Siideynta Ganacsiga Cas ee Hat Linux 9.7 iyo 10.1

Red Hat waxay soo saartay qaybinteeda Red Hat Enterprise. Linux 10.1, iyo sidoo kale cusbooneysiin laantii hore - Red Hat Enterprise Linux 9.7. Sawirrada rakibaadda ee diyaarsan ayaa diyaar u ah isticmaalayaasha diiwaangashan ee Mareegta Macaamiisha Red Hat (sawirrada ISO ee dadweynaha waxaa loo isticmaali karaa in lagu qiimeeyo shaqeynta) CentOS Stream 10, iyo sidoo kale dhismayaal bilaash ah oo horumariye RHEL ah). Siideynta waxaa loogu talagalay qaab-dhismeedka x86_64, s390x (IBM System z), ppc64le (POWER9), Aarch64 (ARM64), iyo RISC-V (horudhac). Iyadoo la raacayo wareegga taageerada 14-ka sano ah ee qaybinta, RHEL 10 waxaa la taageeri doonaa ilaa 2035, oo lagu daray afar sano oo taageero lacag bixin ah oo dheeraad ah. Cusbooneysiinta RHEL 9 waxay sii wadi doontaa inay sii deyso ilaa dhammaadka Maajo 2032, iyo RHEL 8 ilaa 2029.

Xirmooyinka RHEL laguma martigeliyo kayd git dadweyne.centos.org waxaana la siiyaa macaamiisha shirkadda oo keliya iyada oo loo marayo qayb xiran oo ka mid ah mareegaha, taas oo ku xiran heshiiska isticmaalaha (EULA) oo mamnuucaya dib-u-qaybinta xogta laga soo dejiyay bogga macaamiisha, taasoo abuuraysa khataro sharci ah marka la isticmaalayo xirmooyinkan si loo abuuro qaybinta asalka ah. Koodhka isha ee RHEL wuxuu weli ku jiraa kaydka. CentOS Daawashada, laakiin si buuxda looma wada shaqayn RHEL noocyada baakadaha ku jirana had iyo jeer ma la mid noqdaan baakadaha ku jira RHEL. Rocky Linux, Oracle iyo SUSE waxay soo saaraan koodhka isha ee xirmooyinka RHEL ee sii deynta rpm iyagoo qayb ka ah mashruuca OpenELA.

Isbeddelada waaweyn ee RHEL 10.1 (inta badan isbeddelada la xusay ayaa sidoo kale ku jira RHEL 9.7):

  • Algorithms-ka-ka-dambeysta ah ee sir-qaadaha ayaa si toos ah loogu oggolaaday dhammaan nidaamyada nidaamka cryptographic (policies) Maktabada OpenSSL waxa loo cusboonaysiiyay nooca 3.5, iyada oo ku dartay taageerada ML-KEM, ML-DSA, iyo SLH-DSA post-quantum cryptographic algorithms, taageerta borotokoolka QUIC, iyo ku darista kala duwanaanshiyaha ML-KEM kooxda algorithms ee sida caadiga ah loogu isticmaalo TLS. Taageerada OpenPGP v6 ayaa lagu daray xirmada rpm-sequoia.
  • Taageerada lagu daray eDNS (DNS sir ah), taas oo u oggolaanaysa isticmaalka nidaamka DoT (DNS over TLS) si loo sireeyo taraafikada DNS.
  • Taageerada lagu daray saxeexyada dhijitaalka ah ee xirmooyinka lagu hirgeliyay qaabka RPM6. Taageerada tijaabada ah ee si dhijitaal ah loogu saxiixo xirmooyinka RPM iyadoo la adeegsanayo qalabka Sequoia PGP waa la bixiyay.
  • Maareeyaha xirmada RPM waxa uu hirgaliyay kaydinta SHA256 iyo SHA512 jeegaga xidhmo kasta oo lagu rakibay rpm si markaas loo xaqiijiyo in xidhmada la rakibay ay u dhiganto faylka rpm ee la cayimay.
  • systemd wuxuu hirgeliyaa taageero dib-u-bilaabid jilicsan (amarka "systemctl soft-reboot"), kaas oo dib u bilaabaya oo keliya qaybaha booska isticmaalaha iyada oo aan la taabanayn kernel-ka. LinuxHabkan, dib-u-bilaabiddu waxay ka gudubtaa bilowga qalabka, wicitaanka bootloader-ka, bilowga kernel-ka iyo rarista, bilaabista darawalka, rarista firmware-ka, iyo habaynta initrd. Tani waxay si weyn u dedejinaysaa dib-u-bilaabidda waxayna yareysaa waqtiga shaqada ka dib marka la cusbooneysiiyo jawiga iyadoo la adeegsanayo sawirrada nidaamka ee hore loo dhisay. Habka dib-u-bilaabidda jilicsan, dhammaan hababka booska isticmaalaha waa la joojiyaa, sawirka nidaamka faylka xididka waxaa lagu beddelaa nooc cusub, habka bilaabista nidaamkana waxaa la bilaabaa iyada oo aan dib loo bilaabin kernel-ka.
  • Awoodda lagu rakibo xirmooyinka xisaabinta waxqabadka sare leh sida NVIDIA's CUDA iyo AMD's ROCm ee kaydinta ay ilaaliso Koofiyada Cas iyadoo lala kaashanayo NVIDIA iyo AMD hadda waa la heli karaa.
  • Qayb cusub oo AppStream ah iyo utility-drivers utility ayaa lagu daray si loo fududeeyo rakibaadda iyo cusboonaysiinta darawaliinta qolo saddexaad ee GPU-yada iyo dardar-geliyayaasha AI. Ku rakibida qalabyada darawalada adag ee meelaha RHEL ayaa hadda la taageeray, tusaale ahaan, kuwa daboolaya moduleka kernel-ka NVIDIA iyo maktabadaha CUDA. Inta badan, rakibidda darawallada loo baahan yahay hadda waa mid fudud sida socodsiinta "dnf install rhel-drivers; rhel-drivers install --auto-detect."
  • Dhexda u gal Linux Nidaamka hoose ee fwctl (Firmware Control) ayaa lagu daray, kaas oo bixiya API loogu talagalay maaraynta firmware-ka amniga ah iyo fulinta shaqaalaha dhinaca firmware-ka ee booska isticmaalaha.
  • Awoodaha kernel ee la hagaajiyay ee la xidhiidha nidaamka nidaamka iyo la socodka isticmaalka tamarta. Taageero lagu daray xisaabiyeyaasha waxqabadka hardware ee Intel Panther Lake CPUs. Waxaa lagu daray awoodda lagu kormeerayo isticmaalka awoodda iyadoo la adeegsanayo Intel RAPL (Orodka Celceliska Awoodda Xadka) dhacdooyinka interface ee nidaamyada leh Intel Arrow Lake U CPUs. Taageerada lagu daray Intel Trace Hub (NPK) aqoonsiga aaladaha nidaamyada leh Intel Panther Lake CPUs, iyo sidoo kale dhacdooyinka asaasiga ah iyo kuwa aan asalka ahayn ee nidaamyada leh Intel Clearwater Forest CPUs. Taageerada ururinta xogta isticmaalka tamarta xudunta u ah nidaamyada leh AMD Milan CPUs ayaa lagu daray. Awoodaha wax-ka-hortagga ee balaariyay ee python-drgn debugger.
  • Nidaam hoosaadka eBPF waxa uu la mid yahay 6.14 kernel. Qalabka perf waxa uu la mid yahay 6.15 kernel.
  • Awoodaha qalabka Image Builder ee abuurista sawirrada kabaha gaarka ah ayaa la ballaariyay. Nooc tijaabo ah oo Image Builder ah ayaa lagu daray, oo ka shaqeynaya khadka taliska iyada oo aan lahayn GUI. Awoodda lagu abuurayo sawirro Windows- Nidaamyada hoose ee WSL2 (Windows Nidaamka hoose ee Linux) Nooc cusub oo sawir ah, vagrant-libvirt, ayaa la hirgeliyay waxaana lagu daray taageerada libvirt si loo fududeeyo bilowga. mashiinno dalwaddeed iyadoo la adeegsanayo RHEL iyadoo la adeegsanayo qalabka Vagrant.
  • Ilaalinta SE hoos timaadaLinux Adeegyada nidaamka switcheroo-control iyo tuned-ppd ayaa la wareejiyay. Modules leh siyaasado loogu talagalay SELinux, oo la xiriira baakadaha ka yimid kaydka EPEL, ayaa loo raray kaydka CRB iyagoo ku dhammaada "-extra".
  • Taageero lagu daray aqoonsiga noocyada aaladaha virtio ee loo isticmaalo martida iyadoo la adeegsanayo taliska lszdev (horay dhammaan aaladaha noocan ahi waxay ahaayeen nooca guud-ccw).
  • Modules for KVM hypervisor ayaa lagu daray xirmada oo wata nooca kernel-ka dhabta ah (horey kernel gaar ah, kernel-rt-kvm, ayaa loo soo ururiyay iyaga).
  • Amarka "rpm" ayaa lagu daray deegaanka nidaamka rakibaha. Xulashada "fips=1" ayaa lagu daray liiska boot-ka ee sawirada rakibaadda si ay awood ugu siiso FIPS 140 (Heerarka Habaynta Macluumaadka Federaalka) u hoggaansanaanta inta lagu jiro jiilka muhiimka ah inta lagu jiro rakibidda.
  • Isku xidhka shabakada NetworkManager hadda waxa uu taageeraa ku xidhida goobaha gudbinta baakidhka shakhsiga ah ee IPv4 is-dhexgalada shabakada iyada oo la adeegsanayo ikhtiyaarka "ipv4.forwarding". Goob "horgale-ergo" ayaa lagu daray, taas oo u oggolaanaysa hantida "subnet-id" in loo isticmaalo in lagu xusho subnet-ka dhex-dhexaadka shabakadda hoose marka la isticmaalayo ergada horgalayaasha IPV6. Utility nmtui hadda waxay taageertaa qaabeynta interface loopback.
  • Ku-darka PostGIS ayaa lagu daray DBMS-ga PostgreSQL.
  • Hawlaha sched_setattr iyo sched_getattr, kuwaas oo loo isticmaali karo in lagu dejiyo oo lagu akhriyo jadwalka jadwalka hawsha, ayaa loo gudbiyay Glibc. Ficil ahaan, hawlahani waxay oggolaadaan habaynta codsiyada jadwalka jadwalka, sida SCHED_DEADLINE, kuwaas oo adeegsada cabbirro aan ahayn mudnaanta.
  • IdM hadda waxay taageertaa HSM buuxa (Hardware Security Modules). Amarka ipa-migrate hadda wuu xasiloon yahay in loo haajiro dhammaan xogta IdM, sida xeerarka sudo, HBAC-yada, kala duwanaanshaha DNA-da, martigeliyaha iyo liisaska adeegga, laga bilaabo hal server IdM una guuro mid kale.
  • SSSD waxa ay horumarisay xaqiijinta kaadhka smart-ka ee deegaanka oo leh calaamado badan oo PKCS#11 ah oo isku mar ku xidhan. Xulashada ldap_read_rootdse ayaa lagu daray si loo xakameeyo sida SSSD u akhriyo waxa ku jira Gelitaanka Adeegga Tusaha xididka (RootDSE).
  • Weelasha Toolbx ee lagu dhisay sawirada UBI waxay siiyan taageero ka baxsan sanduuqa OpenGL iyo Vulkan iyada oo aan loo baahnayn in gacanta lagu rakibo qaybaha la xidhiidha Mesa ee API.
  • Mashiinnada casriga ah ee ku shaqeeya nidaamyada martida loo yahay ee leh qaab dhismeedka ARM64, taageerada ayaa loo hirgeliyay sawir-qaadista tooska ah, Nuqul ka-horta, nuqul-ka-booseed, iyo hababka socdaalka Multi-FD, iyo guuritaanka nool ee dabeecadaha.
  • Taageero lagu daray kabaha kernel-ka tooska ah ee mashiinnada farsamada gacanta ee loo habeeyey inay ku shaqeeyaan qaabka SecureBoot.
  • Taageerada la hagaajiyay ee dhismooyinka weelka dib loo soo saari karo. Sawirada weelka cusub ayaa lagu daray: rhel10/valkey-8, rhel10/nodejs-24, iyo rhel10/nodejs-24-minimal, oo leh kaydka Valkey iyo goobta Node.js horay loo habeeyey.
  • Taageerada tijaabada ah ee qalabka nasso-iyo-soo kabashada (ReaR) iyo Nashqada Xisaabinta Qarsoodi ah (CCA) ee mashiinada farsamada waxaa la siiyaa nidaamyada ARM64.
  • Nooca tijaabada ah ee vDPA (virtio Data Path Acceleration) ayaa lagu daray, kaas oo laga hirgaliyay goobta isticmaalaha iyadoo la adeegsanayo qaabka VDUSE. VDUSE waxay u oggolaaneysaa abuurista aaladaha xannibaadda farsamada ee booska isticmaale iyo adeegsiga Virtio sida gaadiid si looga helo nidaamyada martida.
  • Muuqaal tijaabo ah ayaa loo hirgeliyay iyadoo la adeegsanayo habka Virtual Socket (vsock) ee isku xirka TCP, taasoo u oggolaanaysa adeegyada shabakadda, sida SSH, in lagu shaqeeyo mashiinnada farsamada iyada oo aan lahayn qaabeynta shabakadda
  • Macaamiisha FTP waa la joojiyay oo adeegayaal: ftp, lftp, iyo vsftpd. Adeegga ipset waa la joojiyay waxaana loo qorsheeyay in laga saaro.
  • Darawalada cusub ayaa ku daray:
    • intel_vpu ee Intel NPU (Qaybta habaynta neerfaha),
    • tuner loogu talagalay noocyada kala duwan ee tuners TV,
    • tmtk loogu talagalay MediaTek chips Bluetooth,
    • tpm_svsm ee SNP SVSM vTPM (Module Platform la aamini karo),
    • ae4dma ee AMD AE4DMA,
    • ptdma ee AMD PassThru DMA,
    • ch7006 ee codeeyaha TV-ga Chrontel ch7006,
    • cirrus-qemu ee ku dayashada kaararka video-ga ee Cirrus Logic,
    • drm_gpusvm ee DRM GPUSVM,
    • Qarsoon-corsair-ka bannaan ee Corsair Void ganiturs,
    • intel-thc ee Intel Touch Host Controller,
    • intel-quicki2c ee Intel QuickI2C,
    • intel-quickspi ee Intel QuickSPI,
    • cx231xx ee Conexant cx231xx USB video kaarka,
    • cx25840 ee Conexant CX25840 codeeyaha maqalka/muqaalka,
    • as21xxx ee kaararka shabakada Aeonsemi AS21xxx,
    • iwlmld ee aaladaha wireless-ka ee Intel MLD,
    • mxl-86110 ee kaararka shabakada MaxLinear MXL86110,
    • microchip_rds_ptp ee Microchip PHY RDS PTP,
    • realtek ee kaararka shabakada Realtek,
    • gs_usb ee isku xirka USB ee baska CAN ee ka yimid Geschwister Schneider iyo candleLight,
    • amd_3d_vcache - AMD 3D V-Cache Optimizer.
  • Noocyada xirmada horumariyaha ee la cusboonaysiiyay: GCC 14.3, GCC Toolset 15.1, Node.js 24, .NET 10.0, LLVM Toolset 20.1.8, Qalabka Daxalka 1.88.0, OpenJDK 25, Go Toolset 1.24, GDB 11.5.3.3.2
  • Xirmooyinka server-ka ee la cusboonaysiiyay: Apache HTTPD 2.4.63, libreswan 5.3, iproute 6.14.0, samba 4.22.4, 389-ds-base 3.1.3, postfix 3.8.5, Podman 5.6.
  • Xirmooyinka nidaamka la cusboonaysiiyay: glibc 2.39, binutils 2.41, OpenSSL 3.5, NSS 3.112, GnuTLS 3.8.10.

Source: opennet.ru

U soo iibso martigelin lagu kalsoonaan karo oo loogu talagalay bogagga leh ilaalinta DDoS, VPS VDS servers 🔥 Iibso martigelin degel oo lagu kalsoonaan karo oo leh ilaalinta DDoS, VPS VDS servers | ProHoster