Ukukhutshwa kwe-kernel ye-Linux 6.7

Emva kweenyanga ezimbini zophuhliso, uLinus Torvalds ubonise ukukhululwa kweLinux kernel 6.7. Phakathi kwezona nguqu ziphawulekayo: ukuhlanganiswa kwenkqubo yefayile ye-Bcachefs, ukuyeka ukuxhaswa kwe-Itanium architecture, ukukwazi kweNouvea ukusebenzisana ne-firmware ye-GSP-R, inkxaso ye-TLS encryption kwi-NVMe-TCP, ukukwazi ukusebenzisa ngaphandle kwe-BPF, inkxaso ye-futex kwi-io_uring, ukwenziwa ngcono kwe-fq (Fair Queuing) ukusebenza komcwangcisi), inkxaso yolwandiso lwe-TCP-AO (Ukhetho loQinisekiso lwe-TCP) kunye nokukwazi ukunqanda uqhagamshelwano lwenethiwekhi kwindlela yokhuseleko lweLandlock, ukongeza ulawulo lofikelelo kwisithuba segama lomsebenzisi kunye ne-io_uring ngeAppArmor.

Uguqulelo olutsha lubandakanya ukulungiswa kwe-18405 ukusuka kubaphuhlisi be-2066, ubungakanani bepatch yi-72 MB (utshintsho oluchaphazelekayo lweefayile ze-13467, i-906147 imigca yekhowudi yongezwa, imigca ye-341048 yacinywa). Ukukhutshwa kokugqibela kunezilungiso ze-15291 ezivela kubaphuhlisi be-2058, ubungakanani be-patch yayingu-39 MB. Ngokumalunga ne-45% yazo zonke iinguqu ezifakwe kwi-6.7 zihambelana nabaqhubi besixhobo, malunga ne-14% yeenguqu zihambelana nokuhlaziya ikhowudi ethile kwi-architectures ye-hardware, i-13% inxulumene ne-stack yenethiwekhi, i-5% inxulumene neenkqubo zefayile, kunye ne-3% zinxulumene ne-kernel yangaphakathi yendlela esezantsi.

Izinto ezintsha eziphambili kwi-kernel 6.7:

• Inkqubo engaphantsi kweDisk, I/O kunye neeNkqubo zeFayile
  • I-kernel ithatha ikhowudi yefayile ye-Bcachefs, ezama ukufezekisa ukusebenza, ukuthembeka kunye nokulinganisa kwe-XFS, idibaniswe nezinto zokusebenza eziphambili ezifumaneka kwi-Btrfs kunye ne-ZFS. Ngokomzekelo, ii-Bcachefs zixhasa iimpawu ezinjengokubandakanya izixhobo ezininzi kwisahlulelo, i-multi-layer drive layouts (umaleko ongezantsi oneenkcukacha ezisetyenziswa rhoqo ezisekelwe kwii-SSD ezikhawulezayo, kunye noluhlu oluphezulu olunedatha engasetyenziswanga kancinci ukusuka kwi-hard drives), ukuphindaphinda (RAID). I-1/10), i-caching , ukunyanzeliswa kwedatha ecacileyo (i-LZ4, i-gzip kunye neendlela ze-ZSTD), izilayi zombuso (i-snapshots), ukuqinisekiswa kwemfezeko usebenzisa i-checksums, ukukwazi ukugcina iikhowudi zokulungisa iimpazamo zeReed-Solomon (RAID 5/6), ukugcina ulwazi ifom efihliweyo (i-ChaCha20 kunye ne-Poly1305 zisetyenziswa). Ngokumalunga nokusebenza, ii-Bcachefs ziphambi kwe-Btrfs kunye nezinye iisistim zefayile ezisekelwe kwindlela yokuKhuphela-ngoBhala, kwaye ibonisa isantya sokusebenza kufuphi ne-Ext4 kunye ne-XFS.
  • Inkqubo yefayile ye-Btrfs yazisa imowudi eyenziwe lula ekuvumela ukuba ufezekise ukusebenza okuphezulu ngokulandela umyinge kuphela kulwahlulo olusezantsi apho zidalwe khona, ezenza lula izibalo kunye nokuphucula ukusebenza, kodwa ayikuvumeli ukuba uthathele ingqalelo imida ekwabelwana ngayo kwiindawo ezininzi. izahlulo.
  • I-Btrfs yongeze ulwakhiwo olutsha lwedatha "yomthi woluhlu", olulungele ubungakanani obufanelekileyo bemephu kwiimeko apho iimaphu ezibonakalayo zingahambelani kuzo zonke izixhobo. Ulwakhiwo ngoku lusetyenziswa ekuphunyezweni kwe-RAID0 kunye ne-RAID1 kwizixhobo zebhloko ezicandiweyo. Kwixesha elizayo, baceba ukusebenzisa esi sakhiwo kwi-RAID ephezulu, eya kusombulula iingxaki ezininzi ezikhoyo ekuphunyezweni kwangoku.
  • Isixokelelwano sefayile ye-Ceph sisebenzisa inkxaso yokwenza i-ID yomsebenzisi kwiisistim zefayile ezinyusiweyo, ezisetyenziselwa ukutshatisa iifayile zomsebenzisi othile kwisahlulelo sangaphandle esinyusiweyo kunye nomnye umsebenzisi kwinkqubo yangoku.
  • Ukongezwa ukukwazi ukucacisa i-uid kunye ne-gid kwintaba kwi-efivarfs ukuvumela iinkqubo ezingezizo iingcambu ukutshintsha ii-variables ze-UEFI.
  • Kongezwe iifowuni ze-ioctl kwi-exFAT yokufunda kunye nokutshintsha iimpawu zeFS. Ukuphathwa okongeziweyo koovimba beefayili.
  • I-F2FS isebenzisa ukukwazi ukusebenzisa iibhloko ze-16K.
  • I-autofs automount mechanism itshintshiwe ukuze isebenzise isahlulelo esitsha sokunyusela i-API.
  • I-OverlayFS ibonelela "lowerdir+" kunye ne "datadir+" iinketho zokunyuka. Inkxaso eyongeziweyo yokunyuswa kwendlwane ye-OverlayFS nge-xattrs.
  • I-XFS ilungiselele umthwalo we-CPU kwikhowudi yolwabiwo lwebhloko yexesha lokwenyani. Ukukwazi ukwenza ngaxeshanye ukufunda kunye nokusebenza kweFICLONE kunikezelwe.
  • Ikhowudi ye-EXT2 iguqulelwe ukusebenzisa amaphepha ephepha.
• Iinkonzo zememori kunye nenkqubo
  • Inkxaso yoyilo lwe-ia64 olusetyenziswa kwiiprosesa ze-Intel Itanium, eziye zayekwa ngokupheleleyo ngo-2021, ziyekiwe. Iiprosesa ze-Itanium zaziswa yi-Intel ngo-2001, kodwa ulwakhiwo lwe-ia64 aluphumelelanga ukukhuphisana ne-AMD64, ikakhulu ngenxa yokusebenza okuphezulu kwe-AMD64 kunye noguquko olugudileyo ukusuka kwiiprosesa ze-32-bit x86. Ngenxa yoko, umdla we-Intel utshintshile ngokuthanda iiprosesa ze-x86-64, kwaye iqashiso le-Itanium lahlala liseva ye-HP Integrity, ii-odolo ezayekiswa kwiminyaka emithathu eyadlulayo. Ikhowudi yenkxaso ye-ia64 yasuswa kwi-kernel ikakhulu ngenxa yokungabikho kwexesha elide lenkxaso yeli qonga, ngelixa uLinus Torvalds wabonisa ukuzimisela kwakhe ukubuyisela inkxaso ye-ia64 kwi-kernel, kodwa kuphela ukuba kukho umlondolozi onokubonisa umgangatho ophezulu. inkxaso yeli qonga ngaphandle kwe-kernel engundoqo ubuncinane unyaka.
