FUT20719 SUSE Linux Enterprise Server for System z. Building enterprise IT with SUSE on IBM Mainframes

Transcription

1 FUT20719 SUSE Linux Enterprise Server for System z Building enterprise IT with SUSE on IBM Mainframes Marcus Kraft Senior Product Manager mkraft@suse.com

2 SUSE Linux Enterprise A highly reliable, scalable and secure server operating system, built to power physical, virtual and cloud-based mission-critical workloads. The advanced foundation for your success Accelerate innovation 2 Increase uptime Improve operational efficiency

3 SUSE Linux Enterprise Server 12 Lifecycle Model 10 years lifecycle + 3 years Extended Support General Support Year 1 Year 2 Year 3 GA Year 4 Year 5 Year 6 Year 7 Extended Support Year 8 Year 9 Year 10 Year 11 Year 12 Year 13 LTSS SP1 LTSS SP2 LTSS SP3 LTSS SP4 3 LTSS 13-year lifecycle (10 years general support, 3 years extended support) Long Term Service Pack Support (LTSS) available for all versions, including GA

4 SUSE Linux Enterprise Lifecycle & Codestreams 2011 SLE10 SLE SP4 EoL 31 Jul SP2 SLE 12 SP3 SP4 GA SP1 13-year lifecycle SUSE Linux Enterprise 12 For SLES 11 and SLES 12, 10 years general support, +3 years Long Term Support Long Term Service Pack Support for every Service Pack Tentative Dates subject to change SP2

5 SUSE Linux Enterprise 12 Platform Recap

6 Grub 2 Boot Process 16432: Linux Bootloaders on System z (M.Kraft) 6

7 Improve Operational Efficiency Systemd: System/Service Manager 7 Init Replacement Bring up system and start services Integrate system wide ulimit settings and Cgroups Activation via Socket and d-bus Command line systemctl Compatibility with SystemV init scripts Provide infrastructure for existing ISV applications LSB compatibility SUSE specific usability enhancements Keep insserv, chkconfig and /sbin/service Old style (calling rc... ) redirected to systemctl LSB compatibility for targets like $network...

8 Improve Operational Efficiency Network Management Wicked 8 Goal Cope with increasingly complex configurations Data Center and End Users Benefit Network configuration as a service Smooth adoption & migration Technical Attributes Architecture-independent Extensible Small footprint Event based

9 SUSE Linux Enterprise 12 Modules 9 Components of SUSE Linux Enterprise Flexible lifecylce (different from the base product) Delivered on-line Fully supported List of modules Web and Scripting Legacy Toolchain Public Cloud Advanced Systems Mgmt

10 SUSE Linux Enterprise 12 SP1 Modules 10 Name Content Life cycle Agility % Legacy Sendmail, old IMAP, old Java Until 09/ Web and Scripting PHP, Python. Future: Node.js, Ruby on Rails 3 years; overlap: 18 month 60 Toolchain GCC Yearly delivery 90 Advanced Systems Management Machinery cfengine, puppet Continuous Integration Public Cloud Initialization code and tools Continuous Integration 100 Containers Docker, Tools, Images Continuous Integration 100

11 What's New with SUSE Linux Enterprise Server for System z 12 Service Pack 1

12 SUSE Linux Enterprise Server for System z 12 SP1 12 z exploitation IBM KVM support z13, zec12, zbc12, z/vm 6.3, zbx support z196 EC, z114 BC support zpdt 1.6 support Innovations at a glance Enable z13 exploitation by kernel and tool chain enhancements (SIMD, SMT) Refresh of crypto hardware and software support Networking and OFED support enhancements s390-tools and performance monitoring updated zedc support (hardware accelerated data compression) Update to IBM Java 8

13 SUSE Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements 13 z13 exploitation SMT and SIMD support for the kernel SIMD register file load / store support SLES Toolchain Modul update including gcc 5.1 (pending) LLVM optimizations (add SIMD instructions) Added (upstream) improvements for gcc 4.8 (system compiler) Enhanced perf tool to capture performance data from z13 Networking OSA-Express5s Support Auto port scan resiliency lower zfcp port rescan impact Display Switch Port Mode (s390-tools, VEPA) Query OSA Address Table - gather / display OSA and TCP/IP configuration

14 SUSE Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements 14 Crypto Crypto Express5S (CEX5S) support In-kernel crypto: DRBG (Deterministic Random Bit Generator) support Storage Support for concurrent Flash MCL updates MD mirror solution: disk mirroring with real-time enhancement for System z (RAID10 ECKD / (later: zfcp)) Misc PCI infrastructure enablement and integration (OFED) zedc (hardware accelerated compression / decompression)

