debian buster_Debian 10 Buster的新功能

debian buster

介绍 (Introduction)

The Debian operating system’s most recent stable release, version 10 (Buster), was published on July 6, 2019, and will be supported until 2022. Long term support may be provided through 2024 as part of the Debian LTS Project.

Debian操作系统的最新稳定版本10(Buster)于2019年7月6日发布，将一直支持到2022年。作为Debian LTS Project的一部分，可能会在2024年提供长期支持。

This guide is a brief overview of the new features and significant changes to Debian since the previous release. It focuses mainly on changes that will affect users running Debian in a typical server environment. It synthesizes information from the official Debian 10 release notes, the Debian 10 release blog post, kernelnewbies.org, and other sources.

本指南简要概述了自上一版本以来Debian的新功能和重大更改。 它主要侧重于将影响在典型服务器环境中运行Debian的用户的更改。 它综合了Debian 10官方发行说明 ， Debian 10发行博客文章 kernelnewbies.org和其他来源的信息。

变更摘要和主要软件包版本 (Summary of Changes and Major Package Versions)

Generally, Debian stable releases contain very few surprises or major changes. This remains the case with Debian 10. Beyond a few networking and security changes — which we will cover in subsequent sections — most updates are small modifications to the base system and new versions of available software packages.

通常，Debian稳定版包含很少的惊喜或重大更改。 Debian 10仍然如此。除了一些网络和安全性更改(我们将在随后的部分中进行介绍)之外，大多数更新都是对基本系统的较小修改以及可用软件包的新版本。

The following list summarizes a select list of Debian 10 software updates. The versions that shipped in Debian 9 are included in ( ) parentheses:

以下列表总结了Debian 10软件更新的选择列表。 ( )括号中包含Debian 9随附的版本：

系统 (System)

• Linux kernel 4.19 (from 4.9)

  Linux内核 4.19 (来自4.9)

• systemd 241 (from 232)

  systemd 241 (来自232)

网络服务器 (Web Servers)

• Apache 2.4.38 (from 2.4.25)

  Apache 2.4.38 (来自2.4.25)

• nginx 1.14 (from 1.10)

  nginx 1.14 (从1.10开始)

编程语言 (Programming Languages)

• Go 1.11 (from 1.7)

  从1.1.7 转到 1.11

• Node.js 10.15.2 (from 4.8.2)

  Node.js 10.15.2 (来自4.8.2)

• PHP 7.3 (from 7.0)

  PHP 7.3 (从7.0起)

• Python 3.7.2 (from 3.5.3)

  Python 3.7.2 (来自3.5.3)

• Ruby 2.5 (from 2.3)

  Ruby 2.5 (从2.3开始)

• Rust 1.34 (from 1.24)

  锈 1.34 (来自1.24)

资料库 (Databases)

• MariaDB 10.3 (from 10.1)

  MariaDB 10.3 (10.1起)

• PostgreSQL 11 (from 9.6)

  PostgreSQL 11 (来自9.6)

The following sections explain some of the more extensive changes to Debian 10.

以下各节说明了对Debian 10的一些更广泛的更改。

Linux内核4.19 (Linux Kernel 4.19)

The Linux kernel has been updated to version 4.19. This is a long-term support kernel that was released on October 22, 2018 and will be supported until December of 2020. For more information on the different types of Linux kernel releases, take a look at the official Linux kernel release and support schedule.

Linux内核已更新至版本4.19。 这是一个长期支持内核，已于2018年10月22日发布，并将一直支持到2020年12月。有关不同类型Linux内核版本的更多信息，请查看官方Linux内核版本和支持时间表 。

Some new features and updates that were released between kernels 4.9 and 4.19 include:

在内核4.9和4.19之间发布的一些新功能和更新包括：

• Virtual GPU support, which enables GPU hardware to be shared between multiple virtual machines instead of being passed-through directly to one. (4.10)

  虚拟GPU支持，使GPU硬件可以在多个虚拟机之间共享，而不必直接传递给一个虚拟机。 ( 4.10 )

• Performance improvements for large-scale SSD-based swap. (4.11)

  大规模基于SSD的交换的性能改进。 ( 4.11 )

• Improved in-kernel TLS acceleration. (4.13)

  改进的内核内TLS加速。 ( 4.13 )

• Improvements to the Ext4 filesystem, including support for billions of directory entries, and extended attributes that can be up to 64k in size. (4.13)

  Ext4文件系统的改进，包括对数十亿目录条目的支持以及扩展的属性，最大可扩展到64k。 ( 4.13 )

• Support for 4 petabytes of physical memory, up from 64 terabytes. (4.14)

  支持4 PB的物理内存，高于64 TB。 ( 4.14 )

• Meltdown and Spectre vulnerability updates, along with other CPU vulnerability patches. (4.15)

  Meltdown和Spectre漏洞更新以及其他CPU漏洞补丁。 ( 4.15 )

• Support for using cgroups to set I/O latency targets for block devices. (4.19)

  支持使用cgroup设置块设备的I / O延迟目标。 ( 4.19 )

For more information on Linux kernel updates, kernelnewbies.org maintains a detailed and beginner-friendly changelog summary for each release.

有关Linux内核更新的更多信息， kernelnewbies.org维护每个版本的详细且对初学者友好的变更日志摘要 。

默认情况下启用AppArmor (AppArmor Enabled by Default)

AppArmor is an access control system that focuses on limiting the resources an application can use. It is supplemental to more traditional user-based access control mechanisms.

AppArmor是一个访问控制系统，致力于限制应用程序可以使用的资源。 它是对更传统的基于用户的访问控制机制的补充。

AppArmor works by loading application profiles into the kernel, and then using those profiles to enforce limits on capabilities such as file reads and writes, networking access, mounts, and raw socket access.

AppArmor的工作方式是：将应用程序配置文件加载到内核中，然后使用这些配置文件对功能进行限制，例如文件读写，网络访问，安装和原始套接字访问。

Debian 10 ships with AppArmor enabled and some default profiles for common applications such as Apache, Bash, Python, and PHP. More profiles can be installed via the apparmor-profiles-extra package.

Debian 10随附启用了AppArmor，并为诸如Apache，Bash，Python和PHP之类的常见应用程序提供了一些默认配置文件。 可以通过apparmor-profiles-extra软件包安装更多配置apparmor-profiles-extra 。

See the AppArmor documentation for more information, including guidelines on how to write your own AppArmor application profiles.

有关更多信息，请参见AppArmor文档 ，包括有关如何编写自己的AppArmor应用程序配置文件的指南。

nftables取代iptables进行数据包过滤 (nftables Replaces iptables for Packet Filtering)

In Debian Buster the iptables subsystem is replaced by nftables, a newer packet filtering system with improved syntax, streamlined ipv4/ipv6 support, and built-in support for data sets such as dictionaries and maps. You can read a more detailed list of differences on the nftables wiki.

在Debian Buster中， iptables子系统被nftables取代， nftables是一种更新的数据包过滤系统，具有改进的语法，简化的ipv4 / ipv6支持以及对诸如字典和地图的数据集的内置支持。 您可以在nftables Wiki上阅读差异的更详细列表。

Compatibility with existing iptables scripts is provided by the iptables-nft command. The nftables wiki also has advice on transitioning from iptables to nftables.

iptables-nft命令提供了与现有iptables脚本的兼容性。 nftables Wiki还提供有关从iptables过渡到nftables的建议 。

与安全相关的Apt更新 (Security-related Updates to Apt)

Apt supports https repositories by default in Debian 10. Users no longer need to install additional packages before using https-based package repos.

默认情况下，Apt在Debian 10中支持https仓库。用户不再需要在使用基于https的软件包仓库之前安装其他软件包。

Additionally, unattended-upgrades — the system Debian uses to perform automatic updates from the security repository — now also supports automating point-release upgrades from any repo. These upgrades are usually small bug fixes and security updates.

此外， unattended-upgrades (Debian用来从security存储库执行自动更新的系统)现在也支持从任何存储库中自动进行点发行升级。 这些升级通常是小错误修复和安全更新。

结论 (Conclusion)

While this guide is not exhaustive, you should now have a general idea of the major changes and new features in Debian 10 Buster. Please refer to the official Debian 10 release notes for more information.

尽管本指南并不详尽，但您现在应该大致了解Debian 10 Buster的主要变化和新功能。 请参阅官方的Debian 10发行说明以获取更多信息。

翻译自: https://www.digitalocean.com/community/tutorials/what-s-new-in-debian-10-buster

debian buster