{"id":99149,"date":"2021-02-16T16:22:46","date_gmt":"2021-02-16T14:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-yadra-linux-5-11"},"modified":"2021-02-16T16:22:46","modified_gmt":"2021-02-16T14:22:46","slug":"reliz-yadra-linux-5-11","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-5-11","title":{"rendered":"Uvo\u013enenie jadra Linux 5.11","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po dvoch mesiacoch v\u00fdvoja predstavili Linus Torvalds vydanie jadra Linux 5.11. Medzi najv\u00fdznamnej\u0161ie zmeny patr\u00ed podpora Intel SGX enclaves, nov\u00fd mechanizmus zachyt\u00e1vania syst\u00e9mov\u00fdch volan\u00ed, virtu\u00e1lna zbernica auxiliary, z\u00e1kaz kompilovania modulov bez MODULE_LICENSE(), re\u017eim r\u00fdchlej filtr\u00e1cie syst\u00e9mov\u00fdch volan\u00ed v seccomp, ukon\u010denie podpory architekt\u00fary ia64, presun technol\u00f3gie WiMAX do vetvy &#171;staging&#187; a mo\u017enos\u0165 enkapsul\u00e1cie SCTP do UDP.      <\/p>\n<p>Do novej verzie bolo prijat\u00fdch 15 480 opr\u00e1v od 1 991 v\u00fdvoj\u00e1rov, ve\u013ekos\u0165 patchu je 72 MB (zmeny sa dotkli 12 090 s\u00faborov, bolo pridan\u00fdch 868 025 riadkov k\u00f3du a odstr\u00e1nen\u00fdch 261 456 riadkov). Pribli\u017ene 46% v\u0161etk\u00fdch zmien vo verzii 5.11 s\u00favis\u00ed s ovl\u00e1da\u010dmi zariaden\u00ed, asi 16% zmien sa t\u00fdka aktualiz\u00e1cie k\u00f3du \u0161pecifick\u00e9ho pre hardv\u00e9rov\u00e9 architekt\u00fary, 13% sa t\u00fdka sie\u0165ov\u00e9ho z\u00e1sobn\u00edka, 3% so s\u00faborov\u00fdmi syst\u00e9mami a 4% s vn\u00fatorn\u00fdmi subsyst\u00e9mami jadra.         <\/p>\n<p>Hlavn\u00e9 novinky:  <\/p>\n<ul>\n<li class=\"l\"> <b>Diskov\u00fd subsyst\u00e9m, I\/O a s\u00faborov\u00e9 syst\u00e9my<\/b>\n<ul>\n<li class=\"l\"> V Btrfs bolo pridan\u00fdch nieko\u013eko mo\u017enost\u00ed montovania na pou\u017eitie pri obnove \u00fadajov z po\u0161koden\u00e9ho FS: &#171;rescue=ignorebadroots&#187; na montovanie, aj pri po\u0161koden\u00ed niektor\u00fdch z\u00e1kladn\u00fdch stromov (extent, uuid, data reloc, device, csum, free space), &#171;rescue=ignoredatacsums&#187; na vypnutie kontroly kontroln\u00fdch s\u00fam pre \u00fadaje a &#171;rescue=all&#187; na s\u00fa\u010dasn\u00e9 zapnutie re\u017eimov &#8216;ignorebadroots&#8217;, &#8216;ignoredatacsums&#8217; a &#8216;nologreplay&#8217;. Podpora mo\u017enosti montovania &#171;inode_cache&#187; bola ukon\u010den\u00e1, ktor\u00e1 bola predt\u00fdm ozn\u00e1men\u00e1 ako zastaran\u00e1. Bol pripraven\u00fd k\u00f3d na implement\u00e1ciu podpory blokov s metad\u00e1tami a \u00fadajmi men\u0161\u00edmi ako str\u00e1nka (PAGE_SIZE), ako aj na podporu re\u017eimu z\u00f3novan\u00e9ho pride\u013eovania miesta. Nezalen\u00e9 (Direct IO) po\u017eiadavky boli preveden\u00e9 na infra\u0161trukt\u00faru iomap. V\u00fdkon nieko\u013ek\u00fdch oper\u00e1ci\u00ed bol optimalizovan\u00fd, v niektor\u00fdch pr\u00edpadoch m\u00f4\u017ee zr\u00fdchlenie dosiahnu\u0165 desiatky percent.\n<li class=\"l\"> V XFS bol zaveden\u00fd flag &#171;needsrepair&#187;, ktor\u00fd signalizuje potrebu obnovy. Po nastaven\u00ed tohto flagu nie je mo\u017en\u00e9 FS pripoji\u0165, k\u00fdm nie je flag resetovan\u00fd n\u00e1strojom xfs_repair.