ืกื™ืกื˜ืขื ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืžืขืœื“ื•ื ื’ 249

ื ืึธืš ื“ืจื™ื™ ื—ื“ืฉื™ื ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’, ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืกื™ืกื˜ืขื ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืกื™ืกื˜ืขื 249 ืื™ื– ื“ืขืจืœืื ื’ื˜. ื“ื™ ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’ ื’ื™ื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื“ืขืคื™ื ื™ืจืŸ ื™ื•ื–ืขืจื– / ื’ืจื•ืคึผืขืก ืื™ืŸ JSON ืคึฟืึธืจืžืึทื˜, ืกื˜ื™ื™ื‘ืึทืœื™ื™ื– ื“ื™ ื“ื–ืฉืึธื•ืจื ืึทืœ ืคึผืจืึธื˜ืึธืงืึธืœ, ืกื™ืžืคึผืœืึทืคื™ื™ื– ื“ื™ ืึธืจื’ืึทื ื™ื–ืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืœืึธื•ื“ื™ื ื’ ืกืึทืงืกืขืกื™ื•ื• ื“ื™ืกืง ืคึผืึทืจื˜ื™ืฉืึทื ื–, ืžื•ืกื™ืฃ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ BPF ืžื’ื™ืœื” ืฆื• ืกืขืจื•ื•ื™ืกืขืก, ืื•ืŸ ื™ืžืคึผืœืึทืžืึทื ืฅ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืžืึทืคึผื™ื ื’ ื ื™ืฆืขืจืก ืื™ืŸ ืžืึธื•ื ื˜ืขื“ ืคึผืึทืจื˜ื™ืฉืึทื ื–, ืึท ื’ืจื•ื™ืก ื˜ื™ื™ืœ ืคื•ืŸ ื ื™ื™ึทืข ื ืขืฅ ืกืขื˜ื˜ื™ื ื’ืก ืื•ืŸ ืึทืคึผืขืจื˜ื•ื ืึทื˜ื™ื– ืคึฟืึทืจ ืงืึทื˜ืขืจ ืงืึทื ื˜ื™ื™ื ืขืจื– ื–ืขื ืขืŸ ื’ืขืคึฟื™ื ื˜.

ื”ื•ื™ืคึผื˜ ืขื ื“ืขืจื•ื ื’ืขืŸ:

  • ื“ืขืจ ื–ืฉื•ืจื ืึทืœ ืคึผืจืึธื˜ืึธืงืึธืœ ืื™ื– ื“ืึทืงื™ื•ืžืขื ื˜ืึทื“ ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ืงืœื™ื™ืึทื ืฅ ืื™ืŸ ืคึผืœืึทืฅ ืคื•ืŸ ื“ื™ ืกื™ืกืœืึธื’ ืคึผืจืึธื˜ืึธืงืึธืœ ืคึฟืึทืจ ื”ื™ื’ืข ืขืงืกืคึผืจืขืก ืคื•ืŸ ืงืœืึธืฅ ืจืขืงืึธืจื“ืก. ื“ืขืจ ื–ืฉื•ืจื ืึทืœ ืคึผืจืึธื˜ืึธืงืึธืœ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืคึฟืึทืจ ืึท ืœืึทื ื’ ืฆื™ื™ึทื˜ ืื•ืŸ ืื™ื– ืฉื•ื™ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ ืขื˜ืœืขื›ืข ืงืœื™ืขื ื˜ ืœื™ื™ื‘ืจืขืจื™ื–, ืึธื‘ืขืจ, ื–ื™ื™ืŸ ื‘ืึทืึทืžื˜ืขืจ ืฉื˜ื™ืฆืŸ ืื™ื– ื ืึธืจ ืึทื ืึทื•ื ืกื˜.
  • Userdb ืื•ืŸ nss-systemd ืฆื•ืฉื˜ืขืœืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืœื™ื™ืขื ืขืŸ ื ืึธืš ื‘ืึทื ื™ืฆืขืจ ื–ื•ืš ืื™ืŸ ื“ื™ ื“ื™ืจืขืงื˜ืขืจื™ื– /etc/userdb/, /run/userdb/, /run/host/userdb/ ืื•ืŸ /usr/lib/userdb/, ืกืคึผืขืกื™ืคื™ืขื“ ืื™ืŸ JSON ืคึฟืึธืจืžืึทื˜. ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื“ืขื ืฉื˜ืจื™ืš ื•ื•ืขื˜ ืฆื•ืฉื˜ืขืœืŸ ืึทืŸ ื ืึธืš ืžืขืงืึทื ื™ื–ืึทื ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ื™ื•ื–ืขืจื– ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื, ืคึผืจืึทื•ื•ื™ื™ื“ื™ื ื’ ืขืก ืžื™ื˜ ืคื•ืœ ื™ื ืึทื’ืจื™ื™ืฉืึทืŸ ืžื™ื˜ NSS ืื•ืŸ /etc/shadow. JSON ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื‘ืึทื ื™ืฆืขืจ / ื’ืจื•ืคึผืข ืื™ื™ื ืกืŸ ื•ื•ืขื˜ ืื•ื™ืš ืœืึธื–ืŸ ืคืึทืจืฉื™ื“ืŸ ืžื™ื˜ืœ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืื•ืŸ ืื ื“ืขืจืข ืกืขื˜ื˜ื™ื ื’ืก ืฆื• ื–ื™ื™ืŸ ืึทื˜ืึทื˜ืฉื˜ ืฆื• ื™ื•ื–ืขืจื– ื•ื•ืึธืก pam_systemd ืื•ืŸ systemd-login ื“ืขืจืงืขื ืขืŸ.
  • nss-systemd ื’ื™ื˜ ืกื™ื ื˜ืขื– ืคื•ืŸ ื‘ืึทื ื™ืฆืขืจ / ื’ืจื•ืคึผืข ืื™ื™ื ืกืŸ ืื™ืŸ /etc/shadow ื ื™ืฆืŸ ื›ืึทืฉื˜ ืคึผืึทืกื•ื•ืขืจื“ื– ืคึฟื•ืŸ systemd-homed.
  • ื ืžืขืงืึทื ื™ื–ืึทื ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืึทื– ืกื™ืžืคึผืœืึทืคื™ื™ื– ื“ื™ ืึธืจื’ืึทื ื™ื–ืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื ื™ืฆืŸ ื“ื™ืกืง ืคึผืึทืจื˜ื™ืฉืึทื ื– ื•ื•ืึธืก ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื™ืขื“ืขืจ ืื ื“ืขืจืขืจ (ืื™ื™ืŸ ืฆืขื˜ื™ื™ืœื•ื ื’ ืื™ื– ืึทืงื˜ื™ื•ื•, ืื•ืŸ ื“ื™ ืจื’ืข ืื™ื– ืกืคึผืขืจ - ื“ืขืจ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืื™ื– ืงืึทืคึผื™ื“ ืฆื• ื“ื™ ืกืคึผืขืจ ืฆืขื˜ื™ื™ืœื•ื ื’, ื ืึธืš ื•ื•ืึธืก ืขืก ื•ื•ืขืจื˜ ืึทืงื˜ื™ื•ื•). ืื•ื™ื‘ ืขืก ื–ืขื ืขืŸ ืฆื•ื•ื™ื™ ื•ื•ืึธืจืฆืœ ืึธื“ืขืจ / ื•ืกืจ ืคึผืึทืจื˜ื™ืฉืึทื ื– ืื™ืŸ ื“ื™ ื“ื™ืกืง ื‘ื™ืœื“, ืื•ืŸ udev ื”ืื˜ ื ื™ืฉื˜ ื“ื™ื˜ืขืงื˜ืึทื“ ื“ืขื ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ื“ื™ 'root=' ืคึผืึทืจืึทืžืขื˜ืขืจ, ืึธื“ืขืจ ืคึผืจืึทืกืขืกื™ื ื’ ื“ื™ืกืง ื‘ื™ืœื“ืขืจ ืกืคึผืขืกื™ืคื™ืขื“ ื“ื•ืจืš ื“ื™ "--image" ืึธืคึผืฆื™ืข ืื™ืŸ ื“ื™ systemd-nspawn ืื•ืŸ systemd -ื“ื™ืกืกืขืงื˜ ื™ื•ื˜ื™ืœืึทื˜ื™ื–, ื“ื™ ืฉื˜ื™ื•ื•ืœ ืฆืขื˜ื™ื™ืœื•ื ื’ ืงืขืŸ ื–ื™ื™ืŸ ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ื“ื•ืจืš ืงืึทืžืคึผืขืจื™ื ื’ GPT ืœืึทื‘ืขืœืก (ืึทืกื•ืžื™ื ื’ ื“ื™ GPT ืคื™ืจืžืข ื“ืขืจืžืื ื˜ ื“ื™ ื•ื•ืขืจืกื™ืข ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ืฆืขื˜ื™ื™ืœื•ื ื’ ืื•ืŸ ืกื™ืกื˜ืขื ื•ื•ืขื˜ ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ื“ื™ ืฆืขื˜ื™ื™ืœื•ื ื’ ืžื™ื˜ ื“ื™ ืžืขืจ ืคืจื™ืฉ ืขื ื“ืขืจื•ื ื’ืขืŸ).
  • ื BPFProgram ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ืกืขืจื•ื•ื™ืก ื˜ืขืงืขืก, ืžื™ื˜ ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ืœืึธื•ื“ื™ื ื’ ืคื•ืŸ BPF ืžื’ื™ืœื” ืื™ืŸ ื“ื™ ืงืขืจืŸ ืื•ืŸ ืคื™ืจืŸ ื–ื™ื™ ืžื™ื˜ ื‘ื™ื™ื ื“ื™ื ื’ ืฆื• ืกืคึผืขืฆื™ืคื™ืฉ ืกื™ืกื˜ืขื ื‘ืึทื“ื™ื ื•ื ื’ืก.
  • Systemd-fstab-generator ืื•ืŸ systemd-repart ืœื™ื™ื’ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉื˜ื™ื•ื•ืœ ืคึฟื•ืŸ ื“ื™ืกืงืก ื•ื•ืึธืก ื”ืึธื‘ืŸ ื‘ืœื•ื™ื– ืึท / ื•ืกืจ ืฆืขื˜ื™ื™ืœื•ื ื’ ืื•ืŸ ืงื™ื™ืŸ ื•ื•ืึธืจืฆืœ ืฆืขื˜ื™ื™ืœื•ื ื’ (ื“ื™ ื•ื•ืึธืจืฆืœ ืฆืขื˜ื™ื™ืœื•ื ื’ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื“ื•ืจืš systemd-repart ื‘ืขืฉืึทืก ื“ืขืจ ืขืจืฉื˜ืขืจ ืฉื˜ื™ื•ื•ืœ).
  • ืื™ืŸ systemd-nspawn, ื“ื™ "--private-user-chown" ืึธืคึผืฆื™ืข ืื™ื– ืจื™ืคึผืœื™ื™ืกื˜ ื“ื•ืจืš ื“ื™ ืžืขืจ ื“ื–ืฉืึทื ืขืจื™ืง "--private-user-ownership" ืึธืคึผืฆื™ืข, ื•ื•ืึธืก ืงืขื ืขืŸ ืึธื ื ืขืžืขืŸ "ื˜ืฉown" ื•ื•ืึทืœื•ืขืก ื•ื•ื™ ื“ืขืจ ืขืงื•ื•ื™ื•ื•ืึทืœืขื ื˜ ืคื•ืŸ "-- ืคึผืจื™ื•ื•ืึทื˜-ื‘ืึทื ื™ืฆืขืจ-ื˜ืฉืึธื•ื•ืŸ, "ืึทื•ื•ืขืง" ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ืึทืœื˜ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ, "ืžืึทืคึผืข" ืฆื• ืžืึทืคึผืข ื‘ืึทื ื™ืฆืขืจ ื™ื“ืก ืื•ื™ืฃ ืžืึธื•ื ื˜ืขื“ ืคื™ืœืขืกื™ืกื˜ืขืžืก ืื•ืŸ "ืึทื•ื˜ืึธ" ืฆื• ืกืขืœืขืงื˜ื™ืจืŸ "ืžืึทืคึผืข" ืื•ื™ื‘ ื“ื™ ืคืืจืœืื ื’ื˜ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืื™ื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ืงืขืจืŸ (5.12+) ืึธื“ืขืจ ืคืึทืœืŸ ืฆื•ืจื™ืง. ืฆื• ืึท ืจืขืงื•ืจืกื™ื•ื•ืข ืจื•ืคืŸ ืฆื• "ื˜ืฉืึธื•ื•ืŸ" ืึทื ื“ืขืจืฉ. ื ื™ืฆืŸ ืžืึทืคึผื™ื ื’, ืื™ืจ ืงืขื ืขืŸ ืžืึทืคึผืข ืื™ื™ืŸ ื‘ืึทื ื™ืฆืขืจ 'ืก ื˜ืขืงืขืก ืื•ื™ืฃ ืึท ืžืึธื•ื ื˜ืขื“ ืคืจืขืžื“ ืฆืขื˜ื™ื™ืœื•ื ื’ ืฆื• ืื ื“ืขืจืŸ ื‘ืึทื ื™ืฆืขืจ ืื•ื™ืฃ ื“ื™ ืงืจืึทื ื˜ ืกื™ืกื˜ืขื, ืžืื›ืŸ ืขืก ื’ืจื™ื ื’ืขืจ ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืขื ืข ื™ื•ื–ืขืจื– ืฆื• ื˜ื™ื™ืœืŸ ื˜ืขืงืขืก. ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื-ื”ืึธืžืขื“ ืคึผืึธืจื˜ืึทื˜ื™ื•ื• ื”ื™ื™ื ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืžืขืงืึทื ื™ื–ืึทื, ืžืึทืคึผื™ื ื’ ื•ื•ืขื˜ ืœืึธื–ืŸ ื™ื•ื–ืขืจื– ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื–ื™ื™ืขืจ ื”ื™ื™ื ื“ื™ืจืขืงื˜ืขืจื™ื– ืฆื• ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืžื™ื“ื™ืึท ืื•ืŸ ื ื•ืฆืŸ ื–ื™ื™ ืื•ื™ืฃ ืคืึทืจืฉื™ื“ืขื ืข ืงืึธืžืคึผื™ื•ื˜ืขืจืก ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ื”ืึธื‘ืŸ ื“ื™ ื–ืขืœื‘ืข ื‘ืึทื ื™ืฆืขืจ ืฉื™ื™ึทืŸ ืื•ื™ืกืœื™ื™ื’.
