Debian 10 "Buster" ukukhululwa

Emva kweminyaka emibini yophuhliso yathatha indawo ukukhulula I-Debian GNU / Linux 10.0 (I-Buster), ekhoyo kwabalishumi abaxhaswa ngokusemthethweni izakhiwo: Intel IA-32/x86 (i686), AMD64 / x86-64, ARM EABI (armel), 64-bit ARM (arm64), ARMv7 (armhf), MIPS (mips, mipsel, mips64el), PowerPC 64 (ppc64el) kunye ne-IBM System z (s390x). Uhlaziyo lwe-Debian 10 luya kukhutshwa kwithuba leminyaka emi-5.

Indawo yokugcina iqulethe i-57703 iipakethi zebhinari, ezimalunga ne-6 yamawaka ngaphezu kwe-Debian 9. Xa kuthelekiswa ne-Debian 9, i-13370 iipakethi ezintsha ze-binary zongeziweyo, i-7278 (13%) iipakethi eziphelelwe yisikhathi okanye ezishiyiweyo zisusiwe, 35532 (62) %) iipakethe zihlaziyiwe . Kwi-91.5% yeepakethe ikhuselekile inkxaso yolwakhiwo oluphinda-phindayo, olukuvumela ukuba uqinisekise ukuba ifayile ephunyeziweyo yakhiwe ngokuthe ngqo ukusuka kwiikhowudi zemvelaphi echaziweyo kwaye ayiqulathanga utshintsho olungaphandle, ukutshintshwa kwayo, umzekelo, kunokwenziwa ngokuhlaselwa kwesiseko sendibano okanye amanqaku encwadi kumqokeleli. .

kuba Ukhuphelo iyafumaneka Imifanekiso yeDVD enokukhutshelwa kuyo HTTP, ijigdo okanye BitTorrent. Kwakhona yenziwe Umfanekiso wofakelo olungekho semthethweni olubandakanya i-firmware yobunini. Yenzelwe i-amd64 kunye ne-i386 yezakhiwo I-USB ephilayo, ekhoyo kwi-GNOME, KDE kunye ne-Xfce flavour, kunye ne-multi-arch DVD edibanisa iipakethe zeqonga le-amd64 kunye neepakethe ezongezelelweyo ze-i386 architecture. Inkxaso eyongeziweyo yemifanekiso ekhutshelwe kwinethiwekhi (netboot) yamakhadi e-SD kunye nemifanekiso ehambelana ne-16 GB USB Flash;

Isitshixo utshintsho kwiDebian 10.0:

• Iphunyeziwe inkxaso ye UEFI Secure Boot, esebenzisa isilayishi se Shim, eqinisekisiweyo ngotyikityo lwedijithali olusuka kuMicrosoft (esayiniwe yi-shim), kudityaniswe nesiqinisekiso segrub kernel kunye nesilayishi sokuqala (grub-efi-amd64-esayiniwe) yeprojekthi isatifikethi (i-shim isebenza njengomaleko wonikezelo ukusebenzisa izitshixo zayo). Iiphakheji ezisayiniweyo ze-shim kunye ne-grub-efi-ARCH zibandakanyiwe njengokuxhomekeka kokwakhiwa kwe-amd64, i386 kunye ne-arm64. I-bootloader kunye ne-grub, eqinisekisiwe ngesatifikethi sokusebenza, ifakwe kwimifanekiso ye-EFI ye-amd64, i386 kunye ne-arm64. Masikhumbule ukuba inkxaso ye-Boot eKhuselekileyo yayilindeleke ekuqaleni kwi-Debian 9, kodwa ayizange izinzile ngaphambi kokukhululwa kwaye yahlehliswa kude kube ngukukhululwa okukhulu kokusasazwa;
• Yenziwe ngokungagqibekanga yinkxaso yenkqubo yolawulo lofikelelo olusisinyanzelo lwe-AppArmor, ekuvumela ukuba ulawule amagunya eenkqubo ngokuchaza uluhlu lweefayile ezinamalungelo afanelekileyo (ukufunda, ukubhala, imephu yememori kwaye uqhube, ukucwangcisa ifayile yokuvala, njl. njl.) isicelo, kunye nolawulo lofikelelo kumsebenzi womnatha (umzekelo, ukuthintela ukusetyenziswa kwe ICMP) kwaye ulawule ubunakho bePOSIX. Umahluko omkhulu phakathi kwe-AppArmor kunye ne-SELinux kukuba i-SELinux isebenza kwiilebhile ezinxulumene nento, ngelixa i-AppArmor imisela iimvume ezisekelwe kwindlela yefayile, eyenza lula kakhulu inkqubo yoqwalaselo. Iphakheji ephambili ene-AppArmor ibonelela ngeeprofayile zokhuseleko kwezinye izicelo kuphela, kwaye kuzo zonke ezinye kufuneka usebenzise i-apparmor-profiles-iphakheji eyongezelelweyo okanye iiprofayili ezivela kwiipakethi ezithile zesicelo;
• Kutshintshwe ii-iptables, ii-ip6tables, ii-arptables kunye nee-ebtables weza icebo lokucoca ipakethe ye-nftables, ngoku engagqibekanga kwaye iphawuleka ekuhlanganiseni ujongano lokucoca ipakethe ye-IPv4, IPv6, ARP kunye neebhulorho zenethiwekhi. I-Nftables inikezela kuphela i-generic, i-interface-ezimeleyo ye-protocol kwinqanaba le-kernel elibonelela ngemisebenzi eyisiseko yokukhupha idatha kwiipakethi, ukwenza imisebenzi yedatha, kunye nokulawula ukuhamba. Ingqiqo yokucoca ngokwayo kunye nabaphathi abathile beprotocol bahlanganiswe kwi-bytecode kwindawo yomsebenzisi, emva koko le bytecode ilayishwe kwi-kernel isebenzisa ujongano lwe-Netlink kwaye iqhutywe kumatshini okhethekileyo okhumbuza i-BPF (i-Berkeley Packet Filters);

  Ngokungagqibekanga, iphakheji ye-iptables-nft ifakiwe, enika isethi yezixhobo zokuqinisekisa ukuhambelana ne-iptables, ene-syntax yomgca womyalelo ofanayo, kodwa ukuguqulela imigaqo ebangelwa yi-nf_tables bytecode, eyenziwa kumatshini obonakalayo. Iphakheji ye-iptables-legacy ifumaneka ngokukhetha ukufakela, kuquka ufezekiso oludala olusekwe kwi-x_tables. Ii-iptables eziphunyeziweyo ngoku zifakwe kwi/usr/sbin kune/sbin (ii-symlink zenzelwe ukuhambelana);

• Kwi-APT, imowudi yokwahlula yebhokisi yesanti iphunyeziwe, eyenziwe nge-APT::Sandbox::Inketho yeSeccomp kunye nokubonelela ngokucoca iminxeba yenkqubo usebenzisa i-seccomp-BPF. Ukulungisa kakuhle uluhlu olumhlophe nolumnyama lweefowuni zesixokelelwano, ungasebenzisa uluhlu APT::Sandbox::Seccomp::Trap kunye neAPT::Sandbox::Seccomp::Vumela;
• I-Linux kernel ihlaziywe kwinguqulo ye-4.19;
• I-desktop ye-GNOME itshintshelwe kwi-Wayland ngokungagqibekanga, kwaye iseshoni esekwe kwiseva ye-X inikezelwa njengokhetho (i-X server isaqukwa njengenxalenye yephakheji yesiseko). Ukupakishwa kwemizobo ehlaziyiweyo kunye nokusingqongileyo komsebenzisi: GNOME 3.30, KDE Plasma 5.14, ICinnamon 3.8, LXDE 0.99.2, I-LXQt 0.14, MATE 1.20, kunye neXfce 4.12. I-ofisi suite LibreOffice ihlaziywe ukukhulula 6.1, kunye neCalligra ngaphambi kokukhululwa 3.1. Ukuhlaziywa kwe-Evolution 3.30, i-GIMP 2.10.8, i-Inkscape 0.92.4, i-Vim 8.1;
• Ukuhanjiswa kubandakanya umqokeleli wolwimi lweRust (Rustc 1.34 inikezelwa). Ukuhlaziywa kwe-GCC 8.3, LLVM/Clang 7.0.1, OpenJDK 11, Perl 5.28, PHP 7.3, Python 3.7.2;
• Izicelo zeseva zihlaziyiwe, kuquka i-Apache httpd 2.4.38, BIND 9.11, Dovecot 2.3.4, Exim 4.92, Postfix 3.3.2, MariaDB 10.3, nginx 1.14, PostgreSQL 11, Samba 4.9 (SMBv3 support) inikwe kwinkxaso
• Kwi-cryptsetup iphunyeziwe ukutshintshela kwi-LUKS2 ifomathi ye-encryption disk (ngaphambili i-LUKS1 yayisetyenziswa). I-LUKS2 ihlukaniswe yinkqubo yokulawula engundoqo elula, ukukwazi ukusebenzisa amacandelo amakhulu (4096 endaweni ye-512, inciphisa umthwalo ngexesha lokuchithwa kwe-decryption), izichasi zokwahlula okungokomfanekiso (iileyibhile) kunye nezixhobo zokugcina i-metadata kunye nokukwazi ukuzibuyisela ngokuzenzekelayo kwikopi ukuba umonakalo ubhaqwe. Inkqubo yokuphucula iya kuguqula ngokuzenzekelayo amacandelo e-LUKS1 akhoyo kwifomathi ehambelanayo ye-LUKS2, kodwa ngenxa yokunciphisa ubukhulu beentloko, azikho zonke iimpawu ezintsha eziya kufumaneka kubo;
• Umfaki wongeze amandla okusebenzisa ii-consoles ezininzi ngaxeshanye ngexesha lokufakwa kwenkqubo. Inkxaso yeReiserFS isusiwe. Inkxaso eyongeziweyo yoxinzelelo lwe-ZSTD (libzstd) yee-Btrfs. Inkxaso eyongeziweyo yezixhobo zeNVMe;
• Kwi-debootstrap, ukhetho "--merged-usr" lwenziwe ngokungagqibekanga, apho zonke iifayile eziphunyeziweyo kunye namathala eencwadi asuka kubalawuli beengcambu zisiwa kwi /usr isahlulelo (i/bin, /sbin kunye /lib* abalawuli bayilwe njenge. amakhonkco omfuziselo kubalawuli abahambelanayo ngaphakathi/usr) . Utshintsho lusebenza kuphela kufakelo olutsha, ugcino oludala lolawulo lugcinwa ngexesha lenkqubo yohlaziyo;
• Kwiphakeji yokuphucula okungaqwalaselwanga, ngaphezu kokufaka ngokuzenzekelayo uhlaziyo olunxulumene nokuphelisa ubuthathaka, ukuphuculwa kokukhutshwa okuphakathi (i-Debian 10.1, 10.2, njl.) ngoku kwakhona yenziwe ngokungagqibekanga;
• Amacandelo enkqubo yoshicilelo ahlaziywe ukuze IINDABA 2.2.10 kunye ne-cup-filters 1.21.6 kunye nenkxaso epheleleyo ye-AirPrint, i-DNS-SD (i-Bonjour) kunye ne-IPP Yonke indawo yokushicilela ngaphandle kokufaka kuqala abaqhubi;
• Inkxaso eyongeziweyo yeebhodi ezisekelwe kwi-Allwinner A64 processors, ezifana ne-FriendlyARM NanoPi A64, i-Olimex A64-OLinuXino, i-TERES-A64, i-PINE64 PINE A64/A64/A64-LTS, i-SOPINE, i-Pinebook, i-SINOVOIP Banana Pi BPI-Orange M64 kunye ne-Xin (Plus);
• Inani le-med-* metapackages ezixhaswa liqela le-Debian Med landisiwe, likuvumela ukuba ufake ukhetho lwenkquboezinxulumene nebhayoloji kunye namayeza;
• Inkxaso yeenkqubo zeendwendwe ze-Xen kwimodi ye-PVH inikwe;
• I-OpenSSL ayixhasi iiprothokholi ze-TLS 1.0 kunye ne-1.1, i-TLS 1.2 ibhengezwe njengolona guqulelo lusezantsi lwenkxaso;
• Iiphakheji ezininzi ezidlulileyo kunye nezingagcinwanga zisusiwe, kubandakanywa i-Qt 4 (kuphela i-Qt 5 kuphela eseleyo), i-phpmyadmin, i-ipsec-izixhobo, i-racoon, i-ssmtp, i-ecryptfs-utils, i-mcelog, isityhilelo. I-Debian 11 iya kuphelisa inkxaso yePython 2;
• Izibuko lenzelwe i-64-bit ye-RISC-V yokwakha, engaxhaswanga ngokusemthethweni kwi-Debian 10. Okwangoku, ye-RISC-Vzihlanganiswe ngempumelelo malunga ne-90% yenani elipheleleyo leephakheji;
• Isifakeli semodyuli esaphuhliswe ngokuzimeleyo saqala ukusetyenziswa kwiindawo eziphilileyo Calamares ngojongano olusekwe kwi-Qt, ekwasetyenziswa ukuququzela ufakelo lwe Manjaro, Sabayon, Chakra, NetRunner, KaOS, OpenMandriva kunye nonikezelo lwe neon ye KDE. Ulwakhiwo lofakelo oluqhelekileyo luyaqhubeka ukusebenzisa i-debian-installer.

  Ukongeza kwizinto ezikhoyo ngaphambili, indawo ephilayo kunye ne-desktop ye-LXQt kunye ne-Live environment ngaphandle kwe-graphical interface, kuphela ngezixhobo ze-console ezenza inkqubo yesiseko, zenziwe. I-console indawo ephilayo ingasetyenziselwa ukufakela ukusabalalisa ngokukhawuleza, kuba, ngokungafaniyo nemifanekiso yokufakela yendabuko, isilayi esele senziwe sabalawuli siyakopishwa, ngaphandle kokuvula iipakethe zomntu ngamnye usebenzisa i-dpkg.

umthombo: opennet.ru