I-FreeBSD 14.0 ikhupha

Emva kweminyaka emibini enesiqingatha ukususela ekupapashweni kwesebe le-13.0, ukukhululwa kwe-FreeBSD 14.0 kwenziwa. Imifanekiso yokufakela ilungiselelwe i-amd64, i386, i-powerpc, i-powerpc64, i-powerpc64le, i-powerpcspe, i-armv7, i-aarch64 kunye ne-riscv64 izakhiwo. Ukongezelela, iindibano zilungiselelwe iinkqubo ze-virtualization (QCOW2, VHD, VMDK, eluhlaza) kunye neendawo zefu Amazon EC2, Injini yeCompute yeGoogle kunye neVagrant. Isebe le-FreeBSD 14 liya kuba lelokugqibela ukuxhasa iiplatifomu ze-32-bit. I-FreeBSD 15 iya kuxhasa kuphela iinkqubo ze-64-bit, kodwa iya kugcina amandla okwakha iinkqubo ze-32-bit kwaye isebenzise imo ye-COMPAT_FREEBSD32 ukusebenzisa i-32-bit executables kwindawo ye-64-bit.

Utshintsho oluphambili:

• Iqokobhe elingagqibekanga lomsebenzisi oyingcambu ngu/bin/sh.
• Kwizixhobo ze-NVME, umqhubi we-nda wenziwa ngokungagqibekanga kuwo onke amaqonga. Ukubuyisela umqhubi wenvd endala, useto lwe-“hw.nvme.use_nvd=1” lunikiwe kwi-loader.conf.
• Into entsha "fwget" yongezwa echonga i-hardware efuna i-firmware kwaye ifake iipakethe ze-firmware ezifanelekileyo. Okwangoku kuphela izixhobo ze-PCI kunye ne-firmware ye-Intel kunye ne-AMD GPU ezixhaswayo.
• Kongezwe into entsha ye-base64 ye-encoding kunye ne-decoding base64 data.
• Yongeza into eluncedo yetcpsso, ekuvumela ukuba usete iinketho zesokethi zoqhagamshelo olukhoyo lwe-TCP (umzekelo, unokutshintsha imodyuli yolawulo lokuxinana okanye isitaki seTCP).
• I-arhente yonikezelo imeyile emiselweyo yi-dma (DragonFly Mail Agent) endaweni ye-sendmail. I-Sendmail igcinwe kwiphakheji esisiseko kwaye ihlaziywa kwinguqulo 8.17.1.
• I-KTLS, ukuphunyezwa kwe-kernel ye-FreeBSD yeprotocol ye-TLS, yongeza inkxaso ye-TLS 1.3 yokukhawuleza i-hardware kwicala lokufumana. Ukukhawuleza kuqinisekiswa ngokuhambisa eminye imisebenzi enxulumene nokusetyenzwa kweepakethi ezifihliweyo kwicala lekhadi lenethiwekhi.
• Umyalelo othi ".include" wongezwe kwifayile yokucwangcisa i-jail.conf, evumela ukuba ufake iifayile ezongezelelweyo xa ulayisha ulungelelwaniso, iindlela ezivumela ukusetyenziswa kweemaski. I-sysctl parameter security.bsd.see_jail_proc yandisiwe, ngoncedo apho abasebenzisi abangagunyaziswanga kwindawo yejele eyahlukileyo banokuthintelwa ngoku ukunyanzelisa ukupheliswa, ukutshintsha okuphambili, kunye neenkqubo zokulungisa.
• Iiprogram ze-pw kunye ne-bsdinstall ngoku zenza abasebenzisi kwi-/home directory ngokuzenzekelayo kunokuba / usr/home. Ikhonkco lokomfuziselo elithi "/ikhaya" elikhomba "/usr/home" alisadalwa.
• Ikhubazwe ngokungagqibekanga Ucwangciso lolwakhiwo lwePROFILE - iinguqulelo zeprofayile zenkqubo yethala leencwadi azisabonelelwanga, izixhobo zeprofayili yehardware (hwpmc) kufuneka zisetyenziswe endaweni yoko.
• Ukwakhiwa okunikwe amandla kweefayile eziphunyezwayo ze-64-bit yezakhiwo ze-PIE (Isikhundla esiSebenzisayo esiZimeleyo) indlela.
• Ukukwazi ukuqhubela phambili ukufikelela kwi-TPM (iModyuli yePlatform ethembekileyo) kunye ne-GPU (kwiindawo ezibonakalayo ze-AMD kunye ne-Intel chips) zongezwe kwi-hypervisor ye-Bhyve.
• Ukuphunyezwa kwenkqubo yefayile ye-ZFS ihlaziywe kukukhutshwa kwe-OpenZFS 2.2. Usetyenziso lwe-makefs longeze inkxaso yenkqubo yefayile yeZFS. Inika isakhono sokwenza ichibi le-ZFS elinxulunyaniswa nediski enye ye-vdev.
• Inani lee-CPU cores ezixhaswayo (i-MAXCPU ipharamitha) kwiinkqubo ezisekelwe kwi-amd256 kunye ne-arm1024 architecture iye yanda ukusuka kwi-64 ukuya kwi-64.
• Kwi-UFS, kuqwalaselo apho ukuloga (uhlaziyo oluthambileyo) kwenziwe, ujongo lwangasemva lwesixokelelwano sefayile luvumelekile kusetyenziswa ii-UFS snapshots. Iitshekhi ezongezelelweyo ze-hash zongezwe kwii-superblocks, iimephu zeqela le-cylinder, kunye nee-inodes zokubona urhwaphilizo.
• Yongeza inkqubo yefayile ye tarfs, enokusetyenziswa ngogcino lwetar olucinezelwe nge zstd.
• Yongeza isixhobo sezixhobo zokusebenza ukulandelela iziganeko ezenzeke ngexesha lokuqalisa kunye nokuvalwa kwendlela.
• Yongeza i-FIRECRACKER inketho yokumisela i-kernel ukuvumela i-FreeBSD ukuba iqhube kwi-Firecracker ye-virtualization system, eyenzelwe ukuqhuba oomatshini bokwenene kunye nentloko encinci. Ixesha le-FreeBSD 14 kernel boot time eqhuba i-Firecracker yonyusiwe ukuya kwi-25 millisecond, ikuvumela ukuba uqalise i-FreeBSD iimeko njengoko kufuneka ukuphumeza iziseko zekhompuyutha ezingenamncedisi.
• Umlayishi, obhalwe kwi-Lua, kwindawo ekhethekileyo yebhokisi yesanti, ixhasa ukuphunyezwa kweefayile ze-lua ezibekwe kwi-loader_conf_files directory.
• Inkxaso ye-NFS yandisiwe. Kongezwe ukhetho olutsha lokunyuka "syskrb5" ukuxhasa i-Kerberos kwi-NFSv 4.1 / 4.2, kunye nenkxaso eyongezelelweyo yokusebenza kwe-ExchangeID. Kuphunyezwe ukukwazi ukuqhuba i-nfsd, nfsuserd, mountd, gssd kunye ne-rpc.tlsservd kwindawo ekwanti yenethiwekhi ye-vnet.
• Iskripthi se-growfs siphumeza ukukwazi ukubeka isahlulo sokutshintsha ekupheleni kwendawo eyandiswayo kwidiski.
• Umboneleli omtsha we-DTrace kinst (dtrace_kinst) yongezwe, evumela ukulandelwa kwezakhiwo zekernel.
• Inkxaso ye-algorithm ye-XChaCha20-Poly1035 AEAD encryption yongezwe kwinkqubo encinci ye-kernel crypto, kwaye kongezwe i-API yokusebenzisa i-curve elliptic curve ye-curve25519 (ye WireGuard).
• Ixesha lokuqalisa elincitshisiweyo. Iparameter ye-sysctl eyongeziweyo kern.reboot_wait_time, apho unokutshintsha ukulibaziseka ngaphambi kokuba uqalise kwakhona emva kokuba yonke imiyalezo yokuxilongwa ikhutshwe kwi-console. Ngokungagqibekanga, ukulibaziseka kuyasuswa.
• Inkqubo engaphantsi kwexesha yongezwe kwi-kernel, nto leyo eyenza kube lula ukuthunyelwa kweenkqubo ukusuka kwi- Linux.
• Kongezwe i-sysctl machdep.mitigations.zenbleed.enbleed.ikwazi ukubhloka ukuba semngciphekweni kweZenbleed kwiiprosesa ze-AMD Zen2.
• Inkxaso ye-Wi-Fi 6 yongezwe kwi-wpa_supplicant kunye ne-hostapd.Umqhubi we-iwlwifi uxhasa i-Intel chips ezixhasa i-Wi-Fi 6E AX411/AX211/AX210.
• I-kernel kwiinkqubo ze-amd64 ibonelela ngenkxaso ye-AddressSanitizer kunye neMemorySanitizer izixhobo ezivela kwiprojekthi ye-LLVM.
• Izikripthi ze-rc.d zivumela ukusetyenziswa kwendlela yesimo, nokuba igama leprogram (procname) kunye nefayile ye-PID ayichazwanga kwiscript.
• I-kernel engagqibekanga, i-bootloader, kunye ne-userspace ye-serial port baud rate yonyusiwe ukusuka kwi-9600 bps ukuya kwi-115200 bps. Ithowuni ye-beep engagqibekanga isetelwe ku-800Hz. Ukudityaniswa kunye ne-devd kubonelelwa kwi-beep ephumayo ngekhadi lesandi. Kwi-vt console, i-beep ivaliwe ngokungagqibekanga (ukuze uyenze, kufuneka usebenzise imiyalelo "sysctl kern.vt.enable_bell=1" kunye ne "kbdcontrol -b eqhelekileyo").
• Inkxaso ephuculweyo ye-NXP DPAA2 (i-Data Path Acceleration Architecture Gen2) i-hardware ye-architecture yokukhawulezisa inethiwekhi.
• Umqhubi we-igc wongeziweyo wabalawuli be-Intel I225 Ethernet, exhasa isantya se-2.5 Gbps.
• Ngokungagqibekanga, useto lwe-net.inet.tcp.nolocaltimewait luvuliwe, oluvala ukuyilwa kweerekhodi zokulinda ixesha zoqhagamshelo lwe-TCP olupheliswe kwicala lenkqubo yendawo.
• Inkxaso yeprotocol yonxibelelwano lweNetlink (RFC 3549) esetyenziswa kwi Linux Ukulungiselela ukusebenzisana phakathi kweenkqubo zekernel kunye nesithuba somsebenzisi. Ezinye izixhobo zenethiwekhi ziguqulwe ukuze zisebenzise iNetlink.
• Isihluzi sepakethe ye-pf sibonelela ngokuhambelana nesintaksi kunye nokuziphatha kwepakethi yesiqhelo (ukukhuhla) imisebenzi yenguqulelo ye-OpenBSD ye-pf. pfsync iphumeza ukukwazi ukusebenzisa i-IPv6 yothutho. Ifomati yepakethe ye-pfsync yandisiwe ukuxhasa imigca, ukunyanzeliswa kwepakethi, kunye neendlela zokuya kwimigaqo.
• Yongezwe kwi-interface yenethiwekhi ye-if_stf (IPv6 over IPv4) Inkxaso ye-IPv6 Ukusasazwa Okukhawulezileyo (RFC 5969). Imo ye-IPv6 nodeinfo (RFC 4620) ikhutshaziwe ngokungagqibekanga.
• I-net.inet.tcp.nolocaltimewait sysctl iparamitha yenziwe ngokungagqibekanga, ikhubaza ukuyilwa kwemeko yokulinda ixesha loqhagamshelwano olupheliswe ekuhlaleni lweTCP.
• Ngokungagqibekanga, i-TCP isebenzisa indlela yokulawula ukuxinana kwenethiwekhi ye-CUBIC endaweni ye-NewReno, evumela ukusetyenziswa okukhulu kwe-bandwidth ekhoyo.
• IPv4 ivala ukuthumela iipakethi zosasazo kwidilesi engaphantsi kwe-zero ngaphandle kokuba loo dilesi ibhengezwe ngokucacileyo njengedilesi yosasazo. Utshintsho luvumela ababuki zindwendwe basebenzise iidilesi eziphela ngo ".0".
• Iisetingi ze-OpenSSH zitshintshiwe: kwi-scp iprotocol ye-SFTP yenziwe ngokungagqibekanga endaweni ye-scp/rcp, inkxaso ye-RSA/SHA-1 signatures ivaliwe, i-VerifyHostKeyDNS kunye ne-X11Forwarding parameters zisetelwe ku-“hayi”, i-VerifyAdddendum iyasuswa, inkxaso yezicwangciso zeHPN isusiwe.
• Kongezwe "-z" ukhetho lokusebenzisa umhla ukuguqula iindawo zexesha.
• Ukhetho "--umbala" longezwe kwi-diff utility ukujonga utshintsho lombala.
• Isixhobo sokulala ngoku sixhasa iiyunithi ngaphandle kwemizuzwana (umzekelo, ungacacisa "ubuthongo 1h 30m").
