SUSE Linux Enterprise Server

2021: Compatibility of ESET Server Security for Linux and ESET Endpoint Antivirus for Linux

Fortis announced on December 8, 2021 that it had initiated technological testing of ESET and SUSE products. During the test, the compatibility of the ESET product line with the SUSE Linux Enterprise Server operating system was confirmed.

The importance of research on the compatibility of ESET and SUSE software products is due to the fact that when choosing solutions for creating an enterprise IT landscape, customers focus not only on efficiency and high performance, but also on their flexibility: the ability to maintain different technological stacks, ensure the uninterrupted operation of the entire security system, while not limiting the variation in infrastructure construction.

As part of the study, ESET Server Security for Linux and ESET Endpoint Antivirus for Linux were tested with various scenarios: using EICAR files and opening malicious links.

Comprehensive ESET solutions provide a centralized approach to information security at all levels of the system. Regardless of the size and structure of the organization, they provide antivirus protection of the customer's infrastructure and threat monitoring. These characteristics will be relevant for any companies that use the SUSE Linux Enterprise Serve multimodal OS both as part of traditional infrastructures and for building software-implemented ones.

SUSE and ESET's technology collaboration will provide customers with infrastructure security across the entire range of solutions, and the rapid deployment of SUSE Linux Enterprise Server will not require additional resources, which will allow information security specialists not only to gain effective leverage to manage the situation, but also minimize the cost of processing critical information, guaranteeing its safety. If you want to improve the current level of protection, you can always do this using the sandbox using the ESET Dynamic Threat Defense add-on module, "said Ivan Anosov, ESET's leading project manager for corporate customers.

We are excited about the partnership with ESET and the opportunities now available to customers. IT security is one of the most pressing IT challenges. The combination of ESET and SUSE technologies will allow you to comprehensively solve business problems in terms of creating a flexible IT infrastructure, as well as ensuring its security and will become a reliable basis for further development, "commented SUSE in the Russian representative office.

2020: Availability on the Mail.ru Cloud Solutions platform

2018: Obtaining the FSTEC certificate of Russia

On February 28, 2019, the company ICU groups"" SUSE and announced the receipt of a certificate FSTEC for OS SUSE Linux Enterprise Server 12 SP3. Compliance Certificate No. 4035 (valid up to 03.12.2023), issued by FSTEC, Russia certifies that SUSE Linux Enterprise Server 12 SP3 operating systems belong to operating systems of type A of the fourth class, meets the requirements information security set forth in the documents "Information Security Requirements for Operating Systems" (FSTEC of Russia, 2016) and "Protection Profile of operating systems of type A of the fourth class protection. IT.OS.A4.PZ". This means that during the certification tests, the laboratory tested not only the safety functions themselves implemented in the product, but also worked source code with as part of the monitoring of the absence of undeclared capabilities by level 4 in accordance with the requirements of the safety profile IT.OS.A4.PZ.

The certificate was received at the end of 2018. For customers, obtaining this certificate means the possibility of using SUSE Linux Enterprise Server 12 SP3 in the framework of building state information systems (GIS) and personal data processing systems (PSDS) up to the 1st class of security, according to the "ICU group."

"We intend to continue to certify the outgoing versions of SLES, making them available and suitable for use in all sectors of the Russian economy, including government entities. The next stage is planned to certify the latest version of SLES 15 SP1, which will be released in the fall of 2019. " ' Vladimir Glavchev, SUSE Managing Director for Russia and CIS '

According to information for February 2019, a certified OS is already available for ordering. SUSE noted that the certified version is distinguished by a separate product assembly - the distribution of the certified version was adapted to the requirements of the FSTEC of Russia.

2017

SP3 для SUSE Linux Enterprise Server 12

On September 11, 2017, SUSE announced the release of the SUSE Linux Enterprise (SLES) 12 SP3 distribution. It is focused on use in the corporate sector.

The SP3 patch extends SLES 12 support to processors, improves security, clustering, and performance. This version of SLES can run on a large number of hardware platforms. The distribution supports the latest ARM (AArch64), Intel Xeon, AMD EPYC and Ryzen chips, IBM z Systems, ARM systems on Cavium, Qualcomm chips and other manufacturers^[1].

Added support for Intel Kaby Lake processors and Intel Xeon Phi "Kights Landing" coprocessors, Intel OPA (Omni-Path Architecture), and the ability to use Host Fabric Interface (HFI) hardware for high-speed cluster communication between compute nodes and I/O nodes. Increased responsiveness of workloads in virtualization mode, scaling transactions in data centers using extended virtual address space.

