X

Oracle Linux, Oracle Solaris, virtualization and container technologies and Oracle Cloud Infrastructure musings

Oracle Ksplice patch for CVE-2018-3620 and CVE-2018-3646 for Oracle Linux UEK r4

There was an Intel disclosure yesterday of a set of vulnerabilities around L1TF. You can read a summary here. We released, as you can see from the blog, a number of kernel updates for Oracle Linux and a Ksplice patch for the same.  I wanted to take the opportunity again to show off how awesome Oracle Ksplice is. The kernel patch we have for L1TF was about 106 different patches together. 54 files changed, 2079 insertions(+), 501 deletions(-). About 1.2Mb binary size of the...

Wednesday, August 15, 2018 | Read More

Oracle Ksplice for Oracle Linux in Oracle Cloud

My favorite topic.. Ksplice! Just a friendly reminder that every Oracle Linux instance in Oracle Cloud comes with Oracle Ksplice installed/enabled by default at no additional cost beyond basic compute. When you run an OL instance, the uptrack tools are on the base image. (uptrack-upgrade, uptrack-uname, etc..). The config file (/etc/uptrack/uptrack.conf) contains an access-key that enables any cloud instance to talk to our Ksplice service without registration. So as soon as...

Thursday, August 9, 2018 | Read More

Oracle Linux containers security

I recently did a short webcast that talked about Oracle Linux & Containers and some suggestions around best practices and some security considerations. The webcast had just a few slides and some of the feedback I received was that there could have been more textual assist to the talking so I promised I would write up a few things that came up during the webcast. Here it is: We have been providing Oracle Linux along with great support for nearly 12 years. During those years, we...

Wednesday, August 1, 2018 | Read More

bbcp and rclone for Oracle Linux

Last week we packaged up a few more RPMs for Oracle Linux 7 that will help make life easier for Cloud users. bbcp 15.02.03.01.1-3  in ol7_developer: # yum install bbcp bbcp is what I would call ssh on steroids. If you want to copy files from a local node to a remote node (say in Oracle Cloud) then this is a great tool. It might require some tuning but the idea is that you can open up parallel TCP streams. When you do large file transfers this should be able to give you a bit of...

Friday, July 13, 2018 | Read More

Oracle Linux 7 for Arm is now Generally Available

We released Oracle Linux 7 for Arm a few days ago. General Availability. We have been making previews available for a few months now but the time has come to put support behind it and make clear to customers and partners that this is a real product, not just a preview. A few specific things: - This is a 64-bit version only. We do not intend to support ILP 32. Our focus is on making sure we can provide a high quality server product to run now and in the future, serious...

Sunday, June 24, 2018 | Read More

Unbreakable Enterprise Kernel Release 5 for Oracle Linux 7

Yesterday we released the 5th version of our "UEK" package for Oracle Linux 7 (UEKR5). This kernel version is based on a 4.14.x mainline Linux kernel. One of the nice things is that 4.14 is an upstream Long Term Stable kernel version as well as maintained by gregkh. UEKR5 is a 64-bit only kernel. We released it on x86(-64) and ARM64 (aarch64) and it is supported starting with Oracle Linux 7. Updating to UEK5 is easy - just add the UEKR5 yum repo and update. We have some release...

Thursday, June 21, 2018 | Read More

oci-utils-0.6-34.el7

I will write up some examples on this later but for now... here's the changelog: The oci-utils package is used to manage block volumes and VNICs and is available for use with Oracle Linux 7 images in Oracle Cloud (excludes support for OCI-C). The latest release (oci-utils-0.6-34.el7) is available in the Oracle Linux 7 developer channel on YUM. The following changes/additions have been made in this release (0.6): - Support added for API access through Instance...

Tuesday, June 5, 2018 | Read More

Some tips for using Oracle Linux in Oracle Cloud

Creating an Oracle Linux instance in Oracle Cloud Infrastructure is easy. For the most part it is the same as creating your own image from the install media but we have done a few extra things that are very useful and you should know about :) - with recent images, the yum repo file points to a local OCI mirror of yum.oracle.com (and a few repos that are only available on linux.oracle.com for subscribers - but since all OCI users' instances are technically   subscribers ->...

Monday, May 28, 2018 | Read More

Using Oracle Ksplice for CVE-2018-8897 and CVE-2018-1087

Just the other day I was talking about using ksplice again and then just after these 2 new CVEs hit that are pretty significant. So, another quick # uptrack-upgrade and I don't have to worry about these CVEs any more.  Sure beats all those rebooting 'other' Linux OS servers. [root@vm1-phx opc]# uname -a Linux vm1-phx 4.1.12-112.16.4.el7uek.x86_64 #2 SMP Mon Mar 12 23:57:12 PDT 2018 x86_64 x86_64 x86_64 GNU/Linux [root@vm1-phx opc]# uptrack-uname -a Linux vm1-phx...

Thursday, May 10, 2018 | Read More

Oracle Ksplice and Oracle Linux reminder

For those of you that keep up with my blog and twitter musings... you know how much I love Ksplice. This morning I was connecting to one of my cloud VMs and did an uptrack-upgrade as it had been a while and I hadn't turned on automatic ksplice updates on this node. I was pleasantly reminded of the awesomeness that is Ksplice.  Here's the output, a kernel from 2-MAR-2018, no reboot, just a quick # uptrack-upgrade and look at all the stuff that I am now protected against. A few...

Wednesday, May 9, 2018 | Read More

Congestion Control algorithms in UEK5 preview - try out BBR

One of the new features in UEK5 is a new TCP congestion control management algorithm called BBR (bottleneck bandwidth and round-trip propagation time). You can find very good papers here and here. Linux supports a large variety of congestion control algorithms,  bic, cubic, westwood, hybla, vegas,  h-tcp, veno, etc.. Wikipedia has some good information on them : https://en.wikipedia.org/wiki/TCP_congestion_control Here is a good overview of the important ones, including BBR : ht...

Sunday, April 8, 2018 | Read More

Running VirtualBox inside a VM instance in Oracle Cloud Infrastructure

OK - So don't ask "Why?"... Because... I can! :) would be the answer for the most part. Oracle Cloud Infrastructure supports nested virtualization. When you create a VM instance in OCI, and you run Oracle Linux 7 with our kernel, you can create KVM or (soon you see how...) VirtualBox VMs inside. If you create a BM instance, you can install VirtualBox or use kvm as you normally would on a local server. Since, well, it's a bare metal server - full access to the hardware and...

Tuesday, April 3, 2018 | Read More

Raspberry Pi 3 B Oracle Linux 7.4 ARM64 with UEK5 preview image available for download

A few weeks ago we released an Oracle Linux 7 Update 4 for ARM64 preview update on OTN. This updated ISO installs on Ampere X-Gene 3 (emag) and Cavium ThunderX / ThunderX2 -based systems (and it's also known to work on Qualcomm Centriq 2400-based servers). Today we added the RPI3 (Raspberry Pi 3 Model B) disk image as well. The previous RPI3 image was still using Oracle Linux 7.3 as a base along with a 4.9 Linux kernel. The newly released image makes it current. It is the...

Tuesday, April 3, 2018 | Read More

Oracle Linux 7 for ARM64 preview images on Docker Hub

A few days ago, we released the docker packages for OL7/ARM64. If you have an ARM64 server running OL7, you can just install docker as you would normally do on x64. # yum install docker Of course in order to use this you need some images on docker hub to get started with. While there are some Linux builds on Docker Hub already, we wanted to make sure you could get OL just like you can for x64. Both architectures will be built at same time going forward. so you can do # docker...

Wednesday, March 21, 2018 | Read More

yum-builddep and rpmbuild

I sometimes try to build an RPM from source (to patch something or try a patch). Since I do these things every now and then, I tend to forget stuff easily and it takes me a while to get back into it. Anyway - I was trying to build lxc (example) earlier today and I wanted to patch the lxc-oracle template. So I log into my OL7 box and use yumdownloader to download the lxc source. # yumdownloader --source lxc Install the src rpm # rpm -ivh lxc-1.1.5-2.0.9.el7.src.rpm so I now have...

Sunday, March 18, 2018 | Read More

Updated Oracle Linux 7 update 4 ARM64/aarch64 with uek5 4.14.26-2

We refreshed the installation media for OL7/ARM64 with the latest uek5 preview build based on upstream stable 4.14.26 and added perf and tuned. You can download it from the OTN  OL ARM webpage. Ignore the 4.14-14 in the text, that will get updated. We're also working on updating the Raspberry Pi 3 image to match the same version. Hopefully using grub2 there as well to make it easier to have a single image repo. The arm64 yum repo on http://yum.oracle.com has also...

Saturday, March 17, 2018 | Read More

Oracle Linux UEK4 (4.1.12-112.16.4) errata kernel update compiled with retpoline support

Yesterday afternoon, we released a UEK4 update for both Oracle Linux 6 and Oracle Linux 7. You can find the announcement mail here. This update includes a number of generic fixes but most importantly it adds support for retpoline. In order to build this kernel, we also had to release updated versions of gcc which we did a little while ago. You can find more information in general about retpoline on various sites, Here's an article of a discussion on the kernel maillist. Note,...

Thursday, March 15, 2018 | Read More

Oracle Linux 7 UEK5 preview 4.14.26

We just updated the UEK5 kernel preview to 4.14.26-1. The latest version is based on upstream stable 4.14.26 and can be found in our UEK5 preview channel. The preview channel also has a number of other packages in it: an updated dtrace, updated daxctl and ndctl tools for persistent-memory. Another thing I wanted to point out. We have had the source tree for UEK on oss.oracle.com for a long time in a git repo. We've always made sure that the changes are public, full git history...

Wednesday, March 14, 2018 | Read More

Oracle Linux in Oracle Cloud Infrastructure and on-premises.

Oracle Cloud Infrastructure is a really great platform to run many types of operating systems on many compute instance shapes available with larger amounts of NVMe storage, lots of threads or cores and super fast networking. OCI lets you run pretty much any operating system (Windows, Ubuntu, CentOS, any Linux pretty much runs..and of course Oracle Linux). With the Emulation Mode VMs, you can go way back with old version and someone even showed OS2 running! One really nice...

Sunday, March 11, 2018 | Read More

Oracle Container Services for use with Kubernetes(1.9.1) 1.1.9

We just released Oracle Container Services for use with Kubernetes 1.1.9. This is based on Kubernetes 1.9.1. There are also docker images to get going easily. You can download them from the Oracle Container Registry using standard docker commands. Please remember that we have OCR mirrors that provide fast performance (ocr-phx.oracle.com ocr-ash.oracle.com ocr-fra.oracle.com - I suggest using one of those alternative mirrors... at some point we will do traffic routing but right...

Tuesday, March 6, 2018 | Read More

Oracle Linux 7 UEK5 - preview updated from 4.14.20 to 4.14.23 for both x64 and arm64

latest update of uek5 preview is on https://yum.oracle.com Oracle Linux 7 Server - Developer preview Unbreakable Enterprise Kernel Release 5 kernel-uek-4.14.23-1.el7uek - The Linux kernel (Update) # rpm -q --changelog kernel-uek-4.14.23-1.el7uek | more Remember - go check http://yum.oracle.com/whatsnew.html on a regular basis, good source to see what's been updated or added.   x86_64: kernel-uek-4.14.23-1.el7uek.x86_64.rpm kernel-uek-debug-4.14.23-1.el7uek.x86_64.rpmkernel-uek-deb...

Saturday, March 3, 2018 | Read More

Oracle Linux 7 update 5 preview available for download

Oracle Linux 7 update 5 is in the works... and in order to give users a free sneak preview of what's coming we put a preview release out on OTN. We typically haven't done this in the past and just always released new update versions as they become generally available but some users like to try things out early on. [disclaimer] This is a  preview - do not use production - [/disclaimer] ... If you run into issues, do let us know, so we can make sure they are addressed before the...

Saturday, March 3, 2018 | Read More

MySQL 8.0.5 community edition preview for Oracle Linux 7 for ARM64 (preview)

We just published a build of MySQL 8.0.5 community server on yum.oracle.com, In the ARM64 "latest" repo. We released an Oracle Linux 7.4 based preview for ARM64 servers a little while ago. See the announcement here. A publicly available free download. No auth or access keys. Once you have OL7.4 preview installed, you can get MySQL 8 going using the usual yum commands. # yum install mysql-community-server

Friday, March 2, 2018 | Read More

Oracle Linux 7 UEK5 - preview updated from 4.14.11 to 4.14.20

Just as FYI - latest update of uek5 preview is on https://yum.oracle.com Oracle Linux 7 Server - Developer preview Unbreakable Enterprise Kernel Release 5 kernel-uek-4.14.20-1.el7uek - The Linux kernel (Update) This update has a bunch of fixes from us (typically see that with changelog entries containing "orabug" and it pulls in gregkh's stable 4.14.20 tree on top of 4.14.11. # rpm -q --changelog kernel-uek-4.14.20-1.el7uek | more Remember - go check http://yum.oracle.com/whatsnew....

Wednesday, February 28, 2018 | Read More

Oracle Linux 7 UEK5 (Linux kernel 4.14) sneak preview

We just published an initial preview version of our next kernel-uek. This is based on upstream Linux 4.14 (latest stable -14). UEK4 is/was based on a 4.1 upstream Linux kernel. If you want to try it out, you can just add the yum repo below on your  Oracle Linux 7-based system. If you don't have a quick OL7 environment, remember you can sign up for a free account on Oracle Cloud and quickly create an Oracle Linux 7 instance and do exactly the same. There will be very regular...

Saturday, February 24, 2018 | Read More

oci-utils (oracle cloud infrastructure) for Oracle Linux package

We recently added another little utilities RPM for Oracle Linux 7 to our collection: oci-utils is an Oracle Linux RPM that contains a set of scripts to make managing an OCI instance easier, from within the instance.The current version provides tools that help with managing block volumes (attach, remove, automatic discovery), secondary vnic configuration, a script to query the public IP of an instances and a script that lets you query instance metadata key/value pairs without...

Friday, February 23, 2018 | Read More

Oracle Container Runtime for Docker 17.12

Busy news day! We just updated our docker-engine rpm to version 17.12. As always you can find it in the Oracle Linux 7 preview channel on our yum server. docker-engine-17.12.0.ol-1.0.1.el7.x86_64.rpm We are currently cooking/baking "Oracle Container Services for Use with Kubernetes 1.9.1" stay tuned for that one as well. oh and look for the docker-engine RPM on ARM soon too.

Thursday, February 22, 2018 | Read More

Oracle linux 7 for ARM64 updated to OL7.4

We just updated the Oracle Linux 7 for ARM64 content. Oracle Linux 7 for ARM64 (64-bit only) is freely downloadable from OTN: here. The release is now at the same level as x64 (Oracle Linux 7 update 4) The ARM64 yum repositories are also updated with the latest content. Keep in mind that we have a devtool set release for ARM as well. Two important features on the latest ARM ISO: - first preview of UEK5. (Linux kernel 4.14.14+) as the default kernel - gcc 7.2 and gcc 7.3 are...

Thursday, February 22, 2018 | Read More

Software Collections 3.0 for Oracle Linux 6 and Oracle Linux 7, Oracle Linux EPEL, Oracle Cloud Infrastructure tools

We just recently released a new Software Collections update on our yum server. SCL 3.0 in the Software Collections yum repo: On Oracle Linux 7 this adds maven 3.5, nginx 1.12, nodejs8, php7.1 and python 3.6 and the usual updates to other developer packages. Updates in the Oracle Linux 7 Developer repo: We released the latest updates of the Oracle Cloud Infrastructure python SDK (1.3.14) and CLI (2.4.16) (using the python SDK). This makes it very, very easy to install the...

Thursday, February 22, 2018 | Read More

Using Let's Encrypt with Oracle Linux in Oracle Cloud Infrastructure

I stole Sergio's headline here and I am just going to link to his blog :)... Sergio wrote up a how-to on using a let's encrypt cert and installing it on OL using nginx in an Oracle Cloud instance created and deployed with Terraform. That 's a lot of words right there but it should demonstrate a few things: All the extra packages we have been publishing of late in the Oracle Linux EPEL (Extra Packages for Enterprise Linux) mirror. (yes they're the same packages but they're built...

Tuesday, February 13, 2018 | Read More

Oracle Linux kernel blogs

Don't forget to check the Linux kernel team's blog. We're having a regular cadence now to write up things that are hopefully interesting. Projects the developers are working on or have worked on etc...  

Monday, February 12, 2018 | Read More

public-yum.oracle.com / yum.oracle.com now support https

Might have taken us a while but you can now use https in your .repo files to connect to our yum repositories. We will transition the repo files we ship over time but we don't want to break people that have customizations. So in the meantime, if you have repo files in /etc/yum.repos.d that point to http://yum.oracle.com or http://public-yum.oracle.com you can just do a search/replace. Something like: sed 's/http:\/\/public-yum.oracle.com/https:\/\/public-yum.oracle.com/g;...

Sunday, February 11, 2018 | Read More

Using a BareMetal GPU shape in Oracle Cloud Infrastructure with Oracle Linux 7 and TensorFlow

A lot of developers are using TensorFlow for Machine Learning these days. In Oracle Cloud Infrastructure we provide some great GPU options. One of them is the BM.GPU2.2 shape which is an X7-based GPU system (contains 2 P100 Nvidia GPUs). When you create an OCI instance using this shape with Oracle Linux 7, it comes pre-installed with the kernel modules to enable the GPUs. Ready to use. Getting TensorFlow installed is very easy: Install some prerequisite RPMs, some come from the...

Wednesday, February 7, 2018 | Read More

Oracle Solaris 11.4 Beta publicly available on Oracle Technology Network (OTN)

Oracle Solaris 11.4 Beta is downloadable from OTN as of right now.  This is a very exciting milestone. Go and download it and play with it!   For more information see: https://blogs.oracle.com/solaris/oracle-solaris-114-open-beta-released http://www.oracle.com/technetwork/server-storage/solaris11/114beta/solaris114beta-4257760.html https://docs.oracle.com/cd/E37838_01/

Tuesday, January 30, 2018 | Read More

RPMs for VirtualBox guest addition drivers for Oracle Linux now available

This has been a long time coming... but finally... for those that don't regularly check our 'What's new' page on yum.oracle.com... We started building the kernel modules and guest additions for VirtualBox guests for Oracle Linux 6 and 7 (UEK4):   Packages Released on Fri Dec 22 2017  VirtualBox-5.2-5.2.4_119785_el7-1 - Oracle VM VirtualBox (Update)  vboxguest-tools-5.2.4-1.el7 - VirtualBox guest utilities (New)  kmod-vboxguest-uek4-5.2.4-1.el7 - vboxguest kernel modules (New)  Virtua...

Sunday, December 24, 2017 | Read More

Oracle Linux yum repository mirrors inside Oracle Cloud Infrastructure

I mentioned in a previous post that this was coming... well it's here now! :) We have local mirrors of yum.oracle.com inside the OCI regions: http://yum-fra.oracle.com http://yum-ash.oracle.com http://yum-phx.oracle.com Unlike our Oracle Container Registry mirrors, these yum repos are only available from inside the OCI regions. So if you have instances in a given region, you can point your yum.repo to your local server and you get (1) very fast yum installs and (2) no counting...

Friday, December 22, 2017 | Read More

"Oracle Container Runtime for Docker" (17.09) and "Oracle Container Services for use with Kubernetes" (1.8.4)

Basically - added 17.09.1 and 1.8.4-2.0.1 to http://yum.oracle.com/repo/OracleLinux/OL7/preview/x86_64/index.html Enjoy.

Thursday, December 21, 2017 | Read More

node.js 4, node.js 6, nodejs 8, node-oracledb12, php7.0 php 7.1 - php-oci

Just in time for the holidays. A bunch of new RPMs released in a bunch of new channels on http://yum.oracle.com. - node.js 4, node.js 6 and node.js 8 for both OL6 and OL7 along with the node-oracledb-12c add-on that lets you connect to oracle Databases out of the box. - php 7.0 and php 7.1 more stuff in EPEL   have fun...  

Thursday, December 21, 2017 | Read More

New packages added to Oracle Linux (OCI SDK/CLI, more EPEL packages, GlusterFS server, Terraform,...

For the folks that don't check our awesomely cool what's new page :-) on yum.oracle.com : whats new here's a bit of a summary of some of the cool packages we just added in the last week or 2: - latest version of terraform (0.11.1-1) and soon a new terraform-provider-oci - VirtualBox-5.2-5.2.2 updates in the developer repo so you can just yum install it instead of downloading it manually - a TON, and I mean a TON more packages in our EPEL clone (again, no forking or modifying we...

Friday, December 15, 2017 | Read More

Installing Visual Studio Code on Oracle Linux 7

Visual Studio Code is a popular editor. There is an RPM available for "el7" from the Microsoft yumrepo. This RPM can be manually downloaded on Oracle Linux 7 and installed with # yum localinstall code...  or # rpm -ivh code... but it's easier to just create a yum repo file so that you can just do # yum install code and # yum update code. Here's an example. On Oracle Linux 7 (not 6), as user root: # cd /etc/yum.repos.d create a file, let's say vscode.repo with the following...

Thursday, November 30, 2017 | Wim Coekaerts | Read More

ARM, YUM, Cloud, containers,...

It's been a while since my last post so a lot of stuff has been going on! This one will be a random collection of things that I want to point out. I will have to use a lot of tags to keep search engines happy here :-) Where to start... Preview release : Oracle Linux 7 for ARM64 (aarch64) Given the growing interest in ARM64.  We created a publicly available, free download, no registration keys, no access codes, no authentication codes,version of OL7 for ARM64. You can go...

Thursday, November 30, 2017 | Read More

Oracle Container Registry mirrors in Oracle Cloud Infrastructure

Just in time for Oracle OpenWorld 2017! For quite some time now, we have had a Container Registryavailable for users with an Oracle Single-Signon account. This registry contains a large number of Docker images to make it really easy to get started with Oracle Products such as the Oracle Database, MySQL, Oracle Linux, Java, Weblogic etc...No need to create or register a new account. Many of you already have an Oracle SSO account for use with OTN, My Oracle Support or...

Sunday, October 1, 2017 | Read More

Quickly create a high performance NFS server in Oracle Cloud Infrastructure using Oracle Linux

To make it easy for customers that rely heavily on an NFS server for their on-premises applications, we created an Oracle Linux Storage Appliance image for Oracle Cloud Infrastructure. There are times where you want to be able to provide a really fast shared filesystem to multiple instances. eg. a shared 'Oracle Home'  or in the applications world a shared APPLTOP. It is really easy to set up a Linux NFS server but we decided to go beyond DIY and we created one for you. The...

Wednesday, September 13, 2017 | Read More

Running Oracle Linux 5 applications in Oracle Cloud Infrastructure using lxc.

Oracle Cloud Infrastructure bare-metal servers and virtual machines require an EFI capable OS and as such we offer Oracle Linux 6 and Oracle Linux 7 images for customers to deploy their instances. Most applications are certified and support with these OS versions however in some rare cases a customer has an older application that requires something like Oracle Linux 4 or 5. While we currently cannot run these versions as native instances, it is possible to run Linux...

Thursday, September 7, 2017 | Read More

More packages for Oracle Linux to make life easier.

A lot of development work we do for Oracle Linux is focused around Oracle Cloud. Work with the infrastructure team to provide the best OS for them, work on new features that can help in various areas (NVMe, kvm, GPU, security, containers...) and so on. But we also put a lot of effort into making Oracle Linux run extremely well for customers on Oracle Cloud. Pre-built images which we try to make as efficient as possible and configured out of the box to just work seamlessly....

Wednesday, September 6, 2017 | Read More

Oracle Linux support in Oracle Cloud

This is a topic that comes up every now and again with customers or users of Oracle Cloud: Is Oracle Linux support included with our IaaS services and if so, which parts of Oracle Linux support are included? The answer is very straightforward. Any customer in Oracle Cloud that creates new, creates their own or  uses existing "Oracle Linux" images, in both Oracle Public Cloud and Oracle Bare Metal Cloud Services, have full Oracle Linux Premier Support included at no additional...

Sunday, July 30, 2017 | Read More

Oracle Ksplice for Oracle Linux in Bare Metal Cloud Services

A few weeks ago I wrote a blog post that talked about setting up Oracle Ksplice in Oracle Cloud (specifically Bare Metal Cloud Services). At the time, the instructions included editing the uptrack.conf file and adding a specific auth key. We have since automated that part as well. For existing instances or newly created instances (any VM.* and BM.* shapes with Oracle Linux) you can just simply download a new installation script that takes care of it all for you. As...

Sunday, July 30, 2017 | Read More

CVE-2017-1000364

As I am sure many of you have heard/read about CVE-2017-1000364. If not, you can find some information here: https://blog.qualys.com/tag/cve-2017-1000364 https://nvd.nist.gov/vuln/detail/CVE-2017-1000364 http://www.securityfocus.com/bid/99130 An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and...

Thursday, June 29, 2017 | Read More

Oracle Ksplice on Oracle Linux in Bare Metal Cloud

One of the great advantages of using Oracle Cloud is the fact that it includes full Oracle Linux support. All the services that you get with Oracle Linux Premier support are included without additional cost when you use Oracle Cloud. Oracle Ksplice is such a service. (see: http://www.ksplice.com/ ). In order to use Oracle Ksplice outside of Oracle Cloud you configure it at install time when registering your Oracle Linux server with ULN (http://linux.oracle.com ) and you then...

Wednesday, June 21, 2017 | Read More

Introducing UEK4 and DTrace on Oracle Linux for SPARC

About 2 months ago we released the first version of Oracle Linux 6, Update 7 for SPARC. That was the same version of Oracle Linux used in Exadata SL6. OL6 installed on T4, T5 and T7 systems but it did not yet support the S7 processors/systems. It contained support for the various M7 processor features (DAX, ADI, crypto,...), gcc optimizations to support better code generation for SPARC, important optimizations in functions like memcpy() etc. We also introduced support for...

Friday, May 26, 2017 | Wim Coekaerts | Read More

Oracle Linux 6 for SPARC

Oracle Linux 6 for SPARC is now available for download from OTN and the released notes can be found here. This version of Oracle Linux 6 uses UEK2 (there is no RHCK here of course as there is no corresponding release on SPARC) and this OS release can be installed on T4, T5 and T7 (M7,M5) but not yet on the S7 platform. OL6 for SPARC contains all the packages (binary and -devel) for DAX, ADI (SSM), an updated version of openssl with support of on-chip crypto features. We also...

Friday, March 31, 2017 | Read More

Oracle Linux 6 update 9

We just released Oracle Linux 6 update 9. The channels are on ULN and on our yum repo. The ISOs are available for download through MOS and in the next few days also on the software delivery cloud page, as customary. The release notes with changes are published and so on. One thing we discovered during testing of OL6.9 was that a recent change in "upstream" glibc can cause memory corruption resulting in a database start-up failure every now and then. Since we caught this prior...

Tuesday, March 28, 2017 | Read More

Oracle Linux and Software Collections make it a great 'current' developer platform

Oracle Linux major releases happen every few years. Oracle Linux 7 is the current version and this was released back in 2014, Oracle Linux 6 is from 2011, etc... When a major release goes out the door, it sort of freezes the various packages at a point in time as well. It locks down which major version of glibc, etc. Now, that doesn't mean that there won't be anything new added over time, of course security fixes and critical bugfixes get backported from new versions into...

Tuesday, March 14, 2017 | Read More

ksplice

As many of you probably know by now, a few days ago there was a report of an old long-standing Linux bug that got fixed. Going back to kernels even down to 2.6.18 and possible earlier. This bug was recently fixed, see here. Now, distribution vendors, including us, have released kernel updates that customers/users can download and install but as always a regular kernel upgrade requires a reboot. We have had ksplice as a service for Oracle Linux support customers for quite a...

Friday, February 24, 2017 | Read More

Yes

More Linux work :)

Friday, November 4, 2016 | Read More

glibc CVE re: getaddrinfo() and userspace ksplice

I have my own server with Oracle Linux 6 (of course) where I host a ton of personal stuff and this server was also affected by the nasty DNS bug from last week (see : CVE-2015-7547). Everyone really should update glibc and make sure their system is patched (any distribution) by the way - this is a very serious vulnerability... The nice thing, however, was that this is a perfect example for user space ksplice patching. A quick ksplice update for glibc on this box, and it was...

Saturday, February 20, 2016 | Read More

Secure Boot support with Oracle Linux 7.1

Update : as my PM team pointed out to me - it's listed as Tech Preview for OL7.1 not GA/production in the release notes - just making sure I add this disclaimer ;) Another feature introduced with Oracle Linux 7.1 is support for Secure Boot. If Secure Boot is enabled on a system (typically desktop, but in some cases also servers) - the system can have an embedded certificate (in firmware). This certificate can be one that's uploaded to the system by the admin or it could be one...

Friday, March 13, 2015 | Read More

Oracle Linux 7.1 and MySQL 5.6

Yesterday we released Oracle Linux 7 update 1. The individual RPM updates are available from both public-yum (our free, open, public yum repo site) and Oracle Linux Network. The install ISOs can be downloaded from My Oracle Support right away and the public downloadable ISOs will be made available in the next few days from the usual e-delivery site. The ISOs will also, as usual, be mirrored to other mirror sites that also make Oracle Linux freely available. One update in...

Friday, March 13, 2015 | Read More

Oracle Linux and Database Smart Flash Cache

One, sometimes overlooked, cool feature of the Oracle Database running on Oracle Linux is called Database Smart Flash Cache. You can find an overview of the feature in the Oracle Database Administrator's Guide. Basically, if you have flash devices attached to your server, you can use this flash memory to increase the size of the buffer cache. So instead of aging blocks out of the buffer cache and having to go back to reading them from disk, they move to the much, much faster...

Tuesday, February 24, 2015 | Read More

New features in ksplice uptrack-upgrade tools for Oracle Linux

We have many, many happy Oracle Linux customers that use and rely on the Oracle Ksplice service to keep their kernels up to date with all the critical CVEs/bugfixes that we release as zero downtime patches. There are 2 ways to use the Ksplice service : Online edition/client The uptrack tools (the Ksplice utilities you install on an Oracle Linux server to start applying ksplice updates) connect directly with the Oracle server to download updates. This model gives the most...

Monday, December 22, 2014 | Read More

EBS VMs explained

A great blog entry from the EBS team explaining the various Oracle VM appliances for EBS : https://blogs.oracle.com/stevenChan/entry/e_business_suite_virtual_machines

Thursday, December 4, 2014 | Read More

SAP certification for Oracle's Virtual Compute Appliance X4-2 (VCA X4-2)

We have been working with SAP to certify their products, based on SAP NetWeaver 7.x (specifically on the following OS versions : Oracle Linux 5, Oracle Linux 6, Oracle Solaris 10, Oracle Solaris 11), in a Virtual Compute Appliance Environment. It is also possible to run 2-tier and 3-tier configurations/installations of Oracle Database and SAP applications on VCA. For more detail you can go to SAP Note 2052912. The Virtual Compute Appliance is a great, cost effective, easy to...

Wednesday, December 3, 2014 | Read More

Oracle Linux Containers and docker and the magic of ksplice becomes even more exciting

So, in my previous blogs I talked about the value of ksplice for applying updates and keeping your system current. Typical use case has been on physical servers running some application or in a VM running some application and it all keeps every system pretty isolated. Downtime on a single server is often, by a system admin, seen as no big deal, downtime of a bunch of servers because of a multi-tier application that goes down, however, by the application owner is a pretty big...

Wednesday, October 15, 2014 | Read More

The magic of ksplice continues...

My previous blog talked about some cool use cases of ksplice and I used Oracle Linux 5 as the example. In this blog entry I just wanted to add Oracle Linux 6 to it. For Oracle Linux 6, we go all the way back to the GA date of OL6. 2.6.32-71.el6 build date Wed Dec 15 12:36:54 EST 2010. And we support ksplice online updates from that point on, up to today. The same model, you can be on any Oracle Linux 6 kernel, an errata update, a specific kernel from an update release like...

Wednesday, October 15, 2014 | Read More

The magic of ksplice

I love talking about Oracle Ksplice and how cool a technology and feature it is. Whenever I explain to customers how much they can do with it, they often just can't believe the capabilities until I show them, in a matter of literally 5 seconds that it actually really -just works-. During Oracle OpenWorld, we talked about it a lot, of course, and I wanted to show you how far back these ksplice updates can go. How much flexibility it gives a system administrator in terms...

Wednesday, October 15, 2014 | Read More

MySQL 5.6.20-4 and Oracle Linux DTrace

The MySQL team just released MySQL 5.6.20. One of the cool new things for Oracle Linux users is the addition of MySQL DTrace probes. When you use Oracle Linux 6, or 7 with UEKr3 (3.8.x) and the latest DTrace utils/tools, then you can make use of this. MySQL 5.6 is available for install through ULN or from public-yum. You can just install it using yum. # yum install mysql-community-server Then install dtrace utils from ULN. # yum install dtrace-utils As root, enable DTrace...

Thursday, July 31, 2014 | Read More

Openstack with Oracle Linux and Oracle VM

The OpenStack Summit has been an exciting event. We announced the Oracle OpenStack Distribution with support for Oracle Linux and Oracle VM, and support included with Oracle Linux and Oracle VM Premier Support at no additional cost. The announcement was well received by our customers and partners. We’re pleased to continue the Oracle tradition of translating our enterprise experience into community contributions as we’ve done with Linux and Xen. Oracle is committed to...

Friday, May 16, 2014 | Read More

A good use-case for Oracle Ksplice

One of the advantages of Oracle Ksplice is that you can stick to a given version of a kernel for a very long time. We provide you with the security updates through our Ksplice technology for all the various kernels released so that there's no need for a reboot and also no need to install a newer kernel version that typically also contains new drivers or even new features. Zero downtime yet you are current. Ksplice updates are always based on critical bugfixes or security...

Thursday, May 15, 2014 | Read More

Unbreakable Linux Network APIs example

I posted a short blog entry about the recently released ULN APIs the other day with a sample of how to call the different APIs. Here is a concrete example to use the API to find a package in a channel and download it. $ ./ulnget.py kernel-headers.2.6.32-71.29 ol6_x86_64_latestSearching for 'kernel-headers.2.6.32-71.29' in channel 'ol6_x86_64_latest'Logging in...Logged in...Retrieving all packages...Found kernel-headers.2.6.32-71.29.1.el6Getting package details...Downloading...

Thursday, May 15, 2014 | Read More

Unbreakable Linux Network APIs available

Aside from the uln_channel tool that we recently released, we are now also supporting a number of webservices on ULN. A handful of useful APIs are available. Below is a little simple python example that works out of the box on Oracle Linux 6 (when you have an account on ULN) and a description of the currently available APIs. Note that the python code is very simplistic... I know no exception handling, wasn't the point ;)... Additionally, the ULN integration with Spacewalk...

Tuesday, May 13, 2014 | Read More

Channel subscription from command-line support added to the Unbreakable Linux Network(ULN)

Until recently, to add channels to a server or to register a server as a yum-repository server, one had to log into ULN and manually do this. First a server had to be tagged as a yum server and then any channels that would be included, would have to be added to this server. While this is an easy task, it does involve logging into the website, and manually following a few steps and it could not be automated. We provided an updated rhn-setup RPM that now adds a new tool called u...

Tuesday, May 13, 2014 | Read More

OpenStack for Oracle Linux and Oracle VM

We just made an announcement today about support for OpenStack with Oracle Linux and Oracle VM. The press release can be found here.

Tuesday, May 13, 2014 | Read More

Oracle E-Business Suite R12 Pre-Install RPM available for Oracle Linux 5 and 6

One of the things we have been focusing on with Oracle Linux for quite some time now, is making it easy to install and deploy Oracle products on top of it without having to worry about which RPMs to install and what the basic OS configuration needs to be. A minimal Oracle Linux install contains a really small set of RPMs but typically not enough for a product to install on and a full/complete install contains way more packages than you need. While a full install is...

Thursday, April 17, 2014 | Read More

Easy access to Java SE 7 on Oracle Linux

In order to make it very easy to install Java SE 7 on Oracle Linux, we added a Java channel on ULN (http://linux.oracle.com). Here is a brief description of how to enable the channel and install Java on your system. Enable the Java SE 7 ULN channel for Oracle Linux 6 - Start with a server or desktop installed with Oracle Linux 6 and registered with ULN (http://linux.oracle.com) for updates This is typically using uln_register on your system. - Log into ULN, go to the Systems tab...

Tuesday, April 8, 2014 | Read More

OpenSCAP distributed with Oracle VM Server for x86

Security Compliance : true We recently released Oracle VM Server for x86 3.2.7. For more information you can go here. In addition we also recently released Oracle Linux 6.5. Find the press release here and the link to the release notes here. You will notice that for Oracle Linux we have updated the version of OpenSCAP to use the NIST SCAP 1.2 specification. We have also decided to distribute OpenSCAP with Oracle VM Server for x86 so you will be able to use the same utility...

Sunday, January 19, 2014 | Read More

Oracle Linux containers continued

More on Linux containers... the use of btrfs in particular and being able to easily create clones/snapshots of container images. To get started : have an Oracle Linux 6.5 installation with UEKr3 and lxc installed and configured. lxc by default uses /container as the directory to store container images and metadata. /container/[containername]/rootfs and /container/[containername]/config. You can specify an alternative pathname using -P. To make it easy I added an extra disk to...

Friday, December 6, 2013 | Read More

Oracle Linux containers

So I played a bit with docker yesterday (really cool) and as I mentioned, it uses lxc (linux containers) underneath the covers. To create an image based on OL6, I used febootstrap, which works fine but Dwight Engen pointed out that I should just use lxc-create since it does all the work for you. Dwight's one of the major contributors to lxc. One of the things he did a while back, was adding support in lxc-create to understand how to create Oracle Linux images. All you have to...

Wednesday, December 4, 2013 | Read More

Oracle Linux 6.5 and Docker

I have been following the Docker project with great interest for a little while now but never got to actually try it out at all. I found a little bit of time tonight to at least try hello world. Since docker relies on cgroups and lxc, it should be easy with uek3. We provide official support for lxc, we are in fact a big contributor to the lxc project (shout out to Dwight Engen) and the docker website says that you need to be on 3.8 for it to just work. So, OL6.5 + UEK3 seems...

Wednesday, December 4, 2013 | Read More

Oracle Linux 6.5

Oracle Linux 6.5 has been uploaded to ULN and public-yum. OL6.5 includes UEKr3 based on Linux 3.8 alongside the base 2.6.32-based kernel. The ISOs are available for download from My Oracle Support and will be available shortly(early December) from edelivery. The ISOs are also being mirrored to public external mirror sites, one of them is my own mirror site. Release notes are here.

Wednesday, November 27, 2013 | Read More

Spacewalk 2.0 provided to manage Oracle Linux systems

Oracle Linux customers have a few options to manage and provision their servers. We provide a license to use Oracle Enterprise Manager's Linux OS management, monitoring and provisioning features without additional cost for every server that has an Oracle Linux support subscription. So there is no additional pack to license and no additional per server cost, it's all included in our Basic, Premier and Systems support subscriptions. The nice thing with Oracle Enterprise Manager...

Monday, November 11, 2013 | Read More

Oracle Secure Global Desktop (SGD) 5.1

Last week, we released the latest update of Oracle Secure Global Desktop. Release 5.1 introduces a number of bug fixes and smaller changes but the most interesting one is definitely increased support for html5-based client access. In SGD 5.0 we added support for Apple iPads using Safari to connect to SGD and display your session right inside the browser. The traditional model for SGD is that you connect using a webbrowser to the webtop and applications that are displayed...

Tuesday, November 5, 2013 | Read More

Oracle Linux and Oracle VM pricing guide

A few days ago someone showed me a pricing guide from a Linux vendor and I was a bit surprised at the complexity of it. Especially when you look at larger servers (4 or 8 sockets) and when adding virtual machine use into the mix. I think we have a very compelling and simple pricing model for both Oracle Linux and Oracle VM. Let me see if I can explain it in 1 page, not 10 pages. This pricing information is publicly available on the Oracle store, I am using the current public...

Thursday, October 31, 2013 | Read More

Oracle Linux 5.10 channels are now published

We just released Oracle Linux 5.10 channels on both http://public-yum.oracle.com and on the Unbreakable Linux Network. ISO's are going to be updated on edelivery in a few days. The channels are available immediately. As many of you know, we are now using a CDN to distribute the RPMS for public-yum globally so you should have good bandwidth everywhere to freely access the RPMs.

Monday, October 7, 2013 | Read More

Oracle Linux 6 on Microsoft Azure

One of the great keynotes at Oracle OpenWorld last week, was from Microsoft. You can watch the replay here. I think Brad did an awesome job, very engaging and a very positive partner message. There was a lot of Oracle Linux talk in the Microsoft session, just awesome. We have worked closely with Microsoft to ensure that we can deploy Oracle Linux inside their Azure platform (and also just in general on Hyper-v). Part of the work is to provide templates that include Oracle...

Wednesday, October 2, 2013 | Read More

Oracle Linux 6 UEK3 beta

Last week we published UEK3 beta on http://public-yum.oracle.com. It is very easy to get started with this and play around with the new features. Just takes a few steps : Install Oracle Linux 6 (preferrably the latest update) on a system or in a VM Add the beta repository file in /etc/yum.repos.d Enable the beta channel Reboot into the new kernel Add updated packages like lxc tools and dtrace Oracle Linux is freely downloadable from http://edelivery.oracle.com/linux. Oracle Linux...

Monday, September 2, 2013 | Read More

Single Instance/RAC Oracle VM templates update

Superstar Saar just released a new set of Oracle VM templates. We (Oracle) just released 2 patch sets for the Oracle RDBMS - 11.2.0.4.0 and 11.2.0.2.11 (x86 and x86_64) Simultaneously, Saar updated his Oracle VM templates to include these latest patchsets as well for both architectures (x86 and x86_64). 11.2.0.4.0 with OL5 11.2.0.4.0 with OL6 11.2.0.2.11 with OL5 11.2.0.2.11 with OL6 These templates can be deployed on Oracle VM using the DeployCluster tool, all you need to do is...

Wednesday, August 28, 2013 | Read More

A little sample snmp module for Oracle VM Server 3.2

I was looking at snmp for a few days and decided to put together a little snmp module (extension) that would work on Oracle VM Server (3.2 and up). In 3.2 we started to include the net-snmp rpms to allow customers to monitor any given Oracle VM server with standard SNMP tools. Whether that be cacti, snmpwalk, even Oracle Enterprise Manager (snmp fetchlets) or whatever tool. The standard net-snmp installation will expose MIBs and return data pretty much exactly the same as...

Thursday, August 22, 2013 | Read More

The life of a Linux RPM (package)

Another frequently asked question related to Oracle Linux is how versions of specific packages (RPMs) are picked. A Linux distribution is basically a collection of a ton of open source projects that make up the Operating System environment, with at its core the Linux kernel. Linux as a development project is about the Linux kernel specifically. There are then many (1000's) of random open source projects out there and a Linux distribution basically is an OS made up of, at its...

Wednesday, August 14, 2013 | Read More

Of updates and errata.

A frequently discussed topic inside Oracle and also outside with customers and partners is Oracle Linux versions and how to treat updates and support and certifications and minimum levels. Here's our take on it, from the Oracle Linux side. When talking about Oracle Linux and versions, there really are 3 major components : -1- A major new release, such as Oracle Linux 5, Oracle Linux 6,... A major new release is an update of the entire OS, kernel, userspace, all the 1000's of...

Tuesday, August 13, 2013 | Read More

Oracle VM templates for Database 12c 12.1.0.1.0 both single instance and rac

Today we made available a few new Oracle VM templates on edelivery. A set of VM templates for database 12c and another set for database 11g 11.2.0.3.7. You can find more information on the otn pages here. A very important new feature added is the ability to deploy single instance database. In the past the database templates were focused on RAC deployments (Real Application Cluster) but because of popular demand, we also added support for Single Instance. With Single Instance...

Wednesday, August 7, 2013 | Read More

The Ksplice differentiator

It's been exactly two years since we acquired a small startup called Ksplice. Ksplice as a company created the zero downtime update technology for the Linux kernel and they provided a service to their customers which tracked Linux kernel security fixes and providing these fixes as zero downtime Ksplice updates. Essentially the ksplice technology allows us to create Linux kernel patches that can be applied in an online fashion. We are not talking about the ability to install a...

Wednesday, July 24, 2013 | Read More

clarify oracle linux and oracle clusterware

Someone forwarded a document to me earlier today that had Some Company make a statement that implied that Oracle Clusterware was not free with Oracle Linux. I found it sort of amuzing because I think we've been rather clear on this for quite some time. So let me spell it out to make sure it's very, very clear. When a customer purchases Oracle Linux support subscriptions (Basic, Basic Limited, Premier, Premier Limited) or purchases an Oracle x86 server with Support, they have...

Friday, July 19, 2013 | Read More

easily install Oracle RDBMS 12cR1 on Oracle Linux 6

This week we released the latest version of our database, Oracle database 12c Release 1. To make it very easy for people to start using it or trying it out, we already created the oracle-rdbms preinstall rpm and uploaded it to both ULN and public-yum. So in order to start the database install without trouble, these few simple steps will get you going : If you want to create a virtual machine Download Oracle VM VirtualBox from virtualbox.org or Download Oracle VM Server from edeli...

Thursday, July 4, 2013 | Read More

ovm_utils 0.6.5

Finally found some time to play with ovm_utils again and added another little tool to the package. ovm_utils is a collection of little tools I wrote over the last year or 2. They can help make command line use a little easier. Of course we have since introduced a real ovm_cli in Oracle VM Manager in 3.1 which is officially part of the product and officially supported. ovm_utils is provided as-is, for fun. If you find them useful, great, if not, oh well :-) ovm_logger (there's...

Tuesday, June 11, 2013 | Read More

ksplice and how it really helps with 0day stuff

So a nasty bug report came out the other day on linux, a serious exploit. Everyone scrambled to get a kernel built and (tested) and released and then there's of course the effort of bringing down applications, multi-tiered environments being way more complex in terms of orchestration of bringing down multiple systems, installing the updated kernel and rebooting and bringing everything back up in an orderly fashion. Of course for all our customers that use ksplice and enjoy...

Thursday, May 16, 2013 | Read More

Oracle Secure Global Desktop 5.0

We just released version 5.0 of Oracle Secure Global Desktop (for those that don't know what it is, formerly known as Tarantella...). It's a great product that I have been using every for a long time now. I have it installed at home on my servers so that I can get access to my home network from anywhere...without vpn. Anyway, a few nice things that I personally like in the new release : (1) html5 client support. In particular, at this time the ipad. So now, I can use my ipad...

Tuesday, April 30, 2013 | Read More

Importing Oracle VM templates through a proxy

I am working on a little tool that makes it easy to import an Oracle VM template in a more automated fashion, using python's built-in SimpleHTTPServer. While working on this, I realized that in many environments the Oracle VM Servers might be in an isolated network so that they don't have direct access to the intranet. We're talking about the management network here. One simple way around this, is to take one server that's on the same network as the Oracle VM Server's...

Monday, April 22, 2013 | Read More

new Oracle VDI and Oracle Sun Ray Software releases!

A good Monday morning for Desktop Virtualization at Oracle. We just released a few new products : Oracle VDI 3.5 support for Ubuntu 12 and Windows 8 VMs complete single server installation and the ability to just add nodes to scale includes the latest version of Oracle VM VirtualBox 4.2.10 install on top of Solaris 11 and/or Oracle Linux 6 support added hd 720p video playback on the Sun Ray thin clients with Windows Media Player Oracle Sun Ray Software 5.4 install on top of Solaris...

Monday, March 18, 2013 | Read More

oracle vm 3.2.1 released!

Pleased to announce the release of Oracle VM 3.2.1 The press release is here. The documentation library can be found here. The release notes in the documentation show what's new and also a list of bugs fixed. Here's the summary of what's new : The new features and enhancements in Oracle VM Release 3.2.1 include: Performance, Scalability and Security Support for Oracle VM Server for SPARC: Oracle VM Manager can now be used to discover SPARC servers running Oracle VM Server...

Tuesday, January 22, 2013 | Read More

oracle linux playground channel sample

If you have a system with Oracle Linux 6 installed but you are not using public-yum, and you want to play with our mainline kernel builds from the playground channel, then you need to create a simple, small yum repo file and you are all set. Some reasons could be that your system is configured for a local yum repository for updates, or you are registered directly with ULN. Either way, a very simple example file can be found here. Just put the file in /etc/yum.repos.d. # cat...

Tuesday, January 22, 2013 | Read More
Oracle

Integrated Cloud Applications & Platform Services