00ed v ovlada\u010d\u00edch nova-core, amdgpu, adreno, tegra, iris, rtw89 a mt76 wifi, Qualcomm Q6V5 PAS, qla2xxx scsi a zvukov\u00fdch kodek\u00e1ch aw88399. Byla provedena \u010distka jmen blob\u016f v dts souborech (device tree) pro ARM \u010dipy Qualcomm.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66499\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.3. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0424\u0421 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0441\u0435\u0432\u0434\u043e-\u0424\u0421 failfs \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 fchroot(), \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 SCHED_EXT, BPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 NTFS3, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 FUSE, Btrfs \u0438 Ext4, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 Apple Time Machine \u0432 ksmbd, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0424\u0421 EFS [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183913","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.3.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-7-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.3.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-7-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-10-21T09:41:23+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-10-21T09:41:23+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie jadra Linux 7.3 | ProHoster","description":"Po dvoch mesiacoch v\u00fdvoja Linus Torvalds predstavil vydanie jadra Linux 7.3.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-7-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.3 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 7.3.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-7-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-21T09:41:23+00:00","article:modified_time":"2026-10-21T09:41:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/183913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=183913"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/183913\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=183913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=183913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=183913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}