ProHoster > Ibhulogi > iindaba ze-intanethi > Ukukhutshwa kwe-OpenBSD 7.1

Ukukhutshwa kwe-OpenBSD 7.1

Ukukhutshwa kwenkqubo yasimahla ye-cross-platform ye-UNIX-efana ne-OpenBSD 7.1 ibonisiwe. Iprojekthi ye-OpenBSD yasekwa nguTheo de Raadt ngo-1995 emva kokungquzulana nabaphuhlisi be-NetBSD, ngenxa yoko uTheo walelwa ukufikelela kwindawo yokugcina i-NetBSD CVS. Emva koku, uTheo de Raadt kunye neqela labantu abanengqondo efanayo badale inkqubo entsha yokusebenza evulekileyo esekelwe kumthi womthombo we-NetBSD, iinjongo eziphambili zophuhliso eziye zazithwala (iiplatifti ze-hardware eziyi-13 zixhaswa), ukulinganisa, ukusebenza okuchanekileyo, ukhuseleko olusebenzayo. kunye nezixhobo ezihlanganisiweyo ze-cryptographic. Ufakelo olupheleleyo lwe-ISO umfanekiso we-OpenBSD 7.1 inkqubo yesiseko yi-580 MB.

Ukongeza kwinkqubo yokusebenza ngokwayo, iprojekthi ye-OpenBSD yaziwa ngamacandelo ayo, athe asasazeka kwezinye iinkqubo kwaye azibonakalise njengenye yezisombululo ezikhuselekileyo nezikumgangatho ophezulu. Phakathi kwazo: LibreSSL (ifolokhwe ye-OpenSSL), i-OpenSSH, isihluzi sepakethi ye-PF, i-OpenBGPD kunye ne-OpenOSPFD iidaemmon zokuhola, iseva ye-OpenNTPD NTP, iseva ye-imeyile ye-OpenSMTPD, i-terminal yombhalo multiplexer (efana ne-GNU screen) tmux, i-daemon echongiweyo ngokuphunyezwa kweprotocol ye-IDENT, enye indlela ye-BSDL Iphakheji ye-GNU groff - i-mandoc, i-protocol yokuququzelela i-fault-tolerant systems CARP (i-Common Address Redundancy Protocol), i-http ye-server ekhaphukhaphu, i-OpenRSYNC yongqamaniso lwefayile.

Uphuculo oluphambili:

