NEWS for SUSE LINUX Enterprise Server 10 Service Pack 1 ======================================================= Version: 2007-05-22 Authors: Ralf Flaxa, Gerald Pfeifer, Thorsten Kukuk Overview: ======== 1. Important general info 2. Enhancements 2.1 Installation / YaST2 / AutoYaST 2.2 Platforms / Hardware / Drivers 2.3 Standards 2.4 Availability 2.5 Serviceability 2.6 Virtualization 2.7 Performance 2.8 Security 2.9 Applications and Tools 2.10 New packages introduced with SP1 3. Maintenance fixes 3.1 Bug fixes 3.2 Security fixes 3.3 PTF fixes 4. Known problems 5. Deprecations 6. More info and feedback 1. Important general info ------------------------- These notes are generic for all SLES10 based products. Some parts may not apply to a particular architecture/product. In cases where this is not obvious the respective architectures are explicitly listed. The instructions for installing this Service Pack can be found in the README file on CD1. There are also translations of this file. This Novell product includes materials licensed to Novell under the GNU General Public License (GPL). The GPL requires that Novell make available certain source code that corresponds to those GPL-licensed materials. The source code is available for download at http://www.novell.com/linux/source . Also, for up to three years from Novell's distribution of the Novell product, upon request Novell will mail a copy of the source code. Requests should be sent by e-mail to sle_source_request@novell.com or as otherwise instructed at http://www.novell.com/linux/source . Novell may charge a fee to recover its reasonable costs of distribution. 1.1 Purpose ----------- This SUSE Linux Enterprise Server Service Pack serves multiple purposes: o Contains enhancements to the SLES10 code base (see chapter 2). o Contains all maintenance fixes (see chapter 3), which were released since GA of SLES10. o Provides an easy update (see README) of your system or individual packages to the latest Service Pack level. This is especially useful if you can not use online update mechanisms. o Provides improvements for an easy fresh install (see README) using the latest kernel, drivers and updates to the installer. o Include PTFs (special fixes for customers) which were folded back into the SLES10 common code base making them maintained. o Contains useful additional information and documentation (see chapter 5). Through joint testing and maximum care we try hard not to break any ISV certification with a Service Pack, but we recommend that you check with your ISV about the certification status of your application. 2. Enhancements --------------- 2.1 Installation / YaST2 / AutoYaST ----------------------------------- o The default mount method was changed from mount by devicename to mount by ID. If the device does not support unique IDs, the old devicenames are used as fallback. o The package manager has seen significant speed improvements and features improved error handling. Visual feedback of download and operations progress has been added. The list of installed patterns and packages can be exported as well as imported. Add "verify installed package dependencies" option has been added. o zypper, a new command line interface to libzypp, the backend of YaST package management, has been added. o AutoYaST has seen many improvements: - Profiles can be on a USB device now. - Existing partitions can have a element. - Partition sizes can be configured in percent (30%). - The feature can store the answer in a file now, thusly making it available for scripts. - UI enhancements for signature-handling, partitioning, etc. o yast2-cd-creator now also supports remote installation sources and CD/DVD sources and is able to sign the medium with a GPG key. o The yast2-nfs-server module added NFSv4 support. o In addition the following YaST modules have seen bugfixes: - yast2-apparmor - yast2-autofs - yast2-backup - yast2-bootloader - yast2-boot-server - yast2-ca-management - yast2-cd-creator - yast2-control-center - yast2-core - yast2-country - yast2-dhcp-server - yast2-dns-server - yast2-firewall - yast2-firstboot - yast2-hardware-detection - yast2-heartbeat - yast2-http-server - yast2-inetd - yast2-installation - yast2-instserver - yast2-irda - yast2-iscsi-client - yast2-iscsi-server - yast2-isns - yast2-kerberos-client - yast2-ldap - yast2-ldap-client - yast2-ldap-server - yast2-mail - yast2-mail-server - yast2-ncurses - yast2-network - yast2-nfs-client - yast2-nfs-server - yast2-nis-client - yast2-nis-server - yast2-ntp-client - yast2-online-update - yast2-packager - yast2-pam - yast2-perl-bindings - yast2-pkg-bindings - yast2-power-management - yast2-printer - yast2-profile-manager - yast2-qt - yast2-registration - yast2-repair - yast2-restore - yast2-runlevel - yast2-samba-client - yast2-samba-server - yast2-schema - yast2-security - yast2-slp - yast2-slp-server - yast2-sound - yast2-storage - yast2-support - yast2-sysconfig - yast2-tftp-server - yast2-transfer - yast2-tune - yast2-update - yast2-users - yast2-vm - yast2-x11 - yast2-xml o The yast2-bootfloppy module was removed o Translations for the following languages were added to YaST2: - Afrikaans - Arabic - Catalan - Gurajati - Marathi - Tamil - Xhosa - Zulu 2.2 Platforms / Hardware / Drivers ---------------------------------- o Support many new hardware components via driver and PCI ID updates: network drivers --------------- updated Broadcom tg3 driver to version 3.71b, - additional support for BCM5754, BCM5755, BCM5715S, BCM5722, BCM5787M, BCM5906M chipsets updated Broadcom bnx2 driver to version 1.5.5b, - additional support for BCM5709, BCM5708S chipsets - fixing IP renewal defect added QLogic qla3xxx driver version 2.03.00-k3-SP1B5 updated Intel e1000 driver to version 7.3.15-k3-NAPI - additional support for ICH8 chipsets added NetXEN netxen driver version 3.4.25 updated Marvell sky2 driver to version 1.10 - fixing interrupt storm handling - improving hibernation/resume updated Intel ipw3945 driver to version 1.1.0 - split from wlan-kmp package and provided by ipw3945 storage drivers --------------- updated Adaptec aic94xx driver to version 1.0.2-suse1 - added wide port off expander support updated Adaptec aic79xx driver to version 3.0 to support 29320ALP HBA updated Emulex lpfc driver to version 8.1.10.3 - advanced sysfs integration - improved management interfaces updated LSI mptsas driver to version 3.04.02-suse - additional support for LSI1078, SAS6i chipsets updated LSI megaraid_sas driver to version 3.05 - additional support for LSI1078, LSI1068 chipsets updated LSI megaraid_mbox driver to version 2.20.4.9 updated LSI megaraid_mm driver to version 2.20.2.7 updated QLogic qla2xxx driver to version 8.01.07-k3 - additional support for ISP54XX chipset and QLE220, QLE2432 HBAs - preserved the dump_poll() callback updated QLogic qla4xxx driver to version 5.01.00-d1 - additional support for QLA4010, QLA4022 HBAs updated HP cciss driver to version 3.6.14 audio support ------------- additional support for following chipsets: - Realtek ALC861 graphics support ---------------- additional support for following chipsets: - Intel 965 Express Chipset family, P965 Express Chipset, G965 (Integrated graphics), Q965 (Business/vPRO) Chipsets - VIA CLE266 CPU support ----------- - added support for upcoming Intel Penryn Processors - added support for Intel Core(tm) 2 Duo and Core(tm) 2 Extreme Merom Processors - added support for Intel Quad core Tigerton Processors - added support for Intel Core(tm) 2 Quad Kentsfield Processors o added SATA AHCI link power management, o added support for C2 and C3 states on x86-64 mobility plattforms o added memory support up to 1024GB on x86-64 plattforms o improved memory hot add support o added ACPI 3.0 System Locality Information Table (SLIT) support 2.3 Standards ------------- o Validated LSB 3.1 certification for all platforms 2.4 Availability ---------------- o Updated OCFS2 userland tools to version 1.2.2 o Updated drbd to version 0.7.22 o Updated heartbeat to version 2.0.8 o Updated multipath-tools to 0.4.7 to fix several bugs o Updated device-mapper to 1.02.13 to fix serveral bugs o Updated dmraid to 10.0.0rc13 to support: SNIA DDF1 (IBM), JBOD, Adaptec HostRAID, JMicron JMB36x o Updated mdadm to version 2.6. 2.5 Serviceability ------------------ o Updated kexec-tools and add ia64 support for kexec/kdump. Going forward this is our recommended dumping solution for ia64 (except for SGI systems at this point). SLES11 will no longer provide LKCD. For details on how to setup kexec/kdump on your specific systems, refer to /usr/share/doc/packages/kexec-tools/README.SUSE as provided by the kexec-tools package. o Update crash utility to version 4.0-3.14 o Updated OpenIPMI to version 2.0.7 o Added SystemTap which was previously released as maintenance update for SLES10 and added s390x support. o Updated nagios to version 2.6 o Updated SPident to contain maintenance update and SP1 data 2.6 Virtualization --------------- o Xen has been updated to version 3.0.4 with select features from upstream. This new version includes new tools, supports paravirtualized frame buffer, allows 32-bit VMs to run on a 64-bit hypervisor, and offers improved fully-virtualized guest support. o The VM installation tool has moved from the "System" category in YaST to the new "Virtualization" category. The VM installation tool has been rewritten to take advantage of new Xen features and to better integrate with other virtualization tools. The VM installation tool can run graphically or in text mode. For graphical operation, install the optional python-gtk package. For more information, read the vm-install man page. o An optional VM management tool has been added. To use it, install