Discover Centmin Mod today
Register Now

CentOS 8.x AlmaLinux AlmaLinux 8.3 Linux Development Discussion Thread

Discussion in 'CentOS, Redhat & Oracle Linux News' started by eva2000, Apr 1, 2021.

Tags:
  1. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
  2. Matt

    Matt Well-Known Member

    869
    394
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +615
    Local Time:
    6:30 AM
    1.5.15
    MariaDB 10.2
    Converted a couple of CentOS8.3 servers this morning over to Alma, and also spend the day getting our ansible automation working on it :)
     
  3. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Nice so your company decided on AlmaLinux or also looking at Rocky Linux as well?
     
  4. Matt

    Matt Well-Known Member

    869
    394
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +615
    Local Time:
    6:30 AM
    1.5.15
    MariaDB 10.2
    So far, it's looking like AlmaLinux, but we are still in the early phases of testing it.
     
  5. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    I see - keep us informed of your adventures and any gotchas :D
     
  6. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
  7. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    As written before by @eva2000 Centminmod depends on EPEL.
    Seems as the CentOS team is focusing on EPEL NEXT, EPEL's equivalent of CentOS Stream.

    This may be the same Red Hat policy as with CentOS. First releasing Stream alongside the regular product. After which, only EPEL NEXT remains and the old EPEL will end.

    Oracle did fork c.q. clone EPEL as can be reviewed over here.

    What about Alma and/or Rocky?

    Do they intend to bring EPEL?
    And how far will Centminmod EL 8 depend on EPEL?
     
  8. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    There's definitely less EPEL 8 required packages as AlmaLinux 8 native YUM provides more and some are now in Remi YUM repo

    some that are installed right now
    Code (Text):
    yum -q list installed | grep epel | tr -s ' ' | column -t
    datamash.x86_64            1.5-1.el8                        @epel
    epel-release.noarch        8-10.el8                         @extras
    figlet.x86_64              2.2.5-18.20151018gita565ae1.el8  @epel
    haveged.x86_64             1.9.14-1.el8                     @epel
    jemalloc.x86_64            5.2.1-2.el8                      @epel
    jemalloc-devel.x86_64      5.2.1-2.el8                      @epel
    jpegoptim.x86_64           1.4.6-4.el8                      @epel
    libc-client.x86_64         2007f-24.el8                     @epel
    libimagequant.x86_64       2.12.5-1.el8                     @epel
    libmcrypt.x86_64           2.5.8-26.el8                     @epel
    libmcrypt-devel.x86_64     2.5.8-26.el8                     @epel
    libraqm.x86_64             0.7.0-4.el8                      @epel
    libtidy.x86_64             5.6.0-5.el8                      @epel
    libtidy-devel.x86_64       5.6.0-5.el8                      @epel
    moreutils.x86_64           0.63-1.el8                       @epel
    optipng.x86_64             0.7.7-3.el8                      @epel
    pbzip2.x86_64              1.1.13-1.el8                     @epel
    perl-Time-Duration.noarch  1.21-3.el8                       @epel
    pngquant.x86_64            2.12.5-1.el8                     @epel
    pwgen.x86_64               2.08-3.el8                       @epel
    pxz.x86_64                 4.999.9-19.beta.20200421git.el8  @epel
    screen.x86_64              4.6.2-10.el8                     @epel
    t1lib.x86_64               5.1.2-28.el8                     @epel
    t1lib-devel.x86_64         5.1.2-28.el8                     @epel
    uw-imap-devel.x86_64       2007f-24.el8                     @epel
    xxhash.x86_64              0.8.0-1.el8                      @epel
    xxhash-devel.x86_64        0.8.0-1.el8                      @epel
    xxhash-libs.x86_64         0.8.0-1.el8                      @epel
    
     
  9. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    Problem and benefit at the same time is that Remi does use new software versions.
    It is not how you look at it and what you want to use the software for.

    Where EPEL follows the Red Hat guidelines of backport patches over a new version.

    When remi releases a new version and this causes dependency problems. How do you deal with this?
     
  10. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Same way I always have in CentOS 6/7, resolve the issue - been using Remi YUM repo for years on Centmin Mod too and haven't come across a dependency issue I haven't been able to resolve or workaround so far :)

    Code (Text):
    yum -q list installed | grep remi | tr -s ' ' | column -t
    ImageMagick.x86_64            1:6.9.11.60-1.el8.remi  @remi
    ImageMagick-c++.x86_64        1:6.9.11.60-1.el8.remi  @remi
    ImageMagick-c++-devel.x86_64  1:6.9.11.60-1.el8.remi  @remi
    ImageMagick-devel.x86_64      1:6.9.11.60-1.el8.remi  @remi
    ImageMagick-libs.x86_64       1:6.9.11.60-1.el8.remi  @remi
    liblqr-1.x86_64               0.4.2-11.el8.remi       @remi-safe
    libzip.x86_64                 1.7.3-1.el8.remi        @remi-modular
    libzip-devel.x86_64           1.7.3-1.el8.remi        @remi-modular
    oniguruma5php.x86_64          6.9.6-1.el8.remi        @remi-safe
    oniguruma5php-devel.x86_64    6.9.6-1.el8.remi        @remi
    redis.x86_64                  6.2.1-1.el8.remi        @remi-modular
    remi-release.noarch           8.3-1.el8.remi          @@commandline
    
     
  11. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    @eva2000 you are ready tot taken off. Lets rock with Alma :)
     
  12. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Still a long way off but getting there. AlmaLinux 8.3 uses wget 1.19.5 but I prefer 1.21.1 - still some work to do to get feature parity :D
    Code (Text):
    wget -V
    GNU Wget 1.21.1 built on linux-gnu.
    
    -cares +digest -gpgme +https +ipv6 +iri +large-file +metalink +nls 
    +ntlm +opie +psl +ssl/openssl 
    
    Wgetrc: 
        /usr/local/etc/wgetrc (system)
    Locale: 
        /usr/local/share/locale 
    Compile: 
        gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/usr/local/etc/wgetrc" 
        -DLOCALEDIR="/usr/local/share/locale" -I. -I../lib -I../lib 
        -I/usr/local/include -I /usr/include -DHAVE_LIBSSL -DNDEBUG -O2 -g 
        -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS 
        -fexceptions -fstack-protector-strong -fasynchronous-unwind-tables 
        -fstack-clash-protection -fcf-protection -grecord-gcc-switches -m64 
        -mtune=generic 
    Link: 
        gcc -I/usr/local/include -I /usr/include -DHAVE_LIBSSL -DNDEBUG -O2 
        -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS 
        -fexceptions -fstack-protector-strong -fasynchronous-unwind-tables 
        -fstack-clash-protection -fcf-protection -grecord-gcc-switches -m64 
        -mtune=generic -L/usr/local/lib -lmetalink -lpcre2-8 -luuid -lidn2 
        -L /usr/lib64 -lssl -lcrypto -lz -lpsl ftp-opie.o openssl.o 
        http-ntlm.o ../lib/libgnu.a 
    
    Copyright (C) 2015 Free Software Foundation, Inc.
    License GPLv3+: GNU GPL version 3 or later
    <http://www.gnu.org/licenses/gpl.html>.
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.
    
    Originally written by Hrvoje Niksic <hniksic@xemacs.org>.
    Please send bug reports and questions to <bug-wget@gnu.org>.
    --------------------------------------------------------
    wget 1.21.1 installed at /usr/local/bin/wget
    https://community.centminmod.com/tags/wget/
    --------------------------------------------------------
    
     
  13. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    @eva2000 From your other post:
    Should be: AlmaLinux 8.3 is a new derivative of Red Hat Enterprise Linux 8.

    Rebuilding RHEL is very easy but time consuming. Every RHEL customer has access to the srmps. Rebuild, remove trademark if necessary, test and you're done.

    Immediately when CentOS quits and their git.centos.org only holds the source of Stream. There is little to rebuild :)
     
    Last edited: Apr 4, 2021
  14. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    Ah indeed it is (y):D
     
  15. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    Think now is the time and also the possibility to remove unnecessary ballast and not convert it to Centminmod version EL8. Managing your own wget takes a lot of time.

    Which function do you miss exactly that is not in the EL8 wget?
     
  16. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    from CentOS 8.x - Centmin Mod CentOS 8 Compatibility Worklog
     
  17. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    It is not done to respond to your own post.
    But I think this one is worthwhile.

    AlmaLinux is directly using Fedora project's EPEL.

    As can be reviewed at AlmaLinux epel source package:
    https://mirror.amscloud.co.id/almalinux/8.3/extras/Source/Packages/epel-release-8-10.el8.src.rpm

    No fork or mirror involved.
     
  18. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    As discussed earlier, timely release of updates (i.e. important and critical) is essential for running a clone like AlmaLinux.

    A first quick look on 2 random important updates.
    Indicates a release delay of 6 to 2 days by AlmaLinux.
    I didn't count the 0-day.

    OpenSSL

    Issued by Red Hat: 2021-03-25
    Issued by AlmaLinux: 2021-03-31

    Red Hat Customer Portal - Access to 24x7 support and knowledge
    Index of /almalinux/8/BaseOS/x86_64/os/Packages/

    Thunderbird

    Issued by Red Hat: 2021-03-29
    Issued by AlmaLinux: 2021-03-31

    Red Hat Customer Portal - Access to 24x7 support and knowledge
    Index of /almalinux/8/AppStream/Source/Packages/
     
  19. eva2000

    eva2000 Administrator Staff Member

    47,173
    10,667
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,571
    Local Time:
    3:30 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    relatively close I guess given upstream OpenSSL 1.1.1k fix for those CVE security bugs were released on March 25, 2021 too /news/changelog.html
     
  20. buik

    buik "Nobody who ever gave his best regretted it." Premium Member

    1,426
    387
    83
    Apr 29, 2016
    Flanders
    Ratings:
    +1,205
    Local Time:
    7:30 AM
    Red Hat's own Tomáš Mráz fixed that CVE :)

    In addition, CVE fixed code is provided to companies earlier than the general public.
    To be prepared and have updated packages ready on CVE release day.