Oracle ® Linux 8

Release Notes for Oracle Linux 8 Update 2

Oracle Legal Notices

Copyright © 2020, Oracle and/or its affiliates. All rights reserved.

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

F21672-01

May 2020


Table of Contents

Preface
1 Supported Architectures
2 Shipped Kernels
3 New Features and Changes
3.1 Unbreakable Enterprise Kernel Release 6
3.2 Red Hat Compatible Kernel
3.3 Compilers and Developer Toolsets
3.3.1 Compiler Toolsets
3.3.2 GCC Toolset 9
3.4 Database
3.5 Dynamic Programming Languages, Web and Database Servers
3.5.1 maven:3.6 Module Included
3.5.2 mod_wsgi Installation Changes
3.5.3 perl-LDAP and perl-Convert-ASNI Packages Included
3.5.4 Python 3.8 Introduced
3.6 File Systems and Storage
3.7 Infrastructure Services
3.8 Networking
3.9 Podman, Buildah, and Skopeo Container Tools
3.10 Security
3.11 User-Agent Header String Improvement
3.12 Virtualization
3.13 Web Console
3.14 Compatibility
4 Known Issues
4.1 Installation and Upgrade Issues
4.1.1 No in-place upgrade from Oracle Linux 7 to Oracle Linux 8 available
4.1.2 Interactive text-based installation wizard unable to complete when an alternate language is selected
4.1.3 Changing installation source results in errors if alternative installation repository is set at boot
4.1.4 rhnreg_ks register command may fail if python3-rhn-virtualization-host package is installed
4.1.5 Missing beignet package causes dependency issue during upgrade from Oracle Linux 8 Update 1 to Oracle Linux 8 Update 2
4.1.6 ULN registration wizard not displayed on first boot after an Oracle Linux 8 installation
4.1.7 Syslog Error: Failed to insert module 'ip_tables': Operation not permitted
4.1.8 Graphics controller requirements for an installation on an Oracle VM VirtualBox guest
4.1.9 Installation on a KVM guest by using iPXE and iSCSI boot results in incorrect IQN name
4.2 Running yum update glusterfs-* fails to upgrade previously installed packages to Oracle Linux 8 Update 2
4.3 Cockpit web console Services page unable to search services by state
4.4 Oracle Linux 8 does not recognize SAS controllers on older Oracle Sun hardware
4.5 Cannot create a ULN Mirror on local yum server in Oracle Linux 8 Update 2
4.6 File System Issues
4.6.1 Btrfs and OCFS2 file systems not supported on RHCK
4.6.2 ext4: Frequent or repeated system shutdowns can cause file system corruption
4.7 Kernel Issues
4.7.1 KVM guests boot with "amd64_edac_mod: Unknown symbol" errors on AMD 64-bit platforms
4.7.2 Output of modinfo command does not show Retpoline support
4.7.3 Kdump runs out of memory when attempting to mount /sysroot on FC disks that use the Logical Volume Manager
4.7.4 Limitations of the LVM dm-writecache caching method
4.8 Networking Issues
4.8.1 tracepath6 does not parse destination IPv6 address correctly
4.8.2 Failure to insert ip_tables module
4.9 Running nohup prevents ssh command from executing
4.10 Restarting firewalld service results in SSH connection timeout
4.11 Error: "mcelog service does not support this processor"
4.12 Podman Issues
4.12.1 Executing podman attach --latest causes panic if no containers are available
4.12.2 Requirements for using the default podman detach key sequence
4.12.3 Authentication error occurs when attempting to pull an image by specifying an incorrect name
4.12.4 Oracle Container Registry unable to service requests to search catalog
4.13 TLS 1.3 Not Supported for NSS in FIPS Mode
5 Installation and Availability
5.1 Installing Oracle-Supported RDMA Packages
6 Release-Specific Information for Oracle Linux 8 Update 2 (aarch64)
6.1 System Requirements and Limitations (aarch64)
6.2 Shipped Kernel (aarch64)
6.3 New Features (aarch64)
6.4 VNC Remote Console Available as Technology Preview on 64-bit Arm Platform
6.5 Known Issues (aarch64)
6.5.1 Cannot install Oracle Linux 8 Update 2 (aarch64) on a host that has a disk with a Btrfs partition
6.5.2 bcache error on UEK R6 during subsequent attempt to register cache device
6.5.3 Kdump sometimes fails on ThunderX2 and X-Gene 3 platforms
6.6 Installation and Availability (aarch64)
A Package Changes from the Upstream Release
A.1 Changes to Binary Packages
A.1.1 Added Binary Packages for BaseOS by Oracle
A.1.2 Added Binary Packages for AppStream by Oracle
A.1.3 Modified BaseOS Binary Packages
A.1.4 Modified Binary Packages for CodeReady Linux Builder by Oracle
A.1.5 Modified AppStream Binary Packages
A.1.6 Removed BaseOS Binary Packages
A.1.7 Removed AppStream Binary Packages
A.2 Changes to Source Packages
A.2.1 Added Source Packages for BaseOS by Oracle
A.2.2 Modified BaseOS Source Packages
A.2.3 Modified AppStream Source Packages
A.2.4 Removed BaseOS Source Packages
A.2.5 Removed AppStream Source Packages

Preface

Oracle ® Linux 8: Release Notes for Oracle Linux 8 Update 2 provides information about the new features and known issues in the Oracle Linux 8 Update 2 release. This document may be updated after it is released.

Document generated on: 2020-05-01 (revision: 9862)

Note

These release notes contain information that applies to both the x86_64 and 64-bit Arm (aarch64) architectures. See Chapter 6, Release-Specific Information for Oracle Linux 8 Update 2 (aarch64) for information that is specific just to the 64-bit Arm platform.

Audience

This document is intended for users and administrators of the Oracle Linux 8 Update 2 release. It describes potential issues that you may encounter while using the operating system; and, where appropriate, any corresponding workarounds. Oracle recommends that you read this document before installing Oracle Linux 8 Update 2. It is assumed that readers have a general understanding of the Linux operating system.

Related Documents

The latest version of this document and other documentation for this product are available at:

https://docs.oracle.com/en/operating-systems/linux.html

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at https://www.oracle.com/corporate/accessibility/ .

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit https://www.oracle.com/corporate/accessibility/learning-support.html#support-tab .

Chapter 1 Supported Architectures

The Oracle Linux 8 Update 2 release is supported on the following platforms:

  • Intel 64-bit (x86_64)

  • AMD 64-bit (x86_64)

  • 64-bit Arm (aarch64)

In Oracle Linux 8 Update 2, the Arm platform is only supported with Unbreakable Enterprise Kernel Release 6 (UEK R6). See Chapter 6, Release-Specific Information for Oracle Linux 8 Update 2 (aarch64) for details.

Chapter 2 Shipped Kernels

Oracle Linux 8 Update 2 on the x86_64 platform ships with the following kernel packages:

kernel-uek-5.4.17-2011.1.2.el8uek

Unbreakable Enterprise Kernel Release 6 (UEK R6), which is the default kernel.

kernel-4.18.0-193.el8

Red Hat Compatible Kernel (RHCK).

The Oracle Linux release is tested as a bundle, as shipped on the installation media image. When installed from the installation media image, the minimum kernel version that is supported is the kernel that is included in the image. Downgrading kernel packages is not supported, unless recommended by Oracle Support.

Chapter 3 New Features and Changes

This chapter describes new features, major enhancements, bug fixes, and other changes that are introduced in Oracle Linux 8 Update 2. These features generally apply to both the x86_64 and Arm (aarch64) platforms., unless otherwise noted. For information that applies specifically to the Arm platform, see Chapter 6, Release-Specific Information for Oracle Linux 8 Update 2 (aarch64) .

3.1 Unbreakable Enterprise Kernel Release 6

Starting with Oracle Linux 8 Update 2 the Unbreakable Enterprise Kernel Release 6 (UEK R6) is included on the installation image, along with the Red Hat Compatible Kernel (RHCK). For new installations, UEK R6 is enabled and installed by default and is the default kernel on first boot.

UEK R6 is a heavily tested and optimized operating system kernel for Oracle Linux 7 Update 7, and later, and Oracle Linux 8 Update 1, and later. The kernel is developed, built, and tested on Arm (aarch64), Intel x86, and AMD x86 (x86_64). platforms. It is based on the mainline Linux kernel version 5.4. This release also updates drivers and includes bug and security fixes.

Note that UEK R6 maintains compatibility with RHCK and does not disable any features that are enabled in RHCK. Additional features are enabled to provide support for key functional requirements and patches are applied to improve performance and optimize the kernel for use on Oracle operating systems.

For more details, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

3.2 Red Hat Compatible Kernel

The following notable features, enhancements, and changes apply to the Red Hat Compatible Kernel (RHCK) that is shipped with Oracle Linux 8 Update 2 on the x86_64 platform.

For more information about the Unbreakable Enterprise Kernel Release 6 (UEK R6) release that is shipped with Oracle Linux 8 Update 2, refer to the Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

  • kexec-tools documentation includes Kdump FCoE target support.  The documentation for the kexec-tools now includes Kdump FCoE target support information. This enhancement enables users to obtain a better understanding of the status and details of kdump on FCoE target support.

  • numactl manual page updated to clarify information about memory usage.  The numactl(8) manual page now explicitly mentions that the memory usage information reflects just the resident pages on the system. This change eliminates any possible confusion with regards to whether the documented memory usage information refers to resident pages or virtual memory.

  • rngd can run with non-root privileges.  In this update, the random number generator daemon ( rngd ) is capable of running with non-root user privileges, which enhances system security. The rngd daemon checks whether data that is supplied by the source of randomness is sufficiently random and then stores it in the kernel’s random-number entropy pool.

  • Secure Boot available by default.  The default value for the secure= boot option was not set to auto in previous releases, thereby rendering this feature unavailable. In this update, the default value for this boot option is set to auto and the secure boot feature is now available, unless it was previously configured otherwise.

3.3 Compilers and Developer Toolsets

Oracle Linux 8 Update 2 introduces the following features, enhancements, and changes to compilers and developer toolsets.

3.3.1 Compiler Toolsets

The following compiler toolsets have been updated. These toolsets are distributed as Application Streams in Oracle Linux 8 Update 2:

  • Clang toolset updated to version 9.0.0.  This toolset has been updated to version 9.0.0. Features that are included in this Clang version include the following: the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis.

  • Rust toolset updated to version 1.39.  This toolset has been updated to version 1.39. This version of the Rust toolset provides the Rust programming language compiler ( rustc ), the cargo build tool and dependency manager, as well any required libraries.

  • Go toolset updated to 1.13.4.  This toolset, which provides the Go ( golang ) programming language tools and libraries, has been updated to version 1.13.4. This version of the Go toolset also includes the Delve debugger for the Go programming language.

3.3.2 GCC Toolset 9

Oracle Linux 8 Update 2 provides the GCC Toolset 9, which is an Application Stream that is distributed in the form of a Software Collection in the AppStream repository. The GCC Toolset is similar to the Oracle Linux Developer Toolset.

The GCC Toolset 9 contains up-to-date versions of the following developer tools:

  • GCC version 9.2.1

  • GDB version 8.3

  • Valgrind version 3.15.0

  • SystemTap version 4.1

  • Dyninst version 10.1.0

  • binutils version 2.32

  • elfutils version 0.176

  • dwz version 0.12

  • make version 4.2.1

  • strace version 5.1

  • ltrace version 0.7.91

  • annobin version 8.7.9

The GCC Toolset 9 is available as an Application Stream within the AppStream repository, in the form of a Software Collection.

You can install this toolset as follows:

# dnf install gcc-toolset-9

To run a tool from GCC Toolset 9, use the following command:

$ scl enable gcc-toolset-9 tool

The following command runs a shell session, where tool versions from the GCC Toolset 9 take precedence over system versions of the same tools:

$ scl enable gcc-toolset-9 bash

3.4 Database

Oracle Linux 8 Update 2 ships with version 8.0 of the MySQL database software.

3.5 Dynamic Programming Languages, Web and Database Servers

The following dynamic programming languages, and web and database features and improvements are introduced in this update.

3.5.1 maven:3.6 Module Included

The maven:3.6 module stream is included in Oracle Linux 8 Update 2. The Maven software project management and comprehension tool includes several bug fixes and enhancements over the maven:3.5 stream version that was included in Oracle Linux 8.

3.5.2 mod_wsgi Installation Changes

In previous releases, if you attempted to install the mod_wsgi module by using the dnf install mod_wsgi command, the python3-mod_wsgi package was installed. The introduction of Python 3.8 in Oracle Linux 8 Update 2 requires that you to now specify which version of mod_wsgi you want to install, as Python 3.6 is also supported in this release. If you do not specify the mod_wsgi version, an error message is displayed.

For example, if you wanted to install the Python 3.6 version of mod_wsgi , enable the python36 module and then install the package as follows:

# dnf module enable python36
# dnf install python3-mod_wsgi

To install the Python 3.8 version of the package enable the python38 module and then install the package as follows:

# dnf module enable python38 
# dnf install python38-mod_wsgi
Note

The python3-mod_wsgi and python38-mod_wsgi packages conflict with each other. This conflict is due to a limitation with the Apache HTTP Server. As such, only one mod_wsgi module can be installed on a system at any given time.

3.5.3 perl-LDAP and perl-Convert-ASNI Packages Included

Oracle Linux 8 Update 2 includes the perl-LDAP and perl-Convert-ASN1 packages. The perl-LDAP package provides an LDAP client for the Perl language. Note that the perl-LDAP package requires the perl-Convert-ASN1 package. This package encodes and decodes Abstract Syntax Notation One (ASN.1) data structures by using Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER).

3.5.4 Python 3.8 Introduced

Oracle Linux 8 Update 2 includes Python 3.8, which is provided by a new python38 module. Python 3.8 includes several enhancements over the previous Python 3.6 version, including improvements to the developer experience and better performance. Other notable changes include new Python modules and language features, improved support for optional static type hints, and updated versions of some packages, such as pip , requests , and Cython .

Note that Python 3.6 continues to be supported in Oracle Linux 8. You can install Python 3.8 and the packages that are built for it in parallel with Python 3.6, on the same system.

For example, you would install packages from the python38 module as follows:

# dnf install python38
# dnf install python38-Cython

Running the previous command automatically enables the python38:3.8 module.

3.6 File Systems and Storage

Oracle Linux 8 Update 2 provides the following file systems and storage features, enhancements, and changes:

  • Btrfs file system removed from RHCK.  The Btrfs file system is removed from RHCK in Oracle Linux 8. As such, you cannot create or mount Btrfs file systems when using this kernel. Also, any Btrfs user-space packages that are provided are not supported with RHCK.

    Note

    Support for the Btrfs file system is enabled in UEK R6. For more information about other enhancements that have been made to Btrfs in UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

  • OCFS2 file system removed from RHCK.  The Oracle Cluster File System version 2 (OCFS2) file system is removed from RHCK in Oracle Linux 8. As such, you cannot create or mount OCFS2 file systems when using this kernel. Also, any OCFS2 user-space packages that are provided are not supported with RHCK.

    Note

    OCFS2 is fully supported with UEK R6 in Oracle Linux 8 Update 2.

  • dm-writecache caching method added for LVM cache volumes.  In this update, Logical Volume Manager (LVM) cache volumes include the dm-writecache caching method, as well as the existing hot-spot ( dm-cache ) method.

    The dm-writecache method caches write operations only . The faster volume, typically an SSD or a persistent memory (PMEM) disk, stores the write operations first and then migrates these operations to the slower disk in the background.

    Use the lvconvert command with the --type cache or --type writecache option to configure a caching method.

    Note

    See Section 4.7.4, “Limitations of the LVM dm-writecache caching method” for further information about the limitations of this feature.

3.7 Infrastructure Services

Oracle Linux 8 Update 2 introduces the following infrastructure services features, enhancements, and changes:

  • Bind updated to version 9.11.13.  In this update, the bind packages have been updated to version 9.11.13. This version of Bind includes several improvements over the previous version, including new features and commands, as well as improvements to existing commands and functionality.

  • Tuned updated to version 2.13.  The tuned packages are updated to version 2.13 in this update. This version of Tuned provides several bug fixes and enhancements over the previous version.

3.8 Networking

Oracle Linux 8 Update 2 introduces the following features, enhancements, and changes:

  • eBPF for Traffic Control kernel subsystem supported.  In this update, the Traffic Control ( tc ) kernel subsystem and the tc tool is capable of attaching to extended Berkeley Packet Filtering (eBPF) programs as packet classifiers and actions for both the ingress and egress queueing disciplines. Note that eBPF for tc was previously available as a technology preview only.

  • firewalld updated to version 0.8.  The firewalld packages are updated to version 0.8 in this update. This version of firewalld provides several performance improvements, including all bug fixes since version 0.7.0.

    Other notable changes include the following:

    • firewalld now uses the libnftables JSON interface, which is part of the nftables subsystem.

    • Service definitions include a new helper element, which replaces module.

    • Custom helpers can now use standard helper modules.

  • firewalld service can use connection tracking helpers for services that are running on a non-standard port.  The firewalld service's user-defined helpers can now use standard kernel helper modules. This improvement provides the capability for creating firewalld rules that use connection tracking helpers for services that are running on a non-standard port.

  • libnbd library added.  The libnbd client library for Network Block Device (NBD) protocol is included in Oracle Linux 8 Update 2. This change enables clients to access most NBD features, including virt-v2v warm conversions, hard disks over the network, and virtual hard disks.

  • User-space applications can retrieve the netns ID selected by the kernel.  In this update, capability has been added for user-space applications to request that the kernel select a new netns ID and then assign it to a network name space. This improvement provides user-space applications with a more reliable option for identifying the netlink ID selected by the kernel. You can now specify the NLM_F_ECHO option when sending an RTM_NETNSIDnetlink message to the kernel. The kernel then returns a netlink message, which includes the netns ID, which is set to the value that is selected by the kernel

  • whois package added.  The whois package is included in Oracle Linux 8 Update 2. The whois package provides capability for retrieving information about a specific domain name or IP address.

3.9 Podman, Buildah, and Skopeo Container Tools

The podman , buildah , and skopeo container tools that were introduced in the Oracle Linux 8 release are supported on both UEK R6 and RHCK in Oracle Linux 8 Update 2. These tools are compatible with the Open Container Initiative (OCI) and can be used to manage the same Linux containers that are produced and managed by Docker and other compatible container engines. Because these tools are light-weight and primarily focused on a subset of features, you can run them minus the overhead of working with a daemon process. For more details about these tools, see Oracle ® Linux 8: Release Notes for Oracle Linux 8 .

3.10 Security

Oracle Linux 8 Update 2 introduces the following security features, enhancements, and changes:

  • Audit updated to version 3.0-0.14.  The audit packages have been updated to version 3.0-0.14. This version of Audit provides many bug fixes and enhancements over the previous version.

  • Audit includes several improvements from kernel v5.5-rc1.  The version of Audit that is provided in this update includes several enhancements, bug fixes, and cleanups related to the Audit subsystem, many of which were introduced between versions 4.18 and 5.5-rc1 of Audit.

  • lvmdbusd service confined by SELinux.  In this update, the lvmdbusd executable file has the lvm_exec_t context defined. This change means the lvmdbusd daemon can now be used correctly with SELinux in enforcing mode. Previously, the lvmdbusd daemon could not transition to the lvm_t context, irrespective of whether the SELinux policy for lvm_t was defined. The result was that the lvmdbusd daemon was executed in the unconfined_service_t domain, with SELinux labeling lvmdbusd as unconfined.

  • openssl-pkcs11 updated to version 0.4.10.  The openssl-pkcs11 package has been updated to version 0.4.10. This version of the package includes several bug fixes and enhancements over the previous version. Note that the openssl-pkcs11 package provides access to PKCS #11 modules through the engine interface.

  • oscap-podman tool added.  The openscap packages have been updated to include the new oscap-podman tool for security and compliance scanning of containers. The oscap-podman tool provides similar functionality to the oscap-docker tool that is used for scanning containers and container images in Oracle Linux 7.

  • rsyslog updated to version 8.1911.0.  The rsyslog packages have been updated to version 8.1911.0, which provides numerous bug fixes and enhancements over the previous version.

  • SCAP Security Guide includes ACSC Essential Eight and DISA STIG for Oracle Linux 8 support.  The scap-security-guide packages in Oracle Linux 8 Update 2 provides the following new profiles:

    • Australian Cyber Security Centre (ACSC) Essential Eight compliance profile aligned to the security baseline defined by ACSC

    • "[DRAFT] DISA STIG for Oracle Linux 8 compliance profile aligned to the STIG security controls published by DISA.

    This improvement enables you to install a system that conforms to one of these security baselines.

    Also, you can now use the OpenSCAP suite to check security compliance and remediation by using this specification, which provides minimum security controls, as defined by corresponding baseline.

  • SELinux setools-gui and setools-console-analyses packages included.  The setools-gui package, which was included in Oracle Linux 7, is re-introduced in Oracle Linux 8 Update 2. You can use the tool to inspect relations and data flows, particularly in multi-level systems with highly specialized SELinux policies. You can also use the apol graphical tool that is available with the setools-gui package to inspect and analyze various aspects of an SELinux policy. In addition, you can use the tools that are included with the setools-console-analyses package to analyze domain transitions and SELinux policy information flows.

  • SELinux improved to enable confined users to manage user session services.  Confined users can now manage user sessions. In previous releases, confined users could not manage user session services, which meant they could not execute the systemctl --user or busctl --user commands or work in the web console.

  • semanage export able to display customizations related to permissive domains.  The semanage command, which is part of the policycoreutils package for SELinux, has been improved. You can now use the command to display customizations for permissive domains. You can now also use the semanage export command to transfer permissive local modifications between systems.

  • semanage includes capability for listing and modifying SCTP and DCCP ports.  Oracle Linux 8 Update 2 includes SCTP and DCCP protocol support for the semanage port command. This enhancement enables you to check whether two systems can communicate by using SCTP. In addition, the ability to fully enable SCTP features to successfully deploy SCTP-based applications is also provided. In previous releases, you could only list and modify TCP and UDP ports by using the semanage port command.

  • Sudo updated to version 1.8.29-3.  The sudo packages have been updated to version 1.8.29-3. This version of Sudo includes several major changes, bug fixes, and improvements over the previous version.

  • Udica capable of adding new allow rules generated from SELinux denials to existing container policy.  The udica command has been improved. Now, if a container that is running under a policy generated by the udica command triggers an SELinux denial, the command is able to update the policy. You can use the new -a or --append-rules option to append rules from an AVC file.

3.11 User-Agent Header String Improvement

In this update, the User-Agent header string that is normally part of HTTP requests that are made by DNF has been extended to include information that is read from the /etc/os-release file. See the dnf.conf(5) manual page for more specific details.