  • Yongeza "ia32_emulation" iparameter yomyalelo womgca wekernel, ekuvumela ukuba wenze okanye ukhubaze inkxaso yokulinganisa imowudi ye-32-bit kwiinkozo ezakhelwe ulwakhiwo lwe-x86-64 kwinqanaba lokuqala. Kwicala elisebenzayo, ukhetho olutsha lukuvumela ukuba wakhe i-kernel ngenkxaso yokuhambelana nezicelo ze-32-bit, kodwa khubaza le mowudi ngokungagqibekanga ukunciphisa i-vector yohlaselo kwi-kernel, kuba i-API yokuhambelana ivavanywa kancinane kune-kernel engundoqo. ujongano.
  • Ukufuduka okuqhubekayo kweenguqu kwisebe le-Rust-for-Linux enxulumene nokusetyenziswa kolwimi lwe-Rust njengolwimi lwesibini lokuphuhlisa abaqhubi kunye neemodyuli ze-kernel (Inkxaso ye-Rust ayisebenzi ngokungagqibekanga, kwaye ayikhokelela ekufakweni kweRust phakathi ukuxhomekeka kwendibano efunekayo kwi-kernel). Inguqulelo entsha yenza utshintsho ekusebenziseni i-Rust 1.73 ukukhululwa kwaye inikezela ngesethi yezibophelelo zokusebenza kunye nemigca yokusebenza.
  • Kuyenzeka ukuba usebenzise indlela ye-binfmt_misc ukongeza inkxaso yeefomati zefayile eziphunyezwayo ezintsha (umzekelo, ukuqhuba uqulunqo lwezicelo zeJava okanye zePython) phakathi kwezithuba zamagama ezingeyomfuneko.
  • Isilawuli se-cgroup cpuset, esikuvumela ukuba ulawule ukusetyenziswa kwee-CPU cores xa uqhuba umsebenzi, unikezela ulwahlulo kwi-partitioning yendawo kunye ne-remote, eyahlukileyo ukuba iqela lomzali licandelo elichanekileyo okanye hayi. Iisetingi ezitsha "cpuset.cpus.exclusive" kunye "cpuset.cpus.excluisve.effective" nazo zongezwe kwi-cpuset yokubopha i-CPU eyodwa.
  • I-subsystem ye-BPF iphumeza inkxaso kwizinto ezishiyekileyo, ezisingathwa njengendawo yokuphuma kaxakeka kwiprogram ye-BPF ekwaziyo ukukhulula ngokukhuselekileyo iifreyimu ezipakishiweyo. Ukongeza, iinkqubo ze-BPF zivumela usebenziso lwezalathi ze-kptr ngokunxulumene ne-CPU.
  • Inkxaso yokusebenza nge futex yongezwe kwindlela esezantsi ye-io_uring, kwaye imisebenzi emitsha iphunyeziwe: IORING_OP_WAITID (uguqulelo olungenangqamaniso lwe waitid), SOCKET_URING_OP_GETSOCKOPT (getsockoptand ukhetho), SOCKET_URING_OP_SETSOCKOPT (setsocOptsOpt_Ukhetho olungasebenziyo) kukho idatha okanye akukho buffer epheleleyo).
  • Ukuphunyezwa okongeziweyo kwemigca ye-FIFO edityanisiweyo ekhaphukhaphu enye efuna i-spinlock kuphela yokumisa kumxholo wenkqubo kwaye ikhuphe i-spinlock yokongezwa kwe-athomu kumgca nakuwuphi na umxholo.
  • Kongezwe isithinteli seringi "objpool" kunye nokuphunyezwa okukhawulezayo komgangatho womsebenzi ophezulu wokwabiwa kunye nokubuyisela izinto.
  • Inxalenye yokuqala yotshintsho yongezwe ukuphumeza i- futex2 API entsha, enentsebenzo engcono kwiisistim ze-NUMA, ixhasa ubukhulu obungeyiyo i-bits eyi-32, kwaye inokusetyenziswa endaweni ye-multiplexed futex() inkqubo yokufowuna.
  • Kwi-ARM32 kunye ne-S390x yezakhiwo, inkxaso yesethi yangoku (cpuv4) yemiyalelo ye-BPF yongeziwe.
  • Kwi-architecture ye-RISC-V, kunokwenzeka ukusebenzisa i-Shadow-Call Stack check mode ekhoyo kwi-Clang 17, eyenzelwe ukukhusela ngokubhala ngaphezulu idilesi yokubuyisela ukusuka kumsebenzi xa kwenzeka ukuphuphuma kwe-buffer kwi-stack. Ingundoqo yokukhusela kukugcina idilesi yokubuyisela kwi-stack "isithunzi" esahlukileyo emva kokudlulisa ulawulo kumsebenzi kunye nokubuyisela le dilesi ngaphambi kokuphuma emsebenzini.
  • Imowudi entsha yokuskena yephepha lenkumbulo ehlakaniphile yongezwe kwindlela yokudibanisa amaphepha enkumbulo afanayo (KSM: I-Kernel Samepage Ukudityaniswa), elandelela amaphepha askeniweyo ngempumelelo kwaye icuthe ubunzulu bokuphinda baskene. Ukwenza imo entsha isebenze, i /sys/kernel/mm/ksm/smart_scan useto longeziwe.
  • Yongezwe umyalelo omtsha we-ioctl PAGEMAP_SCAN, othi, xa usetyenziswa ne-userfaultfd (), ikuvumela ukuba umisele iinyani zokubhala kuluhlu oluthile lwememori. Inqaku elitsha, umzekelo, linokusetyenziswa kwinkqubo yokugcina nokubuyisela imeko yeenkqubo ze-CRIU okanye kwiinkqubo ezichasene ne-cheat.
  • Kwinkqubo yendibano, ukuba i-clang compiler iyafumaneka, indibano yemizekelo yokusebenzisa i-perf subsystem, ebhalwe njengeenkqubo ze-BPF, yenziwe ngokungagqibekanga.
  • Umaleko we-videobuf wakudala, owawusetyenziselwa ukulawula i-framebuffers kwi-subsystem yemidiya kwaye yathatyathelwa indawo kukuphunyezwa okutsha kwevidiyobuf10 ngaphezulu kweminyaka eli-2 eyadlulayo, isusiwe.
• Ukwenziwa kweVirtual kunye noKhuseleko
  • Ukukwazi ukufihla idatha kwiibhloko ezincinci kunobungakanani bebhloko kwisixokelelwano sefayile yongezwe kwi-fscrypt subsystem. Oku kunokufuneka ukuba kunikwe amandla iindlela ze-encryption ze-hardware ezixhasa kuphela iibhloko ezincinci (umzekelo, abalawuli be-UFS abaxhasa kuphela ubungakanani bebhloko ye-4096 bangasetyenziswa kunye nenkqubo yefayile kunye ne-16K yebhloko yebhloko).
  • I-subsystem "iommufd", ekuvumela ukuba ulawule i-IOMMU (I/O Memory-Management Unit) iitafile zephepha lememori ngokusebenzisa izichazi zefayile ukusuka kwindawo yomsebenzisi, yongeze ukulandelela idatha engeke ikhutshwe kwi-cache (engcolileyo) ye-DMA. imisebenzi, eyimfuneko ekumiseleni imemori ngedatha engagungxulwanga ngexesha lokufuduka kwenkqubo.
  • Inkxaso yokuchaza imithetho yokulawula ukufikelela kwiisokethi ze-TCP zongezwe kwi-Landlock mechanism, evumela ukuba unciphise ukusebenzisana kweqela leenkqubo kunye nokusingqongileyo kwangaphandle. Ngokomzekelo, unokwenza umgaqo ovumela kuphela ukufikelela kwi-port yenethiwekhi 443 ukuseka uxhumano lwe-HTTPS.
  • I-subsystem ye-AppArmor yongeze amandla okulawula ukufikelela kwindlela ye-io_uring kunye nokudala izithuba zamagama abasebenzisi, okukuvumela ukuba ukhethe ukuvumela ukufikelela kobu buchule kuphela kwiinkqubo ezithile.
  • Kongezwe ubungqina bomatshini we-API ukuqinisekisa ingqibelelo yenkqubo yokuqalisa umatshini.
