Ukukhishwa kwe-kernel ye-Linux 5.19

Ngemuva kwezinyanga ezimbili zokuthuthuka, uLinus Torvalds wethule ukukhululwa kwe-Linux kernel 5.19. Phakathi kwezinguquko eziphawuleka kakhulu: ukusekelwa kwezakhiwo ze-LoongArch processor, ukuhlanganiswa kweziqephu ze- "BIG TCP", imodi efunwayo ku-fscache, ukukhishwa kwekhodi ukusekela ifomethi ye-a.out, ikhono lokusebenzisa i-ZSTD yokucindezela i-firmware, isixhumi esibonakalayo ukuphatha ukukhishwa kwenkumbulo endaweni yomsebenzisi , okwandisa ukuthembeka nokusebenza kwejeneretha yenombolo engahleliwe, ukusekelwa kwe-Intel IFS (In-Field Scan), AMD SEV-SNP (Secure Nested Paging), Intel TDX (Trusted Domain Extensions) kanye ne-ARM Izandiso ze-SME (Scalable Matrix Extension).

Esimemezelweni, uLinus uthe cishe ukukhishwa okulandelayo kwe-kernel kuzoba nenombolo engu-6.0, njengoba igatsha le-5.x liqongelele ukukhishwa okwanele ukushintsha inombolo yokuqala kwinombolo yenguqulo. Ushintsho lwezinombolo lwenziwa ngenxa yezizathu zobuhle futhi kuyisinyathelo esisemthethweni esidambisa ukungakhululeki ngenxa yokunqwabelana kwenani elikhulu lezinkinga ochungechungeni.

U-Linus uphinde waveza ukuthi usebenzise i-laptop ye-Apple esekelwe ekwakhiweni kwe-ARM64 (i-Apple Silicon) enemvelo ye-Linux esekelwe ekusatshalalisweni kwe-Asahi Linux ukudala ukukhululwa. Akusona indawo yokusebenza eyinhloko ka-Linus, kodwa wasebenzisa inkundla ukuhlola ukufaneleka kwayo emsebenzini we-kernel nokuqinisekisa ukuthi angakwazi ukukhiqiza ukukhishwa kwe-kernel ngenkathi ehamba ne-laptop engasindi eduze. Ngaphambilini, eminyakeni eminingi edlule, uLinus wayenolwazi lokusebenzisa imishini ye-Apple ekuthuthukisweni - wake wasebenzisa i-PC esekelwe ku-ppc970 CPU kanye ne-laptop ye-Macbook Air.

Inguqulo entsha ihlanganisa ukulungiswa okungu-16401 okuvela konjiniyela abangu-2190 (ekukhishweni kokugcina kube nezilungiso ezingu-16206 ezivela konjiniyela abangu-2127), usayizi wesichibi ngu-90 MB (ushintsho oluthintekile lwamafayela angu-13847, imigqa yekhodi engu-1149456 yengeziwe, imigqa engu-349177 yasuswa). Cishe u-39% wazo zonke izinguquko ezethulwe ku-5.19 zihlobene nezishayeli zedivayisi, cishe u-21% wezinguquko zihlobene nokubuyekeza ikhodi eqondene nezakhiwo zehadiwe, u-11% uhlobene nesitaki senethiwekhi, u-4% uhlobene nezinhlelo zamafayela, futhi u-3% zihlobene nesistimu ye-kernel yangaphakathi.

Ukuqamba okusha okubalulekile ku-kernel 5.19:

• I-Disk Subsystem, I/O kanye ne-File Systems
  • Isistimu yefayela ye-EROFS (Enhanced Read-Only File System), ehloselwe ukusetshenziswa kuma-partitions okufunda kuphela, iguqulelwe ukuze isebenzise i-subsystem ye-fscache, ehlinzeka ngokugcinwa kwedatha. Ushintsho luthuthukise kakhulu ukusebenza kwezinhlelo lapho inani elikhulu leziqukathi liqaliswa kusuka esithombeni esisekelwe ku-EROFS.
