SlideShare ist ein Scribd-Unternehmen logo
1 von 28
Downloaden Sie, um offline zu lesen
TECHNICAL INTRODUCTION TO RHEL 8
Michael Lessard
Senior Solutions Architect
January 2019
https://twitter.com/michaellessard
https://www.twitch.tv/michaellessard
RHEL 8 - TECHNICAL INTRODUCTION
2
AGENDA
★ What’s new - Overview
★ Where to get RHEL 8 beta ?
★ System management with Cockpit
★ What is new in package management ?
★ Container technologies : Podman, Buildah and Skopeo
★ Build your own RHEL images with Image Builder
★ Centralized user session recording with System recorder (tlog)
:: WHAT’S NEW ?
RHEL 8 - TECHNICAL INTRODUCTION
4
WHAT’S NEW IN RHEL 8 ?
● Cockpit improvements
● YUM 4 , Application stream and Flatpak
● Python 3.6 (**note on Ansible, 2.8+)
● Kernel 4.18 (RHEL 7 : Kernel 3.10)
○ 5-level page table (up to 4 PB ram)
○ New tcp stack
■ Tcp bbr congestion control
● Nvdimm storage support
● Containers : Podman, Buildah and Skopeo
● Composer
● System purpose
● Wayland
● Stratis
● Leapp
● New patches schedule
● And more ... (we are still in beta)
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8-beta/html/8.0_beta_release_notes/
:: WHERE TO GET RHEL 8 BETA ?
RHEL 8 - TECHNICAL INTRODUCTION
6
WHERE TO GET RHEL 8 BETA ?
● Customer portal
https://access.redhat.com/products/red-hat-enterprise-linux/beta
○ ISO and KVM images
■ X86_64
■ Ppc64le
■ aarch64 (raspberry pi 3+)
■ S390x
● Developer program: https://developers.redhat.com/rhel8/getrhel8/
○ VirtualBox image https://developers.redhat.com/rhel8/install-rhel8-vbox/
○ Gnome Boxes (v3.30.2+)
:: SYSTEM MANAGEMENT WITH
COCKPIT
RHEL 8 - TECHNICAL INTRODUCTION
8
COCKPIT
● IDM - idm domain admin can manage Cockpit
● Integration with PCP to activate metric persistence !
● Manage remote server via dashboard (7.6 +)
● New Subscription manager gui
● Tlog (session recorder) gui
● Composer - gui
● Virt manager replacement (8.1+)
● NBDE (8.1+)
Cockpit is an interactive server admin interface (https://cockpit-project.org/)
** https://github.com/cockpit-project/cockpit
:: WHAT IS NEW IN PACKAGE
MANAGEMENT ?
RHEL 8 - TECHNICAL INTRODUCTION
10
APPLICATION STREAM (Modularity)
https://developers.redhat.com/blog/2018/11/15/rhel8-introducing-appstreams/
RHEL 8 - TECHNICAL INTRODUCTION
11
MODULAR PACKAGE BUILDS
TRADITIONAL PACKAGE BUILDS
BUILDING SOFTWARE WITH MODULARITY
BUILDING AGAINST MULTIPLE VERSIONS
RHEL 8 - TECHNICAL INTRODUCTION
● RHEL 8 content is distributed through the two main repositories: BaseOS and Application
Stream (AppStream).
○ BaseOS
The BaseOS repository provides the
core set of the underlying OS content
in the form of traditional RPM
packages. Same lifecycle as RHEL 7
○ Application Stream
The Application Stream repository
provides content with varying life cycles
as both modules and traditional
packages.
// DEMO
# yum module list
# yum module list postgresql
# yum module info postgresql
# yum module info postgresql:9.6
# yum module info postgresql:9.6 -v
# yum -y module install postgresql:9.6
# yum module list --enabled
# /usr/bin/postgresql-setup --initdb
# systemctl start postgresql
# psql --version
# yum -y module install postgresql:10
# yum -y module install postgresql/client
12
APPLICATION STREAM
Provides modularity to package management
RHEL 8 - TECHNICAL INTRODUCTION
SCLs use a different method of packaging allowing for multiple versions of the same piece of
software to be installed on one system, by putting them into separate namespaced paths.
Modularity on the other hand uses standard RPM packaging — so things are where you
expect them to be — but you can only install one version at a time.
SCLs have proven to be hard to maintain and hard to use (Special macros in spec files,
package name mangling, running 'scl enable' in order to make them visible). And the ability to
install multiple versions in parallel has turned out not to be a common use case. The real
benefit of SCLs was the ability to choose a specific version of software — and that’s exactly
what Modularity offers.
APPLICATION STREAM VS SCL
RHEL 8 - TECHNICAL INTRODUCTION
14
FLATPAK
Flatpak is a next-generation technology for building and distributing desktop applications on Linux
//DEMO
# yum install flatpak
# flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
# flatpak install flathub com.spotify.Client
# flatpak list
# flatpak run com.spotify.Client
:: BUILD YOUR OWN RHEL IMAGES
WITH IMAGE BUILDER
RHEL 8 - TECHNICAL INTRODUCTION
16
IMAGE BUILDER
● Image Builder is a tool that enables users to create customized system images of Red Hat
Enterprise Linux.
○ Amazon, Azure, .img, .iso,
Openstack, qcow2, tar, and
VMware
● Image Builder functionality can be
accessed through a graphical user
interface in Cockpit, or with a
