Clarify which architectures received the pie-by-default change.
|Deletions are marked like this.||Additions are marked like this.|
|Line 203:||Line 203:|
| * We have modified GCC to by-default compile programs with [[https://en.wikipedia.org/wiki/Position-independent_code#PIE|position independent executable support]] to
improve the security benefits provided by
[[https://en.wikipedia.org/wiki/Address_space_layout_randomization|Address Space Layout Randomization]].
|* We have modified GCC to by-default compile programs with [[https://en.wikipedia.org/wiki/Position-independent_code#PIE|position independent executable support]], on the amd64 and ppc64el architectures, to improve the security benefits provided by [[https://en.wikipedia.org/wiki/Address_space_layout_randomization|Address Space Layout Randomization]].|
Table of Contents
These release notes for Ubuntu 16.10 (Yakkety Yak) provide an overview of the release and document the known issues with Ubuntu 16.10 and its flavors.
Official flavour release notes
Find the links to release notes for official flavors here.
Get Ubuntu 16.10
Download Ubuntu 16.10
Images can be downloaded from a location near you.
You can download ISOs and flashable images from from:
http://releases.ubuntu.com/16.10/ (Ubuntu Desktop and Server)
http://cdimage.ubuntu.com/ubuntu/releases/16.10/ (Less Popular Ubuntu Images)
http://cloud-images.ubuntu.com/releases/16.10/ (Ubuntu Cloud Server)
http://cdimage.ubuntu.com/netboot/16.10/ (Ubuntu Netboot)
http://cdimage.ubuntu.com/ubuntustudio/releases/16.10/ (Ubuntu Studio)
http://cdimage.ubuntu.com/ubuntu-gnome/releases/16.10/ (Ubuntu GNOME)
http://cdimage.ubuntu.com/ubuntukylin/releases/16.10/ (Ubuntu Kylin)
http://cdimage.ubuntu.com/ubuntu-mate/releases/16.10/ (Ubuntu MATE)
Upgrading from Ubuntu 16.04 LTS
To upgrade on a desktop system:
Open the "Software & Updates" Setting in System Settings.
- Select the 3rd Tab called "Updates".
- Set the "Notify me of a new Ubuntu version" dropdown menu to "For any new version".
- Press Alt+F2 and type in "update-manager" (without the quotes) into the command box.
- Update Manager should open up and tell you: New distribution release '16.10' is available.
- If not you can also use "/usr/lib/ubuntu-release-upgrader/check-new-release-gtk"
- Click Upgrade and follow the on-screen instructions.
To upgrade on a server system:
Install the update-manager-core package if it is not already installed.
Make sure the Prompt line in /etc/update-manager/release-upgrades is set to normal.
Launch the upgrade tool with the command sudo do-release-upgrade.
- Follow the on-screen instructions.
Note that the server upgrade will use GNU screen and automatically re-attach in case of dropped connection problems.
There are no offline upgrade options for Ubuntu Desktop and Ubuntu Server. Please ensure you have network connectivity to one of the official mirrors or to a locally accessible mirror and follow the instructions above.
New features in 16.10
Linux kernel 4.8
Ubuntu 16.10 is based on the Linux release series 4.8.
The gpg binary is now provided by gnupg2.
Update Manager now shows changelog entries for PPAs too (253119).
Apps provided by GNOME have been updated to at least 3.20. Many apps have been updated to 3.22 also.
systemd is now used for user sessions. System sessions had already been provided by systemd in previous Ubuntu releases.
Ubuntu 16.10 includes the latest OpenStack release, Newton, including the following components:
OpenStack Identity - Keystone
OpenStack Imaging - Glance
OpenStack Block Storage - Cinder
OpenStack Compute - Nova
OpenStack Networking - Neutron
OpenStack Telemetry - Ceilometer and Aodh
OpenStack Orchestration - Heat
OpenStack Dashboard - Horizon
OpenStack Object Storage - Swift
OpenStack Database as a Service - Trove
OpenStack DNS - Designate
OpenStack Bare-metal - Ironic
OpenStack Filesystem - Manila
OpenStack Key Manager - Barbican
Please refer to the OpenStack Newton release notes for full details of this release of OpenStack.
OpenStack Newton is also provided via the Ubuntu Cloud Archive for OpenStack Newton for Ubuntu 16.04 LTS users.
WARNING: Upgrading an OpenStack deployment is a non-trivial process and care should be taken to plan and test upgrade procedures which will be specific to each OpenStack deployment.
Make sure you read the OpenStack Charm Release Notes for more information about how to deploy Ubuntu OpenStack using Juju.
Qemu has been updated to the 2.6.1 release.
Additionally this includes a backport to enable GPU Passthru for ppc64le.
Ubuntu 16.10 includes the latest release of DPDK, 16.07.
See the Release Notes for details.
Noteworthy for DPDK application developers is that upstream deprecated the old mechanism of a combined shared library. libdpdk.so is now a linker script referring to the - individually packaged - sub-libraries librte-*. Furthermore the DPDK related kernel modules are now provided as dkms based packages.
Libvirt has been updated to version 2.1. See the Changelogs for details.
In order to reduce the Debian delta, the main libvirt service has been renamed to libvirtd.service. libvirt-bin.service becomes an alias to maintain backwards compatibility.
Open vSwitch has been updated to the latest release, 2.6.
See the Open vSwitch News for mroe details.
The enablement of openvswitch-switch-dpdk has changed upstream. So if you are upgrading from a previously dpdk enabled configuration then you will need to update your enablement appropriately. See associated Readme at /usr/share/doc/openvswitch-switch-dpdk/README.Debian for details.
Ubuntu 16.10 ships with LXD 2.4.1. The main highlights for this new version of LXD are:
Building on the new AppArmor feature, it is now possible to install Snap packages inside LXD containers. For the time being, this is only possible with Ubuntu 16.10 containers that have the "squashfuse" package installed.
New network management features have been added to LXD, allowing the creation and management of bridges, DHCP settings, tunnels, ... More information can be found from "lxc network help" and in the upstream documentation.
A full changelog can be found at: https://linuxcontainers.org/lxd/news/
LXD 2.4.1 can also be tried online at: https://linuxcontainers.org/lxd/try-it/
All of cloud-init's recent development has been brought back to 16.04, so you've probably already used it in production! Some recent improvements include:
- changes with systemd integration to better enforce order of boot which improve the reliability of configuring disks and network.
- bug fixes
updated documentation on http://cloudinit.readthedocs.io
new format for configuring apt
support for configuring ntp
support for configuring lxd 2.3+.
The docker.io package has been updated to version 1.12.1. See the associated upstream release notes: https://github.com/docker/docker/releases/tag/v1.12.1
Ubuntu on IBM LinuxONE and z Systems
There are many improvements specific to the IBM mainframe s390x architecture, in addition to all of the above mentioned features:
- s390-tools updated to 1.36.1 with support for dasd quick format
- Addition of the numactl package
- Hardware acceleration enabled in OpenSSL
- zfcpdump kernel is now available
And many other general bugfixes and improvements.
As is to be expected, with any release, there are some significant known bugs that users may run into with this release of Ubuntu 16.10. The ones we know about at this point (and some of the workarounds), are documented here so you don't need to spend time reporting these bugs again:
Boot, installation and post-install
Wifi shows no ap in oem end user mode, work around reboot the machine and then everything should work as expected (1633012)
Bluetooth driver on XPS13 9434 not functioning at all (1633019)
Some EC2 instance types are not currently booting, due to changes in the way that ext4 filesystems are created in yakkety. All instance types are expected to boot by release. (1616879)
Choosing an Entire Disk install on PowerPC will result in an un-bootable system. The work around is to manually partition your hard disk and create a 1GB ext2 /boot partition. One also needs to move /etc/yaboot.conf to /boot/etc/yaboot.conf and symlink it back. (1606089)
We have modified GCC to by-default compile programs with position independent executable support, on the amd64 and ppc64el architectures, to improve the security benefits provided by Address Space Layout Randomization.
This may cause difficulty when trying to compile Linux kernels that still need this patch applied.
Other programs may experience other problems; some debugging guidelines are at https://wiki.ubuntu.com/SecurityTeam/PIE
The Linux kernel recently changed how executables are run. AppArmor profiles that were developed on previous versions of the Linux kernel may require modification to allow the programs to work. Error messages will be logged (to dmesg or to auditd, if that is installed) that look like this:
... apparmor="DENIED" operation="file_mmap" ... profile="/usr/sbin/tcpdump" name="/usr/sbin/tcpdump" ... requested_mask="m" denied_mask="m" ...
- Often the profile and the name will match but this is not required.
The aa-logprof program from the apparmor-utils package can interactively prompt the user for previously-logged AppArmor messages. To run it, use sudo aa-logprof.
- GTK+ 3.20 requires theme developers to make changes to their themes. Many (but not all) popular themes are now compatible with GTK+ 3.20.
Unity 8 session sometimes locks up when you press Print Screen (1525285)
Unity 8 session locks up when you press media meta keys such as play/pause. (1633046)
Unity 8 Web Browser has no sound. (1632620)
The release notes for the official flavours can be found at the following links:
Your comments, bug reports, patches and suggestions will help fix bugs and improve the quality of future releases. Please report bugs using the tools provided.
If you want to help out with bugs, the Bug Squad is always looking for help.
Participate in Ubuntu
If you would like to help shape Ubuntu, take a look at the list of ways you can participate at
More about Ubuntu
To sign up for future Ubuntu development announcements, please subscribe to Ubuntu's development announcement list at: