Asianux 1.0 - RELEASE NOTES version 1.1
0. Contents-------------------------------------------------------------
The contents of this file is as followings.
1. Overview of Features
2. Components
3. EFI boot manager
4. General Notes
5. Restrictions/Known Bugs
6. Feedback
7. Copyright
8. Details of Features
-------------------------------------------------------------
1. Overview of Features
-------------------------------------------------------------
Asianux 1.0 has the following features.
o Reliability and Scalability
- Journaling File System: ext3, reiserFS, and XFS
- Hugetlbpage
- Asynchronous I/O
- Improved I/O processing
o Serviceability
- Improved profiling function - Oprofile
o Manageability
- Red Flag Powerful Control Panel and Management Tools
- Logical Volume Manager
o For Edge Server
- Mail: MTA changing system, SMTP Auth, SPAM Assassin
- Web DB: php-oracle, php-mysql, php-pgsql
- Samba: Samba3.0 with internationalization function
- Install only necessary components for business system
o Language
- Support Chinese, Japanese, and English,
o For Chinese
- GB18030 support
- Provide high quility chinese fonts,
enhanced chinese printing and input method
o For Japanese
- SJIS support for migrating from Unix
- User Defined Characters support in Japanese environment
o For Network/Security
- Enhanced Networking: IPV6, NFS over TCP
- Enhanced Security: ACL
o For Oracle
- OraNavi: Oracle Install Navigator
easy installation without any patch and changes
- Tuned-up system parameter for Oracle
- PHP-Oracle connectivity
- 9iR2 and 10g certification
o Standards
- LSB1.3 compliant
- Li18N compliant
- I32EL validation
o Hardware Compatibility
- Support Intel Itanium2 Server.
o Software Compatibility
- Hundreds ISV partners, including mainstream DB,
Middleware, backup and other enterprise server application.
Certification is on-going.
o Compatibility with other Linux
- Same run-time environment and kernel symbols with RHEL3,
binary drivers for RHEL3 can be used directly.
-------------------------------------------------------------
2. Components
-------------------------------------------------------------
- kernel 2.4.21
- glibc 2.3.2
- gcc 3.2.3
- XFree86 4.3.0
- rpm 4.2.1
- KDE 3.1
- openssh 3.6.1p2
- bind 9.2.2
- dhcp 3.0pl2
- openldap 2.1.25
- postfix 2.0.16
- sendmail 8.12.11
- proftpd 1.2.9
- squid 2.5.STABLE3
- Apache 2.0.46
- PHP 4.3.3
- MySQL 3.23.58
- PostgreSQL 7.4.2
- Samba 3.0.5
- ntp 4.1.2
- net-snmp 5.1
- iptables 1.2.8
- Perl 5.8.0
- Ruby 1.6.8
- OraNavi 10.1
-------------------------------------------------------------
3. EFI boot manager
-------------------------------------------------------------
Under initial setting of Itanium system, once you boot the system,
EFI boot manager will come up.
The follwing describes about EFI boot manager:
--------------------------------------------------------------------
EFI Boot Manager ver 1.02[12.38]
Please select a boot option
Acpi(PNP0A03,0)/Pci(5|0)/Mac(nnnnnnnnnnnn)
EFI Shell [Built-in]
Boot option maintenance menu
Use ? and ? to change option(s). Use Enter to select an option
--------------------------------------------------------------------
Use cursor key and select "EFI Shell [Built-in]", and press enter key.
Then EFI shell will be invoked and the deveice map will be displayed.
--------------------------------------------------------------------
Loading : EFI Shell [Build-in]
EFI Shell version 1.02 [12.38]
Device mapping table
fs0 :Acpi(PNP0A03,1)/Pci(3|0)/Scsi(Pun0,Lun0)/HD(Part1,Sig743D0800)
fs1 :VenHw(Unknown Device:9F)/CDROM(Entry1)
blk0 :VenHw(Unknown Device:00)
blk1 :Acpi(PNP0A03,1)/Pio(3|0)/Scsi(Pun0,Lun0)
...