command line interface
in the composer-cli tool
https://weldr.io/
Ansible Playbook to setup image builder ::
https://github.com/michaellessard/ansible-rhel8/blob/master/composer.yaml
:: CONTAINER TECHNOLOGIES
RHEL 8 - TECHNICAL INTRODUCTION
RHEL 8 - TECHNICAL INTRODUCTION
19
Where is Docker ?
● In RHEL 8, no more Docker daemon
● But, you can still run/build docker images with the help of :
○ Buildah
○ Podman
○ Skopeo
● Not new in RHEL 8, but they are becoming the default container tools in RHEL 8 !
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8-beta/html/building_running_and_mana
ging_containers/
RHEL 8 - TECHNICAL INTRODUCTION
20
● The buildah utility replaced docker build as the preferred, maintained, and supported
container images build tool in Red Hat Enterprise Linux 8
● Images can be built in either the OCI image format or the traditional upstream docker image
format
● No daemon !
//DEMO
# container=$(buildah from fedora)
# echo $container
# buildah run $container bash
# exit
# buildah run $container -- dnf -y install screenfetch
# buildah run $container screenfetch
https://github.com/containers/buildah
Build Open Container Initiative (OCI) and Docker images
RHEL 8 - TECHNICAL INTRODUCTION
21
● Replaces docker push as the preferred, maintained and supported utility for moving
container images between registries, and container engines
● Can inspect a repository on a container registry without needlessly pulling the image.
● Can sign and verify container images
● Can delete container images from a remote container registry
● No daemon ! No root user required
SKOPEO
//DEMO
$ skopeo inspect docker://docker.io/fedora
$ mkdir fedora-29
$ skopeo copy docker://fedora:29 dir:fedora-29
$ tree fedora-29
fedora-24
├── 7c91a140e7a1025c3bc3aace4c80c0d9933ac4ee24b8630a6b0b5d8b9ce6b9d4.tar
├── f9873d530588316311ac1d3d15e95487b947f5d8b560e72bdd6eb73a7831b2c4.tar
└── manifest.json
0 directories, 3 files
https://github.com/containers/skopeo
Inspect, copy, and sign container images
RHEL 8 - TECHNICAL INTRODUCTION
22
● The podman container engine replaced docker as the preferred, maintained, and supported
container runtime of choice for Red Hat Enterprise Linux 8
● Podman provides a docker compatible command line experience enabling users to find, run,
build, and share containers
● Podman uses Buildah and Skopeo as libraries for the build and push
● No daemon !
//DEMO
# podman run -t -p 8000:80 nginx //than open a second terminal
# podman ps
# podman inspect -l | grep IPAddress":
# curl http://<IP_address> // or with firefox
# podman logs --latest
# podman top <container_id>
# podman stop --latest
# podman ps -a
# podman rm --latest
https://podman.io/
Run, manage, and debug containers
:: SYSTEM RECORDER - TLOG
RHEL 8 - TECHNICAL INTRODUCTION
24
SYSTEM RECORDER - TLOG
● Tlog is a terminal I/O recording and playback package
● implementing centralized user session recording.
● It logs everything that passes through as JSON messages to a logging service.
○ The primary purpose of logging in JSON format is to eventually deliver the recorded
data to a storage service such as Elasticsearch, where it can be searched and queried,
and from where it can be played back. At the same time, they retain all the passed
data and timing.
● Management through command line or Cockpit
//DEMO
# yum install cockpit-session-recording tlog
# tlog-rec --writer=journal
# usermod --shell /usr/bin/tlog-rec-session test
# ssh test@127.0.0.1
https://github.com/Scribery/tlog
THANK YOU !
plus.google.com/+RedHat
linkedin.com/company/red-hat
youtube.com/user/RedHatVideos
facebook.com/redhatinc
twitter.com/RedHatNews
:: EXTRA
RHEL 8 - TECHNICAL INTRODUCTION
During beta testing, kernel 4.18.0-1.el8.x86_64 in RHEL 8 supported close to 558.59 Kcps, a
13% improvement over RHEL 7.6, which is able to support 496.09 Kcps.
Not enable by default, to activate it :
TCP BBR CONGESTION CONTROL
Developed by Google, used on GCP
//DEMO
# sysctl net.ipv4.tcp_available_congestion_control
# vim /etc/sysctl.conf
net.core.default_qdisc=fq
net.ipv4.tcp_congestion_control=bbr
# sysctl -p
# sysctl net.ipv4.tcp_available_congestion_control
# sysctl net.ipv4.tcp_congestion_control
RHEL 8 - TECHNICAL INTRODUCTION
Stratis is a Linux local storage management tool that aims to enable easy use of advanced
storage features such as thin provisioning, snapshots, and pool-based management and
monitoring.
STRATIS
https://stratis-storage.github.io
//DEMO
# yum install stratis-cli stratisd
# systemctl start stratisd
# startis pool create mypool /dev/sdb
# stratis fs create mypool myfs1
# mkdir /mnt/strat1
# mount /stratis/mypool/myfs1 /mnt/strat1
# mount | grep mnt // XFS default filesystem

