ProHoster > Blog > internet nhau > OpenBSD 6.9 kuburitswa

OpenBSD 6.9 kuburitswa

Kuburitswa kweyemahara muchinjiko-chikuva UNIX-senge yekushandisa system OpenBSD 6.9 inoratidzwa. Zvinocherechedzwa kuti uku ndiko kuburitswa kwemakumi mashanu kwechirongwa ichi, icho chichasvitsa makore makumi maviri nematanhatu gore rino. Iyo OpenBSD purojekiti yakavambwa naTheo de Raadt muna 50 mushure mekunetsana nevagadziri veNetBSD, izvo zvakaita kuti Theo arambidzwe kuwana iyo NetBSD CVS repository. Mushure meizvi, Theo de Raadt neboka revanhu vane pfungwa dzakafanana vakagadzira itsva yakavhurika sisitimu yekushandisa yakavakirwa paNetBSD sosi yemuti, iyo huru yekusimudzira zvinangwa yaive yekutakurika (26 hardware mapuratifomu anotsigirwa), kumira, kushanda kwakaringana, kuchengetedzwa kwakasimba. uye yakabatanidzwa cryptographic zvishandiso. Iyo yakazara yekuisa ISO mufananidzo weOpenBSD 1995 base system ndeye 13 MB.

Pamusoro peiyo inoshanda sisitimu pachayo, iyo OpenBSD purojekiti inozivikanwa nezvikamu zvayo, izvo zvave kupararira mune mamwe masisitimu uye zvakaratidza ivo kuti ndeimwe yeakachengeteka uye yepamusoro-soro mhinduro. Pakati pazvo: LibreSSL (forogo yeOpenSSL), OpenSSH, PF packet filter, OpenBGPD uye OpenOSPFD madhimoni ekufambisa, OpenNTPD NTP server, OpenSMTPD mail server, text terminal multiplexer (analogous kuGNU screen) tmux, daemon yakazivikanwa ine IDENT protocol kushandiswa, BSDL imwe nzira. GNU groff package - mandoc, protocol yekuronga kukanganisa-kushivirira masisitimu CARP (Common Kero Redundancy Protocol), yakareruka http server, OpenRSYNC faira yekubatanidza utility.

Mabhindauko makuru:

  • Mutyairi weSoftraid akawedzera RAID1C modhi nekushandiswa kwesoftware RAID1 ine data encryption.
  • Maitiro maviri matsva ekumashure anosanganisirwa - dhcpleased uye resolvd, anoshanda pamwe ne slaacd uye kusunungura kugadzirisa otomatiki network network uye kugadzirisa mazita muDNS. dhcpleased tools DHCP kuwana IP kero, uye resolvd inotarisira zviri mukati resolv.conf zvichibva pane nameserver ruzivo rwakatorwa kubva kudhcpleased, slaacd, uye vatyairi senge umb.
  • Yakawedzera rutsigiro rwekutanga kuApple zvishandiso zvine M1 processor. Izvi zvinosanganisira kucherechedzwa kweApple Icestorm/Firestorm arm64 cores uye yakawedzera rutsigiro rweBCM4378 isina waya machipisi anoshandiswa muApple M1 SoC.
  • Rutsigiro rwakavandudzwa rwepowerpc64 papuratifomu, yakagadzirirwa 64-bit masisitimu akavakirwa paPOWER8 uye POWER9 processors. Kuenzaniswa nekuburitswa kwekare kwepowerpc64, rutsigiro rweRETGUARD nzira yekudzivirira yaitwa, mutyairi weastfb weAspeed BMC framebuffer awedzerwa, matambudziko nekushanda kweradeondrm uye amdgpu madhiraivha pane masisitimu ane AMD GPU agadziriswa, iyo kugona kunetiweki bhutsu kwakawedzerwa kune kernel magungano egondohwe dhisiki, tsigiro yemamodhi yakawedzerwa CPU POWER9 simba rekuchengetedza, yakawedzera tsigiro yekusarudzika inogadzirwa panguva yekuyangarara kwenzvimbo, yakaitwa IPMI rutsigiro rwePowerNV masisitimu.
  • Kumapuratifomu eArM64, rutsigiro rweCortex-A78AE, Cortex-X1 uye Neoverse V1 CPUs rakapihwa, ARM64-optimized copyin, copyout uye kcopy call sarudzo dzakaitwa, mutyairi wecryptox akawedzerwa kutsigira ARMv8 crypto extensions, pamwe chete. iyo smmu mutyairi weRM System MMU ine Guard Peji rutsigiro. Yakavandudzwa rutsigiro rweRaspberry Pi, Rock Pi N10, NanoPi uye Pinebook Pro zvishandiso.
  • Iyo sysctl parameter kern.video.record yakawedzerwa kumutyairi wevhidhiyo, iyo, nekuenzanisa ne kern.audio.record, inodzora kana ichiburitsa mufananidzo usina chinhu paunenge uchiedza kutora vhidhiyo (kugonesa kubatwa, iwe unofanirwa kushandura kukosha. kuti 1). Matanho anotenderwa kuvhura mudziyo wevhidhiyo kakawanda (anogadzirisa matambudziko nekushandisa webcam muFirefox uye BigBlueButton).
  • Yakawedzera mapoinzi ekutsvagira malloc uye emahara mafoni, achibvumira dt uye btrace kuteedzera ndangariro yekugovera-inoenderana chiitiko. Yakawedzera '-n' sarudzo ye btrace kurongedza chirongwa pasina kuita chero chiito.
  • Yakavandudzwa rutsigiro rwemultiprocessor (SMP) masisitimu. Kuitwa kweUNIX sockets kwakabviswa kubva kune general kernel kuvharira, yakajairika mutex yakawedzerwa kuti serializing mashandiro nemsgbuf, iyo uvm_pagealloc kufona kwakaendeswa kune mp-yakachengeteka chikamu, uye iyo getppid uye sendsyslog mafoni akasunungurwa kubva pakuvhara.
  • Yakagadziriswa matambudziko muDRM (Direct Rendering Manager) zvikamu, zvinosanganisira kukanganisa kwakagadziriswa mutyairi weradeondrm paPowerbook5/6 uye RV350 masisitimu, yakagadziridzwa rutsigiro rweDRI3 muamdgpu uye ati madhiraivha, uye nekuenderana neLinux, zvishandiso zvakagadzirwa mu/dev. /dri/dhairekitori.
  • Kuvandudzwa kwakaitwa kuVMM hypervisor. Iyo yekumashure yekutarisira vmd chaiyo michina ikozvino inotsigira kurodha akamanikidzwa RAM disks.
  • Kuvandudzwa kwakaitwa kusound subsystem. Inopa kugona kugovera zvakasiyana sndio odhiyo zvishandiso zvekutamba chete uye kurekodha chete. sndiod inoshandisa yechisere-yekurongeka finite impulse mhinduro (FIR) yakaderera-pass sefa kubvisa ruzha nekuda kweaasing panguva yekuenzanisazve. Nekutadza, basa rekudzikisa otomatiki vhoriyamu kana chirongwa chitsva chinotanga kutamba (autovolume) chakavharwa, kukosha kweiyo default kunoiswa kuhuwandu hwehuwandu hwe127. kubvumidzwa.
  • Kuvaka uye kuisa iyo LLDB debugger inogoneswa nekusarudzika.
  • Tsigiro yemubati welogger yakawedzerwa kurcctl, rc.subr uye rc.d, izvo zvinoita kuti zvikwanise kuronga kubuda kwematanda kubva kumashure maitiro ekutumira data kune stdout/stderr.
  • Kune touchpads, zvinokwanisika kugadzirisa bhatani dhizaini kuburikidza ne wsconsctl. wscons yakavandudza kubata kwekubata panguva imwe chete.
  • Pamidziyo yeARM64, zvinokwanisika kushandisa APM kuwana data pamusoro pemashandisirwo esimba uye bhatiri kuchaja. Iyo yekuvheneka kufona inoshandiswa kurambidza iyo apmd process yekuwana kune iyo faira system.
  • Yakawedzera tsigiro yehardware. Yakawedzera vatyairi vatsva acpige (yekubata zviitiko zve ACPI sekudzvanya bhatani remagetsi), pchgpio (yeGPIO controllers inowanikwa paIntel PCHs yemazuva ano), ujoy (yevatongi vemitambo), uhidpp (yeLogitech HID ++ zvishandiso). Yakawedzera tsigiro ye AMD Vi uye Intel VTD IOMMU yekuwedzera yekuparadzanisa PCI zvishandiso uye kuvharira isiriyo yekurangarira kuwana. Yakawedzerwa rutsigiro rweLynloong LM9002/9003 uye LM9013 makomputa. Tsigiro yeACPI yakawedzerwa kune pcamux uye imxiic driver.
  • Rutsigiro rwakavandudzwa rwemaadapter etiweki: mvpp (SFP+ uye 10G yeMarvel Armada Ethernet), mvneta (1000base-x uye 2500base-x), mvsw (Marvel SOHO switches), rge (Wake on LAN support), Netgear ProSecure UTM25. RA (802.11n Tx Rate Adaptation) rutsigiro rwakawedzerwa kune iwm, iwn uye athn madhiraivha asina waya. Wireless stack inoratidzira otomatiki kusarudzwa kwe11a/b/g/n/ac modes paunenge uchishandisa network network muchimiro chenzvimbo yekuwana.
  • Iyo network stack inoshandisa webhu (Virtual Ethernet Bridge) mutyairi. Tsigiro yekutarisa modhi yakaitwa, umo mapaketi anosvika panetiweki interface haana kuendeswa kune network stack kuti igadziriswe, asi nzira dzekuongorora traffic, dzakadai seBPF, dzinogona kuiswa kwavari. Yakawedzera rudzi rutsva rwe network interfaces - etherbridge. Zvinogoneka (route sourceaddr command) kutsanangura patsva IP kero yezvirongwa, nekupfuura yakajairwa kero yekusarudza algorithm. Inogonesa kusimudza otomatiki yetiweki interfaces kana autoconfiguration modhi yakagoneswa (AUTOCONF4 uye AUTOCONF6).
  • Iyo yekuisa inopa kuendesa kweyakamanikidzwa gondohwe dhisiki mufananidzo (bsd.rd) pamapuratifomu ese anotsigira kurodha kwakadaro.
  • Yakaitwa yakabuda kuburikidza nesyslog yeyambiro nezve kushandiswa kwe "% n" tambo yefomati inotsiva muprintf.
  • Iyo OpenBGPD yekufambisa daemon yakawedzera rutsigiro rweResource Public Key Infrastructure (RPKI) kuRouter Protocol (RTR). Kuratidza ruzivo rwekutanga nezve RTR zvikamu, iyo "bgpctl show rtr" murairo wawedzerwa.
  • Iyo ospfd uye ospf6d kodhi yakagadziridzwa kuti ibatanidze nemamwe madhimoni enzira uye kurerutsa kugadzirisa. Tsigiro yetiweki interfaces mune point-to-point mode yakagadzwa.
  • Iyo yakavakirwa-mukati HTTP sevha httpd inoshandisa nyowani "nzvimbo (yakawanikwa|isina kuwanikwa)" sarudzo dzekutarisa kuvepo kwezviwanikwa.
  • Tsigiro yeRRDP protocol (Iyo RPKI Repository Delta Protocol, RFC 8182) yakawedzerwa kune rpki-mutengi utility. Yakaita kugona kududzira inodarika imwe URI muTAL faira.
  • Iyo dig utility inotsigira RFC 8914 (Yakawedzerwa DNS Kanganiso) uye RFC 8976 (ZONEMD).
  • Yakawedzera kugona kudoma sarudzo mune hostname.if mafaera kudhclient uchishandisa "dhcp" mitsetse.
  • Iyo snmpd daemon inopa rutsigiro rwakazara rweTrapv1 kuTrapv2 shanduko (RFC 3584). Mazwi matsva ekuverenga, nyora uye zivisa awedzerwa kune snmpd.conf. Iyo snmp yekushandisa inotsigira SMI enumerations.
  • Iyo unwind DNS solver ikozvino inotsigira DNS64 uye kugamuchira zvinongedzo kuburikidza neTCP port.
  • Iyo ftp yekushandisa yakawedzera tsigiro yekuramba ichidzokorodza (RFC 7538) uye kugona kutumira iyo Kana-Yakagadziridzwa-Kubvira musoro paunenge uchitumira zvikumbiro pamusoro peHTTP/HTTPS.
  • Yakawedzera "-a" sarudzo kuOpenSMTPD kuita huchokwadi usati watumira meseji. Maturusi ekunyorera akachinjirwa kushandisa libtls raibhurari. Zvigadziko zvekuteerera zveTLS zvinopa kugona kugadzirisa akawanda zvitupa zvichibva pazita rezita (SNI).
  • LibreSSL yakawedzera rutsigiro rweiyo DTLSv1.2 protocol. Yakaita kugona kuvaka chete libtls ('-enable-libtls-chete') pasina libcrypto uye libssl.
  • Yakagadziridzwa OpenSSH package. Tsanangudzo yakadzama yekuvandudzwa inogona kuwanikwa pano: OpenSSH 8.5, OpenSSH 8.6.
  • Nhamba yezviteshi zve AMD64 architecture yaiva 11310, ye aarch64 - 10943, ye i386 - 10468. Pakati pemashandisirwo emashandisirwo mumachiteshi: Xfce 4.16, Asterisk 18.3.0, Chromium 90.0.4430.72, G.4.3.2. 8.4.0, GNOME 3.38, Enda 1.16.2, KDE Applications 20.12.3, Krita 4.4.3, LLVM/Clang 10.0.1, LibreOffice 7.0.5.2, Lua 5.3.6, MariaDB 10.5.9, Firefox 88.0. , Thunderbird 78.10.0 , Node.js 78.10.0, PHP 12.16.1, Postfix 8.0.3, PostgreSQL 3.5.10, Python 13.2, Ruby 3.9.2, Rust 3.0.1.

    Yakagadziridzwa yechitatu-bato zvikamu zvinosanganisirwa neOpenBSD 6.9:

    • Xenocara graphics stack inobva pa X.Org 7.7 ine xserver 1.20.10 + zvigamba, freetype 2.10.4, fontconfig 2.12.4, Mesa 20.0.8, xterm 367, xkeyboard-config 2.20, fonttosfnt 1.2.1.
    • LLVM/Clang 10.0.1 (+ zvigamba)
    • GCC 4.2.1 (+ zvigamba) uye 3.3.6 (+ zvigamba)
    • Perl 5.32.1 (+ zvigamba)
    • NSD 4.3.6
    • Unbound 1.13.1
    • Vanamukoti 5.7
    • Binutils 2.17 (+ zvigamba)
    • Gdb 6.3 (+ chigamba)
    • Kukadzi 18.12.2020/XNUMX/XNUMX
    • Expat 2.2.10

Rwiyo rutsva "Vetera Novis" rwakarongerwa kuti ruenderane nekuburitswa kweOpenBSD 6.9.

Source: opennet.ru

Voeg