  • Inkxaso yeekhompyuter zeMac ezixhotyiswe nge-Apple M1 (i-Apple Silicon) i-ARM chip, njenge-Apple M1 Pro / Max kunye ne-Apple T2 Macs, iye yabhengezwa njengelungele ukusetyenziswa. Abaqhubi abongezelelweyo be-SPI, i-I2C, isilawuli se-DMA, ikhibhodi, i-touchpad, amandla kunye nokulawula ukusebenza. Ibonelela ngenkxaso ye-Wi-Fi, GPIO, framebuffer, USB, screen, NVMe drives.
  • Inkxaso ephuculweyo yolwakhiwo lwe-ARM64. Abaqhubi abongeziweyo be-gpiocharger, i-gpioleds kunye ne-gpiokeys, ukubonelela ngenkxaso yeentlawulo, izibane kunye namaqhosha aqhagamshelwe kwi-GPIO (umzekelo, oku kwenziwa kwiPinebook Pro). Ukongeza abaqhubi abatsha: mpfclock (umlawuli wewotshi ye-PolarFire SoC MSS), cdsdhc (Cadence SD/SDIO/eMMC host controller), mpfiic (PolarFire SoC MSS I2C controller) kunye mpfgpio (PolarFire SoC MSS GPIO).
  • Inkxaso ephuculweyo ye-architecture ye-RISC-V 64, apho abaqhubi be-uhid kunye ne-fido babandakanyiwe, kunye nenkxaso yokufakwa kwiidiski ze-GPT.
  • I mount_msdos into eluncedo yenza usebenziso lwamagama efayile amade ngokungagqibekanga.
  • Ikhowudi yokuqokelelwa kwenkunkuma yeesokethi ze-unix isetyenzisiwe kwakhona.
  • I-sysctl hw.perfpolicy isetelwe ku-“auto” ngokungagqibekanga, okuthetha ukuba imo yokusebenza epheleleyo yenziwe xa amandla amileyo eqhagamshelwe kwaye i-algorithm yokuguquguquka isetyenziswa xa iqhutywa yibhetri.
  • Inkxaso ephuculweyo yeenkqubo ezininzi (SMP). Izihluzi zesiganeko zamajelo angachazwanga, i-kqread, iaudio kunye neziseko, kunye nendlela ye-BPF, zikhutshelwe kudidi lwe-mp-ekhuselekileyo. I-poll, khetha, i-ppoll kunye ne-pselect system iminxeba ibhalwe ngokutsha kwaye ngoku iphunyezwe ngaphezulu kwe-kqueue. I-kevent, getsockname, getpeername, accept and accept4 system calls isusiwe ekubhlokeni. Kongezwe ujongano lwekernel kumthwalo kunye nokugcina imisebenzi yeathom, evumela ukusetyenziswa kwe-int kunye neentlobo ezinde kwizinto zezakhiwo apho ukubalwa kwereferensi kusetyenziswa khona.
  • Ukuphunyezwa kwenkqubo-sikhokelo ye-drm (uManejala oBonelela ngokuthe ngqo) ilungelelaniswa neLinux kernel 5.15.26 (ukukhululwa kokugqibela - 5.10.65). Umqhubi we-inteldrm wongeze inkxaso ye-Intel chips esekwe kwi-Elkhart Lake, i-Jasper Lake kunye ne-Rocket Lake microarchitectures. Umqhubi we-amdgpu uxhasa i-APU / GPU Van Gogh, i-Rembrandt "Yellow Carp" iRyzen 6000, i-Navi 22 "i-Navy Flounder", i-Navi 23 "i-Dimgrey Cavefish" kunye ne-Navi 24 "Beige Goby".
  • Unikezelo lwefonti ye-Subpixel luvuliwe kwithala leencwadi leFreeType.
  • Kongezwe into eluncedo yendlela yokwenyani ukubonisa indlela epheleleyo kwifayile.
  • Umyalelo wongezwa "ls rogue" kwinto eluncedo yercctl ukubonisa iinkqubo ezingasemva ezisebenzayo kodwa ezingaqukwanga kwi-rc.conf.local.
  • I-BPFtrace ngoku ixhasa iinguqu kwiitshekhi. Izikripthi ze-kprofile.bt zeprofayile ye-kernel stack kunye ne-runqlat.bt yokuchonga ulibaziseko kumcwangcisi zongezwe kwi-btrace.
  • Inkxaso eyongeziweyo ye-RFC6840 kwi-libc, echaza inkxaso yeflegi ye-AD kunye noseto lwe-'trust-ad' ye-DNSSEC.
  • I-Apm kunye ne-apmd ibandakanya ukubonisa ixesha lokutshajwa kwebhetri eliqikelelweyo.
  • Ukukwazi ukugcina idatabase yesakhono kwi/etc/login.conf.d kunikezelwe ukwenza lula ukongeza iiklasi zakho zeakhawunti kwiipakethe.
  • I-Malloc ibonelela nge-caching yemimandla yememori ukusuka kwi-128k ukuya kwi-2M.
  • Uvimba wepax uxhasa iiheader ezongeziweyo nge-mtime, i-atime kunye nedatha ye-ctime.
  • Yongeza "-k" ukhetho kwi-gzip kunye nezixhobo ze-gunzip ukugcina ifayile yemvelaphi.
  • Ezi zikhetho zilandelayo zongezwe kwi-opensync utility: "-compare-dest" ukujonga ubukho beefayile kwizikhokelo ezongezelelweyo; “—ubukhulu obukhulu” kunye no “-min-size” ukukhawulela ubungakanani befayile.
  • Kongezwe umyalelo we-seq ukuprinta ulandelelwano lwamanani.
  • Ukuphunyezwa kwesoftware yendalo yonke yemisebenzi yetrigonometric isusiwe kwiFreeBSD 13 (ukuphunyezwa komhlanganisi we-x86 kuvaliwe).
  • Ukuphunyezwa kwemisebenzi ye-lrint, i-lrintf, i-llrint kunye ne-llrintf isusiwe kwi-FreeBSD (eyangaphambili ukuphunyezwa kwi-NetBSD yayisetyenziswa).
  • Umsebenzi wefdisk uqulethe utshintsho oluninzi kunye nolungiso olunxulumene nokusebenza ngezahlulo zediski.
  • Inkxaso eyongeziweyo ye-hardware entsha, kuquka i-Intel PCH GPIO isilawuli (yeCannon Lake H kunye ne-Tiger Lake H platforms), i-NXP PCF85063A/TP RTC, i-Synopsys Designware UART, i-Intel 2.5Gb Ethernet, i-SIMCom SIM7600, i-RTL8156B, i-MediaTek MT7601U4387 i-USBXNUMX wifi
  • Iphakheji ibandakanya i-firmware elayisenisiweyo yeetshiphusi ezingenazintambo ze-Realtek, ekuvumela ukuba usebenzise i-rsu, i-rtwn kunye nabaqhubi be-urtwn ngaphandle kokukhuphela ngesandla i-firmware.
  • I-ixl (Intel Ethernet 700), ix (Intel 82598/82599/X540/X550) kunye ne-aq (Aquantia AQC1xx) abaqhubi baquka inkxaso yokusetyenzwa kwehardware yeethegi zeVLAN kunye nokubalwa kwe-checksum/ukuqinisekiswa kwe-IPv4, TCP4/6 kunye ne-UDP4/6.
  • Kongezwe umqhubi wesandi weIntel Jasper Lake chips. Inkxaso eyongeziweyo yesilawuli somdlalo weXBox One.
  • I-IEEE 802.11 stack wireless inikeza inkxaso ye-40MHz iziteshi ze-802.11n mode kunye nenkxaso yokuqala ye-802.11ac (VHT) umgangatho. Isibambi sokuskena sangasemva esikhethiweyo songeziwe kubaqhubi. Xa ukhetha indawo yokufikelela, amanqaku aneziteshi ze-5GHz ngoku anikwa kuqala, kwaye kuphela emva koko amanqaku aneendlela ze-2GHz zikhethwa.
  • Ukuphunyezwa komqhubi we-vxlan kubhalwe kwakhona, ngoku usebenza ngokuzimeleyo kwi-subsystem yebhulorho.
  • Isifakeli siphinde sasebenza ingqiqo yokufowunela i-pkg_add into eluncedo ukunciphisa ubunzulu beentshukumo zefayile ngexesha lenkqubo yohlaziyo. Ifayile ye-install.site ibhala ukufakwa kunye nokuphucula inkqubo yokusetha. Kuzo zonke izakhiwo, i-firmware yongezwa, ukuhanjiswa kwayo kuvunyelwe kwimveliso yomntu wesithathu. Ukufakela i-firmware yobunikazi ekhoyo kwimidiya yokufakela, i-fw_update utility isetyenziswa.
  • Kwi-xterm, ukulandelela imouse kuvaliwe ngokungagqibekanga ngenxa yezizathu zokhuseleko.
  • usbhidctl kunye ne-usbhidaction zibonelela ngofikelelo lwesixokelelwano sokwahlulwa kusetyenziswa umnxeba wokuvula inkqubo.
  • Ngokungagqibekanga, i-dhcpd ikwabonelela ngoqhagamshelo kujongano lwenethiwekhi olukwimo yokungasebenzi ('phantsi'), ukuze kuqinisekiswe ukuba iipakethi zifunyanwa ngokukhawuleza emva kokuba ujongano lwenethiwekhi luvuliwe.
  • I-OpenSMTPD (smtpd) inokukhangela kwe-TLS okuvulwe ngokungagqibekanga kuqhagamshelo oluphumayo lwe-"smtps://" kunye ne-"smtp+tls://".
  • I-httpd iphumeze uqwalaselo loguqulelo lweprothokholi, yongeza ukukwazi ukuchaza iifayile zayo ezineetekisi zemposiso, kunye nokuphuculwa koqhubekeko lwedatha ecinezelweyo, kuquka nodibaniso lwe-gzip-static ukhetho kwi-httpd.conf yokuhambisa iifayile ezicinezelwe kwangaphambili kunye neseti yeflegi ye-gzip. kumxholo-encoding header.
