TechnicalOverview

Differences between revisions 1 and 195 (spanning 194 versions)
Revision 1 as of 2008-06-27 18:34:37
Size: 3609
Editor: minbar
Comment: import from IntrepidIbex/Alpha1
Revision 195 as of 2008-10-27 17:34:30
Size: 12505
Editor: sites
Comment: security features
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
||<tablestyle="float:right; width:40%; background:#F1F1ED; margin: 0 0 1em 1em;" style="padding:0.5em;">'''Contents'''[[BR]] [[TableOfContents]]|| ## When adding features to this page, please add credits for the relevant upstream developers where appropriate.
||<tablestyle="float:right; width:40%; background:#F1F1ED; margin: 0 0 1em 1em;" style="padding:0.5em;">'''Table of Contents'''<<BR>> <<TableOfContents>>||
Line 5: Line 6:
The Ubuntu developers are moving very quickly to bring you the absolute latest and greatest software the Open Source Community has to offer. The Intrepid Ibex Alpha 1 is the first alpha release of Ubuntu 8.10, and with this new alpha release comes a whole host of excellent new features. The feature list for 8.10 has been slowly taking shape since Intrepid opened late last month. While much is yet to be decided for 8.10, here are some of the new things that have already arrived, as well as a good look at the approved specifications for Intrepid Ibex. The Ubuntu team is happy to bring you the latest and greatest software the open source community has to offer. This is their latest result: the Ubuntu 8.10 release candidate, which brings a host of excellent new features.
Line 7: Line 8:
'''Note: This is still an alpha release. Do not install it on production machines. The final stable version will be released in October 2008.''' For Kubuntu see [[https://wiki.kubuntu.org/IntrepidIbex/RC/Kubuntu]]<<BR>>
For Xubuntu see [[https://wiki.ubuntu.com/IntrepidIbex/RC/Xubuntu]]
Line 9: Line 11:
= In General =
These features are showcased for your attention. Please test them and report any bugs you find. If you want to see what the developers have cooking for the next alpha release take a look through the intrepid blueprint page
https://blueprints.launchpad.net/ubuntu/intrepid

== Upgrading from Ubuntu 8.04 ==

To upgrade from Ubuntu 8.04, run "update-manager -d" using the update-manager package from hardy.

== Massive merge from Debian ==

As with the beginning of any development cycle, the Intrepid one has seen the merge floodgates open once again. This merge not only brings in lots of new version of various packages, but also a fair number of totally new applications.

= Download Alpha 1 =

''' NO ISOs available yet '''
= Download =
Line 27: Line 15:
 http://cdimage.ubuntu.com/releases/intrepid/alpha-1/ (Ubuntu) [[BR]]
 http://cdimage.ubuntu.com/kubuntu/releases/intrepid/alpha-1/ (Kubuntu) [[BR]]
 http://cdimage.ubuntu.com/edubuntu/releases/intrepid/alpha-1/ (Edubuntu) [[BR]]
 http://cdimage.ubuntu.com/jeos/releases/intrepid/alpha-1/ (Ubuntu JeOS) [[BR]]
 http://cdimage.ubuntu.com/xubuntu/releases/intrepid/alpha-1/ (Xubuntu) [[BR]]
 http://cdimage.ubuntu.com/gobuntu/releases/intrepid/alpha-1/ (Gobuntu) [[BR]]
 http://cdimage.ubuntu.com/ubuntustudio/releases/intrepid/alpha-1/ (UbuntuStudio)
 http://releases.ubuntu.com/releases/8.10 (Ubuntu)<<BR>>
 http://releases.ubuntu.com/releases/edubuntu/8.10 (Ubuntu Education Edition)<<BR>>
 http://releases.ubuntu.com/releases/kubuntu/8.10 (Kubuntu)<<BR>>
 http://cdimage.ubuntu.com/xubuntu/releases/8.10/rc (Xubuntu)<<BR>>
 http://cdimage.ubuntu.com/ubuntustudio/releases/8.10/rc (Ubuntu``Studio)<<BR>>
 http://cdimage.ubuntu.com/mythbuntu/releases/8.10/rc (Mythbuntu)
Line 35: Line 22:
= Caveats = Local mirrors are also available:
Line 37: Line 24:
As is to be expected at this stage of the release process, there are several known bugs that users are likely to run into with Intrepid Alpha 1. We have documented them here for your convenience along with any known workarounds, so that you don't need to spend time reporting these bugs again:  FIXME: import up-to-date local mirror list

