SUSE® Update forz Systems and LinuxONEOracle on IBM z Systems SIG
Mike FrieseneggerTechnical Strategist
IBM Global Alliance
2016-04-26
2
Agenda
• Oracle resources at SUSE
• SUSE Linux Enterprise Update
• Beyond SUSE Linux Enterprise Server
3
Oracle Resources at SUSE
• http://www.suse.com/oracle‒ Main landing page
‒ Technical Information and documents
‒ Customer Successes
• https://www.suse.com/partners/alliance-partners/oracle/matrix.html
‒ Support Matrix
• https://www.suse.com/isvcatalog‒ All applications from our ISV partners including Oracle
• SUSE engineer in Redwood Shores‒ Very helpful resource with access to Oracle engineers and PMs
4
Increaseuptime
Improve operational efficiency
Accelerateinnovation
The advanced foundation for your success
A highly reliable, scalable and secure server operating system, built to power physical, virtual and
cloud-based mission-critical workloads.
SUSE Linux Enterprise
5
SUSE Linux Enterprise Server 12
Life Cycle Model
General Support Extended Support
Year 1 Year 2 Year 3 Year 4 Year 5 Year 6 Year 7 Year 8 Year 9 Y 10 Y 11 Y 12 Y 13
GA LTSS
SP1 LTSS
SP2 LTSS
SP3 LTSS
SP4 LTSS
SP5 LTSS
SP6 LTSS
13-year lifecycle‒ 10 years general support
‒ 3 years extended support
‒ Different Lifecycles for Desktop and Modules
Subject to change.
Long Term Service Pack Support (LTSS)‒ Available for all versions, including GA
‒ Up to 3 years extended support
6
2013 2014 2015 2016 2017 2018
SLE 11
SLE 12
SLE 13
SUSE Linux Enterprise Server 12
Life Cycle, Code Streams, Future Thinking
SP3
GA SP2
SP4
“Yearly” Service Packs
Current Planning: Q4 CY/201x
Heads Up: For SLE 12 SP2 we are planning aKernel version upgrade
Subject to change.
SP1
7
SUSE® Linux Enterprise Server for System z 12 SP1
• z exploitation‒ IBM KVM support
‒ z13, z13s, zEC12, zBC12, z/VM 6.3, (z/VM 6.4 at release), zBX support
‒ z196 EC, z114 BC support
‒ zPDT 1.6 support
‒ http://www.ibm.com/systems/z/os/linux/resources/testedplatforms.html
• Innovations overview‒ z13 exploitation (SIMD, SMT) and related tool chain enhancements
‒ Crypto hardware support and software refresh
‒ Networking and OFED support enhancements
‒ s390-tools and performance monitoring updated
‒ zEDC support (hardware accelerated data compression)
‒ Update to IBM Java 8
8
Support for KVM for IBM z Systems
• Kernel Based Virtual Machine‒ KVM (for Kernel-based Virtual Machine) is a virtualization
solution for Linux on x86, POWER, z/Architecture, ARM hardware.
‒ KVM for IBM z System is an IBM's offering
‒ Linux skilled users experience no entry barrier and can now benefit from z and LinuxONE related hardware, virtualization, resilience and other z unique capabilities
‒ SLES 12 SP1 enhancements include: boot from virtio-block, long name support for Linux guests, documentation, ...
‒ First 2015: SUSE Linux Enterprise Server 12 SP1 and successors will be supported by SUSE to run on KVM for z
‒ http://www.ibm.com/systems/z/solutions/virtualization/kvm/
‒ https://www.suse.com/company/press/2015/suse-easing-linux-on-the-mainframe-with-kvm-for-ibm-z-systems-support.html
9
Go back to well-known state
Peace of mind for• Patch installation• System admin tasks• Extended integration• “Full system rollback”
New in SLE 12 SP1• Service Pack rollback
Improved in SUSE® Linux Enterprise 12 SP1
System Rollback
10
• Service failover at any distance – from local to geo
• Up to 99.9999% availability
• Rolling updates for less planned downtime
• Easy setup, administration, management
• Virtualization agnostic
• Leading open source High Availability
• On par with proprietary products
• Included with SLES for System z
Fighting Murphy's Law
When will you start?
SUSE® Linux Enterprise High Availability Extension
11
Improved in SUSE Linux Enterprise 12 SP1
Modules
Components of SUSE Linux Enterprise
• Flexible life cycle (different from the base product)• Delivered on-line• Fully supported• Included in the SUSE Linux Enterprise Server
subscription→ no extra cost
Web and Scripting Toolchain Containers
CertificationsAdvanced Systems
ManagementLegacy
Public Cloud
12
Improved in SUSE Linux Enterprise 12 SP1
Modules
Name Content Life cycle Agility %
Legacy Sendmail, old IMAP, old Java Until 09/2017 0
Certifications FIPS 140-2 Frozen versions 0
Web and Scripting
PHP, Python.Future: Node.js, Ruby on Rails
3 years; overlap:18 month
60
Toolchain GCC Yearly delivery 90
Advanced Systems Management
“Machinery”cfengine, puppet
Continuous Integration
90
Public Cloud Initialization code and tools Continuous Integration
100
Containers Docker, Tools, Images Continuous Integration
100
13
Application Containers
14
Compliance / Certifications
• Common Criteria Certification – ACHIEVED‒ SLES12 x86-64 and s390x
• DISA STIG‒ General Purpose Operating System (GPOS) & Web Server
‒ ETA: Summer 2016
• FIPS 140-2 – ACHIEVED (6/7 Modules)‒ “Frozen” FIPS 140-2 certified package in SLES Certifications
Module
‒ Final module dependent on Common Criteria Certification
• Re-certification efforts‒ IPv6, FIPS 140-2
15
SUSE Package HubWork in Progress
OBS Project to Coordinate and Consolidate Useful
Packages for SLE customers.
