ProHoster > Блог > wararka internetka > Siideynta OpenBSD 7.7

Siideynta OpenBSD 7.7

Siidaynta nidaamka hawlgalka ee UNIX u eg ee bilaashka ah ee OpenBSD 7.7 ayaa la soo bandhigay. Mashruuca OpenBSD waxaa aasaasay Theo de Raadt 1995 ka dib markii ay isku dhaceen horumarinta NetBSD, taas oo keentay in Theo loo diido inuu galo kaydka NetBSD CVS. Taas ka dib, Theo de Raadt iyo koox isku mid ah ayaa abuuray nidaam cusub oo furan oo ku salaysan geedka isha NetBSD, ujeedooyinka horumarinta ee ugu muhiimsan kuwaas oo ahaa la qaadi karo (13 qalab oo qalab ah ayaa la taageerayaa), jaangooynta, hawlgalka saxda ah, amniga firfircoon. iyo qalab isku dhafan oo qarsoodi ah. Sawirka buuxa ee rakibaadda ISO ee nidaamka saldhigga OpenBSD 7.7 waa 746 MB.

Marka lagu daro nidaamka qalliinka laftiisa, mashruuca OpenBSD wuxuu caan ku yahay qaybihiisa, kuwaas oo ku faafay nidaamyada kale waxayna isku caddeeyeen inay yihiin mid ka mid ah xalalka ugu amniga iyo tayada sarreeya. Waxaa ka mid ah: LibreSSL (fargeeto OpenSSL), OpenSSH, filtarrada xirmada PF, OpenBGPD iyo OpenOSPFD daemons routing, OpenNTPD NTP server, OpenSMTPD mail server, text terminal multiplexer (oo la mid ah shaashadda GNU) tmux, daemon la aqoonsan yahay oo leh hirgelinta borotokoolka aqoonsiga, beddelka BSDL GNU groff pack - mandoc, borotokoolka habaynta nidaamyada u-dulqaadashada khaladaadka CARP (Cinwaanka Caadiga ah ee Caymiska), server-ka fudud ee http, utility synchronization file OpenRSYNC.

Isbeddellada ugu waaweyn:

  • Hirgelinta qaab-dhismeedka drm (Maareeyaha Tooska ah) wuxuu la mid yahay kernel Linux 6.12.21 (ee sii dayntii hore - 6.6.52). Darawalka inteldrm wuxuu hirgeliyaa taageerada GPU-da loo isticmaalo soo-saareyaasha Intel ee ku salaysan naqshadda dhismaha ee Arrow Lake. Darawalka amdgpu waa la cusboonaysiiyay si uu u taageero Ryzen AI 300 (Strix Point, Strix Halo, Krackan Point) iyo Radeon RX 9070 (Navi 48) GPUs.
  • Dekadda loogu talagalay qaab-dhismeedka ARM64 waxay fulisaa taageerada SVE (Scalable Vector Extension) ee tilmaamaha habraaca. Nidaamyada leh chips-yada Apple M1 ARM, gobollada isticmaalka awoodda ayaa la dejiyay. Habka khariidaynta bogga xusuusta jireed (pmap), hawlgallada daadinta tarjumaadda lookaside buffer (TLB) waa la hagaajiyay, taas oo soo dedejisay fulinta imtixaanka isku dhafka kernelka qiyaastii 5%. Qalabka taageeraya xafida QARMA3, Koodhka Xaqiijinta Tilmaamaha (PAC) waa la dajiyay si uu u ilaaliyo booska isticmaalaha.
  • Nidaamyada x86_64, taageerada farsamada AMD SEV (Secure Encrypted Virtualization), oo loo isticmaalo nidaamyada dhijitaalka ah ee ilaalinta, ayaa loo hirgeliyay nidaamyada martida ee ku shaqeeya QEMU. mashiinno dalwaddeed Faragelinta hypervisor-ka ama maamulaha nidaamka martida. Amar loogu talagalay in lagu shubo firmware-ka chip-ka ayaa lagu daray darawalka PSP ee loo isticmaalo in lagu habeeyo laguna bilaabo nidaamyada martida iyadoo AMD SEV ay awood u leedahay.
  • Nidaamyada x86_64, awoodda lagu qoondeeyo meelaha xusuusta ka weyn 4 GB ee DMA ayaa lagu daray.
  • Taageerada la wanaajiyey ee RISC-V, Sparc64, HPPA, i386 iyo Powerpc64 naqshadaha.
  • Maaraynta la hagaajiyay ee xaaladaha xusuusta la'aanta ah (OOM).
  • Habka raadinta ptrace waa la wanaajiyey si loogu oggolaado in la dejiyo meelaha goynta ee hababka badan ee gdb debugger. Amarrada lagu daray in lagu akhriyo oo lagu qoro goobta habka kormeerku ku badbaadiyo gobolka processor-ka marka la isticmaalayo tilmaamaha XSAVE.
  • Taageerada dhismeyaasha khadadka badan ayaa lagu daray qoraallada BT (BPFtrace ama Bug Tracing) ee loo isticmaalo nidaamka raadinta btrace. Magacyo dheeraad ah iyo magacaabid u dhexaysa wakhtiga (hz, us, ms, s) ayaa lagu daray utility btrace.
  • Lagu darey sysctl parameter kern.audio.kbdcontrol, marka lagu dhigo 0, furayaasha mugga warbaahinta badan ee kumbuyuutarka waxaa loola dhaqmi doonaa furayaal caadi ah.
  • Hagaajinta maaraynta shilalka iyo hubinta la balaariyay markaad u wareegayso hurdada iyo qaababka heeganka.
  • Dib u habayn lagu sameeyay koodka habsocodyada joojinta marka calaamad la helo, kaas oo xalliyey mashaakilaadka joojinta habab-socodyo badan oo ka soo muuqday xidhmooyinka sida golang iyo mpv.
  • Taageerada la wanaajiyay ee nidaamyada badan ee Processor (SMP). Wax galinta TCP iyo saacada wax soo saarka hadda waa la awooday in ay si is barbar socda u shaqeeyaan, iyo dirida() iyo recv() wicida nidaamka hadda waxaa loo habeeyey in ay isticmaalaan quful la wadaago. Xadhkaha isticmaalaha badan ayaa hadda ku shaqayn kara saldhigyo kala duwan oo isbarbar socda, iyo wax-soo-saarka TCP mar dambe ma xannibayo habaynta baakadda IP-ga.

    The furan, openat, ptsignal, psignal iyo nidaamka prsignal wicis, iyo sidoo kale kern.timeout_stats, kern.allowkmem, kern.video.ricord, net.inet.gre.allow, net.inet.gre.wccp, kern.global_ptrace, kern.wxabort, kern.commallo laga soo daayay caalamka. Dareewalada psp, wsmouse iyo wstpad, iyo sidoo kale qaab dhismeedka video_filtops, ayaa loo wareejiyay qaybta badbaadada mp-mp.

