Re: Adding dasd to LVM
Tom, The Redbook z/VM and Linux on IBM System z The Virtualization Cookbook for SLES 10 SP2 has a section 11.2 ... It has the documentation for adding 2 volumes to a new logical group and moving an existing directory structure to that group. Huh? Section 11.1 describes how to create a two volume LVM and mount it over /home. Section 11.2 describes how to extend the volume group and the same logical volume to three physical volumes. Mike MacIsaac mike...@us.ibm.com (845) 433-7061 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Adding dasd to LVM
Thanks Mike I see that now. Page 185 shows a move of the old directory, onto the new LVM volume. That stopped me (reading online instead of printing out the book). Two pages down, it describes extending a current LVM. Tom Duerbusch THD Consulting Michael MacIsaac mike...@us.ibm.com 1/13/2009 6:49 AM Tom, The Redbook z/VM and Linux on IBM System z The Virtualization Cookbook for SLES 10 SP2 has a section 11.2 ... It has the documentation for adding 2 volumes to a new logical group and moving an existing directory structure to that group. Huh? Section 11.1 describes how to create a two volume LVM and mount it over /home. Section 11.2 describes how to extend the volume group and the same logical volume to three physical volumes. Mike MacIsaac mike...@us.ibm.com (845) 433-7061 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Encryption on a 7060
I curate a museum which includes a uni-CP Multiprise 3000 (7060-H30) with 2 GB in basic mode running VM/ESA 2.2 and hosting VSE/ESA 2.2 in V=R. We may be required by auditors to encrypt files for transmission to other hosts. I'm saying it's feasible to install a Linux distribution into a V=V virtual machine and perform the encryption there, either with gpg or by using openssl. We're currently averaging about 20% CPU utilization. Can anyone see any holes in this? Do current distros still support this platform or will I need something older, and if so, will current encryption software work on the older distro? -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On 1/13/2009 at 1:00 PM, David L. Craig d...@radix.net wrote: I curate a museum which includes a uni-CP Multiprise 3000 -snip- Do current distros still support this platform or will I need something older, and if so, will current encryption software work on the older distro? SLES10 and RHEL5 are 64-bit only. Previous versions are 31-bit or 64-bit. The non-commercial distributions, Debian/390, Slack/390, CentOS are mostly 31-bit. So far as I know, they all include GPG and OpenSSL. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
There are not many holes, but things to consider. We had a MP3000 H30 also. 1. It doesn't perform Linux stuff as well as other mainframes. There is a CPU instruction added in newer systems, that made Linux performance much better. So, don't take poor performance on the MP3000 as an indication of performance on new boxes. But if you lave the CPU time available, it works. 2. You have to run SLES 7 or SLES8 (in 31 bit mode). As these are older distros, they may run out of support. That may affect how auditors view the setup. 3. As 31 bit code disappears, you may not be able to keep up with the Jones with respect on where you are sending the files. I don't know how backleveled encryption software goes. You might be limited to 128 bit encryption instead of 2k encryption keys. 4. I have a GPG server which encripts files for our VSE systems. It runs in 96 MBs, with vdisk for swapping. You shouldn't have problems getting that much real memory carved out. Tom Duerbusch THD Consulting David L. Craig d...@radix.net 1/13/2009 12:00 PM I curate a museum which includes a uni-CP Multiprise 3000 (7060-H30) with 2 GB in basic mode running VM/ESA 2.2 and hosting VSE/ESA 2.2 in V=R. We may be required by auditors to encrypt files for transmission to other hosts. I'm saying it's feasible to install a Linux distribution into a V=V virtual machine and perform the encryption there, either with gpg or by using openssl. We're currently averaging about 20% CPU utilization. Can anyone see any holes in this? Do current distros still support this platform or will I need something older, and if so, will current encryption software work on the older distro? -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On Jan 13, 2009, at 12:16 PM, Mark Post wrote: On 1/13/2009 at 1:00 PM, David L. Craig d...@radix.net wrote: I curate a museum which includes a uni-CP Multiprise 3000 -snip- Do current distros still support this platform or will I need something older, and if so, will current encryption software work on the older distro? SLES10 and RHEL5 are 64-bit only. Previous versions are 31-bit or 64-bit. The non-commercial distributions, Debian/390, Slack/390, CentOS are mostly 31-bit. So far as I know, they all include GPG and OpenSSL. Yeah. How acceptable this will be depends, really, on the bandwidth you need encrypted, because doing crypto on a multiprise is pretty slow. Something that we've had success with (depending on your requirements) is to use an outboard x86 box, a private network, and some iptables magic to make it transparent to everything else on the network but do your crypto where it's cheap. There are, of course, organizations that will provide support for non- major distributions, and at least one that really, really likes Debian. Ask me offline. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
