OmniOS r151014

Please use pkg update to insure your LTS bits are at the latest version. We will not backport a lot, but because it’s Long-Term, we will not just let it languish either.

NOTE: OpenSSH can now be used as the system’s default SSH daemon. New installs of r151014 will install OpenSSH by default. To switch from SunSSH to OpenSSH, run the following:

# /usr/bin/pkg install --no-backup-be --reject pkg:/network/ssh --reject pkg:/network/ssh/ssh-key --reject pkg:/service/network/ssh pkg:/network/openssh pkg:/network/openssh-server

To switch from OpenSSH back to SunSSH:

# /usr/bin/pkg install --no-backup-be --reject pkg:/network/openssh --reject pkg:/network/openssh-server pkg:/network/ssh pkg:/network/ssh/ssh-key pkg:/service/network/ssh

IMPORTANT NOTE: Switching from SunSSH to OpenSSH will require commenting-out MaxAuthTriesLog and RhostsAuthentication options in /etc/ssh/sshd_config. Also, both ListenAddress directives MUST be commented out (SunSSH has one uncommented by default). The OpenSSH package will deliver a /etc/ssh/sshd_config.new file to consult. This file is the recommended default configuration.

IMPORTANT NOTE 2 (Thanks Andy Fiddaman): To continue allowing connections from SunSSH, please add the following to /etc/ssh/sshd_config:

KexAlgorithms +diffie-hellman-group1-sha1

If you have ssh service entries in /etc/pam.conf you may need to update them. For example, Andy needed to s/sshd-kbdint/sshd/ to re-enable their two-factor authentication.

March 1 2017 Update

illumos-omnios branch r151014 at 2fb9a48

uname -v/uname -a shows omnios-2fb9a48

HP Gen9 sudden-reboot fix with the Broadcom NIC (bge)
i40e now uses multiple receive and transmit rings, for better per-flow performance
Small bugfixes in NFS, ZFS, NVMe, and LSI HBA support (mpt_sas)

December 31 2016 Update

illumos-omnios branch r151014 at 280c743

uname -a shows omnios-280c743

Chelsio Terminator T5 NIC support
Security and reliability updates to procfs and tmpfs

October 27 2016 Update

illumos-omnios branch r151014 at cac2b76

uname -a shows omnios-cac2b76

Kaby Lake I219 support
NVMe support for some NVMe 1.1 devices
Expat to v2.2 (security fix)
Critical kernel fixes backported from illumos-gate

August 3 2016 Update

illumos-omnios branch r151014 at 798601a

uname -a shows omnios-b13298f (driver update only)

ixgbe updated to support X550
New i40e driver supports Intel XL710 4x10GigE or 40GigE boards

June 6 2016 Update

illumos-omnios branch r151014 at b13298f

uname -a shows omnios-b13298f

libxml update to 2.9.4
DTrace stability fixes (illumos 7033-7035)
setid binaries disallow ld.so.1’s $ORIGIN (illumos 6987)
ZFS no longer bleeds zvol entries into non-global zones (illumos 7019,7020)
NTP to 4.2.8p8
expat to 2.1.1 (with CVE 2016-0718 fix)
missing MCFG table should lead to I/O PCIe config access (illumos 6859)
allow sendfile() on AF_UNIX sockets (illumos 6861)
ZFS-helper: kernel virtual memory fragmentation leads to hang (illumos 6914)
STMF kstat free is using an improper size for kmem_free(). (illumos 6938)
Driver support for Solarflare 10G and 40G ethernet
Timezone, USB, and PCI data files updates. (Now matches r151018)
Driver support for vmxnet3s
MSI-X support fixed for virtio
The pkg(5) variant is now available as of this update. See the r151018 Release Notes for details on how to create a DEBUG-kernel alternate boot environment

April 21 2016 Update

illumos-omnios branch r151014 at aab7656

uname -a shows omnios-aab7656

ZFS fixes for Samba & SMB sharers (illumos 6841-6843)
Better support for modern hardware, esp. HP Gen 9 (illumos 6806-6807)
More HP Gen 9 SmartArray controllers (illumos 6760)
Intel I219 and updates to Intel GigE common code (illumos 6666-6667)
Git update to 2.8.0
OpenSSH 7.2p2 fixes for GSSAPI key exchange
OpenSSH now installed on new installs.

February 4 2016 Update

illumos-omnios branch r151014 at c91bcdf

uname -a shows omnios-c91bcdf

ZFS receive now covers refquota-on-receive overage (illumos 6562)
DTrace robustness update

December 16th Update

illumos-omnios branch r151014 at d0a4f2e

uname -a shows omnios-d0a4f2e

BIND security update to 9.10.3-P2
ZFS receives now replication streams with a refquota even if older snapshots exceed it (illumos 4986). Includes new ZFS Test Suite test
OpenSSH now integrates with the illumos audit subsystem. Thanks to Joyent, and this is part of getting OpenSSH to match SunSSH’s integrated functionality
NVMe bugfixes (illumos 6466 and 6467)

November 12 2015 Update

illumos-omnios branch r151014 at 5ba982d

uname -a shows omnios-8322307 (NOTE: The discrepency is because the tip of the branch contains a single-package change, not enough to respin illumos.)

OpenSSH updated to 7.1p1, including the r151016 method of switching between OpenSSH or SunSSH. PLEASE READ THE r151016 notes on OpenSSH & SunSSH
Git updated to 2.6.1
tmux updated to 2.0
illumos 6439 (handles KVM guests better)
KVM updates
Hans Rosenfeld’s blkdev series of fixes (illumos 6299-6305)
LSI Fury support
TCP timestamping behavior fix (illumos 5850)
uuidgen(1M) now available
HW data update to match r151016.
Several small ZFS fixes (illumos 5219,6288,6267,6367,6319,6385,6334,6386)
Aggregates no longer attempt to use downed links (illumos 6274)
glob(3c) now properly deals with large-file 32-bit binaries (you may need to locally recompile your custom 32-bit apps)
Zoneinfo update to 2015g
ilbd memory leak plug