Optimized workloads and improved data security for z Systems with SUSE KVM on z support and enhanced cryptographic support for end-to-end data encryption. Among other things, SLES 12 improves the information storage subsystem with support for the local Non-Volatile Memory Express (NVMe) interface and communications with remote drives through NVMe over Fabrics (NoF). Enhanced support for TPM (Trusted Platform Module) 2.0 also enhances security.

The AMD Scalable MCA (SMCA) specification has been implemented, which defines the technique for logging information about errors that occur in equipment. Girpervisor KVM acquired AVIC (Advanced Virtual Interrupt Controller) technology, supported by AMD processors to provide guest systems with virtual interrupt controllers. The process of removing snappers created to roll back batch manager transactions is automated.

The SUSE release is designed with an eye on cloud platforms, it is available in its own cloud OpenStack and for Amazon Web Services, Azure and Google Compute.

The default screen interface is GNOME 3.20. Can be replaced with retro shell SUSE Linux Enterprise Classic. SP3 offers Linux kernel 4.4.

The distribution is available for download for free. Access to updates and patches is limited to a 60-day trial period.

SUSE Linux Enterprise Server hosted in Windows Store

On June 27, 2017, Microsoft announced the availability of SUSE Linux Enterprise Server 12 and openSUSE Leap 42 distributions in the Windows Store.

Participants in the Windows Insider pre-test program can take advantage of these assemblies, then users of stable versions of Windows 10^[2].

The installation of SUSE Linux Enterprise Server 12 and openSUSE Leap 42 requires Windows 10 build 16190 or later. The last insider build on June 27, 2017 is Windows 10 Insider Preview build 16226.

After installing SUSE distributions in the Windows environment, users will have the opportunity to work with the Linux environment in the virtual sandbox, as on a separately installed OS with all its functionality, but without the need to run the Linux loader separately.

2015

SUSE Linux Enterprise 12 for SAP

On May 21, 2015, SUSE announced the upcoming release of SUSE Linux Enterprise Server for SAP applications based on SUSE Linux Enterprise 12, a platform for delivering enterprise IT services in physical, virtual, and cloud infrastructures.

Maintain and restore state, install kernel patches without rebooting, and automate system deployment to significantly increase the uptime and ease of implementation of mission-critical SAP applications on the Linux platform. As a result, customers save time and resources while improving performance and reliability.

SUSE Linux Enterprise 12 for SAP 2015

SUSE Linux Enterprise Server 12 provides additional features for SAP applications:

• full saving and recovery of the operating system state - This feature allows users to snapshot and return to the system state, including the kernel and modules.

• Using kernel patches without rebooting - SUSE Linux Enterprise Server 12 allows you to use the new technology for installing kernel patches without rebooting - SUSE Linux Enterprise Live Patching. This allows you to install security patches without waiting for a new service window to open.

• Fault Tolerance - SUSE Linux Enterprise High Availability Extension provides high availability SAP applications and fast disaster recovery.

• Hardware - SUSE Linux Enterprise Server 12 for SAP helps you work with SAP solutions on updated hardware platforms.

• Automation of the Installation Wizard and the ability to configure tiered replication for solutions-The SAP Installation Wizard automates the product installation process without having to manually manage the process. Tiered replication capabilities allow you to remotely install and update systems based on solutions SAP across your IT infrastructure using the traditional tiered replication approach.

SUSE Linux Enterprise Server 12 for SAP applications will be available in May 2015 and will be offered with 24x7 high-level technical support (Priority Support).

SUSE Linux - IBM Mainframe Virtualization OS

On August 25, 2015, it became known about the company's statement SUSE regarding support for JC SUSE Linux Enterprise Server recently released KVM for mainframe. IBM The company has implemented this support.

As of August 25, 2015, JC SUSE Linux Enterprise Server is the first and only operating system with such functionality, SUSE said.

SUSE was the first to migrate Linux to IBM mainframes. Since 1999, both companies have been trying to bring SUSE Linux Enterprise Server to the state of an ideal operating system on IBM z Systems. SUSE Linux Enterprise Server for System z is the customer's preferred choice of a reliable and secure guest OS for the z/VM virtualization environment. With the introduction of KVM for the IBM z Systems architecture, it became easier for customers to work with IBM mainframes.

According to SUSE management, KVM support for IBM z Systems, both from SUSE and IBM, has given significant advantages to common customers of companies. At their request, the company began to interact with IBM and they were the first to feel the benefits of z Systems.

IBM announced the growing popularity of Linux on mainframes over the past 15 years. Companies see the benefits of combining Linux with Systems z capabilities. IBM and SUSE have taken Linux to another level of performance. With the release of LinuxONE and KVM, customers have a choice to implement a server virtualization environment on mainframes.

2014

SLES на Amazon Web Services

On January 30, 2014, SUSE announced the placement of SUSE Linux Enterprise Server in the United States on Amazon Web Services (AWS) GovCloud.

In the Amazon Elastic Compute Cloud, SUSE works in the cloud for U.S. government agencies and provides government services with a highly reliable, scalable, and secure enterprise-level Linux platform for testing, creating, and deploying workloads.

SUSE Linux Enterprise Server scales to any workload, supporting up to 4,096 logical processors and 16 TB of RAM and state-of-the-art I/O architectures such as OFED, allowing it to build high-performance computing clusters. SUSE Linux Enterprise Server can be used to work with confidential information, since it has been certified for EAL 4 + compliance according to Common Criteria. The module OpenSSL certified according to the U.S. Federal Information Processing Standard (FIPS) 140-2 and complies with the International Traffic in Arms Regulations (ITAR) standard.

SUSE AutoYaST

AutoYaST - a system that helps to automatically deploy Linux throughout the infrastructure of a large geographically distributed enterprise.

On June 3, 2014, Suse's representative office in Russia announced its readiness to use the AutoYaST solution in companies. According to developers, the system will reduce maintenance costs and significantly reduce the influence of the human factor.

AutoYaST created ON on the YaST (Yet another Setup Tool) - it performs the tasks of deploying, supporting and administering SUSE Linux Enterprise. YaST is constantly developed and positioned by the vendor as a tool for setting system parameters. Linux

As of June 3, 2014, more than 50 modules with various functions have been integrated into the YaST to solve problems related to the configuration of server software. The YaST includes:

• software installation and uninstallation utilities
• Repository List Settings
• performing a network update;
• programs for collecting detailed information about connected equipment,
• network settings,
• Major system I/O devices:
  • mice and keyboards,
  • printers and scanners,
  • Audio and video devices;

• main system parameter setting modules:
  • kernel operation modes,
  • loader,
  • dates and times,
  • system boot levels,
  • localization (translation),
  • basic system configuration,
  • Manage user profiles and groups, etc.

In YaST, the Novell AppArmor configuration utilities (network screen), viewing various system logs, etc. are available.

The feature of YaST is the ability to work with this software, both through the console and through the graphical interface (ported to Qt for KDE and GTK for Gnome, etc.). At the same time, the loader provides voice assistance (menu items are voiced), necessary, for example, in the absence of a monitor, as well as for visually impaired users. All interfaces are similar in architecture and intuitive.

You can record and play back user actions using macros. Remote installation of SUSE Linux Enterprise server software is available - remotely over the network. Using YaST eliminates the need for the system administrator to remember the location of various configuration files, how and options to edit them, etc.

AutoYast is a tool for automating the installation of software on a large number of servers from scratch - it is a response file containing not only data, but also rules according to which the necessary changes in settings should be made. One set of such rules will allow you to install the software on several servers with individual settings.

In AutoYaST predefined rules and policies are used, this helps automate the installation of SUSE Linux Enterprise, reducing the time to install the server, according to the developers, up to 10 minutes or less.

The desirability of using AutoYaST, according to the vendor, arises when:

• Linux is the company's main OS;
• a diverse fleet of computers;
• Continuously variable hardware configurations or a wide variety of hardware platforms
• changing software requirements;
• Multiple servers must be installed at the same time
• maintenance personnel have different experience of use and training in Linux.

The application of AutoYast is most effective with a large fleet of servers with different hardware configurations, when the requirements for hardware and/or software of machines are constantly changing. AutoYast in such cases, it will allow you to make appropriate changes to the server software by reinstalling the regular software or installing additional software.

To work with AutoYast, you must create a software profile (Profile), which is an XML file that you can edit and run. The easiest way to create AutoYast Profile is when an existing system is taken as a reference and all its settings are scanned using a special module.

Unlike AutoYast the installation ON from an image (Installation Image - Imaging) does not give such flexibility and is intended for the park with identical cars to which the identical requirements over time remaining invariable are imposed. Imaging, the developers believe, is useful when there is a need to support several operating systems or a large number of identical systems; or if you need limited application support or if you are using an application deployment system (Thin Images or SUSE Studio) with a limited number of hardware platforms, as well as when few images are required.

SUSE Linux Enterprise 12

In November 2014, SUSE announced the release of SUSE Linux Enterprise 12 platform to provide enterprise IT services in physical, virtual and cloud infrastructures. With increased uptime, the efficiency of SUSE Linux Enterprise 12-based systems has increased significantly. As the base for operating systems and applications in the data center, SUSE Linux Enterprise delivers the highest performance in mixed environments, reducing the risk of technological obsolescence and eliminating the link to single vendor solutions.

At the same time as the release, the user service portal SUSE Customer Center was significantly updated, which made it possible to simplify the subscription management process, facilitate access to updates and patches, as well as improve interaction with SUSE technical support.

• SUSE Linux Enterprise Server для IBM System z
• SUSE Linux Enterprise High Availability Extension and GEO Clustering for SUSE Linux Enterprise High Availability Extension are solutions for building fault-tolerant and disaster-tolerant clusters to run key applications in a physical or virtual environment. The new release significantly improved support for OCFS2 and GFS2 file systems, significantly improved web management console, and updated ReaR tools to speed disaster recovery.
• SUSE Linux Enterprise Virtual Machine Driver Pack - Improves the performance of Windows virtual machines running on Linux hosts. The updated version supports Windows Server 2012 R2 and Windows 8.1.
• SUSE Linux Enterprise Desktop and SUSE Linux Enterprise Workstation Extension are a reliable and secure workstation solution. With the new extension package, users can turn the server into a full-fledged working system of an administrator or programmer.

2013

Application on more than 1/3 of 100 TOP500 supercomputers

In August 2013, SUSE announced that the SUSE Linux Enterprise Server operating system is used on more than 1/3 of the 100 highest-rated supercomputers in the world from the TOP500 list. This is a project that tracks and identifies the main directions in the development of today's high-performance computing (HPC).

Over the past few years, there have been significant changes in the field of high-performance computing technologies. This is partly due to the merger of open technologies and new clustering technologies. The evolution of free software and Linux significantly reduced the cost of such systems. The capacity of the computer has increased thousands of times in just a few years, allowing enterprises to transform the capacity of their supercomputers into high-performance Linux clusters on standard hardware.

In fact, enterprises of various industries are adjusting Linux clusters to achieve their special goals characteristic of a particular business. Seismic activity analysis for oil production, aerodynamic modeling for motor production, aircraft design, Hollywood special effects, molecular modeling for biomedical research, data retrieval and financial modeling for business analytics - in all these areas, high-performance computing technologies play an important role. Compared to 2011, the TOP500 list now includes 270 industrial supercomputers outside the fields of scientific, research or government applications, while covering all sectors of the economy (with a special focus on the fields of energy/gas and oil industry and service providers in IT). The fastest industrial supercomputer and number 11 in the TOP500 rating is Pangea, operating at Total Exploration Production, built on the basis of SGI ICE X and SUSE Linux Enterprise Server.

Since 1992, SUSE engineers have made a significant contribution to the development and improvement of the Linux kernel and have proposed a number of technologies aimed at improving its performance. For example, SUSE Linux Enterprise Server was the first Linux operating system on the market to support 64-bit chipsets, and it is identical with a highly efficient Linux system running on 64-bit mainframes.

Linux Enterprise Server 11 Service Pack 3

SUSE announced on July 8, 2013 the release of a new service pack for the Linux Enterprise Server 11 server distribution - SLES 11 SP 3.

Service Pack 3 received additional hardware support tools, the development company said. For example, support for servers on the E5 AMD processors Opteron 4000/6000 , Intel Xeon family and the fourth generation Intel Core (Haswell) processors was added, virtualization tools and power management mechanisms implemented in these processors are involved. Servispack is available in assemblies for the x86 architecture (32- and 64-bit), Itanium, POWER and System z.

Security Innovations

SLES 11 SP 3 is the first industrial distribution, said the company, which implemented support for UEFI Secure Boot technology, based on the use of the Shim loader. In addition to verifying the loader itself, in UEFI Secure Boot mode, the system is able to check both the Linux kernel and the modules executed at its level. To verify them, digital signatures based on SUSE keys are used, which, according to developers, will protect the system from malicious substitution of third-party components at the boot stage of the system. In addition, it is noted that the software and hardware complex based on SLES 11 SP 3 is certified for compliance with the requirements of the international security standard EAL4 + Common Criteria and the American standard FIPS 140-2, which defines the requirements for cryptographic modules.

