Ukukhutshwa komququzeleli womnatha wenethiwekhi ye-NetworkManager 1.20.0

ipapashiwe ukhupho olutsha oluzinzileyo lojongano ukwenza lula ukuseta iiparamitha zenethiwekhi - NetworkManager 1.20. Iiplagi ukuxhasa i-VPN, i-OpenConnect, i-PPTP, i-OpenVPN kunye ne-OpenSWAN ziphuhliswa ngemijikelo yazo yophuhliso.

Siseko ezintsha Umphathi weNethiwekhi 1.20:

  • Inkxaso eyongeziweyo yothungelwano lwe-wireless Mesh, indawo nganye edityaniswe kuyo ngeenodi ezingabamelwane;
  • Amalungu aphelelwe lixesha acociwe. Kubandakanya ilayibrari ye-libnm-glib, eyatshintshwa kwi-NetworkManager 1.0 yilayibrari ye-libnm, i-plugin ye-ibft yasuswa (ukudlulisa idatha yoqwalaselo lwenethiwekhi kwi-firmware, kufuneka usebenzise i-nm-initrd-generator kwi-initrd) kunye nenkxaso ye "main". .monitor-” ukusetwa kuye kwanqunyanyiswa-iifayile zoqhagamshelo" kwi-NetworkManager.conf (kufuneka ibize ngokuthe gca "nmcli uxhumano lomthwalo" okanye "nmcli uxhumano lokulayisha kwakhona");
  • Ngokungagqibekanga, umxhasi we-DHCP owakhelwe-ngaphakathi uyasebenza (imowudi yangaphakathi) endaweni yesicelo sedhclient ebesisetyenziswa ngaphambili. Ungatshintsha ixabiso elingagqibekanga usebenzisa "--nge-config-dhcp-default" ukhetho lokwakha okanye ngokucwangcisa main.dhcp kwifayile yoqwalaselo;
  • Ukongezwa ukukwazi ukuqwalasela i-fq_codel (UkuLibazisa okuLawulwayo koQueu oluLungileyo) ulawulo lomgca weepakethi ezilindele ukuthunyelwa kunye nesenzo esibi sokubonwa kwetrafikhi;
  • Ukusasazwa, kunokwenzeka ukubeka izikripthi zokuthumela kwi-/usr/lib/NetworkManager directory, engasetyenziswa kwimifanekiso yenkqubo ekhoyo kwimowudi yokufunda kuphela kwaye icace/njll kwisiqalo ngasinye;
  • Inkxaso eyongeziweyo yabalawuli bokufunda-kuphela kwiplagi yefayile yesitshixo
    (“/usr/lib/NetworkManager/system-connections”), iinkangeleko ezinokuthi zitshintshwe okanye zicinywe nge-D-Bus (kule meko, iifayile ezingaguqukiyo kwi/usr/lib/ zikhutshelwa ngaphezulu ziifayile ezigcinwe kwi/etc okanye// baleka);

  • Kwi-libnm, ikhowudi yokwahlulahlula izicwangciso kwifomati ye-JSON iye yaphinda yasetyenziswa kwaye uqwalaselo olungqongqo lweeparamitha lunikiwe;
  • Kwimigaqo yomzila ngedilesi yomthombo (umgaqo-nkqubo womgaqo), inkxaso yophawu lwe-"suppress_prefixlength" yongeziwe;
  • Kwi-VPN WireGuard, inkxaso yeskripthi yokwabela ngokuzenzekelayo indlela engagqibekanga "wireguard.ip4-auto-default-route" kunye ne "wireguard.ip6-auto-default-route" iphunyeziwe;
  • Ukuphunyezwa kweeplagi zolawulo lwezicwangciso kunye nendlela yokugcina iiprofayili kwidisk zisetyenzisiwe. Inkxaso eyongeziweyo yokufuduka kweeprofayili zoqhagamshelwano phakathi kweeplagi;
  • Iiprofayili ezigcinwe kwimemori ngoku zicutshungulwa kuphela ngefayile yefayile engundoqo kwaye igcinwe kwi-/run directory, ekhusela ukulahlekelwa kweeprofayili emva kokuqalisa kwakhona i-NetworkManager kwaye yenza kube lula ukusebenzisa i-FS-based API ukwenza iiprofayili kwimemori;
  • Kongezwe indlela entsha yeD-Bus AddConnection2(), ekuvumela ukuba uthintele uqhagamshelo oluzenzekelayo lweprofayile ngexesha lokudalwa kwayo. Ngendlela Hlaziya2() yongeza iflegi "yokungasetyenziswa kwakhona", apho ukutshintsha imixholo yeprofayile yoqhagamshelo akutshintshi ngokuzenzekelayo ulungelelwaniso lwesixhobo de iprofayile iphinde isebenze;
  • Yongeza isethingi "ipv6.method=disabled", ekuvumela ukuba uvale i-IPv6 yesixhobo.

umthombo: opennet.ru

Yongeza izimvo