Solaris 11.4 CBE -- free for personal and non-commercial use!

[gigatexal]

https://blogs.oracle.com/solaris/post/announcing-the-first-oracle-solaris-114-cbe

this is really cool -- I'm looking forward to tinkering with it and maybe using it for a dedicated zfs storage host one day

 

[Freebsd1976]

https://blogs.oracle.com/solaris/post/announcing-the-first-oracle-solaris-114-cbe

this is really cool -- I'm looking forward to tinkering with it and maybe using it for a dedicated zfs storage host one day

IMHO，When the ship starts to sink, don’t pray-jump! solaris is dead，long live solaris

 

[Spartus]

Too late. They insta-killed their open source ecosystem by closing it, lost all the revenue associated with it (that they didn't care about anyways, they just wanted to sue google for Java), and now they want to try and backpedal some... too late

 

[Kaytro]

I might get some hate for saying this. But Oracle ZFS is way better than Open ZFS. Furthermore the out of box SMB multichanel support is amazing for Windows environments.

 

[gea]

In my tests Solaris SMB with native ZFS was always faster than the Solaris fork OmniOS with Open-ZFS. This is partly related to native ZFS but also the kernelbased SMB server on Solaris 11.4. (The kernelbased SMB server on Illumos/OmniOS has improved a lot in a current OmniOS)
Since Oracle offers Solaris 11.4 cbe for free for noncommercial use, it is still an option.

Just to add
Solaris 11.4cbe use the support repository per default. You must switch to the release repository for free updates.

pkg set-publisher -G'*' -g http://pkg.oracle.com/solaris/release/ solaris

 

[unwind-protect]

The Solaris integrated ZFS is also better because the ZFS cache is not separate from the OS'es page cache. This is particularly important when you don't use read/write/seek for operations (when you mmap).

 

[gea]

Critical Windows SMB security warning

In response to CVE-2022-38023, Microsoft is removing support for RPC Signing in the Netlogon server, instead requiring Sealing when establishing a 'secure channel'. More details can be found here: KB5021130: How to manage the Netlogon protocol changes related to CVE-2022-38023 - Microsoft Support and here: Security Update Guide - Microsoft Security Response Center

Timeline
June, 13: signing remains possible but cannot disable sealing on Windows server
July, 11: sealing is enforced, no AD authentication without sealing

solaris114 cbe 11.4.42.111.0 currently does not support sealing,
follow https://forums.oracle.com/ords/apexds/post/what-is-the-state-of-rpc-sealing-in-solaris-7483

If you use Solaris 11.4 in an AD environment commercially, please update Solaris and check sealing support or
ask Oracle support about the state of SMB sealing (please keep us up to date)

 

[chune]

will this impact normal SMB (ie NOT netlogon) shares hosted on solarish in a domain environment? Or is the concern that new solarish boxes will not be able to join the domain until they support RPC sealing?

 

[mrpasc]

This will impact both scenarios.