View source for OpenSUSE Leap 15.6 Release Notes

openSUSE Leap is a free and Linux-based operating system for your PC, Laptop or Server. You can surf the Web, manage your e-mails and photos, do office work, play videos or music and have a lot of fun!

'''Publication Date:''' 2024-06-10, '''Version:''' 15.6.20240610.a9f19f4

This is the initial version of the release notes for the forthcoming openSUSE Leap 15.6.

If you upgrade from an older version to this openSUSE Leap release, see previous release notes listed here: https://en.opensuse.org/openSUSE:Release_Notes.

This public beta test is part of the openSUSE project. Information about the project is available at https://www.opensuse.org.

Report all bugs you encounter using this prerelease of openSUSE Leap 15.6 in the openSUSE Bugzilla. For more information, see https://en.opensuse.org/Submitting_Bug_Reports. If you would like to see anything added to the release notes, file a bug report against the component “Release Notes”.

== Installation ==

This section contains installation-related notes. For detailed installation instructions, see the documentation at https://doc.opensuse.org/documentation/leap/startup/html/book-startup/part-basics.html.

=== Using Atomic Updates With the System Role Transactional Server ===

The installer supports the system role ''Transactional Server''. This system role features an update system that applies updates atomically (as a single operation) and makes them easy to revert should that become necessary. These features are based on the package management tools that all other SUSE and openSUSE distributions also rely on. This means that the vast majority of RPM packages that work with other system roles of openSUSE Leap 15.6 also work with the system role ''Transactional Server''.


<div style="background:#C0C0C0;border:1px solid #666666;padding-left:5px;padding-right:5px;padding-bottom:5px;padding-top:5px;">
'''Note: Incompatible packages'''

Some packages modify the contents of <code>/var</code> or <code>/srv</code> in their RPM <code>%post</code> scripts. These packages are incompatible. If you find such a package, file a bug report.
</div>


To provide these features, this update system relies on:

* '''Btrfs snapshots.'''  Before a system update is started, a new Btrfs snapshot of the root file system is created. Then, all the changes from the update are installed into that Btrfs snapshot. To complete the update, you can then restart the system into the new snapshot.

To revert the update, simply boot from the previous snapshot instead.

* '''A read-only root file system.'''  To avoid issues with and data loss because of updates, the root file system must not be written to otherwise. Therefore, the root file system is mounted read-only during normal operation.<br><br>To make this setup work, two additional changes to the file system needed to be made: To allow writing user configuration in <code>/etc</code>, this directory is automatically configured to use OverlayFS. <code>/var</code> is now a separate subvolume which can be written to by processes.


<div style="background:#FDDFA6;border:1px solid #BB7B03;padding-left:5px;padding-right:5px;padding-bottom:5px;padding-top:5px;">
'''Important: ''Transactional Server'' Needs At Least 12 GB of Disk Space'''

The system role ''Transactional Server'' needs a disk size of at least 12 GB to accommodate Btrfs snapshots.
</div>
<br>
<div style="background:#FDDFA6;border:1px solid #BB7B03;padding-left:5px;padding-right:5px;padding-bottom:5px;padding-top:5px;">
'''Important: YaST Does Not Work Transactional Mode'''

Currently, YaST does not work with transactional updates. This is because YaST performs things immediately and because it cannot edit a read-only filesystem.
</div>


To work with transactional updates, always use the command '''<code>transactional-update</code>''' instead of YaST and Zypper for all software management:

* Update the system: '''<code>transactional-update up</code>'''
* Install a package: '''<code>transactional-update pkg in ''PACKAGE_NAME''</code>'''
* Remove a package: '''<code>transactional-update pkg rm ''PACKAGE_NAME''</code>'''
* To revert the last snapshot, that is the last set of changes to the root file system, make sure your system is booted into the next to last snapshot and run: '''<code>transactional-update rollback</code>'''<br><br>Optionally, add a snapshot ID to the end of the command to rollback to a specific ID.

When using this system role, by default, the system will perform a daily update and reboot between 03:30 am and 05:00 am. Both of these actions are systemd-based and if necessary can be disabled using systemctl:

 systemctl disable --now transactional-update.timer rebootmgr.service

For more information about transactional updates, see the openSUSE Kubic blog posts https://kubic.opensuse.org/blog/2018-04-04-transactionalupdates/ and https://kubic.opensuse.org/blog/2018-04-20-transactionalupdates2/.

=== Installing on Hard Disks With Less Than 12 GB of Capacity ===

The installer will only propose a partitioning scheme if the available hard disk size is larger than 12 GB. If you want to set up, for example, very small virtual machines images, use the guided partitioner to tune partitioning parameters manually.

