Mushure memwedzi mishanu yekuvandudza kuburitswa kweiyo vhezheni itsva ye "systemd 250" yakaziviswa umo zvaigoneka kuchengetedza magwaro mufomu yakavharidzirwa, kuvimbiswa kwezvikamu zveGPT zvakaonekwa zvakangoerekana zvaitwa nedhijitari siginicha yakashandiswa, ruzivo rwezvikonzero zvekunonoka pakatanga mabasa zvakagadziridzwa, pakati pezvimwe zvinhu.
Pazvinhu zvitsva zvinoratidzwa tinogona kuona kuti zvinomira pachena kuti yakawedzera tsigiro yezvakavanzika uye zvakatendeseka zvitupa, iyo inogona kubatsira kuchengetedza zvakachengeteka zvinhu zvakavanzika seSSL kiyi uye mapassword ekupinda.
Credential decryption inoitwa chete kana zvichidikanwa uye yakabatana nekombuta yemuno kana nzvimbo. Dhata inonyorerwa otomatiki uchishandisa symmetric encryption algorithms, kiyi yacho inogona kuwanikwa pane faira system, pane TPM2 chip, kana kushandisa musanganiswa chirongwa.
Kana sevhisi yatanga, zvitupa zvinodzikiswa otomatiki uye kuitwa kuti zviwanikwe kune sevhisi nenzira yayo yakajairika. Iyo 'systemd-creds' yekushandisa yakawedzerwa kushanda neyakavharidzirwa magwaro, uye LoadCredentialEncrypted uye SetCredentialEncrypted marongero anopihwa masevhisi.
Yakawedzerwa tsigiro kubhutsu kernel uchishandisa LINUX_EFI_INITRD_MEDIA_GUID EFI protocol kune sd-stub, iyo EFI inoshandiswa iyo EFI firmware inoshandisa boot Linux kernel. Uyewo yakawedzerwa kune sd-stub kukwanisa kuputira zvinyorwa uye sysext mafaira mu cpio faira uye kuendesa iyi faira ku kernel pamwe neinitrd (mafaira ekuwedzera ari mu /.extra/ directory). Ichi chinogonesa inogonesa uye isingachinjike initrd nharaunda, inowedzerwa ne sysexts uye encrypted echokwadi zvitupa.
Tsanangudzo yezvikamu zvinoonekwa zvakawedzerwa zvakanyanya kupa nzira yekutsanangura, kukwira, uye kumisa masisitimu partitions uchishandisa GPT (GUID Partition Tables). Kuenzaniswa neshanduro dzakapfuura, kune akawanda ezvivakwa, iyo yakatarwa inosanganisira tsigiro yemudzi wechikamu uye / usr partition, kunyangwe kune asiri eUEFI mapuratifomu.
Kune mayunitsi ari kushanda kana kumira kwenguva yakareba, mukuwedzera pakuratidza animated kufambira mberi bar, kugona kuratidza ruzivo rwechimiro kunopihwa, zvichikubvumidza kuti unzwisise kuti chii chaizvo chiri kuitika nesevhisi panguva ino uye kupedzwa kwei sevhisi. .
Zvinocherechedzwawo kuti DefaultOOMScoreAdjust parameter yakawedzerwa kune /etc/systemd/system.conf uye /etc/systemd/user.conf, iyo inokubvumira kugadzirisa OOM-killer pachikumbaridzo kana chiyeuchidzo chisina kukwana chinoshandiswa kune maitiro ayo systemd anotanga. kune sisitimu nevashandisi.
Nokusingaperi, huremu hwemasevhisi ehurongwa hwakakura pane hwevashandisi masevhisindiko kuti, kana pasina chiyeuchidzo chakakwana, mukana wekumisa masevhisi evashandisi wakakura kupfuura iwo ehurongwa hwesevhisi.
Iyo RestrictFileSystems kuseta yakawedzerwa kurambidza kupinda kune masevhisi kune mamwe marudzi emafaira masisitimu.
Zvakare yakawedzera imwe itsva unit file systemd-boot-update.service, painogoneswa uye sd-boot bootloader yakaiswa, systemd ichagadzirisa otomatiki vhezheni ye sd-boot bootloader, ichichengeta iyo bootloader kodhi nguva dzose.
El sd-boot pachayo ikozvino yakavakwa nekukasira nerutsigiro rweiyo SBAT michina (UEFI Chengetedza Boot Yepamberi Targeting), iyo inogadzirisa nyaya nekubvisirwa chitupa cheUEFI Chengetedza Boot. Pamusoro pezvo, sd-boot inopa kugona kuongorora iyo Microsoft Windows bhutsu kumisikidzwa kuti ibudise nemazita eiyo Windows boot partitions uye kuratidza iyo Windows vhezheni.
sd-boot inopawo kugona kutsanangura chirongwa chemavara panguva yekuunganidza. Munguva yebasa rebhutsu, yakawedzera rutsigiro rwekuchinja skrini nekudzvanya "r" kiyi, yakawedzera otomatiki bhutsu modhi yeiyo system inoenderana nemenu chinhu chakasarudzwa pabhutsu yekupedzisira. Yakawedzera kugona kurodha otomatiki madhiraivha eEFI ari mu / EFI / systemd / madhiraivha / dhairekitori pane ESP (EFI System Partition) partition.
A new factory-reset.target unit file inosanganisirwa, yakagadziridzwa musystemd-logind nekuenzanisa nekutangazve, kudzima, kumisa, uye hibernate mashandiro, uye inoshandiswa kugadzira madhiraivha ekuita fekitori reset.
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo mu inotevera chinongedzo.