TechnicalOverview

Differences between revisions 1 and 197 (spanning 196 versions)
Revision 1 as of 2008-06-27 18:34:37
Size: 3609
Editor: minbar
Comment: import from IntrepidIbex/Alpha1
Revision 197 as of 2008-10-30 04:02:17
Size: 9569
Editor: minbar
Comment: fix-ups for final: point to the canonical upgrade instructions and release notes, remove references to "RC", remove download links and community-oriented content
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
||<tablestyle="float:right; width:40%; background:#F1F1ED; margin: 0 0 1em 1em;" style="padding:0.5em;">'''Contents'''[[BR]] [[TableOfContents]]|| ## When adding features to this page, please add credits for the relevant upstream developers where appropriate.
||<tablestyle="float:right; width:40%; background:#F1F1ED; margin: 0 0 1em 1em;" style="padding:0.5em;">'''Table of Contents'''<<BR>> <<TableOfContents>>||
Line 5: Line 6:
The Ubuntu developers are moving very quickly to bring you the absolute latest and greatest software the Open Source Community has to offer. The Intrepid Ibex Alpha 1 is the first alpha release of Ubuntu 8.10, and with this new alpha release comes a whole host of excellent new features. The feature list for 8.10 has been slowly taking shape since Intrepid opened late last month. While much is yet to be decided for 8.10, here are some of the new things that have already arrived, as well as a good look at the approved specifications for Intrepid Ibex. The Ubuntu team is happy to bring you the latest and greatest software the open source community has to offer. This is their latest result: Ubuntu 8.10.
Line 7: Line 8:
'''Note: This is still an alpha release. Do not install it on production machines. The final stable version will be released in October 2008.''' = Upgrading from Ubuntu 8.04 LTS =
Line 9: Line 10:
= In General =
These features are showcased for your attention. Please test them and report any bugs you find. If you want to see what the developers have cooking for the next alpha release take a look through the intrepid blueprint page
https://blueprints.launchpad.net/ubuntu/intrepid
If you are upgrading from Ubuntu 8.04 LTS, we have easy-to-follow [[http://www.ubuntu.com/getubuntu/upgrading|upgrade instructions]].
Line 13: Line 12:
== Upgrading from Ubuntu 8.04 == = New Features since Ubuntu 8.04 LTS =
Line 15: Line 14:
To upgrade from Ubuntu 8.04, run "update-manager -d" using the update-manager package from hardy. == GNOME 2.24 ==
Line 17: Line 16:
== Massive merge from Debian == Ubuntu brings you the newest [[http://library.gnome.org/misc/release-notes/2.24/|GNOME 2.24]] desktop environment with tons of bug-fixes and new features, some of which include:
 * [[http://www.gnome.org/projects/nautilus/|Nautilus]] file manager has tab support (by Christian Neumair) and Eject icons for removable drives in Places sidebar (by Stefano Teso, Cosimo Cecchi, Christian Neumair, and others).
 * [[http://fileroller.sourceforge.net/|File Roller]] archive manager now supports ALZ, RZIP, CAB, TAR.7Z file types also (by Paolo Bacchilega and Changwoo Ryu).
Line 19: Line 20:
As with the beginning of any development cycle, the Intrepid one has seen the merge floodgates open once again. This merge not only brings in lots of new version of various packages, but also a fair number of totally new applications. == X.Org 7.4 ==
Line 21: Line 22:
= Download Alpha 1 = [[http://www.x.org/wiki/Releases/7.4|X.Org 7.4]], the latest stable version of [[http://www.x.org/wiki/|X.Org]], is available in Intrepid. This release brings much better support for hot-pluggable input devices such as tablets, keyboards, and mice. At the same time this will allow the great majority of users to run without a {{{/etc/X11/xorg.conf}}} file. A new failsafe X is introduced, to give better tools for troubleshooting X startup failures.
Line 23: Line 24:
''' NO ISOs available yet ''' Two of the older nvidia binary drivers are not available for X.Org 7.4 yet, so users of these drivers will be automatically switched to the corresponding open source drivers.
Line 25: Line 26:
Get it while it's hot. ISOs and torrents are available at: == Linux kernel 2.6.27 ==
Line 27: Line 28:
 http://cdimage.ubuntu.com/releases/intrepid/alpha-1/ (Ubuntu) [[BR]]
 http://cdimage.ubuntu.com/kubuntu/releases/intrepid/alpha-1/ (Kubuntu) [[BR]]
 http://cdimage.ubuntu.com/edubuntu/releases/intrepid/alpha-1/ (Edubuntu) [[BR]]
 http://cdimage.ubuntu.com/jeos/releases/intrepid/alpha-1/ (Ubuntu JeOS) [[BR]]
 http://cdimage.ubuntu.com/xubuntu/releases/intrepid/alpha-1/ (Xubuntu) [[BR]]
 http://cdimage.ubuntu.com/gobuntu/releases/intrepid/alpha-1/ (Gobuntu) [[BR]]
 http://cdimage.ubuntu.com/ubuntustudio/releases/intrepid/alpha-1/ (UbuntuStudio)
Ubuntu 8.10 includes Linux kernel 2.6.27, a significant release with better hardware support and numerous bug-fixes.
Line 35: Line 30:
= Caveats = == Encrypted private directory ==
Line 37: Line 32:
As is to be expected at this stage of the release process, there are several known bugs that users are likely to run into with Intrepid Alpha 1. We have documented them here for your convenience along with any known workarounds, so that you don't need to spend time reporting these bugs again: The {{{ecryptfs-utils}}} package was recently promoted to Ubuntu main, with support for a [[https://help.ubuntu.com/community/EncryptedPrivateDirectory|secret encrypted folder]] in your Home Folder (by Michael Halcrow, Dustin Kirkland, and Daniel Baumann).
Line 39: Line 34:
You can help test this new feature by going to {{{Applications → Accessories → Terminal}}} and typing:
 * {{{sudo aptitude install ecryptfs-utils}}}
 * {{{ecryptfs-setup-private}}}
Line 40: Line 38:
== Guest session ==
Line 41: Line 40:
= Reporting Bugs = The {{{User Switcher}}} panel applet (package {{{fast-user-switch-applet}}}) now provides an extra entry for starting a Guest session (by Martin Pitt). This creates a temporary password-less user account with restricted privileges: the account cannot access any users' home directories, nor permanently store data. This is sufficiently safe to lend your laptop to someone else for a quick email check.
Line 43: Line 42:
It should come as no surprise that this alpha release of Intrepid Ibex contains other bugs. Your comments, bug reports, patches and suggestions will help fix bugs and improve future releases. Please report bugs through [https://bugs.launchpad.net/distros/ubuntu/+bugs the Ubuntu bugtracker] == Network Manager 0.7 ==
Line 45: Line 44:
If you want to help out with bugs, the [http://wiki.ubuntu.com/BugSquad Bug Squad] is always looking for help. Ubuntu 8.10 includes Network Manager 0.7 (by Dan Williams and others), with long-awaited features such as:
 * system-wide settings (no need to log in to get a connection)
 * management of 3G connections (GSM/CDMA)
 * management of multiple active devices at once
 * management of PPP and PPPOE connections
 * management of devices with static IP configurations
 * route management for devices
Line 47: Line 52:
= Participate in Ubuntu = More information can be found on the [[http://live.gnome.org/NetworkManager|Network Manager wiki]].
Line 49: Line 54:
If you would like to help shape Ubuntu, take a look at the list of ways you can participate at == DKMS ==
[[http://linux.dell.com/dkms|DKMS]] (by Dell) is included in Ubuntu 8.10, allowing kernel drivers to be automatically rebuilt when new kernels are released. This makes it possible for kernel package updates to be made available immediately without waiting for rebuilds of driver packages, and without third-party driver packages becoming out of date when installing these kernel updates.
Line 51: Line 57:
 http://www.ubuntu.com/community/participate/ == Samba 3.2 ==
Line 53: Line 59:
= More Information = A lot of new features have been added in Samba 3.2, including:
 * clustered file server support
 * encrypted network transport
 * IPv6
 * better integration with current Microsoft Windows™ clients and servers.
Line 55: Line 65:
You can find out more about Ubuntu on our [http://www.ubuntu.com website] and [http://wiki.ubuntu.com wiki]. == PAM authentication framework ==
Ubuntu 8.10 features a new {{{pam-auth-update}}} tool, which allows simple management of PAM authentication configuration for both desktops and servers (by Steve Langasek). Packages providing PAM modules will be configured automatically, and users can adjust their authentication preferences by running {{{sudo pam-auth-update}}}.
Line 57: Line 68:
To sign up for future Ubuntu development announcements, please subscribe to Ubuntu's development announcement list at: More information can be found in the [[https://wiki.ubuntu.com/PAMConfigFrameworkSpec|Ubuntu wiki]].
Line 59: Line 70:
 http://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-announce == Totem BBC plugin ==
Line 61: Line 72:
= Credits = Ubuntu 8.10 features a new plugin for the Totem movie player that fetches free digital content from the [[http://www.bbc.co.uk/|BBC]]. To enable it, start Totem (Applications -> Sound & Video -> Movie Player), enable the plugin (Edit -> Plugins -> BBC content viewer) and select "BBC" from the drop-down labelled "Playlist".
Line 63: Line 74:
The Alpha 1 release notes were brought to you by: Thanks to the [[http://www.bbc.co.uk/|BBC]] and [[http://www.collabora.co.uk/|Collabora]] for their work developing this feature.
Line 65: Line 76:
* Michael Vogt
* Michael Bienia
== Server Virtualization ==

