Red Hat OpenShift 4.18 Now Available on IBM Power Red Hat® OpenShift® 4.18 has been released and adds improvements and new capabilities to OpenShift Container Platform components. Based on Kubernetes 1.31 and CRI-O 1.31, Red Hat OpenShift 4.18 focused on core improvements with enhanced network flexibility.
You can download 4.18.1 from the mirror at https://mirror.openshift.com/pub/openshift-v4/multi/clients/ocp/4.18.1/ppc64le/
The NX accelerator has random number generation capabilities.
What what happens if the random-number entropy pool runs out of numbers? If you are reading from the /dev/random device, your application will block waiting for new numbers to be generated. Alternatively the urandom device is non-blocking, and will create random numbers on the fly, re-using some of the entropy in the pool. This can lead to numbers that are less random than required for some use cases.
Well, the Power9 and Power10 servers use the nest accelerator to generate the pseudo random numbers and maintains the pool.
Each processor chip in a Power9 and Power10 server has an on-chip “nest” accelerator called the NX unit that provides specialized functions for general data compression, gzip compression, encryption, and random number generation. These accelerators are used transparently across the systems software stack to speed up operations related to Live Partition Migration, IPSec, JFS2 Encrypted File Systems, PKCS11 encryption, and random number generation through /dev/random and /dev/urandom.
Kind of cool, I’ll have to find some more details to verify it and use it.
My colleague, Michael Q, introduced me to a vim extension that left me saying… that’s awesome.
set cuc which enables Cursor Column, and when I use it with set number, it’s awesome to see correct indenting
The commands are:
Shift + :set cuc and enterShift + :set number and enter
Use set nocuc to disable
Good luck…
Post Script
dnf install -y vimReference VimTrick: set cuc
kube-health has a new release v0.3.0. I’ve been following along on this tool for a while.
Here’s why:
Kudos to iNecas for a wonderful tool.
The following is an image from the github site.
Here is a good references for using OpenShift:
Custom nftable firewall rules in OpenShift: https://access.redhat.com/articles/7090422
It’s a supported method for implementing custom nftables firewall rules in OpenShift clusters. It is intended for cluster administrators who are responsible for managing network security policies within their OpenShift environments.
I’m making a mental note that this tool from @simonkrenger k8s-etcd-decryptor is a life saver – I’ve used it once during development and need to get data out of etcd.
The tool decrypts the AES-CBC-encrypted objects from etcd. Note, AES-CBC is one of two encyrption types AES-GCM, and is not covered by the tool.
You can read more about encryption in OpenShift at Chapter 15. Encrypting etcd data
Red Hat has updated the Source-to-Image (S2I) Builder Image to v1.5.0. It now supports FIPS builds on IBM Power, see the release tag for more details tag
You can learn more about using it at Source-to-image docs.
Per the docs you can follow the instructions:
Good luck with your builds
The mirror registry for Red Hat OpenShift is a small-scale container registry included with OpenShift Container Platform subscriptions. As of 4Q 2024, you can now use it with ppc64le.
The IBM Linux on Power team updated the open source container images list on their IBM Container Registry (ICR). You can find out more at https://community.ibm.com/community/user/powerdeveloper/blogs/priya-seth/2023/04/05/open-source-containers-for-power-in-icr
podman pull icr.io/ppc64le-oss/redis-ppc64le:v7.4.1-bv Nov 21, 2024podman pull icr.io/ppc64le-oss/mongodb-ppc64le:6.0.13-bv Nov 21, 2024podman pull icr.io/ppc64le-oss/rocketchat-ppc64le:6.11.1 Nov 21, 202The milvus 2.4.11 container is added to the list of OpenSource Containers:
podman pull icr.io/ppc64le-oss/milvus-ppc64le:v2.4.11
My colleague, Paul Chapman, has a nice article on .NET 9.0 running on IBM Power.
https://community.ibm.com/community/user/powerdeveloper/blogs/paul-chapman/2024/11/21/dotnet9
Best wishes.