Laba sano oo horumar ah ka dib sii daayo (), diyaar u ah toban si rasmi ah loo taageeray : Intel IA-32/x86 (i686), AMD64 / x86-64, ARM EABI (armel), 64-bit ARM (arm64), ARMv7 (armhf), MIPS (mips, mipsel, mips64el), PowerPC 64 (ppc64el) iyo IBM System z (s390x). Cusbooneysiinta Debian 10 ayaa la sii deyn doonaa muddo 5 sano ah.
Kaydka wuxuu ka kooban yahay 57703 xirmo binary, taas oo qiyaastii 6 kun ka badan waxa lagu bixiyay Debian 9. Marka la barbardhigo Debian 9, 13370 xirmo binary cusub ayaa lagu daray, 7278 (13%) baakadaha duugoobay ama la dayacay ayaa laga saaray, 35532 (62) %) xirmooyinka waa la cusboonaysiiyay 91.5% xirmooyinka Taageerada dhismooyinka la soo celin karo, taas oo kuu ogolaaneysa inaad xaqiijiso in faylka la fulin karo uu si sax ah ka dhisay koodhadhka isha ee lagu dhawaaqay oo aan ku jirin isbeddello aan caadi ahayn, taas oo beddelkeeda, tusaale ahaan, lagu samayn karo iyada oo la weerarayo kaabayaasha golaha ama calaamadaynta kaydiyaha .
Si aad u Sawirada DVD ee laga soo dejisan karo , ama . Sidoo kale Sawir rakiban oo aan rasmi ahayn oo ay ku jiraan firmware-ka la iska leeyahay. Naqshadeynta naqshadaha amd64 iyo i386 , oo laga heli karo GNOME, KDE iyo dhadhanka Xfce, iyo sidoo kale DVD-ga badan oo isku dhafan baakadaha amd64 oo leh baakado dheeraad ah oo loogu talagalay naqshadaha i386. Taageerada lagu daray sawirada laga soo dejiyey shabakada (netboot) ee kaararka SD iyo sawirada ku habboon 16 GB USB Flash;
gudaha Debian 10.0:
- Taageerada UEFI Secure Boot, oo adeegsata Shim bootloader, oo lagu shahaadeeyay saxeex dhijitaal ah oo ka yimid Microsoft (shim-saxiix), oo ay weheliso shahaado-sharafeedka kernel-ka iyo boot loader (grub-efi-amd64- saxeexay) ee mashruuca laftiisa shahaadada (shim wuxuu u shaqeeyaa sida lakabka qaybinta si ay u isticmaasho furaheeda). Xirmooyinka shim-saxiixay iyo grub-efi-ARCH-saxiixay ayaa lagu daray dhisidda ku-tiirsanaanta amd64, i386 iyo arm64. Bootloader iyo grub, oo ay shahaado ka heshay shahaado shaqo, ayaa lagu daray sawirada EFI ee amd64, i386 iyo arm64. Aan dib u xasuusanno in taageerada Boot Secure markii hore laga filayey Debian 9, laakiin lama dejin ka hor inta aan la sii dayn oo dib loo dhigay ilaa sii daynta weyn ee soo socota ee qaybinta;
- Ku shaqaynta sida caadiga ah waa taageerada nidaamka xakamaynta gelitaanka qasabka ah ee AppArmor, kaas oo kuu ogolaanaya inaad xakamayso awoodaha hababka adoo qeexaya liisaska faylasha leh xuquuqaha ku habboon (akhri, qor, khariidad xusuusta iyo socodsiinta, dejinta faylka qufulka, iwm.) mid kasta Codsiga, iyo sidoo kale xakamaynta gelitaanka shabakadda (tusaale, mamnuuc isticmaalka ICMP) oo maamul awoodaha POSIX. Farqiga ugu weyn ee u dhexeeya AppArmor iyo SELinux waa in SELinux ay ku shaqeyso calaamado la xiriira shay, halka AppArmor ay go'aamiso ogolaanshaha ku saleysan dariiqa faylka, taas oo si weyn u fududeyneysa habka qaabeynta. Xirmada ugu weyn ee AppArmor waxay bixisaa profiles ilaalinta codsiyada qaarkood oo keliya, inta soo hartayna waa inaad isticmaashaa xirmada-profiles-ka-dheeraadka ah ama profiles xirmo codsi oo gaar ah;
