SUSE® Update forz Systems and LinuxONEOracle on IBM z Systems SIG

Mike FrieseneggerTechnical Strategist

IBM Global Alliance

mikef@suse.com

2016-04-26

2

Agenda

• Oracle resources at SUSE

• SUSE Linux Enterprise Update

• Beyond SUSE Linux Enterprise Server

3

Oracle Resources at SUSE

• http://www.suse.com/oracle‒ Main landing page

‒ Technical Information and documents

‒ Customer Successes

• https://www.suse.com/partners/alliance-partners/oracle/matrix.html

‒ Support Matrix

• https://www.suse.com/isvcatalog‒ All applications from our ISV partners including Oracle

• SUSE engineer in Redwood Shores‒ Very helpful resource with access to Oracle engineers and PMs

4

Increaseuptime

Improve operational efficiency

Accelerateinnovation

The advanced foundation for your success

A highly reliable, scalable and secure server operating system, built to power physical, virtual and

cloud-based mission-critical workloads.

SUSE Linux Enterprise

5

SUSE Linux Enterprise Server 12

Life Cycle Model

General Support Extended Support

Year 1 Year 2 Year 3 Year 4 Year 5 Year 6 Year 7 Year 8 Year 9 Y 10 Y 11 Y 12 Y 13

GA LTSS

SP1 LTSS

SP2 LTSS

SP3 LTSS

SP4 LTSS

SP5 LTSS

SP6 LTSS

13-year lifecycle‒ 10 years general support

‒ 3 years extended support

‒ Different Lifecycles for Desktop and Modules

Subject to change.

Long Term Service Pack Support (LTSS)‒ Available for all versions, including GA

‒ Up to 3 years extended support

6

2013 2014 2015 2016 2017 2018

SLE 11

SLE 12

SLE 13

SUSE Linux Enterprise Server 12

Life Cycle, Code Streams, Future Thinking

SP3

GA SP2

SP4

“Yearly” Service Packs

Current Planning: Q4 CY/201x

Heads Up: For SLE 12 SP2 we are planning aKernel version upgrade

Subject to change.

SP1

7

SUSE® Linux Enterprise Server for System z 12 SP1

• z exploitation‒ IBM KVM support

‒ z13, z13s, zEC12, zBC12, z/VM 6.3, (z/VM 6.4 at release), zBX support

‒ z196 EC, z114 BC support

‒ zPDT 1.6 support

‒ http://www.ibm.com/systems/z/os/linux/resources/testedplatforms.html

• Innovations overview‒ z13 exploitation (SIMD, SMT) and related tool chain enhancements

‒ Crypto hardware support and software refresh

‒ Networking and OFED support enhancements

‒ s390-tools and performance monitoring updated

‒ zEDC support (hardware accelerated data compression)

‒ Update to IBM Java 8

8

Support for KVM for IBM z Systems

• Kernel Based Virtual Machine‒ KVM (for Kernel-based Virtual Machine) is a virtualization

solution for Linux on x86, POWER, z/Architecture, ARM hardware.

‒ KVM for IBM z System is an IBM's offering

‒ Linux skilled users experience no entry barrier and can now benefit from z and LinuxONE related hardware, virtualization, resilience and other z unique capabilities

‒ SLES 12 SP1 enhancements include: boot from virtio-block, long name support for Linux guests, documentation, ...

‒ First 2015: SUSE Linux Enterprise Server 12 SP1 and successors will be supported by SUSE to run on KVM for z

‒ http://www.ibm.com/systems/z/solutions/virtualization/kvm/

‒ https://www.suse.com/company/press/2015/suse-easing-linux-on-the-mainframe-with-kvm-for-ibm-z-systems-support.html

9

Go back to well-known state

Peace of mind for• Patch installation• System admin tasks• Extended integration• “Full system rollback”

New in SLE 12 SP1• Service Pack rollback

Improved in SUSE® Linux Enterprise 12 SP1

System Rollback

10

• Service failover at any distance – from local to geo

• Up to 99.9999% availability

• Rolling updates for less planned downtime

• Easy setup, administration, management

• Virtualization agnostic

• Leading open source High Availability

• On par with proprietary products

• Included with SLES for System z

Fighting Murphy's Law

When will you start?

SUSE® Linux Enterprise High Availability Extension

11

Improved in SUSE Linux Enterprise 12 SP1

Modules

Components of SUSE Linux Enterprise

• Flexible life cycle (different from the base product)• Delivered on-line• Fully supported• Included in the SUSE Linux Enterprise Server

subscription→ no extra cost

Web and Scripting Toolchain Containers

CertificationsAdvanced Systems

ManagementLegacy

Public Cloud

12

Improved in SUSE Linux Enterprise 12 SP1

Modules

Name Content Life cycle Agility %

Legacy Sendmail, old IMAP, old Java Until 09/2017 0

Certifications FIPS 140-2 Frozen versions 0

Web and Scripting

PHP, Python.Future: Node.js, Ruby on Rails

3 years; overlap:18 month

60

Toolchain GCC Yearly delivery 90

Advanced Systems Management

“Machinery”cfengine, puppet

Continuous Integration

90

Public Cloud Initialization code and tools Continuous Integration

100

Containers Docker, Tools, Images Continuous Integration

100

13

Application Containers

14

Compliance / Certifications

• Common Criteria Certification – ACHIEVED‒ SLES12 x86-64 and s390x

• DISA STIG‒ General Purpose Operating System (GPOS) & Web Server

‒ ETA: Summer 2016

• FIPS 140-2 – ACHIEVED (6/7 Modules)‒ “Frozen” FIPS 140-2 certified package in SLES Certifications

Module

‒ Final module dependent on Common Criteria Certification

• Re-certification efforts‒ IPv6, FIPS 140-2

15

SUSE Package HubWork in Progress

OBS Project to Coordinate and Consolidate Useful

Packages for SLE customers.

• Policies and Checks to Protect Customer's Investment in SUSE Support Services.

• Community Maintained | Community Supported

• Easy Access For Customers

https://en.opensuse.org/Portal:Backports

16

Outlook: What is Live Patching ?Share your interest with SUSE

• A live patching technology

• Based on modern Linux technologies

• Works with zero execution interruption

• Developed by SUSE, specifically for the Linux kernel

• Use Cases

In-memory Database

Mission-critical Infrastructure

Services

Simulation Un-interrupted

Massive, Time-critical Deployment

17

SUSE Linux Enterprise ServerIBM z Systems and IBM LinuxONE Summary

• Improve operational efficiency‒ 16+ years in service for our customers, with our partners‒ 10+ years life cycle with z support expertise, 1400+ certified ISV applications‒ System management tools unique to SUSE, auto-installation, configuration

discovery

• Increase uptime‒ Automated testing, delivering proactive maintenance and security updates‒ Full system rollback to user defined checkpoint with one click‒ Complete High Availability solution included to maintain your Service Level

Agreements

• Accelerate innovation‒ First supporting LinuxONE with KVM, founding member of Open Mainframe

Project‒ Committed to ongoing support for latest z Systems with z/VM‒ First Docker on z – supported since Nov 2015 !‒ SUSE Package Hub – serving community packages for multiple distributions

18

SUSE Linux Enterprise 12 SP2 Common Code Base

Features / Scope

• Stability of userland APIs and ABIs

→ ISV certifications remain

• Hardware enablement‒ Kernel version upgrade

• Filesystems‒ Send-receive support in btrfs

• Keep Modules up to date according to their life cycle

• Certifications‒ Do not touch FIPS 140-2 certified modules (except Kernel)

Not committed. Subject to change.

Beyond SUSE Linux Enterprise Server

20

SUSE OpenStack Cloud 6Expanding Mixed Hypervisor Options

HA Cluster

Control NodeAdmin Server

SUSE Linux

SUSE Linux

KVM/Xen/Docker

OpenStackCompute

CrowbarMessage Queue

Image Store

Other Services

Deploy UI

Cloud UI

OpenStackCompute

OpenStackCompute

OpenStackCompute

21

SUSE ManagerEnhance software-defined data center management

!!

!!

Focus areas● Configuration Management● Subscription Managment● Expanded Monitoring

Compatibility carried forward from 2.1

SUSE Manager Server can be x86-64 and s390x

Extension to SLES12 SP1

Saltstack integration with states

SLE and RHEL client support

22

23

Open Mainframe Projecthttps://www.openmainframeproject.org/

Collaborative project operating within the Linux Foundation

• Focal point for deployment and use of the Linux OS in a mainframe computing environment

• Increase collaboration across the mainframe community

• Develop shared tool sets and resources

• Teaching and educating the mainframe Linux engineers and developers of tomorrow

SUSE is Founding and Platinum Member of OMP

24

openSUSE Factory now builds for the IBM z Systems

• Improve the integration of z Systems technology into the openSUSE distribution

‒ Focus on LinuxONE Emperor and Rockhopper

‒ Find SLE build issues much sooner

‒ Integrate new features sooner

‒ Allow SLE customers to participate in base development

Landing Page: https://en.opensuse.org/ZSystems

Mailing List: https://lists.opensuse.org/opensuse-zsystems

IRC: irc://irc.freenode.net/openSUSE-zSystems

Corporate HeadquartersMaxfeldstrasse 590409 NurembergGermany

+49 911 740 53 0 (Worldwide)www.suse.com

Join us on:www.opensuse.org

25

Appendix

27

SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements

• z13 exploitation‒ SMT base support, SIMD base support

‒ SIMD register file load / store support

‒ LLVM optimizations (add SIMD instructions)

‒ Added (upstream) improvements for gcc 4.8

‒ SLES Toolchain Module update including gcc 5.1 (pending)

‒ Enhanced perf tool to capture performance data from z13 and successors

• Networking‒ OSA-Express5s Support

‒ Auto port scan resiliency – lower zfcp port rescan impact

‒ Display Switch Port Mode (s390-tools, VEPA)

‒ Query OSA Address Table - gather / display OSA and TCP/IP configuration

28

SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements

• Crypto‒ In-kernel crypto: DRBG (Deterministic Random Bit

Generator) support

‒ Crypto Express5S (CEX5S) support

• Misc‒ PCI infrastructure enablement and integration (OFED)

‒ zEDC (hardware accelerated compression / decompression)

29

SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements

• Storage‒ MD mirror solution: disk mirroring with real-time

enhancement for System z (RAID10 ECKD / (later: zFCP))

‒ Support for concurrent Flash MCL updates

30

SUSE® Linux Enterprise Server for System z 12 SP1 s390x Specific Enhancements

• KVM enhancements‒ Creation of initrds to boot from virtio-block devices

‒ Long name support for Linux guests

‒ Documentation enhancement

‒ Query host performance metrics from within VM (vhostmd / vm-dump-metrics)

• Docker‒ Docker container support for System z (Docker module

update Q4 2014)

‒ Runtime and infrastructure to build containers