Weitere ähnliche Inhalte

Ähnlich wie RHEL8-BETA-RHUG.pdf

Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...
Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...
Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...Amazon Web Services
 
eXoer on the grill: eXo Add-ons factory using Docker and Codenvy
eXoer on the grill: eXo Add-ons factory using Docker and CodenvyeXoer on the grill: eXo Add-ons factory using Docker and Codenvy
eXoer on the grill: eXo Add-ons factory using Docker and CodenvyeXo Platform
 
Linux Containers and Docker SHARE.ORG Seattle 2015
Linux Containers and Docker SHARE.ORG Seattle 2015Linux Containers and Docker SHARE.ORG Seattle 2015
Linux Containers and Docker SHARE.ORG Seattle 2015Filipe Miranda
 
Technical Introduction to RHEL8
Technical Introduction to RHEL8Technical Introduction to RHEL8
Technical Introduction to RHEL8vidalinux
 
Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...
Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...
Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...Ambassador Labs
 
New Features Webinar-April
New Features Webinar-AprilNew Features Webinar-April
New Features Webinar-AprilCodefresh
 
OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...
OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...
OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...Mihai Criveti
 
Docker Meetup Paris: enterprise Docker
Docker Meetup Paris: enterprise DockerDocker Meetup Paris: enterprise Docker
Docker Meetup Paris: enterprise DockerArnaud MAZIN
 
Real-World Docker: 10 Things We've Learned
Real-World Docker: 10 Things We've Learned  Real-World Docker: 10 Things We've Learned
Real-World Docker: 10 Things We've Learned RightScale
 
Red Hat Forum Benelux 2015
Red Hat Forum Benelux 2015Red Hat Forum Benelux 2015
Red Hat Forum Benelux 2015Microsoft
 
AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...
AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...
AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...AWS Summits
 
Rejekts 24 EU No GitOps Pain, No Platform Gain
Rejekts 24 EU No GitOps Pain, No Platform GainRejekts 24 EU No GitOps Pain, No Platform Gain
Rejekts 24 EU No GitOps Pain, No Platform GainŁukasz Piątkowski
 
Import golang; struct microservice - Codemotion Rome 2015
Import golang; struct microservice - Codemotion Rome 2015Import golang; struct microservice - Codemotion Rome 2015
Import golang; struct microservice - Codemotion Rome 2015Giorgio Cefaro
 
OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...
OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...
OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...NETWAYS
 
OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...
OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...
OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...NETWAYS
 
Docker 102 - Immutable Infrastructure
Docker 102 - Immutable InfrastructureDocker 102 - Immutable Infrastructure
Docker 102 - Immutable InfrastructureAdrian Otto
 
Developing and Deploying PHP with Docker
Developing and Deploying PHP with DockerDeveloping and Deploying PHP with Docker
Developing and Deploying PHP with DockerPatrick Mizer
 
stackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Three
stackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Threestackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Three
stackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick ThreeNETWAYS
 
First Steps Developing Embedded Applications using Heterogeneous Multi-core P...
First Steps Developing Embedded Applications using Heterogeneous Multi-core P...First Steps Developing Embedded Applications using Heterogeneous Multi-core P...
First Steps Developing Embedded Applications using Heterogeneous Multi-core P...Toradex
 

Ähnlich wie RHEL8-BETA-RHUG.pdf (20)

Learning Docker with Thomas
Learning Docker with ThomasLearning Docker with Thomas
Learning Docker with Thomas
 
Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...
Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...
Why Users Are Moving on from Docker and Leaving Its Security Risks Behind (Sp...
 
eXoer on the grill: eXo Add-ons factory using Docker and Codenvy
eXoer on the grill: eXo Add-ons factory using Docker and CodenvyeXoer on the grill: eXo Add-ons factory using Docker and Codenvy
eXoer on the grill: eXo Add-ons factory using Docker and Codenvy
 
Linux Containers and Docker SHARE.ORG Seattle 2015
Linux Containers and Docker SHARE.ORG Seattle 2015Linux Containers and Docker SHARE.ORG Seattle 2015
Linux Containers and Docker SHARE.ORG Seattle 2015
 
Technical Introduction to RHEL8
Technical Introduction to RHEL8Technical Introduction to RHEL8
Technical Introduction to RHEL8
 
Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...
Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...
Velocity NYC 2017: Building Resilient Microservices with Kubernetes, Docker, ...
 
New Features Webinar-April
New Features Webinar-AprilNew Features Webinar-April
New Features Webinar-April
 
OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...
OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...
OpenShift Commons - Adopting Podman, Skopeo and Buildah for Building and Mana...
 
Docker Meetup Paris: enterprise Docker
Docker Meetup Paris: enterprise DockerDocker Meetup Paris: enterprise Docker
Docker Meetup Paris: enterprise Docker
 
Real-World Docker: 10 Things We've Learned
Real-World Docker: 10 Things We've Learned  Real-World Docker: 10 Things We've Learned
Real-World Docker: 10 Things We've Learned
 
Red Hat Forum Benelux 2015
Red Hat Forum Benelux 2015Red Hat Forum Benelux 2015
Red Hat Forum Benelux 2015
 
AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...
AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...
AWS Summit Singapore 2019 | Latest Trends for Cloud-Native Application Develo...
 
Rejekts 24 EU No GitOps Pain, No Platform Gain
Rejekts 24 EU No GitOps Pain, No Platform GainRejekts 24 EU No GitOps Pain, No Platform Gain
Rejekts 24 EU No GitOps Pain, No Platform Gain
 
Import golang; struct microservice - Codemotion Rome 2015
Import golang; struct microservice - Codemotion Rome 2015Import golang; struct microservice - Codemotion Rome 2015
Import golang; struct microservice - Codemotion Rome 2015
 
OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...
OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...
OSDC 2016 | rkt and Kubernetes: What’s new with Container Runtimes and Orches...
 
OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...
OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...
OSDC 2016 - rkt and Kubernentes what's new with Container Runtimes and Orches...
 
Docker 102 - Immutable Infrastructure
Docker 102 - Immutable InfrastructureDocker 102 - Immutable Infrastructure
Docker 102 - Immutable Infrastructure
 
Developing and Deploying PHP with Docker
Developing and Deploying PHP with DockerDeveloping and Deploying PHP with Docker
Developing and Deploying PHP with Docker
 
stackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Three
stackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Threestackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Three
stackconf 2022: Cluster Management: Heterogeneous, Lightweight, Safe. Pick Three
 
First Steps Developing Embedded Applications using Heterogeneous Multi-core P...
First Steps Developing Embedded Applications using Heterogeneous Multi-core P...First Steps Developing Embedded Applications using Heterogeneous Multi-core P...
First Steps Developing Embedded Applications using Heterogeneous Multi-core P...
 

Kürzlich hochgeladen

HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesBoston Institute of Analytics
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...apidays
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfhans926745
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024The Digital Insurer
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘RTylerCroy
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationRadu Cotescu
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityPrincipled Technologies
 

Kürzlich hochgeladen (20)

HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024Partners Life - Insurer Innovation Award 2024
Partners Life - Insurer Innovation Award 2024
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 

RHEL8-BETA-RHUG.pdf

  • 1. TECHNICAL INTRODUCTION TO RHEL 8 Michael Lessard Senior Solutions Architect January 2019 https://twitter.com/michaellessard https://www.twitch.tv/michaellessard
  • 2. RHEL 8 - TECHNICAL INTRODUCTION 2 AGENDA ★ What’s new - Overview ★ Where to get RHEL 8 beta ? ★ System management with Cockpit ★ What is new in package management ? ★ Container technologies : Podman, Buildah and Skopeo ★ Build your own RHEL images with Image Builder ★ Centralized user session recording with System recorder (tlog)
  • 4. RHEL 8 - TECHNICAL INTRODUCTION 4 WHAT’S NEW IN RHEL 8 ? ● Cockpit improvements ● YUM 4 , Application stream and Flatpak ● Python 3.6 (**note on Ansible, 2.8+) ● Kernel 4.18 (RHEL 7 : Kernel 3.10) ○ 5-level page table (up to 4 PB ram) ○ New tcp stack ■ Tcp bbr congestion control ● Nvdimm storage support ● Containers : Podman, Buildah and Skopeo ● Composer ● System purpose ● Wayland ● Stratis ● Leapp ● New patches schedule ● And more ... (we are still in beta) https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8-beta/html/8.0_beta_release_notes/
  • 5. :: WHERE TO GET RHEL 8 BETA ?
  • 6. RHEL 8 - TECHNICAL INTRODUCTION 6 WHERE TO GET RHEL 8 BETA ? ● Customer portal https://access.redhat.com/products/red-hat-enterprise-linux/beta ○ ISO and KVM images ■ X86_64 ■ Ppc64le ■ aarch64 (raspberry pi 3+) ■ S390x ● Developer program: https://developers.redhat.com/rhel8/getrhel8/ ○ VirtualBox image https://developers.redhat.com/rhel8/install-rhel8-vbox/ ○ Gnome Boxes (v3.30.2+)
  • 7. :: SYSTEM MANAGEMENT WITH COCKPIT
  • 8. RHEL 8 - TECHNICAL INTRODUCTION 8 COCKPIT ● IDM - idm domain admin can manage Cockpit ● Integration with PCP to activate metric persistence ! ● Manage remote server via dashboard (7.6 +) ● New Subscription manager gui ● Tlog (session recorder) gui ● Composer - gui ● Virt manager replacement (8.1+) ● NBDE (8.1+) Cockpit is an interactive server admin interface (https://cockpit-project.org/) ** https://github.com/cockpit-project/cockpit
  • 9. :: WHAT IS NEW IN PACKAGE MANAGEMENT ?
  • 10. RHEL 8 - TECHNICAL INTRODUCTION 10 APPLICATION STREAM (Modularity) https://developers.redhat.com/blog/2018/11/15/rhel8-introducing-appstreams/
  • 11. RHEL 8 - TECHNICAL INTRODUCTION 11 MODULAR PACKAGE BUILDS TRADITIONAL PACKAGE BUILDS BUILDING SOFTWARE WITH MODULARITY BUILDING AGAINST MULTIPLE VERSIONS
  • 12. RHEL 8 - TECHNICAL INTRODUCTION ● RHEL 8 content is distributed through the two main repositories: BaseOS and Application Stream (AppStream). ○ BaseOS The BaseOS repository provides the core set of the underlying OS content in the form of traditional RPM packages. Same lifecycle as RHEL 7 ○ Application Stream The Application Stream repository provides content with varying life cycles as both modules and traditional packages. // DEMO # yum module list # yum module list postgresql # yum module info postgresql # yum module info postgresql:9.6 # yum module info postgresql:9.6 -v # yum -y module install postgresql:9.6 # yum module list --enabled # /usr/bin/postgresql-setup --initdb # systemctl start postgresql # psql --version # yum -y module install postgresql:10 # yum -y module install postgresql/client 12 APPLICATION STREAM Provides modularity to package management
  • 13. RHEL 8 - TECHNICAL INTRODUCTION SCLs use a different method of packaging allowing for multiple versions of the same piece of software to be installed on one system, by putting them into separate namespaced paths. Modularity on the other hand uses standard RPM packaging — so things are where you expect them to be — but you can only install one version at a time. SCLs have proven to be hard to maintain and hard to use (Special macros in spec files, package name mangling, running 'scl enable' in order to make them visible). And the ability to install multiple versions in parallel has turned out not to be a common use case. The real benefit of SCLs was the ability to choose a specific version of software — and that’s exactly what Modularity offers. APPLICATION STREAM VS SCL
  • 14. RHEL 8 - TECHNICAL INTRODUCTION 14 FLATPAK Flatpak is a next-generation technology for building and distributing desktop applications on Linux //DEMO # yum install flatpak # flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo # flatpak install flathub com.spotify.Client # flatpak list # flatpak run com.spotify.Client
  • 15. :: BUILD YOUR OWN RHEL IMAGES WITH IMAGE BUILDER