  • Iinkqubo zeLoongArch zixhasa ukubonwa kusetyenziswa i-hypervisor ye-KVM.
  • Xa usebenzisa i-hypervisor ye-KVM kwiinkqubo ze-RISC-V, inkxaso yokwandiswa kwe-Smstateen ibonakala, evimba umatshini obonakalayo ekufikeleleni kwiirejista ze-CPU ezingaxhaswanga ngokucacileyo yi-hypervisor. Kwakhona kongezwa inkxaso yokusetyenziswa kolwandiso lweZicond kwiinkqubo zeendwendwe, ezivumela ukusetyenziswa kwenani elithile lemisebenzi enemiqathango.
  • Kwiinkqubo zeendwendwe ezisekwe kwi-x86 ezisebenza phantsi kwe-KVM, ukuya kuthi ga kwi-4096 ii-CPU ezinenyani zivumelekile.
• Inkqubo engaphantsi yothungelwano
  • Umqhubi we-NVMe-TCP (i-NVMe phezu kwe-TCP), ekuvumela ukuba ufikelele kwi-NVMe drives phezu kwenethiwekhi (i-NVM Express phezu kweFabrics) usebenzisa i-protocol ye-TCP, yongeze inkxaso yokubethela ishaneli yothumelo lwedatha usebenzisa i-TLS (usebenzisa i-KTLS kunye nenkqubo yangasemva. kwindawo yomsebenzisi tlshd yothethathethwano loqhagamshelwano).
  • Ukusebenza komcwangcisi wepakethe ye-fq (Fair Queuing) kwaphuculwa, okwenza kube lula ukunyusa umthamo we-5% phantsi kwemithwalo enzima kuvavanyo lwe-tcp_rr (iSicelo se-TCP / Ukuphendula) kunye ne-13% kunye nokuhamba okungenamkhawulo kweepakethi ze-UDP.
  • I-TCP yongeza i-microsecond-precision timestamp (TCP TS) yokuzikhethela (RFC 7323), evumela ukuba uqikelelo oluchanekileyo oluchanekileyo kunye neemodyuli zokulawula ukuxinana. Ukuyenza isebenze, ungasebenzisa umyalelo "ip indlela yongeza 10/8 ... features tcp_usec_ts".
  • I-stack ye-TCP yongeze inkxaso yolwandiso lwe-TCP-AO (Ukhetho loQinisekiso lwe-TCP, i-RFC 5925), eyenza kube nokwenzeka ukuqinisekisa iintloko ze-TCP usebenzisa iikhowudi ze-MAC (iKhowudi yoQinisekiso loMyalezo), usebenzisa i-algorithms yanamhlanje HMAC-SHA1 kunye ne-CMAC-AES- 128 endaweni ekhoyo ngaphambili i-TCP-MD5 inketho esekelwe kwi-algorithm ye-MD5 yelifa.
  • Uhlobo olutsha lwezixhobo zenethiwekhi ye-virtual "netkit" yongeziweyo, i-logic yokudlulisa idatha esetyenziswe kuyo inkqubo ye-BPF.
  • I-KSMBD, ukuphunyezwa kwe-kernel-level yeseva ye-SMB, yongeze inkxaso yokusombulula amagama eefayile eziqulathe izibini ezihambelanayo zoonobumba abadibeneyo.
  • I-NFS iphucule ukuphunyezwa kwemisonto ngeenkonzo zeRPC. Inkxaso eyongeziweyo yokuthumela abathunywa (ye-NFSv4.1+). I-NFSD yongeze inkxaso kumphathi we-netlink we-rpc_status. Inkxaso ephuculweyo yabathengi be-NFSv4.x xa uthumela ngaphandle kwakhona kwi-knfsd.