= Upgrading from Ubuntu 8.04 =

To upgrade from Ubuntu 8.04, press Alt+F2 and type in "{{{update-manager -d}}}" (without the quotes) into the command box. Update Manager should open up and tell you: {{{New distribution release '8.10' is available.}}} Click {{{Upgrade}}} and follow the on-screen instructions.

= New Features since Ubuntu 8.04 =

== GNOME 2.24 ==

Ubuntu brings you the newest [[http://library.gnome.org/misc/release-notes/2.24/|GNOME 2.24]] desktop environment with tons of bug-fixes and new features, some of which include:
 * [[http://www.gnome.org/projects/nautilus/|Nautilus]] file manager has tab support (by Christian Neumair) and Eject icons for removable drives in Places sidebar (by Stefano Teso, Cosimo Cecchi, Christian Neumair, and others).
 * [[http://fileroller.sourceforge.net/|File Roller]] archive manager now supports ALZ, RZIP, CAB, TAR.7Z file types also (by Paolo Bacchilega and Changwoo Ryu).

== X.Org 7.4 ==

[[http://www.x.org/wiki/Releases/7.4|X.Org 7.4]], the latest stable version of [[http://www.x.org/wiki/|X.Org]], is available in Intrepid. This release brings much better support for hot-pluggable input devices such as tablets, keyboards, and mice. At the same time this will allow the great majority of users to run without a {{{/etc/X11/xorg.conf}}} file. A new failsafe X is introduced, to give better tools for troubleshooting X startup failures.

Two of the older nvidia binary drivers are not available for X.Org 7.4 yet, so users of these drivers will be automatically switched to the corresponding open source drivers.

== Linux kernel 2.6.27 ==

Ubuntu 8.10 RC includes Linux kernel 2.6.27, a significant release with better hardware support and numerous bug-fixes.

== Encrypted private directory ==

The {{{ecryptfs-utils}}} package was recently promoted to Ubuntu main, with support for a [[EncryptedPrivateDirectory|secret encrypted folder]] in your Home Folder (by Michael Halcrow, Dustin Kirkland, and Daniel Baumann).

You can help test this new feature by going to {{{Applications → Accessories → Terminal}}} and typing:
 * {{{sudo aptitude install ecryptfs-utils}}}
 * {{{ecryptfs-setup-private}}}

== Guest session ==

The {{{User Switcher}}} panel applet (package {{{fast-user-switch-applet}}}) now provides an extra entry for starting a Guest session (by Martin Pitt). This creates a temporary password-less user account with restricted privileges: the account cannot access any users' home directories, nor permanently store data. This is sufficiently safe to lend your laptop to someone else for a quick email check.

== Network Manager 0.7 ==

Ubuntu 8.10 RC includes Network Manager 0.7 (by Dan Williams and others), with long-awaited features such as:
 * system-wide settings (no need to log in to get a connection)
 * management of 3G connections (GSM/CDMA)
 * management of multiple active devices at once
 * management of PPP and PPPOE connections
 * management of devices with static IP configurations
 * route management for devices

More information can be found on the [[http://live.gnome.org/NetworkManager|Network Manager wiki]].

== DKMS ==
[[http://linux.dell.com/dkms|DKMS]] (by Dell) is included in Ubuntu 8.10, allowing kernel drivers to be automatically rebuilt when new kernels are released. This makes it possible for kernel package updates to be made available immediately without waiting for rebuilds of driver packages, and without third-party driver packages becoming out of date when installing these kernel updates.

== Samba 3.2 ==

A lot of new features have been added in Samba 3.2, including:
 * clustered file server support
 * encrypted network transport
 * IPv6
 * better integration with current Microsoft Windows™ clients and servers.

== PAM authentication framework ==
Ubuntu 8.10 RC features a new {{{pam-auth-update}}} tool, which allows simple management of PAM authentication configuration for both desktops and servers (by Steve Langasek). Packages providing PAM modules will be configured automatically, and users can adjust their authentication preferences by running {{{sudo pam-auth-update}}}.

More information can be found in the [[https://wiki.ubuntu.com/PAMConfigFrameworkSpec|Ubuntu wiki]].

== Totem BBC plugin ==

Ubuntu 8.10 RC features a new plugin for the Totem movie player that fetches free digital content from the [[http://www.bbc.co.uk/|BBC]]. To enable it, start Totem (Applications -> Sound & Video -> Movie Player), enable the plugin (Edit -> Plugins -> BBC content viewer) and select "BBC" from the drop-down labelled "Playlist".

Thanks to the [[http://www.bbc.co.uk/|BBC]] and [[http://www.collabora.co.uk/|Collabora]] for their work developing this feature.

== Server Virtualization ==

=== python-vm-builder ===

This is a complete rewrite of ubuntu-vm-builder featuring a better template system, a plugin architecture allowing support for other distributions, front-ends and additional functionalities such as post install task (--exec, --copy) or first boot (--first-boot, --first-login). It provides a compatibility mode with the previous command-line syntax and adds better reporting.

Python-vm-builder allows you to create a new virtual machine in a few minutes without going through the interactive installation process. It can be very useful for developers, software vendors or system administrators. A tutorial is available at https://help.ubuntu.com/community/JeOSVMBuilder

=== Ubuntu as a Xen guest ===

Using Ubuntu as a Xen guest is now a supported option included in the standard server kernel and is a choice when building virtual machines with python-vm-builder.

=== JeOS is now an option in the server installer ===

In an effort to simplify our build process and avoid confusion when trying to install JeOS on real hardware, JeOS is no longer provided as a separate ISO. Instead, it is an option that is activated on the server installer by pressing F4 on the first screen and selecting the "Install a minimal virtual machine" option.

== Notable inclusion in the main repository ==

The following packages have been included in the main repository and are now supported options that can be of particular interest for server administrators:

 * Sun's Java OpenJDK 1.6 - an open source implementation of the Java development kit
 * Apache's Tomcat 6 - A Java servlet container
 * ClamAV - a virus detection engine that can be coupled to mail servers
 * Spam``Assassin - A spam detection engine that can be coupled to mail servers

== Boot degraded raid setting ==

Traditionally, booting an Ubuntu installation with the root filesystem on a degraded RAID drops the system into a busybox prompt in the initramfs. This is the safest choice as it will prevent any further possible harm to data and let administrator pick what to do, but was causing issues with server hosted in remote locations. A system administrator can now statically configure their machines to continue on booting even if a disk is bad in the array by issuing the following command:
 {{{
echo "BOOT_DEGRADED=true" | sudo tee -a /etc/initramfs-tools/conf.d/mdadm
}}}
Additionally, this can be specified on the kernel boot line with the {{{bootdegraded=[true|false]}}} parameter.

== Service command now supported ==

Fedora or Red-Hat administrators will now feel a bit more comfortable using Ubuntu as the service command they had been using to manage daemons is now standard on Ubuntu. In addition to the traditional {{{sudo /etc/init.d/<service> [start|stop|restart]}}} way of managing a process, it is now also possible to use {{{sudo service <service> [start|stop|restart]}}}.

In addition, numerous standard services now support the ''status'' option so that, e.g., {{{sudo service postfix status}}} will now report if the service is running or not.

== OpenLDAP using ''cn=config'' ==

The default installation of the OpenLDAP server now uses the ''cn=config'' extension, which allows automatic synchronization between LDAP replicas of configuration changes made.

== Service-aware Uncomplicated Firewall (ufw) ==

Common services now inform ufw of the ports that are recommended for their proper enabling, so the administrator can open them in a single simple command {{{ufw allow <service>}}}.

== Compiler security-hardening features by default ==

The gcc compiler now defaults to enabling several [[https://wiki.ubuntu.com/CompilerFlags|security hardening features and warnings]]. This stops many undiscovered security vulnerabilities, rendering them unexploitable.

== Network services compiled as position-independent executables ==

To take advantage of the kernel's ability to randomize the in-memory location of executables, many network services were compiled as position-independent executables (PIE), including: apache2, bind9, openldap, postfix, cups, openssh, postgresql-8.3, samba, dovecot, dhcp3. This makes certain kinds of security vulnerabilities even harder to exploit.

= Known Issues =

There are a small number of known bugs that users may run into with Ubuntu 8.10 RC which will be fixed before the final release. We have documented them here for your convenience along with any known workarounds.

For a full list of errata for Ubuntu 8.10, please see the [[http://www.ubuntu.com/getubuntu/releasenotes/810|Ubuntu 8.10 release notes]].

 * The Live CD's detection of nVidia hardware incorrectly selects the 'nv' driver even for hardware not supported by that driver, preventing X from running on some systems. This issue will be fixed in daily builds immediately after RC and will be resolved for the Ubuntu 8.10 final release. [[https://bugs.launchpad.net/bugs/261977]]
 * When performing an install from the Ubuntu MID image, the installer will prompt for a username. The username entered must be "ubuntu"; if the username is changed from "ubuntu", X will not start on the installed system. [[https://bugs.launchpad.net/bugs/287857]]
Line 40: Line 159:
If you want to help with bugs, the [[http://wiki.ubuntu.com/BugSquad|Bug Squad]] is always looking for help.
Line 41: Line 161:
= Reporting Bugs =

It should come as no surprise that this alpha release of Intrepid Ibex contains other bugs. Your comments, bug reports, patches and suggestions will help fix bugs and improve future releases. Please report bugs through [https://bugs.launchpad.net/distros/ubuntu/+bugs the Ubuntu bugtracker]

If you want to help out with bugs, the [http://wiki.ubuntu.com/BugSquad Bug Squad] is always looking for help.
If you plan to do an installation of the release candidate, be sure to head to the [[Testing]] page. With just a few minutes of your time, you can really help to improve Ubuntu. We have two different tests; one takes just a short time, and the other is more thorough.
Line 53: Line 169:
= Help Spread the Word About Ubuntu 8.10 =

A new banner is available that counts down the days until the Ubuntu 8.10 release:

  http://www.ubuntu.com/getubuntu/countdown

You can add the countdown banner to your website to help build excitement for the new release as the date approaches.
Line 55: Line 179:
You can find out more about Ubuntu on our [http://www.ubuntu.com website] and [http://wiki.ubuntu.com wiki]. You can find out more about Ubuntu on our [[http://www.ubuntu.com|website]] and [[http://wiki.ubuntu.com|wiki]].
Line 60: Line 184:

= Credits =

The Alpha 1 release notes were brought to you by:

* Michael Vogt
* Michael Bienia

Introduction

The Ubuntu team is happy to bring you the latest and greatest software the open source community has to offer. This is their latest result: the Ubuntu 8.10 release candidate, which brings a host of excellent new features.

For Kubuntu see https://wiki.kubuntu.org/IntrepidIbex/RC/Kubuntu
For Xubuntu see https://wiki.ubuntu.com/IntrepidIbex/RC/Xubuntu

Download

Get it while it's hot. ISOs and torrents are available at:

Local mirrors are also available:

  • FIXME: import up-to-date local mirror list

Upgrading from Ubuntu 8.04

To upgrade from Ubuntu 8.04, press Alt+F2 and type in "update-manager -d" (without the quotes) into the command box. Update Manager should open up and tell you: New distribution release '8.10' is available. Click Upgrade and follow the on-screen instructions.

New Features since Ubuntu 8.04

GNOME 2.24

Ubuntu brings you the newest GNOME 2.24 desktop environment with tons of bug-fixes and new features, some of which include:

  • Nautilus file manager has tab support (by Christian Neumair) and Eject icons for removable drives in Places sidebar (by Stefano Teso, Cosimo Cecchi, Christian Neumair, and others).

  • File Roller archive manager now supports ALZ, RZIP, CAB, TAR.7Z file types also (by Paolo Bacchilega and Changwoo Ryu).

X.Org 7.4

X.Org 7.4, the latest stable version of X.Org, is available in Intrepid. This release brings much better support for hot-pluggable input devices such as tablets, keyboards, and mice. At the same time this will allow the great majority of users to run without a /etc/X11/xorg.conf file. A new failsafe X is introduced, to give better tools for troubleshooting X startup failures.

Two of the older nvidia binary drivers are not available for X.Org 7.4 yet, so users of these drivers will be automatically switched to the corresponding open source drivers.

Linux kernel 2.6.27

Ubuntu 8.10 RC includes Linux kernel 2.6.27, a significant release with better hardware support and numerous bug-fixes.

Encrypted private directory

The ecryptfs-utils package was recently promoted to Ubuntu main, with support for a secret encrypted folder in your Home Folder (by Michael Halcrow, Dustin Kirkland, and Daniel Baumann).

You can help test this new feature by going to Applications → Accessories → Terminal and typing:

  • sudo aptitude install ecryptfs-utils

  • ecryptfs-setup-private

Guest session

The User Switcher panel applet (package fast-user-switch-applet) now provides an extra entry for starting a Guest session (by Martin Pitt). This creates a temporary password-less user account with restricted privileges: the account cannot access any users' home directories, nor permanently store data. This is sufficiently safe to lend your laptop to someone else for a quick email check.

Network Manager 0.7

Ubuntu 8.10 RC includes Network Manager 0.7 (by Dan Williams and others), with long-awaited features such as:

  • system-wide settings (no need to log in to get a connection)
  • management of 3G connections (GSM/CDMA)
  • management of multiple active devices at once
  • management of PPP and PPPOE connections
  • management of devices with static IP configurations
  • route management for devices

More information can be found on the Network Manager wiki.

DKMS

DKMS (by Dell) is included in Ubuntu 8.10, allowing kernel drivers to be automatically rebuilt when new kernels are released. This makes it possible for kernel package updates to be made available immediately without waiting for rebuilds of driver packages, and without third-party driver packages becoming out of date when installing these kernel updates.

Samba 3.2

A lot of new features have been added in Samba 3.2, including:

  • clustered file server support
  • encrypted network transport
  • IPv6
  • better integration with current Microsoft Windows™ clients and servers.

PAM authentication framework

Ubuntu 8.10 RC features a new pam-auth-update tool, which allows simple management of PAM authentication configuration for both desktops and servers (by Steve Langasek). Packages providing PAM modules will be configured automatically, and users can adjust their authentication preferences by running sudo pam-auth-update.

More information can be found in the Ubuntu wiki.

Totem BBC plugin

Ubuntu 8.10 RC features a new plugin for the Totem movie player that fetches free digital content from the BBC. To enable it, start Totem (Applications -> Sound & Video -> Movie Player), enable the plugin (Edit -> Plugins -> BBC content viewer) and select "BBC" from the drop-down labelled "Playlist".

Thanks to the BBC and Collabora for their work developing this feature.

Server Virtualization

python-vm-builder

This is a complete rewrite of ubuntu-vm-builder featuring a better template system, a plugin architecture allowing support for other distributions, front-ends and additional functionalities such as post install task (--exec, --copy) or first boot (--first-boot, --first-login). It provides a compatibility mode with the previous command-line syntax and adds better reporting.

Python-vm-builder allows you to create a new virtual machine in a few minutes without going through the interactive installation process. It can be very useful for developers, software vendors or system administrators. A tutorial is available at https://help.ubuntu.com/community/JeOSVMBuilder

Ubuntu as a Xen guest

Using Ubuntu as a Xen guest is now a supported option included in the standard server kernel and is a choice when building virtual machines with python-vm-builder.

