Ina ua maeʻa le lima masina o le atinaʻe, na tuʻuina atu ai le faʻasaʻolotoga o le system manager systemd 250. O le faʻasalalauga fou na faʻaalia ai le mafai ona teuina faʻamatalaga i le faʻailoga faʻailoga, faʻatinoina le faʻamaoniga o vaega o le GPT otometi ona iloa e faʻaaoga ai se saini numera, faʻaleleia faʻamatalaga e uiga i mafuaʻaga o le tuai pe a amata auaunaga, ma faaopoopo filifiliga mo le faatapulaaina o le avanoa o le auaunaga i nisi faiga faila ma fesootaiga fesootaiga, lagolago mo le vaeluaga mataituina faamaoni e faaaoga ai le dm-faamaoni module ua tuuina atu, ma le lagolago mo sd-boot auto-update faaopoopo.
Suiga autu:
- Fa'aopoopoina le lagolago mo fa'ailoga fa'ailoga ma fa'amaonia, lea e mafai ona aoga mo le teuina ma le saogalemu o mea ma'ale'ale e pei o ki SSL ma fa'aoga upu fa'aoga. Decryption o faʻamaoniga e faia naʻo pe a manaʻomia ma fesoʻotaʻi ma le faʻapipiʻiina i le lotoifale poʻo meafaigaluega. O faʻamatalaga e faʻapipiʻiina otometi e faʻaaoga ai algorithms encryption symmetric, o le ki lea e mafai ona maua i totonu o le faila faila, i le TPM2 chip, poʻo le faʻaaogaina o se polokalame tuʻufaʻatasia. A amata le auaunaga, e otometi lava ona fa'amuta fa'amatalaga ma avanoa mo le auaunaga i lona tulaga masani. Ina ia galue ma fa'ailoga fa'ailoga, ua fa'aopoopoina le 'systemd-creds' fa'aoga, ma ua fa'atūina le fa'atulagaina o le LoadCredentialEncrypted ma SetCredentialEncrypted mo auaunaga.
- sd-stub, o le EFI faʻaaogaina lea e mafai ai e le firmware a le EFI ona utaina le fatu Linux, o loʻo lagolagoina nei le faʻaogaina o le fatu e faʻaaoga ai le LINUX_EFI_INITRD_MEDIA_GUID EFI protocol. Faʻaopoopo foʻi i le sd-stub o le mafai lea ona faʻapipiʻi faʻamatalaga ma faila sysext i totonu o le cpio archive ma faʻafeiloaʻi lenei archive i le fatu faʻatasi ai ma le initrd (faʻaopoopo faila o loʻo tuʻuina i le /.extra/ directory). O lenei vaega e mafai ai ona e faʻaogaina se siosiomaga initrd e le mafai ona faʻamaonia, faʻapipiʻiina e sysexts ma faʻamatalaga faʻamaonia faʻamaonia.
- O le Discoverable Partitions specification ua matua faʻalauteleina, tuʻuina atu meafaigaluega mo le faʻamaonia, faʻapipiʻiina ma le faʻagaoioia o vaega faʻaogaina e faʻaaoga ai le GPT (GUID Partition Tables). Pe a faʻatusatusa i faʻasalalauga talu ai, o loʻo lagolagoina nei e le faʻamatalaga le vaeluaga o aʻa ma /usr mo le tele o fausaga, e aofia ai faʻavae e le faʻaogaina le UEFI.
Discoverable Partitions e fa'aopoopoina fo'i le lagolago mo vaeluaga o lo'o fa'amaonia le fa'amaoni e le dm-verity module e fa'aaoga ai saini numera numera PKCS#7, fa'afaigofie ona fai ata fa'amaonia atoatoa. O le lagolago faʻamaonia e tuʻufaʻatasia i totonu o faʻaoga eseese e faʻaogaina ai ata tisiki, e aofia ai systemd-nspawn, systemd-sysext, systemd-dissect, RootImage services, systemd-tmpfiles, ma systemd-sysusers.
- Mo iunite e umi se taimi e amata ai pe taofi, faʻaopoopo i le faʻaalia o se faʻagasolo agaʻi i luma, e mafai ona faʻaalia faʻamatalaga tulaga e mafai ai ona e malamalama i le mea tonu o loʻo tupu i le auaunaga i le taimi nei ma po o le a le auaunaga o loʻo i ai le pule o le polokalama. o lo'o fa'atali nei e fa'auma.
- Faʻaopoopo le DefaultOOMScoreAdjust parakalafa i /etc/systemd/system.conf ma /etc/systemd/user.conf, lea e mafai ai ona e fetuutuunai le OOM-killer threshold mo le maualalo o le manatua, e faʻatatau i faiga e amata ai le systemd mo le faiga ma tagata faʻaoga. Ona o le faaletonu, o le mamafa o auaunaga faiga e maualuga atu nai lo auaunaga a tagata e faaaogāina, i.e. A le lava le manatua, e maualuga atu le avanoa o le fa'amutaina o au'aunaga a tagata fa'aoga nai lo le fa'aogaina.
- Fa'aopoopo le RestrictFileSystems seti, lea e fa'atagaina ai oe e fa'atapula'aina le avanoa o au'aunaga i nisi ituaiga o faila faila. Ina ia matamata i ituaiga faila faila o loʻo avanoa, e mafai ona e faʻaogaina le "systemd-analyse filesystems" poloaiga. I se fa'atusa, o le RestrictNetworkInterfaces filifiliga ua fa'atinoina, lea e mafai ai ona e fa'atapula'aina le avanoa i nisi feso'ota'iga feso'otaiga. O le faʻatinoga e faʻavae i luga o le BPF LSM module, lea e faʻatapulaʻaina le avanoa o se vaega o faiga i mea faitino.
- Faʻaopoopoina se faila fou / etc / integritytab configuration file ma systemd-integritysetup utility lea e faʻapipiʻi le dm-integrity module e pulea ai le faʻamaoni o faʻamatalaga i le vaega, mo se faʻataʻitaʻiga, e faʻamautinoa ai le le mafai ona suia o faʻamatalaga faʻailoga (Authenticated Encryption, faʻamautinoa o loʻo i ai se poloka faʻamatalaga. e le'i suia i se auala lapotopoto) . O le faatulagaga o le faila /etc/integritytab e tutusa ma le /etc/crypttab ma le /etc/veritytab faila, vagana ai o le dm-integrity e faʻaaogaina nai lo le dm-crypt ma le dm-verity.
- O se faila faila fou systemd-boot-update.service ua faʻaopoopoina, pe a faʻagaoioia ma faʻapipiʻi le sd-boot bootloader, o le a otometi lava ona faʻafouina e le systemd le lomiga o le sd-boot bootloader, tausia le code bootloader i taimi uma. sd-boot lava ia ua fausia nei e ala i le faaletonu ma le lagolago mo le SBAT (UEFI Secure Boot Advanced Targeting), lea e foia ai faafitauli i le soloia o tusi faamaonia mo le UEFI Secure Boot. E le gata i lea, o le sd-boot e maua ai le malosi e faʻapipiʻi ai faʻamaufaʻailoga Microsoft Windows e faʻatupu saʻo ai igoa o vaeluaga taʻavale ma Windows ma faʻaalia le Windows version.
sd-boot e maua ai foi le tomai e faʻamalamalamaina ai se lanu lanu i le taimi o le fausiaina. I le taimi o le faʻagasologa o le taʻavale, faʻaopoopo le lagolago mo le suia o le iuga o le lau e ala i le oomiina o le ki "r". Fa'aopoopo le hotkey "f" e alu i le fa'aogaina o le firmware. Fa'aopoopoina se faiga e fa'a otometi ai le faiga e fetaui ma le lisi o mea na filifilia i le taimi mulimuli. Faʻaopoopo le tomai e faʻapipiʻi otometi ai taʻavale EFI o loʻo i totonu o le / EFI / systemd / drivers / directory i le ESP (EFI System Partition) vaega.
- O se faila faila fou factory-reset.target o loʻo aofia ai, lea o loʻo faʻatautaia i le systemd-logind i se auala tutusa i le toe faʻafouina, faʻamalosi, faʻamalolo ma le faʻaogaina o gaioiga, ma faʻaaogaina e fatu ai tagata e faʻaaogaina mo le faʻatinoina o se fale gaosi.
- O le faiga ua fa'aleleia e le systemd ua fausia nei se fa'alogo fa'aopoopo i le 127.0.0.54 fa'aopoopo i le 127.0.0.53. O talosaga e o'o mai i le 127.0.0.54 e fa'afeiloa'i i taimi uma i se DNS server i luga ma e le o fa'agasolo i le lotoifale.
- Tuuina atu le gafatia e fausia ai le systemd-importd ma systemd-resolved ma le OpenSSL library nai lo le libgcrypt.
