Red Hat e phatlalalitse tokollo ea Red Hat Enterprise Linux 8.7. Mehaho ea ho kenya e lokiselitsoe meaho ea x86_64, s390x (IBM System z), ppc64le, le Aarch64, empa e fumaneha bakeng sa ho jarollwa feela ho basebelisi ba Portal ea bareki ba ngolisitsoeng ba Red Hat. Mehloli ea liphutheloana tsa Red Hat Enterprise Linux 8 rpm li tsamaisoa ka polokelo ea CentOS Git. Lekala la 8.x le hlokomeloa ka tsela e tšoanang le lekala la RHEL 9.x 'me le tla tšehetsoa ho fihlela bonyane 2029.
Tokisetso ea litokollo tse ncha e etsoa ho ea ka potoloho ea nts'etsopele, e bolelang ho thehoa ha litokollo likhoeling tse ling le tse ling tse tšeletseng ka nako e reriloeng esale pele. Ho fihlela ka 2024, lekala la 8.x le tla be le le sethaleng sa ts'ehetso e feletseng, ho bolelang ho kenyelletsoa ha ntlafatso ea ts'ebetso, ka mor'a moo e tla fetela sethaleng sa tlhokomelo, moo lintho tse tlang pele li tla fetela ho lokisa liphoso le ts'ireletso, ka lintlafatso tse nyenyane tse amanang le tšehetso. litsamaiso tsa bohlokoa tsa hardware.
Liphetoho tsa bohlokoa:
- Sesebelisoa sa ho lokisa litšoantšo tsa sistimi se atolositsoe ho kenyelletsa ts'ehetso ea ho kenya litšoantšo ho GCP (Google Cloud Platform), ho beha setšoantšo ka kotloloho ho ngoliso ea sets'oants'o, ho lokisa boholo ba / boot partition, le ho lokisa liparamente (Blueprint) nakong ea tlhahiso ea litšoantšo. (mohlala, ho eketsa liphutheloana le ho theha basebelisi).
- E ekelitse bokhoni ba ho sebelisa moreki oa Clevis (clevis-luks-systemd) ho notlolla li-partitions tsa disk tse patiloeng ka LUKS le ho kenngoa ha nako ea ho qala, ntle le tlhoko ea ho sebelisa taelo ea "systemctl nolofalletsa clevis-luks-askpass.path".
- Ho entsoe tlhahiso ea sephutheloana se secha sa xmlstarlet, se kenyeletsang lisebelisoa tsa ho arola, ho fetola, ho netefatsa, ho ntša data le ho hlophisa lifaele tsa XML.
- E kentse bokhoni ba pele (Technology Preview) ba ho netefatsa basebelisi ba sebelisang lits'ebeletso tsa kantle (IdP, mofani oa boitsebiso) ba tšehetsang katoloso ea protocol ea OAuth 2.0 "Device Authorization Grant" ho fana ka matšoao a phihlello a OAuth lisebelisoa ntle le ho sebelisa sebatli.
- Bokhoni ba mesebetsi ea tsamaiso bo atolositsoe, mohlala, karolo ea marang-rang e ekelitse tšehetso bakeng sa ho theha melao ea ho tsamaisa le ho sebelisa nmstate API, karolo ea ho rema lifate e ekelitse tšehetso ea ho sefa ka lipolelo tse tloaelehileng (startmsg.regex, endmsg.regex), karolo ea polokelo e ekelitse tšehetso bakeng sa likarolo tseo sebaka sa polokelo se abetsoeng ka matla ("pehelo e tšesaane"), bokhoni ba ho laola ka /etc/ssh/sshd_config bo kenyelelitsoe karolong ea sshd, ho romeloa ha lipalo-palo tsa Postfix ho kenyelitsoe ho karolo ea metrics, bokhoni ba ho hlakola tlhophiso e fetileng e kentsoe tšebetsong ea firewall mme ts'ehetso ea ho eketsa, ho ntlafatsa le ho hlakola ho fanoe ka lits'ebeletso ho latela naha.
