29 September 2023

25 September 2023

Impact of new openssh 9.3p1 on Solaris 11.4.60

When connecting to an old server you may see

-bash-5.2$ ssh g0083
Unable to negotiate with 192.168.100.83 port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss

or if you try to connect from an old system to Solaris 11.4.60 or newer

-bash-4.4$ ssh g0049
no hostkey alg

This is because the new openssh version on Solaris 11.4.60 has sha-1 hash disabled by default.
It is recommended to update your old systems to newer versions.

On Solaris 11.3 you need to:
pkg install openssh
pkg set-mediator -I openssh ssh



If this is not possible as a workaround you can enable sha-1 on the new Solaris server
for the target systems in /etc/ssh/ssh_config and/or sshd_config

Host g0083
HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa



22 August 2023

New Features in Solaris 11.4 SRU60 (Aug 2023)

Another quarterly Solaris SRU including new features

iostat -S (separator)
coreadm -d asr to disable ASR SR
svccfg setnotify problem-diagnosed asr:inactive to disable ASR SR
no /etc/vfstab entry required anymore for swap
pkgadd: -d http & https removed

FOSS: OpenSSH_9.3p1
EOF: pcre
Removed: CVS, perl 5.32

 

26 July 2023

Overview of Solaris ZFS blog posts

I wanted to write a blog post about ZFS encryption and found
there was already a post in 2020.

It looks like it's time for an overview about such posts

Solaris 11.4 SRU42 (Feb 2022) - zpool status -s
https://jomasoftmarcel.blogspot.com/2022/02/solaris-114-sru42-feb-2022-zpool-status.html

Don't remove Data Disks from Solaris Zpools if performance is important
https://jomasoftmarcel.blogspot.com/2021/08/dont-remove-data-disks-from-solaris.html

Performance Impact of ZFS Encryption on Oracle Solaris
https://jomasoftmarcel.blogspot.com/2020/06/performance-impact-of-zfs-encryption-on.html

Oracle Database on Solaris ZFS done right
https://jomasoftmarcel.blogspot.com/2020/05/oracle-database-on-solaris-zfs-done.html

Solaris 11.4 Beta: Fast (asynchronous) ZFS destroy
https://jomasoftmarcel.blogspot.com/2018/02/solaris-114-beta-fast-asynchronous-zfs.html

Is there a performance impact when using Solaris ZFS lz4 compression?
https://jomasoftmarcel.blogspot.com/2017/04/is-there-performance-impact-when-using.html


02 June 2023

New Features in Solaris 11.4 SRU57 (May 2023)

Another quarterly Solaris SRU including new features

Kernel Zone live storage migration support for individual disk operations
Kernel Zone Virtual CPU binding improvements
Kernel Zone MRP reservation for Nested Page Tables
Comments for reboot(8), halt(8), and poweroff(8)
pbind(8) default output change for querying multi-LWP processes
Courteous NFS Server
Force flag for shrinking ZFS volumes
ZFS send with raw crypto


FOSS: PHP 8.2, MySQL 8.0
EOF:  CVS, MySQL 5.7
Removed: Python 2.7, PHP 7.4, Ruby 2.6, OpenSSL 1.1.1