- Faʻaopoopo le lagolago muamua mo le LoongArch architecture faʻaaogaina i Loongson processors.
- systemd-gpt-auto-generator e maua ai le gafatia e faʻapipiʻi faʻapipiʻi vaega swap faʻamalamalamaga faʻapipiʻiina e le LUKS2 subsystem.
- O le GPT image parsing code o loʻo faʻaaogaina i le systemd-nspawn, systemd-dissect, ma isi mea faʻapitoa e faʻaaogaina ai le mafai ona faʻavasega ata mo isi fausaga, faʻatagaina systemd-nspawn e faʻaoga e faʻataʻitaʻi ata i luga o emulators o isi fausaga.
- Pe a asiasia ata tisiki, systemd-dissect ua faʻaalia nei faʻamatalaga e uiga i le faʻamoemoega o le vaeluaga, e pei o le talafeagai mo le faʻauluina e ala i le UEFI poʻo le taʻavale i totonu o se atigipusa.
- O le "SYSEXT_SCOPE" fanua ua faʻaopoopoina i le system-extension.d/ files, e mafai ai ona e faʻaalia le lautele o le ata o le system - "initrd", "system" poʻo le "portable".
- Ua fa'aopoopoina le fanua "PORTABLE_PREFIXES" i le faila os-release, lea e mafai ona fa'aoga i ata feavea'i e fa'amautu ai fa'ailoga faila o le iunite.
- systemd-logind folasia tulaga fou HandlePowerKeyLongPress, HandleRebootKeyLongPress, HandleSuspendKeyLongPress ma HandleHibernateKeyLongPress, lea e mafai ona faʻaoga e iloa ai le mea e tupu pe a taofi i lalo nisi ki mo le sili atu i le 5 sekone (mo se faʻataʻitaʻiga, oomi i le Suspend ki vave e mafai ona tuʻu vave. , ma pe a tuu i lalo, o le a moe) .
- Mo iunite, o le StartupAllowedCPUs ma le StartupAllowedMemoryNodes o loʻo faʻatinoina, e ese mai tulaga tutusa e aunoa ma le faʻauluina o le Startup e faʻaaogaina i le taimi o le taʻavale ma le tapuni, lea e mafai ai ona e setiina isi faʻatapulaʻa punaoa i le taimi o le taʻavale.
- Fa'aopoopoina [Tulaga|Fa'ailoa][Memory|CPU|IO]Su'ega fa'amalosi e fa'atagaina ai le fa'agaoioia o iunite e fa'amisi pe fa'aletonu pe a iloa e le masini PSI se uta mamafa i le manatua, CPU, ma le I/O i totonu o le masini.
- Ua fa'atuputeleina le tapulaa maualuga o le inode mo le /dev partition mai le 64k i le 1M, ma le /tmp partition mai le 400k i le 1M.
- O se fa'atulagaga ExecSearchPath ua fa'atulagaina mo au'aunaga, lea e mafai ai ona sui le ala mo le su'eina o faila fa'atinoina na fa'alauiloa e ala i fa'atulagaga e pei o ExecStart.
- Faʻaopoopo le RuntimeRandomizedExtraSec seti, lea e mafai ai ona e faʻafeiloaʻi faʻalavelave faʻafuaseʻi i le taimi ole RuntimeMaxSec, lea e faʻatapulaʻa ai le taimi o le faʻatinoina o se iunite.
- O le syntax o le RuntimeDirectory, StateDirectory, CacheDirectory ma LogsDirectory faʻatulagaina ua faʻalauteleina, lea e ala i le faʻamaoniaina o se tau faʻaopoopo e vavaeeseina e se kolone, e mafai nei ona e faʻatulagaina le fatuina o se fesoʻotaʻiga faʻatusa i se lisi tuʻuina atu mo le faʻatulagaina o avanoa i le tele o auala.
- Mo au'aunaga, TTYRows ma TTYColumns fa'atulagaina e fa'atulaga le numera o laina ma koluma i le masini TTY.
- Faʻaopoopo le ExitType faʻatulagaina, lea e mafai ai ona e suia le manatu mo le fuafuaina o le faaiuga o se auaunaga. Ona o le faaletonu, systemd na'o le mata'ituina o le oti o le faiga autu, ae afai e seti ExitType=cgroup, o le a faatali le pule o le polokalama mo le faagasologa mulimuli i le cgroup e maeʻa.
