KVM in Linux Distributions in 2Q 2023

Second quarter of 2023 was quite productive in terms of new Linux distribution releases and KVM related features shipped in there. Here they are, in chronological order.

Ubuntu 23.04 

The most recent Ubuntu release contains the following new KVM-related functionality:

• Interpretive vfio-pci support for ISM: Allows pass-through of ISM devices to KVM guests, enabling high-bandwith and low-latency network communications using SMC-D.
• Encrypted dump for Secure Execution: Enhances problem determination capabilities while not compromising the security of secure KVM guests.
• Bus id for subchannels: Allows you to identify passthrough CCW devices by their device bus id in the host without going through hoops.
• Driverctl now lists persisted overrides: Makes it easier to identify and manage passthrough devices.

RHEL 8.8 and 9.2

While being distinct releases, both share the same set of new functionality, which is:

• Interpretive vfio-pci support for ISM: Which allows pass-through of ISM devices to KVM guests, enabling high-bandwith and low-latency network communication using SMC-D.
• Encrypted dump for Secure Execution: Enhances problem determination capabilities while not compromising the security of secure KVM guests.
• Bus id for subchannels: Allows you to identify passthrough CCW devices by their device bus id in the host without going through hoops.
• Dynamic configuration updates  for vfio-ap: Allows you to hot plug and unplug Crypto domains of a Crypto passthrough configuration for running KVM guests.

SLES 15 SP5

Being a large service pack, there are numerous new features delivered:

• Interpretive vfio-pci support for ISM: Which allows pass-through of ISM devices to KVM guests, enabling high-bandwith and low-latency network communication using SMC-D.
• Encrypted dump for Secure Execution: Enhances problem determination capabilities while not compromising the security of secure KVM guests.
• Bus id for subchannels: Allows you to identify passthrough CCW devices by their device bus id in the host without going through hoops.
• Driverctl now lists persisted overrides: Makes it easier to identify and manage passthrough devices.
• Persistent configuration for vfio-ap: The s390-tools command zdev can now be used to persist Crypto passthrough configurations.
• Dynamic configuration updates  for vfio-ap: Allows you to hot plug and unplug Crypto domains of a Crypto passthrough configuration for running KVM guests.

• Remote attestation for Secure Execution: Provides cryptographic evidence of workload authenticity and integrity facilitates integration into common Confidential Computing frameworks.
• Support of long kernel command lines of up to 64 KB length, for example, allows you to specify plenty of I/O devices.

...and other minor improvements

WARNING: Updating from RHEL8.6 to RHEL8.7/RHEL8.8 may break Network Access with RoCE Express Adapters

RoCE interfaces may lose their IP settings due to an unexpected change of the network interface name.

The RoCE Express adapters can lose their IP settings due to an unexpected change of the network interface name if both of the following conditions are met:

• User upgrades from a RHEL 8.6 system or earlier.
• The RoCE card is enumerated by UID.

To workaround this problem:

Create the file /etc/systemd/network/98-rhel87-s390x.link with the following content:

[Match]
Architecture=s390x
KernelCommandLine=!net.naming-scheme=rhel-8.7

[Link]
NamePolicy=kernel database slot path
AlternativeNamesPolicy=database slot path
MACAddressPolicy=persistent

After rebooting the system for the changes to take effect, you can safely upgrade to RHEL 8.7 or later.

Note:
RoCE interfaces that are enumerated by function ID (FID, indicated by featuring the prefix ens in their interface names) are not unique and not affected by this issue. Set the kernel parameter net.naming-scheme=rhel-8.7. to switch to predictable interface names with the eno prefix. See the Networking with RoCE Express book for further details.

2023 Client Workshop for Linux on IBM Z and LinuxONE North America

Join us at the 2023 Client Workshop for Linux on IBM Z and LinuxONE for North America in-person at the IBM Innovation Studio in Poughkeepsie, NY!

 

Go here to register.

Dates and Times

• Dates: Wednesday, May 24th and Thursday, May 25th
• Times: 9:30 AM until 5:30 PM local time on both days

Address

• IBM Poughkeepsie
• 705 Development Court
• Poughkeepsie, NY

General Information 

On May 24th and May 25th, you have the possibility to get the latest news and technical information for Hybrid Cloud with Linux on IBM zSystems, LinuxONE, KVM, and z/VM. The training will be delivered onsite at the IBM Innovation Studio Poughkeepsie. You have the chance to interact directly with our IBM experts and join different small work group sessions on these two days.  

