Install EPEL repository on RHEL 9

This evening I’m trying to enable EPEL repository on a RHEL 9 server, by following instruction is taken from How to install EPEL on RHEL and CentOS Stream article [1] by Red Hat Enable Sysadmin. Enable the CodeReady Linux Builder repository. $ sudo subscription-manager repos --enable \ codeready-builder-for-rhel-9-$(arch)-rpms Repository 'codeready-builder-for-rhel-9-x86_64-rpms' is enabled for this system. Install the EPEL RPM. $ sudo dnf install \ https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm ...snip... Installed: epel-release-9-7.el9.noarch Complete! Let’s try to install htop (available from the EPEL repo) to verify that everything is working: $ sudo dnf install htop -y ....

November 22, 2023 · 1 min · 99 words · kenno

No support for RHEL with high availability in-place upgrade

Well, if you know you know, otherwise, you could have wasted the whole evening trying to upgrade RHEL 7.9 with High Availability to RHEL 8.x, and failed! If you read this post, head to the link at [1] and you’d see that Red Hat does not support i-place upgrades or rolling-upgrades of cluster nodes from one major release of RHEL to another. Here is an extract from [1]: Red Hat does not support in-place upgrades or rolling-upgrades of cluster nodes from one major release of RHEL to another....

November 15, 2023 · 2 min · 377 words · kenno

Installing HELM Cli on AlmaLinux 9

Recently, I decided to pick up learning Kubernetes again after completely being absent from this world for many years. In this post, I’ll document how to install Helm CLI on AlmaLinx 9. Helm is like a package manager for Kubernetes. Helm CLI can be installed on your local machine, it does not to be installed on the Kubenetes node. However, in order to interact with your Kubernetes cluster, you’ll need to also have kubectl command as well as properly configured it to interact with your Kubernetes cluster....

September 26, 2023 · 1 min · 206 words · kenno

How did I renew Red Hat Developer Subscription

If you’re reading this post, it’s quite likely that you’re fully aware that Red Hat provide a no-cost Red Hat Developer Subscription for individuals. With this subscript you can use it run RHEL for free. The subscription only lasts one year, and when it expires it can’t be renewed. You must re-register. I have a test RHEL vm, but I hardly use. So today when I turned it on and logged into it, the following message came up when i tried to update the system:...

August 30, 2023 · 3 min · 571 words · kenno

How to Enable Persistent Logging for Systemd Journal

On RHEL 7/8, CentOS 7/8 and even Ubuntu (??), by default the journal log data is stored only in memory (/run/log/journal/ directory). There are 2 ways to retain the journal log messages. The first one is to set the variable Storage to persistent in the /etc/systemd/journald.conf. [Journal] Storage=persistent Then restart the systemd-journald service. Another solution is simpler and it looks like it’s the recommended way of achieving this. All we have to do is to create a directory, /var/log/journal (with correct ownership and permission), and journald will automatically store the log messages there....

August 29, 2020 · 2 min · 418 words · kenno

Changing LUKS Passphrase

In my previous blog post, Managing File System Encryption with LUKS, I showed how to create an encrypted partition (of disk) using LUKS. Today, I’d like to show you how we can change the passphrase on this LUKS encrypted partition and keeping this passphrase (key) in the same slot. While I’m writing this blog post, I cannot remember how to do this, and I’m going to try to figure this out without doing the Google search....

July 12, 2020 · 7 min · 1319 words · kenno

Managing Security Risk on RHEL 8

This blog post is mainly about my practicing of managing security risk on a RHEL system, especially learning how to use the occasionally option passed to YUM command. It is probably not a good resource teaching how to properly manage security risks in general. Identify all critical, important, and moderate security notices on this server. [root@puppet2 ~]# yum updateinfo --security Updating Subscription Management repositories. Red Hat Enterprise Linux 8 for x86_64 - Supplementary (RPMs) 21 kB/s | 2....

June 30, 2020 · 3 min · 540 words · kenno

Managing File System Encryption with LUKS

Last year, I already wrote a blog post about the same topic: Configure Encrypted Storage With LUKS, and I had used fdisk to create a disk partition. In this post, I’ll use parted to achieve the same thing. I’m going to perform this operation on a server called servera on a disk device /dev/vdb. First, let’s verify that vdb is available and has no partition: [root@servera ~]# parted -l ... Error: /dev/vdb: unrecognised disk label Model: Virtio Block Device (virtblk) Disk /dev/vdb: 1074MB Sector size (logical/physical): 512B/512B Partition Table: unknown Disk Flags: Use parted to create a partition on vdb using the whole disk....

June 28, 2020 · 3 min · 502 words · kenno

CTDB Not Starting Up on CentOS 7

While preparing for my Red Hat Gluster Storage Administration exam (EX236), I got stuck at a section of configuring IP failover with CTDB Clustered Trivial Database) for Samba. The problem is that I coudldn’t get the ctdb service running on my home lab running CentOS 7 and a newer version of ctdb. This problem occurs on the following platform and package version: CentOS Linux release 7.7.1908 (Core) ctdb 4.9.1-6.el7 # systemctl status ctdb ● ctdb....

October 13, 2019 · 3 min · 513 words · kenno

Configure Encrypted Storage With LUKS

I’m currently preparing for the Red Hat Certified Specialist in Security: Linux exam (EX415). One of the exam objectives is about storage encryption using LUKS. Here’s my note learning about LUKS. It’s not meant to be a guide which you should copy and paste and run it on your production system. Suppose I have a new disk (/dev/vdb) attached to my server and I’d like to use it as an encrypted storage using LUKS....

August 29, 2019 · 3 min · 436 words · kenno