• Inkxaso yeenketho "-q" kunye ne "-h" yongezwe kwizixhobo zentloko kunye nomsila, kunye nokukwazi ukucacisa amaxabiso kunye nezimamva kwinkqubo yamazwe ngamazwe yeeyunithi ze-SI ziphunyeziwe. Entloko, umda kwinani eliphezulu lemigca ye-2 ^31 isusiwe.
• Yongeza "iolat" umyalelo kusetyenziso lwe-systat ukubonisa ulwazi malunga ne-I/O latencies ebalwe ngumcwangcisi weCAM.
• Ilayibrari ye-libncursesw yahlulwe yangamathala eencwadi amabini, i-libtinfow kunye ne-libncursesw. Inkxaso eyongeziweyo yokusebenzisa i-database ye-terminfo kwi-ncurses, kwaye kungekhona nje i-termcap.
• Kwi-architecture ye-aarch64 (i-arm64), i-COMPAT_LIB32 inketho yokwakha iphunyeziwe kwaye yenziwe ngokungagqibekanga, ukubonelela ngendibano yeelayibrari ze-32-bit kwiinkqubo ze-ARM64 ezivumela ukuqhuba iifayile eziphunyeziweyo eziqulunqwe kwiqonga le-armv7.
• Inkxaso ephuculweyo yeenkqubo zamafu. Ulwakhiwo lovavanyo olunenkqubo yefayile yengcambu ye-ZFS kunye nelifu-init yongezwe kwi-AWS EC2. Kwi-Azure, imifanekiso ibonelelwa nge-arm64 kunye ne-amd64 yokwakha, kunye nokukhetha kwe-UFS okanye i-ZFS. Umqhubi ofakiweyo wekhadi lenethiwekhi ye-gve (Google Virtual NIC).
• Inkqubo ye-ACPI yongeze inkxaso yexabiso le-threshold _CR3, elikuvumela ukuba ubeke ubushushu ekufikeleleni apho inkqubo iya kutshintshwa kwimodi yokulala (S3).
• Iinguqulelo ezihlaziyiweyo zezicelo zomntu wesithathu kunye namathala eencwadi afakwe kwinkqubo yesiseko: OpenSSH 9.5p1, OpenSSL 3.0.12 (ngaphambili isebe 1.1.1 lalisetyenziswa), awk 2021072, bc 6.6.0, libbsdxml 2.4.7, libfido2. , tcpdump 1.13.0 , libpcap 4.99.4, xz 1.10.4, zlib 5.4.3, zstd 1.3. Ukuphunyezwa kokusetyenziswa kwe-objdump endaweni yayo kufakwe i-llvm-objump. Umqokeleli weClang uhlaziywe kwisebe le-1.5.2.
• Iinkqubo eziphelelwe lixesha zacocwa:
  • Inkxaso ye-OPIE amagama agqithisiweyo exesha elinye isusiwe kwinkqubo yesiseko (ukhuseleko/izibuko le-opie lingamiselwa ukuba liqalise ukusebenzisa).
  • Abaqhubi bamakhadi esandi ane-interface ye-ISA basusiwe.
  • I-fmtree kunye ne-minigzip eziluncedo zisusiwe.
  • Amacandelo e-ATM asusiwe kwi-netgraph (NgATM).
  • Inkqubo yangasemva ye telnetd isusiwe (ungasebenzisa umnatha/freebsd-telnetd port).
  • Isusiwe iklasi yeVINUM kwi-geom.
  • Isusiwe amr yakudala, iscsi_initiator, iir, mn, mly, nlmrsa kunye nabaqhubi twa.
  • Ipharamitha yeVESA isusiwe kwi-GENERIC kunye ne-MINIMAL cores.
  • Inkxaso ye-asymmetric cryptographic operations isusiwe kwi-kernel-level cryptographic framework OCF (I-Open Cryptographic Framework).
  • Usetyenziso lwe- mergemaster lurhoxisiwe kwaye kufuneka endaweni yalo kufakwe uhlaziyo lwe- etcupdate.
  • Umsebenzi we-portnap ususiwe (kufuneka usebenzise "git clone https://git.FreeBSD.org/ports.git /usr/ports" ukukhupha izibuko).
  • Ukuveliswa kweendibano ze-architecture ye-armv6 kumisiwe.
  • Isusiwe inkxaso yolwakhiwo lwe-MIPS.

umthombo: opennet.ru