Ubuntu Server Edition: [email protected] Nick Barcet [email protected] Rick Clark Server Team Manager Ubuntu Server Product Manager An overview of technologies
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Ubuntu Server Edition:
Nick Barcet
Rick ClarkServer Team Manager
Ubuntu Server Product Manager
An overview of technologies
What is Ubuntu?
• Server LTS (Long Term Support) launched in June 2006
• Ideal high volume, low cost server deployment
• Supports APT for seamless upgrade (LTS to LTS)
• Quick install profi les – Web, Mail, Database, DNS, LAMP
• Class leading virtualization support
Agenda
How do we differ from Debian?
Technology choices
• AppArmor
• KVM
• Upstart
• UFW
• The best guest OS
• Likewise-open
What’s coming?
• Identity Management
• Entreprise Enablement
• Virtualization
• Confi guration Backend
The Ubuntu Server Team
How to get involved?
How do we differ from Debian?
• Predictable life-cycle
• Enterprise integration
• Software partners
• Support & certifi cation
• Hardware certifi cation
• Packaging
• Application choice
• Updates
• Stability & quality
Ubuntu
Debian
Package deployment and maintenance
Debian Packaging
• Handles package fi les and confi guration
• Allows for tight integration of different packages
• Permit updates of running services
• Tight and documented quality and policies
• Excellent dependency control
The APT (advanced packaging tool) package management system
• One tool for all services and applications
• Fast and reliable updates
• Fully controllable (locally or remotely)
• Applies to partner applications
• Can be used for in house applications
Maintenance and Support
2008 2010 2012 2014 20162009 2011 2013 2015
Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04 LTS Server
Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04 LTS Server
LTS Desktop and Server Standard Release Point Release Server Release
Upgrade paths
2006 2008 2010 20122007 2009 2011
Ubuntu 8.10
Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06 LTS Server
Ubuntu 8.04 LTS Server
Standard Release Discontinued Release LTS Release Upgrade Path LTS Upgrade Path
2013
Technology Choices
Security
AppArmor
Mandatory Access Control made simple
• Application containment
• Rules are easy to write and maintain
• Contained by default: - CUPS - Bind - MySQL - slapd (Open LDAP)
• Simple to troubleshoot
Uncomplicated FireWall
Firewalling should not be complicated
• Iptables are too complex for most users needs
• Complexity is a risk as it limits auditability
• UFW is a CLI frontend to reduce Iptable complexity - ufw [--dry-run] [delete]
allow|deny PORT[/protocol]
- ufw [--dry-run] [delete]
allow|deny [proto protocol]
from ADDRESS [port PORT]]
to ADDRESS [port PORT]]
• Currently defi ning application level rules
Virtualization
Emulated, Translated or Virtualized Environment
User space applications
Virtualized OS
Virtualization Layer (emulated hardware)
User space applications
Operating System Kernel
Hardware
KVM
The most effi cient and maintainable open source virtualization technology
• No special kernel required
• Any AMD-V or Intel-VT based servers can run it out of the box
• Can be managed remotely
• Includes Virt-IO optimisation for supporting OS
JeOS
Best Guest OS• Clearly leading the virtualized OS future
• 100MB ISO, 300MB installed footprint, 64MB RAM footprint
• Create focused and secure appliances
• Create virtual appliances that need less maintenance
Build custom JeOS on demand with Ubuntu’s VMBuilder
• Builds a VM image in a minute
• Easy to include in a standard build process for ISV’s
• A simple to replicate process in clusters (on demand or HPC)
Optimized for KVM and VMware
Virtualized Appliance
JeOS
Application
KVM / VMware
Figure 1 – Seamless authentication integration
Windows Client
Authenticate
Access shares,services, print...
Active DirectoryUbuntu Server
Edition
Linux Client
Ubuntu Client
Mac OSX Client
AD Integration
Integrating an Ubuntu server in an Active Directory domain is now as simple as calling a single command (Likewise-open)
Likewise-open:
• Single command integration into AD environment
• Replaces winbind’s complexity
• Redirects authentication to AD
• Caches authentication for higher reliability
What’s coming?
Confi gurationBackend
EnterpriseEnablement
IdentityManagement
Virtualization
What’s coming?
Identity Management
OpenLDAP
• Use cn=confi g mode for simpler multi-server deployments
• Default DIT and schema defi nition to simplify deployments
Service integration
• Main services provided with LDAP confi guration
• Kerberos simpler to integrate
Confi gurationBackend
EnterpriseEnablement
Virtualization
What’s coming?
Enterprise Enablement
Storage Area Network
• Fiber Channel and Infi niBand enablement process
• Main vendors to participate
Server Management
• CIM integration
• IPMI improvements
Confi gurationBackend
IdentityManagement
Virtualization
Confi gurationBackend
EnterpriseEnablement
IdentityManagement
What’s coming?
Virtualization
Improving the guest
• XEN guest support
• More KVM optimisations
• VMware certifi cation for 8.04 LTS
and the Host
• Cobbler to manage deployments
• New VMBuilder: - Python based - Multi distribution - Usable as a library - Optional web based front end
What’s coming?
Confi guration Backend
Why?
• Current GUI overwrites manual changes to confi guration fi les
• It is against Debian policy for one package to modify another’s confi guration
A backend is a requirement to provide a sane way to modify conf fi les
• Community effort around Augeas
• Currently working hard on adding lenses for various conf fi les from main (all help is welcome)
• eBox community getting ready to switch to Augeas
• Text based GUI coming as well
EnterpriseEnablement
IdentityManagement
Virtualization
How to get involved?
Ubuntu Server Mailing List https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
Ubuntu Server IRC channel #ubuntu-server on Freenode
Joining the team Apply on https://launchpad.net/~ubuntu-server
Team wiki https://wiki.ubuntu.com/ServerTeam/GettingInvolved
Contact information
Nick BarcetUbuntu Server Product Manager
Rick ClarkServer Team Manager
Related Documents
