FAQ SUSE Enterprise for IBM Z and LinuxONE

SUSE® Linux Enterprise Server for IBM Z and LinuxONE

July 2020

What is IBM Z? deliver uninterrupted service. And LinuxONE is afford- IBM Z servers are large-scale computer systems able, with elastic cloud pricing that is 60% less than which are mainly used by customers for business- public cloud and 32% less than on-premises cloud. critical installations in organizations which need very The IBM LinuxONE Emperor server is an I/O superhero high availability and reliability. For such organizations, that scales to support 30 billion RESTful web inter- IBM Z machines normally provide a lower total cost actions per day, without fail. It delivers the ultimate of ownership than other platforms, especially when flexibility, scalability, performance and security for running a variety of workloads concurrently. IBM Z business-critical Linux applications. With a huge ca- servers have become well known for server virtu- pacity range, you can grow to veritably limitless scale alization and workload consolidation through their to handle the most demanding workloads. The IBM superior capabilities, which provide the opportunity LinuxONE Rockhopper server delivers unprecedented to minimize IT costs. Linux environments on IBM Z performance, security and resiliency in an entry-level servers build on the outstanding capabilities of z/ server. This new Linux platform delivers 40 percent VM . They focus on optimal resource more virtual containers per core than the previous utilization, high flexibility, easy and fast provisioning, version, and delivers massive, high-performance I/O load-balancing and efficient systems management. throughput for the demands of a growing business. The IBM Z hardware technology is designed to run multiple and different workloads in parallel, and pro- Is SUSE® Linux Enterprise Server for IBM Z and vides a balanced system, internal networking, and LinuxONE the right hardware platform for me? unmatched levels of availability and security. SUSE Linux Enterprise Server for IBM Z and LinuxONE running on an IBM mainframe is the ideal choice for What is IBM LinuxONE? customers with existing mainframes that want to IBM LinuxONE servers are large-scale computer add Linux and benefit from the combined advan- systems that run enterprise Linux and deliver per- tages, as well as new customers that decide for the formance, data protection, service continuity and effi- first time to buy an IBM Z or LinuxONE machine ciency. LinuxONE is open, with the freedom and agility running Linux. Mainly this combined solution is ideal of open source and standards through enterprise for customers that: Linux. LinuxONE is fast, with the ability to manage 30 billion RESTful web interactions per day with sub- • Host hundreds of virtual servers that run a mix second response time. LinuxONE is trusted and certi- of workload types and need to consolidate their fied as the most secure, open platform and proven to environment

1 SUSE.com FAQ 2020

• Are experiencing or projecting IT growth and want I am new to Linux on IBM Z. What is an IFL? a better way to manage that growth with z/VM An Integrated Facility for Linux, or IFL for short, is a • Struggle to host I/O and data-intensive workloads specialty engine for the IBM mainframe dedicated in virtual servers with acceptable levels of perfor- to running Linux with or without z/VM. IFLs are one mance, scalability, availability, capacity planning of three types of mainframe processors expressly or disaster recovery designed to reduce software costs. (The other types • Need high I/O bandwidth and scalability, or rock- are zAAP for Java code and zIIP for DB2.) solid system security restricts IFLs to Linux workloads by omitting some processor instructions not used by the Linux kernel. What is z/VM? z/VM is the virtualization technology in IBM Z. In other In what ways can Linux be run on the words, it is an designed mainframe? for IBM Z (or any equivalent server designed to the On an IFL, Linux can run in standalone mode in a z/Architecture). Using z/VM you can run different (LPAR) and under z/VM. Currently, operating systems such as z/OS and SUSE Linux approximately 95% of Linux deployments on IBM Z Enterprise Server for IBM Z and LinuxONE with dif- are run under z/VM. ferent workloads in parallel and in virtual machines on the host mainframe. Visit www...com for more information.

In addition, z/VM lets you remap and existing What are the benefits of SUSE Linux Enterprise system resources. This means that you can fine tune Server for IBM Z and LinuxONE? your virtual environment (even dynamically) to adapt When you combine Linux with IBM’s industry-leading to existing and changing needs. You can add capacity virtualization technology—z/VM—running in an IBM (in the CPU, I/O and network) on the fly and redirect Z environment, it delivers the high level of avail- it if you need it elsewhere. ability and productivity required in today’s global, networked environment. Leveraging all of these What is SUSE Linux Enterprise Server for IBM Z exceptional IBM Z and LinuxONE capabilities with and LinuxONE? Linux on z/VM and KVM can improve the total cost of SUSE Linux Enterprise Server for IBM Z and LinuxONE ownership in your IT infrastructure. Together, IBM and is a commercial Linux operating system specifically SUSE are introducing IT organizations to the compel- tailored for the mainframe. This means that vari- ling business value of hosting virtual servers on IBM Z ous z/VM operating system and IBM Z and LinuxONE and LinuxONE with z/VM and Linux. With SUSE Linux hardware features are exploited by SUSE Linux Enterprise Server for IBM Z and LinuxONE, you can Enterprise Server to ensure that resource sharing, take advantage of the following benefits: disaster recovery and other capabilities are avail- able for SUSE Linux Enterprise Server for IBM Z and • Reduced training costs and increased productiv- LinuxONE. ity of IT staff • Reduced software costs by consolidating a SUSE Linux Enterprise Server for IBM Z and LinuxONE large number of virtual machines per IBM Z or lets you consolidate existing distributed workloads LinuxONE core and bring new workloads onto IBM Z servers to help • Reduced energy costs and power usage minimize costs, reduce downtime, decrease data • Reduced facilities costs and floor space with center complexity and increase business agility. dense server consolidation on IBM Z or LinuxONE

SUSE Linux Enterprise Server for IBM Z and LinuxONE ensures protection against outsider threats for IBM Z installations with support for IBM Secure Execution and Secure Boot.

2 SUSE.com FAQ 2020

I heard that mainframes, when used for server Does SUSE Linux Enterprise Server for IBM Z virtualization and running Linux, may lower total and LinuxONE inherit other advantages from the cost of ownership (TCO) considerably. What kind SUSE Linux Enterprise platform? of savings do I get? Besides the specific IBM Z features, SUSE Linux You can share per-processor software licenses Enterprise Server for IBM Z and LinuxONE also has among multiple Linux virtual servers running on a some unique advantages that come with the SUSE single mainframe. These processors can either be Linux Enterprise platform: a standard engine or an IFL engine. An IFL is a spe- cialty processor from IBM that is designed to make • SUSE Linux Enterprise Server for IBM Z and it more economical to run Linux workloads on the LinuxONE is part of the SUSE Linux Enterprise mainframe. An Oracle license for a standard engine common code base. This means the versions, or IFL, for example, is the same price as an Oracle and thereby the , of all core packages license for a one-processor server. of the SUSE Linux Enterprise product family are the same—from the desktop to the mainframe. A mainframe requires only about 20% of the floor The toolchain, like compilers and libraries (glibc), space and power use of comparable capacity x86 are the same across the supported hardware ar- servers. When IBM releases a new processor technol- chitectures. The common code base guarantees ogy, it is typically much faster and has more features. product consistency and a persistent look and IFL owners will not have to pay for the upgraded IFLs feel, which lets you leverage the skills of your in the new machine. This is not common practice IT staff. Additionally, it provides for the highest among vendors running Linux on x86 servers. code quality, better supportability and preemp- tive code maintenance. What are the most important advantages, in terms • Thanks to the common code base, SUSE pro- of functionality, that are gained by running SUSE vides new innovative core technologies that im- Linux Server on a mainframe? prove efficiency and help you stay competitive for all architectures, including IBM Z. • Faster server provisioning in the form of virtual servers (minutes or hours versus days and weeks) Is it true that SUSE Linux Enterprise Server • Higher performance communication among ships with some unique tools? Linux virtual servers and other system compo- With every SUSE Linux Enterprise Server for IBM Z and nents such as z/VM and z/OS running on the LinuxONE subscription, you get access to unique tools same IBM Z and LinuxONE hardware for systems management and increased availability: • Inherited disaster recovery • Higher utilization for mixed workloads • The YaST® installation and configuration frame- • “ in a box”—Multiple complete in-tier work is unique because it covers a wide range applications in one physical footprint of management tasks and features in an intui- tive graphical interface. Developed to provide an What workloads are best suited for SUSE Linux extensible and standardized means of systems Enterprise Server for IBM Z and LinuxONE? administration, YaST serves three main pur- A mixture of high I/O transaction-oriented workloads poses: the installation of SUSE Linux Enterprise and moderately CPU intensive workloads are best for products on a system, the configuration of the mainframes; however, Oracle, SAP, IBM middleware, installed system, and the administration of the and many other ISVs contribute to the more than installed system. 3,150 applications running on Linux on the main- • AutoYaST provides fully customizable, automatic frame. Almost all of IBM’s middleware applications and remote Linux installation for large numbers run on SUSE Linux Enterprise Server for IBM Z and of systems that share a similar environment and LinuxONE. In addition, hundreds of open source ap- similar—but not necessarily identical—hardware, plications that run on SUSE Linux Enterprise Server and which perform similar tasks. for x86 servers, such as Apache, MySQL and , • The downloadable Subscription Management also run on the mainframe. Tool for SUSE Linux Enterprise is integrated with

3 SUSE.com FAQ 2020

SUSE Customer Center and provides a repository services. In this scenario, Kubernetes manages and registration target that is synchronized with the orchestration of containers, but it has no ac- SUSE Customer Center. You can host the most cess to the data inside the Secure Execution en- recent version of the tool on IBM Z servers as well. vironment container. The Subscription Management Tool helps you centrally manage software updates within the • Enhanced virtualization capabilities to boost firewall on a per-system basis, while maintaining resource utilization using KVM and z/VM, giving your corporate security policies and regulatory you the ability to create several virtual machines compliance. In addition, it helps you track your that run on a single processor and handle mul- entitlements in large deployments. And using tiple workloads. This lets you reduce or elimi- the tool, you can avoid redundant bandwidth re- nate the need to buy more hardware and lets quirements by downloading all patches at once. you consolidate physical systems to shrink your It is included with every SUSE Linux Enterprise data center footprint and simplify maintenance subscription at no additional cost—while the for your IT staff. competition is charging for comparable function- ality—and is fully supported. • Advanced RAS capabilities increase reliability • Unlike other vendors, SUSE includes the SUSE and reduce costs, providing extra dimensions Linux Enterprise High Availability Extension with of availability and ensuring the highest levels of every subscription, making high availability af- security while reducing your planned and un- fordable. This extension helps you maintain planned downtime and supporting the legendary business continuity, protect data integrity and RAS characteristics of IBM Z. reduce unplanned downtime for your mission- critical workloads. Learn more at www.suse. • Improved operational efficiency with tools you com/products/highavailability/. won’t find anywhere else and by taking advan- tage of the networking and communications What’s new with SUSE Linux Enterprise Server for features for OpenFabrics Enterprise Distribution, IBM Z and LinuxONE 15 SP2: shared memory communications and enhanced support. Our systems management SUSE Linux Enterprise Server 15 SP2 has support for tools dramatically reduce tedious, complicated all the latest IBM z15 and LinuxONE III Single Frame and labor-intensive maintenance. machines including: • Maximize system uptime and availability for • High performance and throughput with support critical systems with Live Patching for IBM Z and for the latest technology advances in SIMD (Single LinuxONE. Improve business continuity and save Instruction, Multiple Data) and SMT (Simultaneous costs by reducing downtimes, increasing service Multithreading) across the full range of IBM Z and availability and enhancing security and compliance. LinuxONE systems. What’s new with SUSE Linux Enterprise Server • Increased security and data protection by sup- for IBM Z and LinuxONE 15? porting the latest cryptographic acceleration for SUSE Linux Enterprise Server 15 GA has improved secure-key operations and new hardware assists support for IBM z13 and IBM z14 machines. This fol- for fast data encryption. Incorporating IBM Secure lowing new features are supported: Execution for Linux provides a Trusted Execution Environment that is designed to run large num- • With z14, the hardware provides an indication of bers of workloads in full isolation at scale, with the configuration level of SIE, for example LPAR enterprise-grade confidentiality and protection of or KVM. IBM z14 sample configurations help to sensitive data from internal and external threats analyze and optimize KVM performance. across the hybrid cloud environment. Additionally, • CPU-MF Hardware Counters are added for IBM z13 Secure Execution extends to containers, enabling and z13s. You can now access counters from the protection of sensitive databases and blackchain MT-diagnostic counter set that is available with

4 SUSE.com FAQ 2020

IBM z13. You can also specify z13 specific coun- applications running on KVM can retrieve hypervi- ters using their symbolic event names and obtain sor capacity data through the LPAR if not provided counter descriptions with the lscpumf utility. by the Linux kernel. • For IBM z14 machines, access to the host’s • Machine checks caused by failing KVM guests are INVALIDATE PAGE TABLE is provided via the now targeted at the KVM virtual server instead of Guest Address-Space-Control Element (ASCE). the KVM hypervisor, thus making the hypervisor The KVM host kernel can use the host DAT- more resilient. enhancement 1 facility to avoid unnecessary • TLB Purge Enhancements are supported under purging of guest TLB entries. KVM. This improves performance for KVM guests, • Store Hypervisor Information (STHYI) from LPAR in particular when subject to memory pressure. is available in KVM. Non-privileged user-space • Transparent Facility Bit Handling is supported. applications running on KVM can retrieve hypervi- Hardware functions that do not need a specific sor capacity data through the LPAR if not provided configuration in the KVM hypervisor are enabled by the Linux kernel. for KVM guests. • KVM guests can now use CPU features, including • The IBM Call Home feature is enabled for KVM. CPACF functions, that were introduced with IBM z14. • The LLVM compiler supports IBM z14 instructions For a complete and detailed list of what’s new in ver- forimproved performance. sion 15, please refer to the Release Notes at www. • OpenSSL, ibmca, and libica support IBM z14 suse.com/releasenotes/x86_64/SUSE-SLES/15/. instructions for AES-GCM-based encryption of data in flight. What’s new with SUSE Linux Enterprise Server • Support for the True Random Number Generator for IBM Z and LinuxONE 12 Service Pack 3 (SP3)? (TRNG, CPACF MSA7) in IBM z14 machines via SUSE Linux Enterprise Server for IBM Z and LinuxONE CPACF. This improves the availability of random 12 SP3 provides support for some exciting new tech- data in the kernel entropy pool. nology for Linux on IBM Z: • libica supports hardware acceleration for the SHA3 algorithm (CPACF MSA6) using CPACF hard- • Optimize workloads on IBM Z with full sup- ware in IBM z14 machines. port for SUSE KVM on Z. Kernel-based Virtual • Improved performance on IBM z14 machines through Machine (KVM) is an innovative full virtualiza- enhanced instruction set support in the toolchain. tion solution for Linux. It consists of a loadable • The SIMD instructions for IBM z14 can be used in kernel module that provides the core virtual- user space for improved performance of analytic ization infrastructure and a processor specific workloads and math libraries. module. Using KVM, you can run multiple virtual machines running unmodified operating system The following new features are supported in SUSE images. Each virtual machine has private virtu- Linux Enterprise Server 15 GA under KVM: alized hardware: a network card, disk, graphics adapter, etc. SUSE KVM is included in the base • Standard network boot setups can be used to and is now fully supported. deploy KVM guests. • Increase data security for IBM Z with enhanced • LOADPARM and BOOTPROG are fully supported. cryptographic support for the latest Public Key A boot menu selection is available during IPL, for Cryptography Standards and Crypto hardware example, to recover from a defective KVM guest acceleration. operating system. • Keyless Guests are supported for performance What’s new with SUSE Linux Enterprise Server gains through improved memory handling for for IBM Z and LinuxONE 12 Service Pack 2 (SP2)? workloads running on Linux. SUSE Linux Enterprise Server for IBM Z and LinuxONE • Guarded Storage Facility is supported for im- 12 SP 2 provides support for some exciting new tech- proved performance of all Java workloads on nology for Linux on IBM Z. KVM virtual servers. • Store Hypervisor Information (STHYI) from LPAR • Support for the latest technology advances in is available in KVM. Non-privileged user-space SIMD (Single Instruction, Multiple Data) and SMT

5 SUSE.com FAQ 2020

(Simultaneous Multithreading) across the full In addition, we deliver new capabilities and feature range of IBM LinuxONE and IBM Z enhancements that help you accelerate innovation, • Complete support for the newest virtualization increase uptime and improve operational efficiency. capabilities of IBM KVM and z/VM, and the latest advances in container management What is the pricing for the SUSE Linux Enterprise • Networking and communications improvements Server for IBM Z and LinuxONE? such as OpenFabrics Enterprise Distribution, SUSE Linux Enterprise Server for IBM Z and LinuxONE shared memory communications, and enhanced is priced per-IFL specialty engine or processor. HiperSockets support However, SUSE recognizes the challenges custom- • Now certified for FIPS 140-2 and supports the ers are facing in enterprise data centers, and the latest cryptographic acceleration for secure-key pressure to cut costs. Thus, we offer a special pricing operations and new hardware assists for fast data model—the so-called multi-IFL pricing. This pric- encryption ing model provides volume discounts for subscrip- • Accessibility to open source packages for IBM Z tions of SUSE Linux Enterprise Server for IBM Z and users through Package Hub which includes vali- LinuxONE to multiple IFLs. dated open source software for IBM LinuxONE and IBM Z The commercial terms are the same as those for the usual subscription model for SUSE Linux Enterprise What’s new with SUSE Linux Enterprise Server Server. With the multi-IFL pricing model, subscrip- for IBM Z and LinuxONE 12 Service Pack 1 (SP1)? tions are available for 1 IFL, 2 to 5 IFLs, 6 to 11 IFLs, SUSE Linux Enterprise Server for IBM Z and LinuxONE and 12 or more IFLs. All multi-IFL subscriptions 12 SP 1 provides support for some exciting new tech- for SUSE Linux Enterprise Server for IBM Z and nology for Linux on IBM Z. LinuxONE for IBM Z Business or Enterprise server mainframes are available either as Basic, Standard or • KVM for IBM Z provides open source virtualization Priority subscriptions. All multi-IFL subscriptions are for the IBM mainframe. Using the combination of available for a 1-year, a 3-year or a 5-year subscrip- KVM virtualization and IBM Z, you have the per- tion term. For more information about the support formance and flexibility to address the require- options for SUSE Linux Enterprise, visit www.suse. ments of multiple, differing Linux workloads. To com/support/programs/subscriptions/. make sure our mutual customers get the best integrated Linux-based virtualization solution for Why should I choose SUSE Linux Enterprise Server IBM Z, SUSE is closely collaborating with IBM on for IBM Z and LinuxONE over other Linux its KVM for IBM Z technology and provides full distributions for mainframes? support for this technology. SUSE Linux Enterprise Server for IBM Z and LinuxONE • Containers are a virtual environment within the is the market-leading Linux operating system for IBM Linux OS instance. Containers have similar re- Z, and it incorporates more than 15 years of technol- source isolation and allocation benefits as virtual ogy expertise for Linux on the mainframe. In 1999, machines but a different architectural approach SUSE started its cooperation with IBM and Marist allows them to be very portable and flexible. College to move the available Linux code into an is a specific implementation of a con- enterprise-ready . Since that time, tainer solution. It is a powerful tool to build, SUSE has been on the forefront of Linux on IBM Z. modify, deploy, run, and manage containers. It comes with an extreme focus on efficiency and SUSE Linux Enterprise Server for IBM Z and LinuxONE fast response times. With SUSE Linux Enterprise has been available to customers since 2000. Entering Server for IBM Z and LinuxONE 12 SP1, we ship the this new market, it was the only available enterprise- foundation for the support of container engine class Linux—commercially maintained and supported— from open source Docker project on IBM Z. that delivered the reliability, availability and serviceability (RAS) expected by IBM’s main frame customers.

6 SUSE.com FAQ 2020

Although other enterprise-like Linux offerings en- In addition, SUSE Linux Enterprise Server for IBM Z tered the market, SUSE Linux Enterprise Server and LinuxONE includes many features to improve clearly dominates the Linux mainframe market to- operational efficiency, increase uptime, and acceler- day. When you consolidate workloads using SUSE ate innovation. Some of these features are: Linux Enterprise Server for IBM Z and LinuxONE, you receive all the benefits of mainframe computing and • Security: Support for the latest IBM Z hardware Linux, including high reliability, immense scalability, based PKCS #11 cryptographic cards. PKCS #11 is solid security and the ability to consolidate distrib- part of the Public-Key Cryptography Standards, uted workloads cost effectively. and is widely used for access smart cards and in hardware security models. This functionality What is the relationship between SUSE and IBM in is required for financial institutions and other or- the development of SUSE Linux Enterprise Server ganizations that need to ensure encrypted, au- for IBM Z and LinuxONE? thenticated and secured transactions. To easily SUSE and IBM continue to work very closely together set-up this crypto hardware stack on IBM Z, you in Germany at the SUSE office in Nuremberg and can also select a new install pattern in YaST dur- IBM’s Boeblingen development center. SUSE contin- ing installation. ues to be the first to take advantage of the hardware • RAS (reliability, availability, serviceability): capabilities of IBM’s Z for Linux and is typically first to PCHID mapping helps you to determine the phys- work with IBM to support new features and to make ical channel-ID (PCHID) associated with a chan- those advancements available in the mainstream nel path identifier (CHPID) and results in faster Linux kernel. SUSE and IBM, in conjunction with IBM’s problem resolution. With the kernel support for mainframe customers, are working together to de- concurrent Flash MCL (microcode level) updates termine what changes to make to the Linux kernel to Flash storage media during operation, you can so you can take full advantage of IBM Z hardware apply upgrades without impacting I/O operations and the z/VM operating system. to the flash storage media. Disk mirroring with real-time enhancement for IBM Z provides bet- How can I purchase SUSE Linux Enterprise ter service availability. With the function Dump Server for IBM Z and LinuxONE? to zfcp/SCSI Partition, the SCSI dump tool writes You can purchase SUSE Linux Enterprise Server for dumps directly to a SCSI partition, without using IBM Z and LinuxONE from your IBM sales or business a file system. partner representative when you are purchasing a • Increased operational efficiency and perfor- new IBM Z machine, or when you are purchasing mance: Improved performance of dasdfmt new IBM IFLs for your existing mainframe. You can enhances the speed of the DASD formatting pro- also purchase it directly from SUSE. You can simply cess. This lowers administration time and efforts, call your SUSE sales representative or use the link and supports growth with the option to use larger below to request a sales call. future DASDs. Support of transparent large pages provides performance improvements for applica- What are some of the features that have been tions that access large amounts of anonymous implemented with SUSE Linux Enterprise Server memory. The feature multiple netiucv paths for for IBM Z and LinuxONE? communication between z/VM guests lets you To make sure you get the most out of your environ- establish multiple netiucv connections between ment, and so you benefit from the latest hardware in- the same two z/VM guests, which results in better novation, we decided to do an Architecture Level Set scalability for z/VM Linux data exchange and im- that provides state of the art IBM Z processor hard- proved performance. The Optimized Compression ware exploitation for IBM z196, z114, zBC12, zEC12, z13, Library zlib improves performance and lowers z14 and z15—as well as the latest LinuxONE models. processor resource consumption for applications For you, this means a much faster Linux system with using this library. Support for zPXE Boot provides an enhanced compiler and toolchain that help boost a similar function to the PXE boot on x86 and your application performance. x86-64 for easier automated installation.

7 288-000021-002 | © 2020 SUSE LLC. All Rights Reserved. SUSE and the SUSE logo are registered trademarks of SUSE LLC in the United States and other countries. All third-party trademarks are the property of their respective owners. SUSE.com