Oracle has released Solaris 11.4.81 CBE (Common Build Environment), a variant of the Solaris 11.4 operating system aimed at open source developers and personal use. CBE simplifies access to current versions of programs and updates for those who want to use Solaris for free. This is the second release of the CBE series - the first was published in 2022. Unlike the main Solaris 11.4 builds, the license for which allows free use for testing, development and use in personal projects, the CBE edition is distinguished by the use of a continuous publication model for new versions and is close to the Solaris 11.4 SRU (Support Repository Update) edition.
The build includes new versions of programs, extended functionality and bug fixes available at the time of the release. A separate iso image has been prepared for download, and the ability to switch to using CBE after installing regular Oracle Solaris 11.4 builds is provided. To switch to CBE, simply connect the pkg.oracle.com/solaris/release repository in the IPS package manager and run the "pkg update" command. The code for the open Solaris components is available in the GitHub repository, and individual packages can be downloaded from pkg.oracle.com.
Key changes from the previous CBE release:
- The desktop environment has been updated to GNOME 45 (previously GNOME 3.38). Cosmetic changes have been made to the interface, such as replacing the "Activities" indicator on the desktop with an indicator. virtual desktopsThe X server has been updated to version 1.20. New NVIDIA graphics driver versions 470.182 have been added.
- The implementation of the mDNS protocol (Multicast DNS/Zeroconf) has been replaced by the Avahi 0.8 package. Previously, a Solaris-specific port of Apple's Bonjour software was used.
- The system environment for the Python language is marked as self-managed (PEP 668), which prevents the use of pip and similar utilities to install additional Python libraries into the directories that contain the Python libraries included with Solaris. To install additional Python packages in an environment separate from the system environment, it is recommended to use the pipx utility.
- Added support for preadv and pwritev system calls for reading and writing data using multiple buffers. New functions getpeereid, getumask, mremap, core_get_process_content, core_set_process_content, core_get_process_path, core_set_process_path and ucred_getprinc were added to libc. The IOV_MAX value (the allowed number of iovec array elements for one call) was increased from 16 to 1024.
- Added Unicode 8 support to u8_strcmp and u14_textprep_str functions.
- In lastlog, utmpx and wtmpx, the problem of 2038 has been solved - the time addressed by the counter has been extended to 2106.
- Added the ability to define settings Server SSH is now split into separate /etc/ssh/sshd_config.d/*.conf files. The OpenSSH package has been updated to version 9.6. Support for SHA-1-based RSA signatures has been disabled. The scp utility has been switched to SFTP.
- The "-I" option has been added to the ps utility to display the time in ISO 8601 format.
- Support for separating standard kernel modules shipped with Solaris from separately installed modules has been added to the modinfo utility. Added "-x" option to show only non-system modules.
- The ctfconvert, ctfdump and ctfmerge utilities have been added to the main package for working with debug data in the CTF (Compact Type Format) format, which provides compact storage of information about C-types, relationships between functions and debug symbols. CTF support is built into the ld linker. Support for CTF version 3 has been added. The capabilities of the elfcompress, ldiostat and strip utilities have been expanded.
- The ACT (Autonomous Crash dump Tool) process is enabled by default, simplifying the analysis of kernel crashes. Additional paths for searching kernel crash dumps have been added to the mdb debugger. The diagnostic capabilities of the iostat utility have been expanded.
- The cp and mv utilities have been given the "-S" flag to flush buffers to disk using the fsync system call.
- The /dev/full device has been implemented, which returns zeros when reading, and an error code about no free space (ENOSPC) when writing.
- ZFS now supports file retention for a certain period of time. The ".zfs/clone" directory is used to mount clones in clonedir mode in ZFS. The "-r" option has been added to the mount/unmount commands to mount/unmount all file systems within the specified mount point. The "zfs send" command now has the "-w crypto" mode, which transfers encrypted data without decryption. Swap and dump partition settings have been moved from /etc/vfstab and /etc/dumpadm.conf to ZFS properties.
- Added the memory-reserve service, which allows you to reserve memory during boot using the MRP (Memory Reservation Pool) mechanism for subsequent use in OSM (Object Storage Manager).
- Added support for live migration of isolated Kernel Zone (KZ) environments. The zoneadm utility now has a "log" command for viewing the contents of logs associated with a specific isolated zone.
- Added Ansible package for centralized configuration management.
- Updated versions of programs for developers: GCC 14, LLVM 19, Go 1.23.5, JDK 1.8.0_441-b7, Node.js 20, Perl 5.38, PHP 8.4, Python 3.13, Ruby 3.13, Rust 1.78, autoconf 2.71, cmake 3.24, GNU make 4.4.1, meson 1.5.2, git 2.48.1, Mercurial 6.8, subversion 1.14.5, vim 9.1, GDB 15.1, ImageMagick 7, MySQL 8.4.
- Updated versions of GRUB 2.12, Shim 15.8, CUPS 2.4.11, OpenLDAP 2.6, Samba 4.21.3, Puppet 7.27.0.
- Added package with Unbound DNS server.
- The libraries included are zstd, pcaudiolib, bdw-gc, libadwaita, fmt, gcr-4, libpaper, libsoup-3, libuv, libyaml, espeak-ng, and libxcvt.
- Instead of Snort, it is proposed to use the Suricata system for detecting and preventing network intrusions (Snort 3 uses LuaJIT, which does not support SPARC CPUs).
- Removed libraries gtk2, clutter, webkitgtk4, aalib, gtkmm, cogl, libtorrent.
- OpenSSL versions 1.0.2 and 1.1 have been removed, and the transition to OpenSSL 3 has been made.
Source: opennet.ru