  • ืื™ืŸ systemd-nspawn, ื“ื™ "--private-user" ืึธืคึผืฆื™ืข ืงืขื ืขืŸ ืื™ืฆื˜ ื ื•ืฆืŸ ื“ื™ ื•ื•ืขืจื˜ "ืื™ื“ืขื ื˜ื™ื˜ืขื˜" ืฆื• ื’ืœื™ื™ึทืš ืคืึทืจื˜ืจืึทื›ื˜ื  ื‘ืึทื ื™ืฆืขืจ IDs ื•ื•ืขืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึท ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ ืคึผืœืึทืฅ, ื“"ื”. UID 0 ืื•ืŸ UID 1 ืื™ืŸ ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืฉืคื™ื’ืœื˜ ืื™ืŸ UID 0 ืื•ืŸ UID 1 ืื•ื™ืฃ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ื–ื™ื™ึทื˜, ืฆื• ืจืขื“ื•ืฆื™ืจืŸ ื‘ืึทืคืึทืœืŸ ื•ื•ืขืงื˜ืึธืจืก (ื“ืขืจ ืงืึทื ื˜ื™ื™ื ืขืจ ื•ื•ืขื˜ ื‘ืœื•ื™ื– ื‘ืึทืงื•ืžืขืŸ ืคึผืจืึธืฆืขืก ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืื™ืŸ ื–ื™ื™ืŸ ื ืึทืžืขืกืคึผืึทืกืข).
  • ื“ื™ โ€œ--bind-userโ€ ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• systemd-nspawn ืฆื• ืคืึธืจื•ื•ืขืจื“ื™ื“ ืึท ื‘ืึทื ื™ืฆืขืจ ื—ืฉื‘ื•ืŸ ื•ื•ืึธืก ืื™ื– ืื™ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืกื•ื•ื™ื•ื•ืข ืฆื• ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ (ื“ื™ ื”ื™ื™ื ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืื™ื– ืžืึธื•ื ื˜ืขื“ ืื™ืŸ ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ, ืึท ื‘ืึทื ื™ืฆืขืจ / ื’ืจื•ืคึผืข ืคึผืึธื–ื™ืฆื™ืข ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืื•ืŸ UID ืžืึทืคึผื™ื ื’. ืื™ื– ื’ืขื˜ืืŸ ืฆื•ื•ื™ืฉืŸ ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ ืื•ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืกื•ื•ื™ื•ื•ืข).
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืจื™ืงื•ื•ืขืกื˜ื™ื ื’ ืฉื˜ืขืœืŸ ืคึผืึทืกื•ื•ืขืจื“ื– ืฆื• systemd-ask-password ืื•ืŸ systemd-sysusers (passwd.hashed-password. ืื•ืŸ passwd.plaintext-password. ) ื ื™ืฆืŸ ื“ื™ ืžืขืงืึทื ื™ื–ืึทื ื‘ืึทืงืขื ืขื  ืื™ืŸ ืกื™ืกื˜ืขืž 247 ืฆื• ืกื™ืงื™ื•ืจืœื™ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื“ืึทื˜ืŸ ื ื™ืฆืŸ ื™ื ื˜ืขืจืžื™ื“ื™ื™ื˜ ื˜ืขืงืขืก ืื™ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ. ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ื–ืขื ืขืŸ ืื ื’ืขื ื•ืžืขืŸ ืคื•ืŸ ื“ืขื ืคึผืจืึธืฆืขืก ืžื™ื˜ PID1, ื•ื•ืึธืก ื ืขืžื˜ ื–ื™ื™, ืœืžืฉืœ, ืคื•ืŸ ื“ื™ ืงืึทื ื˜ื™ื™ื ืขืจ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืคืึทืจื•ื•ืึทืœื˜ืขืจ, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืคึผืึทืจืึธืœ ืื•ื™ืฃ ื“ืขืจ ืขืจืฉื˜ืขืจ ืฉื˜ื™ื•ื•ืœ.
  • systemd-firstboot ืžื•ืกื™ืฃ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื ื™ืฆืŸ ื“ื™ ื–ื™ื›ืขืจ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคื•ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื“ืึทื˜ืŸ ืžืขืงืึทื ื™ื–ืึทื ืฆื• ืึธื ืคึฟืจืขื’ ืคืึทืจืฉื™ื“ืŸ ืกื™ืกื˜ืขื ืคึผืึทืจืึทืžืขื˜ืขืจืก, ื•ื•ืึธืก ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื™ื ื™ืฉืึทืœื™ื™ื– ืกื™ืกื˜ืขื ืกืขื˜ื˜ื™ื ื’ืก ื•ื•ืขืŸ ืขืจืฉื˜ืขืจ ื‘ื•ื˜ื™ื ื’ ืึท ืงืึทื ื˜ื™ื™ื ืขืจ ื‘ื™ืœื“ ื•ื•ืึธืก ื˜ื•ื˜ ื ื™ืฉื˜ ื”ืึธื‘ืŸ ื“ื™ ื ื™ื™ื˜ื™ืง ืกืขื˜ื˜ื™ื ื’ืก ืื™ืŸ ื“ื™ / ืขื˜ืง ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ.