15 SUSE Linux Enterprise Server for System z 12 SP1 Generic Enhancements 15 Package and repository management Zypper can now display locked packages Repository xml-based rpm metadata with sha256 checksums Documentation Open vswitch documentation Extensive documentation for Modules Storage and partitioning best practices Tickless Idle Best Practices how to look for programs waking up the system on a regular base

16 Support for KVM for IBM z Systems 16 Kernel Based Virtual Machine KVM (for Kernel-based Virtual Machine) is a virtualization solution for Linux on x86, POWER and z/architecture hardware. KVM for IBM z Systems is IBM's offering for z based on KVM, and will be supported by SUSE Linux Enterprise Server 12 SP1 and successors Lowers the entry barrier for non-mainframe, but Linux skilled users to explore hardware and virtualization options of the mainframe

17 SUSE Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements 17 KVM enhancements Creation of initrds to boot from virtio-block devices Long name support for Linux guests Documentation enhancement Query host performance metrics from within VM (vhostmd / vmdump-metrics)

18 SUSE Linux Enterprise Server for System z 12 SP1 18

19 SUSE Linux Enterprise Server for System z 12 SP1 19 Docker Support for z with Docker Modul update Eo2015 Runtime and infrastructure to create SLE Docker images YaST interface for Docker

20 Docker Containers 20 Benefits using Docker Fast: performance = bare metal speed Flexible: put a system or application into a container Ship Docker images, not VMs: SUSE Linux Enterprise Server 11 SP4 and SUSE Linux Enterprise Server 12 SP1 Better integration and management of Containers Uses libvirt-lxc framework Same management layer as KVM and XEN Allows for integration with SUSE Manager and SUSE OpenStack Cloud Unified tooling, independent of the virtualization mechanism SELinux and AppArmor support and LXC Filesystem copy-on-write (btrfs integration)

21 openqa Automated test infrastructure Used by opensuse and SUSE Linux Enterprise Ability to test various code paths / installation options Basic concepts: jobs, needles (png + json) Output: log files, pictures, video 21

22 SUSE Linux Enterprise 12 SP1 Systems Management Today 22 Unattended migration reduces cost and downtime SUSE Linux Enterprise 11 SP3 to SUSE Linux Enterprise 11 SP4 SUSE Linux Enterprise 11 SP3 to SUSE Linux Enterprise 12 SUSE Linux Enterprise 11 SP4 to SUSE Linux Enterprise 12 SUSE Linux Enterprise 11 SP4 to SUSE Linux Enterprise 12 SP1 SUSE Linux Enterprise 11 SP4 to SUSE Linux Enterprise 12 SP2 SUSE Linux Enterprise 12 to SUSE Linux Enterprise 12 SP1 SUSE Linux Enterprise 12 SP1 to SUSE Linux Enterprise 12 SP2 Example: page=/documentation/sles11/book_sle_deployment/data/cha_update_auto.html Note: migration from SUSE Linux Enterprise Server 11 requires system restart with SUSE Linux Enterprise Server 12 Shutdown SUSE Linux Enterprise Server 11 based system Boot / IPL with SUSE Linux Enterprise Server 12 system Update SUSE Linux Enterprise Server system on disk (pool + updates) Reboot to SUSE Linux Enterprise Server 12 system

23 SUSE Linux Enterprise 12 Advanced Systems Management 23

24 Improve Operational Efficiency Network Management Wicked Goal Cope with increasingly complex configurations Data Center and End Users Benefit Network configuration as a service Smooth adoption & migration Technical Attributes Architecture-independent Extensible Small footprint Event based 24 TUT7562: Networking It's a Wicked World

25 Increase Uptime Full System Rollback Rollback to a good state with one click for faster recovery from planned or unplanned downtime Support for service pack rollback Support for kernel upgrade Based on btrfs and Snapper, bootloader integration 25

26 Increase Uptime Service Availability with Clustering SUSE Linux Enterprise High Availability Extension Meet Service Level Agreements Increase service availability for mission-critical systems and data Enable rolling software updates Quickly and easily install, configure and manage clustered Linux servers Transparent to Virtualization nodes can be virtual, physical or mixed! Integrated with SUSE Linux Enterprise Server Geo Clustering for SUSE Linux Enterprise High Availability Extension Business continuity, anywhere in the world 26

27 Local Cluster For Rolling Updates Clients SLES SLE HA 27 SLES SLE HA SLES SLE HA SLES SLE HA

28 Features SUSE Linux Enterprise High Availability 28 Service Failover Network Load-Balancer Cluster File System Data Replication Clustered Samba Node Recovery Virtualization Agnostic Unlimited Geo Clustering Support for x86, x86-64, IBM Power, IBM z Systems

29 Geo Cluster Setup Site C (Arbitrator) boothd boothd Node 1 boothd Node 2 Site A 29 Node 7 Node 8 Site B

30 SUSE Manager for System z Security Patch Audit 30

31 Query: What is Live Patching? Share your interest with SUSE A live patching technology Based on modern Linux technologies Works with zero execution interruption Developed by SUSE, specifically for the Linux kernel Use Cases In-memory Mission-critical Simulation Massive, Database Infrastructure Un-interrupted Time-critical Services Deployment 31

32 SUSE Linux Enterprise 12 The advanced foundation for your success Accelerate innovation 32 Increase uptime Improve operational efficiency

33 More Linux on 33 CAS What s Old is New Again: Consolidation and Innovation with Linux on the Mainframe at Sparda DV BOV KVM and Linux on z Systems BOV SUSE Manager on z Systems BOV Years of SUSE Linux Enterprise Server on the Mainframe: Control, Optimize, Innovate! TUT19877_Linux and z Systems in the Datacenter TUT Linux High Availability on Mainframe TUT SUSE Linux Enterprise Server on IBM z Systems, the Highly Scalable Hub for Mobile Workloads in the Enterprise FUT SUSE Linux Enterprise Server for System z Roadmap: Building enterprise IT with SUSE Linux Enterprise on IBM Mainframes

34 Consolidate. Reduce Complexity. Save On Costs and Efforts. Thank you. 34

35 35 Corporate Headquarters (Worldwide) Join us on: Maxfeldstrasse Nuremberg Germany

36 Accelerate Innovation Hardware 64-bit 64-bit hardware is the future 64-bit kernels only Execution of 32-bit applications fully supported via 32-bit execution environment on top of 64-bit kernel Virtualization KVM, Xen, z/vm, LPAR support (depends on architecture) 64-bit host; 64-bit and 32-bit guests Hybrid Computing Device Driver Innovation 36 Platform specific workloads, GPUs, special purpose PUs SUSE Solid Driver Program (SSDP)

37 Improve Operational Efficiency Installer Workflow SUSE Linux Enterprise 11 Installation Setup Install without updates Reboot Network Register Reboot Services Log-in Wait Update Wait SUSE Linux Enterprise 12 Installation Setup Network Wait Reboot 37 Log-in Register Install with updates

38 Improve Operational Efficiency SUSE Customer Center 38

39 Network IPv6 Status System Installation & Patching over IPv6 Broad range of service prepared and tested Ongoing IPv6 compatibility and certification (USGv6) Benefits 39 Deploy and use in pure IPv6 environment Scale networks beyond IPv4 limitations Answer compliance needs

40 SUSE Linux Enterprise 12 Filesystem Recommendations Ye s OS Purpose? New Filesystem? Data xfs No Type? reiserfs ext2/3/4 Ye s Snapshots? No xfs Snapshots? No ext3 4 btrfs Note: the conversion to btrfs from ext2/3 leaves a copy of the old file system which should be deleted at some point 40 Ye s Convert

41 Btrfs Functionality Maturity Today Future Copy on Write Inode Cache Snapshots Auto Defrag Subvolumes RAID Metadata Integrity Compression Data Integrity Send / Receive Online metadata scrubbing Hot add / remove 41 Manual Defragmentation Seeding devices Manual Deduplication Multiple Devices Quota Groups Big Metadata

42 Technology Overview Subvolume Normal Filesystem With Subvolumes FSTREE FSTREE / / /opt /usr 42 /usr /opt SubVols

43 YaST2 Management 43

44 Btrfs Disk Space And Extents # btrfs filesystem df / Data: total=14.50gb, used=12.20gb System, DUP: total=8.00mb, used=12.00kb System: total=4.00mb, used=0.00 Metadata, DUP: total=1.75gb, used=904.11mb # df -h / Filesystem /dev/sda7 # Size 20G Used Avail Use% Mounted on 14G 4.3G 77% / Disk utilization 12,2GB + 2x 0,9GB + = 14 GB 44

45 Increase Uptime Query: Ready for Live Patching 45 SUSE Linux Enterprise Live Patching Live patching for the kernel is designed and developed by SUSE Labs Ease of use: Builds on well-known update processes Use Cases Mission-critical systems: Improve general availability and run until the next maintenance window Massive, time-critical deployment Advantage Works with zero execution interruption Other implementation stop the whole system (milliseconds to seconds range) when patching Read more at:

46 Why Live Patching? Common tiers of change management: 1) Incident response (we're down, actively exploited ) 2) Emergency change (we could go down, are vulnerable ) 3) Scheduled change (time is not critical, we keep safe) Live patching fits in with 1 and 2 Rebooting a 1000 servers is not a quick way to fix a pressing issue and also carries the risk of them not coming up for other reasons Live patching allows quick response and leaving an actual update to a scheduled downtime window 46

47 Link Summary : Features of SUSE Linux Enterprise Server for System z (M.Kraft) : Linux Bootloaders on System z (M.Kraft) : systemd, the Wave of the Future (M.Post) TUT7562: Networking It's a Wicked World (O.Kirch) TUT7988: SUSE Linux Enterprise 12 Modules, Cores and BuildServices : KVM for System z (M.Post) : Introduction to KVM for z/vm Lovers (M.Schwidefski / C.Erhardt)

48 SUSE Linux Enterprise Documentation and Release Notes Product Pages Unix to Linux Migration Documentation Release Notes

49 49

50 Life Cycle and Policies General Support Years 1-5 Years 6-7 Years 8-10 Years Self Support Yes Yes Yes Yes Maintenance Patches Yes Yes Yes 1, LTSS 2 Technical Support Yes Yes Yes 3, LTSS 4 Security Patches Yes Yes Yes LTSS 5 Defect Resolution Yes Yes Limited6 LTSS 7 Service Packs Yes Yes No No Limited8 No No Additional Hardware Yes Enablement and Software Enhancements Source: 1 Access to previously released patches with an active subscription. 2 Access to patches for earlier product versions possible with optional Long Term Service Pack Support (LTSS). 3 Limited migration and configuration assistance provided with standard or priority subscription. 4 More comprehensive installation, migration, configuration and break fix technical support available with optional LTSS. 5 Only available with LTSS. 6 Limited to severity level 1 and 2 defects. 7 Only available with LTSS. Limited to severity level 1 and 2 defects. 8 Discretionary, based on customer and partner requests. 50 Extended Support

51 SUSE Linux Enterprise 12 SP1 Kernel Capabilities CPU bits max. # logical CPUs max. RAM (theoretical/certified) >1PiB/64 TiB 4 TiB/256 GiB 1 PiB/64 TiB 128 TiB/ 128 TiB φ/φ 2 TiB/2 EiB max. user-/ kernelspace max. swap space up to 29 * 64 GB (x86_64) or 30 * 64 GB (other arch.) max. #processes max. #threads per process Maximum limit depends on memory and other parameters (Tested with more than ). FD_SETSIZE max. size per block device 1024 Up to 8 EiB on all 64-bit architectures Supported on certified hardware only 51

52 SUSE Linux Enterprise 12 SP1 Major Linux (local) Filesystems Feature ext 2/3 Data/Metadata Journaling / Journal internal/external / Offline extend/shrink / / Online extend/shrink Inode-Allocation-Map table Sparse Files Tail Packing Defrag ExtAttr / ACLs / Quotas max. Filesystemsize 16 TiB max. Filesize 2 TiB reiserfs / / / / u.b*-tree / 16 TiB 1 EiB xfs / / / / B+-tree / 8 EiB 8 EiB Default Filesystem for the data 52 ext4 / / / / table / 1 EiB 1 EiB btrfs CoW CoW / / B-tree / Subvol. 16 EiB 16 EiB Default Filesystem for the OS

53 SUSE Linux Enterprise 12 The Technology

54 SUSE Linux Enterprise Server for System z 12 What's New - Overview 54 Architecture Level Set for z/architecture zarch=z196 - GCC to use instruction set of z196 mtune=zec12 - GCC to use instruction scheduling of zec12 Kernel, user land, applications IBM zenterprise exploitation continued z13, zec12, zbc12, z/vm 6.3, z196 EC, z114 BC support zbx support (blade center extension) Improved RAS tools and System z specific support Dump to zfcp/scsi partition CryptoExpress4 support Disk mirroring with RT enhancement (DASD/mdadm)

55 SUSE Linux Enterprise Server for System z 12 What's New - Overview 55 Transactional Memory support Kernel, GCC, binutils Allow kernel and applications to improve performance STT_GNU_IFUNC support Glibc, binutils, GCC Provide multiple versions of the same function in a library Performance improvements for selected library functions on newer hardware Transparent for ISV applications

56 SUSE Linux Enterprise Server for System z 12 Accelerate Innovation Cryptographic acceleration support Latest hardware and crypto stack (incl. PKCS#11 (EP11) New dedicated installation pattern Support of SHA-256 algorithm and CPACF MSA4 extensions Support transparent large pages src_vipa: IPV6 enablement 56 Potential speedup for applications that access large amounts of memory Virtual IP address migration now available for IPv6 networks

57 SUSE Linux Enterprise Server for System z 12 Increase Uptime Disk mirroring with real-time enhancements PCHID mapping PCHID to CHPID mapping speeds up problem root cause determination Concurrent FLASH MCL updates 57 Continuous operation in case of temporary disk storage unit timeout Perform concurrent mircocode updates for build-in Flash Express devices during operation

58 SUSE Linux Enterprise Server for System z 12 Improve Operational Efficiency Simple configuration of large amounts of disks Improve performance of dasdfmt Gather and display OSA and TCP/IP configuration Optimized compression library zlib 58 More throughput and redundancy Query OSA Address Table Format in parallel and speed up single volume format Multiple netiucv paths between z/vm guests Restructured UI and workflow Faster: installation of system and packages, java class decompression, compressed backups, pdf generation, etc

59 cgroups - Resource Control Consider a large university server with various users students, professors, system tasks etc. The resource planning for this server could be along the following lines: CPUs Top cpuset (20%) / \ Memory Network I/O Professors = 50% WWW browsing = 20% Students = 30% CPUSet1 CPUSet2 System = 20% Disk I/O (Profs) 60% (Students) 20% Prof (15%) System = 20% Source: /usr/src/linux/documentation/cgroups/cgroups.txt \ Students (5%) Network File System (60%) Professors = 50% Students = 30% 59 / Others (20%)

60 Tools Onboard cgroups Resource Control A system administrator can provide a list of devices that can be accessed by processes under cgroup Allow/Deny Rule Allow/Deny : READ/WRITE/MKNOD Limits access to device or file system on a device to only tasks in specified cgroup Source: 60

61 What's New with SUSE Linux Enterprise Server for System z 11 SP4

62 SUSE Linux Enterprise Server for System z 11 SP4 62 z support continued z13, zec12, zbc12, z/vm 6.3, zbx support z196 EC, z114 BC, z10 EC, z10 BC, z9 EC, z9 BC, support Improvements at a glance s390-tools and performance monitoring updated OFED introduction Crypto support refresh Networking enhancements Update to IBM Java 7.1

63 SUSE Linux Enterprise Server for System z 11 SP4 Generic Enhancements 63 Package and repository management Zypper can now display locked packages Repository xml-based rpm metadata with sha256 checksums Miscellaneous Kernel: MCS mutex support (scalabilty) Updated btrfs tools (latest level) sha256 in cryptsetup's luksformat command (more secure) sshd X11 forwarding with IPv6 ltrace is now multi-thread capable

64 z Exploitation OpenFabrics Enterprise Distribution (OFED ) Open-source software for RDMA and kernel bypass applications Support for RoCE Express Card (Infiniband) Crypto Express 4S 64 Device Driver Exploitation for EP11 and libica update Networking QETH: Display Switch Port Mode SRC_VIPA IPv6 enablement

65 z Exploitation 65 Refresh IPL code Improve maintainability New keywords for cio_ignore for IPL and Console device snipl interface to control dynamic CPU capacity Performance monitoring Sampling of CPU cycles Basic sampling - snapshot of various PSW bits and instruction address at specific time interval Support for raw sample data - sampling data made available to the perf program that be used/posted by external applications Support for diagnostic sampling - provides a snapshot of hardware-model dependent information

66 Subscription Management Tool Overview SMT is a proxy and auditing tool that mirrors the Customer Center and tightly integrates with it. It allows you to accurately register and manage an entire SUSE Linux Enterprise deployment, guaranteeing the subscription compliance and secure IT process flow organizations require. Customer's Network SMT 66 Customer Center

67 Unpublished Work of SUSE LLC. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary and trade secret information of SUSE LLC. Access to this work is restricted to SUSE employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of SUSE. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. SUSE makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for SUSE products remains at the sole discretion of SUSE. Further, SUSE reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All SUSE marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners.