Hello!

I'm attempting to run a Red Hat 9 VM through VMWare Workstation. I have used the option to disconnect from my host and connect to the VM (an SCR331). lsusb gives me the following on the VM:

Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub

Bus 001 Device 002: ID 0e0f:0002 VMware, Inc. Virtual USB Hub

Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Bus 002 Device 002: ID 0e0f:0003 VMware, Inc. Virtual Mouse

Bus 002 Device 003: ID 0e0f:0002 VMware, Inc. Virtual USB Hub

Bus 002 Device 004: ID 0e0f:0002 VMware, Inc. Virtual USB Hub

Bus 002 Device 005: ID 04e6:5116 SCM Microsystems, Inc. SCR331-LC1 / SCR3310 SmartCard Reader

Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub

However, if I open Smart Card Manager nothing is there. I've attempted to disconnect/reconnect, restarting the pcscd service, manually installing the old as heck drivers. Can someone point me in the right direction?

Hello guys,

I’m just asking do i need to use ansible navigator in EX294?

So I've done several of these conversions without issue in the past. This one, is baffling me. Digging through the convert2rhel.log, this is what I am seeing:

Errors during downloading metadata for repository 'steelribbons_Red_Hat_Enterprise_Linux_8_for_x86_64_-_BaseOS_RPMs_8':^M

- Status code: 403 for https://<OBSCURRED>/pulp/content/steelribbons/Library/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml (IP: OBSCURRED)

Error: Failed to download metadata for repo 'steelribbons_Red_Hat_Enterprise_Linux_8_for_x86_64_-_BaseOS_RPMs_8': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

CRITICAL - Couldn't download the rocky-gpg-keys-8.10-1.9.el8.noarch package which is needed to do a rollback of this action. Check to make sure that the Rocky Linux repositories are enabled and the package is updated to its latest version.

Note that you can choose to disregard this check when running a conversion by setting the incomplete_rollback option in the /etc/convert2rhel.ini config file to true, but not during a pre-conversion analysis.

ERROR - (ERROR) REMOVE_SPECIAL_PACKAGES::SPECIAL_PACKAGE_REMOVAL_FAILED - Failed to remove some packages necessary for the conversion.

Description: The cause of this error is unknown, please look at the diagnosis for more information.

Diagnosis: Couldn't download the rocky-gpg-keys-8.10-1.9.el8.noarch package which is needed to do a rollback of this action. Check to make sure that the Rocky Linux repositories are enabled and the package is updated to its latest version.

Note that you can choose to disregard this check when running a conversion by setting the incomplete_rollback option in the /etc/convert2rhel.ini config file to true, but not during a pre-conversion analysis.

Remediations: N/A

My /etc/redhat.repo has the Convert2RHEL repo enabled in it, the RedHat 8 BaseOS repo in it, the RedHat 8 Appstream in it, and all the Rocky Repos in it. All the repos are published to the Satellite server that serves these systems.

The release version is unset.

The system is fully patched with the latest Rocky 8.10 patches.

I am at a loss here.

Reference post: https://www.reddit.com/r/redhat/comments/1hkc59n/failed_rhcsa_with_a_57300_after_months_of/?rdt=45526

Back in December, I took the RHCSA and failed with a miserable 57/300. I made a post about it and read all these comments to help me figure out that I dropped the ball on the network configs, as well as fumbled a few other sections, which voided out one of my nodes. Last night I passed with a 257/300 by listening and reading all of the feedback on this subreddit which helped me review for the second time around. Thanks again guys!

Hello all,

In this video, you can see easily how to count the amount of memory used by one specific user, and from there, you can play around, checking the amount of memory consumed by all the users in your system.

ps -aux | grep ^pulp | awk '{print $6}' | paste -s -d+ | bc

I hope you enjoy it!

https://www.youtube.com/watch?v=3gMUOyVrHXw&list=UUU3TnHhIvip0GH-jC_NAPeA

Best

I am trying to get some RHEL 10 machines built to start testing before the release of RHEL 10. I can install them by hand, but I have been unable to kickstart a machine yet. When I used the kickstart file as generated by the Kickstart Generator I get an invalid config. Here's the kickstart:

lang en_US

keyboard --xlayouts='us'

timezone America/New_York --utc

rootpw <redacted> --iscrypted

reboot

text

cdrom

bootloader --append="rhgb quiet crashkernel=1G-4G:192M,4G-64G:256M,64G-:512M"

zerombr

clearpart --all --initlabel

autopart

auth --passalgo=sha512 --useshadow

network --bootproto=dhcp

firstboot --disable

selinux --enforcing

firewall --enabled

%packages

@^server-product-environment

%end

I get the following output:

The following problem occurred on line 12 of the kickstart file:

auth has been removed

The installer will now terminate

If I comment out the auth line I get farther but get stuck at

Starting automated install.Checking storage configuration...

...................................................................

and it never gets past that. I am not seeing any errors in the logs but "Unsupported generic resource identifier: bluetooth

Anyone got this working? I am trying to install this in a VM in ProxMox.

I have a few Red Hat servers on my home lab that run under the free developer license. What Id like to do is to build a lab to simulate the setup of Satellite Red Hat managing both the patching and the subscription/ entitlements of Red Hat servers. However, as the servers I have built run under the free developer license, if I build a Satellite server I assume it will ignore license free developer edition boxes. How can I emulate a production environment with registered servers that are licensed? Thanks in advance.

Hey friends.

I wanted to share this video for those interested in the RHCSA certification. :)

https://youtu.be/aFKIe9CorDA

Hello everyone,

I took my RHCE exam on Friday at 12 PM and finished in three hours. Everything worked perfectly-my playbooks ran without errors, and all files were configured correctly.

However, when I received my result, I was shocked to see that I only scored 15! I have no idea how this is possible. Maybe the automated grading system failed to locate the folder containing all my playbooks?

I immediately contacted Red Hat through the link below and am still waiting for a response. I was confident I had scored around 280/300, but now...

Anyone entered the Satellite exam?.

best youtuber for this certification?

I have given rhcsa 8 and rhcsa 9.3 , now i am planning for rhce, but i am bit under confidence about rhce, hence i need suggestions on it.How difficult is to clear RHCE?

Hello,

I'm looking for a solution to unlock a root encrypted device with either a USB or something else. My servers are RHEL 8 and they are air-gaped, I don't have remote access to them. Additionally, the hard drives get cloned, replaced, and swapped with different hardware, so I don't think TMP will work for unencrypting.

I've looked into creating a keyfile in addition to the password to unlock, but I can't seem to get it to work from the blog posts I've read. Does the passdev keyscript work in /etc/crypttab on RHEL 8?

Additionally, I've looked at yubikey, but I don't think RHEL 8 has the systemd-cryptenroll feature that seems to be required to set that up.

If there's a blog post with clear instructions or if anyone can provide information that would be super appreciated!

i recently pulled the anisble automation platform rhel8 ee minimal image from redhat using:

podman pull 
registry.redhat.io/ansible-automation-platform/ee-minimal-rhel8:2.18.2-1
 

i need the ansible builder image but it seems to be deprecated. see here

is anyone familiar with an updated version of this? need it to build out execution environments.

Anyone pls tell me how to get redhat product management internship

Hi everyone,

I have an M1 Mac with limited internal storage, and I'm wondering if it's possible to install and run Red Hat Linux (RHEL 9) on an external SSD using VirtualBox 7.1.6, which now officially supports Apple Silicon.

My goal is to use it for learning and experimentation without taking up too much space on my Mac’s internal drive.

My questions:

1. Can I create a VirtualBox VM and store the virtual disk (VDI/VMDK) on an external SSD to run RHEL 9 smoothly?
2. Will the performance be decent if I use a fast external SSD (USB 3.0 or Thunderbolt)?
3. Are there any compatibility issues or better alternatives for running RHEL on an M1 Mac?

If anyone has tried something similar or has recommendations, I’d really appreciate your insights!

Thanks in advance! 😊

So I completed my RHCSA exam yesterday on my first attempt. Now I am wondering which course should I take to get a job and get started with my career. I am currently in the last semester of college and in my college's Redhat training center there are 2 good options for me to choose from:

1. Redhat Certified Engineer(RHCE)
2. Redhat Certified Specialist in Opsnshift AI

I think as it's my last semester I should take one of the courses and make use of the student discount. So I am very confused about which course should I choose.

