ืกื™ืกื˜ืขื ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืžืขืœื“ื•ื ื’ 257

ื ืึธืš ื–ืขืงืก ื—ื“ืฉื™ื ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’, ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืกื™ืกื˜ืขื ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืกื™ืกื˜ืขืž 257 ืื™ื– ื’ืขื•ื•ืขืŸ ื“ืขืจืœืื ื’ื˜: ื ื™ื™ึท ื™ื•ื˜ื™ืœืึทื˜ื™ื– systemd-sbsign ืื•ืŸ systemd-keyutil, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ MPTCP ื•ื•ืขืŸ ืึทืงื˜ื™ื•ื•ื™ื™ื˜ื™ื“ ืื™ื‘ืขืจ ืึท ื›ืึธืœืขืœ, ืขืจืฉื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื‘ื ื™ืŸ ืžื™ื˜ ื“ื™ Musl C ื‘ื™ื‘ืœื™ืึธื˜ืขืง, ื“ื™. updatectl ื ื•ืฆืŸ ืคึฟืึทืจ ืึธื ืคื™ืจื•ื ื’ ื“ื™ ื™ื™ึทื ืžืึธื ื˜ื™ืจื•ื ื’ ืคื•ืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื“ื•ืจืš systemd-sysupdate, ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืงืึทื˜ืขืจ ื‘ืึทื“ื™ื ื•ื ื’ืก ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ PID ื ืึธืžืขืŸ ืกืคึผื™ื™ืกืึทื–, ืฉื•ืฅ ืงืขื’ืŸ ืึทืงืกืึทื“ืขื ื˜ืึทืœ ื“ื™ืœื™ืฉืึทืŸ ืคื•ืŸ ื˜ืขืงืขืก ื•ื•ืขืŸ ื ื™ืฆืŸ "systemd-tmpfiles-purge".

ืฆื•ื•ื™ืฉืŸ ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’:

  • ื ื ื™ื™ืข ื ื•ืฆืœืขื›ืงื™ื™ื˜, systemd-sbsign, ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ื’ืขื•ื•ืืจืŸ ืคืืจ ื“ื™ื“ื–ืฉื™ื˜ืืœ ืื•ื ื˜ืขืจืฉืจื™ื™ื‘ืŸ ืขืงืกืขืงื™ื•ื˜ืขื‘ืœ ื˜ืขืงืขืก ืื™ืŸ ื“ืขื PE (ืคืืจื˜ืจืขื’ืœืขื›ืขืจ ืขืงืกืขืงื™ื•ื˜ืขื‘ืœ) ืคืืจืžืื˜ ื‘ืืฉื˜ื™ืžื˜ ืคืืจ ื ื•ืฆืŸ ื‘ื™ื™ื ื‘ื•ื˜ืŸ ืื™ืŸ EFI ื–ื™ื›ืขืจืขืจ ื‘ื•ื˜ ืžืึธื“ืข. ืžืื˜ืืจืŸ ืื•ืŸ ืคืจืื•ื•ื™ื™ื“ืขืจืก ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ืขืจ OpenSSL ื‘ื™ื‘ืœื™ืื˜ืขืง ืงืขื ืขืŸ ื’ืขื ื•ืฆื˜ ื•ื•ืขืจืŸ ืคืืจ ืื•ื ื˜ืขืจืฉืจื™ืคื˜ ื“ื–ืฉืขื ืขืจื™ื™ืฉืึทืŸ. systemd-sbsign ืงืขืŸ ื’ืขื ื•ืฆื˜ ื•ื•ืขืจืŸ ืืœืก ืืŸ ืืœื˜ืขืจื ืื˜ื™ื•ื• ืฆื• ื“ื™ sbsigntool ืื•ืŸ pesign ืืคืœื™ืงืืฆื™ืขืก ืื™ืŸ ื“ืขื ukify ื ื•ืฆืœืขื›ืงื™ื™ื˜ ื‘ื™ื™ื ื“ื–ืฉืขื ืขืจื™ืจืŸ ืื•ื ื™ื•ื•ืขืจืกืืœืข ืงืขืจื ืขืœ ื‘ื™ืœื“ืขืจ (UKIs), ื•ื•ืืก ืงืืžื‘ื™ื ื™ืจืŸ ื UEFI ื‘ื•ื˜ ืœืื•ื“ืขืจ (UEFI ื‘ื•ื˜ ืกื˜ืื‘) ืื•ืŸ ื ืงืขืจื ืขืœ ื‘ื™ืœื“ ืื™ืŸ ืื™ื™ืŸ ื˜ืขืงืข. Linux ืื•ืŸ ื“ื™ initrd ืกื™ืกื˜ืขื ืกื‘ื™ื‘ื” ืื™ื– ืืจื™ื™ื ื’ืขืœืื“ืŸ ืื™ืŸ ื–ื›ืจื•ืŸ.
  • ื ื ื™ื™ึทืข ื ื•ืฆืŸ, systemd-keyutil, ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ื•ื•ืึธืก ื™ืžืคึผืœืึทืžืึทื ืฅ ืคืึทืจืฉื™ื“ืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืื•ื™ืฃ ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœืขืŸ ืื•ืŸ X.509 ืกืขืจื˜ื™ืคื™ืงืึทืฅ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, systemd-keyutil ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืคึผืจื•ื‘ื™ืจืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืœืึธื“ืŸ ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœืขืŸ ืื•ืŸ ืกืขืจื˜ื™ืคื™ืงืึทืฅ, ืื•ืŸ ืขืงืกื˜ืจืึทืงื˜ ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœืขืŸ ืคึฟื•ืŸ ื–ื™ื™ ืื™ืŸ PEM ืคึฟืึธืจืžืึทื˜.
  • ืื™ืŸ ื“ื™ ".socket" ืื™ื™ื ื”ื™ื™ื˜ืŸ ื•ื•ืืก ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื–ื™ื›ืขืจ ืžืื›ืŸ ื“ื™ ืืคืขืจืืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขื ืกืืงืขื˜ ืืงื˜ื™ื•ื•ืืฆื™ืข ืžืขืงืื ื™ื–ื (ืื ื”ื™ื™ื‘ืŸ ืคืจืืฆืขืกืŸ ื•ื•ืขืŸ ืžืขืŸ ืคืจื•ื‘ื™ืจื˜ ืฆื• ืื•ื™ืคืฉื˜ืขืœืŸ ื ื ืขืฅ ืคืืจื‘ื™ื ื“ื•ื ื’), ื•ื•ืขืจื˜ ืื™ืžืคืœืขืžืขื ื˜ื™ืจื˜ ืฉื˜ื™ืฆืข ืคืืจ MPTCP (Multipath TCP), ื ืคืืจืœืขื ื’ืขืจื•ื ื’ ืคื•ืŸ ื“ืขื TCP ืคืจืื˜ืืงืืœ ืคืืจืŸ ืืจื’ืื ื™ื–ื™ืจืŸ ื“ื™ ืืคืขืจืืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื TCP ืคืืจื‘ื™ื ื“ื•ื ื’ ืžื™ื˜ืŸ ืฆื•ืฉื˜ืขืœืŸ ืคืืงืขื˜ืŸ ื’ืœื™ื™ื›ืฆื™ื™ื˜ื™ื’ ืื•ื™ืฃ ืขื˜ืœื™ื›ืข ืจื•ื˜ืขืก ื“ื•ืจืš ืคืืจืฉื™ื“ืขื ืข ื ืขืฅ ืื™ื ื˜ืขืจืคื™ื™ืกืขืก ืคืืจื‘ื•ื ื“ืŸ ืฆื• ืคืืจืฉื™ื“ืขื ืข. ืžื™ื™ืŸ IP ืึทื“ืจืขืก.
  • ื›ื•ืœืœ ืขื ื“ืขืจื•ื ื’ืขืŸ ื ื™ื™ื˜ื™ืง ืฆื• ื‘ื•ื™ืขืŸ ืžื™ื˜ ื“ื™ ื ืึธืจืžืึทืœ Musl C ื‘ื™ื‘ืœื™ืึธื˜ืขืง.
  • ืคืืจืฉื™ื“ืขื ืข systemd ืงืืžืคืื ืขื ื˜ืŸ ื•ื•ืืก ื•ื•ื™ื™ื–ืŸ ืคืืจืฉืจื™ื˜ ืื™ื ื“ื™ืงืื˜ืืจืŸ (ืœืžืฉืœ, systemd-repart, systemd-sysupdate/updatectl, ืื•ืŸ importctl) ืฉื˜ื™ืฆืŸ ื™ืขืฆื˜ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ANSI ืกื™ืงื•ื•ืขื ืกืขืก ืฆื• ืื ื™ืžื™ืจืŸ ืคืืจืฉืจื™ื˜ ื“ื™ืกืคึผืœื™ื™ื–. ืื–ืขืœื›ืข ืกื™ืงื•ื•ืขื ืกืขืก ื•ื•ืขืจืŸ ื™ืขืฆื˜ ื ืืจ ื’ืขืฉื˜ื™ืฆื˜ ืื™ืŸ Windows ื˜ืขืจืžื™ื ืึทืœ (ืขืก ื•ื•ืขืจื˜ ืขืจื•ื•ืึทืจื˜ืขื˜ ืึทื– ืžื™ื˜ ื“ืขืจ ืฆื™ื™ื˜ ื•ื•ืขื˜ ืึทืŸ ืขื ืœืขื›ืข ืคึฟื•ื ืงืฆื™ืข ื•ื•ืขืจืŸ ืื™ื‘ืขืจื’ืขืคึฟื™ืจื˜ ืฆื• ื˜ืขืจืžื™ื ืึทืœ ืขืžื•ืœืึทื˜ืึธืจืŸ ืคึฟืึทืจ Linux).
  • ื“ื™ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืคื•ืŸ ื“ื™ systemd-sysupdate ืงืึธืžืคึผืึธื ืขื ื˜ ื–ืขื ืขืŸ ื™ืงืกืคึผืึทื ื“ื™ื“, ื’ืขื ื™ืฆื˜ ืฆื• ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื“ืขื˜ืขืงื˜, ืืจืืคืงืืคื™ืข ืื•ืŸ ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื ื™ืฆืŸ ืึทืŸ ืึทื˜ืึธืžื™ืฉืข ืžืขืงืึทื ื™ื–ืึทื ืคึฟืึทืจ ืจื™ืคึผืœื™ื™ืกื™ื ื’ ืคึผืึทืจื˜ื™ืฉืึทื ื–, ื˜ืขืงืขืก ืึธื“ืขืจ ื“ื™ื™ืจืขืงื˜ืขืจื™ื– (ืฆื•ื•ื™ื™ ืคืจื™ื™ึท ืคึผืึทืจื˜ื™ืฉืึทื ื– / ื˜ืขืงืขืก / ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜, ืื™ื™ื ืขืจ ืคื•ืŸ ื•ื•ืึธืก ื›ึผื•ืœืœ ื“ื™ ืงืจืึทื ื˜ ืึทืจื‘ืขื˜. ืžื™ื˜ืœ, ืื•ืŸ ื“ื™ ืื ื“ืขืจืข ื™ื ืกื˜ืึธืœื– ื“ื™ ื•ื•ื™ื™ึทื˜ืขืจ ืื™ื™ื ืขืจ) ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ, ื ืึธืš ื•ื•ืึธืก ื“ื™ ืกืขืงืฉืึทื ื– / ื˜ืขืงืขืก / ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ื–ืขื ืขืŸ ืกื•ื•ืึทืคึผื˜). ืื™ืŸ ืคื™ืจ, systemd-sysupdate ืื™ื– ืฉื•ื™ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ GNOME OS.

    ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ systemd-sysupdate ืคึผืจืึธืฆืขืก, ืึท ื“ื™ื ืกื˜ ืžื™ื˜ ื“ื™ ื–ืขืœื‘ืข ื ืึธืžืขืŸ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ื•ื•ืึธืก ืึทืœืึทื•ื– D-Bus ืฆื• ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืคื™ืจืŸ ืกื™ืกื˜ืขื ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื“ื•ืจืš ืึทืŸ ืึทื ืคึผืจื™ื•ื•ื™ืœื“ื–ืฉื“ ื‘ืึทื ื™ืฆืขืจ. ืฆื• ืคื™ืจืŸ ื“ื™ ืกืขืจื•ื•ื™ืก, ืึท ื ื™ื™ึทืข ืึทืคึผื“ื™ื™ื˜ืขืงื˜ืœ ื ื•ืฆืŸ ืื™ื– ืื•ื™ืš ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜. ืฆื•ื’ืขื’ืขื‘ืŸ "--ืึธืคืคืœื™ื ืข" ืคืึธืŸ ืฆื• systemd-sysupdate ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ื“ืึทื•ื ืœืึธื•ื“ื™ื ื’ ืคื•ืŸ ืžืขื˜ืึทื“ืึทื˜ืึท ืื™ื‘ืขืจ ื“ื™ ื ืขืฅ ืื•ืŸ ื ื•ืฆืŸ ื‘ืœื•ื™ื– ื•ื•ืขืจืกื™ืขืก ืฉื•ื™ืŸ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืฆื• ื“ื™ ื”ื™ื’ืข ืกื™ืกื˜ืขื. ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคึผืจืึธื“ื•ืงืฆื™ืข ืื™ืŸ JSON ืคึฟืึธืจืžืึทื˜ ืคึฟืึทืจ ืึทืœืข ืงืึทืžืึทื ื“ื–.

  • ื ื ื™ื™ึทืข ืคืึทืจืžืึธื’ "PrivatePIDs" ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืคึฟืึทืจ ืกืขืจื•ื•ื™ืกืขืก, ืžื™ื˜ ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ืงืึทื˜ืขืจ ืคื•ืŸ ืคึผืจืึทืกืขืกืึทื– ืžื™ื˜ PID 1 (ื™ื ื™ื˜ ืคึผืจืึธืฆืขืก) ืื™ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืคึผืจืึธืฆืขืก ื™ื“ืขื ื˜ื™ืคื™ืขืจ ืคึผืœืึทืฅ (PID ื ืึทืžืขืกืคึผืึทืกืข). ืื™ืŸ ื“ืขืจ ืกื‘ื™ื‘ื” ื‘ืืฉืืคืŸ ืคึฟืึทืจ ื“ื™ ืœืึธื ื˜ืฉื˜ ืคึผืจืึธืฆืขืก, ื‘ืœื•ื™ื– ืคึผืจืึทืกืขืกืึทื– ืคื•ืŸ ื“ื™ ื ืึทืžืขืกืคึผืึทืกืข ื‘ืืฉืืคืŸ ืคึฟืึทืจ ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืงืขื ื˜ื™ืง.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคืึทืœ-ื™ื ืกืขื ืกื™ื˜ื™ื•ื• ืฉื•ื•ืขื‘ืขืœืขืš ืฆื• ื•ื“ืขื•ื• ื›ึผืœืœื™ื (ืœืžืฉืœ 'ATTR {foo} == iยปabcdยป'). ื ื™ืฆืŸ udev, ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืฆื•ืฉื˜ืขืœืŸ ืึทื ืคึผืจื™ื•ื•ื™ืœื™ื“ื–ืฉื“ ื”ื™ื’ืข ื™ื•ื–ืขืจื– ืึทืงืกืขืก ("uaccess") ืฆื• ื“ื™ /dev/udmabuf ืžื™ื˜ืœ, ื•ื•ืึธืก ืื™ื– ื ื™ื™ื˜ื™ืง ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ IPMI ืงืึทืžืขืจืึทืก ื“ื•ืจืš ืœื™ื‘ืงืึทืžืขืจืึท. udev ื’ื™ื˜ ื“ืขืจืงืขื ื•ื ื’ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืงืจื™ืคึผื˜ืึธ ื•ื•ืึธืœืึทืฅ ืžื™ื˜ ืึท ื•ืกื‘ ืฆื•ื‘ื™ื ื“ ืื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ID_HARDWARE_WALLET ืคืึทืจืžืึธื’ ืคึฟืึทืจ ื–ื™ื™, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฆื•ืœื™ื™ื’ืŸ ื“ื™ "ื•ืึทืงืกืขืก" ืžืึธื“ืข ืฆื• ื–ื™ื™ ืคึฟืึทืจ ืึทืงืกืขืก ื“ื•ืจืš ืึทื ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ื ื™ืฆืขืจืก.
  • ื ื™ื™ึทืข ืคืขืœื“ืขืจ RELEASE_TYPE, EXPERIMENT ืื•ืŸ EXPERIMENT_URL ื–ืขื ืขืŸ ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ /etc/os-release ื˜ืขืงืข. "RELEASE_TYPE" ืงืขื ืขืŸ ื ืขืžืขืŸ ื“ื™ ื•ื•ืึทืœื•ืขืก "ืขืงืกืคึผืขืจื™ืžืขื ื˜ืึทืœ", "ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’", "ืกื˜ืึทื‘ื™ืœ" ืื•ืŸ "ืœืฅ" ืฆื• ื‘ืึทื–ื•ื ื“ืขืจ ืกื˜ืึทื‘ื™ืœ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืื•ืŸ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ื‘ื•ื™ืขืŸ. ื“ื™ EXPERIMENT ืื•ืŸ EXPERIMENT_URL ืคึผืึทืจืึทืžืขื˜ืขืจืก ื–ืขื ืขืŸ ื‘ื“ืขื” ืฆื• ื“ืขืจืงืœืขืจืŸ ื“ื™ ืขืกืึทื ืก ืคื•ืŸ ื“ื™ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ื‘ื•ื™ืขืŸ.
  • ื“ื™ run0 ื ื•ืฆืŸ, ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื•ื•ื™ ืึท ืคืึทืจื‘ื™ื™ึทื˜ ืคึฟืึทืจ ื“ื™ ืกื•ื“ืึธ ืคึผืจืึธื’ืจืึทื, ื”ืื˜ ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ "--shell-prompt-prefix" ืึธืคึผืฆื™ืข, ื•ื•ืึธืก ืกืคึผืขืฆื™ืคื™ืฆื™ืจื˜ ื“ื™ ืคึผืจืขืคื™ืงืก ืฉื˜ืจื™ืงืœ ืคึฟืึทืจ ื“ื™ ื‘ืึทืคึฟืขืœืŸ ืฉืึธืœ ืคึผื™ื ื˜ืœืขืš. ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜, ื“ื™ ืขืžืึธื“ื–ืฉื™ "๐Ÿฆธ" ืื™ื– ื’ืขื•ื•ื™ื–ืŸ ื•ื•ื™ ืึท ืคึผืจืขืคื™ืงืก ืฆื• ื•ื•ื™ื–ืฉื•ื•ืึทืœื™ ื”ื•ื™ื›ืคึผื•ื ืงื˜ ืึทืŸ ืขืœืขื•ื•ืึทื˜ืขื“ ืกืขืกื™ืข.
  • ืื™ืŸ systemd-tmpfiles, ืฆื• ื•ื™ืกืžื™ื™ื“ืŸ ืึทืงืกืึทื“ืขื ืึทืœื™ ื•ื™ืกืžืขืงืŸ ื“ื™ ืื•ืžืจืขื›ื˜ ื˜ืขืงืขืก, ื“ื™ "--purge" ืึธืคึผืฆื™ืข ืื™ืฆื˜ ืึทืคึผืœื™ื™ื– ื‘ืœื•ื™ื– ืฆื• ืกืขื˜ื˜ื™ื ื’ืก ืื™ืŸ tmpfiles.d/ ื•ื•ืึธืก ื”ืึธื‘ืŸ ื“ื™ "$" ืคืึธืŸ ื‘ืคื™ืจื•ืฉ ื‘ืึทืฉื˜ื™ืžื˜. ื“ื™ "--ืจื™ื™ื ื™ืงื•ื ื’" ืึธืคึผืขืจืึทืฆื™ืข ืื•ื™ืš ืจื™ืงื•ื•ื™ื™ืขืจื– ืื™ืฆื˜ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื‘ื™ื™ึท ืžื™ื ื“ืกื˜ืขืจ ืื™ื™ืŸ ื˜ืขืงืข ืคึฟื•ืŸ ื“ื™ tmpfiles.d/ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ. ืคึฟืึทืจ ืกื˜ืจื™ื ื’ืก ืžื™ื˜ ื“ื™ 'ืœ' ื˜ื™ืคึผ, ื“ื™ '?' ืคืึธืŸ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ, ื•ื•ืขืŸ ืกืคึผืขืกื™ืคื™ืขื“, ืึท ืกื™ืžื‘ืึธืœื™ืฉ ืœื™ื ืง ื•ื•ืขื˜ ื–ื™ื™ืŸ ื‘ืืฉืืคืŸ ื‘ืœื•ื™ื– ืื•ื™ื‘ ื“ื™ ืฆื™ืœ ื˜ืขืงืข ื™ื’ื–ื™ืกืฅ.
  • ืื™ืŸ ื“ื™ ืกืขืจื•ื•ื™ืก ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืื•ืŸ ืคึฟืึทืจื‘ื•ื ื“ืขื ืข ื™ื•ื˜ื™ืœืึทื˜ื™ื–, ื“ืขืจ ืคึผืจืึธืฆืขืก ื˜ืจืึทืงื™ื ื’ ืงืึธื“ ื”ืืœื˜ ืฆื• ื–ื™ื™ืŸ ืงืึธื ื•ื•ืขืจื˜ืขื“ ืฆื• ื ื•ืฆืŸ PIDFD ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ PID. ื PIDFD ืื™ื– ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืคึผืจืึธืฆืขืก ืื•ืŸ ื˜ื•ื˜ ื ื™ืฉื˜ ื˜ื•ื™ืฉืŸ, ื‘ืฉืขืช ืึท PID ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืืŸ ืื ื“ืขืจ ืคึผืจืึธืฆืขืก ื ืึธืš ื“ืขื ืงืจืึทื ื˜ ืคึผืจืึธืฆืขืก ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื“ืขื PID ื˜ืขืจืžืึทื ื™ื™ืฅ.