the virt-manager package, and look in YaST's "Virtualization" category. The tool currently does not manage VM configurations that are not known to xend (that is, those in /etc/xen/vm that are not running). To place a VM configuration under xend's control, run the "xm new " command. The VM can then be managed with virt-manager. o The VM installation tool now defaults to displaying VMs with VNC rather than SDL, to allow interoperability with virt-manager. o Paravirtualized (PV) drivers are available for hosting SLES10, SLES9 SP3, Windows XP, Windows 2000, Windows 2003, and Red Hat Enterprise Linux 4 fully virtualized guests on Xen 3.0.4. These new paravirtualized network and block device drivers, together with extended hardware from Intel and AMD, allow customers to run virtual Windows and Linux workloads on SLES10 with improved performance. The SLES10 PV drivers are included with SLES10 SP1. The other drivers can be downloaded from the Novell website and include a 90-day evaluation period. For more information, visit http://www.novell.com/linux/virtualization/ 2.7 Performance --------------- 2.8 Security ------------ o Added LUKS support SLES10 SP1 includes support for configuring encrypted home directories and LUKS partitions. o Update audit subsystem to version 1.2.9 o Updated AppArmor - Added a PAM module to add AppArmor change_hat functionality to session-aware applications. - Added a Tomcat 5 plugin for AppArmor change_hat. 2.9 Applications and Tools -------------------------- o Updated Apache to version 2.2.3 o Updated BIND to version 9.3.3 o Bug fixes and POWER6 support for binutils o Updated GCC to 4.1.1 - add AMD Family 10h - POWER6 support o Updated GDB to 6.6 o Updated glib2 to 2.8.6 o Updated gtk2 to 2.8.11 o Updated ipmitool to version 1.8.9 o Updated lvm2 to version 2.02.17 o Updated Mono to version 1.2.2 o Updated mysql to version 5.0.26 o Updated openhpi to version 2.6.3 and add openhpi-subagent o Updated openldap2 to version 2.3.32 o Added POWER6 optimization and TPI support to glibc o Updated pam to version 0.99.6.3 with audit support o Updated pam_mount to version 0.18 o Accessibility tools for the desktop added o Updated Samba to version 3.0.23d - more detailed info on changes/fixes comes with the samba-doc package in /usr/share/doc/packages/samba/WHATSNEW.txt o Updated microcode_ctl to version 1.15 - Latest microcode from Intel (19th September 2006) o Updated xfsdump to version 2.2.43 o Updated xfsprogs to version 2.8.16 o Updated acl to version 2.2.41 o Updated attr to version 2.4.34 o Updated dmapi to version 2.2.7 o Updated MozillaFirefox to version 2.0.0.1 o Updated sapinit to version 2.0.1 2.10 New packages introduced with SP1 ------------------------------------- The following new packages have been introduced with Service Pack 1: o adaptec-firmware - Firmware files for Adaptec SAS Cards (AIC94xx) o amtu - Abstract Machine Test Utility o apparmor-provider-notifications - CIM provider for managing the AppArmor notification system o apparmor-provider-reporting - CIM provider for managing the AppArmor reports configuration o audit-libs-python Python - bindings for libaudit - Was part of audit package before o cryptconfig - Utility to Configure Encrypted Home Directories and LUKS Partitions o dasher - Zooming Predictive Text Entry System o fastjar - Java package archiver - Was part of libgcj package before o festival - Speech Synthesis System o gnome-speech - GNOME Speech API o gok - GNOME On-Screen Keyboard o hplip17, hplip17-hpijs - HP's Printing, Scanning, and Faxing Software This is a cutting edge version of HPLIP, and as thus an update from version 0.9.7 to this version results in incompatibilities. Because of the incompatibilities the new version is provided as separated package under separated names and will not be updated automatically to the new version. o intel-i810-agpgart, intel-i810-drm, intel-i810-Mesa, intel-i810-xorg-x11: for Intel Broadwater Support o ipcalc - IPv4 Address Calculator o ipw3945-kmp - Kernel Module for Intel PRO/Wireless 3945ABG cards o isns - Naming and discovery service for ISCSI. o kdebindings3-python - Python Bindings for KDE o killerd - Daemon for automatic killing of login shells o libgail-gnome - GNOME Accessibility Implementation Library o libgdiplus - Open Source Implementation of the GDI+ API o libssui - Session UI o libvirt - C toolkit to interract with the virtualization capabilities o limal-apparmor-notifications - Limal pluglib for AppArmor notifications configuration files o limal-apparmor-reporting - Limal pluglib for working with AppArmor's notification configuration o limal-nfs-server - LiMaL--NFS Server Library o makedumpfile - Partial kernel dump o mpfr - multiple-precision floating-point library o omctools - Tools to aid in omc development and testing o openhpi-subagent - Hardware Platform Interface SNMP backend o openwbem-smash-providers - Instrumentation of DMTF SMASH profiles providers used by the OpenWBEM CIMOM o openwbem-xmlservice-providers - Set of CIM providers that allow system services to be instrumented through a service desciption XML document o openxdas - Distributed Auditing Service (XDAS) o pam_apparmor - PAM module to add AppArmor change_hat functionality to session-aware applications o pciutils-ids - The database of PCI IDS for pciutils o python-pywbem - Python module for making CIM operation calls using the WBEM protocol o python-urlgrabber - A high-level cross-protocol url-grabber o qscintilla - C++ Editor Class Library o sles-heartbeat_en - Heartbeat Manual in English o sles-preparation-x86+x86-64_en - SLES Install Guide in English o sles-startup_* - SLES Start-Up Manuals in English, German, Spanish, Frensh, Italian, Japanese, Korean, Brazilian and Chinese. o sles-stor_evms_en - Storage Administration Guide for EVMS in English o systemtap - Instrumentation System o tomcat_apparmor - Tomcat 5 plugin for AppArmor change_hat o ttf-cmex - CMEXKai Traditional Chinese font o util-linux-crypto - A Collection of Basic File System Encryption Utilities o virt-manager - Virtual Machine Manager o xen-cim-cmpi - CMPI-based CIM Provider for Xen Virtualization Technology o xorg-x11-driver-video-radeon - X.Org radeon video driver update o yast2-autofs - Create and manage autofs entries in LDAP o yast2-control-center-gnome - GNOME integrated YaST control center o yast2-isns - Configuration of Internet Storage Naming Service o yast2-registration - YaST2 Registration Module o IBM Java 1.5.0 SR3 o websphere-as_ce replaces Geronimo o zypper - Command Line Package Management Using Libzypp Important Note: --------------- These packages are provided on the Service Pack 1 CDs but depending on the installation method you use these may not get automatically installed. Please use "rpm -U " to install any of these packages. 3. Maintenance fixes -------------------- 3.1 Bugfixes ------------ Service Pack 1 contains all the latest bugfixes for each package released via the maintenance Web since the GA version. See chapter 4.3 how to install these and chapter 7 where to find detailed documentation for each patch. 3.2 Security fixes ------------------ Service Pack 1 contains all the latest security fixes for each package released via the maintenance Web since the GA version. See chapter 4.3 how to install these and chapter 7 where to find detailed documentation for each patch. 3.3 PTF fixes ------------- Service Pack 1 contains all the PTFs (Program Temporary Fix) for each package released via the maintenance Web since the GA version which were suitable for integration into the maintained common codebase. 4. Known problems ----------------- o Using "System-Update" from the running system is not supported o Problems with bonding/not able to add network interfaces to the bonding interface: You need specific settings for the network interfaces that are going to be included in the bond: Under the Address Tab, the interfaces must be set to "None Address Setup" and under the General Tab the "Device Activation" must be set to "Never". Once these are set for all of the Interfaces, they should show up in the "Bond Slaves" list when you edit the bond "interface". o EVMS on top of md is not supported o Xen Paravirtualized VM cannot be installed from CDs o Fresh installations and upgrades via booting from media will make use of new architecture-optimized packages. Upgrades in a running system will stay with the original architecture; not all optimized packages will be used in this case. o To install SLES10 SP1 on HP xw9300 machines please specify the parameter acpi=noirq on the boot command line. o On POWER: If you have several old PrePBoot Partitions, please check that the correct one is choosen for the bootloader proposal. 5. Deprecations --------------- o SLES11 will no longer provide LKCD on ia64. (All other architectures already moved to kexec/kdump with SLES10 GA.) o SLES11 will no longer provide powertweak 6. More info and feedback ------------------------- Please also refer to the READMEs on the CDs. You can get the very detailed changelog information about a particular package from the RPMs themselves by doing rpm --changelog -qp .rpm where .rpm is the name of the rpm. The file "ChangeLog" in the toplevel of CD1 contains a chronological log of all the changes that were made for these updated packages. You will also find a lot more useful information in the directory "docu" of the first media of the SLES10 SP1 CDs/DVDs. This includes PDF versions of the SLES10 installation and administration manuals, which explain many other sophisticated methods to install and use SLES10, for example using AutoYaST or VNC. Please visit http://www.novell.com/linux/ for the latest Linux product news from SUSE/Novell.