I don't have any choice I am fine with any of the two I just want to get a job quickly so that I can start paying off my student loan and start helping my parents.

I know a lot of people in this subreddit are working professionals and have a lot of knowledge of the industry, the job trends, and the current industry requirements from freshers.

So it will mean the world to me if you guide me with what decision should I make.

While the RHEL 9 V2R3 changelog is monstrous in size, the effective changes to the typical system administration team boil down to 2 renumbered controls, 6 new controls, 4 removed controls, 12 controls with changes that I believe WILL affect your posture, and 3 controls that I believe MIGHT affect your posture depending on how you interpret them or if they're N/A (like disk encryption). Like last time, I am going to lay out my not-quite-as-raw notes about what I saw actually change between the lists. I simplified some of the changes so that I could group the controls for efficiency sake. I also completely ignored the CCI removals in my summary. If your ISSM cares that much, the CCI removals are explicitly called out in the official changelog from DISA. This post is meant for the technical community.

Also, while this analysis did eat the last several days of my office life, I do want to thank the folks at Red Hat, DISA, and the greater DoD community who have all been providing inputs and filing tickets to help make this STIG better. There is definitely room for more improvement, but the RHEL 9 STIG has come a long way since the preview release.

New Controls

• RHEL-09-171011: CAT-II Specific check and fix for GNOME logon banner. Contains \n special characters and an explanation for non-technical folks who may be evaluating a system.
• RHEL-09-232103: CAT-II root user ownership of /etc/audit
• RHEL-09-232104: CAT-II root group ownership of /etc/audit
• RHEL-09-255064: CAT-II SSH Client Ciphers aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr in /etc/crypto-policies/back-ends/openssh.config
• RHEL-09-255070: CAT-II SSH Client MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512 in /etc/crypto-policies/back-ends/openssh.config
• RHEL-09-433016: CAT-II fapolicyd.conf must have permissive=0, final rule in compiled.rules must be deny perm=any all : all

Removed Controls

• RHEL-09-652035: "active=yes" in /etc/audit/plugins.d/syslog.conf
• RHEL-09-672030: gnutls must use approved TLS, control and check redundant with other fips mode controls.
• RHEL-09-672035: openssl must use approved crypto algorithms, control and check redundant with other fips mode controls.
• RHEL-09-672040: openssl must use approved TLS, control and check redundant with other fips mode controls.

Changes that will affect posture (or are at least going to warrant updates in my RHEL9 STIG Ansible Role)

• RHEL-09-212010: Change grep keyword from "superusers" to "password_pbkdf2" - will probably impact scanners the most.
• RHEL-09-271015: Check uses gsettings instead of grep, updated fix value, run dconf update to take effect
• RHEL-09-611050: rounds=100000 instead of 5000 in /etc/pam.d/password-auth
• RHEL-09-611055: rounds=100000 instead of 5000 in /etc/pam.d/system-auth
• RHEL-09-611180: Check and fix updated to look at pcscd.socket instead of the service unit file.
• RHEL-09-652025: Check and fix syntax significantly altered to reflect the current state of EL9.
• RHEL-09-252035: Added N/A statement for cloud environments where the DNS IP is highly available.
• RHEL-09-255060: Specifically targets openssh server, not the client.
• RHEL-09-255065: Specifically targets openssh server, not the client. Drops chacha20-poly1305 from the cipher list.
• RHEL-09-255075: Specifically targets server, fix changed to use crypto-policies package instead of manual file changes.
• RHEL-09-611205: Added N/A statement for documented mission need for Kerberos.
• RHEL-09-672020: NOW A CAT-I - Updated to reflect that nss.config should not be hyperlinked. Of course, NONE of these should be hyperlinked, but...

Changes that might affect posture depending...

• RHEL-09-652055: Check removes sudo, greps for type="omfwd", which isn't in the fix at all. Need to check manpage for rsyslog.conf on this one.
• RHEL-09-215015: Check uses rpm -q instead of dnf list --installed, package check updated to "vsftpd" instead of "ftp"
• RHEL-09-231190: Check uses lsblk and cryptsetup instead of blkid

Renumbered items - watch out!

• RHEL-09-215100 was formerly RHEL-09-672010.
• RHEL-09-215105 was formerly RHEL-09-672045.