\n<li class=\"l\"> V Ext4 s\u00fa navrhnut\u00e9 len opravy ch\u00fdb a optimaliz\u00e1cie, ako aj vy\u010distenie k\u00f3du.\n<li class=\"l\"> Bol povolen\u00fd op\u00e4tovn\u00fd export s\u00faborov\u00fdch syst\u00e9mov pripojen\u00fdch cez NFS (t. j. pripojen\u00fd cez NFS oddiel teraz mo\u017eno exportova\u0165 cez NFS a pou\u017e\u00edva\u0165 ako medzi\u00falo\u017eisko).\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed close_range(), kter\u00e9 umo\u017e\u0148uje procesu uzav\u0159\u00edt celou \u0159adu otev\u0159en\u00fdch souborov\u00fdch deskriptor\u016f najednou, byla p\u0159id\u00e1na mo\u017enost CLOSE_RANGE_CLOEXEC pro uzav\u0159en\u00ed deskriptor\u016f v re\u017eimu close-on-exec.\n<li class=\"l\"> Vo filesysteme F2FS boli pridan\u00e9 nov\u00e9 volania ioctl(), ktor\u00e9 umo\u017e\u0148uj\u00fa z pou\u017e\u00edvate\u013esk\u00e9ho priestoru spravova\u0165, ktor\u00e9 s\u00fabory sa ukladaj\u00fa v komprimovanej podobe. Pridan\u00e1 mo\u017enos\u0165 pripojenia \u201ecompress_mode=\u201c na v\u00fdber umiestnenia riadiaceho spracovania kompresie na strane jadra alebo v pou\u017e\u00edvate\u013eskom priestore.\n<li class=\"l\"> Byla poskytov\u00e1na mo\u017enost montov\u00e1n\u00ed Overlayfs neprivilegovan\u00fdmi procesy, pomoc\u00ed odd\u011blen\u00e9ho prostoru identifik\u00e1tor\u016f u\u017eivatel\u016f (user namespace). Pro kontrolu shody s implementac\u00ed bezpe\u010dnostn\u00edho modelu byl proveden d\u016fkladn\u00fd audit k\u00f3du. V Overlayfs byla tak\u00e9 p\u0159id\u00e1na mo\u017enost spu\u0161t\u011bn\u00ed pomoc\u00ed kopi\u00ed obraz\u016f souborov\u00e9ho syst\u00e9mu prost\u0159ednictv\u00edm voliteln\u00e9ho vypnut\u00ed ov\u011b\u0159en\u00ed UUID.\n<li class=\"l\"> Do souborov\u00e9ho syst\u00e9mu Ceph byla p\u0159id\u00e1na podpora protokolu msgr2.1, kter\u00fd umo\u017e\u0148uje pou\u017e\u00edt algoritmus AES-GCM p\u0159i p\u0159enosu dat v za\u0161ifrovan\u00e9 podob\u011b.\n<li class=\"l\"> V module dm-multipath bola implementovan\u00e1 mo\u017enos\u0165 zoh\u013eadnenia viazanosti na CPU (\u201eIO affinity\u201c) pri v\u00fdbere trasy pre po\u017eiadavky na vstup\/v\u00fdstup.                      <\/ul>\n<li class=\"l\"> <b>Pam\u00e4\u0165 a syst\u00e9mov\u00e9 slu\u017eby<\/b>\n<ul>\n<li class=\"l\"> Byl p\u0159id\u00e1n nov\u00fd mechanismus pro zachyt\u00e1v\u00e1n\u00ed syst\u00e9mov\u00fdch vol\u00e1n\u00ed, zalo\u017een\u00fd na prctl(), kter\u00fd umo\u017e\u0148uje z prostoru u\u017eivatele generovat v\u00fdjimky p\u0159i pokusu o ur\u010dit\u00e9 syst\u00e9mov\u00e9 vol\u00e1n\u00ed a emulovat jeho prov\u00e1d\u011bn\u00ed. Uveden\u00e1 funkcionalita je \u017e\u00e1d\u00e1na ve Wine a Proton pro emulaci syst\u00e9mov\u00fdch vol\u00e1n\u00ed Windows, co\u017e je nutn\u00e9 pro zaji\u0161t\u011bn\u00ed kompatibility s hrami a programy, kter\u00e9 p\u0159\u00edmo vykon\u00e1vaj\u00ed syst\u00e9mov\u00e1 vol\u00e1n\u00ed mimo Windows API (nap\u0159\u00edklad pro ochranu proti neopr\u00e1vn\u011bn\u00e9mu pou\u017e\u00edv\u00e1n\u00ed).