As a heads up RHEL 7.3 is released: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html Pay careful attention when the CR repo starts churning out RPMs (if you have CR enabled) as there have been a few rebases in this - notably firewalld, NetworkManager, freeIPA, libreoffice, samba, amongst others If you have an ipv6 environment ping is now ipv6 aware and ping6 is removed (with a symlink to ping for compatibility). On the SSL side of things pycurl now handles TLS 1.1 and 1.2 and openJDK8 can handle ECC. With the NetworkManager rebase more complicated arbitrary layering of interfaces is possible (eg physical -> team -> vlan -> bridge), which I'll be revisiting my old NM article to investigate soon, and Wi-Fi scanning will use a randomised MAC ... this may affect some people. For a known BSSID the connect won't be a randomised MAC though just when scanning. The firewalld zones become a bit more usable with ipsets being usable to define the zone making management of which networks go in which zones a bit nicer - I'll be revisiting my old firewalld article to investigate this too. The deprecation of the old net-tools suite continues with bridge-utils no longer required in many circumstances as iproute2 gets improved bridge capabilties... this brings EL7 inline with the Fedora behaviour: https://fedoramagazine.org/build-network-bridge-fedora/ On the network side of things be aware of a potentially breaking change to systems in how device names are created, this will only affect systems that have exceptionally long device names: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/7.3_Release_Notes/index.html#bug_fixes_general_updates For fresh installs using automatic partitioning the default /boot size has been bumped to 1G ... for kickstarts and other automated installs you may want to tweak your setups to match. The NSS bug that caused problems with reusing SSL sessions and was breaking owncloud setups has been resolved - I have not tested this yet and will be doing so this weekend. The impending owncloud 9.1.1 EL7 release in EPEL7 will be removing my workaround and require this for full correct functionality. In the tech preview world nftables joins the testing group (I'll have articles up exploring this new firewalling method in the coming weeks) for networking. Whilst with storage overlayfs and btrfs remain in tech preview status - with cephfs joining them... as notable pieces. There's also new pNFS stuff. This is only a small snippet of things that jumped out relevant to me personally. As always make sure you read through the release notes in full. to be ready once CentOS starts producing the RPMs, and keep in mind this early in the lifecycle there are a fair few rebases and new features implemented that should be tested... unlike later on in the lifecycles (eg EL6) where no/minimal rebasing happens and changes at a feature level don't happen.
Am 04.11.2016 um 10:38 schrieb James Hogarth <james.hogarth at gmail.com>:> As a heads up RHEL 7.3 is released: > > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html > > Pay careful attention when the CR repo starts churning out RPMs (if > you have CR enabled) as there have been a few rebases in this - > notably firewalld, NetworkManager, freeIPA, libreoffice, samba, > amongst others > > If you have an ipv6 environment ping is now ipv6 aware and ping6 is > removed (with a symlink to ping for compatibility). > > On the SSL side of things pycurl now handles TLS 1.1 and 1.2 and > openJDK8 can handle ECC. > > With the NetworkManager rebase more complicated arbitrary layering of > interfaces is possible (eg physical -> team -> vlan -> bridge), which > I'll be revisiting my old NM article to investigate soon, and Wi-Fi > scanning will use a randomised MAC ... this may affect some people. > For a known BSSID the connect won't be a randomised MAC though just > when scanning. > > The firewalld zones become a bit more usable with ipsets being usable > to define the zone making management of which networks go in which > zones a bit nicer - I'll be revisiting my old firewalld article to > investigate this too. > > The deprecation of the old net-tools suite continues with bridge-utils > no longer required in many circumstances as iproute2 gets improved > bridge capabilties... this brings EL7 inline with the Fedora > behaviour: > > https://fedoramagazine.org/build-network-bridge-fedora/ > > On the network side of things be aware of a potentially breaking > change to systems in how device names are created, this will only > affect systems that have exceptionally long device names: > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/7.3_Release_Notes/index.html#bug_fixes_general_updates > > For fresh installs using automatic partitioning the default /boot size > has been bumped to 1G ... for kickstarts and other automated installs > you may want to tweak your setups to match. > > The NSS bug that caused problems with reusing SSL sessions and was > breaking owncloud setups has been resolved - I have not tested this > yet and will be doing so this weekend. The impending owncloud 9.1.1 > EL7 release in EPEL7 will be removing my workaround and require this > for full correct functionality. > > In the tech preview world nftables joins the testing group (I'll have > articles up exploring this new firewalling method in the coming weeks) > for networking. Whilst with storage overlayfs and btrfs remain in tech > preview status - with cephfs joining them... as notable pieces. > There's also new pNFS stuff. > > This is only a small snippet of things that jumped out relevant to me > personally. As always make sure you read through the release notes in > full. to be ready once CentOS starts producing the RPMs, and keep in > mind this early in the lifecycle there are a fair few rebases and new > features implemented that should be tested... unlike later on in the > lifecycles (eg EL6) where no/minimal rebasing happens and changes at a > feature level don't happen.thanks ... -- LF
On 11/04/2016 04:38 AM, James Hogarth wrote:> As a heads up RHEL 7.3 is released:<snip> 1. Is CentOS-7.3 done yet? Answer: NO! And it is NOT CentOS-7.3 .. it is CentOS-7 (1611) based on RHEL-7.3 Sources. The main tree will be labeled '7.3.1611' on the mirrors (along side 7.0.1406 and 7.1.1503, and 7.2.1511, all of which are already there) 2. When will it be done? a. Short Answer: No idea :) (when it is done!) b. Long Answer: We normally have CR out 7-14 days after a RHEL-7 release. We normally have the full tree and ISOs out 14-28 days after the CR is out. Complicating this particular release, we have our annual CentOS Board Meeting (face to face) in Paris next week and I get on airplane(s) from Texas to Paris on Monday 9/7/2016, so there will be one full wasted day there. Obviously the rest of the team will also be traveling to the meeting as well. I will try to tweet updates (@JohnnyCentOS) and post updates here throughout the build period. Currently we are building gcc/glibc and modifying the packages that need mods and calculating the build order for the SRPM package set. There seem to be 602 SRPMs that need to be rebuilt on first look. Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos/attachments/20161104/27367865/attachment.sig>
On Fri, Nov 4, 2016 at 8:59 AM, Johnny Hughes <johnny at centos.org> wrote:> On 11/04/2016 04:38 AM, James Hogarth wrote: > > As a heads up RHEL 7.3 is released: > > <snip> > > 1. Is CentOS-7.3 done yet? Answer: NO! > > And it is NOT CentOS-7.3 .. it is CentOS-7 (1611) based on RHEL-7.3 > Sources. The main tree will be labeled '7.3.1611' on the mirrors (along > side 7.0.1406 and 7.1.1503, and 7.2.1511, all of which are already there) > >Obligatory objection to this version numbering scheme: Deviating from RHEL in such a basic way is crazy, dumb, stupid, annoying, wrong, etc, etc. There, done. 2. When will it be done?> a. Short Answer: No idea :) (when it is done!) > > b. Long Answer: We normally have CR out 7-14 days after a RHEL-7 > release. We normally have the full tree and ISOs out 14-28 days after > the CR is out. > > Complicating this particular release, we have our annual CentOS Board > Meeting (face to face) in Paris next week and I get on airplane(s) from > Texas to Paris on Monday 9/7/2016, so there will be one full wasted day > there. Obviously the rest of the team will also be traveling to the > meeting as well. > > I will try to tweet updates (@JohnnyCentOS) and post updates here > throughout the build period. > > Currently we are building gcc/glibc and modifying the packages that need > mods and calculating the build order for the SRPM package set. There > seem to be 602 SRPMs that need to be rebuilt on first look. > > Thanks, > Johnny Hughes > > > > > > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos > >-- Matt Phelps System Administrator, Computation Facility Harvard - Smithsonian Center for Astrophysics mphelps at cfa.harvard.edu, http://www.cfa.harvard.edu
On 11/04/2016 07:59 AM, Johnny Hughes wrote:> On 11/04/2016 04:38 AM, James Hogarth wrote: >> As a heads up RHEL 7.3 is released: > > <snip> > > I will try to tweet updates (@JohnnyCentOS) and post updates here > throughout the build period. >Latest Update Tweet is: http://bit.ly/2eLVO3i First pass through on CentOS7 (1611) build: 559 SRPMs, 419 good, 140 need work. Build results as we progress: http://bit.ly/2fsB95Q Getting back at it. Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos/attachments/20161106/0d32bf60/attachment-0001.sig>