Emva kweenyanga ezintlanu zophuhliso Inguqulelo entsha yeSystemd 246 ibonisiwe, apho inguqulelo entsha kubandakanya ukuxhaswa kweeyunithi zokumisa, ukukwazi ukuqinisekisa umfanekiso wediski ngotyikityo lwedijithali, Inkxaso yoxinzelelo lobhaliso kunye nendawo yokulahla inkunkuma kusetyenziswa i-ZSTD algorithm, phakathi kwezinye izinto.
Kulabo abangaqhelekanga nge-systemd, kuya kufuneka uyazi loo nto le iseti yolawulo lweedemem, amathala eencwadi kunye nezixhobo eziyilwe njengolawulo oluphambili kunye neqonga loqwalaselo lokunxibelelana ne-kernel yenkqubo yokusebenza ye-GNU / Linux.
Yintoni entsha kwiSystemd 246?
Kule nguqulo intsha kugqityiwe utshintsho kwaye enye yazo isilawuli sezixhobo esekwe kumaqela v2, endazi ngayo zinokumisa iinkqubo kwaye zikhulule okwethutyana ezinye izixhobo ukwenza eminye imisebenzi. Umkhenkce kunye nokunyibilikiswa kweeyunithi kulawulwa ngumyalelo omtsha "wenkqubo efriziweyo" okanye nge-D-Bus.
Olunye utshintsho olubonakalayo lutsha yongeze inkxaso yokuqinisekisa umfanekiso wediski ngotyikityo lwedijithali. Uqinisekiso kwenziwa kusetyenziswa useto olutsha kwiiyunithi zenkonzo: I-RootHash kunye ne-RootHashSignature.
Kwi * .mount drive, useto lwe ReadWriteOnly luyenziwa, ethintela ukubeka isahlulelo kwimowudi yokufunda kuphela ukuba ayinakubekwa ukuze kufundwe nokubhalwa.
Kwi * .socket drives, useto lwePassPacketInfo longeziwe, evumela ukuba i-kernel yongeze imethadatha eyongezelelweyo kwipakethi nganye efundwayo kwisiseko.
Iinkonzo, ukucwangciswa okucetywayo yiCoredumpFilter kunye ne- TimeoutStartFailureMode / TimeoutStopFailureMode xa ixesha lokuphuma lisenzeka xa uqala okanye umisa inkonzo).
Ukongeza kuyo, nayo Iqaqambisa useto lwefayile yedrive entsha: ImekoPathIsEncrypted kunye AssertPathIsEncrypted Ukujonga indawo yendlela ekhankanyiweyo kwisixhobo sebhloko usebenzisa i-encryption (dm-crypt / LUKS), Imeko yendalo esingqongileyo kunye ne-AssertEnvelo ukujonga imeko-bume (umzekelo, isetiwe yi-PAM okanye xa kulungiswa izikhongozeli).
Kwiiparameter ezahlukeneyoumgca wokuyalela kunye neefayile zoqwalaselo ezinxulumene nokuqwalaselwa kwezitshixo okanye izatifikethi, isakhono sokuchaza indlela eya kwiziseko zeUnix siyenziwa (AF_UNIX) ukuhambisa izitshixo kunye nezatifikethi ngeefowuni kwiinkonzo ze-IPC, xa kunganqweneleki ukubeka izatifikethi kwizitori zediski ezingabhalwanga.
Kwakhona, Inkqubo ye-homed-service ifumene amandla ongezelelweyo okuvula imikhombandlela yasekhaya usebenzisa iithokheni zeFIDO2 kunye ne-encryption backend I-LUKS yongeza inkxaso ekubuyiseni ngokuzenzekelayo iibhloko zenkqubo yefayile engenanto ekupheleni kweseshoni.
Kwakhona yongeze iiparameter zelayini yomyalelo kernel: systemd.hostname ukuseta igama lenginginya kwinqanaba lokuqala lokuqalisa
- udev.
- Inkqubo yokutshintsha ukukhubaza ukusebenza okuzenzekelayo kwesahlulelo sokutshintsha
- systemd.clock-usec ukuseta iwotshi yenkqubo kwii-microseconds
- Inkqubo-yohlaziyo-lweemfuno kunye nohlaziyo lwenkqubo.imeko yokuqala ebhuthini yokujonga ngaphezulu kweMeko yeNgcaciso yokuHlaziya kunye neMeko yoQaloBoot.
Olunye utshintsho olwenziweyo yima:
- Kwi-systemd-networkd, kwicandelo le- [DHCPv4], useto lwe-UseGateway longezwe ukukhubaza ukusetyenziswa kolwazi lwesango olufunyenwe nge-DHCP.
- Kwi-systemd-networkd, kwi [DHCPv4] nakwi- [DHCPServer], icandelo le-SendVendorOption liye longezwa ukuseta nokwenza iinkqubo zokhetho zabanikezeli.
- Inkqubo-yenethiwekhi ineseti entsha ye-EmitPOP3 / POP3, EmitSMTP / SMTP, kunye EmitLPR / LPR iinketho kwicandelo [le-DHCPServer] ukongeza ulwazi malunga ne-POP3, SMTP, kunye neeseva ze-LPR.
- Inike igama kwakhona useto ukusuka kuLuhlu oluMnyama ukuya kwiDenyList (yokuhambelana ngasemva, ukuphathwa kwegama elidala kuyagcinwa)
- Inkqubo-yenethiwekhi yongeze icandelo elikhulu le-IPv6 kunye ne-DHCPv6 useto olunxulumene noko.
- Yongeze inkxaso yokujonga i-SNI kwi-DNS ngaphezulu kokuphunyezwa kwe-TLS.
- Kwinkqubo esonjululwe isisombululo, ukubanakho ukumisela ileyibhile enye enegama le-DNS (igama lomninimzi) longeziwe.
Okokugqibela ukuba ufuna ukwazi irekhodi elipheleleyo yotshintsho kunye neendaba ezihanjisiweyo kolu khuphelo lutsha lwe-systemd 246, unokuqhagamshelana nabo Kule khonkco ilandelayo.
Inkqubo ifunxa !!