- E ntlafalitsoeng seva le tsamaiso liphutheloana: chrony 4.2, unbound 1.16.2, opencryptoki 3.18.0, powerpc-utils 1.3.10, ho tloha 2.13.0, PCP 5.3.7, Grafana 7.5.13, SystemTap 4.7, NetworkManager 1.40 samba 4.16.1. XNUMX.
- Sebopeho se kenyelletsa mefuta e mecha ea li-compilers le lisebelisoa bakeng sa ba ntlafatsang: GCC Toolset 12, LLVM Toolset 14.0.6, Rust Toolset 1.62, Go Toolset 1.18, Ruby 3.1, java-17-openjdk (java-11-opejdk le java-1.8.0 hape le tsoela pele. ho tla fanoa .3.8-openjdk), Maven 6.2, Mercurial 18, Node.js 6.2.7, Redis 3.19, Valgrind 12.1.0, Dyninst 0.187, elfutils XNUMX.
- sysctl configuration processing e tsamaellana le tsamaiso ea tsamaiso ea tsamaiso ea tsamaiso - lifaele tsa tlhophiso ho /etc/sysctl.d joale li na le tse tlang pele ho feta tse ho /run/sysctl.d.
- Sehlopha sa lisebelisoa sa ReaR (Relax-and-Recover) se ekelitse bokhoni ba ho phethahatsa litaelo tse sa reroang pele le ka mor'a ho hlaphoheloa.
- Lilaebrari tsa NSS ha li sa tšehetsa linotlolo tsa RSA tse nyane ho feta 1023 bits.
- Nako eo e e nkang bakeng sa ts'ebeliso ea iptables-save ho boloka li-iptable tse kholo haholo tsa melao e fokotsehile haholo.
- Mokhoa oa ts'ireletso khahlano le litlhaselo tsa SSBD (spec_store_bypass_disable) le STIBP (spectre_v2_user) li tlositsoe ho "seccomp" ho ea "prctl", e nang le phello e ntle ts'ebetsong ea lijana le lits'ebetso tse sebelisang mochini oa seccomp ho thibela phihlello ea mehala ea sistimi.
- Mokhanni oa li-adapter tsa Intel E800 Ethernet o tšehetsa liprothokholo tsa iWARP le RoCE.
- Ho kenyelelitsoe sesebelisoa se bitsoang nfsrahead se ka sebelisoang ho fetola litlhophiso tsa ho bala pele ho NFS.
- Litlhophisong tsa Apache httpd, boleng ba parameter ea LimitRequestBody bo fetotsoe ho tloha ho 0 (ha ho na meeli) ho ea ho 1 GB.
- Ho kentsoe sephutheloana se secha, sa morao-rao, se kenyelletsang mofuta oa morao-rao oa sesebelisoa sa make.
- Ts'ehetso e ekelitsoeng bakeng sa tlhahlobo ea ts'ebetso lits'ebetsong tse nang le li-processor tsa AMD Zen 2 le Zen 3 ho libpfm le papi.
- SSSD (System Security Services Daemon) e ekelitse tšehetso bakeng sa likopo tsa caching SID (mohlala, licheke tsa GID / UID) ho RAM, e leng se entseng hore ho khonehe ho potlakisa ts'ebetso ea ho kopitsa palo e kholo ea lifaele ka seva sa Samba. Tšehetso ea ho kopanya le Windows Server 2022 e fanoe.
- Liphutheloana tse nang le tšehetso bakeng sa API ea litšoantšo tsa Vulkan li kentsoe bakeng sa litsamaiso tsa 64-bit IBM POWER (ppc64le).
- Ts'ehetso bakeng sa li-GPU tse ncha tsa AMD Radeon RX 6[345]00 le AMD Ryzen 5/7/9 6[689]00 li kentsoe tšebetsong. Tšehetso bakeng sa Intel Alder Lake-S le Alder Lake-P GPUs e nolofalitsoe ke kamehla, eo pele ho neng ho hlokahala ho seta parameter i915.alpha_support=1 kapa i915.force_probe=*.
