This is very exciting. Thanks for the hard work to get things going. Gary On 7/12/2017 11:32 AM, Tobias Oetiker wrote: > # OmniOS Community Edition > > On April 21st 2017, OmniTI announced that they would suspend active > development of OmniOS and support contracts would not be renewed. > > While this announcement left many users stunned, others focused more on the > fact that OmniTI in their announcement also expressed the hope that "the > community" would take up further development of the OS. 14 weeks later, > OmniOS Community Edition is a reality. > > Andy Fiddaman (www.citrus-it.net), Tobias Oetiker (www.oetiker.ch) and > Dominik Hassler have spent some quality time setting up the systems and > procedures allowing us to take over maintenance and development of OmniOS. In > this endeavour we were supported by many. Special thanks to Stefan Husch > (www.qutic.com), Peter Tribble (www.petertribble.co.uk), Dan McDonald and > Theo Schlossnagle (www.circonus.com). > > We have forked the OmniOS repos and pulled in bugfixes and security fixes > that have been published since the release of OmniOS r151022. After setting > up our own package repository and updating the build infrastructure, we are > finally ready to go public. We are following the established OmniOS release > naming scheme by releasing > > > ## OmniOSce r151022h, 12th July 2017 > > The new release contains the following fixes: > > - expat updated to version 2.2.1 (fixes CVE-2017-9233) > - openssl updated to version 1.0.2l > - curl updated to version 7.54.1 > - bind updated to version 9.10.5-P3 > - p7zip updated to fix CVE-2016-9296 > - web/ca-bundle updated to include OmniOSce Certificate Authority certificate > > `uname -a` shows omnios-r151022-f9693432c2 (no change in this release) > > Our work does not stop here though. First we are committed to quickly > releasing updates for r151022 as the need arises. We are also working towards > releasing r151024 on schedule. To that end, we have already updated the > bloody environment with all the latest goodies from upstream illumos and > joyent-lx repositories. > > OmniOS community edition hosts its sources on https://github.com/omniosorg/ > and if you want to get in touch, you can find us on > https://gitter.im/omniosorg/Lobby > > > ## Release Schedule > > The intention is for new stable releases to continue to come out every 26 > weeks. Interim, "weekly" updates to stable follow a fixed schedule denoted by > letters, one per week. Weekly releases are made as needed, so there may not > be a release each week. The first release of a new stable version is > synonymous with weekly release "a", though the letter is not used. > > During the intervals between stable releases, Bloody moves forward rapidly, > picking up changes from upstream illumos-gate and illumos-joyent as well as > updating various userland packages. In general, upstream merges will be > performed on a Thursday/Friday each week and weekly releases will be > published on a Monday. > > Bloody releases will be published on an ad-hoc basis but may be as frequent > as every week. > > Security fixes are excluded from the schedule and handled with priority as > they occur. > > > ## How to Upgrade > > All OmniOS packages are signed and the pkg installer is configured to only > allow trusted sources for the core packages. In order to upgrade to the new > OmniOS community edition, you have to let your box know that the updates will > be coming from a new trusted source. This means you will have to import our > CA certificate into your system. > > 1. Get a copy of the new certificate > > ``` > # /usr/bin/wget -P /etc/ssl/pkg \ > https://downloads.omniosce.org/ssl/omniosce-ca.cert.pem > ``` > > 2. Check the certificate fingerprint > > ``` > # /usr/bin/openssl x509 -fingerprint \ > -in /etc/ssl/pkg/omniosce-ca.cert.pem -noout > ``` > > `8D:CD:F9:D0:76:CD:AF:C1:62:AF:89:51:AF:8A:0E:35:24:4C:66:6D` > > > 3. Change the publisher to our new repo > > ``` > # /usr/bin/pkg set-publisher -P \ > -G https://pkg.omniti.com/omnios/r151022/ \ > -g https://pkg.omniosce.org/r151022/core/ omnios > ``` > > 4. For each native zone (if you have any), run > > ``` > # /usr/bin/pkg -R <zone_root> set-publisher -P \ > -G https://pkg.omniti.com/omnios/r151022/ \ > -g https://pkg.omniosce.org/r151022/core/ omnios > ``` > > (get a list of all your zones by running `zoneadm list -cv` for the > `<zone_root>`, add `/root` to the PATH given in the list.) > > > 5. Install the new ca-bundle containing our new CA > > ``` > # /usr/bin/pkg update -rv web/ca-bundle > ``` > > 6. Remove the CA file imported by hand > > ``` > # rm /etc/ssl/pkg/omniosce-ca.cert.pem > ``` > > 7. Finally update as usual > > ``` > # /usr/bin/pkg update -rv > ``` > > > ## About OmniOS Community Edition Association > > OmniOS Community Edition Association (OmniOSce) is a Swiss association, > dedicated to the continued support and release of OmniOS for the benefit of > all parties involved. The board of OmniOSce controls access to the OmniOS CA. > Current board members are: Tobias Oetiker (President), Andy Fiddaman > (Development), Dominik Hassler (Treasurer). > > > ## About Citrus-IT > > Citrus IT is a UK company that provides a managed email service platform to > companies around the world. For many years they ran their systems on Solaris > with SPARC hardware but transitioned to OmniOS in 2012. www.citrus-it.net > > > ## About OETIKER+PARTNER AG > > OETIKER+PARTNER is a Swiss system management and software development > company. Employees from O+P are involved in many Open Source Software > projects. O+P runs most of their server hardware on OmniOS. www.oetiker.ch > > > Press inquiries to i...@omniosce.org > > Published July 12, 2017 > > OmniOSce > Aarweg 17 > 4600 Olten > Switzerland > > http://www.omniosce.org > >
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ OmniOS-discuss mailing list OmniOS-discuss@lists.omniti.com http://lists.omniti.com/mailman/listinfo/omnios-discuss
