New Update: edgeLinux 0.13.0

Official Release: antsle releases edgeLinux 0.13.0

San Diego – June 20, 2019

100%Upgrade Now!

1. What’s New?

ZombieLoad Patch

You have likely heard of the ZombieLoad bug in Intel CPUs that could allow a skilled unprivileged local entity to bypass certain memory restrictions and gain read access to privileged memory.Although this is less of a problem for private cloud versus public cloud, as you have no nosy (and unknown) neighbors on the same physical device, we of course want to address this.This edgeLinux update includes a Linux kernel and qemu update to migrate this vulnerability. This is a hardware bug, but the software mitigation clears the CPU buffers, hence eliminating the method an attacker could use. Clearing CPU buffers will have a performance impact, this impact will likely be very small but it does depend on your workload, Programs that do a lot of small small packet network I/O could see an effect.

2. Installation Instructions

Prerequisites:

  • edgeLinux 0.12.1
  • antMan 0.11.1b or later

Installation:

1. Login to your antsle or edgeLinux server via ssh: ssh <my-username>@<my-hostname>.local, run the upgrade script: upgrade-edgelinux.2. Once your server has finished upgrading and has rebooted, make a new tab in your browser and point it to http://<my-hostname>.local or https://<subdomain>.antsle.us if you set the subdomain. Enjoy your upgraded and secure antsle/edgelinux server.Additional Information: The upgrade script will first take a backup of your server, in the unlikely event you do have to rollback contact support. Your server may prompt you for a confirmation if the server needs to be rebooted (say if the kernel is being upgraded) or if you would also like to upgrade antMan.Your backup file is not deleted automatically as it contains your previous environment backup and should only be deleted if the edgeLinux upgrade completed successfully, you checked your antlets and data are there. We typically recommend to keep last 3 backups, if desired on external disks, but is up to you.Please note upgrading will not effect the uptime of your antlets, unless you need to reboot the server.