- Tšehetso ea ho theha li-cryptopolicies e kenyelelitsoe ho web console, bokhoni ba ho khoasolla le ho kenya RHEL ka mochine oa sebele bo fanoe, ho kentsoe konopo bakeng sa ho kenya li-patches feela bakeng sa kernel ea Linux, litlaleho tsa tlhahlobo li atolositsoe, 'me ho kentsoe khetho ea ho qala bocha kamora hore ho kengoa liapdeite ho phethetsoe.
- Ts'ehetso e ekelitsoeng bakeng sa taelo ea ap-check ho mdevctl ho hlophisa phihlello ea ho fetisetsa li-accelerator tsa crypto ho mechini e fumanehang.
- Ts'ehetso e felletseng ea li-extensions tsa VMware ESXi hypervisor le SEV-ES (AMD Secure Encrypted Virtualization-Encrypted State) e kentsoe tšebetsong. Ts'ehetso e ekelitsoeng bakeng sa tikoloho ea leru la Azure e nang le li-processor tse thehiloeng ho meralo ea Ampere Altra.
- Letlapa la lisebelisoa bakeng sa ho laola lijana tse ka thoko li nchafalitsoe, ho kenyeletsoa liphutheloana tse kang Podman, Buildah, Skopeo, crun le runc. Tšehetso e ekelitsoeng bakeng sa GitLab Runner ka lijaneng tse nang le Podman ea nako ea ho sebetsa. Ho lokisa subsystem network network, sesebelisoa sa netavark le seva sa Aardvark DNS se fanoa.
- Ho laola kenyelletso ea ts'ireletso khahlano le bofokoli mochining oa MMIO (Memory Mapped Input Output), kernel boot parameter "mmio_stale_data" e kengoa ts'ebetsong, e ka nkang boleng "ka botlalo" (ho nolofalletsa ho hloekisa li-buffers ha u fallela sebakeng sa mosebelisi le ho VM), "full,nosmt" (e le "full" + e boetse e tima SMT/Hyper-Threads) le "off" (ts'ireletso e holofetse).
- Ho laola ho kenngoa ha tšireletso khahlanong le ts'oaetso ea Retbleed, parameter ea kernel boot "retbleed" e kentsoe ts'ebetsong, eo ka eona u ka thibelang tšireletso ("off") kapa khetha algorithm ea ho thibela ts'oaetso (auto, nosmt, ibpb, unret).
- The acpi_sleep kernel boot parameter hona joale e tšehetsa mekhoa e mecha ea ho laola mokhoa oa ho robala: s3_bios, s3_mode, s3_beep, s4_hwsig, s4_nohwsig, old_ordering, nonvs, sci_force_enable, le nobl.
- E kenyellelitse bakhanni ba bacha ba Maxlinear Ethernet GPY (mxl-gpy), Realtek 802.11ax 8852A (rtw89_8852a), Realtek 802.11ax 8852AE (rtw89_8852ae), Modem Host Interface (MHI), AMDs Host Interface (MHI), DSPR Passdhrugic DRM DisplayPort (drm_dp_helper), Intel® Software Defined Silicon (intel_sdsi), Intel PMT (pmt_*), AMD SPI Master Controller (spi-amd).
- Tšehetso e atolositsoeng bakeng sa tsamaiso ea kernel ea eBPF.
- E tsoela pele ho fana ka ts'ehetso ea liteko (Technology Preview) bakeng sa AF_XDP, XDP offloading hardware, Multipath TCP (MPTCP), MPLS (Multi-protocol Label Switching), DSA (data streaming accelerator), KTLS, dracut, kexec fast reboot, nispor, DAX in ext4 le xfs, systemd-resolved, accel-config, igc, OverlayFS, Stratis, Software Guard Extensions (SGX), NVMe/TCP, DNSSEC, GNOME ho litsamaiso tsa ARM64 le IBM Z, AMD SEV bakeng sa KVM, Intel vGPU, Toolbox.
Source: opennet.ru