First fix in the OpenSolaris Sustaining gate

As you probably know, Sun is now offering support for the OpenSolaris distribution. This means that critical bug fixes will be made in versions of packages that can be installed on prior releases of OpenSolaris. That mechanism is coming online right now, and I was the first person to integrate a fix into the newly created source tree for the 2008.05 release of OpenSolaris. I can’t tell you just yet what the fix is, because it is a critical security related fix, and we have to co-ordinate the release of the info about the bug and the binary fix itself for all supported releases in order to avoid the “zero-day” effect.

Let me tell you, making co-ordinated fixes like this is a lot of work. I had to create the fix for this bug for six (6!) different releases simultaneously. We have to have all the patches, packages and the SunAlert all ready to go at the same time. Phew!


3 responses to this post.

  1. Posted by UX-admin on June 6, 2008 at 12:42 am

    "This means that critical bug fixes will be made in versions of packages that can be installed on prior releases of OpenSolaris."
    What about eventual libC incompatibilities, how do you plan to handle those?


  2. The plan is that for customers that desire a more stable platform, we will take a snapshot every 6 months, and then do the backport of critical fixes to that snapshot and release them in a separate repository for contract customers. These customers will not get updated packages from the regular OpenSolaris repository, just the contract one. That way, they will be insulated from the potentially radical changes in the regular repository while still remaining secure. So nothing will change for these customers and there will not be any incompatibilities, except at long, planned intervals when a particular snapshot is de-supported. This is expected to happen after 18 months of support for a particular snapshot. All details are subject to change of course as I am not involved in any of these decisions.


  3. Posted by UX-admin on June 9, 2008 at 5:14 am

    Thanks for the answer.
    With Sun Cluster now being available for OpenSolaris, and coupled with security fixes, OpenSolaris just might become a viable platform for some very restricted scenarios.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: