Red Hat Update for IBM z Systems GSE UK 2016

Transcription

1 Red Hat Update for IBM z Systems GSE UK 2016

2 Session topics Red Hat in a Nutshell Press Release Open Source Development Model Red Hat and IBM Relationship New Red Hat Offering for LinuxONE JBoss on z Systems and LinuxONE Summary of New Features for RHEL 7.1, 7.2 and roadmap for 7.3 RHEL 7.x Installation Overview RHEL 7.x systemd and jornald

3 Red Hat in the Fortune Global Tried. Tested. Trusted.

4 It is always an honor to see Red Hat's name on this list. Today, open source is a default choice for innovation, and more than 90 percent of Fortune 500 companies rely on Red Hat's enterprise open source solutions. This recognition by Forbes is a tribute to not only Red Hat associates around the world, but also to the open source communities that are driving community-powered innovation. Jim Whitehurst President and CEO Red Hat

5 Business Development Model

6 Strong Partnership between Red Hat & IBM Over 15 years of strong partnership between Red Hat and IBM bringing to our mutual customers access to innovation, performance, scalability and stability uting to the open communities that are powering innovative new solutions, provid

7 Red Hat Embracing IBM LinuxONE Available only for New Linux Customers on LinuxONE IBM LinuxONE RockHopper and Emperor Servers Two options: Red Hat Enterprise Linux Red Hat Enterprise Linux + Smart Management + Extended Update Support This sales play is designed to attract new LinuxONE market and clients with a highly secure, reliable and scalable platform at very aggressive price points. Clients looking at larger deployments with rapid growth requirements should be enticed with this offering from our premium partner. " Scott Carlson, IBM LinuxONE Program Director

8 JBoss on z Systems and LinuxONE Red Hat JBoss EAP and Red Hat BRMS adding Value to your solution (II) Take advantage of the IBM JDK optimized on Red Hat Enterprise Linux for IBM z Systems (II) (1)

9 JBoss on z Systems and LinuxONE What is Red Hat JBoss BRMS? Red Hat JBoss BRMS is a comprehensive platform for business rules management, business resource optimization, and complex event processing (CEP). Deploy decision services across physical, virtual, and cloud environments. Improve business agility. Make consistent and efficient decisions. Quickly build resource optimization solutions. Shorten development cycles for faster time to market.

10 Red Hat Enterprise Linux 7.1 Features Summary

11 RHEL 7.1 Summary of New Features End-to-End data consistency for checking for zfcp Data Routing for FCP Automated LUN scanning for NPIV Support for Transparent Large Pages Support for libhugelbfs Support Cross Memory Attach Support for Transaction Memory (zec12+) Write Protection support based on dirty page detection Enhancement in the configuration tool for network devices IPv6 support for qetharp tool VEPA (Virtual Ethernet Port Aggregator) support Safe offline interface for DASD devices Enhanced DASD statistics for PAV and HPF Improved performance of dasdfmt CryptoExpress4s support CryptoExpress5s tolerance support Crypto adapter resiliency Enhanced CPACF (Assist for Cryptographic Functions) support

12 Red Hat Enterprise Linux 7.2 Features Summary

13 RHEL 7.2 New Features Enable RDMA in Mellanox driver for RDMA on System - technology preview This feature enables the user space programs to initiate PCI I/O operations on System z using the standard Linux device driver program interface. The patches for the Mellanox kernel device driver, for user space Infiniband verbs library libibverbs, and for the user space libibverbs library plug-in libmlx4 library modify the following components: "ib_uverbs" kernel module; "mlx4_ib" kernel module; "libibverbs" user space library; "libmlx4" plug-in library for the libibverbs library. Support the Crypto Express5S (CEX5S) crypto adapter in kernel and s390utils/s390-tools Implement full support for new crypto hardware for System z SE/HMC file access support in kernel and s390utils/s390-tools Provide access to files on the USB/DVD drive of the SE/HMC of System z hardware SMT base support in in kernel and s390utils/s390-tools Improved performance by utilizing new HW instructions SIMD base support in in kernel

14 RHEL 7.2 New Features Use CCA coprocessor random numbers to improve kernel entropy pool The Linux kernel needs input to its entropy pool to generate strong pseudo random numbers, which are used in many security related methods (key generation, pgp, AS randomization,...). The numbers generated by the true random number generator of the CCA coprocessor should be fed into the kernel entropy pool if a CCA coprocessor is available. Check whether /dev/hwrandom is available and if so run the rngd to periodically feed random numbers from /dev/hwrandom in to the kernel entropy pool. This should be triggered with every Linux boot. Kernel support to improve Java performance for Linux on System z - Technology Preview Enable PCI per default for Linux on IBM z Systems With the PCI and RDMA enabling features in RHEL7.2 PCI should be enabled per default

15 RHEL 7.2 New Features Add GPFS partition type to fdasd - s390utils/s390-tools The fdasd tool now supports handling and identification of an additional partition type called "GPFS". This partition type identifies partitions containing GPFS Network Shared Disks (NSD) used to store GPFS file system information. This RAS feature improves reliability and consumability of a GPFS on ECKD setup via the new partition type "GPFS". LLVM optimization for System z Deterministic Random Bits Generator (DRBG) support This feature improves the s390 pseudo-random device driver /dev/prandom to use the "perform pseudo random number operation" available with message-security assist (MSA) 5.

16 Red Hat Enterprise Linux 7.3 Roadmap* Features Summary * Roadmaps can change without further notice

17 RHEL 7.3 Roadmap Summary for z Systems z13 support in toolchain This feature enables new hardware support in gbd It will allow debugging of new hardware instructions. Support GCC 5.1 as an add-on compiler This feature to enable support for docker containers and ISVs to compile their applications with the enhanced Hardware support and optimizations included in the gcc version delivered as add on compiler. Enhanced opencryptoki support This features enables dynamic tracking, ep11 enhancements, key migration, and bug fixes are enhancements that improve opencryptoki's debugability, adds a new token, provides new key management capabilities, and stability. z13 support for gblic This feature adds z13 instruction support to glibc, improving performance in z13 servers e.g SIMD instructions. Enable zedc compression This feature adds and enable zedc compression via the new Generic Workqueue engine device driver The GenWQE device is a PCIe card used to accelerate different tasks. Since it is configurable, it can be adjusted to different purposes. The initial task for the card is to do zlib style compression/decompression RFC1950, RFC1951, and RFC1952. This enhancement will Improved performance for software applications using data compression.

18 RHEL 7.3 Roadmap Summary for z Systems Enable RDMA in Mellanox driver for RDMA on System (out of Technology Preview) This feature enables the user space programs to initiate PCI I/O operations on System z using the standard Linux device driver program interface. The patches for the Mellanox kernel device driver, for user space Infiniband verbs library libibverbs, and for the user space libibverbs library plug-in libmlx4 library modify the following components: "ib_uverbs" kernel module; "mlx4_ib" kernel module; "libibverbs" user space library; "libmlx4" plug-in library for the libibverbs library. Add support for libseccomp The security enhancements provided by seccomp mode 2 are critical for the adoption of containers in Linux on s390x. Enable IMA (Integrity Measurement Architecture) IMA is a critical component of end-to-end integrity verification that applies broadly across cloud computing, data centers, servers, workstations, and embedded systems. Enable Go language Support Go is a modern computer language developed by Google. More and more software products are written in this language especially for cloud. This feature is to enable go based development and porting on System z

19 Red Hat Enterprise Linux 7.x Installation Overview

20 Publications IBM Redbooks

21 Installation Overview Linux Desktop

22 RHEL 7.x manual installation process These files can be found at the images directory from the RHEL7.x installation tree kernel.img initrd.img redhat.exec generic.prm Highly recommended to edit the PRM file locally in your desktop and then copy it to the z/vm Virtual Machine. This is how the stock generic.prm file looks like: ro ramdisk_size=40000 cio_ignore=all,!condev Copyright Red Hat Inc 2015

23 RHEL 7.x FCP, ECKD/EDEV DASD Examples of GENERIC.PRM: FCP: ro ramdisk_size=40000 cio_ignore=all,!condev ip= :: :20:vmlnx2-4.itso.ibm.com:enccw :none rd.znet=qeth, , , ,layer2=1 nameserver= nameserver= rd.zfcp=0.0.fc00,0x c74c,0x rd.zfcp=0.0.fd00,0x c74c,0x inst.repo=ftp:// /pub/rhel71 ks=ftp:// /pub/kickstart/linux2-ks.cfg inst.cmdline ECKD DASD/EDEV: ro ramdisk_size=40000 cio_ignore=all,!condev ip= :: :20:vmlnx2-3.itso.ibm.com:enccw :none rd.znet=qeth, , , ,layer2=1 nameserver= nameserver= rd.dasd= inst.repo=ftp:// /pub/rhel71 ks=ftp:// /pub/kickstart/linux1-ks.cfg inst.cmdline

24 Copying files to a z/vm guest To copy files over to z/vm, open a Linux terminal on your desktop: # ftp <FQDN for the z/vm> login <login> password <password> Example: site fix 80 bin put kernel.img KERNEL.IMG put initrd.img INITRD.IMG ascii put redhat.exec REDHAT.EXEC put generic.prm GENERIC.PRM

25 RHEL 7.x installation process 1

26 RHEL 7.x installation process 2

27 RHEL 7.x installation process 3

28 RHEL 7.x installation process 4

29 RHEL 7.x installation process 5 Copyright Red Hat Inc 2015

30 RHEL 7.x installation process 6 Copyright Red Hat Inc 2015

31 RHEL 7.x installation process 7 Copyright Red Hat Inc 2016

32 Red Hat Enterprise Linux 7.x other features

33 systemd Overview systemd is a system and services manager that replaced upstart in RHEL. systemd is the first user space process the kernel starts when booting. This process is responsible for starting all the services and their dependencies that allow the system to act as a server. systemd uses units that can be dependent on other units. There are different unit types such as: Service units, used to start services Socket units, which allow socket based activations Device units, which trigger reactions for devices as they appear or disappear Mount point units, that control mount points Target units, which allow grouping of units to act as synchronization points

34 systemd Script Example

35 systemd Script vs System V

36 Managing Services using systemd List active service units (running services): List failed service units: # systemctl -t service --state=failed

37 systemd Commands Query the status of a service unit:

38 systemd Commands Stop, start, and restart a service unit: # systemctl stop vsftpd.service # systemctl start vsftpd.service # systemctl restart vsftpd.service You can also omit the suffix and specify multiple units: # systemctl restart vsftpd sshd Reload a service unit # systemctl reload sshd Not all services support that

39 systemd Commands List installed service units: # systemctl list-unit-files -t service List enabled service units: Disable a service: # systemctl disable vsftpd Query the default target the system boots into: # systemctl get-default Switch to a target: # systemctl isolate multi-user.target

40 systemd/sysv Table

41 Loading System Targets IPL your Linux server from the 3270 console using the following commands: In rescue.target mode, all of the file systems in /etc/fstab are mounted, but networking has not been started.

42 Load System Targets - FCP To enter a different systemd target, from the IPL command just type the target you want in the systemd.unit= parameter. For example, to enter the emergency.target, use the following commands:

43 Load System Targets with ECKD/EDEV To load systemd targets from the IPL command when using DASD ECKD/FBA use the following commands from the 3270 terminal: ===> ipl 100 PARM systemd.unit=rescue 00: zipl v el7 interactive boot menu 00: 00: 0. default (linux) 00: 00: 1. linux 00: 00: Note: VM users please use '#cp vi vmsg <input>' 00: 00: Please choose (default will boot in 5 seconds): 00: Booting default (linux)... 00: Uncompressing Linux Welcome to rescue mode! Type "systemctl default" or ^D to enter default mode. Type "journalctl -xb" to view system logs. Type "systemctl reboot" to reboot. Give root password for maintenance (or type Control-D to continue):

44 systemd Journal The journal is part of systemd and provides a modern logging mechanism. It allows to capture Kernel log messages, regular syslog messages, the stdout/stderr written by services, and messages from the early boot stages. Viewing the journal

45 Filtering systemd Journal Filtering the journal Show the log messages of the current boot (filters out the messages from previous boots): # journalctl -b Show today s log messages: # journalctl --since today Show kernel messages of the current boot only: # journalctl -b -k Only show errors: # journalctl -p err Show the log messages of a specific unit (like the sshd.service unit): # journalctl -u sshd.service

46 This is the last slide in the deck Session feedback Please submit your feedback at Session is CD