Index: head/en_US.ISO8859-1/htdocs/news/status/report-2016-10-2016-12.xml
===================================================================
--- head/en_US.ISO8859-1/htdocs/news/status/report-2016-10-2016-12.xml (revision 49874)
+++ head/en_US.ISO8859-1/htdocs/news/status/report-2016-10-2016-12.xml (revision 49875)
@@ -1,1515 +1,1602 @@
This is a draft of the October–December 2016
status report. Please check back after it is finalized, and
an announcement email is sent to the &os;-Announce mailing
list.
The last quarter of 2016 was another productive quarter for the &os; project and community. [...]
Thanks to all the reporters for the excellent work!
The deadline for submissions covering the period from January to March 2017 is April 7, 2017.
?>This report covers work since the last &os;/EC2 status report (2015Q1).
&os;/EC2 is now part of the regular &os; release build, with snapshots and releases being automatically uploaded and copied to all available regions. Due to legal restrictions this does not currently include the GovCloud or China (Beijing) regions; anyone wishing to use &os; in those regions is encouraged to contact the author.
The AWS Marketplace reports that approximately 800 users are running roughly 2000 &os; EC2 instances. This does not count the likely significantly larger number of EC2 instances launched "directly" through the EC2 API and Console, but at least places a lower bound on usage.
&os; 11.0-RELEASE shipped with support for the "enhanced networking" support in EC2 C3, C4, R3, I2, D2, and M4 - (excluding m4.16xlarge) instances. This provides significantly - higher network performance than the virtual networking - available on older EC2 instances and with older versions of - &os;.
+ (excluding m4.16xlarge) instances. This provides + significantly higher network performance than the virtual + networking available on older EC2 instances and with older + versions of &os;.&os; 11.0-RELEASE and later also use indirect segment disk - I/Os, which yield approximately 20% higher throughput with equal or lower - latency, and support the 128-vCPU x1.32xlarge instance - type.
+ I/Os, which yield approximately 20% higher throughput with + equal or lower latency, and support the 128-vCPU x1.32xlarge + instance type.&os; now supports the Amazon Simple Systems Manager service ("run command").
Prometheus is an Open Source monitoring system that was - originally built at SoundCloud in 2012. Since 2016, this project is - part of the Cloud Native Computing Foundation, together with other - projects like Kubernetes.
+ originally built at SoundCloud in 2012. Since 2016, this + project is part of the Cloud Native Computing Foundation, + together with other projects like Kubernetes. -Prometheus scrapes its targets by periodically sending HTTP GET - requests. Targets then respond by sending key-value pairs of metrics - and their sample value. Prometheus has a query language, PromQL, - that can be used to aggregate sample values and specify alerting - conditions. Tools like Grafana can be used to create fancy - dashboards using such queries.
+Prometheus scrapes its targets by periodically sending HTTP + GET requests. Targets then respond by sending key-value pairs + of metrics and their sample value. Prometheus has a query + language, PromQL, that can be used to aggregate sample values + and specify alerting conditions. Tools like Grafana can be + used to create fancy dashboards using such queries.
The Prometheus project provides a utility called the - node_exporter that gathers basic system metrics and serves them - over HTTP. This utility tends to be rather complex, as it has - to extract metrics from many different sources. On Linux, files - in /proc have no uniform format, meaning that for every - kernel framework a custom collector needs to be written.
+ node_exporter that gathers basic system metrics and serves + them over HTTP. This utility tends to be rather complex, as + it has to extract metrics from many different sources. On + Linux, files in /proc have no uniform format, meaning + that for every kernel framework a custom collector needs to be + written.On &os; the sitiuation is better, as the data exported - through sysctl is already structured in such a way that - it can easily be translated to Prometheus' metrics format. The - goal of this project is thus to provide a generic exporter for - the entire sysctl tree. Not only does this prevent unnecessary - bloat and indirection, it may also make the life of a kernel - developer a lot easier. One can easily use Prometheus to graph - the occurrence of an event over time by (temporarily) adding a - counter to the kernel.
+ through sysctl is already structured in such a way + that it can easily be translated to Prometheus' metrics + format. The goal of this project is thus to provide a generic + exporter for the entire sysctl tree. Not only does this + prevent unnecessary bloat and indirection, it may also make + the life of a kernel developer a lot easier. One can easily + use Prometheus to graph the occurrence of an event over time + by (temporarily) adding a counter to the kernel.An initial version of the sysctl exporter has been integrated into the &os; base system in December. It can be run through inetd by uncommenting the example provided in inetd.conf. Unfortunately, this exporter cannot be merged back to &os; 10.x/11.x, as it depends on KBI-breaking changes to sysctl(9).
The changes necessary to support the Allwinner Consumer IR - interface in &os; have been committed. The receive (RX) side is - supported now and the driver is using the evdev - framework. It was tested on the Cubieboard2 (A20 SoC) using - lirc with dfrobot's simple IR remote controller.
+ interface in &os; have been committed. The receive (RX) side + is supported now and the driver is using the evdev + framework. It was tested on the Cubieboard2 (A20 SoC) using + lirc with dfrobot's simple IR remote controller.Libarchive is a BSD-licensed archive and compression library originally developed as part of &os;. It supports a wide variety of input and output formats and also includes three command-line tools: bsdcat, bsdcpio and - bsdtar. The &os; tar and cpio + bsdtar. The &os; tar and cpio utilities are taken directly from Libarchive, and many other important utilities like ar, unzip, and the pkg package manager make use of libarchive's functions.
Libarchive development in 2016 has been focusing on bug fixes and code cleanup, including fixing several critical security issues. Automated testing with Travis CI and Jenkins has been - introduced and libarchive has been added to the Google - OSS-Fuzz project. Fuzzing helped detect several hidden problems - like buffer overflows and memory leaks.
+ introduced and libarchive has been added to the + Google OSS-Fuzz project. Fuzzing helped detect several hidden + problems like buffer overflows and memory leaks.Over the last few months, NFSv4 ACL support for the pax and restricted pax (the default for bsdtar) formats has been completed and merged to &os;-CURRENT. NFSv4 ACL entries can now be stored to and restored from tar archives.
Per-ring polling, multi-packet RNDIS messages, and system RSS integration have been implemented, further optimizing the throughput and latency of the Hyper-V network driver.
Live virtual machine backup is implemented (for now, only for UFS), after the VSS (Volume Shadow Copy Service), which it depends on, was implemented.
PCIe pass-through is implemented, and the patches to - implement NIC SR-IOV are being reviewed on Phabricator.
+ implement NIC SR-IOV are being reviewed on Phabricator.vDSO support for speeding up gettimeofday(2) is now implemented.
The &os; 11.0 image on Azure (https://azure.microsoft.com/en-us/marketplace/partners/microsoft/FreeBSD110/) is also available now, in addition to the existing 10.3 image.
We fixed an issue where SCSI disks would sometimes fail to - attach, resolving bug 215171 ([Hyper-V] Fail to attach SCSI disk - from LUN 8 on Win2008R2/Win2012/Win2012R2).
+ attach, resolving bug 215171 ([Hyper-V] Fail to attach SCSI + disk from LUN 8 on Win2008R2/Win2012/Win2012R2).The port has been updated to GDB 7.12.
7.12 includes additional fixes related to tracing vfork()s. Some of these fixes depend on changes to - ptrace() in the kernel to report a new ptrace stop when - the parent of a vfork() resumes.
+ ptrace() in the kernel to report a new ptrace stop + when the parent of a vfork() resumes.Support for &os;/mips userland binaries has been committed upstream. These patches, along with support for debugging &os;/mips kernels, should be added to the port soon.
LXQt is the Qt port of and the upcoming version of LXDE, the Lightweight Desktop Environment. It is the product of a merge between the LXDE-Qt and Razor-qt projects.
The porting effort remains very much a work in progress: LXQt requires some components of Plasma 5, the new major KDE workspace.
We imported some core components (it was necessary to update to x11/qterminal 0.7.0):
Standalone applications:
We also have updates for:
Xfce is a free software desktop environment for Unix and Unix-like platforms such as &os;. It aims to be fast and lightweight, while still being visually appealing and easy to use.
-During this quarter, the team has kept these applications up-to-date:
+During this quarter, the team has kept these applications + up-to-date:
We also follow the unstable releases (available in our experimental repository) of:
OpenBSM is a BSD-licensed implementation of Sun's Basic - Security Module (BSM) API and file format. It is the user-space - side of the CAPP Audit implementations in &os; and Mac OS X. - Additionally, the audit trail processing tools are expected to - work on Linux.
+ Security Module (BSM) API and file format. It is the + user-space side of the CAPP Audit implementations in &os; and + Mac OS X. Additionally, the audit trail processing tools are + expected to work on Linux.This quarter saw increased development activity, fueled by - the DARPA CADETS project, resulting in the release of OpenBSM 1.2 - alpha 5. Among this release's changes are the ability to + the DARPA CADETS project, resulting in the release of OpenBSM + 1.2 alpha 5. Among this release's changes are the ability to specify the kernel's maximum audit queue length, sandboxing support for auditreduce(1) and praudit(1) on &os; and other systems that support Capsicum, as well as the addition of event identifiers for more &os; system calls. The - complete list of changes is documented in the NEWS + complete list of changes is documented in the + NEWS file on GitHub. The new release will be merged into &os; HEAD and the supported STABLE branches shortly.
- +