  • VMM hypervisor-ka ayaa hirgeliyay awoodda isticmaalka acpipci si loogu xiro basaska PCI.
  • La siiyay awoodda lagu qeexo siyaasad hawl qabad oo beddelka ah (perfpolicy) si loo dabaqo marka nidaamku ku shaqeeyo awoodda batteriga.
  • Amarka sysctl hadda wuxuu leeyahay ikhtiyaar "-f file" si uu hal mar uga soo dejiyo dhammaan goobaha faylka. Qoraallada rc, ikhtiyaar cusub ayaa loo isticmaalaa in lagu shubo sysctl.conf guud ahaan, halkii lagu kala saari lahaa sadar.
  • Amarka pkg_add wuxuu fuliyaa wicitaanka ldconfig haddii liiska maktabadaha la wadaago ay isbeddeleen natiijada xiritaanka xirmooyin cusub.
  • Taageero lagu daray qalab cusub Taageerada la wanaajiyay ee MediaTek iyo Qualcomm Snapdragon SoCs (ay ku jirto X Elite). Taageerada la wanaajiyay ee Samsung Galaxy Book4 Edge, ThinkPad T14 Gen 5, Vivobook, ThinkPad X1 Nano Gen 2, ThinkPad X13, iyo Chromebooks kala duwan. Darawalka barafka ee Intel E810 Ethernet 1Gb/10Gb/25Gb/50Gb/100Gb iyo darawalka ixv ee Intel Ethernet 82598EB, 82559 iyo X540 functional virtual. Shaqada ku wareejinta hawlaha shabakada ee dhinaca kaadhka shabakada way sii socotay.
  • Sysupgrade waxay leedahay hab loogu cusboonaysiiyo khadka tooska ah ee nidaamyada iyadoo la adeegsanayo baakadaha lagu kaydiyay nidaamka faylka deegaanka.
  • Utility fw_update waa la cusboonaysiiyay si loogu oggolaado soo dejinta (aan la rakibin) firmware sidii isticmaale caadi ah oo aan lahayn xuquuqaha xididka. Lagu daray "-l" calanka si uu u liis gareeyo darawalada iyo faylalka.
  • Habka sshd-auth waxa uu leeyahay ka-faa'iidaysiga dayacanka la kartiyeeyay, iyadoo lagu salaynayo dib-u-habaynta aan tooska ahayn ee faylka la fulin karo ee boot kasta (relink). Koodhka dib-u-soo-celinta wuxuu ka dhigayaa wax-ka-qabashada shaqada mid aan la saadaalin karin, taas oo adkeynaysa in la abuuro faa'iidooyin isticmaala farsamooyinka barnaamijka soo celinta.
  • Habka rakibaadda ayaa go'doonsan iyadoo la adeegsanayo wicitaanka nidaamka daah-furka.
  • Xirmada shabakadu waxay fulisaa taageerada AF_FRAME saldhigyada iyo qoyska borotokoolka IFT_ETHER, taasoo u oggolaanaysa codsiyada inay diraan oo helaan fireemada Ethernet. Hab cusub oo xashiish ah ayaa loo hirgeliyay baakadaha UDP iyo TCP ee baxaya, kaas oo hagaajiyay qaybinta taraafikada safafka oo si weyn (~ 20%) deddejiyay dirista UDP ee IPV4/IPv6 iyo TCP ee IPv6. Qalabka tun wuxuu leeyahay TUNSCAP ioctl oo la hirgeliyay iyo isdhexgalka u dhexeeya kernel iyo booska isticmaalaha waa la hagaajiyay. Waxaa la hirgeliyay khasnad jidayneed u gaar ah socodka kasta. Dareewalka viola waxa uu leeyahay qaab safaf badan leh.
  • Utility pfctl wuxuu u ogolaanayaa isku xirka shabakadaha iyo safafka in lagu habeeyo wax soo saarka ka weyn 4Gbit.
  • Marka la eego, hirgelinta borotokoolka IKEv2 ee IPsec, ikhtiyaarka "natt" ayaa lagu daray si loogu qasbo isticmaalka nat-t.
  • Relayd, oo ah hab-raac asal ah oo loogu talagalay dib-u-hagaajinta iyo isku-dheellitirka codsiyada, hadda waxay taageertaa dhinaca macaamiisha Shahaadooyinka TLS.
  • Qalabka cabbiraadda waxqabadka shabakadda tcpbench ayaa ku daray taageerada TLS.
  • bgpd waxay fulisaa taageerada RFC 8654 (Fariinta Dheeraadka ah ee BGP), RFC 8538 (Fariinta Ogeysiinta BGP), ikhtiyaarka "diiday as-set" waa la furayaa, iyo kaydinta Adj-RIB-Out waa la bixiyay.
  • LibreSSL 4.1.0 wuxuu ku darayaa taageerada tijaabada ah ee loongarch64 architecture, wuxuu bixiyaa fulinta cusub ee SHA-1, SHA-256, iyo SHA-512 algorithms ee amd64 architecture (iyadoo la isticmaalayo SHA-NI tilmaanta), fulinta cusub ee isu-ururinta ee SHA-256 iyo SHA-512 ee Ampar CEMD (simpar CEMD) hirgelinta amd64, waxay bixisaa kaydinta liiska shahaadooyinka la buriyay (CRLs), oo laga soo gudbiyay ML-KEM 5 iyo 64 ee BoringSSL.
  • OpenSSH waa la cusboonaysiiyay Liistada isbeddelada waxaa laga heli karaa ogeysiiska OpenSSH 10 (taageerada saxeexa dhijitaalka ah ee DSA waa laga saaray, hawlgallada xaqiijinta ayaa loo kala saaray hab sshd-auth gaar ah, iyo algoorithm-ka isweydaarsiga furaha isku-dhafka ah "mlkem768x25519-sha256" ayaa loo adeegsaday si caadi ah).
  • Tirada dekedaha ee naqshadaha AMD64 waxay ahaayeen 12593 (waxay ahayd 12312), aarch64 - 12446 (waxay ahayd 12148), i386 - 10429 (waxay ahayd 10534). Waxaa ka mid ah noocyada codsiyada ee dekedaha:
    • Xiddigga 16.30.1, 18.26.1, 20.13.0 iyo 22.3.0
    • Audacity 3.7.3
    • Samee 3.31.6
    • Chromium 135.0.7049.52
    • Emacs 30.1
    • FFmpeg 6.1.2
    • GCC 8.4.0 iyo 11.2.0
    • GNOME 47
    • Tag 1.24.1
    • JDK 8u442, 11.0.26, 17.0.14 iyo 21.0.6
    • KDE Gears 24.12.3
    • Qaab-dhismeedka KDE 6.12.0
    • KDE Plasma 6.3.3
    • Krita 5.2.9
    • LLVM/ Clang 13.0.0, 16.0.6, 18.1.8, 19.1.7
    • LibreOffice 25.2.1.2
    • Lua 5.1.5, 5.2.4, 5.3.6, 5.4.7
    • MariaDB 11.4.5
    • Daanyeer 6.12.0.199
    • Mozilla Firefox 137.0 iyo ESR 128.9.0
    • Mozilla Thunderbird 128.9.0
    • Mutt 2.2.14 iyo NeoMutt 20250113
    • Node. 22.14.0
    • FurLDAP 2.6.9
    • PHP 8.2.28, 8.3.19 iyo 8.4.5
    • Dib u hagaajinta 3.10.1
    • PostgreSQL 17.4
    • Python 2.7.18 iyo 3.12.9
    • Qt 5.15.16 (+ balastar laga soo qaatay mashruuca KDE) iyo 6.8.2
    • Ruby 3.2.8, 3.3.7, 3.4.2
    • Miridhku 1.86.0
    • SQLite 3.49.1
    • Shotcut 25.01.25
    • Sudo 1.9.16p1
    • Meerkat 7.0.7
    • Tcl/Tk 8.5.19 iyo 8.6.16
    • Vim 9.1.1265 iyo Neovim 0.10.4
    • Xfce 4.20.0
  • Qaybaha saddexaad ee la cusboonaysiiyay oo ay ku jiraan OpenBSD 7.7:
    • Xirmooyinka sawirada Xenocara oo ku salaysan X.Org 7.7 oo leh xserver 21.1.16 + patches, freetype 2.13.3, fontconfig 2.15.0, Mesa 23.3.6, xterm 395, xkeyboard-config 2.20, fonttosfnt 1.2.4.
    • LLVM/ Clang 16.0.6 (+ balastar)
    • GCC 4.2.1 (+ balastar) iyo 3.3.6 (+ balastar)
    • Perl 5.40.1 (+ balastar)
    • NSD 4.9.1
    • Furan 1.22.0
    • Nacalada 6.4
    • Binutils 2.17 (+ balastar)
    • Gdb 6.3 (+ balastar)
    • Awk 20250116/XNUMX/XNUMX
    • Baahinta 2.7.1
    • zlib 1.3.1 (+ balastar)

Source: opennet.ru

Add a comment