- Systemd-cryptsetup's faʻatinoina o le TPM2 / FIDO2 / PKCS11 lagolago ua fausia nei foi o se cryptsetup plugin, faʻatagaina le faʻatonuga masani cryptsetup e faʻaaoga e tatala ai se vaeluaga faʻailoga.
- O le TPM2 fa'afoe ile systemd-cryptsetup/systemd-cryptsetup e fa'aopoopoina le lagolago mo RSA ki autu fa'aopoopo i ki ECC e fa'aleleia atili ai le feso'ota'iga ma tupe meataalo e le o ni ECC.
- O le filifiliga fa'ailoga-taimi ua fa'aopoopoina i le /etc/crypttab, lea e mafai ai ona e fa'amalamalamaina le maualuga o le taimi e fa'atali ai mo se feso'ota'iga fa'ailoga PKCS#11/FIDO2, a mae'a ona fa'aosoina oe e ulufale i se fa'aupuga po'o le ki fa'aleleia.
- systemd-timesyncd faʻaaogaina le SaveIntervalSec seti, lea e mafai ai e oe ona faʻasaoina i lea taimi ma lea taimi le taimi o le faiga o loʻo i ai nei i le disk, mo se faʻataʻitaʻiga, e faʻatino se uati monotonik i luga o faiga e aunoa ma se RTC.
- O filifiliga ua faʻaopoopoina i le systemd-analyze aoga: "--image" ma le "--root" mo le siakiina o faila faila i totonu o se ata tuʻuina atu poʻo le aʻa, "--recursive-errors" mo le amanaia o iunite faʻalagolago pe a fai se mea sese ua iloa, "--offline" mo le siakiina eseese iunite faila sefe i le tisiki, "-json" mo galuega faatino i le JSON faatulagaga, "-filemu" e tape savali le taua, "-profile" e fusifusia i se talaaga feaveai. E fa'aopoopoina fo'i le fa'atonuga ole inspect-elf mo le fa'avasegaina o faila autu ile fa'asologa o le ELF ma le agava'a e siaki ai faila faila ma se igoa o le iunite, e tusa lava pe fetaui lenei igoa ma le igoa faila.
- systemd-networkd ua fa'alauteleina le lagolago mo le pasi o le Pule Fa'anofoaga (CAN). Fa'aopoopo tulaga e fa'atonutonu ai faiga CAN: Loopback, OneShot, PresumeAck ma ClassicDataLengthCode. Faaopoopo TimeQuantaNSec, PropagationSegment, PhaseBufferSegment1, PhaseBufferSegment2, SyncJumpWidth, DataTimeQuantaNSec, DataPropagationSegment, DataPhaseBufferSegment1, DataPhaseBufferSegment2 ma le DataSyncJumpWidth filifiliga i le [CAN synch] vaega o faila o le CAN synchronization o le vaega o le CAN.
- Ua fa'aopoopoina e le Systemd-networkd se filifiliga Fa'ailoga mo le tagata fa'atau DHCPv4, lea e mafai ai ona e fa'aogaina le fa'ailoga o le tuatusi o lo'o fa'aaogaina pe a fa'atulaga tuatusi IPv4.
- systemd-udevd mo le "ethtool" o loʻo faʻaaogaina le lagolago mo faʻapitoa "max" tau e faʻatulagaina ai le paʻu i le maualuga maualuga e lagolagoina e meafaigaluega.
- I .link faila mo systemd-udevd e mafai nei ona e fetuutuuna'i ta'iala eseese mo le tu'ufa'atasia o feso'ota'iga feso'ota'iga ma feso'ota'iga fa'aau mea faigaluega (offload).
- systemd-networkd ofo atu faila .network fou e ala i le faaletonu: 80-container-vb.network e faʻamalamalamaina alalaupapa fesoʻotaʻiga na faia pe a faʻaogaina le systemd-nspawn ma le "--network-bridge" poʻo le "--network-zone" filifiliga; 80-6rd-tunnel.network e faʻamatala ai alalaupapa e otometi ona faia pe a maua se tali DHCP ma le filifiliga 6RD.
- Systemd-networkd ma systemd-udevd ua faʻaopoopoina le lagolago mo le faʻasalalauina o le IP i luga o fesoʻotaʻiga InfiniBand, lea na faʻaopoopoina ai le vaega "[IPoIB]" i faila systemd.netdev, ma faʻatautaia le tau o le "ipoib" ua faʻatinoina i le Kind faatulagaga.