Enrollment and Costs/Fees 

The class is free of charge. Travel & Living is on your own. 

Target Audience

Linux on IBM zSystems and LinuxONE Clients, Partners and Software Vendors, and IBM zSystems Technical Sales

Topic Highlights

• Hybrid Cloud on IBM zSystems with Linux and z/OS
• Getting the most out of the Latest Features in Linux on IBM Z and LinuxONE
• The Gravity of Data - Co-locating z/OS and Linux
• IBM LinuxONE Security and Compliance Center Overview & Demo
• Common z/VM Hurdles and How to Overcome Them
• Update on z/VM Express System Installation
• z/VM Security Session
• IBM Z next middleware HW overview
• Quantum Deep Dive
• Red Hat OpenShift, Storage and Solutioning Values
• Turbonomic resource management with OpenShift on IBM zSystems
• Running Databases on LinuxONE
• Confidential computing - Confidential Containers
• Cloud Native DevSecOps using OpenShift Pipelines on IBM LinuxONE
• Various Workgroup Sessions

New Release: Ubuntu 23.04

Canonical released a new version of their Ubuntu server offering Ubuntu Server 23.04!

See the announcement on the mailing list here, and the blog entry at Canonical with Z-specific highlights here.

Introducing IBM z16 A02 & IBM LinuxONE Rockhopper 4

Today we announced new IBM z16 and IBM LinuxONE single frame and rack mount options. That’s right – a mainframe in a rack mount! The unique design provides more flexibility and choice for clients to choose the best fit for their business, whether they are a start-up or a major enterprise.​

See the official press release here.

Also, see Ian Cutress from TechTechPotato giving us a visit on site in Böblingen, Germany, to check out our hardware here.

And participate in our virtual launch events as follows:

• Event registration and replays: 
• IBM z16 Virtual Launch April 4^th (Replay)
• IBM LinuxONE Virtual Launch April 17^th  (Registration)

KVM Upstream Roundup 2022

The KVM on Z community has been quite busy in 2022, delivering a number of features. Here is a look back at a selection of significant new features in recent months:

• Support for IBM z16 and LinuxONE Emperor 4
• Allows guest exploitation of new hardware features and live migration for the latest machine generation.
• Requires QEMU 6.1 and Linux kernel 5.14 or later.
  
• Support of long kernel command lines
• Kernel command lines up to 64 KB length, e.g. allows to specify plenty of I/O devices.
  
• Requires QEMU 7.0, s390-tools 2.20 or later.
• Remote attestation for Secure Execution
• Cryptographic evidence of workload authenticity and integrity facilitates integration into common Confidential Computing frameworks.
• Requires QEMU 7.1 and Linux kernel 5.19 or later.
• Encrypted dump for Secure Execution
• Enhances problem determination capabilities while not compromising the security of secure KVM guests.
• Requires QEMU 7.1, Linux 5.19, and s390-tools 2.22 or later.
• Persistent configuration for vfio-ap 
• The s390-tools command zdev can now be used to persist Crypto passthrough configurations.
• Requires s390-tools 2.22 or later.
• Interpretive vfio-pci support for ISM
• Allows pass-through of ISM devices to KVM guests, enabling high-bandwith and low-latency network communication using SMC-D.
• Requires QEMU 7.2 and Linux kernel 6.2 or later.

Client Webcast: Why virtualization is still highly used in the era of Containers and Cloud

 Wednesday, February 1^st, 11:00 AM - 12:00 PM ET
"Open to Clients, Business Partners, IBMers, IT Architects, Systems Admins, etc."

• Register here: https://ibm.webex.com/ibm/onstage/g.php?MTID=e6e21968a924c2f1ed2689f345676caf3
  After registering, you will receive a confirmation email containing information about joining the webinar.
• With the new workloads running in containers and running in clouds, the question is if virtualization is still important and how it relates with these workloads. The session will illustrate where and why virtualization is still important in the different deployment models.
• Presented by Wilhelm Mild, IBM Executive IT Architect - Integration Architectures for Containers, Mobile, IBM Z and Linux

• This presentation is part of the regular technical Linux on IBM zSystems and LinuxONE webinar session series from the IBM Labs. Find all past sessions here: https://ibm.biz/Linux-on-IBMzSystems-LinuxONE-Webcasts
  
  
• If you have any questions, please contact Stephanie Monisteri at gherghe@de.ibm.com.