Red Hat e hlahisitse tokollo ea kabo ea Red Hat Enterprise Linux 9. Litšoantšo tsa ho kenya tse lokiselitsoeng li tla fumaneha haufinyane ho basebelisi ba ngolisitsoeng ba Red Hat Customer Portal (CentOS Stream 9 iso litšoantšo li ka boela tsa sebelisoa ho hlahloba ts'ebetso). Tokollo e etselitsoe meralo ea x86_64, s390x (IBM System z), ppc64le le Aarch64 (ARM64). Khoutu ea mohloli bakeng sa liphutheloana tsa Red Hat Enterprise Linux 9 rpm e fumaneha sebakeng sa polokelo ea CentOS Git. Ho latela potoloho ea tšehetso ea lilemo tse 10 bakeng sa kabo, RHEL 9 e tla tšehetsoa ho fihlela 2032. Lintlafatso tsa RHEL 7 li tla tsoelapele ho lokolloa ho fihlela Phuptjane 30, 2024, RHEL 8 ho fihlela la 31 Motšeanong 2029.
Red Hat Enterprise Linux 9 e tsebahala ka ho fallela ha eona ts'ebetsong ea nts'etsopele e bulehileng haholoanyane. Ho fapana le makala a fetileng, setsi sa sephutheloana sa CentOS Stream 9 se sebelisoa e le motheo oa ho aha kabo. liqeto tse entsoeng. Nakong e fetileng, setšoantšo sa e 'ngoe ea litokollo tsa Fedora se ne se sebelisoa e le motheo oa lekala le lecha la RHEL, le ileng la phethoa le ho tsitsisoa ka mor'a mamati a koetsoeng, ntle le bokhoni ba ho laola tsoelo-pele ea tsoelo-pele le liqeto tse entsoeng. Hona joale, ho itšetlehile ka setšoantšo sa Fedora, ka ho kenya letsoho ha sechaba, ho thehoa lekala la CentOS Stream, moo mosebetsi oa ho lokisetsa o ntseng o etsoa 'me ho thehoa motheo oa lekala le lecha la bohlokoa la RHEL.
Liphetoho tsa bohlokoa:
- Tikoloho ea sistimi le lisebelisoa tsa kopano li ntlafalitsoe. GCC 11 e sebelisetsoa ho aha liphutheloana. Laeborari e tloaelehileng ea C e nchafalitsoe ho glibc 2.34. Sephutheloana sa Linux kernel se ipapisitse le tokollo ea 5.14. Motsamaisi oa sephutheloana sa RPM o ntlafalitsoe hore e be mofuta oa 4.16 ka ts'ehetso ea ho lekola bots'epehi ka fapolicyd.
- Ho falla ha kabo ho Python 3 ho phethetsoe. Lekala la Python 3.9 le fanoa ka mokhoa oa kamehla. Python 2 e khaotsoe.
- Desktop e thehiloe ho GNOME 40 (RHEL 8 e rometsoe ka GNOME 3.28) le laebrari ea GTK 4. Ho GNOME 40, li-desktop tse fumanehang ka har'a Activities Overview mode li fetoleloa ho latela sebopeho sa naha 'me li bonts'oa e le ketane e ntseng e tsamaea e sa khaotse ho tloha ho le letšehali ho ea ho le letona. K'homphieutha e 'ngoe le e' ngoe e bonts'itsoeng ka mokhoa oa Overview e bonts'a tse fumanehang lifensetere le lipane tse matla le ho ata ha mosebelisi a sebelisana. Phetoho e se nang moeli e fanoa lipakeng tsa lenane la mananeo le li-desktop tse fumanehang.
- GNOME e kenyelletsa motlakase-profiles-daemon handler e fanang ka bokhoni ba ho fetola sefofane pakeng tsa mokhoa oa ho boloka matla, mokhoa o leka-lekaneng oa matla, le mokhoa o phahameng oa ts'ebetso.
- Melaetsa eohle ea molumo e fetiselitsoe ho seva sa media sa PipeWire, eo hajoale e seng e le ea kamehla sebakeng sa PulseAudio le JACK. Ho sebelisa PipeWire ho u fa monyetla oa ho fana ka bokhoni ba ho sebetsa ka mamelwang khatisong e tloaelehileng ea komporo, tlosa karohano le ho kopanya lisebelisoa tsa molumo bakeng sa lits'ebetso tse fapaneng.
- Ka ho sa feleng, menu ea boot GRUB e patiloe haeba RHEL e le eona feela kabo e kentsoeng tsamaisong le haeba bootle ea ho qetela e atlehile. Ho bonts'a menyetla nakong ea boot, tšoara feela konopo ea Shift kapa tobetsa konopo ea Esc kapa F8 makhetlo a 'maloa. Har'a liphetoho ho bootloader, re boetse re hlokomela ho behoa ha lifaele tsa GRUB tsa tlhophiso bakeng sa meralo eohle bukeng e le 'ngoe /boot/grub2/ (faele /boot/efi/EFI/redhat/grub.cfg hona joale ke sehokelo sa tšoantšetso ho /boot /grub2/grub.cfg), bao. Sistimi e ts'oanang e kentsoeng e ka qalisoa ho sebelisoa EFI le BIOS ka bobeli.
- Likarolo tse tšehetsang lipuo tse fapaneng li kentsoe ka har'a li-langpacks, tse u lumellang hore u fetole boemo ba tšehetso ea puo e kentsoeng. Mohlala, langpacks-core-font e fana ka fonte feela, langpacks-core e fana ka sebaka sa glibc, font ea motheo, le mokhoa oa ho kenya, 'me li-langpacks li fana ka liphetolelo, lifonti tse ling, le bukana e hlahlobang mopeleto.
- Likarolo tsa ts'ireletso li ntlafalitsoe. Kabo e sebelisa lekala le lecha la laeborari ea li-cryptographic ea OpenSSL 3.0. Ka nako e sa lekanyetsoang, li-algorithms tsa morao-rao le tse tšepahalang tsa cryptographic lia lumelloa (mohlala, tšebeliso ea SHA-1 ho TLS, DTLS, SSH, IKEv2 le Kerberos e thibetsoe, TLS 1.0, TLS 1.1, DTLS 1.0, RC4, Camellia, DSA, 3DES le FFDHE-1024 li holofetse) . Sephutheloana sa OpenSSH se ntlafalitsoe hore e be mofuta oa 8.6p1. Cyrus SASL e isitsoe ho GDBM backend sebakeng sa Berkeley DB. Lilaebrari tsa NSS (Network Security Services) ha li sa tšehetsa sebopeho sa DBM (Berkeley DB). GnuTLS e ntlafalitsoe hore e be mofuta oa 3.7.2.
- E ntlafalitse haholo ts'ebetso ea SELinux le ho fokotsa tšebeliso ea memori. Ho / joalo-joalo/selinux/config, ts'ehetso ea "SELINUX = e holofetseng" ea ho thibela SELinux e tlositsoe (sethalong sena hona joale se thibela ho kenya leano feela, 'me ho thibela ts'ebetso ea SELinux hona joale ho hloka ho fetisa "selinux = 0" parameter ho thollo).
- E kentse tšehetso ea liteko bakeng sa VPN WireGuard.
- Ka kamehla, ho kena ka SSH kaha motso o thibetsoe.
- Lisebelisoa tsa tsamaiso ea lipakete tsa iptables-nft (li-iptables, ip6tables, ebtables le arptables utilities) le ipset li tlositsoe. Hona joale ho khothalletsoa ho sebelisa li-nftables ho laola firewall.
- E kenyelletsa daemon e ncha ea mptcpd bakeng sa ho lokisa MPTCP (MultiPath TCP), katoloso ea protocol ea TCP bakeng sa ho hlophisa ts'ebetso ea khokahano ea TCP le ho fana ka lipakete ka nako e le 'ngoe litseleng tse' maloa ka li-interfaces tse fapaneng tsa marang-rang tse amanang le liaterese tse fapaneng tsa IP. Ho sebelisa mptcpd ho etsa hore ho khonehe ho lokisa MPTCP ntle le ho sebelisa iproute2 utility.
