TECH

안녕하세요 오늘은 우리가 Red Hat Enterprise Linux를 운영하다보면 z-stream이란 패키지를 들어보셨을겁니다. 

이 패키지가 z-stream이야? 

- Z-stream 이란?

문제가 매우 심각하고 잠재적으로 많은 고객에게 영향을 미칠 수 있는 경우 Z-stream 패키지를 출시할 수 있습니다.

예시로 Red Hat Enterprise Linux 7 버전인 7.4을 사용한다면, 

"7"은 X(메이저) 버전이고, "4"은 Y(마이너) 버전입니다. 그러면 Z-stream은 다음 부 릴리스(7.5가 될 예정) 이전의 7.4 버전 내의 하위 릴리스를 나타냅니다.

즉, GA 버전외에 나오는것,  EUS or Backporting 되는것들을 Z-steram 이라 할 수 있습니다.

보안이슈로 패키지가 신규릴리즈 된것들도 Z-stream 입니다.  

- 아래와 같이 7.4 GA가 나온 후 7.4버전기준으로 이후에 보안취약이 적용되어 나오는 패키지들을 Z-stram이라 할수있습니다. 

tcpdump-4.9.0-5.el7.x86_64     7.4.0(마이너 릴리스)에서와 같이 나왔습니다.

systemtap-3.1-5.el7_4.x86_64   7.4.z에서 나왔습니다(z-스트림 정오표)

Q) 그럼 `_` 가 있으면 Z-stream 인가요?  

----------------------------------------------

Contents Explanation

openssl         Package Name

-1.0.1e         Upstream Version

-16         RPM Release Version

.el6         RHEL Major Release

_         Z-stream separator             <----------- 참고

5         The RHEL "minor" version that this package was forked from

.14         Number of updates that have occurred to this package. In this example,openssl-1.0.1e-16.el6_5.14 is the 14th update since 6.5-GA

.x86_64         Architecture

                - 64bit : x86_64

                - 32bit : i386/i686

                - IBM System Z : s390x

                - IBM Power : ppc64

> 참고링크

https://access.redhat.com/solutions/44508

----------------------------------------------

[원문]

We have two possible routes here.

If the issue is really severe and potentially could affect lots of customers, we might release a Z-stream package. What is a Z-stream? Take the current Red Hat Enterprise Linux 7 version as of this post: 7.3. “7” is the X (major) version, “3” is the Y (minor) version. Z-stream then indicates a sub-release within the 7.3 version, prior to the next minor release (which is going to be 7.4).

The Zs have a Red Hat-internal cadence, but sometimes something is really a show-stopper and we have to release an out-of-band Z-stream. The other possible scenario, usually for medium and lower priorities, is to enqueue the package update for the large batch of updates: the next Y stream (next minor release version).

Security errata, usually referred to as RHSAs, are sometimes so Critical that they are released the moment they are ready, regardless of any previous release plans for the same component or product. In fact, we have a track history of releasing fixes for most Critical security flaws in Red Hat Enterprise Linux in the same or next day of them becoming public knowledge.

Glossary

- Major version: Released every several years - RHEL 8, RHEL 7, RHEL 6, and so on

- Minor version: Released every 6 months or so - RHEL 8.0, RHEL 8.1, RHEL 8.2, and so on, also called a "Y release" as in "RHEL X.Y"

- Asynchronous Errata: A package release between minor versions, also called "z-Stream" as in "RHEL X.Y.z"

참고링크: 

https://www.redhat.com/en/blog/code-path-how-does-new-code-enter-red-hat-products

https://access.redhat.com/solutions/2074

https://access.redhat.com/discussions/1434473

https://docs.fedoraproject.org/en-US/packaging-guidelines/Naming/#Release_Tag

정리해서 말하자면, Z-stream은 최초 GA 버전이 나오고 그 버전안에서 문제가 발견되어 수정된 버전들을 Z-stream이라 할 수 있습니다.

backporting 된 패키지도 해당되는것이죠~!!

혹, 이해가 안되시거나 궁금한점 있으신분들은 댓글로 질문해주세요~^^