Inguqulelo entsha ye-SUSE Linux Enterprise 15 SP3 ikhutshiwe

Abaphuhlisi beSUSE bane thaca emva konyaka wophuhliso ingxelo entsha ye "Ishishini le-SUSE Linux 15 SP3" ebonelela nge-100% yokuhambelana kokubini kweephakeji kunye nokukhutshwa kwangaphambili kwe-OpenSUSE Leap 15.3, evumela ukufuduka okuthe tye kwiinkqubo ze-SUSE Linux Enterprise evulekileyoSUSE kwaye kungenjalo.

Inyani yile yokuba inqanaba eliphezulu lokuhambelana lafezekiswa ngenxa yokuseta iseti efanayo yeephakheji yokubini evulekileyoSUSE njengeSUSE Linux Enterprise, endaweni yokwakhiwa ngokutsha kweephakeji ze-src ezazisenziwa ngaphambili.

I-SUSE Linux Enterprise 15 SP3 Iimpawu eziphambili zeNqaku

Inguqulelo entsha yosasazo Izixhobo ze-Btrf zongeze inkxaso yokwenza serializing (ukwenza ngokulandelelana) imisebenzi engenakwenziwa ngaxeshanyenjengokulinganisa, ukususa / ukongeza izixhobo, kunye nokwenza ubungakanani kwakhona kwifayile yeefayile. Endaweni yokubonisa impazamo, imisebenzi efanayo ngoku yenziwa ngokulandelelana.

Kuyacaciswa ukuba hotkeys zongezwe kwisifaki Ctrl + Alt + Shift + C (kwimowudi yemizobo) kunye Ctrl + D Shift + C (kwimowudi yekhonsoli) ukubonisa incoko yababini ngezicwangciso ezongezelelweyo (ubumbeko lwenethiwekhi, khetha indawo yokugcina kunye nokutshintshela kwimowudi yengcali).

Kuyacaciswa ukuba Inkxaso yeModyuli yeComputer yeNVIDIA iphuculwe, I-CUDA (Compute Unified Device Architecture) kunye ne-GPU ebonakalayo, ukongeza ekongezeni inkxaso kwi-Secure Encrypted Virtualization (SEV) yolwandiso lwenyani olucetywayo kwisizukulwana sesi-XNUMX seeprosesa ze-AMD ze-EPYC, ezibonelela ngokufihlakeleyo okubonakalayo kwememori yomatshini ebonakalayo.

Kwicala le-kernel sinokuyifumana I-Linux kernel 5.3 iyaqhubeka nokusetyenziswa Esenenkxaso entsha yehardware, kuba ukwandiswa kweeprosesa ze-AMD EPYC, i-Intel Xeon, iArm kunye neFujitsu zongezwa, kubandakanya ulungelelwaniso oluthile lweeprosesa ze-AMD EPYC 7003, kunye nenkxaso yamakhadi eHabana Labs Goya AI PCIe. Inkqubo (AIP). Yongezwe inkxaso yeNXP i.MX 8M Mini SoC, NXP Layerscape LS1012A, NVIDIA Tegra X1 (T210), kunye Tegra X2 (T186).

Njengakwinguqulelo yangaphambili, idesktop iyathunyelwa GNOME 3.34, apho izilungiso ze-bug eziqokelelweyo zigqithiselwe khona kunye neepakeji zenkqubo zihlaziyiwe, ezinje nge-Inkscape 1.0.1, Mesa 20.2.4, Firefox 78.10, phakathi kwezinye ezininzi.

Ngexesha I-Xca ikhankanyiwe kwizibonelelo ezitsha (Isatifikethi se-X kunye noLawulo oluphambili) kulawulo lwesatifikethi, onokuthi wenze ngalo ii-CAs zalapha ekhaya, uvelise, utyikitye kwaye urhoxise izatifikethi, ungenise kunye nezitshixo zokuthumela ngaphandle kunye nezatifikethi kwiifom ze-PEM, DER kunye ne-PKCS8.

Njengo Inkxaso ye-IPSec VPN StrongSwan kwiNethiwekhiManager (ifuna ukufakwa kweNethiwekhiManager-strongswan kunye neNetworkManager-strongswan-gnome package). Yehlisiwe kwaye ingasuswa kupapasho lwexesha elizayo, inkxaso yeNethiwekhiManager yeesistim zeseva (ububi busetyenziselwa ukumisela inkqubo esezantsi yenethiwekhi).

Kwiinkqubo ze-x86_64, kongezwe umqhubi we-CPU ongasebenziyo, "haltpoll", ethatha isigqibo xa i-CPU ingafakwa kwiimowudi ezinzulu zokonga umbane, ubunzulu bemowudi, ukonga okukhulu, kodwa kuthatha ixesha elide ukuphuma kwimowudi. Isilawuli esitsha senzelwe ukusetyenziswa kwiinkqubo ezibonakalayo kwaye ivumela i-CPU ebonakalayo (VCPU) esetyenziswe kwinkqubo yeendwendwe ukucela ixesha elongezelelweyo ngaphambi kokubeka i-CPU kwimeko yokungenzi nto. Le ndlela inokuphucula ukusebenza kwezicelo ezenziwe ngokuthintela ukubuya kolawulo kwi-hypervisor.

Olunye utshintsho ezibalaseleyo:

  • Inkxaso ye-SELinux yongezwe kwi-YaST. Ngexesha lofakelo, ngoku unokwenza i-SELinux ikhethe kwaye ukhethe imo "enyanzelekileyo" okanye "evumelekileyo".
  • Kubandakanya i-exfatprogs kunye ne-bcache-tools package ezinezixhobo ze-exFAT kunye ne-BCache.
  • Wongeze amandla okwenza i-DAX (indlela emfutshane) kwiifayile ezizodwa kwi-Ext4 nakwi-XFS
  • Yongeze i-swtpm package kunye nokuphunyezwa kwe-TPM (Imodyuli yeQonga elithembekileyo) yesiphelo sesoftware.
  • Ukuphuculwa kwenkxaso yezikripthi kunye neeprofayili kwi-AutoYaST.
  • Ukonyusa umda kwelona nani liphezulu leenkcazo zefayile zenkqubo zomsebenzisi (RLIMIT_NOFILE).
  • Umda onzima uphakanyisiwe ukusuka ku-4096 ukuya ku-512K, kwaye umda othambileyo, onokunyuswa ukusuka ngaphakathi kwesicelo ngokwawo, uhlala ungatshintshanga (iinkcazo ezili-1024).
  • IFirewalld yongeza inkxaso ebuyela umva yokusebenzisa ii-nftables endaweni yee-iptables.
  • Inkxaso eyongeziweyo yeVPN WireGuard (imodyuli yekernel kunye nezixhobo zokukhusela intambo).
  • I-Linuxrc ikuvumela ukuba uthumele izicelo ze-DHCP kwifomathi ye-RFC-2132 ngaphandle kokuchaza idilesi ye-MAC ukwenza lula ukugcinwa kwenani elikhulu lemikhosi.
  • I-Dm-crypt yongeza inkxaso ye-encryption yemowudi ehambelanayo, enikwe amandla ngokungafundi kunye nokungabhali emgceni ukhetho kwi / etc / crypttab.

Umthombo: https://www.suse.com/


Yiba ngowokuqala ukuphawula

Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.