Shell> _
--------------------------------------------------------------------
Generally, since CD-ROM drive is set to "fs1", LS-120 drive is set to
"fs0", please type "fs1" and enter return key if you would like to
boot by CD-ROM device.
- To display "Device mapping table", type "map" on shell prompt ane
press return key.
- You can use some utilities on EFI shell. The details about EFI,
please refer the following:
http://developer.intel.com/technology/efi/index.htm
- About EFI device mapping table, please refer the following page:
http://developer.intel.com/software/idap/tech/video/efi/efi_shell_3.htm
-------------------------------------------------------------
4. General Notes
-------------------------------------------------------------
o `root` cannot login using ssh. To enable it, please follow the
instructions below:
- change the value `PermitRootLogin` in /etc/ssh/sshd_config file to
`yes`.
PermitRootLogin yes
- restart sshd like:
# service sshd restart
o To enable nfs server/nfs client, start portmap service first.
# service portmap start
o How to change Japanese character encoding.
Create ~/.i18n file and set any of following values:
LANG=ja_JP.eucJP # for euc-jp environment
LANG=ja_JP.SJIS # for Shift JIS environment
LANG=ja_JP.UTF-8 # for UTF-8 environment
o To input Japanese, please do the followings:
- on ja_JP.eucJP/ja_JP.SJIS
# chkconfig canna on
# service canna start
- on ja_JP.UTF-8
# chkconfig canna on
# service canna start
# chkconfig IIim on
# service IIim start
o To receive email to root account, modify root`s alias in
/etc/postfix/aliases.
o To change the default MTA to sendmail:
- Make sure whether postfix is running or not.
# service postfix stop
- Choose the default MTA by alternatives command.
# alternatives --config mta
- Run sendmail service.
# service sendmail start
-------------------------------------------------------------
5. Restrictions/Known Bugs
-------------------------------------------------------------
o man command cannot display the manual properly on ja_JP.UTF-8 and
ja_JP.SJIS environment.
o When installing Asianux on NEC Express5800/420Ma, if CD-ROM is plugged
in, make sure USB FDD is also plugged in.
o It is not recommended that making XFS partition on Software RAID.
o Before re-installing Asianux on the existing system, make sure root
partition is to be formatted.
o Before installing Asianux on the existing system, make sure the all
LVM partition has completely removed.
o OraNavi invokes Oracle Universal Installer in English mode on Chinese
locale.
-------------------------------------------------------------
6. Feedback
-------------------------------------------------------------
We are always trying to improve Asianux.
Therefore, we would like to know what you think in using it.
If you have any comments or suggestions about Asianux,
please send them to the following e-mail address.
-------------------------------------------------------------
7. Copyright
-------------------------------------------------------------
Copyright 2004 MIRACLE LINUX CORPORATION and
Red Flag Software CO., Ltd.
All rights reserved.
-------------------------------------------------------------
8. Details of Features
-------------------------------------------------------------
[Reliability and Scalability]
o Improved process scheduler
O(1) scheduler (including Hyper-Threading optimization)
Asianux 1.0 includes the O(1) scheduler, that has a lot of good features
and is therefore the scheduler of the official v2.6 Linux kernel. It
provides low overhead and good performance with large number of tasks
and/or CPUs. In addition, Asianux 1.0 kernel includes Hyper-Threading
optimization, which improves task processing on the machines powered by
HT Technology processors like Intel(R) Pentium 4(R).
o Native Posix Thread Library(NPTL)
Asianux adopts NPTL. It increases performance of processing multi-thread,
so Java applications takes this benefit very well.
NPTL has full implementation of POSIX thread.
It is based on a 1:1 threading model, and it does not need manager thread
which old linux thread library needs.
o Journaling File System: ext3, reiserFS, and XFS
Asianux supports 3 kinds of journaling file system,
such as ext3, reiserFS, and XFS. Especially, XFS has much scalability
at large scale system.
o Hugetlbpage
Asianux has Hugetlbpage support. You can use 4M (2M in PAE mode) page
sizes, so that your system can reduce TLB overhead. You can use the
Hugetlbpage by either using the mmap system call or SYSV shared memory
system call. This function benefits large scale aplications,
such as database etc.
[Serviceability]
o Improved profiling function - Oprofile
OProfile is a system-wide profiler for Linux systems,
capable of profiling all running code at low overhead.
All code is profiled: hardware and software interrupt handlers,
kernel modules, the kernel, shared libraries, and applications.
[Manageability]
o Red Flag Powerful Control Panel and Management Tools
Red Flag Control Panel and 20+ System Management Tools,
all GUI-based and easy to use.
- Background Settings
- Windows Decoration Settings
- Color Theme Settings
- Desktop Settings
- Font Settings
- Icon Settings
- Date and Time Settings
- Font Installer
- Display Card Configuration
- Power Management
- Keyboard Configuration
- Disk Space Viewer
- Desktop Menu Editor
- Keyboard Shortcut Configuration
- Boot Configuration
- Printer Configuration
- Mouse Configuration
- Network Configuration
- Input Method Configuration
- Software Package Management
- Task Schedular
- System Log Viewer
- Performance Monitor
- System Information Viewer
- Service Configuration
- User Management
o Logical Volume Manager(LVM)
Asianux1.0 provides Logical Volume Manager(LVM).
LVM improve a flexibility of storage management and it reduces
influence which the attach or change of disk devices have to the system.
The system administrator can set up LVM in installation or
after installation.
[For Edge Server]
o MTA enhancement: MTA switch tool
asianux-switch-mail is the Mail Transport Agent Switcher for Asianux.
It enables users to easily switch between various Mail Transport Agent
that they have installed.
o MTA enhancement: SMTP Auth
SASL is the Simple Authentication and Security Layer, which provides
SMTP Auth for some MTA(ext. Postfix, Sendmail).
Please refer to sample config files of used MTA to use SMTP AUTH.
o MTA enhancement: SpamAssasin
SpamAssassin provides you with a way to reduce if not completely
eliminate Unsolicited Commercial Email (SPAM) from your incoming email.
It can be invoked by a MTA such as sendmail or postfix, or can be called
from a procmail s-cript, .forward file, etc.
It uses a genetic-algorithm evolved scoring system to identify messages
which look spammy, then adds headers to the message so they can be
filtered by the user`s mail reading software.
This distribution includes the spamd/spamc components which create a
server that considerably speeds processing of mail.
To enable spamassassin, if you are receiving mail locally, simply add
this line to your ~/.procmailrc:
INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc
To filter spam for all users, add that line to /etc/procmailrc
(creating if necessary).
o Web DB enhancement: PHP
PHP is an HTML-embedded s-cripting language. PHP attempts to make it
easy for developers to write dynamically generated webpages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI s-cripts. The
mod_php module enables the Apache Web server to understand and process
the embedded PHP language in Web pages.
o Web DB enhancement: php-mysql
The php-mysql package contains a dynamic shared object that will add
MySQL database support to PHP. MySQL is an object-relational database
management system. If you need MySQL support for PHP applications,
you will need to install this package and the php or mod_php package.
o Web DB enhancement: php-pgsq
The php-pgsql package includes a dynamic shared object (DSO) that can
be compiled in to the Apache Web server to add PostgreSQL database
support to PHP. If you need back-end support for
PostgreSQL, you should install this package in addition to the main
php package.
o Web DB enhancement: php-oci8
The php-oci8 package contains a dynamic shared object that will add
support for accessing OCI8 databases to PHP. If you need OracleDB
support for PHP, you should install this package in addition to the main
php package.
o Samba3.0 with internationalization function
Asianux1.0 includes Samba3.0 which is improved about internationalization.
And it provides a integrated user management environment
for Linux and Windows by Samba and OpenLDAP.
When a system administrator uses Asianux, it is more easy to unify
a Linux server and Windows Network seamlessly.
[For Japanese]
o SJIS support for migrating from Unix
Asianux1.0 provides SJIS locale in Japanese environment.
The SJIS locale is used on some UNIX systems.
When the system is set up for SJIS locale, the migration of a
application which is made for the SJIS environment is more easy.
In order to use SJIS locale, please set up a following line
to "/etc/sysconfig/i18n" or "$HOME/.i18n" file.
LANG=ja_JP.SJIS
o User Defined Characters support in Japanese environment
Asianux1.0 provides UTF-8 locale in Japanese environment.
When the UTF-8 locale is set up, it can use User-Defined Characters
by using Private Use Area of Unicode.
In order to use UTF-8 locale in Japanese environment, please set up a
following line to "/etc/sysconfig/i18n" or "$HOME/.i18n" file.
LANG=ja_JP.UTF-8
[For Network/Security]
o Enhanced Networking: IPV6
Asianux includes many IPv6 enabled applications.
A part of IPv6-enabled packages are as follows.
Package Package des-cription
--------------------------------------------------------------
httpd Apache HTTP server, version 2
bind A DNS (Domain Name System) server.
sendmail A widely used Mail Transport Agent (MTA).
imap Server daemons for IMAP and POP network mail
protocols.
proftpd ProFTPD -- Professional FTP Server.
xinetd A secure replacement for inetd.
tcp_wrappers A security tool which acts as a wrapper for TCP
daemons.
openldap The configuration files, libraries, and
documentation for OpenLDAP.
openssh The OpenSSH implementation of SSH protocol versions
1 and 2.
iptables-ipv6 IPv6 support for iptables.
ipsec-tools Tools for configuring and using IPSEC
krb5-server The server programs for Kerberos 5.
cyrus-sasl The Cyrus SASL library.
o Enhanced Networking: NFS over TCP
- Usually NFS is implemented with UDP. However, NFS over TCP is
implemented with TCP.
- It is faster than NFS over UDP when you use NFS at the network
environment where packet loss occurs often.
- Asianux NFS server support both protocol, TCP and UDP.
- Default NFS client of Asianux use UDP. If you would like to use
TCP, you should specify tcp parameter in option of mount command.
o Enhanced Security: ACL (Access Control Lists)
While the traditional user/group based access control offers a simple,
manageable ways of granting/rejecting accesses, it is not capable of
offering services in a scalable manner. The recent growth in demands
for providing more flexible mean of setting access controls has lead
to the development of a technology called ACL (Access Control Lists).
While the traditional user/group based access control offers a simple,
manageable ways of granting/rejecting accesses, it is not flexible and
powerful enough. Traditional Linux/Unix discretionary access control
can only assign read, write, and execute permissions to the owner,
the primary group to which the owner belongs, and a category for all
other users. It is not sufficient for large systems and networks where
files need to be shared by multiple groups or users. Addressing this
problem, Asianux provied a fine-grained form of discretionary access
control called access control lists (ACL),
which lets the owner assign specific permissions to specific users
and groups.
ACL is implemented as a sub-funtion of File Systems, and in Asianux 1.0
EXT2, EXT3 and XFS are the file systems which support it. With a
partition consist of EXT2 or EXT3, you do need to specify an "acl"
option when you are mounting it. On the other hand, a XFS partition
does not require an explicit option for ACL support, it is enabled
with default options.
# mount -t ext3 -o "rw,acl" /dev/sdb1 /export
If you want to mount a device with ACL support enabled at start-up, you
need to add "acl" entry in the option field of /etc/fstab.
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/sda2 / ext2 errors=remount-ro,acl 0 1
/dev/sdb1 /export ext3 rw,acl 2 2
You can execute "setfacl" command for setting access controls to files
and directories, and "getfacl" command is available for retrieving
the current controls set to a file/directory. More precise information
regarding each command can be found in their man pages.
[For Oracle]
o OraNavi: Install Navigator for Oracle
Installation work of Oracle is dramatically simplified using this
graphical interface "Install Navigator for Oracle".
o Tuned-up system parameter for Oracle
The kernel parameters are pre-configured for Oracle products.
o PHP-Oracle connectivity
The PHP module compiled for Oracle Database is contained.
To use this module, you can connect Oracle Database even if no need
to compile it.
#############################################################
