Tlaleho ea Tsoelo-pele ea FreeBSD bakeng sa Q2019 XNUMX

e hatisitsoeng tlaleha ka nts'etsopele ea projeke ea FreeBSD ho tloha Phupu ho isa Loetse 2019. Har'a liphetoho tseo re ka li hlokomelang:

• Litaba tse akaretsang le tsa tsamaiso
  • Sehlopha sa Core ka kakaretso se amohetse monyetla oa ho kenyelletsa khoutu ho sistimi e ajoang tlasa laesense ea BSD ka tumellano e eketsehileng ea patent (BSD + Patent), empa qeto ea ho kenyelletsa karolo ka 'ngoe tsamaisong e tlas'a laesense ena e tlameha ho amoheloa ka thoko;
  • Seboka sa pele sa sehlopha se sebetsang se bōpiloeng ho phethahatsa ho falla ha likhoutu tsa mohloli ho tloha tsamaisong e bohareng ea taolo ea mohloli Ho fetola tsamaiso ea tsamaiso ea Git e ile ea etsahala. Puisano mabapi le monyetla oa ho falla e ntse e tsoela pele 'me liqeto mabapi le litaba tse ngata ha li e-so ntšetsoe pele (mohlala, seo u lokelang ho se etsa ka contrib/, hore na hoa hlokahala ho tsosolosa li-hashes sebakeng sa hona joale sa polokelo ea git le mokhoa oa ho kenya ts'ebetsong liteko tsa boitlamo);
  • Ho tsoa ho NetBSD ported KCSAN (Kernel Concurrency Sanitizer) toolkit, e u lumellang ho bona maemo a morabe pakeng tsa likhoele tsa kernel tse sebetsang ho li-CPU tse fapaneng;
  • Mosebetsi o ntse o tsoela pele oa ho sebelisa sekopanyi sa Clang se hahelletsoeng (IAS) sebakeng sa pokello ea li-binutils tsa GNU;
  • Sebopeho sa sebopeho sa tikoloho sa Linux (Linuxulator) se ikamahanya le maemo ho sebetsa moahong oa ARM64. E kentse mohala oa sistimi ea "renameat2". Sesebelisoa sa strace se ntlafalitsoe ho hlahloba mathata ho li-executable tsa Linux tse tsamaisoang ho Linuxulator. Bothata ba ho senyeha ha o hokahanya lifaele tse ka sebetsoang le glibc e ncha bo rarollotsoe. Likou tse nang le likarolo tsa Linux bakeng sa Linuxulator li nchafalitsoe ho CentOS 7.7;
  • E le karolo ea lenaneo la Google Summer of Code, liithuti li ile tsa qeta merero e tšeletseng ka katleho: ho kenngoa ts'ebetsong ea ts'ebetsong ea ping e kopantsoeng (IPv4 / IPv6) e ile ea lokisoa, lisebelisoa li ile tsa ntlafatsoa bakeng sa ho hlahloba li-firewall le ho khetholla liphoso ho kernel (Kernel sanitizer), mac_ipacl. ho ile ha etsoa tlhahiso ea mojule, khoutu e ngotsoe bakeng sa compression ea memori e hlakileng mme mosebetsi o entsoe ho arola ts'ebetso ea ho aha boema-kepe ho tsoa ho ts'ebetso ea lehae;
  • Morero oa tlhahlobo ea fuzzing ea kernel ea FreeBSD e sebelisang sistimi e ntse e tsoela pele ho hola syzkaller. Nakong ea tlaleho, liphoso tse fetang leshome li ile tsa khetholloa 'me tsa felisoa ho sebelisoa syzkaller. Ho matha syzkaller ka ho ka thoeng mechine e thehiloeng bhyve, e ka thoko seva e neheloa, 'me a sebelisa
    syzbot e thehile liteko tsa lits'ebetso tse fapaneng tsa FreeBSD lits'ebetsong tsa Google. E hlophisitse phetisetso ea tlhahisoleseling mabapi le likotsi tsohle ho ts'ebeletso ea backtrace.io ho nolofatsa lihlopha le tlhahlobo ea tsona;

  • Mosebetsi o ntse o tsoela pele ho ntlafatsa ts'ebetsong ea zlib boemong ba kernel.
    Khoutu e amanang le khatello e tlositsoe ho zlib 1.0.4, e lokollotsoeng lilemo tse fetang 20 tse fetileng, ho ea ho zlib 1.2.11 codebase ea hajoale. Ho kopanya phihlello ea zlib, mesebetsi compress, compress2 le uncompress e kentsoe kernel. Khoutu e netefatsang ts'ebetso ea protocol ea PPP ho tsoa ho subsystem ea netgraph e fetisitsoe ho sebelisa ts'ebetso ea sistimi ea zlib, ho fapana le khatiso ea eona ea laeborari ena. Kern_ctf.c, opencryptodeflate, geom_uzip, subr_compressor, li-subsystems le tsona li fetiselitsoe ho zlib e ncha.
    if_mxge, bxe e ntlafalitsoe le ng_deflate;

  • Khokahano e ncha ea kernel e ntse e ntlafatsoa sysclininfo, e u lumellang hore u fumane likarolo ho database ea sysctl parameter, e sebetsitsoeng ka mokhoa oa MIB (Management Information Base), le ho fetisetsa tlhahisoleseding mabapi le lintho sebakeng sa mosebedisi.
• Tshireletso
  • Kernel module e ntlafalitsoe mac_ipacl, e thehiloeng ho TrustedBSD MAC Framework le ho kenya ts'ebetsong mokhoa oa ho laola phihlello bakeng sa litlhophiso tsa marang-rang a marang-rang bakeng sa tikoloho ea chankana. Ka mohlala, ho sebelisa mac_ipacl, mookameli oa tsamaiso ea moeti a ka thibela mosebelisi oa motso sebakeng sa chankana ho fetola kapa ho beha liaterese tsa IP kapa litlhophiso tsa subnet bakeng sa li-interfaces tse itseng tsa marang-rang. Sistimi ea taolo ea phihlello e sisintsoeng e lumella beha manane a liaterese tsa IP le li-subnets tse lumelletsoeng Chankaneng, thibela ho kenngoa ha li-IP tse itseng le li-subnets Chankaneng, kapa fokotsa ho fetola liparamente feela bakeng sa li-interfaces tse itseng tsa marang-rang;
  • Intel e fane ka "software stack port" morerong ona TPM 2.0 (Trusted Platform Module) ho hokahana le chip ea komporo e sireletsehileng, eo hangata e sebelisetsoang ho kenya firmware le OS bootloader e netefalitsoeng. Likarolo tsa stack li hlahisoa ka mokhoa oa ts'ireletso ea likoung /tpm2-tss, ts'ireletso / lisebelisoa tsa tpm2 le ts'ireletso/tpm2-abrmd. Boema-kepe ba tpm2-tss bo kenyelletsa lilaebrari tsa ho sebelisa TPM2 API, tpm2-tools e fana ka lisebelisoa tsa mohala oa taelo bakeng sa ho etsa ts'ebetso ea TPM, mme tpm2-abrmd e na le ts'ebetso ea ts'ebetso ea morao-rao ea likarolo tsa TPM Access Broker le Resource Manager tse kopang likopo tse ngata ho tsoa ho basebelisi ba fapaneng ba TPM. ho sesebelisoa se le seng . Ntle le ts'ebetso e netefalitsoeng ho FreeBSD, TPM e ka sebelisoa ho ntlafatsa ts'ireletso ea Strongswan IPsec, SSH le TLS ka ho etsa ts'ebetso ea "cryptographic" ho chip e arohaneng;
  • Kernel bakeng sa meralo ea amd64 e fetisetsoa ho boot ho sebelisa mokhoa oa ts'ireletso oa W^X (ngola XOR execute), ho bolelang hore maqephe a memori a ke ke a fumaneha ka nako e le 'ngoe bakeng sa ho ngola le ho etsoa (kernel e se e ka kenngoa ho sebelisoa maqephe a memori a sebetsang ao ho ngoloang ho ona. e thibetsoe). Mokhoa o mocha oa tšireletso ea kernel o kenyelelitsoe lekaleng la HEAD 'me o tla kenyelletsoa ho FreeBSD 13.0 le 12.2 e lokolloa;
  • Bakeng sa mehala ea mmap le mprotect system kenngwa tshebetsong macro PROT_MAX(), e u lumellang hore u tsebe hore na lifolakha tsa thibelo ea phihlello li lumelletsoe bakeng sa liphetoho tse ling (PROT_READ, PROT_WRITE, PROT_EXEC). U sebelisa PROT_MAX (), moqapi a ka thibela phetisetso ea sebaka sa memori ho sehlopha se ka phethisoang kapa a kopa memori e sa lumelleng ts'ebetso, empa hamorao e ka fetoloa hore e sebetse. Mohlala, sebaka sa mohopolo se ka buloa bakeng sa ho ngola feela bakeng sa nako ea khokahano e matla kapa tlhahiso ea khoutu ea JIT, empa hang ha mongolo o phethiloe, o lekanyelitsoe ho bala le ho etsa feela, mme nakong e tlang, haeba e sekisitsoe, mohlaseli. e ke ke ea khona ho nolofalletsa ho ngola bakeng sa boloko ba memori eo. Ho phaella ho PROT_MAX(), sysctl vm.imply_prot_max le eona e kentsoe tšebetsong, eo ha e kentsoe, e khethang sehlopha sa lifolakha tse nepahetseng ho ipapisitsoe le liparamente tsa pele tsa mohala oa pele oa ho mmap;
  • Ho ntlafatsa ts'ireletso khahlano le ts'ebeliso ea bofokoli, ho kenyelletsa le mokhoa oa aterese oa sebaka sa randomisation (ASLR), mochini oa ho hlophisa li-pointers tse sebetsanang le foreimi ea pele ea stack le meaho e behiloeng holim'a stack e nang le tlhaiso-leseling mabapi le tikoloho, litekanyetso tsa ho qala lenaneo le data. bakeng sa litšoantšo tse sebetsang ka sebopeho sa ELF ho hlahisitsoe;
  • Mosebetsi o se o entsoe ho tlosa ts'ebetso e sa sireletsehang ea libc (ho qala ka mokhoa oa C11, mosebetsi ona o qheletsoe ka thōko ho tlhaloso) le ho lokisa likou tse ntseng li sebelisa mosebetsi ona. Phetoho e reriloe hore e fanoe ka FreeBSD 13.0;
  • Morero oa liteko o thakhotsoe ho theha lisebelisoa tsa ho hlophisa maemo a chankana ho latela moralo pitsa bakeng sa ho theha le ho romela litšoantšo, tse kenngoeng tšebetsong tse tšoanang le Docker, le mokhanni NOMAD, e fanang ka sebopeho sa ho qala lits'ebetso ka matla tikolohong ea chankana. Moetso o reriloeng o re lumella ho arola lits'ebetso tsa ho theha tikoloho ea chankana le ho kenya likopo ho tsona. E 'ngoe ea lipheo tsa morero ke ho fana ka mokhoa oa ho qhekella lichankana joalo ka lijana tsa mofuta oa Docker;
• Litsamaiso tsa polokelo le lifaele
  • Ho tloha NetBSD ho ea ho "makefs" utility suthile Tšehetso ea tsamaiso ea lifaele tsa FAT (msdosfs). Liphetoho tse lokiselitsoeng li u lumella ho etsa litšoantšo tsa FS ka FAT ntle le ho sebelisa mokhanni oa md le ntle le matla a metso;
  • Ts'ebetso e ncha ea mokhanni oa tsamaiso ea FUSE (File system in USerspace) e phethiloe, e lumellang hore ho thehoe ts'ebetsong ea tsamaiso ea lifaele sebakeng sa basebelisi. Mokhanni ea neng a rometsoe qalong o ne a e-na le likokoana-hloko tse ngata 'me a thehiloe ho FUSE 7.8, e ileng ea lokolloa lilemo tse 11 tse fetileng. E le karolo ea morero oa ntlafatso ea mokhanni, ts'ehetso ea FUSE 7.23 protocol e kentsoe ts'ebetsong, khoutu ea ho lekola litokelo tsa phihlello ka lehlakoreng la kernel ("-o default_permissions") e kentsoe, mehala ho VOP_MKNOD, VOP_BMAP le VOP_ADVLOCK e kentsoe, bokhoni ba ho sitisa ts'ebetso ea FUSE bo fanoe, ts'ehetso ea liphaephe tse sa boleloang ka mabitso le li-sockets tsa unix li kenyelitsoe ka fusefs, ho ile ha khoneha ho sebelisa kqueue bakeng sa / dev / fuse, ho ile ha khoneha ho ntlafatsa mekhahlelo ea thaba ka "mount -u", tšehetso e eketsehileng. bakeng sa ho romela li-fusef ka NFS, e kentse tšebetsong RLIMIT_FSIZE accounting, e kentse lifolakha tsa FOPEN_KEEP_CACHE le FUSE_ASYNC_READ, ea ntlafatsa ts'ebetso e kholo le mokhatlo o hlophisitsoeng oa caching. Mokhanni e mocha o kenyelelitsoe hloohong le makala a tsitsitseng / 12 (e kenyelelitsoe ho FreeBSD 12.1);
  • Ho kenngwa tshebetsong ha NFSv4.2 (RFC-7862) bakeng sa FreeBSD ho se ho batla ho phethelwa. Sepheo se seholo nakong ea tlaleho e ne e le tekong. Liteko li phethiloe ho netefatsa ho lumellana le ts'ebetsong ea Linux, empa tlhahlobo ea seva sa pNFS ka NFSv4.2 e ntse e tsoela pele. Ka kakaretso, khoutu e se e nkoa e loketse ho kopanngoa le hlooho ea FreeBSD / makala a hona joale. Phetolelo e ncha ea NFS e eketsa ts'ehetso bakeng sa posix_fadvise, posix_fallocate mesebetsi, mekhoa ea SEEKHOLE / SEEKDATA ka lseek, ts'ebetso ea ho kopitsa sebakeng sa likarolo tsa faele ho seva (ntle le ho fetisetsa ho mofani);
• Tšehetso ea lisebelisoa
  • Ho se ho thakholoe morero oa ho ntlafatsa ts'ebetso ea FreeBSD ho lilaptop. Sesebelisoa sa pele se tla hlahlojoa bakeng sa tšehetso ea hardware ho FreeBSD e ne e le laptop ea Lenovo X1 Carbon ea moloko oa bosupa;
  • CheriBSD, fereko ea FreeBSD bakeng sa meralo ea processor ea lipatlisiso CHERI (Capability Hardware Enhanced RISC Instructions), e ntlafalitsoeng ho ts'ehetsa processor e tlang ea ARM Morello, e tla ts'ehetsa sistimi ea taolo ea phihlello ea memori ea CHERI e ipapisitseng le mohlala oa ts'ireletso oa moralo oa Capsicum. Morello chip ba rera e lokolloa ka 2021. Bahlahisi ba CheriBSD le bona ba tsoela pele ho beha leihlo nts'etsopele ea prototype ea litšupiso ea CHERI e ipapisitseng le meralo ea MIPS;
  • Tšehetso e atolositsoeng bakeng sa li-chips tsa RockChip RK3399 tse sebelisoang ho liboto tsa RockPro64 le NanoPC-T4. Ntlafatso ea bohlokoa ka ho fetisisa e ne e le ts'ehetso ea eMMC le nts'etsopele ea mokhanni e mocha oa molaoli oa eMMC ea sebelisoang botong;
  • Mosebetsi o ntse o tsoela pele ho kenya ts'ehetso bakeng sa ARM64 SoC Broadcom BCM5871X ka li-processor tsa ARMv8 Cortex-A57, tse reretsoeng ho sebelisoa ho li-routers, liheke le polokelo ea marang-rang. Nakong ea tlaleho
    Tšehetso ea iProc PCIe e ekelitsoe 'me le bokhoni ba ho sebelisa hardware cryptographic operations ho potlakisa IPsec bo ekelitsoe.
    Khokahano ea khoutu lekaleng la HEAD e lebelletsoe kotareng ea bone;

  • Ho bile le tsoelopele e kholo ntlafatsong ea boema-kepe ba FreeBSD bakeng sa sethala sa powerpc64. Sepheo ke ho fana ka ts'ebetso ea boleng ho litsamaiso tse nang le li-processor tsa IBM POWER8 le POWER9, empa ka boikhethelo li tšehetsa ts'ebetso ho li-Apple Power Mac tsa khale, x500 le Amiga A1222. Lekala la powerpc */12 le ntse le tsoela pele ho romelloa ka gcc 4.2.1, 'me lekala la powerpc*/13 le tla fallisetsoa ho llvm90 haufinyane. Ho tsoa likoung tse 33306, tse 30514 li kopane ka katleho;
  • FreeBSD porting e ntse e tsoela pele bakeng sa 64-bit SoC NXP LS1046A e ipapisitseng le processor ea ARMv8 Cortex-A72 e nang le enjene e potlakisang ea pakete ea marang-rang, 10 Gb Ethernet, PCIe 3.0, SATA 3.0 le USB 3.0. Nakong ea tlaleho, tšehetso ea USB 3.0, SD/MMC, I2C, DPAA le GPIO network interface e ile ea kenngoa ts'ebetsong. Ho na le merero ea ho tšehetsa QSPI le ho ntlafatsa ts'ebetso ea sebopeho sa marang-rang. Ho phetheloa ha mosebetsi le ho kenyeletsoa lekaleng la HEAD ho lebelletsoe karolong ea bone ea 4;
  • Mokhanni oa ena o nchafalitsoe ho ts'ehetsa moloko oa bobeli oa li-adapter tsa marang-rang tsa ENAv2 (Elastic Network Adapter) tse sebelisoang mohahong oa motheo oa Elastic Compute Cloud (EC2) ho hlophisa puisano pakeng tsa EC2 nodes ka lebelo la ho fihla ho 25 Gb / s. Ts'ehetso ea NETMAP e kentsoe le ho lekoa ho mokhanni oa ena, 'me sebopeho sa memori se fetotsoe ho nolofalletsa mokhoa oa LLQ libakeng tsa Amazon EC2 A1;
• Likopo le tsamaiso ea boema-kepe
  • Likarolo tse ntlafalitsoeng tsa li-graphics stack le li-ports tse amanang le xorg. Maemakepe a sebelisang USE_XORG le XORG_CAT a fetiselitsoe ho moralo oa USES sebakeng sa ho letsetsa bsd.xorg.mk ka bsd.port.mk. Likou tse joalo joale li kenyelletsa folakha ea "USES=xorg" ho li-mafile tsa bona. Ts'ebetso ea XORG_CAT e arotsoe ho bsd.xorg.mk 'me joale e lumelloa ke "USES=xorg-cat" folakha. Lisebelisoa tse ekelitsoeng bakeng sa ho hlahisa likou tsa xorg ka kotloloho ho tsoa sebakeng sa polokelo ea git
    freedesktop.org, eo, ka mohlala, e u lumellang hore u thehe likou bakeng sa liphetolelo tse e-s'o lokolloe. Nakong e tlang, re rera ho lokisa lisebelisoa tsa ho sebelisa sistimi ea kopano ea meson sebakeng sa li-autotools ho aha likou tsa xorg.

