Ho lokolloa ha FreeBSD 13.1

Kamora selemo sa nts'etsopele, FreeBSD 13.1 e ile ea lokolloa. Litšoantšo tsa ho kenya li teng bakeng sa meralo ea amd64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv6, armv7, aarch64 le riscv64. Ho feta moo, likopano li lokiselitsoe lits'ebetso tsa virtualization (QCOW2, VHD, VMDK, e tala) le libaka tsa maru Amazon EC2, Google Compute Engine le Vagrant.

Khatisong e ncha:

• Ho hlahisitsoe mokhanni oa iwlwifi bakeng sa likarete tsa Intel tse se nang mohala tse nang le tšehetso bakeng sa lichifi tse ncha le maemo a 802.11ac. Mokhanni o ipapisitse le mokhanni oa Linux le khoutu e tsoang ho net80211 Linux subsystem, e sebetsang ho FreeBSD e sebelisa lera la linuxkpi.
• Ts'ebetso ea sistimi ea faele ea ZFS e ntlafalitsoe ho lokolloa ha OpenZFS 2.1 ka ts'ehetso ea theknoloji ea dRAID (Distributed Spare RAID) le ntlafatso ea ts'ebetso ea bohlokoa.
• Ho kentsoe rc script zfkeys e ncha, eo ka eona u ka hlophisang ho hlakoloa ka mokhoa o ikhethileng oa likarolo tsa ZFS tse kentsoeng sethaleng sa boot.
• Mokokotlo oa marang-rang o fetotse boitšoaro ba liaterese tsa IPv4 tse nang le nomoro ea zero e latelang (xxx0), e seng e ka sebelisoa e le moamoheli 'me e sa phatlalatsoe ka mokhoa oa kamehla. Boitšoaro ba khale bo ka khutlisoa ho sebelisoa sysctl net.inet.ip.broadcast_lowest.
• Bakeng sa meralo ea 64-bit, ho aha sistimi ea motheo ho sebelisa mokhoa oa PIE (Position Independent Executable) ho lumelloa ka ho sa feleng. Ho tima, ho fanoe ka litlhophiso tsa WITHOUT_PIE.
• E kentse bokhoni ba ho letsetsa chroot ka ts'ebetso e sa nepahalang ka sete ea lifolakha tsa NO_NEW_PRIVS. Mokhoa o lumelloa ho sebelisa sysctl security.bsd.unprivileged_chroot. Khetho ea "-n" e kentsoe ts'ebelisong ea chroot, e behang NO_NEW_PRIVS folakha bakeng sa ts'ebetso pele e e arola.
• Mokhoa oa ho fetola likarolo tsa disk o kenyelelitsoe ho bsdinstall installer, e leng se u lumellang hore u hokahane le mangolo a karohano a sebetsang ntle le ts'ebetso ea mosebedisi bakeng sa mabitso a fapaneng a disk. Karolo e reriloeng e nolofatsa ho theoa ha mecha ea phatlalatso ea ho kenya ka mokhoa o ikemetseng bakeng sa litsamaiso le mechini e nang le li-disk tse fapaneng.
• Ts'ehetso e ntlafalitsoeng ea boot ho litsamaiso tsa UEFI. Bootloader e thusa ho itlhophisa ka mokhoa o itekanetseng oa parameter ea copy_staging ho itšetlehile ka bokhoni ba kernel e laetsoeng.
• Mosebetsi o entsoe ho ntlafatsa ts'ebetso ea bootloader, nvme, rtsold, ho qala jenereithara ea pseudo-random nomoro le ho lekanya nako, e leng se lebisitseng ho fokotseheng ha nako ea boot.
• Tšehetso e ekelitsoeng bakeng sa NFS holim'a mocha oa puisano o patiloeng o thehiloeng ho TLS 1.3. Ts'ebetsong e ncha e sebelisa stack ea TLS e fanoeng ke kernel ho thusa ho potlakisa hardware. E aha lits'ebetso tsa rpc.tlsclntd le rpc.tlsservd ka moreki oa NFS-over-TLS le ts'ebetsong ea seva, e nolofalitsoeng ke kamehla bakeng sa meralo ea amd64 le arm64.
• Bakeng sa NFSv4.1 le 4.2, khetho ea nconnect mount e kentsoe ts'ebetsong, e khethollang palo ea likhokahano tsa TCP tse thehiloeng le seva. Khokahano ea pele e sebelisoa bakeng sa melaetsa e nyane ea RPC, 'me e meng kaofela e sebelisetsoa ho leka-lekanya sephethephethe le data e fetisitsoeng.
• Bakeng sa seva sa NFS, sysctl vfs.nfsd.srvmaxio e kenyelelitsoe, e leng se u lumellang hore u fetole boholo ba I / O block size (ka ho feletseng 128Kb).
• Tšehetso ea hardware e ntlafetseng. Ts'ehetso bakeng sa molaoli oa Intel I225 Ethernet e kentsoe ho mokhanni oa igc. Ts'ehetso e ntlafalitsoeng bakeng sa litsamaiso tsa Big-endian. E kentse mokhanni oa mgb bakeng sa lisebelisoa tsa Microchip LAN7430 PCIe Gigabit Ethernet Ethernet controller
• Mokhanni oa leqhoa o sebelisoang bakeng sa balaoli ba Intel E800 Ethernet o nchafalitsoe ho mofuta oa 1.34.2-k, oo hona joale o kenyelletsang ts'ehetso bakeng sa ho bonahatsa liketsahalo tsa firmware ho log log ea tsamaiso le ts'ebetsong ea pele ea li-protocol tsa DCB (Data center bridging) tse ekelitsoeng.
• Lits'oants'o tsa Amazon EC2 li nolofalloa ka ho sa feleng ho sebelisa UEFI sebakeng sa BIOS.
• The hyve hypervisor e ntlafalitse likarolo tsa ho etsisa li-drive tsa NVMe ho ts'ehetsa litlhaloso tsa NVMe 1.4. Ho rarolla mathata ka NVMe iovec nakong ea I/O e matla.
• Laeborari ea CAM e fetotsoe ho sebelisa mohala oa 'nete ha o sebetsana le mabitso a sesebelisoa, e lumellang likhokahano tsa tšoantšetso ho lisebelisoa hore li sebelisoe lits'ebetsong tsa camcontrol le smartctl. camcontrol e rarolla mathata ka ho jarolla firmware ho lisebelisoa.
• Sesebelisoa sa svnlite se emisitse ho haha ​​​​mokhoa oa motheo.
• Liphetolelo tse ekelitsoeng tsa Linux tsa lisebelisoa bakeng sa ho bala li-checksums (md5sum, sha1sum, joalo-joalo) tse kentsoeng tšebetsong ka ho letsetsa lits'ebeletso tse teng tsa BSD (md5, sha1, joalo-joalo) ka khetho ea "-r".
• Tšehetso bakeng sa tsamaiso ea NCQ e kenyelelitsoe ts'ebelisong ea mpsutil mme tlhahisoleseding e mabapi le adaptara e bontšitsoe.
• Ho /etc/defaults/rc.conf, ka ho sa feleng, khetho ea "-i" e nolofalitsoe ha u letsetsa mekhoa ea rtsol le rtsold, e nang le boikarabelo ba ho romela melaetsa ea ICMPv6 RS (Router Solicitation). Khetho ena e tima tieho e sa reroang pele o romella molaetsa.
• Bakeng sa meralo ea meralo ea riscv64 le riscv64sf, moaho oa lilaeborari tse nang le ASAN (address sanitizer), UBSAN (Undefined Behavior Sanitizer), OpenMP le OFED (Open Fabrics Enterprise Distribution) e lumelletsoe.
• Mathata a ho khetholla mekhoa ea ho potlakisa lisebelisoa tsa "cryptographic" tse tšehetsoeng ke li-processor tsa ARMv7 le ARM64 a rarollotsoe, e leng se potlakisang ts'ebetso ea aes-256-gcm le sha256 algorithms tsamaisong ea ARM.
• Bakeng sa meralo ea powerpc, sephutheloana sa mantlha se kenyelletsa LLDB debugger, e ntlafalitsoeng ke morero oa LLVM.
• Laeborari ea OpenSSL e ntlafalitsoe hore e be mofuta oa 1.1.1o 'me ea atolosoa ka lintlafatso tsa kopano bakeng sa meaho ea powerpc, powerpc64 le powerpc64le.
• Seva ea SSH le moreki li nchafalitsoe ho OpenSSH 8.8p1 ka ts'ehetso ea li-signature tsa rsa-sha tsa dijithale tse holofetseng le ts'ehetso ea netefatso ea lintlha tse peli ho sebelisoa lisebelisoa tse thehiloeng ho protocol ea FIDO/U2F. Ho sebelisana le lisebelisoa tsa FIDO/U2F, mefuta e mecha ea "ecdsa-sk" le "ed25519-sk" e kenyelitsoe, e sebelisang ECDSA le Ed25519 digital signature algorithms, e kopantsoe le SHA-256 hash.
• Liphetolelo tse ntlafalitsoeng tsa lits'ebetso tsa motho oa boraro tse kenyellelitsoeng tsamaisong ea motheo: awk 20210215 (e nang le li-patches tse thibelang tšebeliso ea libaka bakeng sa mekhahlelo le ho ntlafatsa ho lumellana le gawk le mawk), zlib 1.2.12, libarchive 3.6.0.

Source: opennet.ru