• Policies and Checks to Protect Customer's Investment in SUSE Support Services.
• Community Maintained | Community Supported
• Easy Access For Customers
https://en.opensuse.org/Portal:Backports
16
Outlook: What is Live Patching ?Share your interest with SUSE
• A live patching technology
• Based on modern Linux technologies
• Works with zero execution interruption
• Developed by SUSE, specifically for the Linux kernel
• Use Cases
In-memory Database
Mission-critical Infrastructure
Services
Simulation Un-interrupted
Massive, Time-critical Deployment
17
SUSE Linux Enterprise ServerIBM z Systems and IBM LinuxONE Summary
• Improve operational efficiency‒ 16+ years in service for our customers, with our partners‒ 10+ years life cycle with z support expertise, 1400+ certified ISV applications‒ System management tools unique to SUSE, auto-installation, configuration
discovery
• Increase uptime‒ Automated testing, delivering proactive maintenance and security updates‒ Full system rollback to user defined checkpoint with one click‒ Complete High Availability solution included to maintain your Service Level
Agreements
• Accelerate innovation‒ First supporting LinuxONE with KVM, founding member of Open Mainframe
Project‒ Committed to ongoing support for latest z Systems with z/VM‒ First Docker on z – supported since Nov 2015 !‒ SUSE Package Hub – serving community packages for multiple distributions
18
SUSE Linux Enterprise 12 SP2 Common Code Base
Features / Scope
• Stability of userland APIs and ABIs
→ ISV certifications remain
• Hardware enablement‒ Kernel version upgrade
• Filesystems‒ Send-receive support in btrfs
• Keep Modules up to date according to their life cycle
• Certifications‒ Do not touch FIPS 140-2 certified modules (except Kernel)
Not committed. Subject to change.
Beyond SUSE Linux Enterprise Server
20
SUSE OpenStack Cloud 6Expanding Mixed Hypervisor Options
HA Cluster
Control NodeAdmin Server
SUSE Linux
SUSE Linux
KVM/Xen/Docker
OpenStackCompute
CrowbarMessage Queue
Image Store
Other Services
Deploy UI
Cloud UI
OpenStackCompute
OpenStackCompute
OpenStackCompute
21
SUSE ManagerEnhance software-defined data center management
!!
!!
Focus areas● Configuration Management● Subscription Managment● Expanded Monitoring
Compatibility carried forward from 2.1
SUSE Manager Server can be x86-64 and s390x
Extension to SLES12 SP1
Saltstack integration with states
SLE and RHEL client support
22
23
Open Mainframe Projecthttps://www.openmainframeproject.org/
Collaborative project operating within the Linux Foundation
• Focal point for deployment and use of the Linux OS in a mainframe computing environment
• Increase collaboration across the mainframe community
• Develop shared tool sets and resources
• Teaching and educating the mainframe Linux engineers and developers of tomorrow
SUSE is Founding and Platinum Member of OMP
24
openSUSE Factory now builds for the IBM z Systems
• Improve the integration of z Systems technology into the openSUSE distribution
‒ Focus on LinuxONE Emperor and Rockhopper
‒ Find SLE build issues much sooner
‒ Integrate new features sooner
‒ Allow SLE customers to participate in base development
Landing Page: https://en.opensuse.org/ZSystems
Mailing List: https://lists.opensuse.org/opensuse-zsystems
IRC: irc://irc.freenode.net/openSUSE-zSystems
Corporate HeadquartersMaxfeldstrasse 590409 NurembergGermany
+49 911 740 53 0 (Worldwide)www.suse.com
Join us on:www.opensuse.org
25
Appendix
27
SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements
• z13 exploitation‒ SMT base support, SIMD base support
‒ SIMD register file load / store support
‒ LLVM optimizations (add SIMD instructions)
‒ Added (upstream) improvements for gcc 4.8
‒ SLES Toolchain Module update including gcc 5.1 (pending)
‒ Enhanced perf tool to capture performance data from z13 and successors
• Networking‒ OSA-Express5s Support
‒ Auto port scan resiliency – lower zfcp port rescan impact
‒ Display Switch Port Mode (s390-tools, VEPA)
‒ Query OSA Address Table - gather / display OSA and TCP/IP configuration
28
SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements
• Crypto‒ In-kernel crypto: DRBG (Deterministic Random Bit
Generator) support
‒ Crypto Express5S (CEX5S) support
• Misc‒ PCI infrastructure enablement and integration (OFED)
‒ zEDC (hardware accelerated compression / decompression)
29
SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements
• Storage‒ MD mirror solution: disk mirroring with real-time
enhancement for System z (RAID10 ECKD / (later: zFCP))
‒ Support for concurrent Flash MCL updates
30
SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements
• KVM enhancements‒ Creation of initrds to boot from virtio-block devices
‒ Long name support for Linux guests
‒ Documentation enhancement
‒ Query host performance metrics from within VM (vhostmd / vm-dump-metrics)
• Docker‒ Docker container support for System z (Docker module
update Q4 2014)
‒ Runtime and infrastructure to build containers