Izici Ezintsha Nokuthuthukiswa kwe-systemd 262 ye-Linux

Informatec Digital » Linux » Izici Ezintsha Nokuthuthukiswa kwe-systemd 262 ye-Linux

I-ecosystem ye-Linux isanda kuthola umoya omusha ngokukhishwa kwe- systemd 262. Njengoba besilindele kulo mphathi wesevisi, abazange bazibambe futhi babhekane cishe nazo zonke izici zesistimu, kusukela endleleni ikhompyutha eqala ngayo kuya endleleni okhiye bokubethela abaphathwa ngayo, okuqinisekisa uhlelo oluqinile noluguquguqukayo.

Okugqama kakhulu kulokhu kukhishwa ukugxila kwayo ezindaweni ezi-virtualized kanye neziqukathi , ihlose ukwenza ukuthunyelwa kwensizakalo kube lula futhi kusebenze kahle ngangokunokwenzeka. Akukhona nje ukwengeza izici ezimbalwa, kodwa mayelana nokucabanga kabusha ngezakhiwo ezithile ukuze abaphathi bezinhlelo kanye nabathuthukisi babe namathuluzi engeziwe abanawo okuthuthukisa imishini yabo.

I-athikili ehlobene:

Ukuzenzakalela ku-Linux: kusuka ku-cron kanye ne-Bash kuya ku-Ansible kanye ne-systemd

Inguquko ezweni leziqukathi

Kulabo abahlushwa nsuku zonke ngeziqukathi ezidinga ukuba zincane ngangokunokwenzeka, i-systemd 262 inikeza igugu: ikhono lokuhlanganisa njenge- single static binary . Lokhu kusho ukuthi inqubo ye-PID 1 ayisaxhomekile emitatsheni eminingi enamandla edinga ukulayishwa, okuvumela ukudalwa kwezithombe ezincane kakhulu nezizimele zesiqukathi, ukugwema ukusetshenziswa kwe-dlopen() nokwenza lula ukulungiswa kwabasebenzisi namaqembu.

Ngaphezu kwalokho, ukuvimbela izitsha ukuthi zingalengi ngenxa yamafayela okucushwa angekho, umphathi manje ufaka amafayela edrayivu afakiwe . Lawa empeleni angama-backups angaphakathi emisebenzi ebalulekile njengokuvala, ukuqalisa kabusha, kanye nokuqalisa kabusha kwabasebenzisi abaningi. Uma i-systemd ingakwazi ukuthola lawa mafayela kudiski, isebenzisa lawo ahlanganisiwe, okwenza kube lula kakhulu ukusebenza ezindaweni ezincane lapho kungewona wonke amadrayivu afakiwe ngokwahlukana.

Ukuphathwa kwesevisi kanye nokuzinza kohlelo

Ngezinye izikhathi, lapho isevisi yehla kumaseva ayizinkulungwane ngasikhathi sinye, ukuqala kabusha ngasikhathi sinye kungabangela umphumela we-domino odlula inethiwekhi noma izinsiza. Ukuze kugwenywe le nkinga, kufakwe inketho ethi `RestartRandomizedDelaySec` , eyethula ukubambezeleka okungahleliwe ngaphambi kokuqala kabusha isevisi, ngaleyo ndlela kusatshalaliswa umthwalo womsebenzi. Ngaphezu kwalokho, ukuvimbela uhlelo ukuthi lungacindezelwa ngokuqalisa izinqubo eziningi kakhulu, izihliki manje zivumela ukukhawulela ukuvumelana kokusebenza kusetshenziswa isiqondiso se-`ActivatingConcurrencyMax`.

I-athikili ehlobene:

Amaphutha abulalayo namathiphu okusinda kwabaphathi be-Linux

Endaweni yokutholakala okuphezulu, ukuhlanganiswa ne- Live Update Orchestrator (LUO) kuyagqama . Ngenxa yenketho entsha ye-LUOSession, kungenzeka ukuhlanganisa izibuyekezo ze-kernel ye-Linux ebukhoma, okuvumela uhlelo ukuthi lubuyekezwe ngaphandle kokuqala kabusha izinsizakalo nokugcina isimo sezinqubo— inzuzo yangempela kumaseva abalulekile angakwazi ukukhokhela ngisho nomzuzwana wokungasebenzi.

Ukubethela nokuphepha okusezingeni eliphezulu

Ngokuphathelene nokuphepha, i-systemd iqinise izikulufo. Manje, iziqinisekiso ezivalwe kumojuli ye-TPM zixhunywe ngqo kukhiye wempande yesitoreji (SRK) , okuvala umnyango wokuhlaselwa kwedatha. Ngaphezu kwalokho, kulabo abalungiselela ama-PIN ku-TPM2, i -algorithm ye-Argon2id isetshenzisiwe , emelana kakhulu nokuhlaselwa kwe-brute-force kunezindlela ezindala.

Ngakolunye uhlangothi, ukuphathwa kweziqondisi zasekhaya ezibethelwe nge-systemd-homed manje kusebenzisa izinqubomgomo ze-fscrypt v2 ngokuzenzakalelayo . Lokhu kuvumela okhiye abakhulu ukuthi babonakale ezindaweni ezahlukene zamagama, yize kubalulekile ukwazi ukuthi ayikho indlela yokuhambisa ngokuzenzakalelayo iziqondisi ze-v1 ziye ku-v2. Okunye okuphawulekayo ukufika kwe -first-boot wizard ku-systemd-cryptenroll, okwenza kube lula ukumisa izindlela ezengeziwe zokuvula kusukela ekuqaleni.

Ukwenza i-Virtualization, ukuxhumana, kanye nokuthunyelwa okuzenzakalelayo

Ithuluzi le-systemd-vmspawn lithathe igxathu elikhulu phambili ngokwengeza ukwesekwa kwe -Intel TDX , okuhambisana nokusekelwa kwe-AMD SEV-SNP okukhona. Lokhu kuthuthukisa ukubala okuyimfihlo ngokuvumela imishini ebonakalayo ukuthi ihlukaniswe nezinye izingqalasizinda zomsingathi, isici esibalulekile ezindaweni zamafu lapho ubumfihlo bememori bubaluleke kakhulu.

Kulabo abaphatha ukuthunyelwa okukhulu, i-systemd-firstboot manje ifaka imodi engenamakhanda . Empeleni, ivumela ukucushwa kokuqala ukuthi kwenziwe ngokuzenzakalelayo ngaphandle kokuyalela umsebenzisi, okulungele ukufakwa okunganakiwe. Ngokuphathelene nokuxhumana, i-systemd-networkd manje ingahlunga ukucushwa ngokusekelwe kumathegi omshini futhi ivumela ukulayisha kabusha amafayela ngaphandle kokuqala kabusha izixhumi ezisebenzayo kakade.

Okunye ukuthuthukiswa kanye nezinto ezimangalisayo zobuchwepheshe

Akumelwe sikhohlwe ukuvela kwe-run0, okuyindlela ehlukile kune-sudo, manje ehlanganisa izinketho ezijwayeleke kakhulu kubaphathi, njengekhono lokuvuselela noma lokuhoxisa ukugunyazwa kwesikhashana. Ngaphezu kwalokho, uhlelo lokuvuselela i-athomu luthuthukisiwe nge-systemd-sysupdate, manje egcina ukulawula okuqinile kumafayela afakiwe futhi ikuvumela ukuthi ususe lawo angasadingeki usebenzisa umyalo wokuhlanza.

I-athikili ehlobene:

Umhlahlandlela Ophelele Wokwenza Umsebenzi Ngokuzenzakalela Nge-Bash Scripting ku-Linux

Esinye isici esithakazelisayo kakhulu sale nguqulo ukufakwa kwe- AI canary . Le ndlela yenzelwe ukuthola ikhodi yokumodela ulimi (i-LLM) engakaze ihlolwe ngumuntu ngaphambi kokuba ithunyelwe kuphrojekthi. Kuyisivikelo sokuqinisekisa ukuthi ikhwalithi yekhodi ihlala iphezulu nokuthi abaxhasi babhekene nesibopho ngalokho abakulayisha endaweni yokugcina.

Ezinye izithuthukisi zobuchwepheshe zifaka phakathi ukwesekwa kwe -OpenSSL 4 , ukuhlanganiswa kwemojula ye-dm-clone yokudala ama-clone edivayisi yokufunda kuphela, kanye nokuvuselelwa kwejenali okuthuthukisiwe, okungakwazi manje ukuthola okufakiwe okusebenzayo ngisho nangemva kokuvalwa okungazelelwe. Konke lokhu, kuhlanganiswe ne-CLI entsha enefomethi ye-JSON yabathuthukisi, kwenza le nguqulo ibe yisinyathelo esibalulekile ekuphathweni kwe-Linux.

Lokhu kubuyekezwa kuguqula indlela ingqalasizinda ye-Linux ephathwa ngayo, kuthuthukisa isimo sokukhanya kweziqukathi nokuvikela uhlelo ngokusebenzisa i-cryptography ethuthukisiwe kanye ne-virtualization eyimfihlo, ngenkathi kwethulwa izindlela ezihlakaniphile zokuvimbela ukuphahlazeka kokuqala kabusha kwesevisi kanye nokwenza kube lula ukwenza ngokuzenzakalelayo kokufakwa.

I-athikili ehlobene:

Umhlahlandlela Ophelele Wokuqapha Amaseva ngeGrafana kanye nePrometheus