  • ื“ื™ PID 1 ืคึผืจืึธืฆืขืก ื™ื ืฉื•ืจื– ืึทื– ื‘ื™ื™ื“ืข ื“ื™ ืึทืคึผืึทืจืึทื˜ ื ืึธืžืขืŸ ืื•ืŸ ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’ ื–ืขื ืขืŸ ื’ืขื•ื•ื™ื–ืŸ ื‘ืขืฉืึทืก ืฉื˜ื™ื•ื•ืœ. ืื™ืจ ืงืขื ืขืŸ ื˜ื•ื™ืฉืŸ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ ื“ื•ืจืš ื“ื™ "StatusUnitFormat = ืงืึทืžื‘ื™ื™ื ื“" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ืŸ system.conf ืึธื“ืขืจ ื“ื™ ืงืขืจืŸ ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื” ืึธืคึผืฆื™ืข "systemd.status-unit-format = ืงืึทืžื‘ื™ื™ื ื“"
  • ื“ื™ "--ื‘ื™ืœื“" ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ systemd-machine-id-setup ืื•ืŸ systemd-repart ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืึท ื˜ืขืงืข ืžื™ื˜ ืึท ืžืึทืฉื™ืŸ ืฉื™ื™ึทืŸ ืฆื• ืึท ื“ื™ืกืง ื‘ื™ืœื“ ืึธื“ืขืจ ืฆื• ืคืึทืจื’ืจืขืกืขืจืŸ ื“ื™ ื’ืจื™ื™ืก ืคื•ืŸ ืึท ื“ื™ืกืง ื‘ื™ืœื“.
  • ื MakeDirectories ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ืฆืขื˜ื™ื™ืœื•ื ื’ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืข ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ื“ื™ systemd-repart ื ื•ืฆืŸ, ื•ื•ืึธืก ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ืฉืึทืคึฟืŸ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ื“ื™ืจืขืงื˜ืขืจื™ื– ืื™ืŸ ื“ื™ ื‘ืืฉืืคืŸ ื˜ืขืงืข ืกื™ืกื˜ืขื ืื™ื™ื“ืขืจ ื–ื™ื™ ืฉืคื™ื’ืœื˜ ืื™ืŸ ื“ื™ ืฆืขื˜ื™ื™ืœื•ื ื’ ื˜ื™ืฉ (ืœืžืฉืœ, ืฆื• ืฉืึทืคึฟืŸ ื“ื™ืจืขืงื˜ืขืจื™ื– ืคึฟืึทืจ ืึธื ืงืœืึทืคึผืŸ ืคื•ื ืงื˜ืŸ ืื™ืŸ ื“ืขืจ ื•ื•ืึธืจืฆืœ ืฆืขื˜ื™ื™ืœื•ื ื’ ืึทื–ื•ื™ ืึทื– ืื™ืจ ืงืขื ืขืŸ ืžื™ื“ ืึธื ืงืœืึทืคึผืŸ ื“ื™ ืฆืขื˜ื™ื™ืœื•ื ื’ ืื™ืŸ ืœื™ื™ืขื ืขืŸ-ื‘ืœื•ื™ื– ืžืึธื“ืข). ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ GPT ืคืœืึทื’ืก ืื™ืŸ ื‘ืืฉืืคืŸ ืกืขืงืฉืึทื ื–, ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืคืœืึทื’ืก, ืจืขืึทื“ืึธื ืœื™ ืื•ืŸ NoAuto ืคึผืึทืจืึทืžืขื˜ืขืจืก ื–ืขื ืขืŸ ืฆื•ื’ืขื’ืขื‘ืŸ. ื“ื™ CopyBlocks ืคึผืึทืจืึทืžืขื˜ืขืจ ื”ืื˜ ืึท ื•ื•ืขืจื˜ ืคื•ืŸ "ืึทื•ื˜ืึธ" ืฆื• ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืกืขืœืขืงื˜ื™ืจืŸ ื“ืขื ืงืจืึทื ื˜ ืฉื˜ื™ื•ื•ืœ ืฆืขื˜ื™ื™ืœื•ื ื’ ื•ื•ื™ ื“ื™ ืžืงื•ืจ ื•ื•ืขืŸ ืงืึทืคึผื™ื™ื ื’ ื‘ืœืึทืงืก (ืœืžืฉืœ, ื•ื•ืขืŸ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื•ื•ืึธืจืฆืœ ืฆืขื˜ื™ื™ืœื•ื ื’ ืฆื• ื ื™ื™ึทืข ืžื™ื“ื™ืึท).
  • ื’ืคึผื˜ ื™ืžืคึผืœืึทืžืึทื ืฅ ื“ื™ "ื•ื•ืึทืงืกืŸ-ื˜ืขืงืข-ืกื™ืกื˜ืขื" ืคืึธืŸ, ื•ื•ืึธืก ืื™ื– ืขื ืœืขืš ืฆื• ื“ื™ X-systemd.growfs ื‘ืืจื’ ืึธืคึผืฆื™ืข ืื•ืŸ ื’ื™ื˜ ืึธื˜ืึทืžืึทื˜ื™ืง ื™ืงืกืคึผืึทื ืฉืึทืŸ ืคื•ืŸ ื“ื™ FS ื’ืจื™ื™ืก ืฆื• ื“ื™ ื‘ืึทื•ื ื“ืจื™ื– ืคื•ืŸ ื“ื™ ื‘ืœืึธืง ืžื™ื˜ืœ ืื•ื™ื‘ ื“ื™ FS ื’ืจื™ื™ืก ืื™ื– ืงืœืขื ืขืจืขืจ ื•ื•ื™ ื“ื™ ืฆืขื˜ื™ื™ืœื•ื ื’. ื“ืขืจ ืคืึธืŸ ืื™ื– ืึธื ื•ื•ืขื ื“ืœืขืš ืฆื• Ext3, XFS ืื•ืŸ Btrfs ื˜ืขืงืข ืกื™ืกื˜ืขืžืขืŸ, ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ืขื ื“ื˜ ืฆื• ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื“ื™ื˜ืขืงื˜ืึทื“ ืคึผืึทืจื˜ื™ืฉืึทื ื–. ื“ืขืจ ืคืึธืŸ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืคึฟืึทืจ ืจื™ื™ื˜ืึทื‘ืึทืœ ืคึผืึทืจื˜ื™ืฉืึทื ื– ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื‘ืืฉืืคืŸ ื“ื•ืจืš systemd-repart. ื“ื™ GrowFileSystem ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ ืคืึธืŸ ืื™ืŸ systemd-repart.
  • ื“ื™ /etc/os-release ื˜ืขืงืข ื’ื™ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื ื™ื™ึทืข IMAGE_VERSION ืื•ืŸ IMAGE_ID ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ื•ื•ืขืจืกื™ืข ืื•ืŸ ืฉื™ื™ึทืŸ ืคื•ืŸ ืึทื˜ืึธืžื™ืฉืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ื‘ื™ืœื“ืขืจ. ื“ื™% M ืื•ืŸ% A ืกืคึผืขืกื™ืคื™ืขืจืก ื–ืขื ืขืŸ ืคืืจื’ืขืœื™ื™ื’ื˜ ืฆื• ืคืึทืจื‘ื™ื™ึทื˜ืŸ ืกืคึผืขืกื™ืคื™ืขื“ ื•ื•ืึทืœื•ืขืก ืื™ืŸ ืคืึทืจืฉื™ื“ืŸ ืงืึทืžืึทื ื“ื–.
  • ื“ืขืจ "--ืขืงืกื˜ืขื ืกื™ืึธืŸ" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ืคึผืึธืจื˜ืึทื‘ืœืขืงื˜ืœ ื ื•ืฆืŸ ืฆื• ืึทืงื˜ืึทื•ื•ื™ื™ื˜ ืคึผืึธืจื˜ืึทื˜ื™ื•ื• ืกื™ืกื˜ืขื ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ื‘ื™ืœื“ืขืจ (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ื•ืจืš ื–ื™ื™ ืื™ืจ ืงืขื ืขืŸ ืคืึทืจืฉืคึผืจื™ื™ื˜ืŸ ื‘ื™ืœื“ืขืจ ืžื™ื˜ ื ืึธืš ื‘ืึทื“ื™ื ื•ื ื’ืก ื™ื ืึทื’ืจื™ื™ื˜ื™ื“ ืื™ืŸ ื“ืขืจ ื•ื•ืึธืจืฆืœ ืฆืขื˜ื™ื™ืœื•ื ื’).
  • ื“ื™ systemd-coredump ื ื•ืฆืŸ ื’ื™ื˜ ื“ื™ ื™ืงืกื˜ืจืึทืงืฉืึทืŸ ืคื•ืŸ ELF build-id ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ื™ื ื’ ืึท ื”ืึทืจืฅ ื“ืึทืžืคึผ ืคื•ืŸ ืึท ืคึผืจืึธืฆืขืก, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื ื•ืฆื™ืง ืฆื• ื‘ืึทืฉืœื™ืกืŸ ื•ื•ืึธืก ืคึผืขืงืœ ืึท ืคื™ื™ืœื™ื ื’ ืคึผืจืึธืฆืขืก ื’ืขื”ืขืจื˜ ืฆื• ืื•ื™ื‘ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ื ืึธืžืขืŸ ืื•ืŸ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขื‘ ืึธื“ืขืจ ืจืคึผื ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื™ื– ื’ืขื‘ื•ื™ื˜. ืื™ืŸ ื“ื™ ELF ื˜ืขืงืขืก.
  • ื ื ื™ื™ึทืข ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื‘ืึทื–ืข ืคึฟืึทืจ FireWire (IEEE 1394) ื“ืขื•ื•ื™ืกืขืก ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• udev.
  • ืื™ืŸ ื•ื“ืขื•ื•, ื“ืจื™ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ื–ืขื ืขืŸ ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ "ื ืขื˜_ื™ื“" ื ืขืฅ ืฆื•ื‘ื™ื ื“ ื ืึธืžืขืŸ ืกืขืœืขืงืฆื™ืข ืกื›ืขืžืข ื•ื•ืึธืก ืึธื ืจื™ืจืŸ ืฆื•ืจื™ืง ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™: ืคืึทืœืฉ ืื•ืชื™ื•ืช ืื™ืŸ ืฆื•ื‘ื™ื ื“ ื ืขืžืขืŸ ื–ืขื ืขืŸ ืื™ืฆื˜ ืจื™ืคึผืœื™ื™ืกื˜ ืžื™ื˜ "_"; PCI ื”ืึธื˜ืคึผืœื•ื’ ืฉืคึผืขืœื˜ืœ ื ืขืžืขืŸ ืคึฟืึทืจ ืก390 ืกื™ืกื˜ืขืžืขืŸ ื–ืขื ืขืŸ ืคึผืจืึทืกืขืกื˜ ืื™ืŸ ื”ืขืงืกืึทื“ืขืกื™ืžืึทืœ ืคืึธืจืขื; ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืึทืจื•ื™ืฃ ืฆื• 65535 ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืคึผืกื™ ื“ืขื•ื•ื™ืกืขืก ืื™ื– ืขืจืœื•ื™ื‘ื˜ (ืคืจื™ืขืจ ื ื•ืžืขืจืŸ ื”ืขื›ืขืจ 16383 ื–ืขื ืขืŸ ืืคื’ืขืฉื˜ืขืœื˜).
  • systemd-resolved ืžื•ืกื™ืฃ ื“ื™ "home.arpa" ืคืขืœื“ ืฆื• ื“ื™ NTA (ื ืขื’ืึทื˜ื™ื•ื• ื˜ืจืึทืกื˜ ืึทื ื’ืงืขืจื–) ืจืฉื™ืžื”, ื•ื•ืึธืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืคึฟืึทืจ ื”ื™ื’ืข ื”ื™ื™ื ื ืขื˜ื•ื•ืึธืจืงืก, ืึธื‘ืขืจ ื ื™ืฉื˜ ื’ืขื ื™ืฆื˜ ืื™ืŸ DNSSEC.
  • ื“ื™ CPUAffinity ืคึผืึทืจืึทืžืขื˜ืขืจ ื’ื™ื˜ ืคึผืึทืจืกื™ื ื’ ืคื•ืŸ ื“ื™ "%" ืกืคึผืขืกื™ืคื™ืขืจืก.
  • ื ManageForeignRoutingPolicyRules ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• .ื ืขื˜ื•ื•ืึธืจืง ื˜ืขืงืขืก, ื•ื•ืึธืก ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื•ื™ืกืฉืœื™ืกืŸ systemd-networkd ืคื•ืŸ ืคึผืจืึทืกืขืกื™ื ื’ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืจื•ื˜ื™ื ื’ ืคึผืึทืœืึทืกื™ื–.
  • ื“ืขืจ ืจืขืงื•ื•ื™ืจืขื“ืคืึทืžื™ืœื™ืคืึธืจืึธื ืœื™ื ืข ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ".ื ืขื˜ื•ื•ืึธืจืง" ื˜ืขืงืขืก ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ืขื ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืึทืŸ IPv4 ืึธื“ืขืจ IPv6 ืึทื“ืจืขืก ื•ื•ื™ ืึท ืฆื™ื™ื›ืŸ ืึทื– ื“ื™ ื ืขืฅ ืฆื•ื‘ื™ื ื“ ืื™ื– ืื™ืŸ ื“ื™ "ืึธื ืœื™ื™ืŸ" ืฉื˜ืึทื˜. Networkctl ื’ื™ื˜ ืึท ื•ื•ื™ื™ึทื– ืคื•ืŸ ื“ื™ "ืึธื ืœื™ื™ืŸ" ืกื˜ืึทื˜ื•ืก ืคึฟืึทืจ ื™ืขื“ืขืจ ืœื™ื ืง.
  • ืึทื“ื“ืขื“ ืึธื•ื˜ื’ืึธื™ื ื’ื™ื ื˜ืขืจืคืึทืกืข ืคึผืึทืจืึทืžืขื˜ืขืจ ืฆื•. ื ืขืฅ ื˜ืขืงืขืก ืฆื• ื“ืขืคื™ื ื™ืจืŸ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ื™ื ื˜ืขืจืคื™ื™ืกื™ื– ื•ื•ืขืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ื ืขืฅ ื‘ืจื™ืงืŸ.
  • ื ื’ืจื•ืคืข ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ".ื ืขื˜ื•ื•ืึธืจืง" ื˜ืขืงืขืก, ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ืึท ืžื•ืœื˜ื™ืคึผืึทื˜ื” ื’ืจื•ืคึผืข ืคึฟืึทืจ ืื™ื™ื ืกืŸ ืื™ืŸ ื“ื™ "[ื ืขืงืกื˜ื”ืึธืคึผ]" ืึธืคึผื˜ื™ื™ืœื•ื ื’.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืึธืคึผืฆื™ืขืก "-4" ืื•ืŸ "-6" ืฆื• systemd-network-wait-online ืฆื• ื‘ืึทื’ืจืขื ืขืฆืŸ ื“ื™ ืงืฉืจ ื•ื•ื™ื™ืฅ ื‘ืœื•ื™ื– ืฆื• IPv4 ืึธื“ืขืจ IPv6.
  • ื ืจืขืœื™ื™ึทื˜ืึทืจื’ืขื˜ ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ DHCP ืกืขืจื•ื•ืขืจ ืกืขื˜ื˜ื™ื ื’ืก, ื•ื•ืึธืก ืกื•ื•ื™ื˜ืฉื™ื– ื“ื™ ืกืขืจื•ื•ืขืจ ืฆื• DHCP Ralay ืžืึธื“ืข. ืคึฟืึทืจ ื ืึธืš ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ DHCP ืจืขืœืข, ื“ื™ RelayAgentCircuitId ืื•ืŸ RelayAgentRemoteId ืึธืคึผืฆื™ืขืก ื–ืขื ืขืŸ ื’ืขืคึฟื™ื ื˜.
  • ื“ืขืจ ืกืขืจื•ื•ื™ืจืขืจ ืึทื“ืจืขืก ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ DHCP ืกืขืจื•ื•ืขืจ, ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืฆื• ื‘ืคื™ืจื•ืฉ ืฉื˜ืขืœืŸ ื“ื™ ืกืขืจื•ื•ืขืจ IP ืึทื“ืจืขืก (ืึทื ื“ืขืจืฉ ื“ื™ ืึทื“ืจืขืก ืื™ื– ืื•ื™ืกื’ืขืงืœื™ื‘ืŸ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ).
  • ื“ืขืจ DHCP ืกืขืจื•ื•ืขืจ ื™ืžืคึผืœืึทืžืึทื ืฅ ื“ื™ [DHCPServerStaticLease] ืึธืคึผื˜ื™ื™ืœื•ื ื’, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ืกื˜ืึทื˜ื™ืง ืึทื“ืจืขืก ื‘ื™ื™ื ื“ื™ื ื’ื– (DHCP ืœื™ืกื™ื–), ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ IP ื‘ื™ื™ื ื“ื™ื ื’ื– ืฆื• MAC ืึทื“ืจืขืกืขืก ืื•ืŸ ื•ื•ื™ืฆืข ื•ื•ืขืจืกืึท.
  • ื“ื™ RestrictAddressFamilies ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืฉื˜ื™ืฆื˜ ื“ื™ "ืงื™ื™ืŸ" ื•ื•ืขืจื˜, ื•ื•ืึธืก ืžื™ื˜ืœ ืึทื– ื“ื™ ืกืขืจื•ื•ื™ืก ื•ื•ืขื˜ ื ื™ืฉื˜ ื”ืึธื‘ืŸ ืึทืงืกืขืก ืฆื• ืกืึทืงืึทืฅ ืคื•ืŸ ืงื™ื™ืŸ ืึทื“ืจืขืก ืžืฉืคึผื—ื”.
  • ืื™ืŸ ื“ื™ ".ื ืขื˜ื•ื•ืึธืจืง" ื˜ืขืงืขืก ืื™ืŸ ื“ื™ [ืึทื“ืจืขืก], [DHCPv6PrefixDelegation] ืื•ืŸ [IPv6Prefix] ืกืขืงืฉืึทื ื–, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ RouteMetric ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ืžืขื˜ืจื™ืง ืคึฟืึทืจ ื“ื™ ืžืึทืจืฉืจื•ื˜ ืคึผืจืขืคื™ืงืก ื‘ืืฉืืคืŸ ืคึฟืึทืจ ื“ื™ ืกืคึผืขืกืึทืคื™ื™ื“ ืึทื“ืจืขืก.
  • nss-myhostname ืื•ืŸ systemd-resolved ืฆื•ืฉื˜ืขืœืŸ ืกื™ื ื˜ืขื– ืคื•ืŸ ื“ื ืก ืจืขืงืึธืจื“ืก ืžื™ื˜ ืึทื“ืจืขืกืขืก ืคึฟืึทืจ ืžื—ื ื•ืช ืžื™ื˜ ืึท ืกืคึผืขืฆื™ืขืœ ื ืึธืžืขืŸ "_outbound", ืคึฟืึทืจ ื•ื•ืึธืก ืึท ื”ื™ื’ืข IP ืื™ื– ืฉื˜ืขื ื“ื™ืง ืืจื•ื™ืก, ืื•ื™ืกื“ืขืจื•ื•ื™ื™ืœื˜ ืื™ืŸ ืœื•ื™ื˜ ืžื™ื˜ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืจื•ืฅ ื’ืขื ื™ืฆื˜ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืงืึทื ืขืงืฉืึทื ื–.
