Embed Size (px)
Citation preview
TUT91496
Keep SAP Running When
Patching the Linux KernelWednesday, Nov 9, 4:45 PM - 5:45 PM
Hannes Kühnemund
SUSE Product Management
Martin Zikmund
Presales Engineer
2http://images.slideplayer.org/11/3025823/slides/slide_4.jpg
3
But what about the non-disclosed
ones?
Since 2005, more than 75 data
breaches in which 1,000,000 or
more records were compromised
have been publicly disclosed.
Vulnerabilities
4
Year # vulnerabilities
2010 4258
2011 3532
2012 4347
2013 4794
2014 7038
2015 8822
2000
4000
6000
8000
10000
2010 2011 2012 2013 2014 2015
38%
16%18%
28%
Vulnerability type 2015
OperatingSystem
Browsers
Mobile Devices
Applications
Rank Operating System # vulnerabilities 2015
1 Apple OS X 384
2 Microsoft Windows Server 2012 155
3 Canonical Ubuntu Linux 152
4 Microsoft Windows 8.1 151
...
11 The Linux Kernel 77
Source: [http://www.cvedetails.com] & [https://nvd.nist.gov/] & [http://www.gfi.com/blog/2015s-mvps-the-most-vulnerable-players/]
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager5
planned
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager6
planned unplanned
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager7
planned
No cadence
unplanned
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager8
planned
No cadence
Usually on Christmas Day
unplanned
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager9
planned
No cadence
Usually on Christmas Day
No alignment with stakeholders
unplanned
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager10
planned
No cadence
Usually on Christmas Day
No alignment with stakeholders
Only one particular problem fixed
unplanned
Downtime Quiz
Regular cadence
- monthly
- quarterly
- yearly
On the weekend
In alignment with all stakeholders
Combination of Taks
- software updates / configuration
- hardware exchange of defect parts
- datacenter maintenance / AC
Optimizable with
- SUSE Manager11
planned
No cadence
Usually on Christmas Day
No alignment with stakeholders
Only one particular problem fixed
Optimizable with
- Various technologies available
unplanned
Strike the balance?
12
No Downtime Security
Where does SLE Live Patching make most sense?
... and where not? What‘s your guess?
13
Where does SLE Live Patching make most sense?
... and where not? What‘s your guess?
14
(c) creativecommons.org/licenses/by/3.0
Where does SLE Live Patching make most sense?
... and where not? What‘s your guess?
15
(c) creativecommons.org/licenses/by/3.0
http://cdn.slashgear.com/wp-
content/uploads/2012/10/google-datacenter-tech-21.jpg
Where does SLE Live Patching make most sense?
... and where not? What‘s your guess?
16
(c) creativecommons.org/licenses/by/3.0
http://cdn.slashgear.com/wp-
content/uploads/2012/10/google-datacenter-tech-21.jpg
(c) openSUSE.org
Where does SLE Live Patching make most sense?
... and where not? What‘s your guess?
17
(c) creativecommons.org/licenses/by/3.0
http://cdn.slashgear.com/wp-
content/uploads/2012/10/google-datacenter-tech-21.jpg
(c) openSUSE.org FUJITSU PRIMEQUEST 2800B, (c) Fujitsu
SAP
HANA
18http://images.slideplayer.org/11/3025823/slides/slide_4.jpg
Demo
19
Demo Landscape
20
SAP GUI client
SAP ERPrunning on SLES4SAP
TaskKeep the system
up to date and secure
TaskRun the End of the year
closing activities
Admin Accountant
Suggested sessions
FUT92716 - SUSE Linux Enterprise Server for SAP Applications Roadmap
- Wednesday, Nov 9, 10:00 AM - 11:00 AM
- Thursday, Nov 10, 4:30 PM - 5:30 PM
FUT92715 - Solve the paradox: SUSE Linux Enterprise Live Patching Roadmap
- Tuesday, Nov 8, 11:30 AM - 12:30 PM
- Friday, Nov 11, 9:00 AM - 10:00 AM
BOV94166 - SUSE Connect - Compatibility Is Key
- Tuesday, Nov 8, 2:00 PM - 3:00 PM
TUT90846 - Towards Zero Downtime - How to Maintain SAP HANA System Replication Clusters
- Wednesday, Nov 9, 4:45 PM - 5:45 PM
- Thursday, Nov 10, 3:15 PM - 4:15 PM
TUT91614 - Fast SAP HANA Failover Architecture with a SUSE High Availability Cluster on AWS
- Thursday, Nov 10, 4:30 PM - 5:30 PM
21
Your chance to win a 3ft (!) SUSE plush chameleon
22
• Receive Live Patching 60 day code for
FREE here at SUSECON
• Register & logon to http://scc.suse.com
• Activate code (60 day counter starts)
• Add Live Patching to your SLES 12 SPx
server by December 31st using eval code
• This lets you join a drawing for the SUSE
chameleon
• Drawing happens on February 28
• Winner will be contacted by email
• Chameleon will go on a journey
• After receiving the chameleon, winner
sends selfie with chameleon back to
SUSE ;-)
Thank you
23
Hannes Kühnemund
SUSE Product Management
@hakuehnemund
www.linkedin.com/in/hanneskuehnemund
Martin Zikmund
Presales Engineer
@mzikmund
https://cz.linkedin.com/in/zikmundmartin
