Tag Archives: info

Considering new hardware for ArcaOS?

If you are thinking about a new computer, you may be wondering if a new system will run ArcaOS. Most modern hardware will run ArcaOS just fine. But if you want to know more, Arca Noae has some resources to help.

We have a wiki page with quick information about Choosing a System for ArcaOS. We also have a list of a few systems that we have tested on our Tested Hardware page. Don’t be discouraged if the system you are considering is not on the list of tested hardware; we can’t test everything, and new systems are being released all the time. Additionally, you might want to try looking at some of the information available in the OS/2 World wiki (note: Arca Noae is not affiliated with OS/2 World).

If you have access to the new computer (or an identical model on display at a local retailer), and it is a UEFI system, we have a System Evaluation tool that may help with your decision. The System Evaluation tool is available on your ArcaOS install DVD or USB stick, and also as a separate stand-alone tool. To use the System Evaluation tool you don’t need to install anything, ArcaOS is not required, and you don’t need an ArcaOS license for the stand-alone version. You can download the stand-alone System Evaluation tool here and follow the directions to add it to a FAT formatted USB stick. Note that the stand-alone version is probably newer than the one on the ArcaOS install medium.

In order to boot to the System Evaluation tool, it will be necessary to disable Secure Boot if it has been enabled. Many display systems at retail stores run in a “kiosk mode” which sets Secure Boot, disables access to the BIOS settings, and may also disable access to USB ports. When unsure, ask a sales clerk for assistance (and be sure to introduce him or her to ArcaOS!).

The System Evaluation tool cannot guarantee that a given system is capable of running ArcaOS to its fullest potential, but it should be able to assist in at least ruling out systems where it cannot detect known, supported hardware devices. It should also be able to provide a good estimate of the amount of memory which will be visible to ArcaOS below the 4GB boundary (you might want to avoid systems with extremely low memory headroom).

Happy testing!

Couldn’t make it to Warpstock 2024 in Pittsburgh? Stream it live!

Warpstock 2024 begins this Friday, September 27, at 9am EDT.

Lewis Rosenthal and Alex Taylor will be among those presenting this year on a variety of topics of interest concerning ArcaOS. In addition, Lewis will be moderating a 2-part roundtable discussion focused on how people are using the OS/2 platform today, and how they see themselves using it in the future. For more details and for info on all sessions, please visit the event sessions page, and for the complete schedule, visit the event calendar.

Questions may be posed via YouTube Chat as well as IRC during the event.

The WarpEvents YouTube channel is the place to watch the event stream.

The URL for the #Warpstock IRC channel is: ircs://irc.libera.chat:6697/Warpstock (TLS encrypted),
or irc://irc.libera.chat/Warpstock (plain text), or https://web.libera.chat/ (web interface, type #Warpstock into the Channel field).

While visiting the Warpstock website, please consider donating. Warpstock Corporation is a recognized 501(c)3 non-profit organization promoting education, information, and social opportunities to those persons interested in computer operating systems and related software.

Reminder: Warpstock Europe 2024, Rheine, Germany, June 7-9

As we mentioned previously, the OS/2 VOICE Foundation will be hosting Warpstock Europe 2024 June 7-9 in Rheine, Germany.

VOICE is planning to provide a live video stream via YouTube, though the best Warpstock Europe experience is always in person.

Time is running out to register for Warpstock Europe, however! To register, use this link before May 24. For more information (travel, schedule of presentations, presenters, and more) please visit the Warpstock Europe website.

Don’t miss out on this fantastic opportunity to see, hear, and meet with people directly and indirectly involved with shaping the design and focus of ArcaOS, and working to keep it connected to our ever-changing landscape of information technology.

Warpstock Europe 2024, Rheine, Germany

The OS/2 VOICE Foundation is pleased to announce that the working schedule for Warpstock Europe 2024 is now online. Warpstock Europe will be held June 7-9 in Rheine, Germany.

The event will be held in Hotel Lücke (the hotel’s site is available in English and German). Presenters and attendees should register with the hotel for sleeping accommodations. The discounted room rate for Warpstock Europe attendees is €104 per night, which includes breakfast.

VOICE is planning to provide a live video stream via YouTube, as well. Of course, the fullest Warpstock Europe experience is in person, where you have the ability to interact with presenters and other like-minded people. Please see the Warpstock Europe website for details.

Access for the 3-day event (including 2-course lunch each day) is €215. You may order your Warpstock Europe access through this link before May 24. For travel information and the schedule please visit the Warpstock Europe website.

Among other presenters, Arca Noae Managing Member, Lewis Rosenthal, will be on hand to present and to meet with attendees. Come join the discussion, and learn some new things about ArcaOS!

If you would like to present in person or remotely, please contact the VOICE President, Roderick Klein, via email at president AT os2voice DOT org. There are still presentation slots available, and some others have not yet been confirmed. (Note: Due to strict budget constraints, presenters must also purchase access to Warpstock Europe 2024.)

Arca Noae Status Update: Wi-Fi Drivers

We are aware that many people have been asking about availability of drivers for new wireless networking adapters. If you’ve followed our driver roadmap and our Warpstock presentations, you might be aware of the fact that these drivers are still in development.

Wi-Fi drivers are by their nature considerably more complex pieces of code than wired ethernet drivers. As a result, they take a considerably longer time to build than wired ethernet drivers. The complexity and multi-functionality requirements of Wi-Fi drivers, and the radically different architecture of unix (or Linux) means that Wi-Fi drivers cannot be created by simply compiling a FreeBSD driver for OS/2 as is generally possible for MultiMac wired ethernet drivers. Wi-Fi drivers need to be developed specifically for OS/2, with the capability to handle expected wireless communication protocols and be manageable by XWLAN, the de facto standard for Wi-Fi device and profile management on the OS/2 platform. All of this work is extremely time consuming and requires comprehensive knowledge of Wi-Fi operations and OS/2 networking.

ArcaOS 5.1 is the first version of OS/2 capable of not only booting on modern UEFI hardware with or without the availability of a Compatibility Support Module (CSM), but also the first to be able to access – and indeed, boot from – GUID Partition Table (GPT) disk layouts. All of this work was prioritized above Wi-Fi driver development, under our guiding philosophy of “if the system can’t boot, not much else matters.”

As addressed in our FAQ, the standard workaround for lack of a Wi-Fi driver is to use a small wireless bridge device. Indeed, this is not a solution, but a workaround until such time as Wi-Fi drivers are available for more modern chipsets.

We understand that wireless drivers are very important to a some of our users. We are doing what we can to address that need while simultaneously continuing to improve the ArcaOS experience overall. We appreciate everyone’s continued patience.

Warpstock 2023 videos now available

Videos of Warpstock 2023 presentations from earlier this month, including Arca Noae staff and developers featuring the latest ArcaOS news and how-to sessions are now available on YouTube in the WarpEvents channel.

Video topics include:

ArcaOS Roadmap
High-Resolution OS/2: The Sequel
ArcaOS 5.1
Is ArcaOS a DOS Gaming Mecca?
ArcaOS under and next to VMWare ESXi
UEFI vs Traditional BIOS: Which is Right?
…and much more

Join Us at Warpstock 2022 in Orlando

Warpstock 2022 will be live once again, November 4-6 at the Country Inn & Suites, Orlando Airport. Arca Noae staff and developers will be there with the latest ArcaOS news and how-to sessions, as well as a host of other OS/2 experts ready and willing to share their knowledge and expertise.

Register before August 1 and receive a $30 Early Bird discount on a full conference registration or $20 on a daily conference registration! Spouses/family members/guests/office mates attending sessions also receive great discounts, and non-attending guests are FREE. Students with valid student ID are welcome to attend sessions at no charge, with full benefits! (This is a great opportunity for Computer Science majors and aspiring young developers and engineers to gain some exposure to a platform which is still in use in the manufacturing, finance, and insurance sectors around the globe today.)

Major topics of discussion this year will center around ArcaOS 5.1 and new disk and installation options. As always, we welcome questions and feedback from both new and experienced users.

GPT usability in ArcaOS 5.1.0

In our last post we discussed that the upcoming ArcaOS 5.1.0 release will be able to make use of laptops and desktops that only support booting in so-called UEFI mode.

When booting ArcaOS in UEFI mode, the disk partitioning scheme may use the traditional Master Boot Record (MBR) or the newer GUID Partition Table (GPT). Although MBR has been extended to support disks up to 2TB, with ever-growing disk sizes, this may be too limiting for devices which could otherwise support handling more data than this. Also, if installing to a disk which is already configured using GPT, releases of ArcaOS prior to 5.1.0 require a full wipe and repartition of the disk. This inconvenience should no longer be an issue in ArcaOS 5.1.

Thus, ArcaOS 5.1.0 will be able to utilize GPT disk layouts with the following benefits:

Support for hard disks and solid state drives larger than 2TB attached to AHCI or NVMe storage controllers.
On systems equipped with a single drive and Windows pre-installed using a GPT layout, there should be no need to wipe and repartition, as long as there is room for ArcaOS to create at least one partition for itself.
GPT eliminates many of the LVM issues you may have encountered in the past when preparing a disk to install ArcaOS next to other operating systems, such as Linux and Windows because ArcaOS will use the same LBA partition alignment method (for GPT disk layouts) as these other operating systems.

GPT usage has been integrated into the ArcaOS installation partitioning tool (Logical Volume Manager), giving you a seamless experience while installing and maintaining ArcaOS.

Of course, ArcaOS 5.1.0. will continue to support your existing hard disks that have been partitioned using an MBR disk layout, too. In fact, a mix of GPT and MBR disks is also possible, and you will also be able to install ArcaOS in a UEFI environment on an MBR disk (GPT is completely optional, and never a requirement).

It is also important to remember that while ArcaOS 5.1.0 will support hard disks and SSDs larger than 2TB, OS/2 filesystems are currently limited to 2TB per partition. Thus, in order to fully utilize, say, a 12TB device for ArcaOS, you would need to partition this into multiple volumes, each no more than 2TB in size. (Also, for volumes in excess of 64GB, you must select JFS as the filesystem.)

Apache Log4j vulnerability (CVE-2021-44228)

On Thursday, December 9, 2021, the Apache Log4j project disclosed a critical security vulnerability which may result in remote code execution on systems running Log4j. The exploit has been aptly named Log4Shell (CVE-2021-44228).

Log4j is a logging component which runs under Java on many different platforms, and is useful not only for Java applications, but for other programs, as well. It is commonly bundled with unrelated software, simply as a means of providing a standard logging engine.

Arca Noae has completed a scan of our internal systems and has determined that we are not affected by this vulnerability. Further, ArcaOS has never included any Log4j components, and is also unaffected. However, because the exploitable feature in Log4j has existed for some time, it is possible that Java and other applications may have been installed under ArcaOS which utilize Log4j, and these systems may be at risk.

The feature used for the Log4Shell exploit is in the JNDI (Java Naming and Directory Interface) lookup class which was added to Log4j several years ago during the 2.0 beta cycle. Log4j versions through 2.3 required only Java versions up to 1.6, and so may be utilized by some OS/2-compatible applications.

Risk assessment

To determine whether any of your OS/2 systems may be at risk, start by searching all accessible volumes for log4j-*.jar. If any are found, determine the version of Log4j by examining the content of META-INF/MANIFEST.MF in the core jar file:

[c:\] unzip -c log4j-core.jar META-INF/MANIFEST.MF | less

Note the Implementation-Version line content.

Edge servers as well as firewalled systems running various applications may be at risk, as queries may be submitted to the Log4j engine from other applications and potentially from outside the network.

Mitigation

Although the exploit has been addressed in Log4j 2.16.0, because versions above 2.3 are not currently compatible with OS/2’s available Java Runtime Engine, it is necessary to mitigate the condition by removing the JndiLookup class from the classpath, e.g.:

[c:\] zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class

Additional information

Older (pre-2.0-beta9) versions of Log4j lack this lookup class, and do not appear to be at risk for Log4Shell (though some earlier security advisories may have been issued). Further research may be needed based upon the version(s) of Log4j which may be in use on these earlier systems. Also, this is not the only security advisory for Log4j 2.0-beta9 – 2.3. This notification is only related to CVE-2021-44228.

Links

https://nvd.nist.gov/vuln/detail/CVE-2021-44228
https://nakedsecurity.sophos.com/2021/12/10/log4shell-java-vulnerability-how-to-safeguard-your-servers/
https://www.kb.cert.org/vuls/id/930724

Adding Let’s Encrypt’s new root and intermediate certificates to Mozilla applications

On September 30, 2021, Let’s Encrypt’s DST Root CA X3 cross-sign expired, leaving many web browsers to report that sites using Let’s Encrypt SSL certificates were “untrusted” or “unknown.”

Let’s Encrypt did, in fact, implement a new root and intermediate certificates some time ago, but after the built-in certificate stores in the Mozilla applications shipped with all versions of ArcaOS 5.0 to date (5.0 through 5.0.6) were configured. Thus, these new certificates were not included in those builds, and as a result, the new root certificate is indeed unknown.

The fix is relatively simple, and a rather common procedure for all browsers and email clients. To bring your Firefox, Thunderbird, and SeaMonkey certificate stores up to date, and learn how to do this for other new certificates as they become available, we’ve added a new wiki page, here.

Edited to add links to further information (off-site):

Let’s Encrypt – Chain of Trust
Let’s Encrypt – DST Root CA X3 Expiration (September 2021)