3.12 Virtualization

The following virtualization features, enhancements, and changes are introduced in this update:

  • virt-install returns more helpful message when creating VM from an install tree.  The virt-install command has been improved to include a workaround for an issue that caused booting to fail on Oracle Linux 7 and earlier Oracle Linux 8 releases if the --location option was also specified. The command now returns a more helpful message that include instructions on how to work around the problem should such a failure occur.

  • EDK2 updated to version stable201908.  The EDK2 package has been updated to version stable201908 . This version of EDK2 includes several improvements, including support for OpenSSL-1.1.1 . Another notable change in this version of EDK2 is that the EDK2 package license has changed from BSD and OpenSSL and MIT to BSD-2-Clause-Patent and OpenSSL and MIT .

  • Nested virtualization capability added for KVM.  This release provides support for nested virtualization on kernel-based Virtual Machines (KVMs) that are running on an Intel 64 host. This enhancement enables an Oracle Linux 7 or Oracle Linux 8 VM that is running on an Oracle Linux 8 physical host to perform as a hypervisor, as well as host its own VMs.

    Note

    On AMD64 systems, nested KVM virtualization continues to be a Technology Preview feature.

  • virt-manager application deprecated.  The Virtual Machine Manager application ( virt-manager ) is deprecated in this release. Oracle recommends that you use the Cockpit web console to manage virtualization. Note that some features in Oracle Linux 8 might still only be accessible by using either virt-manager or the command line.

  • VM snapshots deprecated.  The current mechanism for creating VM snapshots is deprecated and not working reliably in this release. It is therefore recommended that you do not use snapshots in Oracle Linux 8.

3.13 Web Console

Oracle Linux 8 Update 2 introduces the following features, improvements, and changes for the Cockpit web console:

  • Web console login changes.  Starting with this update, you are now automatically logged out of your current web console session after 15 minutes of inactivity. To modify this setting, adjust the timeout in minutes by editing the /etc/cockpit/cockpit.conf file. Another change in this update includes optional capability for showing the content of banner files on the web console's login screen, which is similar to SSH behavior. You must configure this functionality in the /etc/cockpit/cockpit.conf file to use it.

  • Option for logging into the web console with a TLS client certificate added.  You can now configure the web console to log in with a TLS client certificate that is provided by a browser or a device, such as smart card or a YubiKey.

  • Storage page updates.  Creating a new file system in the web console now always required a specified mount point. This page also no longer offers the "Default" choice when mounting a file system.

    The web console now hides the distinction between the /etc/fstab and the /proc/mounts run-time state configuration. Any changes that you make in the web console apply to both the configuration and the run-time state. In the event that the configuration and the run-time state differ from each other, the web console issues a warning to enable you to more easily synchronize these configurations.

  • Virtual Machines page updates.  Several storage improvements have been made to the Virtual Machines page, including the following: storage volume creation works for all libvirt-supported types and you can now create storage pools on a LVM or iSCSI device. Also, the Virtual Machines page includes capability for creating and removing virtual network interfaces.

  • Web console redesigned to use the PatternFly 4 UI design system.  The PatternFly 4 design is implemented in this update. This design provides improved accessibility and also more closely matches the OpenShift 4 design. Another important feature improvement is a redesigned Overview page that is easier to understand. The following additional improvements have been made: health information is more prominent, resource graphs have been moved to a separate page, and the hardware information page is much easier to locate. The new design also provides a new Search field in the Navigation menu to enable users to more easily locate specific pages by using keywords.

3.14 Compatibility

Oracle Linux maintains user-space compatibility with Red Hat Enterprise Linux (RHEL), which is independent of the kernel version that underlies the operating system. Existing applications in userspace continue to run unmodified on the Unbreakable Enterprise Kernel Release 6 (UEK R6) release and no recertifications are needed for RHEL certified applications.

To minimize impact on interoperability during releases, the Oracle Linux team works closely with third-party vendors regarding hardware and software that have dependencies on kernel modules. The kernel ABI for UEK R6 will remain unchanged in all subsequent updates to the initial release. UEK R6 contains changes to the kernel ABI, relative to UEK R5, that require recompilation of third-party kernel modules on the system. Before installing UEK R6, verify its support status with your application vendor.

Chapter 4 Known Issues

Table of Contents

4.1 Installation and Upgrade Issues
4.1.1 No in-place upgrade from Oracle Linux 7 to Oracle Linux 8 available
4.1.2 Interactive text-based installation wizard unable to complete when an alternate language is selected
4.1.3 Changing installation source results in errors if alternative installation repository is set at boot
4.1.4 rhnreg_ks register command may fail if python3-rhn-virtualization-host package is installed
4.1.5 Missing beignet package causes dependency issue during upgrade from Oracle Linux 8 Update 1 to Oracle Linux 8 Update 2
4.1.6 ULN registration wizard not displayed on first boot after an Oracle Linux 8 installation
4.1.7 Syslog Error: Failed to insert module 'ip_tables': Operation not permitted
4.1.8 Graphics controller requirements for an installation on an Oracle VM VirtualBox guest
4.1.9 Installation on a KVM guest by using iPXE and iSCSI boot results in incorrect IQN name
4.2 Running yum update glusterfs-* fails to upgrade previously installed packages to Oracle Linux 8 Update 2
4.3 Cockpit web console Services page unable to search services by state
4.4 Oracle Linux 8 does not recognize SAS controllers on older Oracle Sun hardware
4.5 Cannot create a ULN Mirror on local yum server in Oracle Linux 8 Update 2
4.6 File System Issues
4.6.1 Btrfs and OCFS2 file systems not supported on RHCK
4.6.2 ext4: Frequent or repeated system shutdowns can cause file system corruption
4.7 Kernel Issues
4.7.1 KVM guests boot with "amd64_edac_mod: Unknown symbol" errors on AMD 64-bit platforms
4.7.2 Output of modinfo command does not show Retpoline support
4.7.3 Kdump runs out of memory when attempting to mount /sysroot on FC disks that use the Logical Volume Manager
4.7.4 Limitations of the LVM dm-writecache caching method
4.8 Networking Issues
4.8.1 tracepath6 does not parse destination IPv6 address correctly
4.8.2 Failure to insert ip_tables module
4.9 Running nohup prevents ssh command from executing
4.10 Restarting firewalld service results in SSH connection timeout
4.11 Error: "mcelog service does not support this processor"
4.12 Podman Issues
4.12.1 Executing podman attach --latest causes panic if no containers are available
4.12.2 Requirements for using the default podman detach key sequence
4.12.3 Authentication error occurs when attempting to pull an image by specifying an incorrect name
4.12.4 Oracle Container Registry unable to service requests to search catalog
4.13 TLS 1.3 Not Supported for NSS in FIPS Mode

This chapter describes known issues in the Oracle Linux 8 Update 2 release on the x86_64 platform, unless otherwise noted. For issues that apply specifically the Arm (aarch64) platform, see Section 6.5, “Known Issues (aarch64)” .

4.1 Installation and Upgrade Issues

The following are known installation and upgrade issues for Oracle Linux 8 Update 2.

4.1.1 No in-place upgrade from Oracle Linux 7 to Oracle Linux 8 available

Currently, no supported method is available for an in-place upgrade from Oracle Linux 7 to Oracle Linux 8.

4.1.2 Interactive text-based installation wizard unable to complete when an alternate language is selected

If an alternate language is selected during an interactive installation by using the text-based installer, you cannot progress through all of the steps in the installation wizard. The installation is blocked with [!] bullets for Software Selection and Installation Destination , irrespective of what is selected for these two options.

Note that this issue does not occur when performing an installation by using the default language selection of English or if you are using the graphical installer.

(Bug ID 30535416)

4.1.3 Changing installation source results in errors if alternative installation repository is set at boot

If the installer is booted with the inst.repo option set, changing the installation source to use a CD or DVD device within the installer results in an error that prevents you from continuing the installation, unless you set the source back to the original source that was set at boot.

If you set the inst.repo option to point to a hard disk and then attempt to change the installation source inside the installer, the installer displays an error; but, you can still proceed with the installation.

To avoid these issues, do not set the inst.repo option at boot if you do not intend to use the installation source that is provided. Or, use the inst.repo source that is defined at boot without attempting to change installation source inside the installer.

(Bug ID 30316179)

4.1.4 rhnreg_ks register command may fail if python3-rhn-virtualization-host package is installed

Attempting to register with ULN in Oracle Linux 8 Update 2 by running the rhnreg_ks command may fail if the python3-rhn-virtualization-hosts package is installed on the system. This issue has been observed when the libvirtd service is not running.

To work around this issue, ensure that the libvirtd packages are installed on your system and that the service is enabled and running prior to registering with ULN by using the rhnreg_ks command.

(Bug ID 30366521)

4.1.5 Missing beignet package causes dependency issue during upgrade from Oracle Linux 8 Update 1 to Oracle Linux 8 Update 2

When upgrading from Oracle Linux 8 Update 1 to Oracle Linux 8 Update 2, a dependency issue is encountered if the beignet package is installed, as this package requires an earlier version of the clang-libs package.

Currently, a newer version of the beignet package is not available in Oracle Linux 8 Update 2.

To work around the issue, remove the beignet package from the Oracle Linux 8 Update 1 system to be installed prior to upgrading to Oracle Linux 8 Update 2.

(Bug ID 31213935)

4.1.6 ULN registration wizard not displayed on first boot after an Oracle Linux 8 installation

On new installations of Oracle Linux 8, the ULN registration wizard that presents the option to register with ULN and use Oracle Ksplice is not displayed on first boot. This behavior differs from previous Oracle Linux releases, where you were presented with these options on the first boot after completing the installation.

As an alternative option, you can register with ULN after the installation completes. For instructions, visit https://linux.oracle.com/ .

(Bug ID 29933974)

4.1.7 Syslog Error: Failed to insert module 'ip_tables': Operation not permitted

During an Oracle Linux 8 Update 2 installation, the following message can be observed in the /var/log/messages:systemd log:

1]: Failed to insert module 'ip_tables': Operation not permitted

This error can be safely ignored, as the ip_tables kernel module subsequently loads successfully, as shown in the output of the following command:

# grep IPTABLES /boot/config*
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP6_NF_IPTABLES=m
#
# modinfo ip_tables
filename:      
/lib/modules/4.18.0-32.el8.x86_64/kernel/net/ipv4/netfilter/ip_tables.ko.xz
alias:          ipt_icmp
description:    IPv4 packet filter
author:         Netfilter Core Team <coreteam@netfilter.org>
license:        GPL
rhelversion:    8.0
srcversion:     3967C875058C2EE2475C9C2
depends:        
retpoline:      Y
intree:         Y
name:           ip_tables
vermagic:       4.18.0-32.el8.x86_64 SMP mod_unload modversions
sig_id:         PKCS#7
signer:        
sig_key:        
sig_hashalgo:   md4
signature:      30:82:02:59:06:09:2A:86:48:86:F7:0D:01:07:02:A0:82:02:4A:30:
82:02:46:02:01:01:31:0D:30:0B:06:09:60:86:48:01:65:03:04:02:
01:30:0B:06:09:2A:86:48:86:F7:0D:01:07:01:31:82:02:23:30:82:
02:1F:02:01:01:30:7A:30:62:31:22:30:20:06:03:55:04:0A:0C:19:
4F:72:61:63:6C:65:20:41:6D:65:72:69:63:61:2C:20:49:6E:63:2E:
2C:63:3D:55:53:31:19:30:17:06:03:55:04:03:0C:10:4F:72:61:63:
.
.
.

(Bug ID 29500599)

4.1.8 Graphics controller requirements for an installation on an Oracle VM VirtualBox guest

To successfully install Oracle Linux 8 Update 2 on an Oracle VM VirtualBox guest, where the graphical installer is used and the default install of the Server with GUI environment is set, requires that the Oracle VM VirtualBox guest use the VMSVGA graphics controller and that it is configured with at least 64MB of memory.

Warning

Failure to set the graphics controller correctly can result in an installation where the graphical display is unable to start correctly.

The VMSVGA graphics controller is the default controller when you create a new guest by using Oracle VM VirtualBox 6.0, or later, for Linux guest operating systems. This issue is more likely to appear if you attempt to install over an existing guest that was created on an earlier Oracle VM VirtualBox release. Oracle recommends that you only attempt to install Oracle Linux 8 on a newly created virtual machine (VM) in Oracle VM VirtualBox 6.0, or later.

(Bug ID 30004543)

4.1.9 Installation on a KVM guest by using iPXE and iSCSI boot results in incorrect IQN name

After installing Oracle Linux 8 Update 2 on a KVM guest by using iPXE and iSCSI boot, the SCSI Qualified Name (IQN) in the /etc/iscsi/initiatorname.iscsi file is not correct.

Note that this incorrect configuration could impact kdump functionality.

The workaround for this issue is to manually modify the /etc/iscsi/initiatorname.iscsi file with the correct IQN after the installation completes.

(Bug ID 29536715)

4.2 Running yum update glusterfs-* fails to upgrade previously installed packages to Oracle Linux 8 Update 2

If you are upgrading your system to Oracle Linux 8 Update 2 and the glusterfs-*.i686 and glusterfs-*.x86_64 packages were previously installed on the system to be upgraded, running the yum update glusterfs* command fails to upgrade the package to Oracle Linux 8 Update 2.

Note

This issue does not impact upgrades from Oracle Linux 8 Update 1 to Oracle Linux 8 Update 2, as the glusterfs-*.i686 packages are not included in either of these releases.

The workaround for this issue is to first remove the glusterfs-*.i686 packages from the system to be upgraded, and then run the yum update glusterfs* command.

(Bug ID 30279840)

4.3 Cockpit web console Services page unable to search services by state

The Services page for the Cockpit web console has been updated to enable you to search services by name, description, and state. This new functionality works as expected for filtering services by Name and Description; however, if you attempt to filter services by State, an error indicating there are no matching results is produced.

(Bug ID 30286168)

4.4 Oracle Linux 8 does not recognize SAS controllers on older Oracle Sun hardware

The Oracle Linux 8 Update 2 installer does not recognize some Serial Attached SCSI (SAS) controllers that are found on older Oracle Sun server models. If you attempt to install Oracle Linux 8 on these server models, the installer does not recognize the local disk and the installation fails. Some examples of these older server models include, but are not limited to, the following: Oracle Sun Fire X4170 M2 Server, Oracle Sun Fire X4170 M3 Server, Oracle Sun OVCA X3-2 Server, and the Oracle Sun X4-2 Server.

The following SAS controllers are removed from the mpt2sas driver in RHCK:

  • SAS2004, PCI ID 0x1000:0x0070

  • SAS2008, PCI ID 0x1000:0x0072

  • SAS2108_1, PCI ID 0x1000:0x0074

  • SAS2108_2, PCI ID 0x1000:0x0076

  • SAS2108_3, PCI ID 0x1000:0x0077

  • SAS2116_1, PCI ID 0x1000:0x0064

  • SAS2116_2, PCI ID 0x1000:0x0065

  • SSS6200, PCI ID 0x1000:0x007E

The following SAS controllers are removed from the megaraid_sas driver in RHCK:

  • Dell PERC5, PCI ID 0x1028:0x15

  • SAS1078R, PCI ID 0x1000:0x60

  • SAS1078DE, PCI ID 0x1000:0x7C

  • SAS1064R, PCI ID 0x1000:0x411

  • VERDE_ZCR, PCI ID 0x1000:0x413

  • SAS1078GEN2, PCI ID 0x1000:0x78

  • SAS0079GEN2, PCI ID 0x1000:0x79

  • SAS0073SKINNY, PCI ID 0x1000:0x73

  • SAS0071SKINNY, PCI ID 0x1000:0x71

(Bug ID 29120478)

4.5 Cannot create a ULN Mirror on local yum server in Oracle Linux 8 Update 2

Currently, there is no tool for mirroring ULN channels from ULN to a local yum server that is hosted on Oracle Linux 8 Update 2. However, you can still perform ULN mirroring on Oracle Linux 7, as well as mirror any Oracle Linux 8 Update 1 ULN channels onto a yum server that is hosted on Oracle Linux 7.

If you use the Ksplice offline client, where a ULN mirror is required to service Oracle Linux 8 Update 2 hosts, Oracle recommends that you host the ULN mirror on an Oracle Linux 7 host. For instructions, see Creating and Using a Local ULN Mirror in the Oracle ® Linux: Unbreakable Linux Network User's Guide for Oracle Linux 6 and Oracle Linux 7 . After configuring the system as a yum server, you can subscribe it to any Oracle Linux 8 Update 2 ULN channels that you wish to mirror.

For more information about the Ksplice offline client, see the Oracle ® Linux: Ksplice User's Guide .

(Bug ID 30005125)

4.6 File System Issues

The following are known file systems issues in Oracle Linux 8 Update 2.

4.6.1 Btrfs and OCFS2 file systems not supported on RHCK

The Btrfs and OCFS2 file systems are removed from RHCK in Oracle Linux 8, which means you cannot create or mount these file systems when using this kernel. Also, any Btrfs and OCFS2 user-space packages that are provided are not supported with RHCK.

Note that support for the Btrfs and OCFS2 file systems is enabled in UEK R6. For more information about enhancements that have been made to Btrfs and OCFS2 in UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

4.6.2 ext4: Frequent or repeated system shutdowns can cause file system corruption

If a system that is using the ext4 file system is repeatedly or frequently shut down, the file system might become corrupted. Note that this issue is considered to be a corner-case issue, due to the difficulty that is required to replicate it. The issue exists in the upstream code and proposed patches are currently under review.

(Bug ID 27547113)

4.7 Kernel Issues

The following are known kernel issues in Oracle Linux 8 Update 2.

4.7.1 KVM guests boot with "amd64_edac_mod: Unknown symbol" errors on AMD 64-bit platforms

The following errors might be displayed repeatedly when KVM guests are booting on AMD 64-bit systems:

[   12.474069] amd64_edac_mod: Unknown symbol amd_register_ecc_decoder (err
0)
[   12.474083] amd64_edac_mod: Unknown symbol amd_report_gart_errors (err 0)
[   12.852250] amd64_edac_mod: Unknown symbol amd_unregister_ecc_decoder (err
0)
[   12.852297] amd64_edac_mod: Unknown symbol amd_register_ecc_decoder (err
0)
.
.
.

These errors occur because the module code for the kernel erroneously returns -EEXIST for modules that failed to load and are in the process of being removed from the module list. The amd64_edac_mod module will not be loaded in a VM. These errors can be ignored, as they do not impact functionality in any way.

Note

This issue occurs on Oracle Linux 8 Update 2 systems that are running RHCK only and is not encountered on systems that are running UEK R6.

(Bug ID 29853602)

4.7.2 Output of modinfo command does not show Retpoline support

A bug in the Oracle Linux 8 Update 2 code causes Retropline support to not be displayed in the output of the modinfo command, even though the CONFIG_RETPOLINE flag is set to Y , for example:

# modinfo -F retpoline
/usr/lib/modules/4.18.0-80.el8.x86_64/kernel/sound/usb/usx2y/snd-usb-us122l.ko.xz
#

The CONFIG_RETPOLINE=Y flag is still required to add and display Retpoline support. If the parameter is enabled, the kernel builds with a retpoline-capable compiler.

(Bug ID 29894295)

4.7.3 Kdump runs out of memory when attempting to mount /sysroot on FC disks that use the Logical Volume Manager

An issue in Oracle Linux 8 Update 2 causes Kdump to run out of memory if you attempt to mount /sysroot on a Fibre Channel (FC) disk that uses LVM. This issue is due to a lack of memory when the crashkernel loads.

To resolve the issue, you can do one of the following:

  • Override the crashkernel=auto boot option so that more memory is reserved for Kdump. For example, set the kernel boot parameter to crashkernel=512M .

  • Set the Kdump destination to a network location (NFS or SSH).

(Bug ID 29840266)

4.7.4 Limitations of the LVM dm-writecache caching method

The new LVM dm-writecache caching method has certain limitations that do not exist with the dm-cache method, including the following:

  • Cannot attach or detach dm-writecache when a logical volume is active.

  • Cannot take a snapshot of a logical volume when the logical volume is using dm-writecache .

  • Must use a dm-writecache block size that matches the existing file system block size when attaching dm-writecache to an inactive logical volume.

  • Cannot resize a logical volume when dm-writecache is attached to the volume.

  • Cannot use pvmove commands on devices that are used with dm-writecache .

  • Cannot use logical volumes with dm-writecache when using thin pools or the virtual data optimizer (VDO).

For more information about the dm-writecache caching method, see the the Section 3.6, “File Systems and Storage” features section of these release notes. See also the lvmcache(7) manual page.

4.8 Networking Issues

The following are networking issues in Oracle Linux 8 Update 2.

4.8.1 tracepath6 does not parse destination IPv6 address correctly

When running the tracepath6 command in Oracle Linux 8 Update 2, the command fails to correctly parse the destination IPv6 address. As a result, the tool traces a route to the wrong host.

The workaround for this issue is to use another tool with similar capability to tracepath6 .

(Bug ID 29540588)

4.8.2 Failure to insert ip_tables module

The ip_tables module fails to insert with an 'Operation not permitted' error. This issue, which is currently under investigation, can occur if SELinux is in enforcing mode.

A workaround for this issue is to set SELinux to permissive mode, which you can do temporarily by running the setenforce 0 command. Or, you can set SELinux to permissive mode permanently by editing the /etc/selinux/config file and then rebooting the system.

(Bug ID 29517166)

4.9 Running nohup prevents ssh command from executing

If you run the nohup command as shown in the following example on an Oracle Linux 8 Update 2 system, and then attempt to remotely connect to that system by using the ssh command, the ssh command hangs:

# /usr/bin/nohup ./myscript > nohup.out &

The workaround for this issue is to modify the nohup command as follows:

# /usr/bin/nohup ./myscript > nohup.out 2>&1 &

(Bug ID 30287091)

4.10 Restarting firewalld service results in SSH connection timeout

Restarting the firewalld service leads to an SSH connection timeout on the terminal from which the service was started. Note that other SSH terminals remain connected.

(Bug ID 29478124)

4.11 Error: "mcelog service does not support this processor"

An error indicating that the mcelog service does not support the processor can appear in the system log on systems with AMD processors, such as some Oracle Server hardware. The message might be displayed as follows:

mcelog: ERROR: AMD Processor family
23: mcelog does not support this processor.  Please use the edac_mce_amd
module instead.

The mcelog daemon is a service that is used on x86_64 platforms to log and handle hardware error messaging, but it is not required on AMD systems where the edac_mce_amd kernel module handles machine exception logging. The error should be downgraded to a warning. (Bug ID 29501190)

4.12 Podman Issues

The following are known issues for the Podman container management tool in Oracle Linux 8 Update 2.

4.12.1 Executing podman attach --latest causes panic if no containers are available

If you run the podman attach --latest command and no containers exist in your environment, a runtime error similar to the following occurs:

# podman  attach --latest
panic: runtime error: index out of range
...

Note that this error no longer occurs as soon as there are containers in the environment. Running the command when there are no containers is meaningless.

(Bug ID 29882537)

4.12.2 Requirements for using the default podman detach key sequence

The default key sequence that you use to detach a container ( CTRL+P , CTRL+Q ) requires a console that can handle detachment ( pseudo-tty ), as well as an input channel for passing control signals ( stdin ). Otherwise, you cannot create a container, attach it with the podman attach -l command, and then quit or detach the container by using the default key sequence, as documented in the podman-attach(1) manual page.

To ensure that you can use the default CTRL+P , CTRL+Q key sequence to detach a container, use either of the following methods to create a container:

  • Create a container in the background:

    # podman run --rm -t -d container-registry.oracle.com/os/oraclelinux:7 top -b

    You can then use the podman attach -l command to attach the container and the CTRL+P , CTRL+Q key sequence to detach the container.

  • Create a container interactively:

    # podman run --rm -t -i container-registry.oracle.com/os/oraclelinux:7 top -b

    The interactive method creates the container and automatically attaches it. You can then use the CTRL+P , CTRL+Q key sequence to detach the container.

    For more information, see the podman(1) and podman-attach(1) manual pages.

(Bug ID 29882852)

4.12.3 Authentication error occurs when attempting to pull an image by specifying an incorrect name

If you attempt to pull an image by running the podman pull image-name command, but you do not specify the correct or full name of the image, an authentication error occurs.

For example, the following error is displayed because oracle:latest was specified as the name of the image instead of oraclelinux:latest , which is the correct name for the image:

$ podman pull oracle:latest
Trying to pull registry.redhat.io/oracle:latest...Failed
Trying to pull quay.io/oracle:latest...Failed
Trying to pull docker.io/oracle:latest...Failed
error pulling image "oracle:latest": unable to pull oracle:latest: 3 errors
occurred:

* Error determining manifest MIME type for
docker://registry.redhat.io/oracle:latest: unable to retrieve auth token:
invalid username/password
* Error determining manifest MIME type for docker://quay.io/oracle:latest:
Error reading manifest latest in quay.io/oracle: error parsing HTTP 404
response body: invalid character '<' looking for beginning of value:
"<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\">\n<title>404 Not
Found</title>\n<h1>Not Found</h1>\n<p>The requested URL was not found on the
server.  If you entered the URL manually please check your spelling and try
again.</p>\n"
* Error determining manifest MIME type for docker://oracle:latest: Error
reading manifest latest in docker.io/library/oracle: errors:
denied: requested access to the resource is denied
unauthorized: authentication required

To prevent this error from occurring, always specify the correct image name with the podman pull command.

(Bug ID 29894231)

4.12.4 Oracle Container Registry unable to service requests to search catalog

Attempts to search for an image in the Oracle Container Registry by using the podman search command fail with the following authorization error, even if you are logged into the registry:

# podman search oraclelinux
ERRO[0001] error getting search results from v2 endpoint
"container-registry.oracle.com", status code 401 (Unauthorized)
...

This issue is related to how Oracle Container Registry handles token requests for access to the "/v2/_catalog". The podman search command only requests a token for ping-level access and not for catalog access.

Currently, there is no workaround for this issue.

(Bug ID 29942671)

4.13 TLS 1.3 Not Supported for NSS in FIPS Mode

TLS 1.3 is enabled by default in Oracle Linux 8 Update 2. Applications that are built with NSS do not support connections that require TLS 1.3 in FIPS mode. To make such connections work, disable FIPS mode or use TLS 1.2.

Chapter 5 Installation and Availability

You can download a full Oracle Linux 8 Update 2 installation media image from the Oracle Software Delivery Cloud at https://edelivery.oracle.com/ . Note that a smaller boot ISO is also available to perform a network-based installation.

For convenience, the three most recent Oracle Linux installation media images, for each release, are also available from the Oracle Linux yum server at https://yum.oracle.com/oracle-linux-isos.html .

You can also install a full Oracle Linux 8 Update 2 media image for the x86_64 platform on a compute instance on Oracle Cloud Infrastructure. To access the image, you must first obtain an Oracle Cloud Infrastructure account. For more information, visit https://www.oracle.com/index.html .

The latest Oracle Linux 8 Update 2 packages are also available on the Unbreakable Linux Network (ULN) and the Oracle Linux yum server.

To obtain the latest packages from ULN and install additional software for Oracle Linux 8 Update 2, subscribe to the different channels on ULN by logging in to https://linux.oracle.com and then select the View Channels option.

To install additional software for Oracle Linux 8 Update 2 from the Oracle Linux yum server, enable the required repositories within your yum configuration. To view the Oracle Linux yum repositories that are available for Oracle Linux 8 Update 2, visit https://yum.oracle.com/ .

Note

The Oracle Linux yum server does not provide equivalent repositories for some of the channels that are available on ULN. These channels provide non-open source packages.

Oracle also makes the Oracle Linux 8 Update 2 (aarch64) release available at https://www.oracle.com/linux/downloads/linux-arm-downloads.html . See Chapter 6, Release-Specific Information for Oracle Linux 8 Update 2 (aarch64) for more information.

5.1 Installing Oracle-Supported RDMA Packages

Oracle Linux 8 Update 2 ships with UEK R6 as the default kernel, which is the recommended UEK release to use with Oracle Linux 8 Update 2.

Oracle also provides Remote Direct Memory Access (RDMA) packages for use with UEK R6. The RDMA feature enables direct memory access between two systems that are connected by a network. RDMA facilitates high-throughput and low-latency networking in clusters.

To use RDMA features, you must first install the Oracle-supported RDMA packages. To do so, ensure that your system is subscribed to the appropriate channels on ULN or that you have enabled the appropriate repositories on the Oracle Linux yum server.

If you are subscribed to ULN, enable the ol8_x86_64_UEKR6 , ol8_x86_64_latest , and ol8_x86_64_UEKR6_RDMA channels. Note that if your system is newly registered on ULN, it is already subscribed to the ol8_x86_64_UEKR6 and ol8_x86_64_latest channels by default. However, you must explicitly subscribe to the ol8_x86_64_UEKR6_RDMA channel prior to installing RDMA packages.

If you are using the Oracle Linux yum server, enable the ol8_UEKR6 , ol8_latest , and ol8_UEKR6_RDMA repositories. Note that if your system already uses the Oracle Linux yum server, the ol8_UEKR6 and ol8_latest repositories are enabled by default. However, you must explicitly enable the ol8_UEKR6_RDMA repository prior to installing RDMA packages.

For more information about RDMA, including any known issues, see the Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

Chapter 6 Release-Specific Information for Oracle Linux 8 Update 2 (aarch64)

The following information pertains to the Oracle Linux 8 Update 2 (aarch64) release.

Note

Some information in this chapter may also apply generally to the x86_64 platform. For general information that may apply to both the x86_64 and Arm platforms, as well as information that is specific to the x86_64 platform, refer to the previous chapters of this document.

6.1 System Requirements and Limitations (aarch64)

To determine whether your hardware is supported on the current Oracle Linux 8 release, check the Hardware Certification List at https://linux.oracle.com/hardware-certifications . Note that hardware is listed as it becomes available and is validated.

6.2 Shipped Kernel (aarch64)

The Oracle Linux 8 Update 2 (aarch64) release ships with the Unbreakable Enterprise Kernel Release 6 (UEK R6), which is the default kernel for this release. Note that the UEK R6 kernel is the only kernel that is supported for the aarch64 platform.

The UEK R6 kernel version that is shipped with Oracle Linux 8 Update 2 (aarch64) is kernel-uek-5.4.17-2011.1.2.el8uek .

The Oracle Linux release is tested as a bundle, as shipped on the installation media image. When installed from the installation media image, the minimum kernel version supported is the one included in the image. Downgrading kernel packages is not supported, unless recommended by Oracle Support.

The kernel source code for the shipped kernel is available after the initial release through a public git source code repository at https://github.com/oracle/linux-uek .

6.3 New Features (aarch64)

The following new features are specific to the 64-bit Arm (aarch64) platform. See Chapter 3, New Features and Changes for all of the new features in Oracle Linux 8 Update 2, most of which are also supported on the 64-bit Arm (aarch64) architecture.

6.4 VNC Remote Console Available as Technology Preview on 64-bit Arm Platform

In this update, the Virtual Network Computing (VNC) remote console is available as a Technology Preview only on the 64-bit Arm platform. The remaining components of the graphics stack are unverified on this platform.

6.5 Known Issues (aarch64)

The following are known issues for the Oracle Linux 8 Update 2 (aarch64) release. See Chapter 4, Known Issues for information about known issues on the x86_64 platform, some of which might also apply to the Arm platform, as noted.

For more information about additional issues that may exist for UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

6.5.1 Cannot install Oracle Linux 8 Update 2 (aarch64) on a host that has a disk with a Btrfs partition

For both GUI-based and text-based installations of Oracle Linux 8 Update 2 on the Arm platform, the following error is produced at the start of the installation:

** (anaconda:2843): CRITICAL **: 09:49:18.542: The function
'bd_btrfs_list_subvolumes' called, but not implemented!

This error prevents you from proceeding with the installation.

To work around this issue, before the installation, remove (format) all of the Btrfs partitions from all of the disks on the host that you are planning to install Oracle Linux 8 Update 2.

Note that this issue does not occur on the x86_64 platform.

(Bug ID 31160993)

6.5.2 bcache error on UEK R6 during subsequent attempt to register cache device

An attempt to subsequently register a cache set after removing it fails with the following error:

echo "CACHE_DEV" > /sys/fs/bcache/register
echo: write error: Invalid argument
In dmesg we can see following error message: bcache: register_bcache() error
/dev/CACHE_DEV: Not a bcache superblock

This issue is related to 64KB page size ( CONFIG_ARM64_64K_PAGES=y ), which bcache currently does not support.

Because the superblock for the cache device becomes corrupted during this process, it is not possible to re-register the device.

The workaround for this issue is to reinstall the bcache-tools package and then create a new bcache configuration.

An alternative workaround is to avoid using a bcache configuration on Oracle Linux 8 Update 2 (aarch64).

Note that this issue does not occur on the x86_64 platform.

(Bug ID 30210051)

6.5.3 Kdump sometimes fails on ThunderX2 and X-Gene 3 platforms

System hangs might occur during a crash kernel boot on ThunderX2 and X-Gene 3 platforms that are running Oracle Linux 8 Update 2 (aarch64). This issue has been observed at different stages of the boot process. Consequently, Kdump might not work as expected on this hardware.

(Bug IDs 30339519, 30339571)

6.6 Installation and Availability (aarch64)

The following installation and availability information applies to installing Oracle Linux 8 Update 2 on the 64-bit Arm platform. For general installation and availability information, as well as information that applies specifically to the x86_64 platform, see Chapter 5, Installation and Availability .

Oracle Linux 8 Update 2 is made available as an ISO image ( OracleLinux-R8-U2-Server-aarch64-dvd.iso ), which can be used for a standard installation on generic 64-bit Armv8 hardware. This ISO has been tested on Arm hardware and is engineered for use with Ampere ™ eMAG ™-based EVK platform and the Cavium ThunderX2® processor. For the latest hardware that is validated for Oracle Linux 8 Update 2 (aarch64), refer to the Hardware Certification List at https://linux.oracle.com/hardware-certifications . Note that hardware is listed as it becomes available.

