Red Hat Enterprise Linux 10

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10
Admin
Red Hat Enterprise Linux 10 is a flexible and stable operating system that supports hybrid cloud...
Tokens:4,467,471
Snippets:44,453
Trust Score:10
Update:3 days ago
Show doc for...
Tokens:
Raw
### VM installation output

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/composing_a_customized_rhel_system_image/creating-and-deploying-guest-images-wht-image-builder

Example output showing the VM starting and cloud-init execution.

```text
Starting install...
Connected to domain mytestcivm
...
[  OK  ] Started Execute cloud user/final scripts.
[  OK  ] Reached target Cloud-init target.

Red Hat Enterprise Linux 10 (Ootpa)
Kernel 4.18.0-221.el8.x86_64 on an x86_64
```

--------------------------------

### Install and start QEMU GA in guest

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/configuring_and_managing_linux_virtual_machines/creating-virtual-machines

Install the qemu-guest-agent package and start the service within the Linux guest operating system.

```bash
# **dnf install qemu-guest-agent**
```

```bash
# **systemctl start qemu-guest-agent**
```

--------------------------------

### Example generic.prm file for Kickstart installation

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/automatically_installing_rhel/preparing-a-rhel-installation-on-64-bit-ibm-z

A complete example of a customized generic.prm file containing mandatory boot parameters for an automated Kickstart installation.

```text
ro ramdisk_size=40000 cio_ignore=all,!condev
inst.repo=http://example.com/path/to/repository
rd.znet=qeth,0.0.0600,0.0.0601,0.0.0602,layer2=1,portno=0,portname=foo
ip=192.168.17.115::192.168.17.254:24:foobar.systemz.example.com:enc600:none
nameserver=192.168.17.1
rd.dasd=0.0.0200 rd.dasd=0.0.0202
rd.zfcp=0.0.4000,0x5005076300c213e9,0x5022000000000000
rd.zfcp=0.0.5000,0x5005076300dab3e9,0x5022000000000000
inst.ks=http://example.com/path/to/kickstart
```

--------------------------------

### Example Kickstart configuration for live images

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/composing_a_customized_rhel_system_image/supported-image-customizations

This example shows a standard Kickstart configuration used for automated installations.

```kickstart
liveimg --url file:///run/install/_repo_/liveimg.tar.gz
lang en_US.UTF-8
keyboard us
timezone UTC
zerombr
clearpart --all --initlabel
text
autopart --type=plain --fstype=xfs --nohome
reboot --eject
network --device=link --bootproto=dhcp --onboot=on --activate
```

--------------------------------

### Install from HTTP server

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/automatically_installing_rhel/kickstart-commands-and-options-reference

Example of using the url command to install from an HTTP server.

```bash
url --url=http://_server_/_path_
```

--------------------------------

### Install and start the daemon

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/writing-a-custom-selinux-policy

Copy the executable and service file to their system locations and start the service.

```bash
# **cp mydaemon /usr/local/bin/**
# **cp mydaemon.service /usr/lib/systemd/system**
# **systemctl start mydaemon**
# **systemctl status mydaemon**
● mydaemon.service - Simple testing daemon
   Loaded: loaded (/usr/lib/systemd/system/mydaemon.service; disabled; vendor preset: disabled)
   Active: active (running) since Sat 2020-05-23 16:56:01 CEST; 19s ago
 Main PID: 4117 (mydaemon)
    Tasks: 1
   Memory: 148.0K
   CGroup: /system.slice/mydaemon.service
           └─4117 /usr/local/bin/mydaemon

May 23 16:56:01 localhost.localdomain systemd[1]: Started Simple testing daemon.
```

--------------------------------

### Install certificate bundle

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/automatically_installing_rhel/kickstart-script-file-format-reference