  • 16. RHEL 8 - TECHNICAL INTRODUCTION 16 IMAGE BUILDER ● Image Builder is a tool that enables users to create customized system images of Red Hat Enterprise Linux. ○ Amazon, Azure, .img, .iso, Openstack, qcow2, tar, and VMware ● Image Builder functionality can be accessed through a graphical user interface in Cockpit, or with a command line interface in the composer-cli tool https://weldr.io/ Ansible Playbook to setup image builder :: https://github.com/michaellessard/ansible-rhel8/blob/master/composer.yaml
  • 18. RHEL 8 - TECHNICAL INTRODUCTION
  • 19. RHEL 8 - TECHNICAL INTRODUCTION 19 Where is Docker ? ● In RHEL 8, no more Docker daemon ● But, you can still run/build docker images with the help of : ○ Buildah ○ Podman ○ Skopeo ● Not new in RHEL 8, but they are becoming the default container tools in RHEL 8 ! https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8-beta/html/building_running_and_mana ging_containers/
  • 20. RHEL 8 - TECHNICAL INTRODUCTION 20 ● The buildah utility replaced docker build as the preferred, maintained, and supported container images build tool in Red Hat Enterprise Linux 8 ● Images can be built in either the OCI image format or the traditional upstream docker image format ● No daemon ! //DEMO # container=$(buildah from fedora) # echo $container # buildah run $container bash # exit # buildah run $container -- dnf -y install screenfetch # buildah run $container screenfetch https://github.com/containers/buildah Build Open Container Initiative (OCI) and Docker images
  • 21. RHEL 8 - TECHNICAL INTRODUCTION 21 ● Replaces docker push as the preferred, maintained and supported utility for moving container images between registries, and container engines ● Can inspect a repository on a container registry without needlessly pulling the image. ● Can sign and verify container images ● Can delete container images from a remote container registry ● No daemon ! No root user required SKOPEO //DEMO $ skopeo inspect docker://docker.io/fedora $ mkdir fedora-29 $ skopeo copy docker://fedora:29 dir:fedora-29 $ tree fedora-29 fedora-24 ├── 7c91a140e7a1025c3bc3aace4c80c0d9933ac4ee24b8630a6b0b5d8b9ce6b9d4.tar ├── f9873d530588316311ac1d3d15e95487b947f5d8b560e72bdd6eb73a7831b2c4.tar └── manifest.json 0 directories, 3 files https://github.com/containers/skopeo Inspect, copy, and sign container images
  • 22. RHEL 8 - TECHNICAL INTRODUCTION 22 ● The podman container engine replaced docker as the preferred, maintained, and supported container runtime of choice for Red Hat Enterprise Linux 8 ● Podman provides a docker compatible command line experience enabling users to find, run, build, and share containers ● Podman uses Buildah and Skopeo as libraries for the build and push ● No daemon ! //DEMO # podman run -t -p 8000:80 nginx //than open a second terminal # podman ps # podman inspect -l | grep IPAddress": # curl http://<IP_address> // or with firefox # podman logs --latest # podman top <container_id> # podman stop --latest # podman ps -a # podman rm --latest https://podman.io/ Run, manage, and debug containers
  • 24. RHEL 8 - TECHNICAL INTRODUCTION 24 SYSTEM RECORDER - TLOG ● Tlog is a terminal I/O recording and playback package ● implementing centralized user session recording. ● It logs everything that passes through as JSON messages to a logging service. ○ The primary purpose of logging in JSON format is to eventually deliver the recorded data to a storage service such as Elasticsearch, where it can be searched and queried, and from where it can be played back. At the same time, they retain all the passed data and timing. ● Management through command line or Cockpit //DEMO # yum install cockpit-session-recording tlog # tlog-rec --writer=journal # usermod --shell /usr/bin/tlog-rec-session test # ssh test@127.0.0.1 https://github.com/Scribery/tlog
  • 27. RHEL 8 - TECHNICAL INTRODUCTION During beta testing, kernel 4.18.0-1.el8.x86_64 in RHEL 8 supported close to 558.59 Kcps, a 13% improvement over RHEL 7.6, which is able to support 496.09 Kcps. Not enable by default, to activate it : TCP BBR CONGESTION CONTROL Developed by Google, used on GCP //DEMO # sysctl net.ipv4.tcp_available_congestion_control # vim /etc/sysctl.conf net.core.default_qdisc=fq net.ipv4.tcp_congestion_control=bbr # sysctl -p # sysctl net.ipv4.tcp_available_congestion_control # sysctl net.ipv4.tcp_congestion_control
  • 28. RHEL 8 - TECHNICAL INTRODUCTION Stratis is a Linux local storage management tool that aims to enable easy use of advanced storage features such as thin provisioning, snapshots, and pool-based management and monitoring. STRATIS https://stratis-storage.github.io //DEMO # yum install stratis-cli stratisd # systemctl start stratisd # startis pool create mypool /dev/sdb # stratis fs create mypool myfs1 # mkdir /mnt/strat1 # mount /stratis/mypool/myfs1 /mnt/strat1 # mount | grep mnt // XFS default filesystem