    Ho se ho entsoe mosebetsi oa ho hloekisa likou tsa khale tsa xorg tse tlamelletsoeng likarolong tse seng li sa tšehetsoe, mohlala, boema-kepe ba x11/libXp bo tlositsoe, 'me x11/Xxf86misc, x11-fonts/libXfontcache le graphics/libGLw ports e tlositsoe. ;

  • Mosebetsi o entsoe ho ntlafatsa ts'ehetso ea Java 11 le litokollo tse ncha ho FreeBSD, hammoho le ho kenya liphetoho tse ling lekaleng la Java 8. Ka mor'a ts'ehetso ea likarolo tse ncha tsa Java 11 tse kang Java Flight Recorder, HotSpot Serviceability Agent, HotSpot Debugger e ile ea kenngoa ts'ebetsong. bakeng sa FreeBSD, DTrace, Javac Server, Java Sound le SCTP, mosebetsi o fetohile ho netefatsa hore liteko tsohle tsa ho lumellana li fetile. Palo ea ho hloleha ha ho feta liteko e fokotsehile ho tloha ho 50 ho ea ho 2;
  • KDE Plasma desktop, KDE Frameworks, KDE Applications le Qt li lula li le teng le ho nchafatsoa ho fihlela likhatisong tsa morao-rao;
  • Li-ports tse nang le desktop ea Xfce li ntlafalitsoe hore li lokolloe 4.14;
  • Sefate sa likoung tsa FreeBSD se fetile likoung tsa 38000, palo ea li-PRs tse sa koaloang li feta 2000 hanyenyane, tseo 400 PRs li e-so rarolloe. Nakong ea tlaleho, liphetoho tse 7340 li entsoe ho tsoa ho baetsi ba 169. Barupeluoa ba babeli ba bacha (Santhosh Raju le Dmitri Goutnik) ba fumane litokelo tsa boipelaetso. Ho phatlalalitsoe tokollo e ncha ea molaoli oa sephutheloana sa pkg 1.12, ka ts'ehetso ea ho koaheloa sefateng sa likou le ho hloekisa bsd.sites.mk. Har'a lintlafatso tsa bohlokoa tsa liphetolelo likoung ke: Lazarus 2.0.4, LLVM 9.0, Perl5.30, PostgreSQL 11, Ruby 2.6, Firefox 69.0.1, Firefox-esr 68.1.0, Chromium 76.0;
  • Ntlafatso ea morero e ntse e tsoela pele ClonOS, ntshetsopele kabo e khethehileng bakeng sa ho tsamaisa lisebelisoa tsa motheo tsa seva. Mabapi le mesebetsi eo e e rarollang, ClonOS e tšoana le lits'ebetso tse kang Proxmox, Triton (Joyent), OpenStack, OpenNebula le Amazon AWS, phapang e kholo ho eona ke ts'ebeliso ea FreeBSD le bokhoni ba ho laola, ho tsamaisa le ho laola lijana tsa FreeBSD Jail le maemo a sebele a thehiloeng ho Bhyve le Xen hypervisors . Liphetoho tsa morao-rao li kenyelletsa tšehetso
    cloud-init bakeng sa Linux/BSD VM le cloudbase-init bakeng sa Windows VM, ho qala phetoho ea ho sebelisa litšoantšo tsa matsoalloa, ho sebelisa Jenkins CI bakeng sa liteko tsa ho haha ​​le polokelo e ncha ea pkg bakeng sa ho kenya.
    ClonOS ho tsoa liphutheloana.

Source: opennet.ru