- Iptables la beddelay, ip6tables, arptables iyo ebtables nftables baakidhka filter, kaas oo hadda ah mid aan caadi ahayn oo caan ku ah midaynta xirmooyinka shaandhaynta baakidhka ee IPV4, IPv6, ARP iyo buundooyinka shabakadda. Nftables waxay bixisaa kaliya isdhexgal guud, borotokool ku madax-bannaan oo heer kernel ah kaas oo bixiya hawlaha aasaasiga ah ee soo saarista xogta xirmooyinka, fulinta hawlaha xogta, iyo xakamaynta socodka. Caqliga shaandhaynta laftiisa iyo maamulayaasha qaaska ah ee borotokoolka ayaa lagu soo ururiyay bytecode ee booska isticmaalaha, ka dib bytecode-kan waxaa lagu shubaa kernel-ka iyadoo la adeegsanayo Netlink interface waxaana lagu fuliyay mishiin khaas ah oo xusuusta BPF (Berkeley Packet Filters);
Sida caadiga ah, xirmada iptables-nft ayaa lagu rakibay, kaas oo bixiya qalabyo kala duwan si loo hubiyo in ay la jaanqaadaan iptables, iyagoo leh isla xariijin talis ah, laakiin u tarjumaadda xeerarka ka soo baxa nf_tables bytecode, oo lagu fuliyay mashiinka farsamada. Xirmada iptables-legacy ayaa ikhtiyaar ahaan diyaar u ah rakibidda, fulintii hore ee ku salaysan x_miisaska. iptables executables ayaa hadda lagu rakibay /usr/sbin halkii ay ka ahaan lahaayeen /sbin (calaamadaha waxaa loo sameeyay is waafajin);
- Wixii APT ah, habka go'doominta sanduuqa-cammuudda ayaa la hirgeliyay, oo karti loo siiyay iyada oo loo marayo APT:: Sandbox :: Seccomp doorashada iyo bixinta shaandhaynta wicitaannada nidaamka iyadoo la adeegsanayo seccomp-BPF. Si aad u hagaajiso liisaska cad iyo madow ee wicitaanada nidaamka, waxaad isticmaali kartaa liisaska APT :: Sandbox :: Seccomp :: Dabinka iyo APT
- Kernel Linux oo la cusboonaysiiyay nooca 4.19;
- Miisaanka GNOME waxaa loo beddelay Wayland si caadi ah, iyo kalfadhi ku saleysan server-ka X ayaa loo bixiyaa ikhtiyaar ahaan (Sererer X ayaa wali ku jira qayb ka mid ah xirmada saldhigga). Garaafyada la cusboonaysiiyay iyo deegaanka isticmaalaha: , , Qorfe 3.8, LXDE 0.99.2, , iyo Xfce 4.12. Suite Office LibreOffice waa la cusboonaysiiyay si loo sii daayo , iyo Calligra ka hor inta aan la sii deyn . Horumarka la cusboonaysiiyay 3.30, GIMP 2.10.8, Inkscape 0.92.4, Vim 8.1;
- Qaybinta waxaa ku jira isku-duwaha luqadda Rust (Rustc 1.34 waa la keenay). La cusboonaysiiyay GCC 8.3, LLVM/Clang 7.0.1, OpenJDK 11, Perl 5.28, PHP 7.3, Python 3.7.2;
- Codsiyada adeegga waa la cusboonaysiiyay, oo ay ku jiraan Apache httpd 2.4.38, BIND 9.11, Dovecot 2.3.4, Exim 4.92, Postfix 3.3.2, MariaDB 10.3, nginx 1.14, PostgreSQL 11, Samba 4.9 (SMBv3)
- In cryptsetup u gudubka qaabka sirta diskka LUKS2 (horey LUKS1 ayaa la isticmaalay). LUKS2 waxaa lagu kala saaraa nidaamka maaraynta muhiimka ah ee la fududeeyay, awoodda isticmaalka qaybo waaweyn (4096 halkii 512, waxay yaraynaysaa culeyska inta lagu jiro fur-furka), calaamadeeyayaasha qaybinta calaamadda (calaamadaha) iyo qalabka kaydinta metadata oo awood u leh inay si toos ah uga soo celiyaan nuqul haddii dhaawac ayaa la ogaadaa. Habka casriyaynta ayaa si toos ah u beddeli doona qaybaha LUKS1 ee jira qaab ku habboon LUKS2, laakiin xaddidnaanta cabbirka madaxa awgeed, dhammaan sifooyinka cusubi ma heli doonaan;
