I-RHEL 9.2 isivele ikhishiwe kanti lezi yizindaba zayo

Kwembulwa Isigqoko Esibomvu muva nje, ukwethulwa kwe- inguqulo entsha yokusabalalisa kwakho I-Red Hat Enterprise Linux 9.2, ebona igatsha le-RHEL 9 liqhubeka nokuthuthuka ngenqubo yokuthuthukiswa evuleke kakhudlwana futhi lakhela phezu kwesisekelo sephakheji ye-CentOS Stream 9.

Ngokomjikelezo wokusekela weminyaka eyi-10 wokusatshalaliswa, i-RHEL 9 izogcinwa kuze kube ngu-2032, ngaphandle kwalokho kufanele futhi kuphawulwe ukuthi ngesikhathi esifanayo, kwethulwa isibuyekezo segatsha langaphambili le-RHEL 8.8, elihlelelwe ukukhululwa. ezinsukwini ezizayo (okwamanje inguqulo ye-beta kuphela etholakalayo).

Yini okusha in Red Hat Enterprise Linux 9.2

Kule nguqulo entsha evela ku-RHEL 9.2, I-GTK 2 namaphakheji ahlobene i-adwaita-gtk2-theme, i-gnome-common, i-gtk2, i-gtk2-immodule ne-hexchat kwehlisiwe. Inguqulo yangaphambilini iphinde yahoxisa iseva ye-X.org (i-RHEL 9 ishintshashintsha ibe iseshini ye-GNOME esekelwe e-Wayland), ehlelelwe ukuthi isuswe egatsheni elikhulu elilandelayo le-RHEL 10, kodwa igcine amandla okusebenzisa izinhlelo ze-X11 kusukela kuseshini yase-Wayland. usebenzisa iseva ye-DDX x wayland.

Olunye ushintsho olugqamile yilolo I-DNF isebenzisa umyalo wokuthuthukisa ungaxhunyiwe ku-inthanethi ukuze usebenzise izibuyekezo kusistimu ngemodi engaxhunyiwe ku-inthanethi. Ingqikithi yokubuyekeza ungaxhunyiwe ku-inthanethi ukuthi amaphakheji amasha alandwa kusetshenziswa umyalo othi «dnf thuthukisa ukulanda ungaxhunyiwe ku-inthanethi", emva kwalokho umyalo" uyakhishwadnf uqalise kabusha ungaxhunyiwe ku-inthanethi»ukuqalisa kabusha isistimu endaweni encane futhi ufake izibuyekezo ezitholakalayo kuyo ngaphandle kokuphazamisa izinqubo zomsebenzi.

Ku-RHEL 9.2 umtapo wolwazi we-cryptographic we I-NSS ayisasekeli okhiye be-RSA abancane kuno-1023 bits (kokubili okwamasiginesha edijithali nokubethela), ngaphezu kwalokho I-NetworkManager enosekelo lokulinganisa ukulayisha kuzo zonke izixhumi ezibonakalayo ze-Ethernet, Ukuphathwa kwe-loopback interface, i-IEEE 802.1X yokufinyelela okuqinisekisiwe kokushintsha izimbobo, i-ECMP (umzila olinganayo wezindleko eziningi), 802.1ad (ukupakishwa kwe-VLAN, izihloko ezifakwe esidlekeni, kanye nokushintshwa kwamathegi e-VLAN amaningi kuhlaka olulodwa lwe-Ethernet).

Ezinguqukweni eziqondene ne-RHEL ku-NetworkManager, ziphawulwe: Ukwenza lula ukuphathwa kokucushwa kwe-DNS lapho uxhumeka kumanethiwekhi amaningi anamaseva e-DNS ahlukene, inketho entsha. vlan.protocol, ikhono lokumisa ama-VLAN ukuze uthole izixhumi ezibonakalayo zenethiwekhi ezingalawulwa, ezisekela ukulungiselelwa kwe-MPTCP (Multipath TCP).

Kuyaphawulwa futhi ukuthi a iphakheji entsha ye-synce4l yokusebenzisa ubuchwepheshe bokuvumelanisa imvamisa ye-SyncE (I-Synchronous Ethernet) Isekelwa amanye amakhadi enethiwekhi namaswishi enethiwekhi, angathuthukisa ukusebenza kahle kokuxhumana ezinhlelweni ze-RAN (Radio Access Network) ngenxa yokuvumelanisa isikhathi esinembe kakhudlwana.

Iphakheji ye-nmstate, ehlinzekwa umtapo wolwazi kanye nensiza ye-nmstatectl ukuphatha ukucushwa kwenethiwekhi nge-API ememezelayo (isimo senethiwekhi sichazwa ngendlela ye-schema echazwe ngaphambilini), manje unamandla okucacisa amakheli e-IPv6 endawo njengamaseva e-DNS futhi wengeze ukusekelwa kwamafulegi we-MPTCP.

I-eBPF Subsystem (Isihlungi sePakethe yeBerkeley) ithwala ukuthuthukiswa okusetshenziswe ku-Linux kernels 5.17, 5.18, 5.19 kanye ne-6.0. Isibonelo yonke imisebenzi esebenzisa indlela ye-BTF isiyatholakala (ifomethi yohlobo lwe-BPF). Phakathi kwezinye izinto, ungeze ukwesekwa kwe-CO-RE (Hlanganisa Kanye - Run Everywhere), okuyinto ivumela ukuhlanganisa ikhodi yezinhlelo ze-eBPF kanye kuphela futhi usebenzise isilayishi sendawo yonke ekhethekile evumelanisa uhlelo olulayishiwe ku-kernel yamanje kanye Nezinhlobo ze-BTF, ezixazulula inkinga yokuphatheka kwezinhlelo ze-eBPF ezihlanganisiwe, ngaphambilini ebezingasetshenziswa kuphela kunguqulo ye-kernel ezakhelwe yona.

Amakhono e-tuna, i-rteval kanye nezinsiza ze-slat andisekile. Isibonelo, i-tuna inesixhumi esibonakalayo somugqa womyalo esisha sokushintsha i-kernel nezici zohlelo lokusebenza, iziphazamiso, nemisebenzi.

Kwezinye izinguquko ezigqamile:

• Ku-firewalld, ukwesekwa okwengeziwe kwemodi yokuqalisa ye-failsafe, okuvumela, uma kunezinkinga ngemithetho eshiwo, ukubuyela kuzilungiselelo ezizenzakalelayo ngaphandle kokushiya umsingathi engavikelekile.
• Izinsizakalo ezingeziwe ezisekelwa yi-Kodi JSON-RPC, EventServer, netdata, IPFS protocol.
• I-Clevis, esetshenziselwa ukubethela ngokuzenzakalelayo futhi isuse ukubethela idatha kuma-disk partitions, inikeza inketho ethi "-e" ukuvumela ukusetshenziswa kwethokheni yangaphandle esikhundleni sokufaka iphasiwedi yokusetha i-cryptsetup.
• Kwengezwe izinqubomgomo ze-SELinux zokuvikela izinsiza ze-mptcpd ne-udftools.
• Kwengezwe inqubomgomo ye-SELinux yokusetha kabusha amalungelo e-Rsyslog ekuqaleni (i-Rsyslog manje isebenzisa amalungelo amancane adingekayo kuphela).
• Ku-kernel, ngokulahla ulwazi mayelana nezikhukhula ze-SYN ezitholiwe kurejista, ulwazi mayelana nekheli le-IP elithole uxhumano lunikezwa ukuze kube lula ukucacisa indawo yezikhukhula kumasistimu anabalawuli ababoshelwe kumakheli e-IP ahlukene.
• Ukwesekwa okwengeziwe kokususa okuzenzakalelayo kwezitifiketi eziphelelwe yisikhathi (isibonelo, se-ACME Masibethele izitifiketi, ungacacisa "ipa-acme-manage pruning --enable --cron "0 0 1 * *")
• Ikhonsoli yewebhu ihlanganisa isethi entsha, ehlanganisiwe yamathuluzi okudala imidwebo yesistimu nezithombe.
• Kungezwe ukusekelwa kokuvula ngokuzenzakalelayo kwezingxenye zempande ezibethelwe (LUKS) kusetshenziswa i-NBDE.
• Usekelo olungeziwe lokudlulisela phambili okuzenzakalelayo kwamadivayisi e-cryptographic axhunyiwe kumasistimu wezihambeli phakathi nokusebenza (akutholakali ngesikhathi sokuqalisa isistimu yesihambeli).

Ekugcineni, uma unentshisekelo yokwazi kabanzi ngakho, ungaxhumana nemininingwane Kulesi sixhumanisi esilandelayo.

download uthole

Ngokuba unentshisekelo futhi unokufinyelela kuphothali yamakhasimende eRed Hat, kufanele wazi ukuthi le nguqulo yakhelwe ukwakhiwa kwe-x86_64, s390x (IBM System z), ppc64le kanye ne-Aarch64 (ARM64). Imithombo yamaphakheji weRed Hat Enterprise Linux 9 rpm itholakala endaweni ye-CentOS Git.

Izithombe zokufakwa esezilungile ziyatholakala kubasebenzisi ababhalisiwe be-Red Hat Customer Portal (ungasebenzisa futhi izithombe ze-CentOS Stream 9 iso ukuze uhlole ukusebenza).