  • Imodi yokufunda lapho kudingeka khona yengezwe kusistimu engaphansi ye-fscache, esetshenziselwa ukuthuthukisa i-EROFS. Imodi entsha ikuvumela ukuthi uhlele ukugcinwa kwesikhashana kokufunda ezithombeni ze-FS ezitholakala ohlelweni lwasendaweni. Ngokuphambene nendlela yokusebenza etholakala ekuqaleni, egxile ekugcinweni kwesikhashana ohlelweni lwefayela lendawo ledatha edluliswa ngamasistimu wamafayela enethiwekhi, imodi "yokufunayo" idlulisela imisebenzi yokubuyisa idatha nokuyibhalela kunqolobane endaweni ehlukile. inqubo yangemuva esebenza esikhaleni somsebenzisi.
  • I-XFS inikeza amandla okugcina izigidigidi zezibaluli ezinwetshiwe ku-i-node. Inani eliphakeme lezilinganiso zefayela elilodwa linyusiwe lisuka ku-4 bhiliyoni laya ku-247. Imodi isetshenziswe ukuze kuthuthukiswe izibaluli ezimbalwa zefayela elinwetshiwe ngesikhathi esisodwa.
  • Isistimu yefayela ye-Btrfs ithuthukise umsebenzi ngezingidi, okuvumele ukukhuphuka okucishe kube ngu-7% ekusebenzeni uma ubhala ngokuqondile kumodi ye-nowait. Ukusebenza kwemisebenzi kumodi ye-NOCOW (ngaphandle kokukopisha-ngokubhala) kukhuphuka cishe ngo-3%. Umthwalo kunqolobane yekhasi lapho usebenzisa umyalo othi “thumela” wehlisiwe. Usayizi omncane wamakhasi amancane wehlisiwe ukusuka ku-64K ukuya ku-4K (amakhasi amancane kunamakhasi e-kernel angasetshenziswa). Ushintsho lwenziwe kusukela ekusebenziseni isihlahla se-radix kuya ku-algorithm ye-XArrays.
  • Imodi yengeziwe kuseva ye-NFS ukuze kunwetshwe ukulondolozwa kwesimo sokukhiya esisethwe iklayenti eliyekile ukuphendula izicelo. Imodi entsha ikuvumela ukuthi ubambezele ukuvuleka kwesikhiya kuze kube usuku ngaphandle kwalapho elinye iklayenti licela ukukhiya okuncintisanayo. Ngemodi evamile, ukuvinjwa kususwa imizuzwana engu-90 ngemva kokuba iklayenti liyeke ukuphendula.
  • Isistimu engaphansi yokulandelela umcimbi ku-fanontify FS isebenzisa ifulegi le-FAN_MARK_EVICTABLE, ongakhubaza ngalo ukuphina ama-i-node enqolobaneni, isibonelo, ukuze uzibe amagatsha amancane ngaphandle kokuphina izingxenye zawo kunqolobane.
  • В драйвер для ФС FAT32 добавлена поддержка получения сведений о времени создания файла через системный вызов statx c реализацией более эффективного и функционального варианта stat(), возвращающего расширенную информацию о файле.
  • Ukuthuthukiswa okubalulekile kwenziwe kumshayeli we-exFAT ukuze avumele ukusulwa ngasikhathi sinye kweqembu lemikhakha lapho imodi ye-'dirsync' isebenza, esikhundleni sokusulwa okulandelanayo komkhakha ngamunye. Ngokunciphisa inani lezicelo ze-block ngemva kokulungiswa, ukusebenza kokudala inombolo enkulu yezinkomba ekhadini le-SD kukhuphuke ngaphezu kuka-73-85%, kuye ngosayizi weqoqo.
  • I-kernel ifaka isibuyekezo sokuqala sokulungisa kumshayeli we-ntfs3. Njengoba i-ntfs3 ifakwe ku-5.15 kernel ngo-Okthoba odlule, umshayeli akakabuyekezwa futhi ukuxhumana nonjiniyela kulahlekile, kodwa abathuthukisi manje baqalise kabusha izinguquko zokushicilela. Ama-patches ahlongozwayo asuse amaphutha aholela ekuvuzekeni kwenkumbulo nokuphahlazeka, axazulule izinkinga ngokubulawa kwe-xfstest, ahlanza ikhodi engasetshenziswanga, nama-typos alungisiwe.
  • Ku-OverlayFS, amandla okwenza imephu ama-ID omsebenzisi wezinhlelo zamafayela akhweziwe asetshenzisiwe, asetshenziselwa ukufanisa amafayela omsebenzisi othile ekuhlukaniseni kwangaphandle okugxunyekiwe nomunye umsebenzisi kusistimu yamanje.
• Imemori kanye nezinsizakalo zesistimu
  • Kwengezwe ukusekelwa kokuqala kwesethi yemiyalo ye-LoongArch esetshenziswa kuma-Loongson 3 5000 processors, esebenzisa i-RISC ISA entsha, efana ne-MIPS ne-RISC-V. Isakhiwo se-LoongArch sitholakala ngama-flavour amathathu: i-striped-down 32-bit (LA32R), i-32-bit evamile (LA32S), ne-64-bit (LA64).
  • Ikhodi ekhishiwe ukuze kusekelwe ifomethi yefayela elisebenzisekayo elithi a.out, eyehliswa ekukhishweni okungu-5.1. Ifomethi ye-a.out kade yahoxiswa ezinhlelweni ze-Linux, futhi ukukhiqizwa kwamafayela a.out akusekelwe ngamathuluzi esimanje ekucushweni okuzenzakalelayo kwe-Linux. Isilayishi samafayela we-a.out singasetshenziswa ngokuphelele esikhaleni somsebenzisi.
  • Ukusekelwa kwezinketho ze-x86-specific boot boots kuye kwanqanyulwa: i-nosp, i-nosmap, i-nosmep, i-noexec ne-noclflush).
  • Ukusekelwa kwesakhiwo esiphelelwe yisikhathi se-CPU h8300 (Renesas H8/300), osekunesikhathi eside sishiywe ngaphandle kokusekelwa, kunqanyuliwe.
  • Amandla anwetshiwe ahlobene nokuphendula ekutholweni kokukhiya okuhlukanisiwe (“izikhiye ezihlukanisiwe”) ezenzeka lapho ufinyelela idatha engaqondile enkumbulweni ngenxa yokuthi lapho kusetshenziswa umyalo we-athomu, idatha yeqa imigqa emibili yenqolobane ye-CPU. Ukuvinjwa okunjalo kuholela ekwehleni okukhulu ekusebenzeni. Uma ngaphambilini, ngokuzenzakalelayo, i-kernel izokhipha isexwayiso ngolwazi mayelana nenqubo ebangele ukuvinjelwa, manje inqubo eyinkinga izophinde yehliswe ukuze kulondolozwe ukusebenza kwesistimu yonke.
  • Добавлена поддержка реализованного в процессорах Intel механизма IFS (In-Field Scan), позволяющего запускать низкоуровневые диагностические тесты CPU, способные выявлять проблемы, не определяемые штатными средствами на основе кодов коррекции ошибок (ECC) или битов чётности. Выполняемые тесты оформляются в форме загружаемой прошивки, оформленной по аналогии с обновлениями микрокода. Результаты тестирования доступны через sysfs.
  • Kwengezwe ikhono lokushumeka ifayela le-bootconfig ku-kernel, evumela, ngaphezu kwezinketho zomugqa womyalo, ukucacisa imingcele ye-kernel ngokusebenzisa ifayela lezilungiselelo. Ukushumeka kwenziwa kusetshenziswa inketho yokuhlanganisa 'CONFIG_BOOT_CONFIG_EMBED_FILE=»/PATH/TO/BOOTCONFIG/FILE»'. Ngaphambilini, i-bootconfig yanqunywa ngokunamathisela esithombeni se-initrd. Ukuhlanganiswa ku-kernel kuvumela i-bootconfig ukuthi isetshenziswe ekucushweni ngaphandle kwe-initrd.
  • Ikhono lokulanda i-firmware ecindezelwe kusetshenziswa i-algorithm ye-Zstandard seliqalisiwe. Isethi yamafayela okulawula /sys/class/firmware/* yengezwe kuma-sysfs, okukuvumela ukuthi uqalise ukulayisha i-firmware endaweni yomsebenzisi.
  • I-interface ye-io_uring asynchronous I/O inikeza ifulegi elisha, IORING_RECVSEND_POLL_FIRST, okuthi uma selimisiwe, lithumele kuqala umsebenzi wenethiwekhi ozocutshungulwa kusetshenziswa ukuvota, okungalondoloza izinsiza ezimeni lapho ukucubungula ukusebenza ngokubambezeleka okuthile kwamukelekayo. I-io_uring iphinde yengeza ukusekelwa kwekholi yesistimu ye-socket(), amafulegi amasha ahlongozwayo ukwenza lula ukuphathwa kwezichazi zefayela, yengeza imodi "yokudubula okuningi" yokwamukela ukuxhumana okuningana ngesikhathi esisodwa ocingweni lokuvuma (), kanye nemisebenzi eyengeziwe yokudlulisa i-NVMe. iyala ngqo ocingweni.
  • Izakhiwo ze-Xtensa zinikeza ukusekelwa kwethuluzi lokususa iphutha le-KCSAN (Kernel Concurrency Sanitizer), eliklanyelwe ukubona izimo zomjaho ngaphakathi kwe-kernel. Kungezwe nosekelo lwemodi yokulala nama-coprocessors.
  • Ngokwakhiwa kwe-m68k (Motorola 68000), umshini obonakalayo (isifanisi senkundla) osuselwe kusifanisi se-Android Goldfish senziwe.
  • Ngokwakheka kwe-AArch64, usekelo lwezandiso ze-Armv9-A SME (Scalable Matrix Extension) selusetshenzisiwe.
  • I-subsystem ye-eBPF ivumela ukugcina izikhombi ezithayiphiwe ezakhiweni zemephu, futhi yengeza usekelo lwezikhombi eziguqukayo.
  • Kuhlongozwa indlela entsha esebenzayo yokuthola kabusha inkumbulo esekela ukulawulwa kwendawo kusetshenziswa ifayela le-memory.reclaim. Ukubhala inombolo efayeleni elishiwo kuzozama ukukhipha inombolo ehambisanayo yamabhayithi kusethi ehlotshaniswa neqembu.
  • Ukunemba okuthuthukisiwe kokusetshenziswa kwememori lapho ucindezela idatha ekuhlukaniseni okushintshiwe kusetshenziswa indlela ye-zswap.
  • Ngokwakhiwa kwe-RISC-V, ukusekelwa kokusebenzisa okusebenzisekayo kwe-32-bit ezinhlelweni ezingama-64-bit kunikezwa, imodi yengezwa ukuze ibophe izimfanelo ezivimbelayo emakhasini enkumbulo (isibonelo, ukukhubaza ukugcinwa kwesikhashana), futhi umsebenzi kexec_file_load() uyasetshenziswa. .
  • Ukuqaliswa kokusekelwa kwezinhlelo ze-32-bit Armv4T kanye ne-Armv5 kuguqulelwa ukusetshenziswa ekwakhiweni kwe-kernel yamapulatifomu amaningi afanele amasistimu ahlukene e-ARM.
• I-Virtualization kanye Nokuphepha
  • Isistimu engaphansi ye-EFI isebenzisa ikhono lokudlulisa ngokuyimfihlo ulwazi oluyimfihlo kumasistimu wesihambeli ngaphandle kokuludalula kusistimu yokusingatha. Idatha inikezwa ngohla lwemibhalo lokuvikeleka/coco kuma-securityfs.
  • Imodi yokuvikela i-Lockdown, ekhawulela ukufinyelela komsebenzisi ku-kernel futhi ivimbe izindlela zokudlula i-UEFI Secure Boot, isuse i-lophole evumela ukuthi ukuvikela kudlule ngokukhohlisa isilungisi se-kernel.
  • Kufakwe neziqephu ezihloselwe ukuthuthukisa ukwethembeka nokusebenza kwejeneretha yenombolo-mbumbulu.
  • Lapho kwakhiwa kusetshenziswa i-Clang 15, ukusekelwa kwendlela yokwenza izinto ezingahleliwe ze-kernel kuyasetshenziswa.
  • Umshini we-Landlock, okuvumela ukuthi ukhawulele ukusebenzisana kweqembu lezinqubo nemvelo yangaphandle, inikeza ukusekelwa kwemithetho ekuvumela ukuthi ulawule ukwenziwa kwemisebenzi yokuqamba kabusha ifayela.
  • Подсистема IMA (Integrity Measurement Architecture), предназначенная для проверки целостности компонентов операционной системы по цифровым подписям и хэшам, переведена на использование модуля fs-verity для верификации файлов.
  • Umqondo wezenzo lapho ukhubaza ukufinyelela okungenanjongo ohlelweni olungaphansi lwe-eBPF ushintshiwe - ngaphambilini yonke imiyalo ehlobene ne-bpf() ikholi yesistimu yayivaliwe, futhi kusukela kunguqulo 5.19, ukufinyelela emiyalweni engaholeli ekudalweni kwezinto kushiywe. . Lokhu kuziphatha kudinga inqubo enelungelo lokulayisha uhlelo lwe-BPF, kodwa ke izinqubo ezingenalungelo zingahlanganyela nohlelo.
  • Добавлена поддержка расширения AMD SEV-SNP (Secure Nested Paging), обеспечивающего безопасную работу с вложенными таблицами страниц памяти и защищающего от атак «undeSErVed» и «SEVerity» на процессоры AMD EPYC, позволяющих обойти механизм защиты AMD SEV (Secure Encrypted Virtualization).
  • Ukwesekwa okwengeziwe kwendlela ye-Intel TDX (Trusted Domain Extensions), ekuvumela ukuthi uvimbe imizamo yomuntu wesithathu yokufinyelela inkumbulo ebethelwe yemishini ebonakalayo.
  • Umshayeli we-virtio-blk, osetshenziselwa ukulingisa amadivaysi e-block, wengeze ukusekelwa kwe-I/O esebenzisa ukuvota, okuthi, ngokusho kokuhlolwa, kunciphise ukubambezeleka cishe ngo-10%.
• Isistimu engaphansi yenethiwekhi
  • Iphakheji ihlanganisa uchungechunge lwamapeshi we-BIG TCP akuvumela ukuthi ukhuphule ubukhulu bosayizi wephakethe wephakethe le-TCP ukuya ku-4GB ukuze uthuthukise ukusebenza kwamanethiwekhi esikhungo sedatha yangaphakathi anesivinini esiphezulu. Ukwenyuka okufanayo kosayizi wephakethe ngosayizi wensimu kanhlokweni we-16-bit kufinyelelwa ngokusebenzisa amaphakethe we-"jumbo", usayizi osehlokweni le-IP elibekwe ku-0, futhi usayizi wangempela udluliswa nge-32-bit ehlukile. inkambu kunhlokweni enamathiselwe ehlukile. Ekuhlolweni kokusebenza, ukusetha usayizi wephakethe ku-185 KB kukhuphule ukuphuma ngo-50% futhi kunciphise kakhulu ukubambezeleka kokudluliswa kwedatha.
  • Umsebenzi waqhubeka ekuhlanganiseni amathuluzi kusitaki senethiwekhi ukulandelela izizathu zokulahla amaphakethe (amakhodi ezizathu). Ikhodi yesizathu ithunyelwa lapho inkumbulo ehlotshaniswa nephakethe ikhululiwe futhi ivumela izimo ezifana nokulahlwa kwephakethe ngenxa yamaphutha kanhlokweni, ukutholwa kwe-rp_filter spoofing, i-checksum engavumelekile, ukuphuma kwenkumbulo, imithetho ye-IPSec XFRM icushiwe, inombolo yokulandelana engavumelekile i-TCP, njll.
  • Ukwesekwa okwengeziwe kokuwa emuva kwe-MPTCP (MultiPath TCP) ukuze usebenzise i-TCP evamile, ezimeni lapho izici ezithile ze-MPTCP zingakwazi ukusetshenziswa. I-MPTCP iyisandiso sephrothokholi ye-TCP yokuhlela ukusebenza koxhumano lwe-TCP nokulethwa kwamaphakethe ngesikhathi esisodwa emizileni embalwa ngokusebenzisa ukuxhumana kwenethiwekhi okuhlukile okuhlotshaniswa namakheli e-IP ahlukene. Kwengezwe i-API ukuze kulawulwe ukusakazwa kwe-MPTCP kusuka esikhaleni somsebenzisi.
• Izinsiza
  • Kwengezwe imigqa yekhodi engaphezu kuka-420k ehlobene nomshayeli we-amdgpu, okuthi cishe imigqa engama-400k ingamafayela enhlokweni akhiqizwa ngokuzenzakalela wedatha yerejista ye-ASIC kumshayeli we-AMD GPU, kanti eminye imigqa engama-22.5k inikeza ukuqaliswa kokuqala kokusekelwa kwe-AMD SoC21. Isamba sikasayizi womshayeli we-AMD GPUs weqe imigqa yekhodi eyizigidi ezi-4. Ngokungeziwe ku-SoC21, umshayeli we-AMD uhlanganisa ukusekelwa kwe-SMU 13.x (Iyunithi Yokuphathwa Kwesistimu), usekelo olubuyekeziwe lwe-USB-C ne-GPUVM, futhi ulungele ukusekela izizukulwane ezilandelayo ze-RDNA3 (RX 7000) kanye ne-CDNA (AMD Instinct) amapulatifomu.
  • Umshayeli we-i915 (Intel) unwebe amandla ahlobene nokuphathwa kwamandla. Izihlonzi ezingeziwe ze-Intel DG2 (Arc Alchemist) GPUs ezisetshenziswa kumakhompyutha aphathekayo, zinikeze ukusekelwa kokuqala kweplathifomu ye-Intel Raptor Lake-P (RPL-P), zengeza ulwazi olumayelana namakhadi ezithombe ze-Arctic Sound-M), zasebenzisa i-ABI yezinjini zekhompyutha, ezingezwe Amakhadi e-DG2 asekela ifomethi ye-Tile4; kumasistimu asekelwe ku-Haswell microarchitecture, usekelo lwe-DisplayPort HDR luyasetshenziswa.
  • Umshayeli we-Nouveau useshintshele ekusebenziseni isibambi esithi drm_gem_plane_helper_prepare_fb; ukwabiwa kwememori emile kusetshenziswe kwezinye izakhiwo nokuguquguqukayo. Ngokuqondene nokusetshenziswa kwamamojula we-kernel umthombo ovulekile we-NVIDIA e-Nouveau, umsebenzi kuze kube manje wehlela ekuboneni nasekususeni amaphutha. Ngokuzayo, i-firmware eshicilelwe ihlelelwe ukuthi isetshenziselwe ukuthuthukisa ukusebenza komshayeli.
  • Kwengezwe umshayeli wesilawuli se-NVMe esisetshenziswa kumakhompyutha we-Apple ngokususelwe ku-chip ye-M1.

Ngaso leso sikhathi, i-Latin American Free Software Foundation yenza inguqulo ye-kernel yamahhala engu-5.19 - Linux-libre 5.19-gnu, esulwe izici ze-firmware namashayeli aqukethe izingxenye ezingezona zamahhala noma izingxenye zekhodi, ububanzi bayo kukhawulwe ngumkhiqizi. Ukukhishwa okusha kuhlanza abashayeli be-pureLiFi X/XL/XC kanye ne-TI AMx3 Wkup-M3 IPC. Ikhodi yokuhlanza i-blob ebuyekeziwe ku-Silicon Labs WFX, AMD amdgpu, Qualcomm WCNSS Peripheral Image Loader, Realtek Bluetooth, Mellanox Spectrum, Marvell WiFi-Ex, Intel AVS, IFS, pu3-imgu abashayeli namasistimu angaphansi. Ukucutshungulwa kwamafayela e-Qualcomm AArch64 devicetree sekuqalisiwe. Usekelo olungeziwe lwesikimu sokuqamba sengxenye ye-Sound Open Firmware entsha. Umise ukuhlanza umshayeli weNxusa le-ATM, ekhishwe uhlamvu. Ukuphathwa kokuhlanzwa kwe-blob ku-HDCP ne-Mellanox Core kuhanjiswe ukuze kuhlukaniswe omaka be-kconfig.

Source: opennet.ru