# OmniOS Community Edition On April 21st 2017, OmniTI announced that they would suspend active development of OmniOS and support contracts would not be renewed.
While this announcement left many users stunned, others focused more on the fact that OmniTI in their announcement also expressed the hope that "the community" would take up further development of the OS. 14 weeks later, OmniOS Community Edition is a reality. Andy Fiddaman (www.citrus-it.net), Tobias Oetiker (www.oetiker.ch) and Dominik Hassler have spent some quality time setting up the systems and procedures allowing us to take over maintenance and development of OmniOS. In this endeavour we were supported by many. Special thanks to Stefan Husch (www.qutic.com), Peter Tribble (www.petertribble.co.uk), Dan McDonald and Theo Schlossnagle (www.circonus.com). We have forked the OmniOS repos and pulled in bugfixes and security fixes that have been published since the release of OmniOS r151022. After setting up our own package repository and updating the build infrastructure, we are finally ready to go public. We are following the established OmniOS release naming scheme by releasing ## OmniOSce r151022h, 12th July 2017 The new release contains the following fixes: - expat updated to version 2.2.1 (fixes CVE-2017-9233) - openssl updated to version 1.0.2l - curl updated to version 7.54.1 - bind updated to version 9.10.5-P3 - p7zip updated to fix CVE-2016-9296 - web/ca-bundle updated to include OmniOSce Certificate Authority certificate `uname -a` shows omnios-r151022-f9693432c2 (no change in this release) Our work does not stop here though. First we are committed to quickly releasing updates for r151022 as the need arises. We are also working towards releasing r151024 on schedule. To that end, we have already updated the bloody environment with all the latest goodies from upstream illumos and joyent-lx repositories. OmniOS community edition hosts its sources on https://github.com/omniosorg/ and if you want to get in touch, you can find us on https://gitter.im/omniosorg/Lobby ## Release Schedule The intention is for new stable releases to continue to come out every 26 weeks. Interim, "weekly" updates to stable follow a fixed schedule denoted by letters, one per week. Weekly releases are made as needed, so there may not be a release each week. The first release of a new stable version is synonymous with weekly release "a", though the letter is not used. During the intervals between stable releases, Bloody moves forward rapidly, picking up changes from upstream illumos-gate and illumos-joyent as well as updating various userland packages. In general, upstream merges will be performed on a Thursday/Friday each week and weekly releases will be published on a Monday. Bloody releases will be published on an ad-hoc basis but may be as frequent as every week. Security fixes are excluded from the schedule and handled with priority as they occur. ## How to Upgrade All OmniOS packages are signed and the pkg installer is configured to only allow trusted sources for the core packages. In order to upgrade to the new OmniOS community edition, you have to let your box know that the updates will be coming from a new trusted source. This means you will have to import our CA certificate into your system. 1. Get a copy of the new certificate ``` # /usr/bin/wget -P /etc/ssl/pkg \ https://downloads.omniosce.org/ssl/omniosce-ca.cert.pem ``` 2. Check the certificate fingerprint ``` # /usr/bin/openssl x509 -fingerprint \ -in /etc/ssl/pkg/omniosce-ca.cert.pem -noout ``` `8D:CD:F9:D0:76:CD:AF:C1:62:AF:89:51:AF:8A:0E:35:24:4C:66:6D` 3. Change the publisher to our new repo ``` # /usr/bin/pkg set-publisher -P \ -G https://pkg.omniti.com/omnios/r151022/ \ -g https://pkg.omniosce.org/r151022/core/ omnios ``` 4. For each native zone (if you have any), run ``` # /usr/bin/pkg -R <zone_root> set-publisher -P \ -G https://pkg.omniti.com/omnios/r151022/ \ -g https://pkg.omniosce.org/r151022/core/ omnios ``` (get a list of all your zones by running `zoneadm list -cv` for the `<zone_root>`, add `/root` to the PATH given in the list.) 5. Install the new ca-bundle containing our new CA ``` # /usr/bin/pkg update -rv web/ca-bundle ``` 6. Remove the CA file imported by hand ``` # rm /etc/ssl/pkg/omniosce-ca.cert.pem ``` 7. Finally update as usual ``` # /usr/bin/pkg update -rv ``` ## About OmniOS Community Edition Association OmniOS Community Edition Association (OmniOSce) is a Swiss association, dedicated to the continued support and release of OmniOS for the benefit of all parties involved. The board of OmniOSce controls access to the OmniOS CA. Current board members are: Tobias Oetiker (President), Andy Fiddaman (Development), Dominik Hassler (Treasurer). ## About Citrus-IT Citrus IT is a UK company that provides a managed email service platform to companies around the world. For many years they ran their systems on Solaris with SPARC hardware but transitioned to OmniOS in 2012. www.citrus-it.net ## About OETIKER+PARTNER AG OETIKER+PARTNER is a Swiss system management and software development company. Employees from O+P are involved in many Open Source Software projects. O+P runs most of their server hardware on OmniOS. www.oetiker.ch Press inquiries to i...@omniosce.org Published July 12, 2017 OmniOSce Aarweg 17 4600 Olten Switzerland http://www.omniosce.org -- Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland www.oetiker.ch t...@oetiker.ch +41 62 775 9902 _______________________________________________ OmniOS-discuss mailing list OmniOS-discuss@lists.omniti.com http://lists.omniti.com/mailman/listinfo/omnios-discuss
