Deprecated Features

• SHA-1 Algorithm

  The SHA-1 algorithm is deprecated in UEK 8 while in FIPS mode and will be removed in a future UEK release. The SHA-1 algorithm has been retired by National Institute of Standard and Technology (NIST) because the SHA-1 hash algorithm is no longer considered secure. See Oracle Linux release notes for more details on SHA-1 usage and deprecation.

• Kernel modules moved to the kernel-uek-modules-deprecated package are now deprecated.

  These modules might be removed in a future release of UEK.

  See Module Deprecations (x86_64) and Module Deprecations (aarch64) for a detailed listing.

• cgroupsv1 is deprecated

  cgroupsv1 is deprecated in Oracle Linux 9 and will be removed in a future Oracle Linux release.

• XFS_SUPPORT_V4 is deprecated

  The V4 file system format contains known weaknesses in the on-disk format. Therefore, the option is deprecated in UEK 8 and will be removed in a future UEK release.

  You can check whether the file system is formatted to use V4, by running the xfs_db -r -c version <device> command.

  If the feature is enabled, you must backup data, reformat the device, and restore data.

• XFS_SUPPORT_ASCII_CI is deprecated

  The XFS ASCII case-insensitive name feature is deprecated in UEK 8 and will be removed in a future UEK release. The feature provided an option to format an XFS file system with the ascii-ci option enabled to disable case-sensitivity.

  You can check whether the feature is enabled by using the xfs_info command.

  If the feature is enabled, you must backup data, reformat the device with the option disabled, and restore data.

• CONFIG_SECURITY_SELINUX_DISABLE and CONFIG_SECURITY_WRITABLE_HOOKS options are disabled

  The option to disable SELinux at runtime by using the sysfs interface is removed in this UEK release.

  The preferred method of disabling SELinux is by using the selinux=0 boot parameter

Removed Features

• CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_DES option for 3DES/DES3 RPCSEC GSS encryption types is disabled

  The RPCSEC GSS encryption types DES and Triple-DES (3DES/DES3) is removed in this UEK release.

  These encryption types were deprecated by RFCs 6649 and 8429 because they're known to be insecure.

• CONFIG_NFS_V2 and CONFIG_NFSD_V2 options for NFSv2 client and server are disabled

  Support for NFSv2 clients and NFSv2 servers is removed in this UEK release.

  NFSv2 has long been replaced by NFSv3 and NFSv4, which offer improved functionality, performance, and security.

• CONFIG_NFS_DISABLE_UDP_SUPPORT option for NFSv3 over UDP is enabled

  Support for NFS version 3 over the UDP network protocol is removed in this UEK release.

  Modern NFS/RPC over TCP and RDMA implementations provide better performance than UDP, and provide reliable ordered delivery of data combined with congestion control.

  Note that NFSv4 is already not supported over UDP, for the same reasons.

• CONFIG_STAGING option is disabled

  The CONFIG_STAGING kernel configuration option is disabled in UEK 8. The kernel option made available drivers that don't necessarily meet the highest kernel quality level and which were available for test use. The option was deprecated in UEK R7 and is removed in UEK 8.

• CONFIG_IXGB option is disabled

  The CONFIG_IXGB for Intel PRO/10GbE hardware is removed in this UEK release.

• crashkernel=auto removed

  The crashkernel=auto option was deprecated in UEK R7 and unsupported for Oracle Linux 9. The kernel option is removed in UEK 8. For more information about configuring the crashkernel setting on Oracle Linux 9, see Oracle Linux 9: Managing Kernels and System Boot.

• CONFIG_IP_NF_TARGET_CLUSTERIP option is disabled

  The CONFIG_IP_NF_TARGET_CLUSTERIP option that allowed you to build load-balancing clusters of network servers without a dedicated load-balancing router or switch is removed in favor of functionality already in Netfilter cluster match.

• CONFIG_EFI_VARS option disabled

  The CONFIG_EFI_VARS option that provided the efivars sysfs interface to configure UEFI variables is removed from this release of UEK. Replacement functionality has been present in the kernel since 2012. For more information, see https://www.kernel.org/doc/html/latest/filesystems/efivarfs.html.

• Firewire driver removed

  The CONFIG_FIREWIRE option is disabled in this UEK release.

• Several Network Scheduler Modules Removed

  The following network scheduler modules were deprecated in UEK R7 and are now removed in UEK 8:

  • cls_tcindex
  • cls_rsvp
  • sch_dsmark
  • sch_atm
  • sch_cbq

• resilient_rdmaip Module Removed

  The resilient_rdmaip module was deprecated in UEK R7 and is now removed.

• oracleasm Kernel Module Removed

  The oracleasm kernel module is removed in UEK 8. Note that this module continues to be supported in the UEK R5 and UEK R6 releases.

  Oracle ASMLib continues to be supported using io_uring interfaces. See ASMLib v3 for more information.

• sundance Kernel Module Removed

  The DLink Sundance (ST201), sundance, driver is removed in UEK 8. The module was removed in the upstream kernel because it was unmaintained.

• cpu5_wdt Kernel Module Removed

  The cpu5_wdt watchdog driver is removed in UEK 8. The module was removed in the upstream kernel because it had several issues that were unresolved and lacked maintenance.

• i2c-amd756-s4882 and i2c-nforce2-s4985 Kernel Modules Removed

  The i2c-amd756-s4882 and i2c-nforce2-s4985 legacy muxing drivers are removed in UEK 8. The module was removed in the upstream kernel because they're old and contain technically inaccurate code.

• CONFIG_CRYPTO_OFB and CONFIG_CRYPTO_CFB cryptographic modes

  The CFB (Cipher Feedback) mode (NIST SP800-38A) used for TPM2 cryptography and the OFB (Output Feedback) mode (NIST SP800-38A) used to turn a block cipher into a synchronous stream cipher are removed in UEK 8, to align with upstream changes.