Quick note before you scroll down...

The rest of this post is my analysis of changes for everything else that changed but didn't bring any material impact to our systems. Most people will just scroll on by this part because it represents the noise surrounding the meat and potatoes changes listed above. I have done my best to simplify changes and group them by their major theme (removed sudo on the check, switching to stat, general grep changes, whatever). In some cases that means I have understated or oversimplified the change listed for a control, but the overall change still represents a minor cleanup or style effort rather than an actual technical shift.

Check text changes only

Effective change was solely to remove sudo from a command:

RHEL-09-213015, RHEL-09-213045, RHEL-09-214025, RHEL-09-215060, RHEL-09-215070, RHEL-09-231095, RHEL-09-271115, RHEL-09-291030, RHEL-09-215010, RHEL-09-215025, RHEL-09-215030, RHEL-09-215040, RHEL-09-215065, RHEL-09-215075, RHEL-09-215090, RHEL-09-215095, RHEL-09-653010, RHEL-09-653130, RHEL-09-215020, RHEL-09-215045, RHEL-09-215050, RHEL-09-215055, RHEL-09-231040, RHEL-09-251010, RHEL-09-252065, RHEL-09-431025, RHEL-09-652010, RHEL-09-652015, RHEL-09-252010, RHEL-09-255010, RHEL-09-255020, RHEL-09-431030, RHEL-09-432010, RHEL-09-433010, RHEL-09-611175, RHEL-09-611185, RHEL-09-651010

Changed command to stat for showing octal permissions.

RHEL-09-232025, RHEL-09-232030, RHEL-09-232045, RHEL-09-232050, RHEL-09-232170, RHEL-09-232175, RHEL-09-232180, RHEL-09-232185, RHEL-09-232190, RHEL-09-232195, RHEL-09-232200, RHEL-09-232205, RHEL-09-255115, RHEL-09-255120

Just grep instead of cat stuff | grep.

RHEL-09-231065, RHEL-09-231070, RHEL-09-231075, RHEL-09-611040, RHEL-09-611045, RHEL-09-651025

Some kind of change to grep, be it by adding flags or a more specific keyword. A couple of these added or removed sudo from the command as well.

RHEL-09-212050, RHEL-09-212055, RHEL-09-213085, RHEL-09-214015, RHEL-09-412055, RHEL-09-412060, RHEL-09-431015, RHEL-09-432020, RHEL-09-611135, RHEL-09-611170, RHEL-09-652040, RHEL-09-652045, RHEL-09-652050, RHEL-09-653030, RHEL-09-411105

Added sudo to a command

RHEL-09-213115, RHEL-09-651015, RHEL-09-651030, RHEL-09-651035

Check output reflects an lvm setup instead of a raw partition. The last one also corrects a path typo.

RHEL-09-231015, RHEL-09-231020, RHEL-09-231025, RHEL-09-231035, RHEL-09-231030

Misc check text changes

• RHEL-09-231120: Changed typo "noexec" to "nosuid".
• RHEL-09-232210: Changed "%n %U" to "%U %n" in stat command.
• RHEL-09-232215: Changed "%n %G" to "%G %n" in stat command.
• RHEL-09-251045: Inserted a line of whitespace.
• RHEL-09-252045: Changed systemctl status to systemctl is-active, added sudo to grep follow-up command.
• RHEL-09-253075: Removed extra cat /etc/systctl.conf from command.
• RHEL-09-255105: Changed command to stat for showing ownership.
• RHEL-09-255110: Changed command to stat for showing ownership.
• RHEL-09-271040: Removed [daemon] from output sample in check text.
• RHEL-09-271045: Changed from grep to gsettings for check.
• RHEL-09-271050: Changed from grep to gsettings for check.
• RHEL-09-271100: Changed from grep to gsettings for check.
• RHEL-09-411015: Changed awk...print syntax.
• RHEL-09-411025: Updated command to exclude .bash_history.
• RHEL-09-411055: Changed command to use find to conduct the search.
• RHEL-09-411095: Grammar/typo.
• RHEL-09-432025: Removed trailing * from command.
• RHEL-09-432030: Removed sh -c from command.
• RHEL-09-611080: Changed awk...print syntax.
• RHEL-09-631015: Updated check command to account for subconfig files in conf.d/
• RHEL-09-652060: Removed sudo from command, added followup command to inject log message.
• RHEL-09-653085: Changed ls -ld to stat -c.
• RHEL-09-653110: Switched to find, added sudo to command.
• RHEL-09-271025: N/A statement moved to the top of check text.
• RHEL-09-271035: N/A statement moved to the top of check text.
• RHEL-09-231045: Check output changes fstype from tmpfs to xfs for /home
• RHEL-09-231050: Check output changes fstype from tmpfs to xfs for /home
• RHEL-09-232040: Updated check command with -maxdepth 0
• RHEL-09-651020: Remove 140-2 references, add sudo to check.
• RHEL-09-671020: Remove 140-2 reference.

Fix changes only

Fix text allows for placing item in a file within sshd_config.d/

RHEL-09-255030, RHEL-09-255035, RHEL-09-255040, RHEL-09-255045, RHEL-09-255050, RHEL-09-255080, RHEL-09-255085, RHEL-09-255090, RHEL-09-255095, RHEL-09-255100, RHEL-09-255135, RHEL-09-255140, RHEL-09-255145, RHEL-09-255150, RHEL-09-255155, RHEL-09-255160,
RHEL-09-255165, RHEL-09-255175, RHEL-09-255025

Fix text updated with authselect instructions

RHEL-09-611025, RHEL-09-611030, RHEL-09-611035

Misc fix text changes

• RHEL-09-212015, Text only fix. No real change.
• RHEL-09-251030, Added missing leading / in file path.
• RHEL-09-271105, Uses gsettings set instead of manual file editing.
• RHEL-09-291015, Updated to enable and start systemd service, verify status.
• RHEL-09-611100, Fix text allows for placing item in a file within pwquality.conf.d/

Check AND Fix changes, oh my!

Check and/or fix updated to account for files in pwquality.conf.d/ and some kind of sudo or grep change.

RHEL-09-611010, RHEL-09-611060, RHEL-09-611065, RHEL-09-611070, RHEL-09-611090, RHEL-09-611110, RHEL-09-611115, RHEL-09-611120, RHEL-09-611125

Check shows a syntax change for -F key= instead of -k in the audit rules, fix prescribes augenrules --load for things to take effect.

RHEL-09-654010, RHEL-09-654015, RHEL-09-654020, RHEL-09-654025, RHEL-09-654030, RHEL-09-654035, RHEL-09-654040, RHEL-09-654045, RHEL-09-654050, RHEL-09-654055, RHEL-09-654060, RHEL-09-654065, RHEL-09-654070, RHEL-09-654075, RHEL-09-654080, RHEL-09-654085, RHEL-09-654090, RHEL-09-654095, RHEL-09-654100, RHEL-09-654105, RHEL-09-654110, RHEL-09-654115, RHEL-09-654120, RHEL-09-654125, RHEL-09-654130, RHEL-09-654135, RHEL-09-654140, RHEL-09-654145, RHEL-09-654150, RHEL-09-654155, RHEL-09-654160, RHEL-09-654165, RHEL-09-654170, RHEL-09-654175, RHEL-09-654180, RHEL-09-654185, RHEL-09-654190, RHEL-09-654195, RHEL-09-654200, RHEL-09-654205

Update sample check output, correct typo in fix text

RHEL-09-213050, RHEL-09-213055, RHEL-09-213060, RHEL-09-213065, RHEL-09-291035

Check and/or fix text updated to account for config files in subfolders (may also be other minor changes)

RHEL-09-432015, RHEL-09-611165, RHEL-09-631020, RHEL-09-652030

Check text now uses gsettings, some also prescribe dconf update for immediate changes or correct other typos

RHEL-09-271060, RHEL-09-271070, RHEL-09-271080, RHEL-09-271085, RHEL-09-271095,

Misc changes

• RHEL-09-212020: Change <superusers-account> to <accountmame>
• RHEL-09-214030: Add sudo to check and fix commands.
• RHEL-09-214035: Change grep parameter in check, change 1 to True in both check and fix.
• RHEL-09-231195: Remove sudo from check, correct typo in fix text.
• RHEL-09-271110: Check uses gsettings instead of grep, correct typo in fix text.
• RHEL-09-291010: Remove sudo from check, update sample check output, correct typo in fix text.
• RHEL-09-411080: Add sudo to check, languate change to fix, not material.
• RHEL-09-411085: N/A statement moved to the top of check text.
• RHEL-09-411090: Add sudo to check and fix.
• RHEL-09-412045: Add sudo to check, add authselect to fix.
• RHEL-09-431020: Add sudo to check, add faillock.conf instructions to fix.
• RHEL-09-611085: Remove trailing * from check, fix uses find and sed instead of just sed.
• RHEL-09-611105: Remove sudo from check, path placed in quotes in narrative for fix.
• RHEL-09-611130: Check changed grep parameter, no obvious change in fix.
• RHEL-09-611160: Check and fix changed to use sudo opensc-tool instead of direct file manipulation.
• RHEL-09-653090: Check uses stat -c instead of ls -la, Fix updates file path and grep parameters.
• RHEL-09-654210: Check uses auditctl -l instead of grep, fix prescribes augenrules --load for things to take effect.
• RHEL-09-654215: Check updates grep syntax, fix prescribes augenrules --load for things to take effect.
• RHEL-09-654220: Check changes audit key to actions??? Fix text still says identity. This looks to be a typo. Fix prescribes augenrules --load for things to take effect.
• RHEL-09-672025: Check and fix narrative change the word crypto to cryptographic.
• RHEL-09-213075: Remove sudo from check, fix adds sysctl -w command to make immediate change to loaded kernel.
• RHEL-09-213080: Remove sudo from check, fix adds sysctl -w command to make immediate change to loaded kernel.

Hello all,

This is a simple one, but very useful. Sometimes, we need to create a dummy file, 1G, 5G, etc, and we can achieve it easily with dd

I hope you enjoy it!

https://www.youtube.com/watch?v=d3Ahw3JdYhc&list=UUU3TnHhIvip0GH-jC_NAPeA

Hi,

First of all sorry if this subject was already discussed in the sub but couldn't find. Feel free to delete it if for some reason it is agains the sub rules. But I've searched all over the place and with so many tabs opened I'm starting to loose my mind with this s**t. Well not really but you get the point.

To summarize, I added a new interface (eth1 with static ip and mac) in vmware and then in RedHad, set the parameters and everything was ok. But after the reboot eth0 and eth1 swap IPs/macAddrs.

Through console I'm able to connect to the VM and change the /etc/sysconfig/network-scripts/ifcfg-ethX files but for some reason they kept not being read during boot. Normally this would work also changing the /etc/udev/rules.d/70-persistent-net.rules that I read it's obsolete.

Does anyone have any idea how to fix this? I don't have Network Manager installed btw. I found some guides referring to it but no good in my case. Also, this VM was not installed by me so I really don't know if everything is ok regarging OS.

Thanks in advance.

RHEL has decided to depreciate v4l drivers. This is in their documentation which includes a link to the bug tracker, but I have no access to the read the comments.

https://bugzilla.redhat.com/show_bug.cgi?id=2074598

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.0_release_notes/deprecated_functionality#deprecated-functionality_kernel

Can anybody share here the reason they removed these drivers? Thanks in advance.

Thanks here for all you who took time to respond to RHCE aspire queries and who took time to share their experiences.

Before I say something, this is an exam it checks following which is not part of the objective, but it counts a lot to improve your chances of passing future exams.

• Time management
• Typing skills (today in this world of VS Code, this skill is at least premium),
• VIM expertise (it works for you and you do not have to be Ninja, just learn things which will reduce typing errors, (please do not try spell check in VIM :LOL) and you will need this skills if you are planning RHCA.
• Patience, how to keep yourself calm
• Reading ( do not laugh. In today"s AI world, we're (at least I'm) loosing this basic skill)

Preparation Duration: 4 months ( i do not know, because i have this RHLS since year, i.e. only 19 days left to expire)

Red Hat Learning Subscription.

Only RHLS lab environment used and labs practiced several times. But I would not say if that is sufficient. You need to practice a lot.

Cannot complete this post without saying Huge thanks to RHEL Exam Proctor. Their Patience and kindness helps a lot.

Tips:

Learn VIM esp how to optimize your playbooks . Remember, less typing does not save your time, but it reduces a lot of errors and hence less stress and more focus.

Use .bashrc file to your advantage, create shortcuts to most of your common tasks.

Do not give exam till you can write 90% of the playbook without using ansible-doc. Trust me, this is most important thing i learned. e.g. if you wish to copy files and also wish to create file, which one would you use and do you know all the key,values for this module. It helps a lot.

And above all, stay cool. It is not critical you reach 300/300 but pass the exam. It makes a huge difference how you think and tackle the time. Like in real life, you do not start with acceleration, you take your car/vehicle slowly out, so initially give yourself time to read the significant sections. e.g control nodes, username, and password. Because I wasted sometime in doing things which would have made me mad in the later playbooks, but this attitude that i just have to pass the exam made huge difference in cooling down and speeding up.

Tip for Beginners:

If you have seen my last post regarding RHCSA, you could see that I have started making technology change from VMware to RHEL. So it might be relevant, if you are on the same boat.

- use RHEL as desktop OS. You will learn a lot and start thinking creatively on how to pass this exam.

- please test you set up at least 24 hours before. Because I gave RHCSA but I was overconfident that it has worked last time,it will work. But my monitor choose not to wake up. I have do some alternative arrangements

- based on my last experience i thought a englisch keyboard will make a difference. So I bought a brand new keyboard. Use to German keyboard for al most 10 years. But it was extremly irritating to find that square bracket key which is combination of alt + square bracket key made the terminal go mad. I have to use keyboard icon and here the VIM know how can make things easier. So in general Englisch keyboard for me made no difference.

I do not know where to go from here. I wish to be RHCA and start moving out of VMware world before things stops...(thanks u/waldirio for your amazing video) and great discord channel.

I'm having issues installing RHEL 10 onto a reasonably beefy PC, specifically regarding getting it to work with an existing EFI boot record. I'm quite certain this is a PEBKAC issue, but let's go over the checklist I'm working from:

• Secure Boot is off
• The 4Tb NVME drive has 1.37Tb of unallocated space
• There is already a FAT32 EFI system partition of size 100Mb
• using UEFI
• First attempt to use automatic partitioning on device nvme0n1 yielded "Kickstart insufficient"
• Started a custom partitioning process
• Created LVM partition for swap at 4Gb in volume group RHEL
• Created a 1.35Tb LVM partition, xfs file system, at root /
• flagged nvme01np1 (the original FAT EFI partition) as /boot/efi
• got an error message that /boot cannot be of type lvmlv (not too surprised, as I'm assuming that re-flagging the EFI partition is probably bad mojo

I'm clearly NOT doing something I should, but I don't know "what".

I'm starting to think I should just add a cheap 2Tb second NVME and let RHEL 10 rip on that, but I'm not sure that would address the EFI issue.

If my understand correctly, using the UBI container image is free and free to distribute when there are no changes to the UBI images.

In my pipeline, what if I installed some extra RPM packages (from Base or Appstream channels) into an UBI container image. Then, I add my applications into the container image. What if I distribute the container image publicly? Does it have any license complications?

I asked some AI and they said there could be complications when extra packages from Base or Appstream is included.

Hello folks,

You asked, and it's available now! :-), this is the installation of Satellite, with no bastion, or in other words, you need just the rhel that you will install your Satellite, a manifest with a single subscription, and that's all!

You can watch the video, this will give you the complete idea, also, all the commands used during the session, are available in the video description.

https://www.youtube.com/watch?v=dwJrR15_hwE&list=UUU3TnHhIvip0GH-jC_NAPeA

At the end of the process, this will be your final server state

• Uploading the manifest

• Enabling some repos (RHEL8 BaseIS, AppStream, and Satellite Client)

• Syncing those repos

• Creating a sync plan

• Creating lifecycle environment (Prod/QA/Test)

• Creating a CV

• Creating a CCV with the CV above

• Promoting the CCV to Prod/QA/Test

• Creating the Activation Key

I hope you enjoy it!

Greetings All, I'm trying to get my head around SELINUX. I've got a default RHEL 8 install with SELINUX enabled and enforcing with targeted enforcement.

What would be an example of a command that I can try to run that would get blocked? Preferably with some kind of message being displayed to the user.