An introduction to today’s
Modular Operating
System
Intel Open Source Technology Center
*Other names and brands may be claimed as the property of others
3
Legal Disclaimer
© 2018 Intel Corporation. Intel, the Intel logo, Intel Inside, the Intel Inside logo, Intel Experience What’s Inside, The Intel Experience What’s Inside logo, and Xeon are trademarks of Intel Corporation in the U.S.
and/or other countries. *Other names and brands may be claimed as the property of others.
Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Learn more at intel.com, or from the OEM or retailer.
Intel processors of the same SKU may vary in frequency or power as a result of natural variability in the production process.
For more complete information about performance and benchmark results, visit www.intel.com/benchmarks.
The cost reduction scenarios described are intended to enable you to get a better understanding of how the purchase of a given Intel based product, combined with a number of situation-specific variables, might
affect future costs and savings. Circumstances will vary and there may be unaccounted-for costs related to the use and deployment of a given product. Nothing in this document should be interpreted as either a
promise of or contract for a given level of costs or cost reduction.
Intel does not control or audit third-party benchmark data or the web sites referenced in this document. You should visit the referenced web site and confirm whether referenced data are accurate.
Optimization Notice: Intel's compilers may or may not optimize to the same degree for non-Intel microprocessors for optimizations that are not unique to Intel microprocessors. These optimizations include SSE2,
SSE3, and SSSE3 instruction sets and other optimizations. Intel does not guarantee the availability, functionality, or effectiveness of any optimization on microprocessors not manufactured by Intel.
Microprocessor-dependent optimizations in this product are intended for use with Intel microprocessors. Certain optimizations not specific to Intel microarchitecture are reserved for Intel microprocessors.
Please refer to the applicable product User and Reference Guides for more information regarding the specific instruction sets covered by this notice. Notice Revision #20110804.
No computer system can be absolutely secure.
Intel® Advanced Vector Extensions (Intel® AVX)* provides higher throughput to certain processor operations. Due to varying processor power characteristics, utilizing AVX instructions may cause a) some parts to
operate at less than the rated frequency and b) some parts with Intel® Turbo Boost Technology 2.0 to not achieve any or maximum turbo frequencies. Performance varies depending on hardware, software, and
system configuration and you can learn more at http://www.intel.com/go/turbo.
Available on select Intel® processors. Requires an Intel® HT Technology-enabled system. Your performance varies depending on the specific hardware and software you use. Learn more by visiting
http://www.intel.com/info/hyperthreading.
§ Configurations: The testing was done on Based on fourth-generation Intel Xeon E5-2699 v4 @2.20 GHz processor with 22 cores, 55 MB LLC and 62 GB memory 16 1G hugepages. The testing was conducted in
OPNFV Pharos testbed on Pod 12 by VSPERF community engineers
Intel, the Intel logo, [List the Intel trademarks in your document] are trademarks of Intel Corporation or its subsidiaries in the U.S. and/or other countries.
*Other names and brands may be claimed as the property of others.
© Intel Corporation
Agenda
Why Clear Linux* OS?
Security & Performance
Modular for Customization & Control
Clear Linux Developer Experience
*Other names and brands may be claimed as the property of others
Why Clear Linux* OS?
*Other names and brands may be claimed as the property of others
Today’s operating systems are
required to meet new
expectations
PERFORMANCE SECURE CUSTOMIZABLE MANAGEABLE
Clear Linux* OS
is an open source rolling release Linux distribution
optimized for performance and security, from
the Cloud to the Edge, designed for
customization, and manageability.
*Other names and brands may be claimed as the property of others
Why Clear Linux* OS?
Delivering tuned performance of Intel features on
Linux across the entire OS stack.
A modular, cross architecture open source OS
providing customers the ability to differentiate.
Industry blueprint to incorporate Intel®
platform features and optimizations in
a single, performance-driven Linux
distribution.
Available at: Clearlinux.org
Clear Linux OS is supported and verified on most Intel platforms (32): https://clearlinux.org/documentation/clear-linux/reference/compatible-hardware
*Other names and brands may be claimed as the property of others. The nominative use of third party logos serves only the purposes of description and identification.
Performance and Security
with Intel Platform
Optimizations
Performance throughout the stack
To get end user performance, optimization at all
layers is required
Clear Linux is highly tuned for Intel platforms
where all optimizations turned on by default
Clear Linux channels the best of Intel’s industry
leading kernel expertise to provide the highest
performing kernel for your OS.
Clear Linux* OS optimizes across
the whole stack
End User Applications, Solutions
Application Interface &
Frameworks
OS Middleware Components
Runtime Libraries
OS Kernel & Device Drivers
Intel Platforms
*Other names and brands may be claimed as the property of others
TensorFlow* optimizations example throughout the stack
GLIBC
Numpy / Pandas
Python
Intel Platforms
Kernel
TensorFlow
EIGENIntel® AVX512 Optimizations
Tuning kernel for workloads
Additional routines for AVX512
Intel® AVX2 & Intel AVX512
Python¥ optimizations
Optimized Python modules
Intel® architecture
optimizes builds
Kernel
¥performance critical workload
*Other names and brands may be claimed as the property of others
Security
Clear Linux* OS stays in lockstep with upstream for current security
upgrades and is designed to deliver available security mitigations to
customers rapidly.
CONSTANT VULNERABILITY
SCANNING (more)
AGGRESSIVE MITIGATION POLICY
Address high & critical level threats
issued from the National Vulnerability
Database promptly
UNIFIED “TRUST” STORE
(useful/usability)
PROVIDES A COMMON PLACE FOR
Packages points to one location to find
certs, ensuring you can manage your
trust policy consistently
INDUSTRY STANDARD
SECURITY FEATURES
(feature full)
Out of the box industry standard security
features enabled
Eg. IPTables, SSH, OpenSSL, IPSec VPN,
Signed Update Content
*Other names and brands may be claimed as the property of others
Modular for
Customization and Control
OS Design Principle: Easier Manageability
Clear Linux* OS employs the stateless
concept - a strict separation between User
and System files for easier OS manageability.
Traditional OS:
Content and data intermingled
Clear Linux OS:
Designed so that the user is able to quickly and easily manage
their custom configurations vs. system configurations.
This modularity allows for easier
manageability and simplifying
customization.
Traditional OS
Clear Linux
User Data Operating System System Configuration
LEGEND
User Data
Operating System
System Configurations
*Other names and brands may be claimed as the property of others
Update Principles
Allowing for Over-the-Air Updates
Original
Change
Update
Other distros
Clear Linux* OS
Original
Change
Update
Auto-update
Incremental1
2
Update size is relative to the size of the
change
User Control of Updates
Whole System, Single
Version
3
4
*Other names and brands may be claimed as the property of others
Release for
client
consumption
Check
viability
QA
update
content
Create
update
content
Check
packages
in build
Build
packages
Automated Development Model
Daily releases
100%
automated quality
assurance (QA) tested
releases
92%
of components packaged
by a tool instead of a
human.
Automated
software
compliance per release.
Create
package
definitions
Scan for
upstream
source
changes
Pump Autospec Autopackage Mixer BBT&BAT
Human mitigation
of any failures
Clear Linux
OS
Clear Linux
Customized
OS
Customer Software
The Mixer Tool: Accelerating Customization
Allows for Incremental Effort
Build customer solutions on top of Clear Linux
easily with the Mixer
Don’t need to recompile entire OS, work is only
required on the customization piece
Cost Proportional to Customization Level
Take advantage of the Clear Linux automated
development model for faster TTM
Cost = Customization Level
Clearlinux.org Release Clear Linux Updates
Clearlinux.org Release
Clear Linux* OS Updates
to Customized OSMixer Tool
Mixer Tool
*Other names and brands may be claimed as the property of others
Simplifying Manageability of the Custom Clear Linux OS
Clearlinux.org Releases
Perfect alignment
with upstream and
in-place code
Custom Packages
Allows customer to
customize packages…
Intersection point when a new release is happening -
Mixer takes latest Clear release and adds it to the load line
and then takes any custom package if available
With Mixer there is no need to
engage with Clear Linux OS
Upstream
Custom Clear Linux* OS
…Custom Clear Linux
OS packages are
integrated
*Other names and brands may be claimed as the property of others
Enabling control
Clear Linux* OS tools enables you to only have to
manage your custom distribution.
Tools are open source. The source code for security and performance
patches is freely available. Complete control of a downstream version is
available.
Clearlinux.org
Client ClientCustom Distribution Client
Client Client Client
*Other names and brands may be claimed as the property of others
Clear Linux*
Developer Experience
*Other names and brands may be claimed as the property of others*Other names and brands may be claimed as the property of others
2
A specifically catered OS offering for the
unique development needs of Linux
developers
• Developer-specific curated content for
optimized performance on Intel®
Architecture (IA)
• Includes multiple desktop options with
GNOME as default
• Always on the latest compilers (GCC)
optimized for IA
*Other names and brands may be claimed as the property of others
Developer Experience
2
Developer Experience
• Clear Linux* OS’s security,
performance and customization
abilities anchor the ease of
development
• An efficient debug feature (fuse)
provides an efficient and powerful
repair system for development
• Support model:
• Open source community
• Commercial support
*Other names and brands may be claimed as the property of others
Summary
PERFORMANCE SECURE
CUSTOMIZABLE
& MANAGEABLE
AUTOMATED
DEVELOPMENT
MODEL
Clear Linux* OS is
highly tuned for
Intel platforms
Clear Linux*
optimizes across the
whole stack from the
platform, to the
kernel to the math
libraries, middleware
layers, frameworks,
runtime.
Security enabled
from the Cloud to
the Edge, to the
End Device
Clear Linux has an
automated tool that
is constantly
scanning our
content for security
vulnerabilities.
Clear Linux
employs the
stateless concept
This strict separation
between User and
System files allows
for easier
manageability and
simplifying
customization.
Clear Linux is built
for efficiency
More than 90% of
our components
packaged by a tool
ensuring consistency
and scalability to
more than 4000
components
throughout the
distribution.
*Other names and brands may be claimed as the property of others
Be an early adopter
*Other names and brands may be claimed as the property of others
Linux* developers have already provided us valuable
user experience input influencing us to provide new
images, an updated installer, software store, and
forum to better connect to our community.
We need your continued input to help make
the Clear Linux OS ideal for your development
needs.
Be tuned at community.clearlinux.org for more
information!
2
Try Us Out
Engage with us at
clearlinux.org
Twitter: @clearlinux
Forum: community.clearlinux.org
See our source code at
github.com/clearlinux
*Other names and brands may be claimed as the property of others.
Thank you
*Other names and brands may be claimed as the property of others

Clear Linux OS - Introduction

  • 1.
    An introduction totoday’s Modular Operating System Intel Open Source Technology Center *Other names and brands may be claimed as the property of others
  • 2.
    3 Legal Disclaimer © 2018Intel Corporation. Intel, the Intel logo, Intel Inside, the Intel Inside logo, Intel Experience What’s Inside, The Intel Experience What’s Inside logo, and Xeon are trademarks of Intel Corporation in the U.S. and/or other countries. *Other names and brands may be claimed as the property of others. Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Learn more at intel.com, or from the OEM or retailer. Intel processors of the same SKU may vary in frequency or power as a result of natural variability in the production process. For more complete information about performance and benchmark results, visit www.intel.com/benchmarks. The cost reduction scenarios described are intended to enable you to get a better understanding of how the purchase of a given Intel based product, combined with a number of situation-specific variables, might affect future costs and savings. Circumstances will vary and there may be unaccounted-for costs related to the use and deployment of a given product. Nothing in this document should be interpreted as either a promise of or contract for a given level of costs or cost reduction. Intel does not control or audit third-party benchmark data or the web sites referenced in this document. You should visit the referenced web site and confirm whether referenced data are accurate. Optimization Notice: Intel's compilers may or may not optimize to the same degree for non-Intel microprocessors for optimizations that are not unique to Intel microprocessors. These optimizations include SSE2, SSE3, and SSSE3 instruction sets and other optimizations. Intel does not guarantee the availability, functionality, or effectiveness of any optimization on microprocessors not manufactured by Intel. Microprocessor-dependent optimizations in this product are intended for use with Intel microprocessors. Certain optimizations not specific to Intel microarchitecture are reserved for Intel microprocessors. Please refer to the applicable product User and Reference Guides for more information regarding the specific instruction sets covered by this notice. Notice Revision #20110804. No computer system can be absolutely secure. Intel® Advanced Vector Extensions (Intel® AVX)* provides higher throughput to certain processor operations. Due to varying processor power characteristics, utilizing AVX instructions may cause a) some parts to operate at less than the rated frequency and b) some parts with Intel® Turbo Boost Technology 2.0 to not achieve any or maximum turbo frequencies. Performance varies depending on hardware, software, and system configuration and you can learn more at http://www.intel.com/go/turbo. Available on select Intel® processors. Requires an Intel® HT Technology-enabled system. Your performance varies depending on the specific hardware and software you use. Learn more by visiting http://www.intel.com/info/hyperthreading. § Configurations: The testing was done on Based on fourth-generation Intel Xeon E5-2699 v4 @2.20 GHz processor with 22 cores, 55 MB LLC and 62 GB memory 16 1G hugepages. The testing was conducted in OPNFV Pharos testbed on Pod 12 by VSPERF community engineers Intel, the Intel logo, [List the Intel trademarks in your document] are trademarks of Intel Corporation or its subsidiaries in the U.S. and/or other countries. *Other names and brands may be claimed as the property of others. © Intel Corporation
  • 3.
    Agenda Why Clear Linux*OS? Security & Performance Modular for Customization & Control Clear Linux Developer Experience *Other names and brands may be claimed as the property of others
  • 4.
    Why Clear Linux*OS? *Other names and brands may be claimed as the property of others
  • 5.
    Today’s operating systemsare required to meet new expectations PERFORMANCE SECURE CUSTOMIZABLE MANAGEABLE
  • 6.
    Clear Linux* OS isan open source rolling release Linux distribution optimized for performance and security, from the Cloud to the Edge, designed for customization, and manageability. *Other names and brands may be claimed as the property of others
  • 7.
    Why Clear Linux*OS? Delivering tuned performance of Intel features on Linux across the entire OS stack. A modular, cross architecture open source OS providing customers the ability to differentiate. Industry blueprint to incorporate Intel® platform features and optimizations in a single, performance-driven Linux distribution. Available at: Clearlinux.org Clear Linux OS is supported and verified on most Intel platforms (32): https://clearlinux.org/documentation/clear-linux/reference/compatible-hardware *Other names and brands may be claimed as the property of others. The nominative use of third party logos serves only the purposes of description and identification.
  • 8.
    Performance and Security withIntel Platform Optimizations
  • 9.
    Performance throughout thestack To get end user performance, optimization at all layers is required Clear Linux is highly tuned for Intel platforms where all optimizations turned on by default Clear Linux channels the best of Intel’s industry leading kernel expertise to provide the highest performing kernel for your OS. Clear Linux* OS optimizes across the whole stack End User Applications, Solutions Application Interface & Frameworks OS Middleware Components Runtime Libraries OS Kernel & Device Drivers Intel Platforms *Other names and brands may be claimed as the property of others
  • 10.
    TensorFlow* optimizations examplethroughout the stack GLIBC Numpy / Pandas Python Intel Platforms Kernel TensorFlow EIGENIntel® AVX512 Optimizations Tuning kernel for workloads Additional routines for AVX512 Intel® AVX2 & Intel AVX512 Python¥ optimizations Optimized Python modules Intel® architecture optimizes builds Kernel ¥performance critical workload *Other names and brands may be claimed as the property of others
  • 11.
    Security Clear Linux* OSstays in lockstep with upstream for current security upgrades and is designed to deliver available security mitigations to customers rapidly. CONSTANT VULNERABILITY SCANNING (more) AGGRESSIVE MITIGATION POLICY Address high & critical level threats issued from the National Vulnerability Database promptly UNIFIED “TRUST” STORE (useful/usability) PROVIDES A COMMON PLACE FOR Packages points to one location to find certs, ensuring you can manage your trust policy consistently INDUSTRY STANDARD SECURITY FEATURES (feature full) Out of the box industry standard security features enabled Eg. IPTables, SSH, OpenSSL, IPSec VPN, Signed Update Content *Other names and brands may be claimed as the property of others
  • 12.
  • 13.
    OS Design Principle:Easier Manageability Clear Linux* OS employs the stateless concept - a strict separation between User and System files for easier OS manageability. Traditional OS: Content and data intermingled Clear Linux OS: Designed so that the user is able to quickly and easily manage their custom configurations vs. system configurations. This modularity allows for easier manageability and simplifying customization. Traditional OS Clear Linux User Data Operating System System Configuration LEGEND User Data Operating System System Configurations *Other names and brands may be claimed as the property of others
  • 14.
    Update Principles Allowing forOver-the-Air Updates Original Change Update Other distros Clear Linux* OS Original Change Update Auto-update Incremental1 2 Update size is relative to the size of the change User Control of Updates Whole System, Single Version 3 4 *Other names and brands may be claimed as the property of others
  • 15.
    Release for client consumption Check viability QA update content Create update content Check packages in build Build packages AutomatedDevelopment Model Daily releases 100% automated quality assurance (QA) tested releases 92% of components packaged by a tool instead of a human. Automated software compliance per release. Create package definitions Scan for upstream source changes Pump Autospec Autopackage Mixer BBT&BAT Human mitigation of any failures
  • 16.
    Clear Linux OS Clear Linux Customized OS CustomerSoftware The Mixer Tool: Accelerating Customization Allows for Incremental Effort Build customer solutions on top of Clear Linux easily with the Mixer Don’t need to recompile entire OS, work is only required on the customization piece Cost Proportional to Customization Level Take advantage of the Clear Linux automated development model for faster TTM Cost = Customization Level Clearlinux.org Release Clear Linux Updates Clearlinux.org Release Clear Linux* OS Updates to Customized OSMixer Tool Mixer Tool *Other names and brands may be claimed as the property of others
  • 17.
    Simplifying Manageability ofthe Custom Clear Linux OS Clearlinux.org Releases Perfect alignment with upstream and in-place code Custom Packages Allows customer to customize packages… Intersection point when a new release is happening - Mixer takes latest Clear release and adds it to the load line and then takes any custom package if available With Mixer there is no need to engage with Clear Linux OS Upstream Custom Clear Linux* OS …Custom Clear Linux OS packages are integrated *Other names and brands may be claimed as the property of others
  • 18.
    Enabling control Clear Linux*OS tools enables you to only have to manage your custom distribution. Tools are open source. The source code for security and performance patches is freely available. Complete control of a downstream version is available. Clearlinux.org Client ClientCustom Distribution Client Client Client Client *Other names and brands may be claimed as the property of others
  • 19.
    Clear Linux* Developer Experience *Othernames and brands may be claimed as the property of others*Other names and brands may be claimed as the property of others
  • 20.
    2 A specifically cateredOS offering for the unique development needs of Linux developers • Developer-specific curated content for optimized performance on Intel® Architecture (IA) • Includes multiple desktop options with GNOME as default • Always on the latest compilers (GCC) optimized for IA *Other names and brands may be claimed as the property of others Developer Experience
  • 21.
    2 Developer Experience • ClearLinux* OS’s security, performance and customization abilities anchor the ease of development • An efficient debug feature (fuse) provides an efficient and powerful repair system for development • Support model: • Open source community • Commercial support *Other names and brands may be claimed as the property of others
  • 22.
    Summary PERFORMANCE SECURE CUSTOMIZABLE & MANAGEABLE AUTOMATED DEVELOPMENT MODEL ClearLinux* OS is highly tuned for Intel platforms Clear Linux* optimizes across the whole stack from the platform, to the kernel to the math libraries, middleware layers, frameworks, runtime. Security enabled from the Cloud to the Edge, to the End Device Clear Linux has an automated tool that is constantly scanning our content for security vulnerabilities. Clear Linux employs the stateless concept This strict separation between User and System files allows for easier manageability and simplifying customization. Clear Linux is built for efficiency More than 90% of our components packaged by a tool ensuring consistency and scalability to more than 4000 components throughout the distribution. *Other names and brands may be claimed as the property of others
  • 23.
    Be an earlyadopter *Other names and brands may be claimed as the property of others Linux* developers have already provided us valuable user experience input influencing us to provide new images, an updated installer, software store, and forum to better connect to our community. We need your continued input to help make the Clear Linux OS ideal for your development needs. Be tuned at community.clearlinux.org for more information!
  • 24.
    2 Try Us Out Engagewith us at clearlinux.org Twitter: @clearlinux Forum: community.clearlinux.org See our source code at github.com/clearlinux *Other names and brands may be claimed as the property of others.
  • 25.
    Thank you *Other namesand brands may be claimed as the property of others