- Sephutheloana sa marang-rang se tlositsoe; NetworkManager e lokela ho sebelisoa ho lokisa likhokahano tsa marang-rang. Ts'ehetso bakeng sa sebopeho sa litlhophiso tsa ifcfg e bolokiloe, empa NetworkManager e sebelisa sebopeho se thehiloeng ho keyfile ka boiketsetso.
- Sebopeho se kenyelletsa mefuta e mecha ea li-compilers le lisebelisoa bakeng sa ba ntlafatsang: GCC 11.2, LLVM/Clang 12.0.1, Rust 1.54, Go 1.16.6, Node.js 16, OpenJDK 17, Perl 5.32, PHP 8.0, Python 3.9, Ruby Git 3.0, Subversion 2.31, binutils 1.14, CMake 2.35, Maven 3.20.2, Ant 3.6.
- Liphutheloana tsa seva Apache HTTP Server 2.4.48, nginx 1.20, Varnish Cache 6.5, Squid 5.1 li ntlafalitsoe.
- DBMS MariaDB 10.5, MySQL 8.0, PostgreSQL 13, Redis 6.2 e ntlafalitsoe.
- Ho haha emulator ea QEMU, Clang e nolofalitsoe ka ho sa feleng, e leng se entseng hore ho khonehe ho sebelisa mekhoa e meng ea ts'ireletso ho hypervisor ea KVM, e kang SafeStack ho sireletsa khahlanong le mekhoa ea tlhekefetso e thehiloeng lenaneong la ho khutlela morao (ROP - Return-Oriented Programming).
- Ho SSSD (System Security Services Daemon), lintlha tsa li-log li eketsehile, ka mohlala, nako ea ho phethela mosebetsi e se e khomaretsoe liketsahalong 'me phallo ea bopaki e bonahala. E kentse ts'ebetso ea ho batla ho sekaseka litlhophiso le litaba tsa ts'ebetso.
- Tšehetso bakeng sa IMA (Integrity Measurement Architecture) e atolositsoe ho netefatsa botšepehi ba likarolo tsa tsamaiso ea ts'ebetso ho sebelisa li-signature tsa digital le li-hashes.
- Ka ho sa feleng, sehlopha se le seng sa sehlopha se kopaneng (cgroup v2) sea lumelloa. Сgroups v2 e ka sebelisoa, mohlala, ho fokotsa mohopolo, CPU le I/O tshebediso. Phapang e ka sehloohong pakeng tsa lihlopha tsa v2 le v1 ke tšebeliso ea lihlopha tse tloaelehileng tsa lihlopha bakeng sa mefuta eohle ea lisebelisoa, ho e-na le lihlopha tse arohaneng tsa ho fana ka lisebelisoa tsa CPU, bakeng sa ho laola tšebeliso ea mohopolo, le bakeng sa I / O. Maemo a arohaneng a lebisitse mathateng a ho hlophisa litšebelisano lipakeng tsa bahlokomeli le litšenyehelo tse ling tsa lisebelisoa tsa kernel ha ho sebelisoa melao bakeng sa ts'ebetso e boletsoeng maemong a fapaneng.
- Ts'ehetso e ekelitsoeng bakeng sa ho hokahanya ha nako e nepahetseng ho ipapisitsoe le protocol ea NTS (Network Time Security), e sebelisang likarolo tsa mantlha tsa senotlolo sa sechaba (PKI) mme e lumella ts'ebeliso ea TLS le encryption e netefalitsoeng ea AEAD (Authenticated Encryption with Associated Data) bakeng sa ts'ireletso ea cryptographic. tšebelisano ea bareki le seva ka protocol ea NTP ( Network Time Protocol). Seva ea chrony NTP e ntlafalitsoe hore e be mofuta oa 4.1.
- Teko (Teknoloji Preview) tšehetso bakeng sa KTLS (kemiso ea kernel-level ea TLS), Intel SGX (Software Guard Extensions), DAX (Direct Access) bakeng sa ext4 le XFS, tšehetso bakeng sa AMD SEV le SEV-ES ho hypervisor ea KVM e fanoa.
Source: opennet.ru