\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho vol\u00e1n\u00ed userfaultfd(), ur\u010den\u00e9ho pro zpracov\u00e1n\u00ed page faults (p\u0159\u00edstup k nealokovan\u00fdm str\u00e1nk\u00e1m pam\u011bti) v u\u017eivatelsk\u00e9m prostoru, byla p\u0159id\u00e1na mo\u017enost vypnout zpracov\u00e1n\u00ed v\u00fdjimek, kter\u00e9 vznikaj\u00ed na \u00farovni j\u00e1dra, aby se zt\u00ed\u017eila exploatace n\u011bkter\u00fdch zranitelnost\u00ed.\n<li class=\"l\"> Do subsyst\u00e9mu BPF byla p\u0159id\u00e1na podpora lok\u00e1ln\u00edho \u00falo\u017ei\u0161t\u011b dat pro \u00falohu (task-local storage), kter\u00e9 zaji\u0161\u0165uje vazbu dat na konkr\u00e9tn\u00ed BPF zpracovatel.\n<li class=\"l\"> \u00daplne prepracovan\u00e9 je sledovanie vyu\u017e\u00edvania pam\u00e4te programami BPF \u2014 na riadenie vyu\u017e\u00edvania pam\u00e4te v objektoch BPF namiesto memlock rlimit bol navrhnut\u00fd ovl\u00e1da\u010d cgroup.\n<li class=\"l\"> V mechanizme BTF (BPF Type Format), ktor\u00fd poskytuje inform\u00e1cie na kontrolu typov v pseudok\u00f3de BPF, bola implementovan\u00e1 podpora modulov jadra.\n<li class=\"l\"> V rozhran\u00ed pre asynchr\u00f3nny vstup\/v\u00fdstup io_uring bola pridan\u00e1 podpora syst\u00e9mov\u00fdch volan\u00ed shutdown(), renameat2() a unlinkat(). Pri volan\u00ed io_uring_enter() bola pridan\u00e1 mo\u017enos\u0165 ur\u010di\u0165 \u010dasov\u00fd limit (podporu argumentu na ur\u010denie \u010dasov\u00e9ho limitu je mo\u017en\u00e9 overi\u0165 pomocou pr\u00edznaku IORING_FEAT_EXT_ARG).\n<li class=\"l\"> Architekt\u00fara ia64, pou\u017e\u00edvan\u00e1 v procesoroch Intel Itanium, bola preklasifikovan\u00e1 do kateg\u00f3rie neudr\u017eiavan\u00fdch (\u201eorphaned\u201c), \u010do nazna\u010duje zastavenie testovania. Spolo\u010dnos\u0165 Hewlett Packard Enterprise zastavila prij\u00edmanie objedn\u00e1vok na nov\u00e9 zariadenia Itanium, zatia\u013e \u010do Intel to urobil u\u017e minul\u00fd rok.\n<li class=\"l\"> Podpora syst\u00e9mov na b\u00e1ze architekt\u00fary MicroBlaze, ktor\u00e9 nie s\u00fa vybaven\u00e9 blokom spr\u00e1vy pam\u00e4te (MMU), bola zru\u0161en\u00e1. Tak\u00e9to syst\u00e9my sa u\u017e dlhodobo nevyskytuj\u00fa v praxi.\n<li class=\"l\"> Pre architekt\u00faru MIPS bola pridan\u00e1 podpora testovania pokrytia k\u00f3du (coverage testing) pomocou n\u00e1stroja gcov.\n<li class=\"l\"> Bola pridan\u00e1 podpora virtu\u00e1lnej zbernice auxiliary na interakciu s multifunk\u010dn\u00fdmi zariadeniami, ktor\u00e9 kombinuj\u00fa funkcie vy\u017eaduj\u00face r\u00f4zne ovl\u00e1da\u010de (napr\u00edklad sie\u0165ov\u00e9 karty s podporou Ethernet a RDMA). Zbernica sa m\u00f4\u017ee pou\u017e\u00edva\u0165 na priradenie prim\u00e1rneho a sekund\u00e1rneho ovl\u00e1da\u010da pre zariadenie, ke\u010f je problematick\u00e9 pou\u017e\u00edvanie subsyst\u00e9mu MFD (Multi-Function Devices).\n<li class=\"l\"> Pre architekt\u00faru RISC-V bola pridan\u00e1 podpora syst\u00e9mu rozde\u013eovania pam\u00e4te CMA (Contiguous Memory Allocator), ktor\u00fd je optimalizovan\u00fd na pridelenie ve\u013ek\u00fdch nepreru\u0161en\u00fdch oblast\u00ed pam\u00e4te s pou\u017eit\u00edm techniky pres\u00favania str\u00e1n pam\u00e4te. Pre RISC-V boli taktie\u017e implementovan\u00e9 prostriedky na obmedzenie pr\u00edstupu k \/dev\/mem a sledovanie \u010dasu spracovania preru\u0161enia.