JeOS is now an option in the server installer

In an effort to simplify our build process and avoid confusion when trying to install JeOS on real hardware, JeOS is no longer provided as a separate ISO. Instead, it is an option that is activated on the server installer by pressing F4 on the first screen and selecting the "Install a minimal virtual machine" option.

Notable inclusion in the main repository

The following packages have been included in the main repository and are now supported options that can be of particular interest for server administrators:

  • Sun's Java OpenJDK 1.6 - an open source implementation of the Java development kit
  • Apache's Tomcat 6 - A Java servlet container
  • ClamAV - a virus detection engine that can be coupled to mail servers
  • SpamAssassin - A spam detection engine that can be coupled to mail servers

Boot degraded raid setting

Traditionally, booting an Ubuntu installation with the root filesystem on a degraded RAID drops the system into a busybox prompt in the initramfs. This is the safest choice as it will prevent any further possible harm to data and let administrator pick what to do, but was causing issues with server hosted in remote locations. A system administrator can now statically configure their machines to continue on booting even if a disk is bad in the array by issuing the following command:

  • echo "BOOT_DEGRADED=true" | sudo tee -a /etc/initramfs-tools/conf.d/mdadm

Additionally, this can be specified on the kernel boot line with the bootdegraded=[true|false] parameter.

Service command now supported

Fedora or Red-Hat administrators will now feel a bit more comfortable using Ubuntu as the service command they had been using to manage daemons is now standard on Ubuntu. In addition to the traditional sudo /etc/init.d/<service> [start|stop|restart] way of managing a process, it is now also possible to use sudo service <service> [start|stop|restart].

In addition, numerous standard services now support the status option so that, e.g., sudo service postfix status will now report if the service is running or not.

OpenLDAP using ''cn=config''

The default installation of the OpenLDAP server now uses the cn=config extension, which allows automatic synchronization between LDAP replicas of configuration changes made.

Service-aware Uncomplicated Firewall (ufw)

Common services now inform ufw of the ports that are recommended for their proper enabling, so the administrator can open them in a single simple command ufw allow <service>.

Compiler security-hardening features by default

The gcc compiler now defaults to enabling several security hardening features and warnings. This stops many undiscovered security vulnerabilities, rendering them unexploitable.

Network services compiled as position-independent executables

To take advantage of the kernel's ability to randomize the in-memory location of executables, many network services were compiled as position-independent executables (PIE), including: apache2, bind9, openldap, postfix, cups, openssh, postgresql-8.3, samba, dovecot, dhcp3. This makes certain kinds of security vulnerabilities even harder to exploit.

Known Issues

There are a small number of known bugs that users may run into with Ubuntu 8.10 RC which will be fixed before the final release. We have documented them here for your convenience along with any known workarounds.

For a full list of errata for Ubuntu 8.10, please see the Ubuntu 8.10 release notes.

  • The Live CD's detection of nVidia hardware incorrectly selects the 'nv' driver even for hardware not supported by that driver, preventing X from running on some systems. This issue will be fixed in daily builds immediately after RC and will be resolved for the Ubuntu 8.10 final release. https://bugs.launchpad.net/bugs/261977

  • When performing an install from the Ubuntu MID image, the installer will prompt for a username. The username entered must be "ubuntu"; if the username is changed from "ubuntu", X will not start on the installed system. https://bugs.launchpad.net/bugs/287857

If you want to help with bugs, the Bug Squad is always looking for help.

If you plan to do an installation of the release candidate, be sure to head to the Testing page. With just a few minutes of your time, you can really help to improve Ubuntu. We have two different tests; one takes just a short time, and the other is more thorough.

Participate in Ubuntu

If you would like to help shape Ubuntu, take a look at the list of ways you can participate at

Help Spread the Word About Ubuntu 8.10

A new banner is available that counts down the days until the Ubuntu 8.10 release:

You can add the countdown banner to your website to help build excitement for the new release as the date approaches.

More Information

You can find out more about Ubuntu on our website and wiki.

To sign up for future Ubuntu development announcements, please subscribe to Ubuntu's development announcement list at:

IntrepidIbex/TechnicalOverview (last edited 2008-10-30 04:02:17 by minbar)