Red Hat Enterprise Linux 8.6 Available to Download

Red Hat Enterprise Linux 8.6 Available to Download, Following the announcement of the release of RHEL 9, Red Hat published the release Red Hat Enterprise Linux 8.6 . Installation builds have been prepared for the x86_64, s390x (IBM System z), ppc64le, and Aarch64 architectures, but are available for download only to registered Red Hat Customer Portal users. Red Hat Enterprise Linux 8 rpm packages are distributed through Git repository CentOS The 8.x branch, which will be supported until at least 2029, develops in accordance with the development cycle, which implies the formation of releases every six months at a predetermined time.

Key changes :

• The fapolicyd framework, which allows you to determine which programs can be run by a certain user and which cannot, has been updated to version 1.1, which implements the placement of access rules and a list of trusted resources in the /etc/fapolicyd/rules.d/ and /etc/fapolicyd/trust directories .d instead of /etc/fapolicyd/fapolicyd.rules and /etc/fapolicyd/fapolicyd.trust files. Added new options to the fapolicyd-cli utility.
• fapolicyd, SELinux, and PBD (Policy-Based Decryption for automatic unlocking of LUKS drives) have added settings to harden SAP HANA 2.0 .
• OpenSSH implements the ability to use the Include directive in the sshd_config configuration file to substitute settings from other files, which, for example, allows you to put system-specific settings into a separate file.
• Added “–checksum” option to the semodule command to check the integrity of installed modules with SELinux rules.
• New versions of compilers and developer tools included: Perl 5.32, PHP 8.0, LLVM Toolset 13.0.1, GCC Toolset 11.2.1, Rust Toolset 1.58.1, Go Toolset 1.17.7, java-17-openjdk (also continue to ship java-11-openjdk and java-1.8.0-openjdk).
• Updated server and system packages: NetworkManager 1.36.0, rpm-ostree 2022.2, bind 9.11.36 and 9.16.23, Libreswan 4.5, audit 3.0.7, samba 4.15.5, 389 Directory Server 1.4.3.
• The Image Builder adds the ability to create images for different intermediate RHEL releases that are different from the version of the current system, as well as support for setting and resizing file systems on LVM partitions.
• nftables significantly reduced memory consumption (up to 40%) when restoring large setlists. The nft utility implements support for packet and traffic counters bound to set-list elements and enabled using the “counter” (“@myset {ip saddr counter}” keyword).
• The hostapd package is included, which uses the FreeRADIUS backend and can be used to run an 802.1X authenticator on Ethernet networks. Using hostapd to set up an access point or authentication server for Wi-Fi is not supported.
• Most eBPF components are supported, such as BCC (BPF Compiler Collection), libbpf, traffic control (tc, Traffic Control), bpftracem, xdp-tools and XDP (eXpress Data Path). In the Technology Preview state, AF_XDP socket support remains for accessing XDP from user space.
• Compatibility with images of guest systems based on RHEL 9 and the XFS file system is ensured (RHEL 9 uses an updated XFS format with support for bigtime and inobtcount).
• The Samba package includes changes related to the renaming of options in Samba 4.15 . For example, the options are renamed: “–kerberos” (in “–use-kerberos=required|desired|off”), “–krb5-ccache” (in “–use-krb5-ccache=CCACHE”), “–scope” ( in “–netbios-scope=SCOPE”) and “–use-ccache” (in “–use-winbind-ccache”). Removed options: “-e|–encrypt” and “-S|–signing”. Cleaned up duplicate options in ldbadd, ldbdel, ldbedit, ldbmodify, ldbrename and ldbsearch, ndrdump, net, sharesec, smbcquotas, nmbd, smbd and winbindd utilities.
• Added “–list-diagnostics” option to ld.so to list data that affects the application of optimizations in Glibc.
• The web console has added the ability to authenticate using smart cards for sudo and SSH, forward PCI and USB devices to virtual machines and manage local storage using Stratis.
• KVM hypervisor adds support for Windows 11 and Windows Server 2022 guests.
• The rig package is included with a utility for collecting monitoring data and handling events that can help diagnose random or very rare problems.
• The container-tools 4.0 set has been added, including Podman, Buildah, Skopeo and runc utilities.
• Provided the ability to use NFS as storage for isolated containers and their images.
• Stabilized container image with Podman toolkit. Added container with openssl command line utility.
• to the obsolete category (scheduled for removal in the future) been moved , including abrt, alsa-plugins-pulseaudio, aspnetcore, awscli, bpg-*, dbus-c++, dotnet 3.0-5.0, dump, fonts-tweak-tool, gegl, gnu-free-fonts-common, gnuplot, java-1.8.0-ibm, libcgroup-tools, libmemcached-libs, pygtk2, python2-backports, recode, spax, spice-server, star, tpm-tools.
• Continued to provide experimental (Technology Preview) support for AF_XDP, XDP hardware offloading, Multipath TCP (MPTCP), MPLS (Multi-protocol Label Switching), DSA (data streaming accelerator), KTLS, dracut, kexec fast reboot, nispor, DAX in ext4 and xfs, systemd-resolved, accel-config, igc, OverlayFS, Stratis, Software Guard Extensions (SGX), NVMe/TCP, DNSSEC, GNOME on ARM64 and IBM Z systems, AMD SEV for KVM, Intel vGPU, Toolbox.