Kuburitswa kweRed Hat Enterprise Linux 8 kugovera

Red Hat Company yakabudiswa kubudiswa kwekugovera Red Hat Enterprise Linux 8. Kuisa magungano akagadzirirwa x86_64, s390x (IBM System z), ppc64le uye Aarch64 zvivakwa, asi inowanikwa nokuti downloads chete kune vakanyoreswa Red Hat Mutengi Portal vashandisi. Iwo masosi eRed Hat Enterprise Linux 8 rpm mapakeji anogoverwa kuburikidza Git repository CentOS. Kugoverwa kuchatsigirwa kusvika angangoita 2029.

Iyo tekinoroji inosanganisirwa mu Fedora 28. Bazi idzva rinozivikanwa nekuchinja kuWayland nekukasira, kutsiva iptables nenftables, kuvandudza core components (kernel 4.18, GCC 8), uchishandisa iyo DNF package maneja panzvimbo yeYUM, uchishandisa modular repository, inopedzisa rutsigiro rweKDE neBtrfs.

Key change:

• Kuchinjira kune maneja wepasuru DNF nekupihwa kwechitubu chekuenderana neYum padanho remirairo yemutsetse sarudzo. Kuenzaniswa neYum, DNF ine kukurumidza kukurumidza uye kuderera kwekushandisa ndangariro, inodzora zvirinani kutsamira uye inotsigira mapoka emapakeji mumamodule;
• Yakakamurwa kuita yakakosha BaseOS repository uye modular AppStream repository. BaseOS inogovera iyo shoma seti yemapakeji anodiwa kuti sisitimu ishande; zvimwe zvese kurongwazve kuAppStream repository. AppStream inogona kushandiswa mushanduro mbiri: seyechinyakare RPM repository uye senge repository mune modular fomati.

  Iyo modular repository inopa seti ye rpm mapakeji akaiswa mumamodule, ayo anotsigirwa zvisinei nekuburitswa kwekugovera. Mamodule anogona kushandiswa kuisa mamwe mavhezheni eimwe application (semuenzaniso, unogona kuisa PostgreSQL 9.6 kana PostgreSQL 10). Iyo modular sangano inobvumira mushandisi kuchinjira kune kutsva kwakakosha kuburitswa kwechishandiso pasina kumirira kuburitswa kutsva kwekugovera uye kuramba kune yekare, asi ichiri kutsigirwa, shanduro mushure mekugadzirisa kugovera. Mamodule anosanganisira base application uye maraibhurari anodiwa pakushanda kwayo (mamwe ma module anogona kushandiswa seanotsamira);

• Inokurudzirwa sedesktop yakasarudzika GNOME 3.28 uchishandisa Wayland-based display server by default. Iyo X.Org Server yakavakirwa nharaunda inowanikwa senge sarudzo. Mapakeji ane KDE desktop haana kubatanidzwa, achisiya chete GNOME rutsigiro;
• Iyo Linux kernel package yakavakirwa pakuburitswa 4.18. Inogoneswa seyakagadzika compiler GCC 8.2. Glibc system raibhurari yakagadziridzwa kuburitsa 2.28.
• Kuitwa kwekutanga kwePython programming mutauro ndeyePython 3.6. Tsigiro shoma yePython 2.7 inopihwa. Python haina kubatanidzwa mune yekutanga package; inofanirwa kuiswa zvakare. Shanduro dzakavandudzwa dzeRuby 2.5, PHP 7.2, Perl 5.26, Node.js 10, Java 8 ne11, Clang/LLVM Toolset 6.0, .NET Core 2.1, Git 2.17, Mercurial 4.8, Subversion 1.10. Iyo CMake kuvaka system (3.11) inosanganisirwa;
• Yakawedzerwa rutsigiro rwekuisa iyo system paNVDIMM inotyaira kune iyo Anaconda installer;
• Iko kugona encrypt disks uchishandisa iyo LUKS2 fomati yakawedzerwa kune yekumisikidza uye sisitimu, iyo yakatsiva yaimboshandiswa LUKS1 fomati (mu dm-crypt uye cryptsetup LUKS2 yave kupihwa nekusarudzika). LUKS2 yakakurumbira kune yayo yakarerutswa kiyi manejimendi system, kugona kushandisa zvikamu zvakakura (4096 pachinzvimbo che512, inoderedza mutoro panguva yedecryption), yekufananidzira partition identifiers (label) uye metadata backup maturusi nekugona kuzvidzosera otomatiki kubva kukopi kana. kukuvara kunoonekwa.
• A new Composer utility yakawedzerwa, ichipa maturusi ekugadzira customized bootable system mifananidzo yakakodzera kuiswa munzvimbo dzakasiyana-siyana dzemapuratifomu;
• Yakabviswa rutsigiro rweiyo Btrfs faira system. Iyo btrfs.ko kernel module, iyo btrfs-progs utilities, uye snapper package hazvichasanganisirwe;
• Toolkit inosanganisirwa Stratis, iyo inopa maturusi ekubatanidza uye kurerutsa kuseta uye manejimendi yedziva reimwe kana anopfuura madhiraivha emunharaunda. Stratis inoshandiswa sedhiri (stratisd daemon) yakavakirwa pamusoro peiyo devicemapper uye XFS subsystem, uye inobvumidza iwe kuti ushandise maficha akadai seakasimba ekuchengetedza kugoverwa, snapshots, kutendeseka uye kugadzirwa kwe caching layer, pasina hunhu hwenyanzvi mune. kuchengetedza system management;
• Sistimu-yakakura marongero ekumisikidza cryptographic subsystems akaitwa, achivhara iyo TLS, IPSec, SSH, DNSSec uye Kerberos protocol. Uchishandisa iyo update-crypto-policy command iwe unogona ikozvino kusarudza imwe yayo
  nzira dzekusarudza cryptographic algorithms: default, legacy, ramangwana uye fips. Kuburitsa kunogoneswa nekusingaperi Vhura SSL 1.1.1 ine TLS 1.3 tsigiro;

• Yakapihwa system-yakafara rutsigiro rwemakadhi akangwara uye HSM (Hardware Security Modules) ine PKCS#11 cryptographic tokens;
• Iptables, ip6tables, arptables uye ebtables packet filter yakatsiviwa ne nftables packet filter, iyo yava kushandiswa nekusagadzikana uye inokosha pakubatana kwepacket filtering interfaces ye IPv4, IPv6, ARP uye network mabhiriji. Nftables inopa chete generic, protocol-yakazvimirira interface pane kernel level inopa mabasa ekutanga ekubvisa data kubva pamapakiti, kuita data mashandiro, uye kuyerera kuyerera. Iyo yekusefa logic pachayo uye maprotocol-chaiwo mabati anounganidzwa mubytecode munzvimbo yemushandisi, mushure meizvozvo iyi bytecode inoiswa mukernel uchishandisa iyo Netlink interface uye inouraiwa mune yakakosha muchina unoyeuchidza BPF (Berkeley Packet Filters). Iyo firewalld daemon yakachinjirwa kuti ishandise nftables seyayo default backend. Kushandura mitemo yekare, iptables-translate uye ip6tables-translate zvishandiso zvakawedzerwa;
• Kuve nechokwadi chekukurukurirana kwenetiweki pakati pemidziyo yakati wandei, rutsigiro rwevatyairi kuvaka IPVLAN virtual network yakawedzerwa;
• Iyo yakakosha package inosanganisira iyo nginx http server (1.14). Apache httpd yakagadziridzwa kuita shanduro 2.4.35, uye OpenSSH kusvika 7.8p1.

  Kubva kuDBMS, MySQL 8.0, MariaDB 10.3, PostgreSQL 9.6/10 uye Redis 4.0 inowanikwa mumatura. Iyo MongoDB DBMS haina kuverengerwa nekuda kwe shanduko yerezinesi idzva reSSPL, risati razivikanwa serakavhurika;

• Zvikamu zve virtualization zvakakwidziridzwa. Nekutadza, kana uchigadzira chaiwo michina, mhando inoshandiswa Q35 (ICH9 chipset emulation) ine PCI Express rutsigiro. Iwe unogona ikozvino kushandisa iyo Cockpit web interface kugadzira uye kubata chaiwo michina. Iyo virt-maneja interface yakabviswa. QEMU yakagadziridzwa kuita shanduro 2.12. QEMU inoshandisa sandbox isolation mode, iyo inodzikamisa iyo system inodaidza kuti QEMU zvikamu zvinogona kushandisa;
• Yakawedzera tsigiro yeBPF-based tracing mechanisms, kusanganisira kushandisa SystemTap (4.0) toolkit. Kuumbwa kunosanganisira zvishandiso zvekuunganidza uye kurodha zvirongwa zveBPF;
• Yakawedzera tsigiro yekuyedza yeXDP (eXpress Data Path) subsystem, iyo inobvumira kumhanyisa zvirongwa zveBPF paLinux padanho rekutyaira network nekukwanisa kuwana zvakananga DMA packet buffer uye pachinhanho chisati chapihwa skbuff netiweki stack;
• Iyo boom utility yakawedzerwa kubata bhooloader marongero. Boom inoita kuti zvive nyore kuita mashandiro akadai sekugadzira zvinyorwa zvitsva zvebhutsu, semuenzaniso, kana iwe uchida boot kubva kuLVM snapshot. Boom inongogumira pakuwedzera zvinyorwa zvitsva zvebhutsu uye haigone kushandiswa kugadzirisa zviripo;
• Integrated lightweight toolkit yekugadzirisa midziyo yakavharirwa, iyo inoshandiswa kugadzira midziyo Buildah, kwekutanga - podman uye kutsvaga mifananidzo yakagadzirwa- Skopeo;
• Izvo zvinogoneka zvine chekuita nekubatanidza zvakawedzerwa. Iyo Pacemaker cluster resource maneja yakagadziridzwa kune vhezheni 2.0. Mukushandisa pcs Tsigiro yakazara yeCorosync 3, knet uye node zita rekufona rinopihwa;
• Manyoro echinyakare ekumisikidza network (network-scripts) akanzi haashandi uye haachaupiwe nekukasira. Kuve nechokwadi chekudzokera shure, panzvimbo yeifup uye ifdown zvinyorwa, zvisungo zvakawedzerwa kune NetworkManager, kushanda kuburikidza nenmcli utility;
• Yakabviswa mapakeji: crypto-utils, cvs, dmraid, tsitsi, munwe, gnote, gstreamer, ImageMagick, mgetty, phonon, pm-utils, rdist, ntp (yakatsiviwa nechrony), qemu (yakatsiviwa neqemu-kvm), qt (yakatsiviwa na qt5-qt), rsh, rt, rubygems (ikozvino yasanganisirwa mune huru ruby ​​​​package), system-config-firewall, tcp_wrappers, wxGTK.
• Yakagadzirira mufananidzo wepasi rose (UBI, Universal Base Image) yekugadzira midziyo yakasarudzika, kusanganisira kukubvumidza iwe kugadzira midziyo yekushandisa imwe chete. UBI inosanganisira nzvimbo shoma yakabviswa-pasi, nguva yekuwedzera-yekuwedzera kutsigira mitauro yehurongwa (nodejs, ruby, python, php, perl) uye seti yemamwe mapakeji mune repository.

Source: opennet.ru