  • ืคึฟืึทืจ ืกืขืจื•ื•ื™ืกืขืก, ืขืก ืื™ื– ืื™ืฆื˜ ืžืขื’ืœืขืš ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ื•ื•ืขืจื˜ "ื“ืขื‘ื•ื’" ืื™ืŸ ื“ื™ "ืจื™ืกื˜ืึทืจื˜ืžืึธื“ืข" ืคึผืึทืจืึทืžืขื˜ืขืจ, ืื™ืŸ ื•ื•ืึธืก ื“ื™ ื ื™ื˜ ืึทื ื“ืขืจืฉ ื“ื™ื ืกื˜ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืจื™ืกื˜ืึทืจื˜ื™ื“ ืžื™ื˜ ื“ื™ื‘ืึทื’ ืžืึธื“ืข ืขื ื™ื™ื‘ืึทืœื“ (ื“ื™ ืกื•ื•ื™ื•ื•ืข ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง DEBUG_INVOCATION = 1 ืื™ื– ื‘ืึทืฉื˜ื™ืžื˜), ืื•ืŸ ื“ื™ LogLevelMax ื•ื•ืขืจื˜ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื˜ืขืžืคึผืขืจืขืจืึทืœื™ ืื•ื™ืคืฉื˜ื™ื™ืŸ ืฆื• ื“ื™ ื“ื™ื‘ืึทื’ ืžื“ืจื’ื”.
  • ื“ื™ PID 1 ื”ืึทื ื“ืœืขืจ ื”ืื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืœืึธื“ืŸ ื›ึผืœืœื™ื ืคึฟืึทืจ ื“ื™ IPE (ื™ื ื˜ื’ืจื™ื˜ื™ ืคึผืึธืœื™ื˜ื™ืง ืขื ืคืึธืจืกืžืึทื ื˜) LSM ืžืึธื“ื•ืœืข, ื•ื•ืึธืก ื“ืขืคื™ื ื™ืจืŸ ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืคึผืึธืœื™ื˜ื™ืง ืคึฟืึทืจ ื“ื™ ื’ืื ืฆืข ืกื™ืกื˜ืขื (ื•ื•ืึธืก ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ืขืจืœื•ื™ื‘ื˜ ืื•ืŸ ื•ื•ื™ ื“ื™ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™ ืคื•ืŸ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ื–ืึธืœ ื–ื™ื™ืŸ ื•ื•ืขืจืึทืคื™ื™ื“).
  • ื“ื™ "DeferReactivation" ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ".ื˜ื™ื™ืžืขืจ" ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืขืก, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื”ืึธืคึผืงืขืŸ ื“ื™ ื•ื•ื™ื™ึทื˜ืขืจ ื˜ื™ื™ึทืžืขืจ ืึทืงื˜ืึทื•ื•ื™ื™ืฉืึทืŸ ืื•ื™ื‘ ื“ื™ ื“ื™ื ืกื˜ ื”ืื˜ ื ื™ืฉื˜ ื ืึธืš ื’ืขืขื ื“ื™ืงื˜ ื–ื™ื™ืŸ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื–ื™ื ื˜ ื“ื™ ืœืขืฆื˜ืข ืึทืงื˜ืึทื•ื•ื™ื™ืฉืึทืŸ.
  • ืื™ืŸ ื“ื™ PrivateUsers ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข ืคึผืึทืจืึทืžืขื˜ืขืจ, ืขืก ืื™ื– ืื™ืฆื˜ ืžืขื’ืœืขืš ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ "ืื™ื“ืขื ื˜ื™ื˜ืขื˜" ื•ื•ืขืจื˜ ืฆื• ื’ืขื‘ืŸ ืžืึทืคึผื™ื ื’ ืคื•ืŸ ื‘ืึทื ื™ืฆืขืจ ื™ื“ืก ื•ื•ืขืŸ ืงืจื™ื™ื™ื˜ื™ื ื’ ืึท ื‘ืึทื ื™ืฆืขืจ ื ืึธืžืขืŸ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ "ื“ื™ืกืงืึทื ืขืงื˜ื™ื“" ื•ื•ืขืจื˜ ืฆื• ื“ื™ PrivateTmp ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข ืคึผืึทืจืึทืžืขื˜ืขืจ, ื•ื•ืึธืก ื•ื•ืขื˜ ื ื•ืฆืŸ ื‘ืึทื–ื•ื ื“ืขืจ tmpfs ื™ื ืกื˜ืึทื ืกื™ื– ืคึฟืึทืจ ื“ื™ ื“ื™ืจืขืงื˜ืขืจื™ื– / tmp/ ืื•ืŸ /var/tmp/.
  • ืกื•ืคึผืคึผืึธืจื˜ ืคึฟืึทืจ ื ื™ื™ึทืข "ืคึผืจื™ื•ื•ืึทื˜" ืื•ืŸ "ืฉื˜ืจืขื ื’" ืžืึธื“ืขืก ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ืคึผืจืึธื˜ืขืงื˜ืงืึธื ื˜ืจืึธืœื’ืจื•ืคึผืก ืึทืคึผืึทืจืึทื˜ ื˜ืขืงืข ืคึผืึทืจืึทืžืขื˜ืขืจ, ื•ื•ืขืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงื˜, ืึท ื ื™ื™ึท ืงื’ืจื•ืคึผ ื ืึธืžืขืŸ ืื™ื– ื‘ืืฉืืคืŸ ืคึฟืึทืจ ื“ื™ ืกืขืจื•ื•ื™ืก ืื•ืŸ ืงื’ืจื•ืคึผืก ืื™ื– ืžืึธื•ื ื˜ืขื“. ื•ื•ืขืŸ ื“ื™ "ืฉื˜ืจืขื ื’" ืึธืคึผืฆื™ืข ืื™ื– ื‘ืึทืฉื˜ื™ืžื˜, cgroupfs ืื™ื– ืžืึธื•ื ื˜ืขื“ ืื™ืŸ ืœื™ื™ืขื ืขืŸ-ื‘ืœื•ื™ื– ืžืึธื“ืข.
  • ื“ื™ ืคึผืึทืจืึทืžืขื˜ืขืจืก StateDirectory, RuntimeDirectory, CacheDirectory, LogsDirectory ืื•ืŸ ConfigurationDirectory ืฆื•ืฉื˜ืขืœืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ื“ื™ ':ro' ืคืึธืŸ ืฆื• ื‘ืึทื’ืจืขื ืขืฆืŸ ืึทืงืกืขืก ืฆื• ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ื“ื™ื™ืจืขืงื˜ืขืจื™ื– ืฆื• ืœื™ื™ืขื ืขืŸ-ื‘ืœื•ื™ื– ืžืึธื“ืข.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ "ืคื™ืจืžื•ื•ืึทืจืข" ื•ื•ืขืจื˜ ืฆื• ื“ื™ "systemd.machine_id" ืงืขืจืŸ ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื” ืคึผืึทืจืึทืžืขื˜ืขืจ, ืื™ืŸ ื•ื•ืึธืก ื“ื™ ืกื™ืกื˜ืขื ื™ื“ืขื ื˜ื™ืคื™ืขืจ (ืžืึทืฉื™ืŸ ืฉื™ื™ึทืŸ) ื•ื•ืขื˜ ื–ื™ื™ืŸ ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ UUID ืคึฟื•ืŸ SMBIOS / DeviceTree.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืข ืคืืจ ื“ื™ mseal(), listmount(), ืื•ืŸ statmount() ืกื™ืกื˜ืขื ืจื•ืคืŸ ื•ื•ืืก ื–ืขื ืขืŸ ืื™ื™ื ื’ืขืคื™ืจื˜ ื’ืขื•ื•ืืจืŸ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืงืขืจื ืขืœ ืื•ื™ืกื’ืื‘ืขืก. Linux.
  • ื“ื™ resolvectl, timedatectl ืื•ืŸ systemd-inhibit ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืื™ืฆื˜ ืฉื˜ื™ืฆืŸ ื™ื ื˜ืขืจืึทืงื˜ื™ื•ื• ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ื ื™ืฆืŸ Polkit.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ื“ื™ "--ืื™ืฆื˜" ืคืึธืŸ ืื™ืŸ ื“ื™ "ืจื™ืขื ืึทื‘ืœืข" ื‘ืึทืคึฟืขืœ ืฆื• ื“ื™ systemctl ื ื•ืฆืŸ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ "--json" ืึธืคึผืฆื™ืข ืฆื• ื“ื™ ืกื™ืกื˜ืขื-ื‘ืืจื’ ื ื•ืฆืŸ ืคึฟืึทืจ ืคึผืจืึธื“ื•ืงืฆื™ืข ืื™ืŸ JSON ืคึฟืึธืจืžืึทื˜ (ืœืžืฉืœ, ื•ื•ืขืŸ ืกืคึผืขืกื™ืคื™ืขื“ ืžื™ื˜ "--list-devices", ืึท ืจืฉื™ืžื” ืคื•ืŸ ื“ืขื•ื•ื™ืกืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ืŸ JSON ืคึฟืึธืจืžืึทื˜).
  • ืฆื•ื’ืขื’ืขื‘ืŸ "-ืœ" ืื•ืŸ "--ืคื•ืœ" ืึธืคึผืฆื™ืขืก ืฆื• ื“ื™ "ืœืึธืงืึทืœืขืงื˜ืœ" ื ื•ืฆืŸ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ื˜ืจื™ืžื™ื ื’ ืคื•ืŸ ืœืึทื ื’ ืฉื•ืจื•ืช ื‘ืขืฉืึทืก ืคึผืจืึธื“ื•ืงืฆื™ืข.
  • ื“ื™ HibernateOnACPower ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• sleep.conf, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึทืจื”ืึทืœื˜ืŸ ื“ื™ ืกื•ื•ื™ื˜ืฉื™ื ื’ ืฆื• ืฉืœืึธืคืŸ ืžืึธื“ืข ื‘ื™ื– ื“ื™ ืžื™ื˜ืœ ืื™ื– ื“ื™ืกืงืึทื ืขืงื˜ื™ื“ ืคื•ืŸ ื“ื™ ืกื˜ื™ื™ืฉืึทื ืขืจื™ ืžืึทื›ื˜ ืžืงื•ืจ.
  • ืื™ืŸ systemd-sysusers, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ "! ื”ืื˜ ื ื™ืฉื˜ ื’ืขืคึฟื™ืจื˜ ืฆื• ื‘ืœืึทืงื™ื ื’ ื‘ืขืฉืึทืก ืฉืœื™ืกืœ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืื™ืŸ SSH).
  • Systemd-coredump ืžื•ืกื™ืฃ ืึทืŸ "EnterNamespace" ืึธืคึผืฆื™ืข ื•ื•ืึธืก ืึทืœืึทื•ื– ืึทืงืกืขืก ืฆื• ื“ื™ ื‘ืืจื’ ืคื•ื ื˜ ืคึผืœืึทืฅ ืคื•ืŸ ืงื™ื™ืŸ ืงืจืึทืฉื˜ ืคึผืจืึทืกืขืกืึทื– ืฆื• ื‘ืึทืงื•ืžืขืŸ ื–ื™ื™ืขืจ ื“ื™ื‘ืึทื’ื™ื ื’ ืกื™ืžื‘ืึธืœืก. ืื™ืŸ ืคื™ืจ, ื“ื™ ืึธืคึผืฆื™ืข ืงืขื ืขืŸ ื–ื™ื™ืŸ ื ื•ืฆื™ืง ืคึฟืึทืจ ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ ื‘ืึทืงื˜ืจืึทืกืขืก ืคื•ืŸ ื”ืึทืจืฅ ื˜ืขืงืขืก ืคึฟื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื•ื•ืึธืก ืœื•ื™ืคืŸ ืื™ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ืงืึทื ื˜ื™ื™ื ืขืจื–.
