Solaris 10 Just Got Better
Solaris 10 11/06 is available - well almost. The final build has been confirmed, the press got to hear about it two days ago, and the downloads will be available sometime on 11 December 2006.
So what's so special about Solaris 10 11/06, well let me highlight some of the cool new features:
- Solaris Trusted Extensions: Now you can enforce strict access controls to your data based upon its sensitivity, not just its ownership, without any modification to your applications or filesystems.
- Secure By Default - Limited Networking Profile: By default, less network services will be running. Those that are running will be configured to only allow access from the local host by default.
- Sun Java Desktop System Configuration Manager: A centralised policy distribution and enforcement mechanism for the Java Desktop System included in Solaris which also includes support for offline/mobile workers.
- Network Layer 7 Cache: NL7C implements HTTP cache for Web sites
in the Solaris kernel utilizing the advancements in the Solaris 10 IP
Stack, without requiring any modification of your applications. NL7C is backwards compatible with Sun's previous Network Cache and Acceleration (NCA) project. - Zone Renaming, Cloning and Moving: You've been playing with Zones for some time now, but now you can rename, clone (make a copy of) and move (dirs and to a different host) your zones.
- Configurable Zone Privileges: A limited set of privileges can be applied to zones now, including limited access to certain Global Zone resources, such as devices, or even extremely limited access to the overall system.
- ZFS File System Enhancements: ZFS gets a speed boost and new functionality in the form of Hot Spares, RAIDZ2 (a.k.a RAID-6), Clone Promotion, and Fast snapshots.
- ACL Support in JDS: Nautilus can now display and set Access Control Lists for the UFS file system. ZFS and NFSv4 coming soon.
- SNIA Multipath Management API Support: Allows multipathing management applications to use the common set of APIs across vendor-unique multipathing solutions on Solaris.
- File-System Monitoring Tool: The new
fsstat
command allows for quick reporting on important health and throughput statistics of your file systems by filesystem type or mount point. - Logical Domains for CoolThreads(TM) servers: Now this is cool and exciting stuff for the UltraSPARC(R) T1 systems; new server virtualization and
partitioning technology allowing you to subdivide resources (CPUs, memory, I/O and storage) into partitions, known as Logical or Virtual Domains (LDOM/VDOM).
A couple of quick facts about LDOMs:
- Supports up to 32 Logical Domains per system
- Each guest domain can be created, destroyed, reconfigured, and rebooted independently
- Provides virtual console, Ethernet, disk, and cryptographic acceleration
- Enables live dynamic reconfiguration of virtual CPUs
- Offers Predictive Self Healing capability for each Logical Domain
Oh and before you ask what's the difference between LDOMs and Zones, well here's an official explanation:
Logical Domains and Solaris Containers handle virtualization at different complementary levels and so can be run together to address customer requirements to consolidate application, OS and server. Logical Domains is the server virtualization and partitioning technology that allows customers to run multiple OS instances on a single CoolThreads server; while Solaris Containers is an OS virtualization feature in Solaris 10, it isolates software applications and services using flexible, software-defined boundaries, which enables customers to create many private execution environments within a single instance of the Solaris OS.
- Java Enterprise Server Updates: Sun Java System Application Server Platform Edition 8.2 and Sun Java System Message Queue Platform Edition 3.7
There you have it. Of course there will be the usual bug fixes and minor RFEs included.