Example of installing a certificate into a specific directory and filename using the %certificate section.

```kickstart
%certificate --dir /etc/pki/dns/extracted/pem/ --filename tls-ca-bundle.pem
-----BEGIN CERTIFICATE-----
MIIBhDCCASugAwIBAgIUO27jF1hTk3lMZ5O6yMCC87FdLZcwCgYIKoZIzj0EAwIw
EzERMA8GA1UEAwwIVHJ1c3RlZENBMB4XDTI1MDQwMTEyMDAwMFoXDTM1MDMzMDEy
MDAwMFowEzERMA8GA1UEAwwIVHJ1c3RlZENBMFYwEAYHKoZIzj0CAQYFK4EEAAoD
QgAErPu3eF/MBcNfFh1lYWfLzQz9O5sWu/bOXMIQ5iU6GZ4H17Q5aHpDJvuBq+nv
uZYucGrdKj6GSa2KoD2Rz6GxDQIDAQABozEwLzAOBgNVHQ8BAf8EBAMCAQYwDwYD
VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwIDRwAwRAIg
A+3Txsfb5XQxpyq1dhK1c9Wy+F0dHZBaM4lKl8Zlf50CIHZ+bE5+8q90f5oRO2/f
CZtCWZZRAquC/hXoNcGxM2b7
-----END CERTIFICATE-----
%end
```

--------------------------------

### Install from FTP server

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/automatically_installing_rhel/kickstart-commands-and-options-reference

Example of using the url command to install from an FTP server.

```bash
url --url=ftp://_username_:_password_@_server_/_path_
```

--------------------------------

### Example of %packages section options

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/automatically_installing_rhel/kickstart-script-file-format-reference

Shows how to append options to the start of the %packages section.

```kickstart
%packages --multilib --ignoremissing
```

--------------------------------

### Install the policy module

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/troubleshooting-problems-related-to-selinux

Install the created .cil file into the SELinux policy.

```bash
# **semodule -i _<local_module>_.cil**
```

--------------------------------

### Start the ubi8 container

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/creating-selinux-policies-for-containers

Start the container with specific volume mounts and port exposure to prepare for policy generation.

```bash
# **podman run --env container=podman -v _/home:/home:ro_ -v _/var/spool:/var/spool:rw_ -p _21:21_ -it _ubi8_ _bash_**
```

--------------------------------

### Install the container-tools module

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/creating-selinux-policies-for-containers

Alternatively, install the container-tools module which includes udica.

```bash
# **dnf module install -y container-tools**
```

--------------------------------

### Install the policy module

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/using-multi-category-security-mcs-for-data-confidentiality

Use the semodule command to install the newly created policy module.

```bash
# **semodule -i local_mcs_user.cil**
```

--------------------------------

### Access kernel documentation

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/changing-selinux-states-and-modes

Install the kernel-doc package and view the kernel parameters documentation file.

```bash
# **dnf install kernel-doc**
$ **less /usr/share/doc/kernel-doc-6.12.0-55.9.1/Documentation/admin-guide/kernel-parameters.txt**
```

--------------------------------

### Install the udica package

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/creating-selinux-policies-for-containers

Install the udica package directly using dnf.

```bash
# **dnf install -y udica**
```

--------------------------------

### Rebuild and load the system policy

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/writing-a-custom-selinux-policy

Execute the generated setup script to compile and load the new policy module.

```bash
# **./mydaemon.sh**
Building and Loading Policy
+ make -f /usr/share/selinux/devel/Makefile mydaemon.pp
Compiling targeted mydaemon module
Creating targeted mydaemon.pp policy package
rm tmp/mydaemon.mod.fc tmp/mydaemon.mod
+ /usr/sbin/semodule -i mydaemon.pp
...
```

--------------------------------

### Check system-reinstall-bootc installation

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_image_mode_for_rhel_to_build_deploy_and_manage_operating_systems/deploying-the-rhel-bootc-images

Verify if the system-reinstall-bootc subpackage is already installed on the system.

```bash
# **rpm -q system-reinstall-bootc**
```

--------------------------------

### List installed local modules

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/troubleshooting-problems-related-to-selinux

Verify the installation by listing local modules filtered by the local_ prefix.

```bash
# **semodule -lfull | grep "local_"**
400 local_module  cil
```

--------------------------------

### Example of an SELinux security context

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/managing-confined-and-unconfined-users

A representation of the security context components for a Linux user.

```text
user_u:user_r:user_t
```

--------------------------------

### Keylime agent registration output

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/security_hardening/ensuring-system-integrity-with-keylime

Example output showing a successful registration with operational state.

```text
Reading configuration from ['/etc/keylime/logging.conf']
...
==
-----END CERTIFICATE-----
", "ip": "127.0.0.1", "port": 9002, "regcount": 1, "operational_state": "Registered"}}}
```

--------------------------------

### Install the selinux-policy-mls package

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/using-multi-level-security-mls

Install the required package to support the MLS policy.

```bash
# **dnf install selinux-policy-mls**
```

--------------------------------

### Copy the ensure-presence-multiple-records.yml playbook

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/working_with_dns_in_identity_management/using-ansible-to-manage-dns-records-in-idm

Create a working copy of the example playbook from the ansible-freeipa collection.

```bash
$ **cp /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/dnsrecord/ensure-presence-multiple-records.yml ensure-presence-multiple-records-copy.yml**
```

--------------------------------

### Copy the permission management playbook

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_ansible_to_install_and_manage_identity_management_in_rhel/using-ansible-playbooks-to-manage-rbac-permissions-in-idm

Create a local copy of the provided example playbook for modification.

```bash
$ **cp /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/permission/permission-member-present.yml permission-member-present-copy.yml**
```

--------------------------------

### Update After option in unit file

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_systemd_unit_files_to_customize_and_optimize_your_system/working-with-systemd-unit-files

Ensure the second instance starts after the first one.

```text
After=syslog.target network.target auditd.service sshd.service
```

--------------------------------

### Check service status after failed start

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/troubleshooting-problems-related-to-selinux

Commands to attempt starting the httpd service and checking its status when policy prevents binding to a port.

```bash
# **systemctl start httpd.service**
Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details.

# **systemctl status httpd.service**
httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled)
   Active: failed (Result: exit-code) since Thu 2013-08-15 09:57:05 CEST; 59s ago
  Process: 16874 ExecStop=/usr/sbin/httpd $OPTIONS -k graceful-stop (code=exited, status=0/SUCCESS)
  Process: 16870 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE)
```

--------------------------------

### Copy the service management playbook

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_ansible_to_install_and_manage_identity_management_in_rhel/ensuring-the-presence-and-absence-of-services-in-idm-using-ansible

Create a local copy of the service-is-present-with-host-force.yml playbook from the installed collections.

```bash
$ **cp /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/service/service-is-present-with-host-force.yml service-is-present-with-host-force-copy.yml**
```

--------------------------------

### Example output of systemd-delta

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_systemd_unit_files_to_customize_and_optimize_your_system/working-with-systemd-unit-files

This output shows the comparison between overridden, masked, and extended unit files.

```text
[EQUIVALENT] /etc/systemd/system/default.target  /usr/lib/systemd/system/default.target
[OVERRIDDEN] /etc/systemd/system/autofs.service  /usr/lib/systemd/system/autofs.service

--- /usr/lib/systemd/system/autofs.service      2014-10-16 21:30:39.000000000 -0400
+++ /etc/systemd/system/autofs.service  2014-11-21 10:00:58.513568275 -0500
@@ -8,7 +8,8 @@
 EnvironmentFile=-/etc/sysconfig/autofs
 ExecStart=/usr/sbin/automount $OPTIONS --pid-file /run/autofs.pid
 ExecReload=/usr/bin/kill -HUP $MAINPID
-TimeoutSec=180
+TimeoutSec=240
+Restart=Always

 [Install]
 WantedBy=multi-user.target

[MASKED]     /etc/systemd/system/cups.service  /usr/lib/systemd/system/cups.service
[EXTENDED]   /usr/lib/systemd/system/sssd.service  /etc/systemd/system/sssd.service.d/journal.conf

4 overridden configuration files found.
```

--------------------------------

### Start the IdM server

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/accessing_identity_management_services/viewing-starting-and-stopping-the-identity-management-services

Use the systemctl start ipa command to start the entire IdM server and all installed services.

```bash
# systemctl start ipa
```

--------------------------------

### Example: Create a template instance

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/deploying_and_managing_rhel_on_google_cloud/configuring-a-red-hat-high-availability-cluster-on-gcp

An example of provisioning a base instance followed by the expected output showing the instance status.

```bash
$ **gcloud compute instances create _<rhel-10-server-base-instance>_ --can-ip-forward --machine-type n1-standard-2 --image _<rhel-10-server>_ --service-account _<account@project-name-on-google-cloud.iam.gserviceaccount.com>_**
```

```text
Created [https://www.googleapis.com/compute/v1/projects/rhel-ha-testing-on-gcp/zones/us-east1-b/instances/rhel-10-server-base-instance].
NAME   ZONE   MACHINE_TYPE   PREEMPTIBLE  INTERNAL_IP  EXTERNAL_IP     STATUS
_<rhel-10-server-base-instance>_  us-east1-bn1-standard-2          10.10.10.3   192.227.54.211  RUNNING
```

--------------------------------

### Configure %pre-install logging

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/automatically_installing_rhel/kickstart-script-file-format-reference

Example of using the --log option to direct script output to a specific file.

```kickstart
%pre-install --log=/mnt/sysroot/root/ks-pre.log
```

--------------------------------

### Configure an ordering constraint example

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/configuring_and_managing_high_availability_clusters/determining-resource-order

An example command to ensure that firstresource starts before secondresource.

```bash
# **pcs constraint order start firstresource then secondresource**
```

--------------------------------

### List SELinux roles using seinfo

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/using_selinux/managing-confined-and-unconfined-users

Use the seinfo command to list all available SELinux roles. This command is provided by the setools-console package, which is not installed by default.

```bash
$ **seinfo -r**
Roles: 14
   auditadm_r
   dbadm_r
   guest_r
   logadm_r
   nx_server_r
   object_r
   secadm_r
   staff_r
   sysadm_r
   system_r
   unconfined_r
   user_r
   webadm_r
   xguest_r
```

--------------------------------

### Example output for installed package

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/configuring_device_mapper_multipath/configuring-dm-multipath

The expected output when the device-mapper-multipath package is already installed.

```text
device-mapper-multipath-_current-package-version_
```

--------------------------------

### Using the %setup -c option

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/packaging_and_distributing_software/rpm-macros

The -c option creates a directory and changes to it before unpacking sources.

```RPM
/usr/bin/mkdir -p cello-1.0
cd 'cello-1.0'
```

--------------------------------

### bcc PMDA installation output

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/monitoring_and_managing_system_status_and_performance/advanced-pcp-monitoring-and-visualization

Example output observed during the installation of the bcc PMDA.

```text
[Wed Apr  1 00:27:48] pmdabcc(22341) Info: Initializing, currently in 'notready' state.
[Wed Apr  1 00:27:48] pmdabcc(22341) Info: Enabled modules:
[Wed Apr  1 00:27:48] pmdabcc(22341) Info: ['biolatency', 'sysfork',
[...]
Updating the Performance Metrics Name Space (PMNS) ...
Terminate PMDA if already installed ...
Updating the PMCD control file, and notifying PMCD …
Check bcc metrics have appeared ... 1 warnings, 1 metrics and 0 values
```

--------------------------------

### Verify MCP server installation

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/interacting_with_the_command-line_assistant/using-the-rhel-mcp-server-to-enable-ai-assistants-to-run-discover-and-troubleshoot-complex-issues

Start the MCP server executable to verify it is installed and running correctly.

```bash
$ **~/.local/bin/linux-mcp-server**
```

--------------------------------

### Install kernel-debuginfo-common-x86_64 package

Source: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/network_troubleshooting_and_performance_tuning/avoiding-listen-queue-lock-contention

Command to install the debuginfo package containing kernel source code examples.

```bash
# **dnf install kernel-debuginfo-common-x86_64**
```

--------------------------------

### Run ipa-client-install with options

Source: https://docs.redhat.com/en/documentation/Red_Hat_Enterprise_Linux/10/html/installing_identity_management/installing-an-idm-client

Execute the installation utility with flags to create home directories and enable DNS updates.

```bash
# ipa-client-install --mkhomedir --enable-dns-updates
```
Tokens:
Raw