Scaling

According to Mathias Eckerman, senior product manager of SUSE Linux Enterprise, SLES 11 SP 3 received an updated Linux 3.0 kernel, which supports up to 4096 virtual processors on a single physical server, and can also address up to 16 TB of physical memory on the server.

"As far as I know, now in the world there is not a single physical server that meets these characteristics, no one has ever tested Linux on such large machines. Such scaling approaches become relevant when you work with databases larger than 64 TB and you need to provide very fast physical access to information, "he said

.

Eckerman also said that theoretically, versions of the cores for Itanium and Power can address even more memory - up to 1 Pb, and IBM System Z mainframes - up to 4 TB per PC. In addition, the SP3 package supports the latest eight-core Power7 + processors, which were released less than a year ago.

Important Updates

Among them in SLES 11 SP 3:

• new tools are presented to provide migration to SLES of resource-intensive tasks performed on RISC/UNIX systems;

• Enhanced support for storage and network adapters. Added the possibility of using IBM zEnterprise System (zEC12) Flash Express SAN accelerators, 8-/16-gigabit Fiber Channel adapters and 10-/40-gigabit Ethernet adapters;

• Improved virtualization and migration of physical server content to virtual environments. Included are new versions of KVM 1.4 and Xen 4.2 hypervisors, improved support Microsoft Hyper-V at the protocol and virtual reference level, which simplifies coexistence Linux and/R2 Windows 8 ; Windows Server 2012

• added the ability to install over the network using a secure HTTPS connection in addition to the previously available HTTP installation mode.

OCFS2 File System

The SLES 11 SP 3 implements Cluster Oracle File System 2 (OCFS2). Previously SUSE , support for other modern file systems appeared in, in particular, ReiserFS 3.6, XFS and BtrFS. In total, SP3 has support for 70 new driver families, kernel-level support for new processors and chipsets is included, Open Fabrics Enterprise Distribution (OFED) 1.5.4 (open driver for InfiniBand) is implemented, and a number of Ethernet adapters now work with support for RDMA (Remote Direct Memory Access) mode.

Installation and Availability

SLES 11 SP 3 supports installation from a flash drive (the ISO image of the installation DVD is in hybrid form and can be copied to the flash drive).

The distribution is available for download and free use, but receiving updates and patches is limited to a 60-day period for the sample.

2012

Dell Joins SUSE Cloud Solutions Club

According to January 2012, SUSE supports many large cloud providers, including Dell, to create private and public clouds - Amazon Web Services, Fujitsu, IBM, Intel, 1 & 1, Tencent, SGI, Verizon and Vodacom Business. As a result, SUSE Linux Enterprise Server helps your organization's IT services quickly, efficiently, and profitably deploy mission-critical, IT services in the cloud.

"SUSE helps companies make their businesses more efficient by reducing costs and risks," said Michael Miller, SUSE's vice president of marketing and mergers. "Dell Cloud customers can now leverage SUSE's expanding portfolio of applications and get mission-critical, scalable, pay-as-you-go IT services by leveraging Dell's new private and public clouds, saving your company time and money."

VMware vCloud Service Datacenter Availability

SUSE announced in January 2012 that SUSE Linux Enterprise Server is the first Linux distribution ready to work with a new cloud solution from Dell based on VMware vCloud Service Datacenter. Dell customers can now leverage a range of third-party applications in both a public and private cloud environment with very good performance, while also receiving operational technical support from Dell and SUSE.

SUSE Linux Enterprise Server provides the reliability, performance, and interoperability you need with other systems, thus further enhancing the benefits of the cloud. SUSE Linux Enterprise Server has the greatest support from ISV compared to other Linux distributions. More than 8,500 applications are currently certified and can all run in the cloud.

SUSE Linux Enterprise Server is optimal for VMware vCloud architecture. Partnering with Dell provides customers with robust support for managing workloads across public and private cloud infrastructures.

"Dell's cloud solutions enable your company to do business on its own terms. This means providing access to software, applications, and databases as needed by the customer, "comments Ricky Santos, VP, Head of Cloud Computed at Dell. "A partnership with SUSE allows you to achieve great performance and high-quality support for those customers who need to scale Linux services on demand

."

Notes