ProHoster > Blog > internet nhau > Oracle inoburitsa Unbreakable Enterprise Kernel 6

Oracle inoburitsa Unbreakable Enterprise Kernel 6

Oracle Company yakaunzwa kusunungurwa kwekutanga kwakagadzikana Isingachinjiki Enterprise Kernel 6 (UEK R6), chivakwa chakawedzerwa cheLinux kernel inotengeswa kuti ishandiswe mukugovera Oracle Linux seimwe nzira kune stock kernel package kubva kuRed Hat Enterprise Linux. Iyo kernel inowanikwa chete kune x86_64 uye ARM64 (aarch64) zvivakwa. Iyo kodhi kodhi ye kernel, kusanganisira kuparara kuita zvigamba zvega, rakabudiswa mune yeruzhinji Oracle Git repository.

Isingaputsike Enterprise Kernel 6 yakavakirwa pane kernel Linux 5.4 (UEK R5 yaive yakavakirwa pa4.14 kernel), iyo inogadziridzwa nezvinhu zvitsva, optimizations, uye zvigadziriso, uye yakaedzwa kuti ienderane neakawanda maapplication ari kushanda paRHEL, uye yakagadziridzwa chaizvo kuti ishande neOracle industrial software uye hardware. UEK R6 kernel kuisirwa uye src mapakeji akagadzirirwa Oracle Linux 7.x ΠΈ 8.x. Tsigiro yebazi re6.x yakamiswa, kushandisa UEK R6, unofanirwa kukwidziridza sisitimu kuenda kuOracle Linux 7 (hapana zvipingamupinyi pakushandisa kernel iyi mushanduro dzakafanana dzeRHEL, CentOS uye Scientific Linux).

Key zvitsva Isingaputsike Enterprise Kernel 6:

  • Yakawedzerwa rutsigiro rwemasisitimu yakavakirwa paiyo 64-bit ARM architecture (aarch64).
  • Yakamisikidzwa rutsigiro kune ese maficha eCgroup v2.
  • Iyo ktask chimiro chakaitwa kuenzanisa mabasa mukernel anoshandisa zvakakosha CPU zviwanikwa. Semuenzaniso, nerubatsiro rwektask, kufanana kwekushanda kwekujekesa mapeji ekuyeuka kana kugadzirisa rondedzero yeinode inogona kurongeka;
  • Iyo yakafananidzwa vhezheni ye kswapd yakaverengerwa kugadzirisa peji swaps asynchronously, kuderedza nhamba yeyakananga (synchronous) swaps. Kana nhamba yemapeji emahara endangariro yadzikira, kswapd inoongorora mapeji asina kushandiswa anogona kusunungurwa.
  • Tsigiro yekuona kutendeseka kweiyo kernel mufananidzo uye nedhijitari yakasainwa firmware paunenge uchirodha kernel uchishandisa Kexec mechanism (kurodha kernel kubva kune yakatotakura system).
  • Kuita kweiyo virtual memory management system yakagadziridzwa, kugona kwekuchenesa ndangariro uye cache mapeji kwakagadziridzwa, uye kugadzirisa kwekuwana kune isina kugoverwa mapeji endangariro (peji kukanganisa) kwakagadziridzwa.
  • Tsigiro yeNVDIMM yakawedzerwa, iyo yakatsanangurwa yekusingaperi ndangariro inogona kushandiswa seyechinyakare RAM.
  • Shanduko kuenda kuDTrace 2.0 dynamic debugging system yaitwa, iyo kutamiswa kushandisa iyo eBPF kernel subsystem. DTrace ikozvino inomhanya pamusoro peBPF, yakafanana neiyo iripo Linux yekutsvaga maturusi anoshanda pamusoro peBPF.
  • Kuvandudzwa kwakaitwa kuOCFS2 (Oracle Cluster File System) faira system.
  • Yakavandudzwa rutsigiro rweBtrfs faira system. Yakawedzera kugona kushandisa Btrfs pane midzi partitions. Sarudzo yakawedzerwa kune inoisa kuti usarudze Btrfs paunenge uchifomatidza zvishandiso. Yakawedzera kugona kuisa mafaera epeji pazvikamu neBtrfs. Btrfs inowedzera rutsigiro rwekumanikidza uchishandisa iyo ZStandard algorithm.
  • Yakawedzera tsigiro yechimiro cheasynchronous I / O - io_uring, iyo inozivikanwa pakutsigira I / O kuvhota uye kugona kushanda zvese nebuffering uye pasina buffering. Panyaya yekuita, io_uring iri padyo neSPDK uye inokunda zvakanyanya libaio kana kuvhota kuchigoneswa. Kuti ushandise io_uring mukupedzisira maapplication ari kushanda munzvimbo yemushandisi, raibhurari yekuchengetera yakagadziridzwa, ichipa yakakwirira-yepamusoro inosunga pamusoro peiyo kernel interface;
  • Yakawedzerwa modhi rutsigiro adiantum yekukurumidza encryption yemadhiraivha.
  • Yakawedzera rutsigiro rwekumanikidza uchishandisa algorithm zstandard (zstd).
  • Iyo ext4 faira system inoshandisa 64-bit timestamps mu superblock minda.
  • XFS inosanganisira zvivakwa zvekuzivisa mamiriro ekuvimbika kwefaira system panguva yekumhanya uye yekuwana chimiro nezve fsck kuurayiwa panhunzi.
  • Iyo TCP stack inosarudzika kune "Nguva Yekusimuka Yokutanga" pachinzvimbo che "Sekukurumidza Sezvinogoneka" paunenge uchitumira mapakeji. GRO (Generic Receive Offload) rutsigiro runogoneswa kuUDP. Yakawedzera rutsigiro rwekugamuchira uye kutumira TCP mapaketi mune zero-copy mode.
  • Kuitwa kweTLS protocol pa kernel level (KTLS) inobatanidzwa, iyo ikozvino inogona kushandiswa kwete chete kutumirwa, asiwo kune yakagamuchirwa data.
  • Inogoneswa senge backend ye firewall nekukasira
    nftables. Optional rutsigiro rwakawedzerwa bpfilter.

  • Yakawedzerwa rutsigiro rweiyo XDP (eXpress Data Path) subsystem, iyo inobvumira kumhanyisa zvirongwa zveBPF paLinux padanho rekutyaira network nekugona kuwana zvakananga DMA packet buffer uye pachinhanho pamberi petiweki stack yagovera skbuff buffer.
  • Yakavandudzwa uye yakagoneswa kana uchishandisa UEFI Yakachengeteka Boot mode Kusabvumirwa kufamba, iyo inorambidza midzi yevashandisi kupinda kune kernel uye inovhara UEFI Yakachengeteka Boot yekupfuura nzira. Semuyenzaniso, yekuvhara modhi inorambidza kupinda ku/dev/mem, /dev/kmem,/dev/port,/proc/kcore, debugfs, kprobes debug mode, mmiotrace, tracefs, BPF, PCMCIA CIS (Kadhi Ruzivo Rwakarongeka), mamwe maficha ACPI uye MSR marejista eCPU, mafoni ku kexec_file uye kexec_load akavharirwa, shanduko yekurara modhi inorambidzwa, kushandiswa kweDMA yePCI zvishandiso kunogumira, kupinza kwe ACPI kodhi kubva kuEFI kusiyanisa kunorambidzwa, manipulations neI / O. zviteshi hazvibvumidzwe, kusanganisira kushandura nhamba yekukanganisa uye I/O port yeserial port.
  • Yakawedzerwa tsigiro yeEnhanced Indirect Branch Restricted Speculation (IBRS) mirairo iyo inokutendera kuti ugone kugonesa uye kudzima fungidziro yekuraira kwekuita panguva yekuvhiringidza, nharembozha, uye mamiriro ekuchinja. Kana Enhanced IBRS ichitsigirwa, iyi nzira inoshandiswa kudzivirira kubva kuSpecter V2 kurwiswa panzvimbo yeRetpoline, sezvo ichipa kuita kuri nani.
  • Dziviriro yakavandudzwa mumadhairekitori anonyorwa nemunhu wese. Mumadhairekitori akadai, kusikwa kweFIFO mafaera uye mafaera evashandisi asingaenderane nemuridzi wedhairekitori nemureza unonamira zvinorambidzwa.
  • Nekumisikidza pane maArM masisitimu, kernel kero nzvimbo randomization pane masisitimu (KASLR) inogoneswa. Aarch64 ine pointer authentication yakagoneswa.
  • Yakawedzera rutsigiro rwe "NVMe pamusoro peMicheka TCP".
  • Mutyairi wevirtio-pmem akawedzerwa kuti ape mukana kune kero yemuviri nzvimbo-mamepu ekuchengetedza maturusi akadai seNVDIMM.

Source: opennet.ru

Voeg