Unikezelo lwe-SUSE Linux Enterprise 15 SP4 luyafumaneka

Emva konyaka wophuhliso, i-SUSE ibonise ukukhutshwa kwe-SUSE Linux Enterprise 15 SP4 ukuhanjiswa. Ngokusekwe kwiqonga loShishino lwe-SUSE Linux, iimveliso ezinje nge-SUSE Linux Enterprise Server, i-SUSE Linux Enterprise Desktop, uMphathi we-SUSE kunye ne-SUSE Linux Enterprise High Performance Computing ziyasekwa. Ukuhanjiswa kukhululekile ukukhuphela kunye nokusetyenziswa, kodwa ukufikelela kuhlaziyo kunye neepatches kunqunyelwe kwixesha le-60 leentsuku zesilingo. Ukukhutshwa kufumaneka kwizakhiwo ze-aarch64, ppc64le, s390x kunye ne-x86_64 izakhiwo.

IShishini le-SUSE Linux Enterprise 15 SP4 lixhasa ukuhambelana okupheleleyo kwepakethe yokubini kunye nosasazo oluphuhlisiweyo lwe-openSUSE Leap 15.4, olucwangciselwe ukukhutshwa ngomso. Umgangatho ophezulu wokuhambelana waphunyezwa ngenxa yokusetyenziswa kwi-openSUSE yeseti enye yeepakethe zokubini kunye ne-SUSE Linux Enterprise, endaweni yokwakhiwa kwakhona kweepakethe ze-src. Kulindeleke ukuba abasebenzisi baqale bakhe kwaye bavavanye isisombululo sokusebenza besebenzisa i-openSUSE, kwaye batshintshe ngokungenamthungo kwinguqu yezorhwebo ye-SUSE Linux ngenkxaso epheleleyo, i-SLA, isatifikethi, ukukhutshwa kwexesha elide kunye nezixhobo eziphambili zokwamkelwa kobuninzi.

Utshintsho oluphambili:

  • I-Linux kernel ihlaziywe ukukhulula i-5.14.
  • Ubume beDesktop buhlaziywe ukuba bube yi-GNOME 41 kunye ne-GTK4. Ubonelele ngesakhono sokusebenzisa iseshoni yedesktop esekwe kwiprothokholi ye-Wayland kwiindawo ezinabaqhubi be-NVIDIA yobunini.
  • Iseva yeendaba eyongeziweyo yePipewire, okwangoku isetyenziselwa ukubonelela ngokwabelana ngesikrini kwiindawo ezise-Wayland. Ngomsindo, iPulseAudio iyaqhubeka kusetyenziswa.
  • Iiphakheji ze-Python 2 zisusiwe, zishiya kuphela iphakheji ye-python3.
  • Iinguqulelo ezihlaziyiweyo ze-PHP 8, i-OpenJDK 17, i-Python 3.10, i-MariaDB 10.6, i-PostgreSQL 14, i-Apparmor 3.0, i-Samba 4.15, i-OpenSSL 3.0.1, i-systemd 249, i-QEMU 6.2, i-Xen 4.16, i-libvirt 0.8.0-mana.
  • Ukukwazi ukusebenzisa iipetshi eziphilayo ukuhlaziya amacandelo esithuba somsebenzisi kubhabho, njenge-Glibc kunye ne-OpenSSL, kuphunyeziwe. Iipetshi zisetyenziswa ngaphandle kweenkqubo zokuqalisa kwakhona, kusetyenziswa iipetshi kwiilayibrari ezikwimemori.
  • Imifanekiso ye-JeOS (ulwakhiwo oluncinci lwe-SUSE Linux Enterprise kwiinkqubo zokubona) iye yabizwa ngokuba yiMinimal-VM.
  • Ihlangabezana neemfuno zeNqanaba lesi-4 le-SLSA ukukhusela kutshintsho olubi ngexesha lophuhliso. Ukuqinisekisa izicelo kunye nemifanekiso yesikhongozeli usebenzisa iisignesha zedijithali, inkonzo yeSigstore isetyenziswa, egcina i-log yoluntu ukuze iqinisekise ubunyani (i-log transparency).
  • Kunikezelwe ngenkxaso yokulawula iiseva eziqhuba iSUSE Linux Enterprise kusetyenziswa inkqubo yolawulo loqwalaselo olusembindini weTyuwa.
  • Inkxaso yovavanyo eyongeziweyo ye-schedutil (irhuluneli ye-cpufreq) yolawulo lwenkqubo yokuphindaphinda, esebenzisa ngokuthe ngqo ulwazi oluvela kumcwangcisi womsebenzi ukwenza isigqibo malunga nokutshintsha i-frequency kwaye inokufikelela ngokukhawuleza kubaqhubi be-cpufreq ukuba batshintshe ngokukhawuleza ukuphindaphinda, ukulungelelanisa ngoko nangoko iiparamitha zokusebenza ze-CPU. kumthwalo wangoku.
  • Ubuchule bokulinga ukucacisa ubume be-SMBIOS Management Controller Host Interface kwaye uqwalasele i-Host Network Interface kwi-BMC usebenzisa i-Redfish phezu kwe-IP protocol yongezwe kumnatha womnatha okhohlakeleyo osetyenziswa kwi-SLES, ekuvumela ukuba usebenzise inkonzo ye-Redfish kulawulo lwenkqubo ekude. .
  • Inkxaso yeqonga lemizobo ye-Intel Alderlake iye yasiwa kumqhubi we-i915. Kwiinkqubo ze-ARM, umqhubi we-etnaviv ubandakanyiwe kwi-Vivante GPUs esetyenziswe kwii-ARM ezahlukeneyo ze-ARM, ezifana ne-NXP Layerscape LS1028A/LS1018A kunye ne-NXP i.MX 8M, kunye nelayibrari etnaviv_dri ye-Mesa.
  • Kuyenzeka ukuba uvule imo yeXesha lokwenyani kwikernel kwiinkqubo zexesha lokwenyani ngokuseta i-preempt=ipharamitha epheleleyo xa ulayisha i-SUSE Linux kernel eqhelekileyo. Iphakheji eyahlukileyo ye-kernel-preempt isusiwe kunikezelo.
  • Kwi-kernel, ngokungagqibekanga, ukukwazi ukuqhuba iinkqubo ze-eBPF ngabasebenzisi abangafanelekanga kuvaliwe (iparameter / proc/sys/kernel/unprivileged_bpf_disabled iseti) ngenxa yeengozi zokusebenzisa i-eBPF ukuhlasela inkqubo. Inkxaso ye-BTF (iFomathi yoHlobo lwe-BPF) iphunyeziwe, ibonelela ngolwazi lokujonga iindidi kwi-BPF pseudocode. Izixhobo ze-BPF ezihlaziyiweyo (libbpf, bcc). Inkxaso eyongeziweyo ye-bpftrace yokukhangela indlela.
  • Ngoku kuyenzeka ukuba usebenzise amaphepha enkumbulo angama-64K kwi-Btrfs xa usebenza ngenkqubo yefayile efomathiweyo ngobungakanani bebhloko obuncinci kunobungakanani bephepha lenkumbulo ye-kernel (umzekelo, iinkqubo zefayile ezineebhloko ze-4KB ngoku zingasetyenziswa kungekuphela kwiinkozo ezinobungakanani obufanayo. yamaphepha enkumbulo).
  • I-kernel ibandakanya inkxaso ye-SVA (iNtetho yeNtengiso eKwabelwana ngayo) yokwabelana ngeedilesi ezibonakalayo phakathi kwe-CPU kunye nezixhobo ze-peripheral, ezivumela ii-accelerator ze-hardware ukufikelela kwizakhiwo zedatha kwi-CPU engundoqo.
  • Inkxaso ephuculweyo ye-NVMe drives kwaye yongeza ukukwazi ukusebenzisa iimpawu eziphambili ezifana ne-CDC (i-Centralized Discovery Controller). Iphakheji ye-nvme-cli ihlaziywe kwinguqulo ye-2.0. Iiphakheji ezintsha ze-libnvme 1.0 kunye ne-nvme-stas 1.0 zongeziwe.
  • Inkxaso esemthethweni inikezelwe ngokubeka i-swap kwisixhobo sebhloko se-zRAM, esiqinisekisa ukuba idatha igcinwe kwi-RAM kwifom ecinezelweyo.
  • Inkxaso eyongeziweyo ye-NVIDIA vGPU 12 kunye ne-13.
  • Endaweni yabaqhubi be-fbdev abasetyenziselwa imveliso nge-Framebuffer, umqhubi we-universal simpledrm uyacetywa ukuba asebenzise i-EFI-GOP okanye i-VESA framebuffer enikezwe yi-UEFI firmware okanye i-BIOS yemveliso.
  • Ukwakhiwa kuquka ilayibrari ye-OpenSSL 3.0 ye-cryptographic, ukongeza kuguqulelo lwe-OpenSSL 1.1.1 olusetyenziswa kwiinkqubo zokusebenza.
  • I-YaST iphucule ukuqalela kwiidrive zenethiwekhi eziqwalaselweyo kusetyenziswa "_netdev" ukhetho.
  • Isitaki seBluetooth seBlueZ sihlaziywe kwinguqulo 5.62. Iphakheji ye-pulseaudio yongeza i-codecs yomsindo ophezulu weBluetooth.
  • Uguqulo oluzenzekelayo lwe-System V ye-init.d lwezikripthi kwiinkonzo zesistim usebenzisa i-systemd-sysv-generator. Kwisebe elilandelayo elikhulu le-SUSE, inkxaso yezikripti ze-init.d iya kulahlwa ngokupheleleyo kwaye uguqulelo luya kuvalwa.
  • Iindibano ze-ARM zandise uluhlu lwee-ARM ze-SoCs ezixhaswayo.
  • Inkxaso eyongeziweyo yeteknoloji ye-AMD SEV, ethi kwinqanaba le-hardware libonelela ngoguqulelo oluselubala lwememori yomatshini (kuphela inkqubo yeendwendwe yangoku inokufikelela kwidatha efihliweyo, ngelixa abanye oomatshini benyani kunye ne-hypervisor bafumana iseti efihliweyo yedatha xa bezama ukufikelela koku. inkumbulo).
  • Umncedisi we-NTP we-chrony uquka inkxaso yexesha elichanekileyo longqamaniso olusekwe kwi-NTS (i-Network Time Security) protocol, esebenzisa izakhi zesiseko esingundoqo sikawonke-wonke (PKI) kwaye ivumela ukusetyenziswa kwe-TLS kunye ne-encryption eqinisekisiweyo ye-AEAD (Ufihlo oluQinisekisiweyo ngeDatha eManyanisiweyo) ukuze khusela ngokufihlakeleyo unxibelelwano phakathi komxhasi kunye nomncedisi nge-NTP (iProtokholi yeXesha leNethiwekhi).
  • 389 Iseva kavimba weefayili isetyenziswa njengeseva engundoqo ye-LDAP. Iseva ye-OpenLDAP iyekisiwe.
  • I-Toolkit yokusebenza ngezikhongozeli ze-LXC (i-libvirt-lxc kunye ne-virt-sandbox) isusiwe.
  • Uguqulelo olutsha oluncinci lwe-BCI (Base Container Image) lucetyiwe, oluthumela iphakheji yebhokisi exakekileyo endaweni ye-bash kunye ne-coreutils. Umfanekiso uyilelwe ukuba usetyenziswe ukuqhuba izicelo ezakhelwe kwangaphambili nazo zonke izinto ezixhomekeke kwisikhongozeli. Kongezwe izitya ze-BCI zeRust kunye neRuby.

umthombo: opennet.ru

Yongeza izimvo