- Rakibiyaha ayaa ku daray awoodda isticmaalka konsoleyaal badan isku mar inta lagu jiro habka rakibidda. Taageerada ReiserFS waa la saaray Taageero lagu daray isku-buufinta ZSTD (libzstd) ee Btrfs. Taageerada lagu daray qalabka NVMe;
- Debootstrap-ka, ikhtiyaarka "-merged-usr" waxaa loo suurtageliyaa si caadi ah, kaas oo dhammaan faylasha la fulin karo iyo maktabadaha laga bilaabo tusaha xididka loo wareejiyo qaybta / usr (tusaha / bin, / sbin iyo / lib * waxaa loo qaabeeyey sida isku xirka astaanta u ah hagaha u dhigma ee gudaha/usr) . Isbeddelku wuxuu khuseeyaa oo keliya rakibaadda cusub; qaabaynta hagaha hore waa la hayaa inta lagu jiro habka cusboonaysiinta;
- Xirmada cusboonaysiinta ee aan la ilaalin, marka lagu daro si toos ah u rakibida cusboonaysiinta la xidhiidha ciribtirka dayacanka, u cusboonaysiinta sii daynta dhexdhexaadka ah (Debian 10.1, 10.2, iwm.) ayaa hadda sidoo kale karti u leh;
- Qaybaha nidaamka daabacaadda waa la cusboonaysiiyay iyo koobabka shaandhada 1.21.6 oo si buuxda u taageersan AirPrint, DNS-SD (Bonjour) iyo IPP Meel kasta oo loogu talagalay daabacaadda iyada oo aan marka hore la rakibin darawallada;
- Taageerada lagu daray ee looxyada ku salaysan Allwinner A64 Processors, sida FriendlyARM NanoPi A64, Olimex A64-OLinuXino, TERES-A64, PINE64 PINE A64/A64/A64-LTS, SOPINE, Pinebook, SINOVOIP Banana Pi BPI-M64 iyo Xunlong Orange Win Pine ( Plus);
- Tirada med-* baakadaha ay taageerto kooxda Debian Med waa la balaariyay, taasoo kuu ogolaanaysa inaad rakibto la xidhiidha bayoloji iyo daawada;
- Taageerada nidaamyada martida Xen ee qaabka PVH ayaa la bixiyaa;
- OpenSSL ma taageerto borotokoolka TLS 1.0 iyo 1.1; TLS 1.2 waxaa lagu caddeeyey nooca ugu yar ee la taageero;
- Baakado badan oo duugoobay oo aan la dayactirin ayaa meesha laga saaray, oo ay ku jiraan Qt 4 (kaliya Qt 5 ayaa hadhay), phpmyadmin, ipsec-tools, racoon, ssmtp, ecryptfs-utils, mcelog, muujinta. Debian 11 waxay joojin doontaa taageerada Python 2;
- Dekad ayaa loo sameeyay qaab-dhismeedka 64-bit RISC-V, kaas oo aan si rasmi ah loo taageerin Debian 10. Hadda, loogu talagalay RISC-V qiyaastii 90% tirada guud ee xirmooyinka;
- Rakibaye qaabaysan oo madax banaan ayaa la bilaabay in lagu isticmaalo goobaha nool oo leh interface Qt ku salaysan, kaas oo sidoo kale loo isticmaalo in lagu abaabulo rakibidda Manjaro, Sabayon, Chakra, NetRunner, KaOS, OpenMandriva iyo KDE neon qaybinta. Rakibaadaha joogtada ah waxay sii wadaan adeegsiga debian-installer.
Marka laga soo tago kuwii hore loo heli jiray, waxaa la abuuray jawi Live ah oo leh desktop-ka LXQt iyo deegaan Live ah oo aan lahayn interface garaaf ah, oo kaliya oo leh qalabka konsole ee ka kooban nidaamka aasaasiga ah. Deegaanka Console Live waxaa loo isticmaali karaa in lagu rakibo qaybinta si deg deg ah, maadaama, si ka duwan sawirada rakibaadda dhaqameed, jeex diyaarsan oo hagayaal ah ayaa la koobiyayaa, iyada oo aan la furin baakado gaar ah iyadoo la adeegsanayo dpkg.
Source: opennet.ru