  • ืื™ืŸ .ื ืขื˜ื•ื•ืึธืจืง ื˜ืขืงืขืก, ืื™ืŸ ื“ื™ "[DHCPv4]" ืึธืคึผื˜ื™ื™ืœื•ื ื’, ืึท ืคืขืœื™ืงื™ื™ึทื˜ ืึทืงื˜ื™ื•ื• RoutesToNTP ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ, ื•ื•ืึธืก ืจื™ืงื•ื•ื™ื™ืขืจื– ืึทื“ื™ื ื’ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืžืึทืจืฉืจื•ื˜ ื“ื•ืจืš ื“ื™ ืงืจืึทื ื˜ ื ืขืฅ ืฆื•ื‘ื™ื ื“ ืฆื• ืึทืงืกืขืก ื“ื™ NTP ืกืขืจื•ื•ืขืจ ืึทื“ืจืขืก ื‘ืืงื•ืžืขืŸ ืคึฟืึทืจ ื“ืขื ืฆื•ื‘ื™ื ื“ ื ื™ืฆืŸ DHCP (ืขื ืœืขืš ืฆื• ื“ื ืก). , ื“ื™ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื’ืึทืจืึทื ื˜ื™ืจืŸ ืึทื– ืคืึทืจืงืขืจ ืฆื• ื“ื™ NTP ืกืขืจื•ื•ืขืจ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืจืึทื•ื˜ื™ื“ ื“ื•ืจืš ื“ื™ ืฆื•ื‘ื™ื ื“ ื“ื•ืจืš ื•ื•ืึธืก ื“ื™ ืึทื“ืจืขืก ืื™ื– ื‘ืืงื•ืžืขืŸ).
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืกืขื˜ื˜ื™ื ื’ืก ืคื•ืŸ SocketBindAllow ืื•ืŸ SocketBindDeny ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืึทืงืกืขืก ืฆื• ืกืึทืงืึทืฅ ื’ืขื‘ื•ื ื“ืŸ ืฆื• ื“ืขื ืงืจืึทื ื˜ ื“ื™ื ืกื˜.
  • ืคึฟืึทืจ ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืขืก, ืึท ืงืึทื ื“ื™ืฉืึทื ืึทืœ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื’ืขืจื•ืคึฟืŸ ืงืึธื ื“ื™ื˜ื™ืึธืŸ ืคื™ืจืžื•ื•ืึทืจืข ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฉืึทืคึฟืŸ ื˜ืฉืขืงืก ื•ื•ืึธืก ืึธืคึผืฉืึทืฆืŸ ืคื™ืจืžื•ื•ืึทืจืข ืคืึทื ื’ืงืฉืึทื ื–, ืึทื–ืึท ื•ื•ื™ ืึทืจื‘ืขื˜ ืื•ื™ืฃ UEFI ืื•ืŸ device.tree ืกื™ืกื˜ืขืžืขืŸ, ืื•ืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืžื™ื˜ ื–ื™ื›ืขืจ ืžื™ื˜ืœ-ื‘ื•ื™ื ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื–.
  • ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื™ ConditionOSRelease ืึธืคึผืฆื™ืข ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืคืขืœื“ืขืจ ืื™ืŸ ื“ื™ /etc/os-release ื˜ืขืงืข. ื•ื•ืขืŸ ื“ื™ืคื™ื™ื ื™ื ื’ ื˜ื ืึธื™ื ืคึฟืึทืจ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ืคืขืœื“ ื•ื•ืึทืœื•ืขืก, ื“ื™ ืึธืคึผืขืจื™ื™ื˜ืขืจื– "=", "!=", "<", "<=", ">=", ">" ื–ืขื ืขืŸ ืคึผืึทืกื™ืง.
  • ืื™ืŸ ื“ื™ ื”ืึธืกื˜ื ืึทืžืขืงื˜ืœ ื ื•ืฆืŸ, ืงืึทืžืึทื ื“ื– ื•ื•ื™ "ื‘ืึทืงื•ืžืขืŸ-ืงืกื™ื–" ืื•ืŸ "ืฉื˜ืขืœืŸ-ืงืกื™ื–" ื–ืขื ืขืŸ ื‘ืืคืจื™ื™ื˜ ืคื•ืŸ ื“ื™ "ื‘ืึทืงื•ืžืขืŸ" ืื•ืŸ "ืฉื˜ืขืœืŸ" ืคึผืจืขืคื™ืงืก, ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ "ื”ืึธืกื˜ื ืึทืžืขืงื˜ืœ ื‘ืึทืงื•ืžืขืŸ-ื”ืึธืกื˜ื ืึทืžืข" ืื•ืŸ "ื”ืึธืกื˜ื ืึทืžืขืงื˜ืœ "ืฉื˜ืขืœืŸ-ื”ืึธืกื˜ื ืึทืžืข" ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ ื“ื™ ื‘ืึทืคึฟืขืœ "ื”ืึธืกื˜ื ืึทืžืขืงื˜ืœ ื”ืึธืกื˜ื ืึทืžืข" ", ื“ื™ ืึทืกื™ื™ื ืžืึทื ื˜ ืคื•ืŸ ืึท ื•ื•ืขืจื˜ ืื™ืŸ ื•ื•ืึธืก ืื™ื– ื‘ืืฉืœืืกืŸ ื“ื•ืจืš ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืึทืŸ ื ืึธืš ืึทืจื’ื•ืžืขื ื˜ ("ื”ืึธืกื˜ื ืึทืžืขืงื˜ืœ ื”ืึธืกื˜ื ืึทืžืข ื•ื•ืขืจื˜"). ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืขืœื˜ืขืจืข ืงืึทืžืึทื ื“ื– ืื™ื– ืจื™ื˜ื™ื™ื ื“ ืฆื• ืขื ืฉื•ืจ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™.
  • ื“ื™ ืกื™ืกื˜ืขื-ื“ืขื˜ืขืงื˜-ื•ื•ื™ืจื˜ ื ื•ืฆืŸ ืื•ืŸ ื“ื™ ืงืึธื ื“ื™ื˜ื™ืึธืŸ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื™ื ืฉื•ืจ ืจื™ื›ื˜ื™ืง ืœืขื’ื™ื˜ื™ืžืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹Amazon EC2 ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ.
  • ื“ื™ LogLevelMax ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืื™ืŸ ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืขืก ืื™ืฆื˜ ืึทืคึผืœื™ื™ื– ื ื™ื˜ ื‘ืœื•ื™ื– ืฆื• ืงืœืึธืฅ ืึทืจื˜ื™ืงืœืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื“ื•ืจืš ื“ื™ ื“ื™ื ืกื˜, ืึธื‘ืขืจ ืื•ื™ืš ืฆื• PID 1 ืคึผืจืึธืฆืขืก ืึทืจื˜ื™ืงืœืขืŸ ื•ื•ืึธืก ื“ืขืจืžืึธื ืขืŸ ื“ื™ ื“ื™ื ืกื˜.
  • ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึทืจื™ื™ึทื ื ืขืžืขืŸ SBAT (UEFI Secure Boot Advanced Targeting) ื“ืึทื˜ืŸ ืื™ืŸ systemd-boot EFI PE ื˜ืขืงืขืก.
  • /etc/crypttab ื™ืžืคึผืœืึทืžืึทื ืฅ ื ื™ื™ึท ืึธืคึผืฆื™ืขืก "ื›ืขื“ืœืขืกืก" ืื•ืŸ "ืคึผืึทืจืึธืœ-ืขืงืึธื•" - ื“ืขืจ ืขืจืฉื˜ืขืจ ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื”ืึธืคึผืงืขืŸ ืึทืœืข ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื™ื ื˜ืขืจืึทืงื˜ื™ื•ื•ืœื™ ืึทืกืงื™ื ื’ ืคึฟืึทืจ ืคึผืึทืกื•ื•ืขืจื“ื– ืื•ืŸ ืคึผื™ื ืก ืคื•ืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ, ืื•ืŸ ื“ื™ ืจื’ืข ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ ืื•ืคึฟืŸ ืคึฟืึทืจ ื•ื•ื™ื™ึทื– ืคื•ืŸ ืคึผืึทืจืึธืœ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘. (ื•ื•ื™ื™ึทื–ืŸ ื’ืึธืจื ื™ืฉื˜, ื•ื•ื™ื™ึทื–ืŸ ื›ืึทืจืึทืงื˜ืขืจ ื“ื•ืจืš ื›ืึทืจืึทืงื˜ืขืจ ืื•ืŸ ื•ื•ื™ื™ึทื–ืŸ ืึทืกื˜ืขืจื™ืกืงืก). ื“ื™ "--ืขืงืึธื•" ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• systemd-ask-password ืคึฟืึทืจ ืขื ืœืขืš ืฆื•ื•ืขืงืŸ.
  • systemd-cryptenroll, systemd-cryptsetup ืื•ืŸ systemd-homed ื”ืึธื‘ืŸ ื™ืงืกืคึผืึทื ื“ื™ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืึทื ืœืึทืงื™ื ื’ ื™ื ืงืจื™ืคึผื˜ื™ื“ LUKS2 ืคึผืึทืจื˜ื™ืฉืึทื ื– ื ื™ืฆืŸ FIDO2 ื˜ืึธืงืขื ืก. ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึทืข ืึธืคึผืฆื™ืขืก "--fido2-with-user-presence", "--fido2-with-user-verification" ืื•ืŸ "-fido2-with-client-pin" ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื‘ืึทื ื™ืฆืขืจ ื’ืฉืžื™ื•ืช ื‘ื™ื™ึทื–ื™ื™ึทืŸ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ, ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืื•ืŸ ื“ื™ ื ื•ื™ื˜ ืฆื• ืึทืจื™ื™ึทืŸ ืึท PIN ืงืึธื“.
  • ืฆื•ื’ืขื’ืขื‘ืŸ "--user", "--ืกื™ืกื˜ืขื", "--ืžืขืจื’ืข" ืื•ืŸ "--ื˜ืขืงืข" ืึธืคึผืฆื™ืขืก ืฆื• systemd-journal-gatewayd, ืขื ืœืขืš ืฆื• ื“ื™ journalctl ืึธืคึผืฆื™ืขืก.
  • ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ืจืขืงื˜ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– ืฆื•ื•ื™ืฉืŸ ื•ื ื™ืฅ ืกืคึผืขืกื™ืคื™ืขื“ ื“ื•ืจืš ื“ื™ OnFailure ืื•ืŸ Slice ืคึผืึทืจืึทืžืขื˜ืขืจืก, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื™ืžืคึผืœื™ืกืึทื˜ ืคืึทืจืงืขืจื˜ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– OnFailureOf ืื•ืŸ SliceOf ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื ื•ืฆื™ืง, ืœืžืฉืœ, ืคึฟืึทืจ ื“ื™ื˜ืขืจืžืึทื ื™ื ื’ ืึทืœืข ื•ื ื™ืฅ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ืจืขืคื˜ืœ.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึท ื˜ื™ื™ืคึผืก ืคื•ืŸ ื“ื™ืคึผืขื ื“ืึทื ืกื™ื– ืฆื•ื•ื™ืฉืŸ ื•ื ื™ืฅ: OnSuccess ืื•ืŸ OnSuccessOf (ื“ืขืจ ืคืึทืจืงืขืจื˜ ืคื•ืŸ OnFailure, ื’ืขืจื•ืคึฟืŸ ืื•ื™ืฃ ืžืฆืœื™ื— ืงืึทืžืคึผืœื™ืฉืึทืŸ); PropagatesStopTo ืื•ืŸ StopPropagatedFrom (ื“ืขืจืœื•ื™ื‘ืŸ ืื™ืจ ืฆื• ืคืึทืจืžืขืจืŸ ืึท ืึทืคึผืึทืจืึทื˜ ืก ื”ืึทืœื˜ืŸ ื’ืขืฉืขืขื ื™ืฉ ืฆื• ืืŸ ืื ื“ืขืจ ืึทืคึผืึทืจืึทื˜); Upholds ืื•ืŸ UpheldBy (ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ืฆื• ืจื™ืกื˜ืึทืจื˜).
  • ื“ื™ systemd-ask-password ื ื•ืฆืŸ ืื™ืฆื˜ ื”ืื˜ ืึท "--ืขืžืึธื“ื–ืฉื™" ืึธืคึผืฆื™ืข ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืื•ื™ืกื–ืขืŸ ืคื•ืŸ ื“ื™ ืคึผืึทื“ืœืึธืงืง ืกื™ืžื‘ืึธืœ (๐Ÿ”) ืื™ืŸ ื“ื™ ืคึผืึทืจืึธืœ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘ ืฉื•ืจื”.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ืึทืงื™ื•ืžืขื ื˜ื™ื™ืฉืึทืŸ ืื•ื™ืฃ ืกื™ืกื˜ืขืžื“ ืžืงื•ืจ ื‘ื•ื™ื ืกื˜ืจื•ืงื˜ื•ืจ.
  • ืคึฟืึทืจ ื•ื ื™ืฅ, ืึท ืžืขืžืึธืจื™ ืึทื•ื•ืึทื™ืœืึทื‘ืœืข ืคืึทืจืžืึธื’ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜, ื•ื•ืึธืก ื•ื•ื™ื™ื–ืŸ ื•ื•ื™ ืคื™ืœ ื–ื™ืงืึธืจืŸ ื“ืขืจ ืึทืคึผืึทืจืึทื˜ ื”ืื˜ ืœื™ื ืงืก ืื™ื™ื“ืขืจ ืจื™ื˜ืฉื™ื ื’ ื“ื™ ืฉื™ืขื•ืจ ืฉื˜ืขืœืŸ ื“ื•ืจืš ื“ื™ MemoryMax, MemoryHigh ืึธื“ืขืจ MemoryAvailable ืคึผืึทืจืึทืžืขื˜ืขืจืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’