- systemd-networkd e tuʻuina atu le faʻaogaina o auala otometi mo tuatusi o loʻo faʻamaonia i le AllowedIPs parakalafa, lea e mafai ona faʻatulagaina e ala i le RouteTable ma RouteMetric parakalafa i le [WireGuard] ma [WireGuardPeer] vaega.
- systemd-networkd e maua ai le fa'atupuina otometi o tuatusi MAC e le suia mo le batadv ma feso'ota'iga alalaupapa. Ina ia faʻamalo lenei amio, e mafai ona e faʻamaonia MACAddress=leai i faila .netdev.
- O se seti WakeOnLanPassword ua faʻaopoopoina i faila .link i le vaega "[Sootaga]" e faʻamautinoa ai le faʻaupuga pe a faʻagasolo le WoL i le "SecureOn" mode.
- Fa'aopoopoina le AutoRateIngress, CompensationMode, FlowIsolationMode, NAT, MPUBytes, PriorityQueueingPreset, FirewallMark, Wash, SplitGSO and UseRawPacketSize settings i le vaega "[CAKE]" o faila .network e fa'amalamalama ai fa'amaufa'ailoga o le CAKE (Common Applications Kept queue mechanism) .
- Fa'aopoopoina le fa'atulagaina o le IgnoreCarrierLoss i le vaega "[Network]" o faila .network, e mafai ai ona e fuafua po'o le a le umi e fa'atali ai a'o le'i tali atu i le leiloa o le fa'ailoga o le va'a.
- Systemd-nspawn, homectl, machinectl ma systemd-run ua faʻalauteleina le faʻasologa o le "--setenv" parakalafa - pe a na o le igoa fesuiaiga e faʻamaonia (e aunoa ma le "="), o le a ave le tau mai le fesuiaiga o le siosiomaga talafeagai (mo faʻataʻitaʻiga, pe a faʻamaonia le "--setenv=FOO" o le a ave le tau mai le $FOO fesuiaiga o le siosiomaga ma faʻaaogaina i le fesuiaiga o le siosiomaga o le igoa tutusa o loʻo seti i totonu o le pusa).
- systemd-nspawn ua faʻaopoopoina se "--suppress-sync" filifiliga e faʻamalo ai le sync () / fsync () / fdatasync () telefoni feaveaʻi pe a fatuina se atigipusa (faʻaoga pe a faʻamuamua le saoasaoa ma faʻasaoina mea faufale pe a le manuia. taua, talu ai e mafai ona toe faia i soo se taimi).
- Ua faʻaopoopoina se faʻamaumauga fou o le hwdb, lea e aofia ai ituaiga eseese o suʻesuʻega faailoilo (multimeters, protocol analyzers, oscilloscopes, etc.). O fa'amatalaga e uiga i meapueata i le hwdb ua fa'alauteleina i se fanua fa'atasi ai ma fa'amatalaga e uiga i le ituaiga meapueata (masani po'o le infrared) ma le tu'uina o tioata (luma po'o tua).
- Fa'aagaaga fa'atupuina o igoa feso'ota'iga e le suia mo masini fa'aoga i luma ole Xen.
- O le auiliiliga o faila autu e le systemd-coredump aoga e faʻavae i luga o faletusi libdw / libelf ua faʻatinoina nei i se isi faiga, faʻaesea i totonu o se siosiomaga sandbox.
- systemd-importd ua faʻaopoopoina le lagolago mo fesuiaiga o le siosiomaga $SYSTEMD_IMPORT_BTRFS_SUBVOL, $SYSTEMD_IMPORT_BTRFS_QUOTA, $SYSTEMD_IMPORT_SYNC, lea e mafai ai ona e faʻamalo le faʻatupuina o Btrfs subpartitions, faʻapea foʻi ma le faʻatulagaina o quota ma le faʻasologa o tisiki.
- I totonu o le systemd-journald, i luga o faila faila e lagolagoina le kopi-i-tusi faiga, o le COW mode ua toe faʻaogaina mo faʻamaumauga faʻamaumauga, faʻatagaina i latou e faʻapipiʻiina e faʻaaoga ai Btrfs.
- systemd-journald e fa'atinoina le toe fa'aaogaina o fanua tutusa i se fe'au e tasi, lea e faia i le tulaga a'o le'i tu'uina le fe'au i totonu o le api talaaga.
- Fa'aopoopoina le "--show" i le fa'atonuga tapuni e fa'aalia ai le tapunia fa'atulagaina.
puna: opennet.ru