• Izixhobo
  • Inkxaso yokuqala ye-firmware ye-GSP-RM yongezwe kwimodyuli ye-kernel ye-Nouveau, esetyenziswa kwi-NVIDIA RTX 20+ GPU ukuhambisa ukuqaliswa kunye nokusebenza kwe-GPU yokulawula ukuya kwicala le-microcontroller ye-GSP eyahlukileyo (GPU System Processor). Inkxaso ye-GSP-RM ivumela umqhubi we-Nouveau ukuba asebenze ngeefowuni ze-firmware, endaweni yokucwangcisa ngokuthe ngqo ukusebenzisana kwe-hardware, okwenza kube lula kakhulu ukongeza inkxaso ye-NVIDIA GPU entsha ngokusebenzisa iifowuni ezakhelwe ngaphambili zokuqalisa kunye nolawulo lwamandla.
  • Umqhubi we-AMDGPU uxhasa i-GC 11.5, NBIO 7.11, SMU 14, SMU 13.0 OD, DCN 3.5, VPE 6.1 kunye ne-DML2. Inkxaso ephuculweyo yokulayisha ngaphandle komthungo (akukho kuqhwanyaza xa utshintsha indlela yevidiyo).
  • Umqhubi we-i915 wongeza inkxaso ye-Intel Meteor Lake chips kwaye wongeza ukuphunyezwa kokuqala kwe-Intel LunarLake (Xe 2).
  • Inkxaso eyongeziweyo yeendlela zokuhambisa i-asymmetric ezongeziweyo kwi-USB4 v2 (120 / 40G) inkcazo.
  • Inkxaso eyongeziweyo ye-ARM SoC: I-Qualcomm Snapdragon 720G (esetyenziswa kwii-smartphones ze-Xiaomi), i-AMD Pensando Elba, i-Renesas, i-R8A779F4 (R-Car S4-8), i-USRobotics USR8200 (esetyenziswa kwii-routers kunye ne-NAS).
  • Inkxaso eyongeziweyo ye-Fairphone 5 smartphone kunye neebhodi ze-ARM Orange Pi 5, QuartzPro64, Turing RK1, Variscite MX6, BigTreeTech CB1, Freescale LX2162, Google Spherion, Google Hayato, Genio 1200 EVK, RK3566 Powkiddy RGB30.
  • Inkxaso eyongeziweyo yeebhodi zeRISC-V iMilk-V Pioneer kunye neMilk-V Duo.
  • Inkxaso eyongeziweyo yojongano lwesandi kwiilaptops ze-HUAWEI ezibonelelwa ngee-AMD CPU. Inkxaso eyongeziweyo yezithethi ezongezelelweyo ezifakwe kwiilaptops zeDell Oasis 13/14/16. Inkxaso eyongeziweyo kwizithethi ezakhelwe ngaphakathi ASUS K6500ZC. Inkxaso eyongeziweyo yesalathisi esisisimumu kwi-HP 255 G8 kunye neelaptops ze-G10. Inkxaso eyongeziweyo ye-acp6.3 abaqhubi bomsindo. Inkxaso eyongeziweyo ye-Focusrite Clarett+ 2Pre kunye ne-4Pre yobugcisa bokurekhoda ujongano.

Kwangelo xesha, iLatin American Free Software Foundation yenze inguqulelo ye-kernel yasimahla 6.7-Linux-libre 6.7-gnu, ecinyiweyo kwizinto ze-firmware kunye nabaqhubi abaqulathe amacandelo angasimahla okanye amacandelo ekhowudi, umda wayo ulinganiselwe. ngumvelisi. Ekukhutshweni kwe-6.7, ikhowudi yokucoca i-blob iye yahlaziywa kubaqhubi abahlukeneyo kunye ne-subsystems, umzekelo, kwi-amdgpu, nouveau, adreno, mwifiex, mt7988, ath11k, avs kunye nabaqhubi be-btqca. Ikhowudi yokucoca i-localtalk kunye nabaqhubi be-rtl8192u isusiwe ngenxa yokukhutshwa kwabo kwi-kernel. Kususwe amacandelo angeyomfuneko ukucoca i-xhci-pci, i-rtl8xxxu kunye nabaqhubi be-rtw8822b, bongezwe ngaphambili ngempazamo. Icociwe amagama eblob kwiifayile ze-dts zoyilo lwe-Aarch64. I-blobs esusiwe kubaqhubi abatsha mt7925, tps6598x, aw87390 kunye ne-aw88399.

umthombo: opennet.ru