=== python-vm-builder ===

This is a complete rewrite of ubuntu-vm-builder featuring a better template system, a plugin architecture allowing support for other distributions, front-ends and additional functionalities such as post install task (--exec, --copy) or first boot (--first-boot, --first-login). It provides a compatibility mode with the previous command-line syntax and adds better reporting.

Python-vm-builder allows you to create a new virtual machine in a few minutes without going through the interactive installation process. It can be very useful for developers, software vendors or system administrators. A tutorial is available at https://help.ubuntu.com/community/JeOSVMBuilder

=== Ubuntu as a Xen guest ===

Using Ubuntu as a Xen guest is now a supported option included in the standard server kernel and is a choice when building virtual machines with python-vm-builder.

=== JeOS is now an option in the server installer ===

In an effort to simplify our build process and avoid confusion when trying to install JeOS on real hardware, JeOS is no longer provided as a separate ISO. Instead, it is an option that is activated on the server installer by pressing F4 on the first screen and selecting the "Install a minimal virtual machine" option.

== Notable inclusion in the main repository ==

The following packages have been included in the main repository and are now supported options that can be of particular interest for server administrators:

 * Sun's Java OpenJDK 1.6 - an open source implementation of the Java development kit
 * Apache's Tomcat 6 - A Java servlet container
 * ClamAV - a virus detection engine that can be coupled to mail servers
 * Spam``Assassin - A spam detection engine that can be coupled to mail servers

== Boot degraded raid setting ==

Traditionally, booting an Ubuntu installation with the root filesystem on a degraded RAID drops the system into a busybox prompt in the initramfs. This is the safest choice as it will prevent any further possible harm to data and let administrator pick what to do, but was causing issues with server hosted in remote locations. A system administrator can now statically configure their machines to continue on booting even if a disk is bad in the array by issuing the following command:
 {{{
echo "BOOT_DEGRADED=true" | sudo tee -a /etc/initramfs-tools/conf.d/mdadm
}}}
Additionally, this can be specified on the kernel boot line with the {{{bootdegraded=[true|false]}}} parameter.

== Service command now supported ==

Fedora or Red-Hat administrators will now feel a bit more comfortable using Ubuntu as the service command they had been using to manage daemons is now standard on Ubuntu. In addition to the traditional {{{sudo /etc/init.d/<service> [start|stop|restart]}}} way of managing a process, it is now also possible to use {{{sudo service <service> [start|stop|restart]}}}.

In addition, numerous standard services now support the ''status'' option so that, e.g., {{{sudo service postfix status}}} will now report if the service is running or not.

== OpenLDAP using ''cn=config'' ==

The default installation of the OpenLDAP server now uses the ''cn=config'' extension, which allows automatic synchronization between LDAP replicas of configuration changes made.

== Service-aware Uncomplicated Firewall (ufw) ==

Common services now inform ufw of the ports that are recommended for their proper enabling, so the administrator can open them in a single simple command {{{ufw allow <service>}}}.

== Compiler security-hardening features by default ==

The gcc compiler now defaults to enabling several [[https://wiki.ubuntu.com/CompilerFlags|security hardening features and warnings]]. This stops many undiscovered security vulnerabilities, rendering them unexploitable.

== Network services compiled as position-independent executables ==

To take advantage of the kernel's ability to randomize the in-memory location of executables, many network services were compiled as position-independent executables (PIE), including: apache2, bind9, openldap, postfix, cups, openssh, postgresql-8.3, samba, dovecot, dhcp3. This makes certain kinds of security vulnerabilities even harder to exploit.

= Known Issues =

For a full list of errata for Ubuntu 8.10, please see the [[http://www.ubuntu.com/getubuntu/releasenotes/810|Ubuntu 8.10 release notes]].

Introduction

The Ubuntu team is happy to bring you the latest and greatest software the open source community has to offer. This is their latest result: Ubuntu 8.10.

Upgrading from Ubuntu 8.04 LTS

If you are upgrading from Ubuntu 8.04 LTS, we have easy-to-follow upgrade instructions.

New Features since Ubuntu 8.04 LTS

GNOME 2.24

Ubuntu brings you the newest GNOME 2.24 desktop environment with tons of bug-fixes and new features, some of which include:

  • Nautilus file manager has tab support (by Christian Neumair) and Eject icons for removable drives in Places sidebar (by Stefano Teso, Cosimo Cecchi, Christian Neumair, and others).

  • File Roller archive manager now supports ALZ, RZIP, CAB, TAR.7Z file types also (by Paolo Bacchilega and Changwoo Ryu).

X.Org 7.4

X.Org 7.4, the latest stable version of X.Org, is available in Intrepid. This release brings much better support for hot-pluggable input devices such as tablets, keyboards, and mice. At the same time this will allow the great majority of users to run without a /etc/X11/xorg.conf file. A new failsafe X is introduced, to give better tools for troubleshooting X startup failures.

Two of the older nvidia binary drivers are not available for X.Org 7.4 yet, so users of these drivers will be automatically switched to the corresponding open source drivers.

Linux kernel 2.6.27

Ubuntu 8.10 includes Linux kernel 2.6.27, a significant release with better hardware support and numerous bug-fixes.

Encrypted private directory

The ecryptfs-utils package was recently promoted to Ubuntu main, with support for a secret encrypted folder in your Home Folder (by Michael Halcrow, Dustin Kirkland, and Daniel Baumann).

You can help test this new feature by going to Applications → Accessories → Terminal and typing:

  • sudo aptitude install ecryptfs-utils

  • ecryptfs-setup-private

Guest session

The User Switcher panel applet (package fast-user-switch-applet) now provides an extra entry for starting a Guest session (by Martin Pitt). This creates a temporary password-less user account with restricted privileges: the account cannot access any users' home directories, nor permanently store data. This is sufficiently safe to lend your laptop to someone else for a quick email check.

Network Manager 0.7

Ubuntu 8.10 includes Network Manager 0.7 (by Dan Williams and others), with long-awaited features such as:

  • system-wide settings (no need to log in to get a connection)
  • management of 3G connections (GSM/CDMA)
  • management of multiple active devices at once
  • management of PPP and PPPOE connections
  • management of devices with static IP configurations
  • route management for devices

More information can be found on the Network Manager wiki.

DKMS

DKMS (by Dell) is included in Ubuntu 8.10, allowing kernel drivers to be automatically rebuilt when new kernels are released. This makes it possible for kernel package updates to be made available immediately without waiting for rebuilds of driver packages, and without third-party driver packages becoming out of date when installing these kernel updates.

Samba 3.2

A lot of new features have been added in Samba 3.2, including:

  • clustered file server support
  • encrypted network transport
  • IPv6
  • better integration with current Microsoft Windows™ clients and servers.

PAM authentication framework

Ubuntu 8.10 features a new pam-auth-update tool, which allows simple management of PAM authentication configuration for both desktops and servers (by Steve Langasek). Packages providing PAM modules will be configured automatically, and users can adjust their authentication preferences by running sudo pam-auth-update.

More information can be found in the Ubuntu wiki.

Totem BBC plugin

Ubuntu 8.10 features a new plugin for the Totem movie player that fetches free digital content from the BBC. To enable it, start Totem (Applications -> Sound & Video -> Movie Player), enable the plugin (Edit -> Plugins -> BBC content viewer) and select "BBC" from the drop-down labelled "Playlist".

Thanks to the BBC and Collabora for their work developing this feature.

Server Virtualization

python-vm-builder

This is a complete rewrite of ubuntu-vm-builder featuring a better template system, a plugin architecture allowing support for other distributions, front-ends and additional functionalities such as post install task (--exec, --copy) or first boot (--first-boot, --first-login). It provides a compatibility mode with the previous command-line syntax and adds better reporting.

Python-vm-builder allows you to create a new virtual machine in a few minutes without going through the interactive installation process. It can be very useful for developers, software vendors or system administrators. A tutorial is available at https://help.ubuntu.com/community/JeOSVMBuilder

Ubuntu as a Xen guest

Using Ubuntu as a Xen guest is now a supported option included in the standard server kernel and is a choice when building virtual machines with python-vm-builder.

JeOS is now an option in the server installer

In an effort to simplify our build process and avoid confusion when trying to install JeOS on real hardware, JeOS is no longer provided as a separate ISO. Instead, it is an option that is activated on the server installer by pressing F4 on the first screen and selecting the "Install a minimal virtual machine" option.

Notable inclusion in the main repository

The following packages have been included in the main repository and are now supported options that can be of particular interest for server administrators:

  • Sun's Java OpenJDK 1.6 - an open source implementation of the Java development kit
  • Apache's Tomcat 6 - A Java servlet container
  • ClamAV - a virus detection engine that can be coupled to mail servers
  • SpamAssassin - A spam detection engine that can be coupled to mail servers

Boot degraded raid setting

Traditionally, booting an Ubuntu installation with the root filesystem on a degraded RAID drops the system into a busybox prompt in the initramfs. This is the safest choice as it will prevent any further possible harm to data and let administrator pick what to do, but was causing issues with server hosted in remote locations. A system administrator can now statically configure their machines to continue on booting even if a disk is bad in the array by issuing the following command:

  • echo "BOOT_DEGRADED=true" | sudo tee -a /etc/initramfs-tools/conf.d/mdadm

Additionally, this can be specified on the kernel boot line with the bootdegraded=[true|false] parameter.

Service command now supported

Fedora or Red-Hat administrators will now feel a bit more comfortable using Ubuntu as the service command they had been using to manage daemons is now standard on Ubuntu. In addition to the traditional sudo /etc/init.d/<service> [start|stop|restart] way of managing a process, it is now also possible to use sudo service <service> [start|stop|restart].

In addition, numerous standard services now support the status option so that, e.g., sudo service postfix status will now report if the service is running or not.

OpenLDAP using ''cn=config''

The default installation of the OpenLDAP server now uses the cn=config extension, which allows automatic synchronization between LDAP replicas of configuration changes made.

Service-aware Uncomplicated Firewall (ufw)

Common services now inform ufw of the ports that are recommended for their proper enabling, so the administrator can open them in a single simple command ufw allow <service>.

Compiler security-hardening features by default

The gcc compiler now defaults to enabling several security hardening features and warnings. This stops many undiscovered security vulnerabilities, rendering them unexploitable.

Network services compiled as position-independent executables

To take advantage of the kernel's ability to randomize the in-memory location of executables, many network services were compiled as position-independent executables (PIE), including: apache2, bind9, openldap, postfix, cups, openssh, postgresql-8.3, samba, dovecot, dhcp3. This makes certain kinds of security vulnerabilities even harder to exploit.

Known Issues

For a full list of errata for Ubuntu 8.10, please see the Ubuntu 8.10 release notes.

IntrepidIbex/TechnicalOverview (last edited 2008-10-30 04:02:17 by minbar)