\n<li class=\"l\"> Pre 32-bitov\u00e9 syst\u00e9my ARM bola pridan\u00e1 podpora ladacieho n\u00e1stroja KASan (Kernel address sanitizer), ktor\u00fd zabezpe\u010duje odha\u013eovanie ch\u00fdb pri pr\u00e1ci s pam\u00e4\u0165ou. Pre 64-bitov\u00e9 ARM bola implement\u00e1cia KASan preveden\u00e1 na pou\u017e\u00edvanie tagov MTE (MemTag).\n<li class=\"l\"> Bol pridan\u00fd syst\u00e9mov\u00fd hovor epoll_pwait2(), ktor\u00fd umo\u017e\u0148uje pou\u017e\u00edvanie \u010dasov\u00fdch limitov s nanosekundovou presnos\u0165ou (hovor epoll_wait manipuluje milisekundami).\n<li class=\"l\"> V syst\u00e9me zostavenia je zabezpe\u010den\u00e9 v\u00fdstup ch\u00fdb pri pokuse o zostavenie nahr\u00e1van\u00fdch modulov jadra, v ktor\u00fdch nebola pomocou makra MODULE_LICENSE() ur\u010den\u00e1 licencia na k\u00f3d. Chyba pri zostaven\u00ed teraz tie\u017e sp\u00f4sob\u00ed pou\u017eitie makra EXPORT_SYMBOL() pre statick\u00e9 funkcie.\n<li class=\"l\"> Pridan\u00e1 podpora mapovania GEM-objektov z pam\u00e4te vyhradenej pre vstup\/v\u00fdstup, \u010do umo\u017enilo zr\u00fdchli\u0165 pr\u00e1cu s framebufferom na niektor\u00fdch architekt\u00farach.\n<li class=\"l\"> V Kconfig bola ukon\u010den\u00e1 podpora Qt4 (podpora Qt5, GTK a Ncurses bola ponechan\u00e1).                  <\/ul>\n<li class=\"l\"> <b>Virtualiz\u00e1cia a bezpe\u010dnos\u0165<\/b>\n<ul>\n<li class=\"l\"> Do syst\u00e9mov\u00e9ho volania seccomp() bola pridan\u00e1 podpora re\u017eimu r\u00fdchlej reakcie, ktor\u00e1 umo\u017e\u0148uje ve\u013emi r\u00fdchlo ur\u010di\u0165, \u010di je ur\u010dit\u00fd syst\u00e9mov\u00fd hovor povolen\u00fd alebo zak\u00e1zan\u00fd na z\u00e1klade pripojenej tabu\u013eky opr\u00e1vnen\u00ed (constant-action bitmap), ktor\u00e1 nevy\u017eaduje spustenie BPF spracovate\u013ea.\n<li class=\"l\"> Integrovan\u00e9 komponenty jadra pre vytv\u00e1ranie a spr\u00e1vu enkl\u00e1v na b\u00e1ze technol\u00f3gie Intel SGX (Software Guard eXtensions), ktor\u00e1 umo\u017e\u0148uje aplik\u00e1ci\u00e1m vykon\u00e1va\u0165 k\u00f3d v izolovan\u00fdch \u0161ifrovan\u00fdch oblastiach pam\u00e4te, pri\u010dom pr\u00edstup ostatn\u00fdch syst\u00e9mov k nim je obmedzen\u00fd.\n<li class=\"l\"> V r\u00e1mci iniciat\u00edvy na obmedzenie pr\u00edstupu z pou\u017e\u00edvate\u013esk\u00e9ho priestoru k registr\u00e1m MSR (model-specific register) bola zak\u00e1zan\u00e1 z\u00e1pis do registru MSR_IA32_ENERGY_PERF_BIAS, ktor\u00fd umo\u017e\u0148uje zmeni\u0165 re\u017eim energetickej efekt\u00edvnosti procesora (\u201enormal\u201c, \u201eperformance\u201c, \u201epowersave\u201c).\n<li class=\"l\"> Z vetvy kernel-rt pre syst\u00e9my re\u00e1lneho \u010dasu bola prenesen\u00e1 mo\u017enos\u0165 vypnutia migr\u00e1cie vysoko prioritn\u00fdch \u00faloh medzi CPU.\n<li class=\"l\"> Pre syst\u00e9my ARM64 bola pridan\u00e1 mo\u017enos\u0165 pou\u017ei\u0165 \u0161t\u00edtky MTE (MemTag, Memory Tagging Extension) pre adresy pam\u00e4te spracovate\u013eov sign\u00e1lov. Pou\u017eitie MTE sa aktivuje ur\u010den\u00edm mo\u017enosti SA_EXPOSE_TAGBITS v sigaction() a umo\u017e\u0148uje organizova\u0165 kontrolu spr\u00e1vnosti pou\u017e\u00edvania ukazovate\u013eov na zabr\u00e1nenie zneu\u017e\u00edvaniu zranite\u013enost\u00ed, ktor\u00e9 sp\u00f4sobuj\u00fa pr\u00edstup k u\u017e uvo\u013enen\u00fdm blokom pam\u00e4te, prete\u010den\u00edm vyrovn\u00e1vacej pam\u00e4te, pr\u00edstupom pred inicializ\u00e1ciou a pou\u017e\u00edvan\u00edm mimo aktu\u00e1lneho kontextu.\n<li class=\"l\"> Bol pridan\u00fd parameter \u201eDM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING\u201c, ktor\u00fd umo\u017e\u0148uje subsyst\u00e9mu dm-verity overova\u0165 hash podpisy certifik\u00e1tov ulo\u017een\u00fdch v sekund\u00e1rnej k\u013e\u00fa\u010dovej \u00faschovne (keyring). V praxi toto nastavenie umo\u017e\u0148uje verifikova\u0165 nielen certifik\u00e1ty vlo\u017een\u00e9 do jadra, ale aj certifik\u00e1ty na\u010d\u00edtan\u00e9 po\u010das prev\u00e1dzky, \u010do poskytuje mo\u017enos\u0165 aktualizova\u0165 certifik\u00e1ty bez aktualiz\u00e1cie cel\u00e9ho jadra.\n<li class=\"l\"> Do User-mode Linux added support for the suspend-to-idle mode, allowing the environment to be frozen and using the SIGUSR1 signal to wake it up from sleep mode.\n<li class=\"l\"> In the virtio-mem mechanism, enabling hot-plugging and unplugging of memory to virtual machines, support for Big Block Mode (BBM) has been added, allowing memory to be transferred or retrieved in blocks exceeding the size of the kernel's memory block, necessary for optimizing VFIO in QEMU.\n<li class=\"l\"> Support for the CHACHA20-POLY1305 cipher has been added to the kernel-level TLS implementation.      <\/ul>\n<li class=\"l\"> <b>Sie\u0165ov\u00fd subsyst\u00e9m<\/b>\n<ul>\n<li class=\"l\"> A Connectivity Fault Management (CFM) mechanism has been implemented for 802.1Q (VLAN), allowing the detection, verification, and isolation of faults in networks with virtual bridges. For example, CFM can be used to localize problems in networks spanning multiple independent organizations, whose employees have access only to their own equipment.\n<li class=\"l\"> Support for encapsulating SCTP packets in UDP packets (RFC 6951) has been added, making it possible to use SCTP in networks with old address translators that do not directly support SCTP, as well as implement SCTP on systems that do not provide direct access to the IP layer.\n<li class=\"l\"> The implementation of WiMAX technology has been moved to staging and is slated for removal in the future if no users are found who need WiMAX. WiMAX is no longer used in public networks, and the only driver supporting WiMAX in the kernel remains the outdated Intel 2400m driver. Support for WiMAX in the NetworkManager network configurator was discontinued in 2015. Currently, WiMAX has been almost completely displaced by technologies such as LTE, HSPA+, and Wi-Fi 802.11n.\n<li class=\"l\"> Work has been done to optimize the performance of incoming TCP traffic processing in zerocopy mode, i.e., without additional copying into new buffers. For medium-sized traffic covering dozens or several hundreds of kilobytes of data, using zerocopy instead of recvmsg() is significantly more efficient. For example, the implemented changes allowed for a 60-70% increase in traffic processing efficiency in RPC style with messages of 32 KB when using zerocopy.\n<li class=\"l\"> Pridan\u00e9 nov\u00e9 volania ioctl() na vytv\u00e1ranie sie\u0165ov\u00fdch mostov pokr\u00fdvaj\u00facich nieko\u013eko kan\u00e1lov PPP. Predlo\u017een\u00e1 funkcia umo\u017e\u0148uje presun r\u00e1mcov z jedn\u00e9ho kan\u00e1la na druh\u00fd, napr\u00edklad z PPPoE do rel\u00e1cie PPPoL2TP.\n<li class=\"l\"> Pokra\u010duje integr\u00e1cia do jadra MPTCP (MultiPath TCP), roz\u0161\u00edrenia protokolu TCP na zabezpe\u010denie funkcie TCP pripojenia s dod\u00e1van\u00edm paketov s\u00fa\u010dasne viacer\u00fdmi trasami cez r\u00f4zne sie\u0165ov\u00e9 rozhrania priraden\u00e9 k r\u00f4znym IP adres\u00e1m. V novej verzii bola implementovan\u00e1 podpora mo\u017enosti ADD_ADDR na ohl\u00e1senie dostupn\u00fdch <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/lir\/ipv4\/\"   title=\"IP adresy\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"829\">IP adresy<\/a> na ktor\u00e9 je mo\u017en\u00e9 pripojenie pri pridan\u00ed nov\u00fdch tokov k existuj\u00facemu pripojeniu MPTCP.\n<li class=\"l\"> Pridan\u00e1 mo\u017enos\u0165 nastavenia akci\u00ed pri prekro\u010den\u00ed rozpo\u010dtu polly konfigur\u00e1cie pripojen\u00ed (busy-polling). Predt\u00fdm dostupn\u00fd re\u017eim SO_BUSY_POLL predpokladal prep\u00ednanie na softirq pri vy\u010derpan\u00ed rozpo\u010dtu. Pre aplik\u00e1cie, ktor\u00e9 musia na\u010falej pou\u017e\u00edva\u0165 polling, bola navrhnut\u00e1 nov\u00e1 mo\u017enos\u0165 SO_PREFER_BUSY_POLL.\n<li class=\"l\"> V IPv6 bola implementovan\u00e1 podpora re\u017eimov SRv6 End.DT4 a End.DT6, pou\u017e\u00edvan\u00fdch na vytv\u00e1ranie viacu\u017e\u00edvate\u013esk\u00fdch IPv4 L3 <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"155\">VPN<\/a> a zariaden\u00ed VRF (Virtual Routing and Forwarding).\n<li class=\"l\"> V Netfilter bola zjednoten\u00e1 implement\u00e1cia v\u00fdrazov set, \u010do umo\u017enilo zabezpe\u010di\u0165 mo\u017enos\u0165 ur\u010di\u0165 nieko\u013eko v\u00fdrazov pre ka\u017ed\u00fd prvok set-zoznamov.\n<li class=\"l\"> Do bezdr\u00f4tov\u00e9ho z\u00e1sobn\u00edka 802.11 boli pridan\u00e9 API na konfigur\u00e1ciu obmedzen\u00ed v\u00fdkonu SAR, ako aj parametrov AE PWE a HE MCS. V ovl\u00e1da\u010di Intel iwlwifi bola pridan\u00e1 podpora p\u00e1sma 6GHz (Ultra High Band). V ovl\u00e1da\u010di Qualcomm Ath11k bola pridan\u00e1 podpora technol\u00f3gie r\u00fdchlej konfigur\u00e1cie pripojenia FILS (Fast Initial Link Setup, \u0161tandardizovan\u00e1 ako IEEE 802.11ai), umo\u017e\u0148uj\u00facej zbavi\u0165 sa oneskoren\u00ed pri roamingu po\u010das migr\u00e1cie z jedn\u00e9ho pr\u00edstupov\u00e9ho bodu na druh\u00fd.   <\/ul>\n<li class=\"l\"> <b>Zariadenie<\/b>\n<ul>\n<li class=\"l\"> V ovl\u00e1da\u010di amdgpu bola implementovan\u00e1 podpora APU AMD \u201eGreen Sardine\u201c (Ryzen 5000) a GPU \u201eDimgrey Cavefish\u201c (Navi 2), ako aj po\u010diato\u010dn\u00e1 podpora APU AMD Van Gogh so jadrom Zen 2 a GPU RDNA 2 (Navi 2). Pridan\u00e1 podpora nov\u00fdch identifik\u00e1torov APU Renoir (na b\u00e1ze CPU Zen 2 CPU a GPU Vega).\n<li class=\"l\"> V ovl\u00e1da\u010di i915 pre grafick\u00e9 karty Intel bola implementovan\u00e1 podpora technol\u00f3gie IS (Integer scaling) s realiz\u00e1ciou filtru na zv\u00e4\u010d\u0161enie mierky so zoh\u013eadnen\u00edm stavu susedn\u00fdch pixelov (interpola\u010dn\u00e1 met\u00f3da Nearest-neighbor) na ur\u010denie farby ch\u00fdbaj\u00facich pixelov. Roz\u0161\u00edren\u00e1 podpora diskr\u00e9tnych kariet Intel DG1. Bolo zaveden\u00e9 podporovanie technol\u00f3gie \u201eBig Joiner\u201c, ktor\u00e1 je pr\u00edtomn\u00e1 od \u010dipov Ice Lake \/ Gen11 a umo\u017e\u0148uje pou\u017ei\u0165 jeden transcoder na spracovanie dvoch tokov, napr\u00edklad na v\u00fdstup na 8K obrazovku cez jeden DisplayPort. Pridan\u00fd re\u017eim asynchr\u00f3nneho prep\u00ednania medzi dvoma vyrovn\u00e1vac\u00edmi pam\u00e4\u0165ami vo videopam\u00e4ti (async flip).\n<li class=\"l\"> Do ovl\u00e1da\u010da nouveau bola pridan\u00e1 z\u00e1kladn\u00e1 podpora GPU NVIDIA zalo\u017een\u00fdch na mikroarchitekt\u00fare \u201eAmpere\u201c (GA100, GeForce RTX 30xx), zatia\u013e obmedzen\u00e1 prostriedkami na spr\u00e1vu videore\u017eimov.\n<li class=\"l\"> Pridan\u00e1 podpora protokolu 3WIRE, ktor\u00fd sa pou\u017e\u00edva v LCD paneloch. Pridan\u00e1 podpora panelov novatek nt36672a, TDO tl070wsh30, Innolux N125HCE-GN1 a ABT Y030XX067A 3.0. M\u00f4\u017eeme osobitne vyzdvihn\u00fa\u0165 podporu panela pre smartf\u00f3ny OnePlus 6 a 6T, ktor\u00e1 umo\u017enila organizova\u0165 bootovanie na zariadeniach s nemodifikovan\u00fdm jadrom.\n<li class=\"l\"> Pridan\u00e1 podpora prv\u00e9ho diskr\u00e9tneho USB4 host kontrolleru Intel Maple Ridge.\n<li class=\"l\"> Pridan\u00e1 podpora zvukov\u00fdch kodekov Allwinner H6 I2S, Analog Devices ADAU1372, Intel Alderlake-S, GMediatek MT8192, NXP i.MX HDMI a XCVR, Realtek RT715 a Qualcomm SM8250.\n<li class=\"l\"> Pridan\u00e1 podpora ARM platforiem, zariaden\u00ed a platforiem: Galaxy Note 10.1, Microsoft Lumia 950 XL, NanoPi R1, FriendlyArm ZeroPi, Elimo Initium SBC, Broadcom BCM4908, Mediatek MT8192\/MT6779\/MT8167, MStar Infinity2M, Nuvoton NPCM730, Marvell Armada 382, Mikrotik na b\u00e1ze Marvell Prestera 98DX3236, servery s Nuvoton NPCM750 BMC, Kontron i.MX8M Mini, Espressobin Ultra, \u201eTrogdor\u201c Chromebook, Kobol Helios64, Engicam PX30.Core.\n<li class=\"l\"> Zabudovan\u00e1 podpora hernej konzoly Ouya zalo\u017eenej na NVIDIA Tegra 3.                        <\/ul>\n<\/ul>\n<p>Z\u00e1rove\u0148 latinskoamerick\u00fd Fond slobodn\u00e9ho softv\u00e9ru vytvoril variantu \u00faplne slobodn\u00e9ho jadra 5.11 \u2014 Linux-libre 5.11-gnu, vy\u010disten\u00e9ho od prvkov firmv\u00e9rov a ovl\u00e1da\u010dov, obsahuj\u00facich neslobodn\u00e9 komponenty alebo \u00faseky k\u00f3du, ktor\u00fdch pou\u017eitie je obmedzen\u00e9 v\u00fdrobcami. V novej verzii bola vykonan\u00e1 \u010distka ovl\u00e1da\u010dov pre qat_4xxx (crypto), lt9611uxcm (dsi\/hdmi bridge), ccs\/smia++ (sensor), ath11k_pci, nxp audio transceiver a mhi pci controller. Aktualizovan\u00fd k\u00f3d \u010distenia blobov v ovl\u00e1da\u010doch a subsyst\u00e9moch amdgpu, btqca, btrtl, btusb, i915 csr. Vypnut\u00e9 nov\u00e9 blobov v m3 rproc, idt82p33 ptp clock a qualcomm arm64.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54581\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.11. \u0421\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u043c\u0435\u0442\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439: \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX, \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u0448\u0438\u043d\u0430 auxiliary, \u0437\u0430\u043f\u0440\u0435\u0442 \u0441\u0431\u043e\u0440\u043a\u0438 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u0431\u0435\u0437 MODULE_LICENSE(), \u0440\u0435\u0436\u0438\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0432 seccomp, \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ia64, \u043f\u0435\u0440\u0435\u043d\u043e\u0441 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 WiMAX \u0432 \u0432\u0435\u0442\u043a\u0443 &#171;staging&#187;, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u043a\u0430\u043f\u0441\u0443\u043b\u044f\u0446\u0438\u0438 SCTP \u0432 UDP. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99149","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.11.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-5-11\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.11 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.11.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-5-11\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-02-16T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-16T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie jadra Linux 5.11 | ProHoster","description":"Po dvoch mesiacoch v\u00fdvoja Linus Torvalds predstavil vydanie jadra Linux 5.11.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-5-11","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.11 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041b\u0438\u043d\u0443\u0441 \u0422\u043e\u0440\u0432\u0430\u043b\u044c\u0434\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0440\u0435\u043b\u0438\u0437 \u044f\u0434\u0440\u0430 Linux 5.11.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-yadra-linux-5-11","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-16T14:22:46+00:00","article:modified_time":"2021-02-16T14:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99149","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:54:35","updated":"2026-02-08 20:40:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=99149"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99149\/revisions"}],"predecessor-version":[{"id":158020,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99149\/revisions\/158020"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=99149"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=99149"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=99149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}