  • Kwi-IPsec, iparameter yeproto esuka kwi-iked.conf ivumela ukukhankanya uluhlu lwemigaqo. Kongezwe "bonisa certinfo" umyalelo kwi-ikectl into eluncedo ukubonisa ii-CA ezithembekileyo kunye nezatifikethi. I-iked iphucule ukuphathwa kwemiyalezo eyaphukileyo.
  • Inkxaso eyongeziweyo yokujonga i-BGPsec Router izitshixo zikawonke-wonke kwi-rpki-client kunye nokuhlolwa okuphuculweyo kwezatifikethi ze-X509. Kongezwe i-cache yeefayile eziqinisekisiweyo. Ukuphucula ukuhambelana ne-RFC 6488.
  • bgpd yongeze i "port" parameter, enokusetyenziswa ku "mamela kwi" kunye "nommelwane" amacandelo ukubophelela kwinombolo yezibuko yenethiwekhi engekho mgangathweni. Ikhowudi yahlaziywa ukuba isebenze kunye ne-RIB (i-Routing Information Base), iqhutywe ngeso lokubonelela ngenkxaso ye-multipath kwixesha elizayo.
  • Umphathi wefestile ye-console tmux ("i-terminal multiplexer") uye wandisa amandla okuvelisa umbala. Eyongeziweyo iphaneli yomda-fomati, umbala wekhesa kunye nemiyalelo yesimbo sekhesa.
  • I-LibreSSL ifakwe kwinkxaso ye-OpenSSL ye-RFC 3779 (ulwandiso lwe-X.509 lweedilesi ze-IP kunye neenkqubo ezizimeleyo) kunye neSatifikethi sokuSebenza ngokuSebenzayo (i-log yoluntu ezimeleyo yazo zonke izatifikethi ezikhutshiweyo nezirhoxisiweyo, ezenza kube lula ukuphicotha ngokuzimeleyo lonke utshintsho kunye nezenzo ze abasemagunyeni bezatifiketi, kwaye ikuvumela ukuba ulandele kwangoko naziphi na iinzame zokudala ngokufihlakeleyo iirekhodi zomgunyathi). Ukuhambelana ne-OpenSSL 1.1 kuphuculwe kakhulu kwaye amagama e-cipher ye-TLSv1.3 ayafana ne-OpenSSL. Imisebenzi emininzi iguqulelwe ukusebenzisa i-calloc (). Inxalenye enkulu yeefowuni ezintsha zongezwa kwi-libssl kunye ne-libcrypto.
  • Iphakheji ye-OpenSSH ehlaziyiweyo. Ukuze ufumane inkcazelo eneenkcukacha zophuculo, bona uphononongo lwe-OpenSSH 8.9 kunye ne-OpenSSH 9.0. Umsebenzi we-scp uhanjiswe ngokungagqibekanga ukusebenzisa i-SFTP endaweni yeprotocol ye-SCP/RCP yelifa.
  • Inani lamachweba kwi-architecture ye-AMD64 yayiyi-11301 (ukusuka kwi-11325), ye-aarch64 - 11081 (ukusuka kwi-11034), ye-i386 - 10136 (ukusuka kwi-10248). Phakathi kweenguqulelo zesicelo kumazibuko: Asterisk 16.25.1, 18.11.1 kunye ne-19.3.1 ..2.4.2 .3.20.3 JDK 100.0.4896.75u27.2, 4.4.1 kunye 8.4.0 KDE Usetyenziso 11.2.0 KDE Frameworks 41.5 Krita 1.17.7 LLVM/Clang 8 LibreOffice 322 Lua 11.0.14DB 17.0.2 .21.12.2 Mono 5.91.0 Firefox 5.0.2 kunye neESR 13.0.0 Thunderbird 7.3.2.2 Mutt 5.1.5 kunye neNeoMutt 5.2.4 Node.js 5.3.6 OpenLDAP 10.6.7 PHP 6.12.0.122 Postg reSQL 99.0 Python 91.8.0, 91.8.0, 2.2.2 kunye 20211029 Qt 16.14.2 kunye 2.4.59 R 7.4.28 Ruby 8.0.17, 8.1.4 kunye 3.5.14 Rust 14.2 SQLite 2.7.18. 3.8.13 kunye 3.9.12 .3.10.4 Shotcut 5.15.2 Sudo 6.0.4 Suricata 4.1.2 Tcl/Tk 2.7.5 kunye 3.0.3 TeX Live 3.1.1 Vim 1.59.0 kunye Neovim 2.8.17 Xfce 3.38.2.
  • Izinto ezihlaziyiweyo zeqela lesithathu zibandakanyiwe ne-OpenBSD 7.1:
    • Xenocara istaki yemizobo esekelwe X.Org 7.7 nge xserver 1.21.1 + amabala, freetype 2.11.0, fontconfig 2.12.94, Mesa 21.3.7, xterm 369, xkeyboard-config 2.20, fonttosfnt 1.2.2.
    • LLVM/Clang 13.0.0 (+ iipetshi)
    • I-GCC 4.2.1 (+ iipetshi) kunye ne-3.3.6 (+ iipetshi)
    • Perl 5.32.1 (+ iipetshi)
    • I-NSD 4.4.0
    • Ingabotshwanga 1.15.0
    • Nurses 5.7
    • I-Binutils 2.17 (+ iipetshi)
    • Gdb 6.3 (+ isiqwenga)
    • Awk 12.10.2021/XNUMX/XNUMX
    • Expat 2.4.7

umthombo: opennet.ru

Yongeza izimvo