systemd 252 ya zo tare da goyon bayan UKI, haɓakawa da ƙari

systemd saitin tsarin daemons ne na tsarin gudanarwa, dakunan karatu, da kayan aikin da aka ƙera azaman babban tsari da dandamalin gudanarwa don yin hulɗa tare da kernel na tsarin. 

Bayan watanni biyar na cigaba an sanar da sakin sabon sigar systemd 252, sigar da babban canji a cikin sabon sigar shine haɗin kai goyon baya ga tsarin taya na zamani, wanda ke ba da damar tabbatarwa ba kawai kernel da bootloader ba, har ma da abubuwan da ke cikin tsarin tsarin da ke cikin tsarin ta amfani da sa hannu na dijital.

Hanyar da aka tsara ta ƙunshi amfani da haɗe-haɗen hoton kwaya (UKI)Haɗin kernel Hoton) akan kaya, wanda ya haɗu da direba don loda kernel daga UEFI (UEFI boot stub), hoton kernel Linux, da yanayin tsarin initrd wanda aka ɗora cikin ƙwaƙwalwar ajiya, wanda aka yi amfani da shi don farawa na farko a matakin da ya gabata zuwa tushen tushen FS. .

Labari mai dangantaka:

Suna ba da shawarar sabunta tsarin boot ɗin Linux

Musamman, amfanin systemd-cryptsetup, systemd-cryptenroll da systemd-creds an daidaita su Don amfani da wannan bayanin, don haka zaku iya tabbatar da cewa ɓoyayyen ɓoyayyen ɓangarorin faifai suna ɗaure zuwa kernel da aka sanya hannu ta dijital (a cikin wannan yanayin, ana ba da damar shiga ɓangaren ɓoyayyen ne kawai idan hoton UKI ya wuce tabbatar da sa hannu na dijital) a cikin sigogin da aka sanya. a cikin TPM).

Bugu da ƙari, an haɗa kayan amfani na systemd-pcrphase, wanda ke ba ku damar sarrafa ɗaurin matakai daban-daban na taya zuwa sigogi da aka sanya a cikin ƙwaƙwalwar ajiya ta hanyar masu sarrafa kayan aikin crypto waɗanda ke goyan bayan ƙayyadaddun TPM 2.0 (misali, zaku iya sanya maɓallin ɓoye ɓoyayyen ɓangaren LUKS2 yana samuwa kawai. a cikin hoton initrd kuma toshe damar yin amfani da shi akan abubuwan da zazzagewa na gaba).

Sabbin fasali na tsarin 252

Sauran canje-canjen da suka yi fice a cikin tsarin 252, shine se tabbatar da tsohon wurin shine C.UTF-8 idan babu wani yanki da aka ƙayyade a cikin saitin.

Baya ga shi a cikin systemd 252 kuma aiwatar da ikon yin cikakken aikin saiti na sabis ("Systemctl saitattu") yayin taya ta farko. Kunna saitattun saitattu a lokacin taya yana buƙatar ginawa tare da zaɓin "-Dfirst-boot-full-preset", amma ana shirin kunna shi ta tsohuwa a cikin fitowar gaba.

A cikin sassan sarrafa mai amfani yi amfani da mai sarrafa albarkatun CPU, wanda ya ba da damar tabbatar da cewa an yi amfani da saitin CPUWeight zuwa duk sassan yanki da aka yi amfani da su don rarraba tsarin zuwa sassa (app.slice, background.slice, session.slice) don ware albarkatun tsakanin sabis na masu amfani daban-daban, gasa don albarkatun CPU. CPUWeight kuma yana goyan bayan ƙimar "rago" don haifar da ingantaccen yanayin haya.

A gefe guda, a cikin tsarin farawa (PID 1), ya kara da ikon shigo da takaddun shaida daga filayen SMBIOS (Nau'in 11, "Sakon masu samar da OEM") da kuma ayyana su ta hanyar qemu_fwcfg, wanda ke sauƙaƙa samar da takaddun shaida ga injunan kama-da-wane da kuma kawar da buƙatar kayan aikin ɓangare na uku kamar girgije -init da kunnawa.

Yayin rufewa, an canza dabarun buɗe tsarin fayil ɗin kama-da-wane (proc, sys), kuma ana adana bayanai game da matakan toshe tsarin fayil ɗin a cikin log ɗin.

Sd bootloader ya kara da ikon yin taya a yanayin gauraye, yana aiki da 64-bit Linux kernel daga 32-bit UEFI firmware. Ƙara ikon gwaji don amfani da maɓallan SecureBoot ta atomatik daga fayilolin da ke kan ESP (Rashin Tsarin EFI).

Ƙara sababbin zaɓuɓɓuka zuwa bootctl mai amfani "-all-architectures" don shigar da binaries don duk gine-ginen EFI da aka goyan baya, «– tushen =” da kuma “–image =» don aiki tare da directory ko hoton diski,»--install-source=» don ayyana font ɗin da za a girka,»--efi-boot-option-description=»don sarrafa sunayen shigarwar boot.

Na sauran canje-canje wanda ya bambanta daga tsarin 252:

• systemd-nspawn yana ba da damar amfani da hanyoyin fayil ɗin dangi a cikin zaɓuɓɓukan “–bind=” da “–overlay=”. Ƙara goyon baya don zaɓin 'rootidmap' zuwa "–bind=" zaɓi don ɗaure tushen tushen mai amfani a cikin akwati ga mai littafin da aka ɗora a gefen mai masaukin baki.
• systemd-resolved yana amfani da fakitin OpenSSL azaman bayanan ɓoyewa ta tsohuwa (ana riƙe tallafin gnutls azaman zaɓi). Algorithms na DNSSEC mara tallafi yanzu ana ɗaukar su azaman marasa tsaro maimakon dawo da kuskure (SERVFAIL).
• systemd-sysusers, systemd-tmpfiles, da systemd-sysctl suna aiwatar da ikon wucewa ta hanyar tsarin ajiya na shaidar.
• An ƙara umarnin 'kwatanta nau'ikan' don yin nazari na tsarin don kwatanta kirtani tare da lambobin sigar (mai kama da 'rpmdev-vercmp' da 'dpkg -compare-versions').
• An ƙara ikon tace abubuwan tuƙi ta hanyar abin rufe fuska zuwa umarnin 'systemd-analyze dump'.
• Lokacin zabar yanayin barci mai matakai da yawa (barci sannan a huce, yin hibernate bayan hibernate), lokacin da aka kashe a yanayin jiran aiki yanzu an zaɓi shi dangane da sauran hasashen rayuwar baturi.
• Ana yin canji nan take zuwa yanayin barci lokacin da ƙasa da 5% cajin baturi.

Yana kuma da kyau a ambaci hakan a cikin 2024, systemd yana shirin dakatar da tallafawa tsarin capping albarkatun cgroup v1, An soke shi a cikin sigar 248 na systemd. An shawarci masu gudanarwa da su kula da ayyukan motsi masu alaƙa da ƙungiyar v1 zuwa rukunin v2 a gaba.

Bambancin maɓalli tsakanin gungun v2 da v1 shine amfani da tsarin ƙungiyoyin gama gari don kowane nau'in albarkatu, maimakon daban-daban matsayi don rabon albarkatun CPU, sarrafa ƙwaƙwalwar ajiya, da I/O. Matsayi daban-daban suna haifar da matsaloli wajen tsara hulɗar tsakanin direbobi da ƙarin farashin albarkatun kernel lokacin amfani da ƙa'idodi don tsari mai suna a cikin manyan mukamai daban-daban.

A cikin rabin na biyu na 2023, an shirya dakatar da goyan bayan manyan kundin adireshi, lokacin da aka ɗora / usr daban daga tushen, ko / bin da / usr / bin, / lib da / usr / lib kundayen adireshi sun rabu.