Astra Linux 1.8.2: Enhanced Virtualization Capabilities and New Security Level

The installation process has become more flexible thanks to an improved installer with LiveCD mode and a new OEM mode that allows hardware manufacturers to customize the platform before handing over the device to the end user.

The parameters of previously implemented pre-installed ISS profiles have been expanded, the ability to create custom profiles has been added, as well as tools for managing access control lists in NFSv4.x. Security auditing has been enhanced: the system records more events, including account blocking and changes to network settings.

The user interface has been updated with a number of innovations: voice input of text, screen content reading, flexible settings for the Start menu, and an improved Notification Center. For example, the Do Not Disturb option can be enabled while the screen is being shared.

The virtualization capabilities have been significantly expanded: backup integrity control, NVMe emulation support, and a new lvm-qcow2 driver for improving virtual machine performance have been added. They can now be deleted in groups, and virtual network management has also been simplified.

Improvements also affected work with remote connections: the work of the remote access service via the RDP protocol has been optimized, video stream compression according to the H.264 standard has been implemented, and the level of security has been increased due to TLS support. All this reduces the load on the processor and network during remote work.

The Ark archiver now supports multi-volume archives, and the Evolution mail client can import MSG files and has new features for working with attachments. Additional software and tools for developers have appeared in the repositories.

The server platform has also seen a lot of changes. Given the importance of modern containerization technologies, the vendor has significantly improved the work with Podman: optimized launch in user sessions with low integrity, improved the event registration system, and expanded the functionality responsible for compatibility with Docker commands.

The server components of the OS have received a comprehensive update: the configuration management mechanisms based on Puppet have become more flexible, and the process of installing deb packages via QApt has become more reliable. The network infrastructure has been enriched with an updated version of Samba 4.21.3 with an improved notification system, and the sssd authentication service has received extended support for two-factor authentication and account lockout monitoring.

In addition to all this, the Astra Group team has carefully worked out the integration capabilities: the updated FreeIPA 4.11 significantly simplifies the processes of deployment and integration with Windows Active Directory. Key server components have been updated: the Apache2 web server to version 2.4.62, the BIND9 DNS server to 9.18.33, the Kerberos authentication server to 1.21.3, and the Zabbix monitoring system to 7.0.5 with a new database template.

"Version 1.8.2 continues the development of the main areas laid down in the major release 1.8: support for modern equipment, automation of administration, increased productivity and improved user interface for quick system development. Astra Linux, which has proven itself as a reliable operating system with proven protection that meets the requirements of critical information infrastructure facilities, gains additional competitive advantages thanks to the newly implemented capabilities. This expands the scope of its application and increases its attractiveness for organizations of any size and area of ​​activity."

Mikhail Gellerman, Director of Operating Systems Management, Astra Group

Additions to the main and extended repositories include modern solutions for monitoring (ioping), data management (nwipe, MinIO) and security, new modules for working with NVIDIA graphics accelerators and security policy management tools. Packages have been updated to the latest versions, which provides increased security and compatibility with modern software.