Oracle: Unbreak my Linux Heart

Like many others, we are running into issues with Oracle licensing. Oracle charges a lot for its software and using state-of-the-art hardware you may even end up paying more, rather than less. The thing is, Oracle refuses to see VMware virtualization as "hard partitioned" but instead as "soft partitioned". That is, a single core VM may run on all cores that are available to it. So Oracle licensing requires you to factor in every core. Oracle's own Oracle VM (OVM) for x86 and SPARC (Xen-based) uses hard partitioning, but this comes at the cost of loss of overcommitment. That is, you cannot assign more cores than you have and increase the CPU utilization of your hosts. This is not necessarily bad, but means you can run less VMs on a given host. Reference: Oracle Storage Guy and Weinshenker.net

Uptake of native Linux ZFS port hampered by license conflict . But other than that, ZFS may soon arrive on Linux. See also ZFS Fuse .

Dell Community notified us that you can now install Ubuntu Server Edition on its servers. While they won't factory-install it and Dell support itself will not support it, Dell has worked with Canonical for the past 2 years to support it. Canonical will be offering support for Ubuntu on Dell servers. To make support easier, Dell has built a native .deb package of OMSA 6.3 on Ubuntu 9.10.

At OpenWorld, Oracle announced an Oracle optimized Linux kernel that is upto 75% faster than the bundled Red Hat kernel. But what's the catch? Well, it's simply a 2.6.32-based kernel , tweaked and tuned for Oracle software. Here's how to get it , if you want to. And LWN has a more detailed technical description of the changes from the mainstream kernel . Basically, the kernel optimizes communication: network (InfiniBand, 10Gb Ethernet), storage (SSD, Flash memory) and memory ( NUMA ). It optimizes drivers and reduces complexity in the kernel (i.e. remove unused drivers and so on). And considering the compatibility issue, here is Oracle's claim: "Third-party applications that run on RHEL 5 should run unchanged on Oracle Linux with the Unbreakable Enterprise Kernel , while delivering significant performance and reliability improvements for end users." Good reads are CIOupdate and PCWorld

A recent article on Linux security showed that an old backdoor (cve-2007-4573) , patched in kernel 2.6.22.7, has resurfaced . Using the leak, any user that has a local user account on a 64 bit server, can easily get root rights, using the compatibility layer. While I don't fully understand the workings, I do understand that all OEL4/OEL5 64 bit servers are potentially harmed as they have kernels 2.6.9 and 2.6.18, resp. So I logged a SR on Metalink to see if I have a big security issue in the data center. Update: CVE-2007-4573 has been renamed CVE-2010-3301 and RHEL states : This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG, as they do not contain the upstream commit d4d67150 that introduced this flaw. Update2: the issue is also listed as CVE-2010-3081 , which is slightly different and Red Hat does track this one, as it affects RHEL5 . Update3: Ksplice has a test available to verify your syste...

Red Hat has released an update of RHEL 6 bèta .

I've had a long feud at work with business units who work with outside contractors who insist on writing web apps using the very latest version of PHP, Apache and MySQL. While I welcome the use of open source, state-of-the-art technology, the one thing these contractors often overlook is the need for stability and continuity in enterprise-grade applications. Even web applications. It's useless to use the latest greatest feature set in PHP or MySQL, if the organizations you're targeting are all running RHEL 4u8, 5u2 or even RHEL3! And many do. The Enterprise Distributions for Linux lag behind public version for up to 18 months! And they won't easily upgrade just because you ask or because your application was built using the most recent version of an open source package. The company may be able to give you a special server in some DMZ but you may lack access to certain key servers, because the security status of your app and server have not (yet) been approved. Inste...