  • systemd-login ื›ื•ืœืœ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื“ื™ Ctrl-Alt-Shift-Esc ืงืึธืžื‘ื™ื ืึทืฆื™ืข ืฆื• ืฉื™ืงืŸ ื“ื™ org.freedesktop.login1.SecureAttentionKey ืกื™ื’ื ืึทืœ ืฆื• ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืกื•ื•ื™ื•ื•ืข ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืžื™ื˜ ืึท ื‘ืงืฉื” ืฆื• ื•ื•ื™ื™ึทื–ืŸ ืึท ื–ื™ื›ืขืจ ืœืึธื’ื™ืŸ ื“ื™ืึทืœืึธื’. ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื™ "DesignatedMaintenanceTime" ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืฆื• ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืคึผืœืึทืŸ ืึทืจื‘ืขื˜ ืฆื• ืคืึทืจืขื ื“ื™ืงืŸ ืื™ืŸ ืึท ืกืคึผืขืกื™ืคื™ืขื“ ืฆื™ื™ื˜. ืœื•ื™ื˜ ืึทื ืึทืœืึทื“ื–ืฉื™ ืžื™ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ DRM ืื•ืŸ evdev ื“ืขื•ื•ื™ืกืขืก, ืฉื˜ื™ืฆืŸ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืคึฟืึทืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ืึทืงืกืขืก ืคึฟืึทืจ ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ื™ื•ื–ืขืจื– ืฆื• ื”ื™ื“ืจืึทื•ื• ื“ืขื•ื•ื™ืกืขืก (ืฉืคึผื™ืœ ืงืึทื ื˜ืจืึธื•ืœืขืจื– ืื•ืŸ ื“ื–ืฉื•ื™ืกื˜ื™ืงืงืก).
  • systemd-machined ืฉื˜ื™ืฆื˜ ืื™ืฆื˜ ื ื™ืฉื˜-ืคืจื™ื•ื•ื™ืœืขื’ื™ืจื˜ืข ืงืœื™ืขื ื˜ ืœืึธื’ื™ื ืก. ื•ื•ื™ืจื˜ื•ืขืœ ืžืืฉื™ื ืขืŸ ืื•ืŸ ืงืื ื˜ืขื™ื ืขืจืก. ืฆื•ื˜ืจื™ื˜ ืฆื• ืกื™ืกื˜ืขืžื“-ืžืืฉื™ื ื“ ืคื•ื ืงืฆื™ืื ืืœื™ื˜ืขื˜ ื•ื•ืขืจื˜ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ ื•ื•ืืจืœื™ื ืง API, ืื™ืŸ ืฆื•ื’ืื‘ ืฆื• ื“ื™-ื‘ื•ืก.
  • ื ื ื™ื™ึทืข ืึธืคึผื˜ื™ื™ืœื•ื ื’ "[IPv6AddressLabel]" ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ networkd.conf ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืข ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ืœืึทื‘ืขืœืก ืื•ืŸ ืคึผืจืขืคื™ืงืกื™ื– ืคึฟืึทืจ IPv6 ืึทื“ืจืขืกืขืก.
  • ืฆื•ื’ืขื’ืขื‘ืŸ "--stdin" ืึธืคึผืฆื™ืข ืฆื• 'ื ืขื˜ื•ื•ืึธืจืงืงื˜ืœ ืจืขื“ืึทื’ื™ืจืŸ' ื‘ืึทืคึฟืขืœ ืฆื• ื‘ืึทืงื•ืžืขืŸ ื˜ืขืงืข ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื ืึธืจืžืึทืœ ื˜ื™ื™ึทืš. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืขื“ื™ื˜ื™ื ื’ ืื•ืŸ ื•ื•ื™ื™ึทื–ื ื“ื™ืง .ื ืขื˜ื“ืขื•ื• ื˜ืขืงืขืก ื“ื•ืจืš ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ืึท ื ืขืฅ ืฆื•ื‘ื™ื ื“ ืฆื• ื“ื™ 'ื ืขื˜ื•ื•ืึธืจืงืงื˜ืœ ืจืขื“ืึทื’ื™ืจืŸ' ืื•ืŸ 'ื ืขื˜ื•ื•ืึธืจืงืงื˜ืœ ืงืึทืฅ' ืงืึทืžืึทื ื“ื–. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืึธืคึผืฆื™ืข "--ื ื™ื˜-ืคืจืขื’ืŸ-ืคึผืึทืจืึธืœ" ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ื™ื ื˜ืขืจืึทืงื˜ื™ื•ื• ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืึท "--Certificate-Source" ืึธืคึผืฆื™ืข ืฆื• ื“ื™ ukify, bootctl, systemd-keyutil, systemd-measure, systemd-repart ืื•ืŸ systemd-sbsign ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืฆื• ืœืึธื“ืŸ ืึทืŸ X.509 ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ื“ื•ืจืš ื“ื™ OpenSSL ืฉืคึผื™ื™ึทื–ืขืจ ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื’ืœื™ื™ึทืš ืœืึธื•ื“ื™ื ื’ ืคึฟื•ืŸ ืึท ื˜ืขืงืข.