I doubt David's auditors will be able to raise a valid objection to running an out-of-support Linux, when they apparently haven't objected to running VM/ESA 2.2. I knew Multiprises were old, but I didn't know that they were old enough to be museum exhibits. Dennis We are Borg of America. You will be assimilated. Resistance is futile. -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Tom Duerbusch Sent: Tuesday, January 13, 2009 10:45 To: LINUX-390@VM.MARIST.EDU Subject: Re: Encryption on a 7060 There are not many holes, but things to consider. We had a MP3000 H30 also. 1. It doesn't perform Linux stuff as well as other mainframes. There is a CPU instruction added in newer systems, that made Linux performance much better. So, don't take poor performance on the MP3000 as an indication of performance on new boxes. But if you lave the CPU time available, it works. 2. You have to run SLES 7 or SLES8 (in 31 bit mode). As these are older distros, they may run out of support. That may affect how auditors view the setup. 3. As 31 bit code disappears, you may not be able to keep up with the Jones with respect on where you are sending the files. I don't know how backleveled encryption software goes. You might be limited to 128 bit encryption instead of 2k encryption keys. 4. I have a GPG server which encripts files for our VSE systems. It runs in 96 MBs, with vdisk for swapping. You shouldn't have problems getting that much real memory carved out. Tom Duerbusch THD Consulting David L. Craig d...@radix.net 1/13/2009 12:00 PM I curate a museum which includes a uni-CP Multiprise 3000 (7060-H30) with 2 GB in basic mode running VM/ESA 2.2 and hosting VSE/ESA 2.2 in V=R. We may be required by auditors to encrypt files for transmission to other hosts. I'm saying it's feasible to install a Linux distribution into a V=V virtual machine and perform the encryption there, either with gpg or by using openssl. We're currently averaging about 20% CPU utilization. Can anyone see any holes in this? Do current distros still support this platform or will I need something older, and if so, will current encryption software work on the older distro? -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
To echo some of the others comments: We ran Linux (Redhat) on our H50 and response time wasn't that great. We could say we were running Linux on the mainframe (bragging rights) but that was about it. We did this when the H50 was considered a new box (via the market) At that time, for us, it was a solution looking for a problem. Steve -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of David L. Craig Sent: Tuesday, January 13, 2009 1:01 PM To: LINUX-390@VM.MARIST.EDU Subject: Encryption on a 7060 I curate a museum which includes a uni-CP Multiprise 3000 (7060-H30) with 2 GB in basic mode running VM/ESA 2.2 and hosting VSE/ESA 2.2 in V=R. We may be required by auditors to encrypt files for transmission to other hosts. I'm saying it's feasible to install a Linux distribution into a V=V virtual machine and perform the encryption there, either with gpg or by using openssl. We're currently averaging about 20% CPU utilization. Can anyone see any holes in this? Do current distros still support this platform or will I need something older, and if so, will current encryption software work on the older distro? -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On Tue, Jan 13, 2009 at 10:58:57AM -0800, O'Brien, Dennis L wrote: I knew Multiprises were old, but I didn't know that they were old enough to be museum exhibits. Oh, it's not the main exhibit at all. It's our newest. The main event is the 9121 we use for DR, complete with 9345s. If more than three people can top that, I'll stop calling myself the curator. -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On 1/13/09 4:20 PM, David L. Craig d...@radix.net wrote: On Tue, Jan 13, 2009 at 10:58:57AM -0800, O'Brien, Dennis L wrote: I knew Multiprises were old, but I didn't know that they were old enough to be museum exhibits. Oh, it's not the main exhibit at all. It's our newest. The main event is the 9121 we use for DR, complete with 9345s. If more than three people can top that, I'll stop calling myself the curator. IBM 360/75 with 2311s? 8-) -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On Tue, Jan 13, 2009 at 04:23:57PM -0500, David Boyes wrote: IBM 360/75 with 2311s? 8-) Powered up? Under hardware maintenance (the drives, not the CPC)? Has a business purpose? -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On 1/13/09 4:34 PM, David L. Craig d...@radix.net wrote: On Tue, Jan 13, 2009 at 04:23:57PM -0500, David Boyes wrote: IBM 360/75 with 2311s? 8-) Powered up? Well, only on request. That thing EATS power. Under hardware maintenance (the drives, not the CPC)? Well, if you count me as maintenance personnel Has a business purpose? Well, it *used* to launch NASA spacecraft, until 1984 -- it was replaced by a 3090E. As to now, it's a great teaching tool about 370 architecture. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Encryption on a 7060
On Tue, Jan 13, 2009 at 05:54:16PM -0500, David Boyes wrote: On Tue, Jan 13, 2009 at 04:23:57PM -0500, David Boyes wrote: IBM 360/75 with 2311s? 8-) Powered up? Well, only on request. That thing EATS power. Under hardware maintenance (the drives, not the CPC)? Well, if you count me as maintenance personnel Has a business purpose? Well, it *used* to launch NASA spacecraft, until 1984 -- it was replaced by a 3090E. As to now, it's a great teaching tool about 370 architecture. I'll accept all three, although only one is necessary. That's one. Any other takers? I wonder if it's one of the two 75s Goddard used for orbit computation? I was part of the effort that replaced them in 83 with two NAS (Itel) 8040s. That's where this whole curator thing came from. The Data Center Manager told me he was conducting his usual tour, in this case a group of Japanese dignitaries, when one of them asked him, So you're the curator of this museum? This museum was what took over if Houston was hit by a hurricane. I'm so glad I wasn't there at the time because I'm sure I would have totally cracked up. My first mainframe had two (Marshall) 2311s. And 16 KB of core. But it was a Model 22, not as old as a 75. -- May the LORD God bless you exceedingly abundantly! Dave Craig - - - - - - - - - - - - - - - - - - - - 'So the universe is not quite as you thought it was. You'd better rearrange your beliefs, then. Because you certainly can't rearrange the universe.' --from _Nightfall_ by Asimov/Silverberg -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Mainframe-related kernel updates
I'm starting a new feature for linuxvm.org that I hope to be able to keep current: reporting on new mainframe-specific changes and fixes to the mainline kernel source that go through the git390.osdl.marist.edu server. For example: commit 7d671f3e713fc5ff18a5227a8dc16dfdb8bc0664 Merge: d7d717fa889fc7a60c38497846c7618940a999d9 555d61d6542d51563e50532ff604dcd31c96fb24 Author: Linus Torvalds torva...@linux-foundation.org Date: Fri Jan 9 13:56:06 2009 -0800 Merge branch 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6 * 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6: [S390] update documentation for hvc_iucv kernel parameter. [S390] hvc_iucv: Special handling of IUCV HVC devices [S390] hvc_iucv: Refactor console and device initialization [S390] hvc_iucv: Update function documentation [S390] hvc_iucv: Limit rate of outgoing IUCV messages [S390] hvc_iucv: Change IUCV term id and use one device as default [S390] Use unsigned long long for u64 on 64bit. [S390] qdio: fix broken pointer in case of CONFIG_DEBUG_FS is disabled [S390] vdso: compile fix [S390] remove code for oldselect system call [S390] types: add/fix types.h include in header files [S390] dasd: add device attribute to disable blocking on lost paths [S390] dasd: send change uevents for dasd block devices [S390] tape block: fix dependencies [S390] asm-s390/posix_types.h: drop __USE_ALL usage [S390] gettimeofday.S: removed duplicated #includes [S390] ptrace: no extern declarations for userspace On the web site, each of those line items is a link to the individual commits that frequently have comments about why the change is being made, and perhaps some details. See http://linuxvm.org/ for that. For the truly geeky that are interested, I've automated the HTML generation via: - A ~./procmailrc entry on one of my home Linux systems that feeds any emails I get from git390.osdl.marist.edu to a Rexx (Regina) script - The Rexx script pulls the email apart via normal Rexx functions, but also invokes a number of Linux tools, such as grep and sed. - After the script finds each individual commit, and creates the HTML to point to them, it emails the resulting file to me at work so I can cut and paste it into the web page. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Mainframe-related kernel updates
This is an excellent service, Mark. Thanks. Mark Post wrote: I'm starting a new feature for linuxvm.org that I hope to be able to keep current: reporting on new mainframe-specific changes and fixes to the mainline kernel source that go through the git390.osdl.marist.edu server. For example: commit 7d671f3e713fc5ff18a5227a8dc16dfdb8bc0664 Merge: d7d717fa889fc7a60c38497846c7618940a999d9 555d61d6542d51563e50532ff604dcd31c96fb24 Author: Linus Torvalds torva...@linux-foundation.org Date: Fri Jan 9 13:56:06 2009 -0800 Merge branch 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6 * 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6: [S390] update documentation for hvc_iucv kernel parameter. [S390] hvc_iucv: Special handling of IUCV HVC devices [S390] hvc_iucv: Refactor console and device initialization [S390] hvc_iucv: Update function documentation [S390] hvc_iucv: Limit rate of outgoing IUCV messages [S390] hvc_iucv: Change IUCV term id and use one device as default [S390] Use unsigned long long for u64 on 64bit. [S390] qdio: fix broken pointer in case of CONFIG_DEBUG_FS is disabled [S390] vdso: compile fix [S390] remove code for oldselect system call [S390] types: add/fix types.h include in header files [S390] dasd: add device attribute to disable blocking on lost paths [S390] dasd: send change uevents for dasd block devices [S390] tape block: fix dependencies [S390] asm-s390/posix_types.h: drop __USE_ALL usage [S390] gettimeofday.S: removed duplicated #includes [S390] ptrace: no extern declarations for userspace On the web site, each of those line items is a link to the individual commits that frequently have comments about why the change is being made, and perhaps some details. See http://linuxvm.org/ for that. For the truly geeky that are interested, I've automated the HTML generation via: - A ~./procmailrc entry on one of my home Linux systems that feeds any emails I get from git390.osdl.marist.edu to a Rexx (Regina) script - The Rexx script pulls the email apart via normal Rexx functions, but also invokes a number of Linux tools, such as grep and sed. - After the script finds each individual commit, and creates the HTML to point to them, it emails the resulting file to me at work so I can cut and paste it into the web page. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19, 2009 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Mainframe-related kernel updates
Very cool...Thanks Mark Patrick Carroll | Enterprise Architect L.L.Bean, Inc.(r) | Double L St. | Freeport ME 04033 http://www.llbean.com | pcarr...@llbean.com | 207.552.2426 -Original Message- From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Mark Post Sent: Tuesday, January 13, 2009 7:36 PM To: LINUX-390@VM.MARIST.EDU Subject: Mainframe-related kernel updates I'm starting a new feature for linuxvm.org that I hope to be able to keep current: reporting on new mainframe-specific changes and fixes to the mainline kernel source that go through the git390.osdl.marist.edu server. For example: commit 7d671f3e713fc5ff18a5227a8dc16dfdb8bc0664 Merge: d7d717fa889fc7a60c38497846c7618940a999d9 555d61d6542d51563e50532ff604dcd31c96fb24 Author: Linus Torvalds torva...@linux-foundation.org Date: Fri Jan 9 13:56:06 2009 -0800 Merge branch 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6 * 'for-linus' of git://git390.osdl.marist.edu/pub/scm/linux-2.6: [S390] update documentation for hvc_iucv kernel parameter. [S390] hvc_iucv: Special handling of IUCV HVC devices [S390] hvc_iucv: Refactor console and device initialization [S390] hvc_iucv: Update function documentation [S390] hvc_iucv: Limit rate of outgoing IUCV messages [S390] hvc_iucv: Change IUCV term id and use one device as default [S390] Use unsigned long long for u64 on 64bit. [S390] qdio: fix broken pointer in case of CONFIG_DEBUG_FS is disabled [S390] vdso: compile fix [S390] remove code for oldselect system call [S390] types: add/fix types.h include in header files [S390] dasd: add device attribute to disable blocking on lost paths [S390] dasd: send change uevents for dasd block devices [S390] tape block: fix dependencies [S390] asm-s390/posix_types.h: drop __USE_ALL usage [S390] gettimeofday.S: removed duplicated #includes [S390] ptrace: no extern declarations for userspace On the web site, each of those line items is a link to the individual commits that frequently have comments about why the change is being made, and perhaps some details. See http://linuxvm.org/ for that. For the truly geeky that are interested, I've automated the HTML generation via: - A ~./procmailrc entry on one of my home Linux systems that feeds any emails I get from git390.osdl.marist.edu to a Rexx (Regina) script - The Rexx script pulls the email apart via normal Rexx functions, but also invokes a number of Linux tools, such as grep and sed. - After the script finds each individual commit, and creates the HTML to point to them, it emails the resulting file to me at work so I can cut and paste it into the web page. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
