I-RHEL 9.2 sele ikhutshiwe kwaye ezi ziindaba zayo

Kutyhilwe umnqwazi obomvu kutshanje, ukumiliselwa kwe Inguqulelo entsha yosasazo lwakho I-Red Hat Enterprise Linux 9.2, ebona isebe le-RHEL 9 liqhubeka nokuguquka kunye nenkqubo yophuhliso evulekile ngakumbi kwaye yakhela kwisiseko se-CentOS Stream 9 package.

Ngokomjikelo wenkxaso weminyaka eli-10 wokusasazwa, i-RHEL 9 iya kugcinwa kude kube ngu-2032, ngaphandle koko kukwafanelekile ukukhankanya ukuba kwangaxeshanye, kunikezelwe uhlaziyo kwisebe langaphambili le-RHEL 8.8, elicwangciselwe ukukhululwa. kwiintsuku ezizayo (okwangoku kuphela inguqulelo ye-beta ekhoyo).

Yintoni eNtsha kwiRed Hat Enterprise Linux 9.2

Kule nguqulo intsha evela kwi-RHEL 9.2, I-GTK 2 kunye neepakethe ezinxulumeneyo i-adwaita-gtk2-theme, i-gnome-common, gtk2, gtk2-immodules kunye ne-hexchat ziyekisiwe. Uguqulelo lwangaphambili luphinde lwayekisa iseva ye-X.org (i-RHEL 9 engagqibekanga kwiseshoni ye-GNOME ese-Wayland), ecetywa ukuba isuswe kwisebe elikhulu elilandelayo le-RHEL 10, kodwa igcina amandla okuqhuba izicelo ze-X11 kwiseshoni yase-Wayland. usebenzisa i DDX x umncedisi we wayland.

Olunye utshintsho olwahlukileyo kukuba I-DNF isebenzisa umyalelo wophuculo olungaxhunyiwe kwi-intanethi ukufaka uhlaziyo kwisistim kwimo engasebenziyo. Undoqo wohlaziyo ngaphandle kweintanethi kukuba iipakethe ezintsha zikhutshelwa kusetyenziswa umyalelo «dnf ngaphandle kwe-intanethi-phucula ukhuphelo", emva koko umyalelo " uphunyeziwednf ngaphandle kwe-intanethi-phucula ngokutsha»ukuqalisa kwakhona inkqubo kwindawo encinci kwaye ufake uhlaziyo olukhoyo kuyo ngaphandle kokuphazamisa iinkqubo zomsebenzi.

Kwi-RHEL 9.2 ilayibrari ye-cryptographic ye I-NSS ayisawaxhasi amaqhosha e-RSA amancinci kuno-1023 bits (zombini zotyikityo lwedijithali kunye noguqulelo oluntsonkothileyo), ukongeza kwi I-NetworkManager enenkxaso yokulinganisa umthwalo kuwo wonke ujongano oludityanisiweyo lwe-Ethernet, Ulawulo lwe-loopback interface, i-IEEE 802.1X yokufikelela okuqinisekisiweyo ekutshintsheni izibuko, i-ECMP (ixabiso elilinganayo leendlela ezininzi), i-802.1ad (i-VLAN stacking, i-headers ene-nested, kunye nokutshintshwa kweethegi ezininzi ze-VLAN kwisakhelo esisodwa se-Ethernet).

Kutshintsho olukhethekileyo lwe-RHEL kwi-NetworkManager, iphawulwe: Ukwenziwa lula kolawulo loqwalaselo lwe-DNS xa uqhagamshelana kuthungelwano oluninzi kunye neeseva zeDNS ezahlukeneyo, ukhetho olutsha. vlan.protocol, ukukwazi ukuqwalasela iiVLAN zojongano olungalawulwayo lwenethiwekhi, ukuxhasa iMPTCP (Multipath TCP) uqwalaselo.

Kwakhona kuphawulwe ukuba a iphakheji entsha ye-synce4l yokusebenzisa iteknoloji yongqamaniso lwamaza e-SyncE (I-Synchronous Ethernet) Ixhaswa ngamanye amakhadi enethiwekhi kunye nokutshintsha kwenethiwekhi, enokuphucula ukusebenza kakuhle konxibelelwano kwi-RAN (i-Radio Access Network) izicelo ngenxa yokuvumelanisa ixesha elichanekileyo.

Iphakheji ye-nmstate, ebonelelwa lithala leencwadi kunye nosetyenziso lwe-nmstatectl ukulawula ubumbeko lwenethiwekhi nge-API echazayo (imeko yothungelwano ichazwa ngokohlobo lwe-schema echazwe kwangaphambili), ngoku uyakwazi ukukhankanya iidilesi ze IPv6 zasekuhlaleni njengabancedisi be DNS kunye nenkxaso eyongeziweyo yeeflegi zeMPTCP.

Inkqubo ephantsi ye-eBPF (Isihluzi sePakethe yeBerkeley) ithwala uphuculo oluphunyezwe kwi-Linux kernels 5.17, 5.18, 5.19 kunye ne-6.0. Umzekelo yonke imisebenzi esebenzisa indlela ye-BTF ikhona ngoku (ifomati yohlobo lwe-BPF). Phakathi kwezinye izinto, inkxaso eyongeziweyo ye-CO-RE (Hlanganisa Kanye - Run Yonke indawo), leyo ivumela ukuqulunqa ikhowudi yeenkqubo ze-eBPF kube kanye kuphela kwaye usebenzise isilayishi jikelele ekhethekileyo elungelelanisa inkqubo elayishiweyo kwi-kernel yangoku kunye neeNdidi ze-BTF, ezisombulula ingxaki yokuphatheka kweenkqubo ze-eBPF ezihlanganisiweyo, ngaphambili ezazinokusetyenziswa kuphela kwinguqulelo ye-kernel ezakhelwe yona.

Izakhono zetyhuna, i-rteval kunye ne-slat utility ziye zandiswa. Umzekelo, ityhuna inomgca womyalelo omtsha wojongano lokutshintsha ikernel kunye neempawu zesicelo, iziphazamiso, kunye nemisebenzi.

Olunye utshintsho olwahlukileyo:

• Kwi-firewall, inkxaso eyongeziweyo yemowudi yokuqalisa i-failsafe, evumela, kwimeko yeengxaki ngemigaqo ekhankanyiweyo, ukubuyela kwimimiselo engagqibekanga ngaphandle kokushiya umamkeli engakhuselekanga.
• Iinkonzo ezongeziweyo ngenkxaso ye-Kodi JSON-RPC, EventServer, netdata, IPFS protocol.
• I-Clevis, esetyenziselwa ukubethela ngokuzenzekelayo kunye nokucima idatha kwi-disk partitions, inika "-e" ukhetho lokuvumela ukusetyenziswa kwethokheni yangaphandle endaweni yokufaka i-password ye-cryptsetup.
• Imigaqo-nkqubo ye-SELinux eyongeziweyo ukukhusela iinkonzo ze-mptcpd kunye ne-udftools.
• Umgaqo-nkqubo wongezwa we-SELinux ukuseta kwakhona amalungelo e-Rsyslog ekuqaleni (i-Rsyslog ngoku isebenzisa kuphela amalungelo afunekayo amancinci).
• Kwi-kernel, ngokulahla ulwazi malunga nesikhukula se-SYN esifunyenweyo kwirejista, ulwazi malunga nedilesi ye-IP efumene uxhulumaniso lunikezelwa ukwenza lula ukugqiba indawo ekuyiwa kuyo umkhukula kwiinkqubo ezinabalawuli ababophelelwe kwiidilesi ze-IP ezahlukeneyo.
• Inkxaso eyongeziweyo yocimo oluzenzekelayo lwezatifikethi eziphelelwe lixesha (umzekelo, kwi-ACME Masi Fihla izatifikethi, ungakhankanya "ipa-acme-manage pruning --enable --cron "0 0 1 * *")
• Ikhonsoli yewebhu ibandakanya isethi entsha, edibeneyo yezixhobo zokwenza imizobo yenkqubo kunye nemifanekiso.
• Inkxaso eyongeziweyo yokuvula ngokuzenzekelayo kwezahlulo zeengcambu ezifihliweyo (LUKS) kusetyenziswa i-NBDE.
• Inkxaso eyongeziweyo yokuthunyelwa ngokuzenzekelayo kwezixhobo ze-cryptographic ezixhunyiwe kwiinkqubo zeendwendwe ngexesha lokusebenza (ayifumaneki ngexesha lokuqalisa inkqubo yeendwendwe).

Okokugqibela, ukuba unomdla wokwazi okungakumbi ngayo, unokujonga kwiinkcukacha Kule khonkco ilandelayo.

Khuphela ufumane

Ku unomdla kwaye unokufikelela kwi-portal yomthengi we-Red Hat, kufuneka wazi ukuba le nguqulo yenzelwe x86_64, s390x (IBM System z), ppc64le kunye ne-Aarch64 (ARM64) izakhiwo. Imithombo yeRed Hat Enterprise Linux 9 rpm packages ibekwe kwindawo yokugcina iCentOS Git.

Imifanekiso yokufakela esele yenziwe iyafumaneka kubasebenzisi ababhalisiweyo beRed Hat Customer Portal (ungasebenzisa kwakhona imifanekiso ye-CentOS Stream 9 iso ukuvavanya ukusebenza).