Readme for IBM PowerVM NovaLink 2.1.1                 

 

This is the April 2023 Release of IBM PowerVM NovaLink.  Learn more about PowerVM NovaLink at

 

·       Knowledge Center(KC): https://www.ibm.com/docs/en/power10/9080-HEX?topic=environment-powervm-novalink

·       Blog: https://community.ibm.com/community/user/power/blogs/archive-user/2015/11/01/powervc-novalink-overview

 

The download of the IBM PowerVM NovaLink installation media is available at the Entitled Systems Support site (ESS).

http://www-304.ibm.com/servers/eserver/ess/OpenServlet.wss

 

NovaLink is entitled to download if you have a license for IBM PowerVM. 

 

 

Table of Contents

 

1.    Supported Stack

2.    How to update/install to Novalink 2.1.1

3.    New in 2.1.1

4.    Fixes in Novalink 2.1.1

5.    Change History for 2.1.1

6.    Known Issues (PowerVM on Power))

7.    PowerVM Novalink Installation

8.    Software Life Cycle

 

1.   Supported Stack

 

Following Stack OS and python are supported with the latest Novalink 2.1.1

 

·      Ubuntu : Ubuntu 20.04 + (Power8/Power9)

·      RHEL : RHEL 8.8 (Power8/Power9/Power10)

·      RHEL : RHEL 9.0 , 9.1+ (Power9/Power10)

 

2.   How to update/install Novalink 2.1.1

 

To install novalink 2.1.1 follow below KC:

.    POWER9: https://www.ibm.com/support/knowledgecenter/POWER9/p9eig/p9eig_installing.htm

.    POWER10: https://www.ibm.com/docs/en/power10/9080-HEX?topic=environment-powervm-novalink

 

Fixes and service packs for this product are available in the following online repositories:

·      Ubuntu : https://public.dhe.ibm.com/systems/virtualization/Novalink/debian

·      RHEL : https://public.dhe.ibm.com/systems/virtualization/Novalink/rhel/86/novalink_2.1.1

 

 

To upgrade to the 2.1.1 Release from Novalink 1.0.0.16:

·       To upgrade to Ubuntu 20.04/RHEL8.8 and Novalink 2.1.1 follow steps in below KC link:

·      https://www.ibm.com/support/knowledgecenter/POWER9/p9eig/p9eig_upgrade_novalink.htm

To upgrade to the 2.1.1 Release from Novalink 2.0.3.1 or prior:

·       To upgrade to Novalink 2.1.0 on Ubuntu 20.04/RHEL8.8 follow steps in below KC link:

 Upgrading PowerVM NovaLink software from version 2.0.3.1 to version 2.1.1 on an Ubuntu partition - IBM Documentation

Upgrading PowerVM NovaLink software from version 2.0.3.x to version 2.1.1 on an RHEL partition - IBM Documentation

 

·       To upgrade to Ubuntu 20.04/RHEL9.0 and Novalink 2.1.1 follow steps in below KC link:

 https://www.ibm.com/support/knowledgecenter/POWER9/p9eig/p9eig_upgrade_novalink.htm

 

To Install Novalink 2.1.1 supported OS are RHEL8.8/RHEL9/Ubuntu20.04

 

See the Knowledge Centre documentation for more information on installing fixes and updates

POWER8:

·      http://www.ibm.com/support/knowledgecenter/POWER8/p8eig/p8eig_updating_ubuntu_online.htm?cp=POWER8

 

POWER9:

·      https://www.ibm.com/docs/en/power9/9009-41A?topic=novalink-updating-powervm

 

POWER10:

·      https://www.ibm.com/docs/en/power10/9080-HEX?topic=novalink-upgrading-powervm-software-version-2000

 

3.   New in 2.1.1

 

·      Support for Rhel 9.1, 8.7

·      Enhancement to support Platform Keystore which provides the ability to assign platform keystore space for each partition. Platform keystore space will be provided by Hypervisor and can be configured at a partition level for use by Operating System.

 

Note: For RHEL 9.0/9.1 and Ubuntu 20.04, minimum required level of Novalink is 2.1.0

 

4.   Fixes in Novalink 2.1.1

 

5.   Change History for 2.1.1

·      Addressed IBM WebSphere Application Server Liberty vulnerability in Novalink 2.1.0 : CVE-2022-45787, CVE-2022-46364

·      Released on 10-07-2023, Patched for listed fix (pvm-novalink_2.1.1-230707-4576 or later)

Addressed IBM WebSphere Application Server Liberty vulnerability : CVE-2023-28867, CVE-2023-0482

Fixed to use OS released drmgr and lsslot on ubuntu 20.04 environment. ( This fix is only applicable for ubuntu20.04 with Novalink 2.1.1)

·      Released on 31-07-2023, Patched for listed fix (pvm-novalink-2.1.1-230725_4589 or later)

Addressed IBM WebSphere Application Server Liberty vulnerability : CVE-2023-0482, CVE-2023-28867

Addressed Java vulnerability: CVE-2023-21930, CVE-2023-21967, CVE-2023-21954, CVE-2023-21939, CVE-2023-21968, CVE-2023-21937, CVE-2023-21938, CVE-2023-2597

·      Released on 16-10-2023, Patched for listed fix (pvm-novalink-2.1.1-230921_4631 or later)

Addressed IBM WebSphere Application Server Liberty vulnerability : CVE-2023-38737

Addressed Java vulnerability: CVE-2023-22045, CVE-2023-22049

·      Released on 14-12-2023, Patched for listed fix (pvm-novalink-2.1.1-231212_4726 or later)

Addressed issue with long running processes which could cause Novalink in hung state.

Addressed issue with round off value for shared processor pool values.

·      Released on 07-02-2024, Patched for listed fix (pvm-novalink-2.1.1-240119 or later)

Addressed IBM WebSphere Application Server Liberty vulnerability : CVE-2023-44483, CVE-2023-44487, CVE-2023-46158

·      Released on 28-03-2024, Patched for listed fix (pvm-novalink-2.1.1-240119 or later) for RHEL base novalink.

Fixes an intermittent issue which might cause console connection errors when managing via PowerVC.

Steps to update:

    yum install https://public.dhe.ibm.com/systems/virtualization/Novalink/rhel/86/novalink_2.1.1/novalink/noarch/pypowervm-1.1.31-240304_2053.noarch.rpm

or

    download and install rpm on novalink  using “yum install <path where pypowervm rpm copied>/pypowervm-1.1.31-240304_2053.noarch.rpm”

           Restart nova compute services on novalink in case novalink is registered with PowerVC.

·      Released on 15-04-2024, Patched for listed fix (pvm-novalink-2.1.1-240320 or later) for RHEL base novalink.

Fixed an issue causing issues in establishing RMC connection between Novalink and AIX, Linux, VIOS partition when the partitions name and OS details are greater than defined length.

Addressed WLP and Java vulnerabilities : CVE-2023-50312 and CVE-2024-20952, CVE-2024-20918, CVE-2024

·      Released on 14-05-2024, Patched for listed fix (pvm-novalink_2.1.1-240320-4842 or later) for ubuntu 20.04 based powerVM Novalink.

Fix is to address issue with console on ubuntu20.04 based Novalink. Novalink repo has been updated to have fixed socat_1.7.3.3-2 package. To apply complete fix for console on ubuntu 20.04 please follow steps:

On Novalink Lpar

·      Update latest novalink from ubuntu focal distribution:
      sudo apt-get update
      sudo apt-get dist-upgrade

·      Ensure the kernel level is 5.4.0-177 or above installed

dpkg -l | grep linux-image-generic

·      Download socat packge having fix from Novalink repo and install on novalink

·     
  wget https://public.dhe.ibm.com/systems/virtualization/Novalink/debian/pool/optional/s/socat/socat_1.7.3.3-2ubuntu0.1_ppc64el.deb


      dpkg -i socat_1.7.3.3-2ubuntu0.1_ppc64el.deb

 

·      reboot the novalink lpar

·      Verify the kernel level is 5.4.0-177 or above

                 uname -a

·      ensure the package is 1.7.3.3-2ubuntu0.1 or above

                 dpkg -l | grep socat

·      Released on 01-07-2024, Patched for listed fix (pvm-novalink-2.1.1-240625 or later)

Addressed IBM WebSphere Application Server Liberty vulnerability : CVE-2024-22329, CVE-2024-22353, CVE-2024-27270, CVE-2024-27268, CVE-2024-25026, CVE-2024-22354, CVE-2023-51775

·      Released on 25-10-2024, Patched for listed fix ( pvm-novalink-2.1.1-240913 or later)

            Fix provided to clean-up temporary file create by VNC connection which might fail later with permission issue, when reconnecting console.

·      Released on 30-10-2024, Patched for listed fix (pvm-novalink-2.1.1-241015 or later)

Addressed vulnerability : CVE-2024-21147, CVE-2024-21145, CVE-2024-21140, CVE-2024-21144, CVE-2024-21138, CVE-2024-21131, CVE-2024-27267, CVE-2023-50314, CVE-2024-38808

·      Released on 03-01-2025, Patched for listed fix (pvm-novalink-2.1.1-241231 or later)

Addressed vulnerability : CVE-2024-40094, CVE-2024-47554, CVE-2024-7254

 

           

6.   Known Issues (PowerVM on Power)

NA

 

7.   PowerVM Novalink Installation

 

Installation instructions for PowerVM NovaLink are available on the on-line Knowledge Centre. 

·      https://www.ibm.com/support/knowledgecenter/POWER9/p9eig/p9eig_installing.htm

 

Installation instructions for PowerVM NovaLink for POWER10 are available on the on-line Knowledge Center. 

·      https://www.ibm.com/docs/en/power10/9080-HEX?topic=novalink-installing-powervm

 

8.   Software Life Cycle

 

PowerVM NovaLink uses versioning in the form of Version, Release, Mod Level and Fix (VRMF).  Example 2.0.0

 

·      Version and Release increments have a 3-year software support Lifecycle and follow IBM’s standard software lifecycle

 (http://www-01.ibm.com/software/support/lifecycle/lc-policy.html).

·      For Novalink Supported level:  

https://supportcontent.ibm.com/support/pages/node/6591007

 

 

See the Knowledge Center  for more information.