=== UEFI - Unified Extensible Firmware Interface ===

Prior to installing openSUSE on a system that boots using UEFI (Unified Extensible Firmware Interface), you are urgently advised to check for any firmware updates the hardware vendor recommends and, if available, to install such an update. A pre-installation of Windows 8 or later is a strong indication that your system boots using UEFI.

''Background:'' Some UEFI firmware has bugs that cause it to break if too much data gets written to the UEFI storage area. However, there is no clear data of how much is "too much".

openSUSE minimizes the risk by not writing more than the bare minimum required to boot the OS. The minimum means telling the UEFI firmware about the location of the openSUSE boot loader. Upstream Linux kernel features that use the UEFI storage area for storing boot and crash information (<code>pstore</code>) have been disabled by default. Nevertheless, it is recommended to install any firmware updates the hardware vendor recommends.

=== UEFI, GPT and MS-DOS Parititions ===

Together with the EFI/UEFI specification, a new style of partitioning arrived: GPT (GUID Partition Table). This new schema uses globally unique identifiers (128-bit values displayed in 32 hexadecimal digits) to identify devices and partition types.

Additionally, the UEFI specification also allows legacy MBR (MS-DOS) partitions. The Linux boot loaders (ELILO or GRUB 2) try to automatically generate a GUID for those legacy partitions, and write them to the firmware. Such a GUID can change frequently, causing a rewrite in the firmware. A rewrite consists of two different operations: Removing the old entry and creating a new entry that replaces the first one.

Modern firmware has a garbage collector that collects deleted entries and frees the memory reserved for old entries. A problem arises when faulty firmware does not collect and free those entries. This can result in a non-bootable system.

To work around this problem, convert the legacy MBR partition to GPT.

== System Upgrade ==

This section lists notes related to upgrading the system. For supported scenarios and detailed upgrade instructions, see the documentation at:

* https://en.opensuse.org/SDB:System_upgrade
* https://doc.opensuse.org/documentation/leap/startup/html/book-startup/cha-update-osuse.html

Make sure to also review the following sections of this documentation:

* Section "[[#Packaging Changes]]"
* Section "[[#Usage of 4096 bit RSA RPM and repository signing key]]"

== Packaging Changes ==

=== Important changes in updated packages ===

Package python-podman is now based on the project [https://github.com/containers/podman-py podman-py] was [https://github.com/containers/python-podman python-podman].

=== Deprecated Packages ===

Deprecated packages are still shipped as part of the distribution but are scheduled to be removed the next version of openSUSE Leap. These packages exist to aid migration, but their use is discouraged and they may not receive updates.

To check whether installed packages are no longer maintained, make sure that the <code>lifecycle-data-openSUSE</code> package is installed, then use the command:

 zypper lifecycle

=== Removed Packages ===

Removed packages are not shipped as part of the distribution anymore.

The following packages were all superseded by [https://en.opensuse.org/SDB:NVIDIA_SUSE_Prime NVIDIA SUSE Prime]. Also see Section "[[#Removal of Bumblebee packages]]"

* <code>bbswitch</code>
* <code>bumblebee</code>
* <code>bumblebee-status</code>
* <code>primus</code>

The following python packages were all removed from openSUSE Leap 15.6 as they are unmaintained and no longer part of openSUSE Factory.

* <code>python-pytest-faulthandler</code>
* <code>python-pytest-flake8dir</code>
* <code>python-pytest-ordering</code>
* <code>python-pytest-</code>
* <code>pythonpath</code>
* <code>python-pytest-random-order</code>
* <code>python-pytest-repeat</code>
* <code>python-pytest-reqs</code>
* <code>python-pytest-travis-fold</code>
* <code>python-IMDbPY</code>
* <code>python-Keras-Applications</code>
* <code>python-Ming</code>
* <code>python-PasteScript</code>
* <code>python-PyPrint</code>
* <code>python-Pykka</code>
* <code>python-Qt.py</code>
* <code>python-Quandl</code>
* <code>python-Theano</code>
* <code>python-abclient</code>
* <code>python-jupyter-nbutils</code>
* <code>python-jupyter_calysto</code>
* <code>python-jupyter_contrib_core</code>
* <code>python-jupyter_full_width</code>
* <code>python-jupyter_highlight_selected_word</code>
* <code>python-jupyter_imatlab_kernel</code>
* <code>python-jupyter_jgraph</code>
* <code>python-jupyter_jupyterlab_launcher</code>
* <code>python-jupyter_latex_envs</code>
* <code>python-jupyter_nbpresent</code>
* <code>python-jupyter_nbsmoke</code>
* <code>python-jupyter_sphinx</code>
* <code>python-jupyter_themer</code>
* <code>python-jupyter_vega</code>
* <code>python-jupyter_watermark</code>
* <code>python-nbindex-jupyter</code>
* <code>python-dephell-archive</code>
* <code>python-dephell-argparse</code>
* <code>python-dephell-discover</code>
* <code>python-dephell-licenses</code>
* <code>python-dephell-links</code>
* <code>python-dephell-setuptools</code>
* <code>python-dephell-shells</code>
* <code>python-demjson</code>
* <code>python-discover</code>
* <code>python-django-babel</code>
* <code>python-djvulibre</code>
* <code>python-dnsdiag</code>
* <code>python-efilter</code>
* <code>python-enum-compat</code>
* <code>python-featureflow</code>
* <code>python-flake8-future-import</code>
* <code>python-flask-peewee</code>
* <code>python-flask-restplus</code>
* <code>python-pep517</code>
* <code>python-piston-mini-client</code>
* <code>python-pomegranate</code>
* <code>python-proboscis</code>
* <code>python-pyIOSXR</code>
* <code>python-pyblake2</code>
* <code>python-pyfg</code>
* <code>python-pygeos</code>
* <code>python-pympv</code>
* <code>python-python-fileinspector</code>
* <code>python-python-jsonrpc-server</code>
* <code>python-socketIO-client-nexus</code>
* <code>python-sphinxcontrib-actdiag</code>
* <code>python-spyder-line-profiler</code>
* <code>python-spyder-memory-profiler</code>
* <code>python-spyder-unittest</code>
* <code>python-sqlsoup</code>
* <code>python-test-server</code>
* <code>python-img2pdf</code>
* <code>python-jenkins-job-builder</code>
* <code>python-jgraph</code>
* <code>python-jsonextended</code>
* <code>python-jsonlib-python3</code>
* <code>python-jsonpath-rw-ext</code>
* <code>python-jupytext</code>
* <code>python-keepalive</code>
* <code>python-keyczar</code>
* <code>python-language-check</code>
* <code>python-logilab-astng</code>
* <code>python-lws</code>
* <code>python-lzmaffi</code>
* <code>python-missingno</code>
* <code>python-mockldap</code>
* <code>python-moksha-common</code>
* <code>python-moviepy</code>
* <code>python-murano-pkg-check</code>
* <code>python-uncompyle6</code>
* <code>python-whois_similarity_distance</code>
* <code>python-nose-cover3</code>
* <code>python-nose-random</code>
* <code>python-openstack.nose_plugin</code>
* <code>python-nagiosplugin</code>
* <code>python-nbsphinx-link</code>
* <code>python-os-api-ref</code>
* <code>python-oslo.db</code>
* <code>python-pampy</code>
* <code>python-pass_</code>
* <code>python_keyring</code>
* <code>python-pdfkit</code>
* <code>python-qgrid</code>
* <code>python-raet</code>
* <code>python-ravello-sdk</code>
* <code>python-requests-html</code>
* <code>python-ruamel.yaml.cmd</code>
* <code>python-rustcfg</code>
* <code>python-serpy</code>
* <code>python-shouldbe</code>
* <code>python-sigal</code>
* <code>python-slumber</code>
* <code>python-torch</code>
* <code>python-tox-travis</code>
* <code>python-trello</code>
* <code>python-twodict</code>

== Drivers and Hardware ==

=== Removal of Bumblebee packages ===

Packages maintained as part of [https://build.opensuse.org/project/show/X11:Bumblebee X11:Bumblebee] project were succeeded by [https://en.opensuse.org/SDB:NVIDIA_SUSE_Prime NVIDIA SUSE Prime]. Bumblebee packages will no longer be part of the standard distribution. See details in [https://code.opensuse.org/leap/features/issue/142 the drop feature request tracker].

=== Secure Boot: Third-Party Drivers Need to Be Properly Signed ===

Starting with openSUSE Leap 15.2, kernel module signature check for third-party drivers (<code>CONFIG_MODULE_SIG=y</code>) is now enabled. This is an important security measure to avoid untrusted code running in the kernel.

This may prevent third-party kernel modules from being loaded if UEFI Secure Boot is enabled. Kernel Module Packages (KMPs) from the official openSUSE repositories are not affected, because the modules they contain are signed with the openSUSE key. The signature check has the following behaviour:

* Kernel modules that are unsigned or signed with a key that is either known as untrusted or cannot be verified against the system's trusted key data base will be blocked.

It is possible to generate a custom certificate, enroll it into the system's Machine Owner Key (MOK) data base, and sign locally compiled kernel modules with this certificate's key. Modules signed in this manner will neither be blocked nor cause warnings. See https://en.opensuse.org/openSUSE:UEFI.

Since this also affects NVIDIA graphics drivers, we addressed this in our official packages for openSUSE. However, you need to manually enroll a new MOK key after installation to make the new packages work. For instructions how to install the drivers and enroll the MOK key, see https://en.opensuse.org/SDB:NVIDIA_drivers#Secureboot.

=== Network install image hangs on boot on Raspberry Pi ===

Booting the network install image from USB stick on Raspberry Pi 4 hangs on boot. To resolve this issue, add the <code>console=tty</code> boot parameter. See details in the known issues section of our [https://en.opensuse.org/HCL:Raspberry_Pi4#Boot_from_USB_in_Net_install_image_of_Leap_15.4_hangs_on_boot Raspberry Pi 4 Hardware Compatibility List].

== Desktop ==

This section lists desktop issues and changes in openSUSE Leap 15.6.

=== KDE 4 and Qt 4 removal ===

KDE 4 packages will not be part of openSUSE Leap 15.4. Please update your system to Plasma 5 and Qt 5. Some of Qt 4 packages might still remain for compatibility reasons. https://bugzilla.opensuse.org/show_bug.cgi?id=1179613.

=== <code>noveau</code> disabled for NVIDIA Turing and Ampere GPUs/openGPU recommendation ===

The <code>nouveau</code> driver is still considered experimental for Nvidia Turing and Ampere GPUs. Therefore it has been disabled by default on systems with these GPUs.

Instead of using the nouveau driver we recommend using Nvidia's new openGPU driver. Install this driver by installing these following packages:

* nvidia-open-driver-G06-signed-kmp-default
* kernel-firmware-nvidia-gsp-G06

Then uncomment the <code>options nvidia</code> line in the <code>/etc/modprobe.d/50-nvidia-default.conf</code> file so that it looks like the following afterwards:

 ### Enable support on *all* Turing/Ampere GPUs: Alpha Quality!
 options nvidia NVreg_OpenRmEnableUnsupportedGpus=1

If you prefer using <code>nouveau</code> driver anyway, add <code>nouveau.force_probe=1</code> to your kernel boot parameters, and do not install the above openGPU package.

=== Starting <code>ibus</code> automatically under KDE Plasma ===

<code>ibus</code> does not start automatically under KDE Plasma. This can be fixed by adding the appropriate command to the autostart section. To do that, go to System Settings, Startup and Shutdown, Autostart and there click on the Add… button, and then click on Add Application…. In the opened dialog window type <code>ibus-daemon -x</code> into the text box and click OK. For more information see https://bugzilla.suse.com/show_bug.cgi?id=1211977.

== General ==

=== <code>iotop</code> support ===

'''<code>iotop</code>''' does not display values for SWAPIN and IO %.

Since Linux kernel 5.14, either kernel boot parameter <code>delayacct</code>  needs to be specified or <code>kernel.task_delayacct</code> sysctl needs to be enabled.

== Security ==

This section lists changes to security features in openSUSE Leap 15.6 

=== Usage of 4096 bit RSA RPM and repository signing key ===

We switched the RPM and repository signing key of openSUSE Leap 15.5 from 2048 bit RSA to a 4096 bit RSA key. This key was previously introduced to openSUSE Leap 15.4 users in a maintenance update. Users upgrading from older releases will need to import the new key manually as described in https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key.

=== Cockpit root login is disabled by default ===

Cockpit is newly part of openSUSE Leap 15.6. However, similarly to sshd, the password-based login for root is disabled by default. Users need to manually edit <code>/etc/cockpit/disallowed-users</code> and restart <code>cockpit.socket</code> as described in https://news.opensuse.org/2024/04/29/try-cockpit-in-leap-rc/ to allow root login.

== More Information and Feedback ==

* Read the <code>README</code> documents on the medium.
* View a detailed changelog information about a particular package from its RPM:<br><code>rpm --changelog -qp FILENAME.rpm</code>
* Replace ''<code>FILENAME</code>'' with the name of the RPM.
* Check the <code>ChangeLog</code> file in the top level of the medium for a chronological log of all changes made to the updated packages.
* Find more information in the <code>docu</code> directory on the medium.
* For additional or updated documentation, see https://doc.opensuse.org/ .
* For the latest product news, from openSUSE, visit https://www.opensuse.org. 

Copyright © 2024 SUSE LLC