  • systemd-boot ืžื•ืกื™ืฃ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ื“ื™ ื‘ืึทื ื“ ืงื ืขืคึผืœืขืš ืฆื• ืžืึทืš ืึทืจื•ื™ืฃ ืื•ืŸ ืึทืจืึธืคึผ ื“ื•ืจืš ื“ื™ ืฉื˜ื™ื•ื•ืœ ืžืขื ื™ื•, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื ื•ืฆื™ืง ืื•ื™ืฃ ื“ืขื•ื•ื™ืกืขืก ืึทื–ืึท ื•ื•ื™ ืกืžืึทืจื˜ืคืึธื ืขืก. ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื™ื ืกื˜ืึธืœื™ื ื’ ื“ื™ UEFI Secure Boot ื“ืึทื˜ืึทื‘ื™ื™ืก ืื™ืŸ ESL(db/dbx/...) ืคึฟืึธืจืžืึทื˜ ืคึฟืึทืจ systemd-boot ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ ื‘ืึธืึธื˜ืงื˜ืœ ื ื•ืฆืŸ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ "--ืœื™ืกื˜-ื™ื ื•ื•ืึธืงืึทื˜ื™ืึธืŸ" ืึธืคึผืฆื™ืข ืฆื• ื“ื–ืฉืึธื•ืจื ืึทืœืงื˜ืœ ืฆื• ื•ื•ื™ื™ึทื–ืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ ืึทืคึผืึทืจืึทื˜ ืงืึทืœืœืก ืื•ืŸ "--ื™ื ื•ื•ืึธืงืึทื˜ื™ืึธืŸ" ืึธืคึผืฆื™ืข ("-ืื™ืš") ืฆื• ื•ื•ื™ื™ึทื–ืŸ ืœืึธื’ืก ืคึฟืึทืจื‘ื•ื ื“ืŸ ื‘ืœื•ื™ื– ืžื™ื˜ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืจื•ืคืŸ.
  • systemd-nspawn ืžื•ืกื™ืฃ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื“ ื ื•ืฆืŸ ืคื•ืŸ FUSE (ืคื™ืœืขืกื™ืกื˜ืขื ืื™ืŸ Userspace) ืื™ืŸ ืงืึทื ื˜ื™ื™ื ืขืจื–. ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื“ื™ "--bind-user" ืึธืคึผืฆื™ืข, ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืก SSH ืฉืœื™ืกืœืขืŸ ืคืืจืœืื ื’ื˜ ืคึฟืึทืจ ืึทืงืกืขืก ื“ื•ืจืš SSH ื–ืขื ืขืŸ ืคืึธืจื•ื•ืขืจื“ื™ื“ ืฆื• ื“ืขื ืงืึทื ื˜ื™ื™ื ืขืจ.
  • libsystemd ื”ืื˜ ืฆื•ื’ืขืœื™ื™ื’ื˜ ืึท ื ื™ื™ึทืข ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืฆื•ื‘ื™ื ื“ "sd-json" ื•ื•ืึธืก ื ื™ืฆื˜ ื“ื™ JSON ืคึฟืึธืจืžืึทื˜, ื•ื•ื™ ืื•ื™ืš ืึท ืฆื•ื‘ื™ื ื“ "sd-varlink" ื•ื•ืึธืก ื ื™ืฆื˜ IPC Varlink.
  • ื“ื™ ืจืขืงืึทืžืขื ื“ื™ื“ ื‘ืึทื–ืข ืงืขืจืŸ ื•ื•ืขืจืกื™ืข ืื™ื– ืึทืคึผื’ืจื™ื™ื“ื™ื“ ืฆื• ืžืขืœื“ื•ื ื’ 5.4, ื’ืขื’ืจื™ื ื“ืขื˜ ืื™ืŸ 2019. ืงื•ืžืขื ื“ื™ืงืข ื™ืึธืจ ื–ื™ื™ ืคึผืœืึทื ื™ืจืŸ ืฆื• ื”ืึทืœื˜ืŸ ืฉื˜ื™ืฆืŸ ืขืœื˜ืขืจืข ืงืขืจื ืึทืœื– ืื•ืŸ ืฆื™ื™ื›ืŸ ื“ื™ 5.4 ืžืขืœื“ื•ื ื’ ื•ื•ื™ ื“ื™ ืžื™ื ื™ืžื•ื ื’ืขืฉื˜ื™ืฆื˜ ื‘ืึทื–ืข ื•ื•ืขืจืกื™ืข.
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ cgroups v1 ืื™ื– ื“ื™ืคึผืจื™ืฉื™ื™ื™ื˜ื™ื“ ืื•ืŸ ืื™ื– ืคืึทืจืงืจื™ืคึผืœื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ (ืฆื• ื’ืขื‘ืŸ ืขืก, ืื™ืจ ืžื•ื–ืŸ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ SYSTEMD_CGROUP_ENABLE_LEGACY_FORCE = 1 ืื•ื™ืฃ ื“ื™ ืงืขืจืŸ ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื” ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื’ืขื‘ืŸ ืขืก ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ืกืขื˜ื˜ื™ื ื’ืก). ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืžืขืœื“ื•ื ื’ ืคื•ืŸ systemd 258 ืคึผืœืึทื ื– ืฆื• ื’ืึธืจ ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ื“ื™ cgroups v1 ืฉื™ื™ึทื›ื•ืช ืงืึธื“. Systemd ื•ื•ืขืจืกื™ืข 258 ืื™ื– ืื•ื™ืš ืคึผืœืึทื ื ืขื“ ืฆื• ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืกื™ืกื˜ืขื V ืกืขืจื•ื•ื™ืก ืกืงืจื™ืคึผืก.

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster