ProHoster > Blog > internet nhau > OpenBSD 7.1 kuburitswa

OpenBSD 7.1 kuburitswa

Kuburitswa kweyemahara muchinjiko-chikuva UNIX-senge yekushandisa system OpenBSD 7.1 inoratidzwa. Iyo OpenBSD purojekiti yakavambwa naTheo de Raadt muna 1995 mushure mekunetsana nevagadziri veNetBSD, izvo zvakaita kuti Theo arambidzwe kuwana iyo NetBSD CVS repository. Mushure meizvi, Theo de Raadt neboka revanhu vane pfungwa dzakafanana vakagadzira itsva yakavhurika sisitimu yakavakirwa paNetBSD sosi yemuti, iyo huru yekusimudzira zvinangwa yaive yekutakurika (13 Hardware mapuratifomu anotsigirwa), kumira, kushanda kwakaringana, kuchengetedzwa kwakasimba. uye yakabatanidzwa cryptographic zvishandiso. Iyo yakazara yekuisa ISO mufananidzo weOpenBSD 7.1 base system ndeye 580 MB.

Pamusoro peiyo inoshanda sisitimu pachayo, iyo OpenBSD purojekiti inozivikanwa nezvikamu zvayo, izvo zvave kupararira mune mamwe masisitimu uye zvakaratidza ivo kuti ndeimwe yeakachengeteka uye yepamusoro-soro mhinduro. Pakati pazvo: LibreSSL (forogo yeOpenSSL), OpenSSH, PF packet filter, OpenBGPD uye OpenOSPFD madhimoni ekufambisa, OpenNTPD NTP server, OpenSMTPD mail server, text terminal multiplexer (analogous kuGNU screen) tmux, daemon yakazivikanwa ine IDENT protocol kushandiswa, BSDL imwe nzira. GNU groff package - mandoc, protocol yekuronga kukanganisa-kushivirira masisitimu CARP (Common Kero Redundancy Protocol), yakareruka http server, OpenRSYNC faira yekubatanidza utility.

Mabhindauko makuru:

  • Tsigiro yemakomputa eMac ane Apple M1 (Apple Silicon) ARM chip, senge Apple M1 Pro/Max uye Apple T2 Macs, yakaziviswa seyakagadzirira-kushandisa. Akawedzera madhiraivha eSPI, I2C, DMA controller, keyboard, touchpad, simba uye performance management. Inopa rutsigiro rweWi-Fi, GPIO, framebuffer, USB, skrini, NVMe madhiraivha.
  • Yakavandudzwa rutsigiro rweArM64 architecture. Akawedzera madhiraivha gpiocharger, gpioleds uye gpiokeys, achipa tsigiro yekuchaja, marambi uye mabhatani akabatana neGPIO (semuenzaniso, izvi zvinoitwa muPinebook Pro). Akawedzera vatyairi vatsva: mpfclock (PolarFire SoC MSS wachi controller), cdsdhc (Cadence SD/SDIO/eMMC host controller), mpfiic (PolarFire SoC MSS I2C controller) uye mpfgpio (PolarFire SoC MSS GPIO).
  • Kuvandudzwa kwerutsigiro rweRISC-V 64 architecture, iyo uhid uye fido drivers inosanganisirwa, uye rutsigiro rwekuisirwa paGPT disks.
  • Iyo mount_msdos utility inogonesa kushandiswa kwemazita emafaira marefu nekusarudzika.
  • Iyo kodhi yekunhonga marara yeunix socket yakagadziridzwa zvakare.
  • sysctl hw.perfpolicy inoiswa ku β€œotomatiki” nekukasira, zvichireva kuti maitiro akazara anogoneswa kana simba rakamira rabatanidzwa uye adaptive algorithm yoshandiswa kana ichifambiswa nebhatiri.
  • Yakavandudzwa rutsigiro rwemultiprocessor (SMP) masisitimu. Chiitiko mafirita ematanho asina kudomwa mazita, kqread, odhiyo uye zvigadziko, pamwe neiyo BPF mashandiro, akaendeswa kune mp-yakachengeteka chikamu. Sarudzo, sarudza, ppoll uye pselect system mafoni akanyorwa patsva uye ave kuitwa pamusoro pekqueue. Iyo kevent, getsockname, getpeername, bvuma uye gamuchira 4 system mafoni abviswa kubva pakuvhara. Yakawedzera kernel interface yemutoro uye chengetedza maatomu mabasa, ichibvumira kushandiswa kwe int uye kureba mhando muzvinhu zvezvimiro zvinoiswa kuverenga kuverenga.
  • Kuitwa kweiyo drm (Direct Rendering Manager) framework inowiriraniswa neLinux kernel 5.15.26 (kuburitswa kwekupedzisira - 5.10.65). Mutyairi we inteldrm akawedzera tsigiro yeIntel chips yakavakirwa paElkhart Lake, Jasper Lake uye Rocket Lake microarchitectures. Mutyairi weamdgpu anotsigira APU/GPU Van Gogh, Rembrandt "Yellow Carp" Ryzen 6000, Navi 22 "Navy Flounder", Navi 23 "Dimgrey Cavefish" uye Navi 24 "Beige Goby".
  • Subpixel font rendering inogoneswa muraibhurari yeFreeType.
  • Yakawedzera realpath utility kuratidza iyo yakakwana nzira kune faira.
  • Yakawedzera "ls rogue" murairo kune rcctl utility kuratidza kumashure maitiro ari kushanda asi asina kubatanidzwa mu rc.conf.local.
  • BPFtrace ikozvino inotsigira akasiyana ekutarisa. Manyoro kprofile.bt ekunyora kernel stack uye runqlat.bt yekuona kunonoka muchirongwa akawedzerwa kubtrace.
  • Yakawedzerwa rutsigiro rweRFC6840 kune libc, iyo inotsanangura tsigiro yemureza weAD uye iyo 'trust-ad' yekumisikidza yeDNSSEC.
  • Apm uye apmd inosanganisira kuratidza yakafanotaurwa bhatiri recharge nguva.
  • Iko kugona kuchengetedza dhatabhesi yekugona mukati /etc/login.conf.d kwakapihwa kuti kurerutse kuwedzera yako account makirasi kubva mumapakeji.
  • Malloc inopa caching kumatunhu ekurangarira kubva muhukuru kubva 128k kusvika 2M.
  • Iyo pax archiver inotsigira yakawedzera misoro ine mtime, atime uye ctime data.
  • Yakawedzera "-k" sarudzo kune gzip uye gunzip zvinoshandiswa kuchengetedza iyo faira faira.
  • Izvi zvinotevera zvakawedzerwa kune openrsync utility: "-compare-dest" kutarisa kuvepo kwemafaira mune mamwe madhairekitori; "-max-size" uye "-min-size" kudzikamisa saizi yefaira.
  • Yakawedzera seq command kudhinda kutevedzana kwenhamba.
  • Iyo yepasirese software yekumisikidzwa kwe trigonometric mabasa akatamiswa kubva kuFreeBSD 13 (assembler maitirwo e x86 akaremara).
  • Kuitwa kweiyo lrint, lrintf, llrint uye llrintf mabasa akatamiswa kubva kuFreeBSD (yaimbova kushandiswa kubva kuNetBSD kwaishandiswa).
  • Iyo fdisk utility ine akawanda shanduko uye zvigadziriso zvine chekuita nekushanda ne disk partitions.
  • Yakawedzerwa tsigiro yemidziyo mitsva, kusanganisira Intel PCH GPIO controller (yeCannon Lake H uye Tiger Lake H mapuratifomu), NXP PCF85063A/TP RTC, Synopsys Designware UART, Intel 2.5Gb Ethernet, SIMCom SIM7600, RTL8156B, MediaTek MT7601CM4387 USB wifi
  • Iyo pasuru inosanganisira yakadzoreredzwa firmware yeRealtek isina waya machipi, ichikubvumidza iwe kushandisa rsu, rtwn uye urtwn madhiraivha pasina kurodha pasi firmware.
  • Iwo ixl (Intel Ethernet 700), ix (Intel 82598/82599/X540/X550) uye aq (Aquantia AQC1xx) madhiraivha anosanganisira tsigiro yehardware processing yeVLAN tags uye checksum calculation/verification yeIPv4, TCP4/6 uye UDP4/6.
  • Yakawedzera ruzha mutyairi weIntel Jasper Lake chips. Yakawedzera rutsigiro rweXBox One mutambo controller.
  • Iyo IEEE 802.11 isina waya stack inopa tsigiro ye40MHz chiteshi che802.11n modhi uye yekutanga rutsigiro rwe802.11ac (VHT) chiyero. Chibatiso chekutarisa kumashure chawedzerwa kune vatyairi. Pakusarudza nzvimbo yekupinda, mapoinzi ane 5GHz chiteshi ave kupihwa pekutanga, uye ipapo chete mapoinzi ane 2GHz chiteshi anosarudzwa.
  • Kuitwa kwemutyairi wevxlan kwakanyorwa patsva, iyo ikozvino inoshanda yakazvimiririra yebhiriji subsystem.
  • Iyo yekumisikidza yakagadzirisa zvakare logic yekufonera pkg_add utility kuderedza kusimba kwekufambisa kwemafaira panguva yekuvandudza. Iyo install.site faira inonyora kuisirwa uye kusimudzira kuseta maitiro. Kune ese magadzirirwo, firmware yakawedzerwa, kugoverwa kwayo kunobvumirwa mune yechitatu-bato zvigadzirwa. Kuisa proprietary firmware inowanikwa pane yekuisa midhiya, iyo fw_update utility inoshandiswa.
  • Mu xterm, kutevedza mbeva kunovharwa nekusarudzika nekuda kwezvikonzero zvekuchengetedza.
  • usbhidctl uye usbhidaction inopa faira system yekuwana yekuzviparadzanisa uchishandisa unveil system call.
  • Nekumisikidza, dhcpd inopawo kubatanidza kunetiweki maratidziro ari munzvimbo isingashande ('pasi'), kuitira kuti ive nechokwadi chekuti mapaketi anogamuchirwa nekukurumidza mushure mekuti network yaitwa.
  • OpenSMTPD (smtpd) ine TLS yekutarisa inogoneswa nedefault kune inobuda "smtps://" uye "smtp+tls://" zvinongedzo.
  • httpd yaita protocol vhezheni yekutarisa, yakawedzera kugona kutsanangura mafaera ako ane magwaro ekukanganisa, uye nekuvandudza magadzirirwo edata rakadzvanywa, kusanganisira kuwedzera iyo gzip-static sarudzo ku httpd.conf yekuendesa mafaera akadzvanywa negzip mureza wakaiswa mu content-encoding header.
  • MuIPsec, proto parameter kubva iked.conf inobvumira kutsanangura rondedzero yemaprotocol. Yakawedzera "show certinfo" murairo kune ikectl utility kuratidza maCA akavimbika uye zvitupa. iked yavandudza mabatirwo emameseji akapatsanuka.
  • Yakawedzera tsigiro yekutarisa BGPsec Router makiyi eruzhinji kune rpki-mutengi uye yakagadziridzwa yekutarisa zvitupa zveX509. Yakawedzera cache yemafaira akasimbiswa. Yakavandudzwa kuenderana neRFC 6488.
  • bgpd yakawedzera "port" parameter, inogona kushandiswa muchikamu che "teerera pa" uye "muvakidzani" kuti isungirire kune isiri-standard network port number. Iyo kodhi yakagadziridzwa kuti ishande neRIB (Routing Information Base), inoitwa neziso rekupa rutsigiro rwenzira dzakawanda mune ramangwana.
  • Iyo console hwindo maneja tmux ("terminal multiplexer") yakawedzera hunyanzvi hwekubuda kwemavara. Yakawedzerwa pane-border-format, cursor-ruvara uye cursor-style mirairo.
  • LibreSSL yakatakura kubva kuOpenSSL tsigiro yeRFC 3779 (X.509 edzedzero dzeIP kero nemasisitimu akazvimirira) uye Setifiketi Yekujeka kwechitupa (yakazvimirira yeruzhinji log yezvose zvakapihwa uye zvakakanzurwa zvitupa, izvo zvinoita kuti zvikwanisike kuongorora wakazvimirira shanduko dzese nezviito zve zviremera zvetifiketi, uye inokutendera iwe kuti ungo tevera chero kuedza kwekuvanda kugadzira zvinyorwa zvemanyepo). Kufambirana neOpenSSL 1.1 kwakagadziridzwa zvakanyanya uye cipher mazita eTLSv1.3 akafanana neOpenSSL. Mazhinji mabasa akashandurwa kuti ashandise calloc(). Chikamu chikuru chemafoni matsva akawedzerwa kune libssl uye libcrypto.
  • Yakagadziridzwa OpenSSH package. Kuti uwane ruzivo rwakadzama rwekuvandudzwa, ona wongororo yeOpenSSH 8.9 uye OpenSSH 9.0. Iyo scp utility yakafambiswa nekusarudzika kushandisa SFTP pachinzvimbo chenhaka SCP/RCP protocol.
  • Huwandu hwemadoko eiyo AMD64 architecture yaive 11301 (kubva 11325), yeaarch64 - 11081 (kubva 11034), yei386 - 10136 (kubva 10248). Pakati pevashandisisi vekushandisa mumachira: Asterisk 16.25.1, 18.11.1 Uye 19.3.1 CmmEg 2.4.2 GCC 3.20.3 uye 100.0.4896.75 GONME 27.2 Enda 4.4.1 .8.4.0 JDK 11.2.0u41.5, 1.17.7 uye 8 KDE Applications 322 KDE Frameworks 11.0.14 Krita 17.0.2 LLVM/Clang 21.12.2 LibreOffice 5.91.0 Lua 5.0.2DB, 13.0.0. .7.3.2.2 Mono 5.1.5 Firefox 5.2.4 uye ESR 5.3.6 Thunderbird 10.6.7 Mutt 6.12.0.122 uye NeoMutt 99.0 Node.js 91.8.0 OpenLDAP 91.8.0 PHP 2.2.2. Postg reSQL 20211029 Python 16.14.2, 2.4.59, 7.4.28 uye 8.0.17 Qt 8.1.4 uye 3.5.14 R 14.2 Ruby 2.7.18, 3.8.13 uye 3.9.12 Rust 3.10.4. 5.15.2 uye 6.0.4 .4.1.2 Shotcut 2.7.5 Sudo 3.0.3 Suricata 3.1.1 Tcl/Tk 1.59.0 uye 2.8.17 TeX Live 3.38.2 Vim 21.10.31 uye Neovim 1.9.10 Xfce 6.0.4
  • Yakagadziridzwa yechitatu-bato zvikamu zvinosanganisirwa neOpenBSD 7.1:
    • Xenocara graphics stack inobva pa X.Org 7.7 ine xserver 1.21.1 + zvigamba, freetype 2.11.0, fontconfig 2.12.94, Mesa 21.3.7, xterm 369, xkeyboard-config 2.20, fonttosfnt 1.2.2.
    • LLVM/Clang 13.0.0 (+ zvigamba)
    • GCC 4.2.1 (+ zvigamba) uye 3.3.6 (+ zvigamba)
    • Perl 5.32.1 (+ zvigamba)
    • NSD 4.4.0
    • Unbound 1.15.0
    • Vanamukoti 5.7
    • Binutils 2.17 (+ zvigamba)
    • Gdb 6.3 (+ chigamba)
    • Kukadzi 12.10.2021/XNUMX/XNUMX
    • Expat 2.4.7

Source: opennet.ru

Voeg