The ISO image can be loaded from local media, such as DVD-ROM or USB flash drive; or, you can perform a network-based kickstart installation by using PXE. If you perform a network-based installation and you want to access the graphical interface for the installer, you must change the kernel boot parameters to enable VNC. For example, to enable VNC, set the inst.vnc boot option, and then set the network address to ip=eth0:dhcp at boot.

The Oracle Linux 8 Update 2 (aarch64) ISO image is also available from the Oracle Software Delivery Cloud at https://edelivery.oracle.com/ .

The latest Oracle Linux 8 Update 2 (aarch64) packages are available from the Unbreakable Linux Network (ULN) and the Oracle Linux yum server. To explore the channels that are available on ULN, log into https://linux.oracle.com/ and view the Channels option. You can obtain the latest Oracle Linux 8 (aarch64) packages from the Oracle Linux yum server at https://yum.oracle.com/ .

Note

The Oracle Linux yum server does not provide equivalent repositories for some of the channels that are available on ULN. These channels provide non-open source packages.

The default boot kernel for fresh installations of Oracle Linux 8 (aarch64) is Unbreakable Enterprise Kernel Release 6 (UEK R6). Note that UEK R6 is the only supported kernel for the aarch64 platform in this release. For more information, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .

Appendix A Package Changes from the Upstream Release

The following sections list the changes to binary and source packages from the upstream release.

A.1 Changes to Binary Packages

This section contains information about the removed, modified, and new binary packages in this release. For information about the source package changes, see Section A.2, “Changes to Source Packages” .

A.1.1 Added Binary Packages for BaseOS by Oracle

The following binary packages have been added to the BaseOS by Oracle:

  • bcache-tools

  • btrfs-progs

  • dtrace

  • dtrace-devel

  • dtrace-testsuite

  • kernel-uek

  • kernel-uek-debug

  • kernel-uek-debug-devel

  • kernel-uek-devel

  • kernel-uek-doc

  • ocfs2-tools

  • oracle-backgrounds

  • oraclelinux-release

  • oraclelinux-release-el8

  • oracle-logos

  • oracle-logos-httpd

  • oracle-logos-ipa

  • shim-ia32

  • shim-x64

A.1.2 Added Binary Packages for AppStream by Oracle

The following binary packages have been added to AppStream by Oracle:

  • libblockdev-btrfs

A.1.3 Modified BaseOS Binary Packages

The following binary packages from the BaseOS upstream release have been modified:

  • autofs

  • binutils

  • boom-boot

  • boom-boot-conf

  • boom-boot-grub2

  • bpftool

  • chrony

  • dnf-plugins-core

  • dracut

  • dracut-caps

  • dracut-config-generic

  • dracut-config-rescue

  • dracut-live

  • dracut-network

  • dracut-squash

  • dracut-tools

  • efibootmgr

  • efi-rpm-macros

  • firewalld

  • fuse

  • fwupd

  • fwupdate

  • glibc

  • glibc-all-langpacks

  • glibc-common

  • glibc-devel

  • glibc-headers

  • glibc-langpack-aa

  • glibc-langpack-af

  • glibc-langpack-agr

  • glibc-langpack-ak

  • glibc-langpack-am

  • glibc-langpack-an

  • glibc-langpack-anp

  • glibc-langpack-ar

  • glibc-langpack-as

  • glibc-langpack-ast

  • glibc-langpack-ayc

  • glibc-langpack-az

  • glibc-langpack-be

  • glibc-langpack-bem

  • glibc-langpack-ber

  • glibc-langpack-bg

  • glibc-langpack-bhb

  • glibc-langpack-bho

  • glibc-langpack-bi

  • glibc-langpack-bn

  • glibc-langpack-bo

  • glibc-langpack-br

  • glibc-langpack-brx

  • glibc-langpack-bs

  • glibc-langpack-byn

  • glibc-langpack-ca

  • glibc-langpack-ce

  • glibc-langpack-chr

  • glibc-langpack-cmn

  • glibc-langpack-crh

  • glibc-langpack-cs

  • glibc-langpack-csb

  • glibc-langpack-cv

  • glibc-langpack-cy

  • glibc-langpack-da

  • glibc-langpack-de

  • glibc-langpack-doi

  • glibc-langpack-dsb

  • glibc-langpack-dv

  • glibc-langpack-dz

  • glibc-langpack-el

  • glibc-langpack-en

  • glibc-langpack-eo

  • glibc-langpack-es

  • glibc-langpack-et

  • glibc-langpack-eu

  • glibc-langpack-fa

  • glibc-langpack-ff

  • glibc-langpack-fi

  • glibc-langpack-fil

  • glibc-langpack-fo

  • glibc-langpack-fr

  • glibc-langpack-fur

  • glibc-langpack-fy

  • glibc-langpack-ga

  • glibc-langpack-gd

  • glibc-langpack-gez

  • glibc-langpack-gl

  • glibc-langpack-gu

  • glibc-langpack-gv

  • glibc-langpack-ha

  • glibc-langpack-hak

  • glibc-langpack-he

  • glibc-langpack-hi

  • glibc-langpack-hif

  • glibc-langpack-hne

  • glibc-langpack-hr

  • glibc-langpack-hsb

  • glibc-langpack-ht

  • glibc-langpack-hu

  • glibc-langpack-hy

  • glibc-langpack-ia

  • glibc-langpack-id

  • glibc-langpack-ig

  • glibc-langpack-ik

  • glibc-langpack-is

  • glibc-langpack-it

  • glibc-langpack-iu

  • glibc-langpack-ja

  • glibc-langpack-ka

  • glibc-langpack-kab

  • glibc-langpack-kk

  • glibc-langpack-kl

  • glibc-langpack-km

  • glibc-langpack-kn

  • glibc-langpack-ko

  • glibc-langpack-kok

  • glibc-langpack-ks

  • glibc-langpack-ku

  • glibc-langpack-kw

  • glibc-langpack-ky

  • glibc-langpack-lb

  • glibc-langpack-lg

  • glibc-langpack-li

  • glibc-langpack-lij

  • glibc-langpack-ln

  • glibc-langpack-lo

  • glibc-langpack-lt

  • glibc-langpack-lv

  • glibc-langpack-lzh

  • glibc-langpack-mag

  • glibc-langpack-mai

  • glibc-langpack-mfe

  • glibc-langpack-mg

  • glibc-langpack-mhr

  • glibc-langpack-mi

  • glibc-langpack-miq

  • glibc-langpack-mjw

  • glibc-langpack-mk

  • glibc-langpack-ml

  • glibc-langpack-mn

  • glibc-langpack-mni

  • glibc-langpack-mr

  • glibc-langpack-ms

  • glibc-langpack-mt

  • glibc-langpack-my

  • glibc-langpack-nan

  • glibc-langpack-nb

  • glibc-langpack-nds

  • glibc-langpack-ne

  • glibc-langpack-nhn

  • glibc-langpack-niu

  • glibc-langpack-nl

  • glibc-langpack-nn

  • glibc-langpack-nr

  • glibc-langpack-nso

  • glibc-langpack-oc

  • glibc-langpack-om

  • glibc-langpack-or

  • glibc-langpack-os

  • glibc-langpack-pa

  • glibc-langpack-pap

  • glibc-langpack-pl

  • glibc-langpack-ps

  • glibc-langpack-pt

  • glibc-langpack-quz

  • glibc-langpack-raj

  • glibc-langpack-ro

  • glibc-langpack-ru

  • glibc-langpack-rw

  • glibc-langpack-sa

  • glibc-langpack-sah

  • glibc-langpack-sat

  • glibc-langpack-sc

  • glibc-langpack-sd

  • glibc-langpack-se

  • glibc-langpack-sgs

  • glibc-langpack-shn

  • glibc-langpack-shs

  • glibc-langpack-si

  • glibc-langpack-sid

  • glibc-langpack-sk

  • glibc-langpack-sl

  • glibc-langpack-sm

  • glibc-langpack-so

  • glibc-langpack-sq

  • glibc-langpack-sr

  • glibc-langpack-ss

  • glibc-langpack-st

  • glibc-langpack-sv

  • glibc-langpack-sw

  • glibc-langpack-szl

  • glibc-langpack-ta

  • glibc-langpack-tcy

  • glibc-langpack-te

  • glibc-langpack-tg

  • glibc-langpack-th

  • glibc-langpack-the

  • glibc-langpack-ti

  • glibc-langpack-tig

  • glibc-langpack-tk

  • glibc-langpack-tl

  • glibc-langpack-tn

  • glibc-langpack-to

  • glibc-langpack-tpi

  • glibc-langpack-tr

  • glibc-langpack-ts

  • glibc-langpack-tt

  • glibc-langpack-ug

  • glibc-langpack-uk

  • glibc-langpack-unm

  • glibc-langpack-ur

  • glibc-langpack-uz

  • glibc-langpack-ve

  • glibc-langpack-vi

  • glibc-langpack-wa

  • glibc-langpack-wae

  • glibc-langpack-wal

  • glibc-langpack-wo

  • glibc-langpack-xh

  • glibc-langpack-yi

  • glibc-langpack-yo

  • glibc-langpack-yue

  • glibc-langpack-yuw

  • glibc-langpack-zh

  • glibc-langpack-zu

  • glibc-locale-source

  • glibc-minimal-langpack

  • gpgme

  • grub2-common

  • grub2-efi-aa64-modules

  • grub2-efi-ia32

  • grub2-efi-ia32-cdboot

  • grub2-efi-ia32-modules

  • grub2-efi-x64

  • grub2-efi-x64-cdboot

  • grub2-efi-x64-modules

  • grub2-pc

  • grub2-pc-modules

  • grub2-ppc64le-modules

  • grub2-tools

  • grub2-tools-efi

  • grub2-tools-extra

  • grub2-tools-minimal

  • grubby

  • iproute

  • iproute-tc

  • iscsi-initiator-utils

  • iscsi-initiator-utils-iscsiuio

  • kernel

  • kernel-abi-whitelists

  • kernel-core

  • kernel-cross-headers

  • kernel-debug

  • kernel-debug-core

  • kernel-debug-devel

  • kernel-debug-modules

  • kernel-debug-modules-extra

  • kernel-devel

  • kernel-doc

  • kernel-headers

  • kernel-modules

  • kernel-modules-extra

  • kernel-tools

  • kernel-tools-libs

  • kexec-tools

  • kmod

  • kmod-kvdo

  • kmod-libs

  • ksc

  • libasan

  • libatomic

  • libatomic-static

  • libdnf

  • libgcc

  • libgfortran

  • libgomp

  • libgomp-offload-nvptx

  • libipa_hbac

  • libitm

  • libkcapi

  • libmicrohttpd

  • libnsl

  • libquadmath

  • libreport

  • libsss_autofs

  • libsss_certmap

  • libsss_idmap

  • libsss_nss_idmap

  • libsss_simpleifp

  • libsss_sudo

  • libstdc++

  • libtsan

  • libubsan

  • libxml2

  • libxslt

  • linux-firmware

  • mcelog

  • mdadm

  • mksh

  • mozjs52

  • nscd

  • nss_db

  • opa-address-resolution

  • opa-basic-tools

  • opa-fastfabric

  • opa-ff

  • opa-fm

  • opa-libopamgt

  • OpenIPMI

  • openssl

  • openssl-devel

  • openssl-libs

  • openssl-perl

  • oraclelinux-release

  • oraclelinux-release-el8

  • oracle-logos

  • os-prober

  • parted

  • perf

  • platform-python

  • policycoreutils

  • policycoreutils-dbus

  • policycoreutils-devel

  • policycoreutils-newrole

  • policycoreutils-python-utils

  • policycoreutils-restorecond

  • polkit

  • python3-boom

  • python3-dnf-plugins-core

  • python3-dnf-plugin-versionlock

  • python3-hawkey

  • python3-iscsi-initiator-utils

  • python3-kmod

  • python3-libdnf

  • python3-libipa_hbac

  • python3-libs

  • python3-libsss_nss_idmap

  • python3-perf

  • python3-policycoreutils

  • python3-sss

  • python3-sssdconfig

  • python3-sss-murmur

  • python3-test

  • python-configshell

  • python-rtslib

  • python-urllib3

  • redhat-indexhtml

  • redhat-release

  • redhat-release-eula

  • sanlock-lib

  • selinux-policy

  • selinux-policy-devel

  • selinux-policy-doc

  • selinux-policy-minimum

  • selinux-policy-mls

  • selinux-policy-sandbox

  • selinux-policy-targeted

  • shim-ia32

  • shim-x64

  • sos

  • sos-audit

  • sssd

  • sssd-ad

  • sssd-client

  • sssd-common

  • sssd-common-pac

  • sssd-dbus

  • sssd-ipa

  • sssd-kcm

  • sssd-krb5

  • sssd-krb5-common

  • sssd-ldap

  • sssd-libwbclient

  • sssd-nfs-idmap

  • sssd-polkit-rules

  • sssd-proxy

  • sssd-tools

  • sssd-winbind-idmap

  • stunnel

  • sudo

  • systemd

  • systemd-container

  • systemd-devel

  • systemd-journal-remote

  • systemd-libs

  • systemd-pam

  • systemd-tests

  • systemd-udev

  • tuned

  • tuned-profiles-atomic

  • tuned-profiles-compat

  • tuned-profiles-cpu-partitioning

  • tuned-profiles-mssql

  • tuned-profiles-oracle

  • vim-minimal

  • xfsprogs

  • xfsprogs-devel

A.1.4 Modified Binary Packages for CodeReady Linux Builder by Oracle

The following binary packages to CodeReady Linux Builder by Oracle have been modified:

  • crash

  • cups-filters-devel

  • dnf-plugin-spacewalk

  • gcc-plugin-devel

  • glibc-benchtests

  • glibc-nss-devel

  • glibc-static

  • gpgme

  • iproute

  • kernel-tools-libs-devel

  • kmod-devel

  • libmicrohttpd-devel

  • libmicrohttpd-doc

  • libreoffice-sdk

  • libreoffice-sdk-doc

  • libstdc++-static

  • libvirt

  • libvirt-admin

  • libvirt-bash-completion

  • libvirt-client

  • libvirt-daemon

  • libvirt-daemon-config-network

  • libvirt-daemon-config-nwfilter

  • libvirt-daemon-driver-interface

  • libvirt-daemon-driver-network

  • libvirt-daemon-driver-nodedev

  • libvirt-daemon-driver-nwfilter

  • libvirt-daemon-driver-secret

  • libvirt-daemon-driver-storage

  • libvirt-daemon-driver-storage-core

  • libvirt-daemon-driver-storage-disk

  • libvirt-daemon-driver-storage-gluster

  • libvirt-daemon-driver-storage-iscsi

  • libvirt-daemon-driver-storage-logical

  • libvirt-daemon-driver-storage-mpath

  • libvirt-daemon-driver-storage-rbd

  • libvirt-daemon-driver-storage-scsi

  • libvirt-devel

  • libvirt-docs

  • libvirt-libs

  • libvirt-nss

  • mingw32-binutils

  • mingw32-cpp

  • mingw32-gcc

  • mingw32-gcc-c++

  • mingw32-openssl

  • mingw64-binutils

  • mingw64-cpp

  • mingw64-gcc

  • mingw64-gcc-c++

  • mingw64-openssl

  • mingw-binutils-generic

  • mozjs52

  • mozjs60

  • nss_hesiod

  • nvml

  • ocaml-libguestfs

  • ocaml-libguestfs-devel

  • OpenIPMI

  • openscap-engine-sce-devel

  • PackageKit-glib-devel

  • parted

  • python3-dnf-plugin-spacewalk

  • python3-rhn-client-tools

  • python3-rhnlib

  • qemu-kvm

  • rhn-client-tools

  • rhnlib

  • sanlock-devel

  • shim-unsigned-x64

  • sssd

  • tog-pegasus

A.1.5 Modified AppStream Binary Packages

The following binary packages from the AppStream upstream release have been modified:

  • abrt

  • abrt-java-connector

  • adwaita-gtk2-theme

  • anaconda

  • anaconda-core

  • anaconda-dracut

  • anaconda-gui

  • anaconda-install-env-deps

  • anaconda-tui

  • anaconda-user-help

  • anaconda-widgets

  • ansible-freeipa

  • aspnetcore-runtime

  • aspnetcore-targeting-pack

  • autocorr-af

  • autocorr-bg

  • autocorr-ca

  • autocorr-cs

  • autocorr-da

  • autocorr-de

  • autocorr-en

  • autocorr-es

  • autocorr-fa

  • autocorr-fi

  • autocorr-fr

  • autocorr-ga

  • autocorr-hr

  • autocorr-hu

  • autocorr-is

  • autocorr-it

  • autocorr-ja

  • autocorr-ko

  • autocorr-lb

  • autocorr-lt

  • autocorr-mn

  • autocorr-nl

  • autocorr-pl

  • autocorr-pt

  • autocorr-ro

  • autocorr-ru

  • autocorr-sk

  • autocorr-sl

  • autocorr-sr

  • autocorr-sv

  • autocorr-tr

  • autocorr-vi

  • autocorr-zh

  • binutils-devel

  • blivet-data

  • buildah

  • buildah-tests

  • clang

  • clang-analyzer

  • clang-devel

  • clang-libs

  • clang-tools-extra

  • cloud-init

  • compat-libgfortran-48

  • compat-libpthread-nonshared

  • composer-cli

  • containernetworking-plugins

  • containers-common

  • cpp

  • crash

  • cups-filters

  • cups-filters-libs

  • delve

  • dnf-plugin-spacewalk

  • dotnet

  • dotnet-apphost-pack

  • dotnet-host

  • dotnet-hostfxr

  • dotnet-runtime

  • dotnet-sdk

  • dotnet-targeting-pack

  • dotnet-templates

  • efi-rpm-macros

  • firefox

  • firewalld

  • gcc

  • gcc-c++

  • gcc-gdb-plugin

  • gcc-gfortran

  • gcc-offload-nvptx

  • gcc-toolset-9-gdb

  • gcc-toolset-9-gdb-doc

  • gcc-toolset-9-gdb-gdbserver

  • gdb

  • gdb-doc

  • gdb-gdbserver

  • gdb-headless

  • git-clang-format

  • glibc-utils

  • gnome-abrt

  • gnome-initial-setup

  • gnome-themes-standard

  • golang

  • gpgme

  • grafana-pcp

  • httpd

  • httpd-devel

  • httpd-filesystem

  • httpd-manual

  • httpd-tools

  • icedtea-web

  • icedtea-web-javadoc

  • initial-setup

  • ipa-client

  • ipa-client-common

  • ipa-common

  • ipa-python-compat

  • ipa-server

  • ipa-server-common

  • ipa-server-dns

  • ipa-server-trust-ad

  • kernel-rpm-macros

  • ksh

  • libguestfs

  • libguestfs-bash-completion

  • libguestfs-benchmarking

  • libguestfs-devel

  • libguestfs-gfs2

  • libguestfs-gobject

  • libguestfs-gobject-devel

  • libguestfs-inspect-icons

  • libguestfs-java

  • libguestfs-java-devel

  • libguestfs-javadoc

  • libguestfs-man-pages-ja

  • libguestfs-man-pages-uk

  • libguestfs-rescue

  • libguestfs-rsync

  • libguestfs-tools

  • libguestfs-tools-c

  • libguestfs-xfs

  • libitm-devel

  • libquadmath-devel

  • libreoffice-base

  • libreoffice-calc

  • libreoffice-core

  • libreoffice-data

  • libreoffice-draw

  • libreoffice-emailmerge

  • libreoffice-filters

  • libreoffice-gdb-debug-support

  • libreoffice-graphicfilter

  • libreoffice-gtk2

  • libreoffice-gtk3

  • libreoffice-help-ar

  • libreoffice-help-bg

  • libreoffice-help-bn

  • libreoffice-help-ca

  • libreoffice-help-cs

  • libreoffice-help-da

  • libreoffice-help-de

  • libreoffice-help-dz

  • libreoffice-help-el

  • libreoffice-help-en

  • libreoffice-help-es

  • libreoffice-help-et

  • libreoffice-help-eu

  • libreoffice-help-fi

  • libreoffice-help-fr

  • libreoffice-help-gl

  • libreoffice-help-gu

  • libreoffice-help-he

  • libreoffice-help-hi

  • libreoffice-help-hr

  • libreoffice-help-hu

  • libreoffice-help-id

  • libreoffice-help-it

  • libreoffice-help-ja

  • libreoffice-help-ko

  • libreoffice-help-lt

  • libreoffice-help-lv

  • libreoffice-help-nb

  • libreoffice-help-nl

  • libreoffice-help-nn

  • libreoffice-help-pl

  • libreoffice-help-pt-BR

  • libreoffice-help-pt-PT

  • libreoffice-help-ro

  • libreoffice-help-ru

  • libreoffice-help-si

  • libreoffice-help-sk

  • libreoffice-help-sl

  • libreoffice-help-sv

  • libreoffice-help-ta

  • libreoffice-help-tr

  • libreoffice-help-uk

  • libreoffice-help-zh-Hans

  • libreoffice-help-zh-Hant

  • libreoffice-impress

  • libreofficekit

  • libreoffice-langpack-af

  • libreoffice-langpack-ar

  • libreoffice-langpack-as

  • libreoffice-langpack-bg

  • libreoffice-langpack-bn

  • libreoffice-langpack-br

  • libreoffice-langpack-ca

  • libreoffice-langpack-cs

  • libreoffice-langpack-cy

  • libreoffice-langpack-da

  • libreoffice-langpack-de

  • libreoffice-langpack-dz

  • libreoffice-langpack-el

  • libreoffice-langpack-en

  • libreoffice-langpack-es

  • libreoffice-langpack-et

  • libreoffice-langpack-eu

  • libreoffice-langpack-fa

  • libreoffice-langpack-fi

  • libreoffice-langpack-fr

  • libreoffice-langpack-ga

  • libreoffice-langpack-gl

  • libreoffice-langpack-gu

  • libreoffice-langpack-he

  • libreoffice-langpack-hi

  • libreoffice-langpack-hr

  • libreoffice-langpack-hu

  • libreoffice-langpack-id

  • libreoffice-langpack-it

  • libreoffice-langpack-ja

  • libreoffice-langpack-kk

  • libreoffice-langpack-kn

  • libreoffice-langpack-ko

  • libreoffice-langpack-lt

  • libreoffice-langpack-lv

  • libreoffice-langpack-mai

  • libreoffice-langpack-ml

  • libreoffice-langpack-mr

  • libreoffice-langpack-nb

  • libreoffice-langpack-nl

  • libreoffice-langpack-nn

  • libreoffice-langpack-nr

  • libreoffice-langpack-nso

  • libreoffice-langpack-or

  • libreoffice-langpack-pa

  • libreoffice-langpack-pl

  • libreoffice-langpack-pt-BR

  • libreoffice-langpack-pt-PT

  • libreoffice-langpack-ro

  • libreoffice-langpack-ru

  • libreoffice-langpack-si

  • libreoffice-langpack-sk

  • libreoffice-langpack-sl

  • libreoffice-langpack-sr

  • libreoffice-langpack-ss

  • libreoffice-langpack-st

  • libreoffice-langpack-sv

  • libreoffice-langpack-ta

  • libreoffice-langpack-te

  • libreoffice-langpack-th

  • libreoffice-langpack-tn

  • libreoffice-langpack-tr

  • libreoffice-langpack-ts

  • libreoffice-langpack-uk

  • libreoffice-langpack-ve

  • libreoffice-langpack-xh

  • libreoffice-langpack-zh-Hans

  • libreoffice-langpack-zh-Hant

  • libreoffice-langpack-zu

  • libreoffice-math

  • libreoffice-ogltrans

  • libreoffice-opensymbol-fonts

  • libreoffice-pdfimport

  • libreoffice-pyuno

  • libreoffice-ure

  • libreoffice-ure-common

  • libreoffice-wiki-publisher

  • libreoffice-writer

  • libreoffice-x11

  • libreoffice-xsltfilter

  • libreport

  • libreswan

  • libstdc++-devel

  • libstdc++-docs

  • libvirt

  • libvirt-admin

  • libvirt-bash-completion

  • libvirt-client

  • libvirt-daemon

  • libvirt-daemon-config-network

  • libvirt-daemon-config-nwfilter

  • libvirt-daemon-driver-interface

  • libvirt-daemon-driver-network

  • libvirt-daemon-driver-nodedev

  • libvirt-daemon-driver-nwfilter

  • libvirt-daemon-driver-qemu

  • libvirt-daemon-driver-secret

  • libvirt-daemon-driver-storage

  • libvirt-daemon-driver-storage-core

  • libvirt-daemon-driver-storage-disk

  • libvirt-daemon-driver-storage-gluster

  • libvirt-daemon-driver-storage-iscsi

  • libvirt-daemon-driver-storage-logical

  • libvirt-daemon-driver-storage-mpath

  • libvirt-daemon-driver-storage-rbd

  • libvirt-daemon-driver-storage-scsi

  • libvirt-daemon-kvm

  • libvirt-devel

  • libvirt-docs

  • libvirt-libs

  • libvirt-lock-sanlock

  • libvirt-nss

  • libxml2

  • libxslt

  • lld

  • llvm

  • lorax

  • lorax-composer

  • lorax-lmc-novirt

  • lorax-lmc-virt

  • lorax-templates-generic

  • lorax-templates-rhel

  • lua-guestfs

  • mecab-ipadic

  • mod_ldap

  • mod_md

  • mod_proxy_html

  • mod_session

  • mod_ssl

  • mozjs60

  • netstandard-targeting-pack

  • NetworkManager-libreswan

  • NetworkManager-libreswan-gnome

  • nginx

  • nginx-all-modules

  • nginx-filesystem

  • nginx-mod-http-image-filter

  • nginx-mod-http-perl

  • nginx-mod-http-xslt-filter

  • nginx-mod-mail

  • nginx-mod-stream

  • nmstate

  • nvml

  • openchange

  • openscap

  • openscap-devel

  • openscap-engine-sce

  • openscap-python3

  • openscap-scanner

  • openscap-utils

  • open-vm-tools

  • open-vm-tools-desktop

  • osinfo-db

  • PackageKit

  • PackageKit-command-not-found

  • PackageKit-cron

  • PackageKit-glib

  • PackageKit-gstreamer-plugin

  • PackageKit-gtk3-module

  • perl-Sys-Guestfs

  • perl-XML-Parser

  • pesign

  • pki-core

  • platform-python

  • platform-python-debug

  • platform-python-devel

  • plymouth

  • podman

  • podman-docker

  • podman-manpages

  • podman-remote

  • podman-tests

  • policycoreutils-gui

  • policycoreutils-sandbox

  • pykickstart

  • pyparted

  • python2

  • python2-debug

  • python2-devel

  • python2-libs

  • python2-test

  • python2-tkinter

  • python2-tools

  • python3-blivet

  • python3-clang

  • python3-idle

  • python3-ipaclient

  • python3-ipalib

  • python3-ipaserver

  • python3-kickstart

  • python3-libguestfs

  • python3-libnmstate

  • python3-spacewalk-backend-libs

  • python3-systemd

  • python3-test

  • python3-tkinter

  • python-blivet

  • python-urllib3

  • qemu-kvm

  • rear

  • redhat-lsb

  • redhat-rpm-config

  • rhn-client-tools

  • rhn-custom-info

  • rhnlib

  • rhnpush

  • rhnsd

  • rpmdevtools

  • rpm-ostree

  • rpm-ostree-libs

  • ruby

  • ruby-devel

  • ruby-doc

  • rubygem-abrt

  • ruby-libguestfs

  • ruby-libs

  • sanlk-reset

  • sanlock

  • scap-security-guide

  • scap-security-guide-doc

  • scap-workbench

  • setroubleshoot

  • setroubleshoot-plugins

  • setroubleshoot-server

  • skopeo

  • skopeo-tests

  • sos-collector

  • spacewalk-abrt

  • spacewalk-usix

  • spice-streaming-agent

  • thunderbird

  • tog-pegasus

  • tuned-gtk

  • tuned-utils

  • tuned-utils-systemtap

  • vim-common

  • vim-enhanced

  • vim-filesystem

  • vim-X11

  • virt-dib

  • virt-install

  • virt-manager

  • virt-manager-common

  • virt-p2v-maker

  • virt-v2v

  • WALinuxAgent

  • wget

  • xsane

A.1.6 Removed BaseOS Binary Packages

The following binary packages from the BaseOS upstream release have been removed:

  • dnf-plugin-subscription-manager

  • grub2-ppc64le-modules

  • kpatch

  • python3-subscription-manager-rhsm

  • python3-syspurpose

  • redhat-logos

  • redhat-logos-httpd

  • redhat-release-eula

  • rhsm-icons

  • shim-ia32

  • shim-x64

  • subscription-manager

  • subscription-manager-cockpit

  • subscription-manager-plugin-ostree

  • subscription-manager-rhsm-certificates

A.1.7 Removed AppStream Binary Packages

The following binary packages from the AppStream upstream release have been removed:

  • insights-client

  • libreport-plugin-rhtsupport

  • libreport-rhel

  • libreport-rhel-anaconda-bugzilla

  • libreport-rhel-bugzilla

  • redhat-backgrounds

  • redhat-logos-ipa

  • redhat-support-lib-python

  • redhat-support-tool

  • rhsm-gtk

  • subscription-manager-initial-setup-addon

  • subscription-manager-migration

  • subscription-manager-migration-data

  • toolbox

  • virtio-win

  • virt-who

A.2 Changes to Source Packages

This section contains information about the removed, modified, and new source packages in this release. For information about the binary package changes, see Section A.1, “Changes to Binary Packages” .

A.2.1 Added Source Packages for BaseOS by Oracle

The following source packages have been added to the BaseOS by Oracle:

  • bcache-tools

  • btrfs-progs

  • dtrace

  • kernel-uek

  • ocfs2-tools

  • oraclelinux-release

  • oraclelinux-release-el8

  • oracle-logos

A.2.2 Modified BaseOS Source Packages

The following source packages from the BaseOS upstream release have been modified:

  • autofs

  • binutils

  • boom-boot

  • chrony

  • compat-libgfortran-48

  • coreutils

  • dbus

  • dracut

  • efibootmgr

  • efi-rpm-macros

  • firewalld

  • fuse

  • fwupd

  • fwupdate

  • glibc

  • gpgme

  • grub2

  • grubby

  • initial-setup

  • iproute

  • iscsi-initiator-utils

  • kernel

  • kexec-tools

  • kmod

  • kmod-kvdo

  • ksc

  • libdnf

  • libkcapi

  • libreport

  • libxml2

  • libxslt

  • linux-firmware

  • lorax-templates-rhel

  • mcelog

  • mdadm

  • mksh

  • mozjs52

  • opa-ff

  • opa-fm

  • OpenIPMI

  • openscap

  • openssl

  • oraclelinux-release

  • oraclelinux-release-el8

  • oracle-logos

  • osinfo-db

  • os-prober

  • parted

  • policycoreutils

  • polkit

  • pykickstart

  • python3

  • python-configshell

  • python-rtslib

  • python-urllib3

  • redhat-indexhtml

  • redhat-lsb

  • redhat-release

  • redhat-rpm-config

  • rpmdevtools

  • rpm-ostree

  • selinux-policy

  • sos

  • sssd

  • stunnel

  • systemd

  • tuned

A.2.3 Modified AppStream Source Packages

The following source packages from the AppStream upstream release have been modified:

  • abrt

  • abrt-java-connector

  • anaconda

  • anaconda-user-help

  • buildah

  • clang

  • cloud-init

  • compat-libgfortran-48

  • containernetworking-plugins

  • crash

  • cups-filters

  • delve

  • dnf-plugin-spacewalk

  • dotnet3.1

  • efi-rpm-macros

  • firefox

  • firewalld

  • gcc

  • gcc-toolset-9-gdb

  • gdb

  • gnome-abrt

  • gnome-initial-setup

  • gnome-themes-standard

  • golang

  • gpgme

  • grafana-pcp

  • httpd

  • icedtea-web

  • initial-setup

  • ipa

  • ksh

  • libguestfs

  • libreoffice

  • libreport

  • libreswan

  • libvirt

  • libxml2

  • libxslt

  • lld

  • llvm

  • lorax

  • lorax-templates-rhel

  • mcelog

  • mecab-ipadic

  • mozjs60

  • nginx

  • nmstate

  • nvml

  • openchange

  • openscap

  • openssl

  • open-vm-tools

  • osinfo-db

  • PackageKit

  • perl-XML-Parser

  • pesign

  • pki-core

  • plymouth

  • podman

  • pykickstart

  • pyparted

  • python2

  • python-blivet

  • python-urllib3

  • qemu-kvm

  • rear

  • redhat-lsb

  • redhat-rpm-config

  • rhn-client-tools

  • rhnlib

  • rhnpush

  • rhnsd

  • rpmdevtools

  • rpm-ostree

  • rubygem-abrt

  • sanlock

  • scap-security-guide

  • scap-workbench

  • setroubleshoot

  • setroubleshoot-plugins

  • skopeo

  • sos-collector

  • spacewalk-abrt

  • spacewalk-usix

  • spice-streaming-agent

  • thunderbird

  • tog-pegasus

  • vim

  • virt-manager

  • virt-p2v

  • WALinuxAgent

  • wget

  • xsane

A.2.4 Removed BaseOS Source Packages

The following source packages from the BaseOS upstream release have been removed:

  • dnf-plugin-subscription-manager

  • kpatch

  • libcxl

  • libica

  • libical

  • libocxl

  • librtas

  • libservicelog

  • libvpd

  • libzfcphbaapi

  • lsvpd

  • opal-prd

  • openssl-ibmca

  • powerpc-utils

  • ppc64-diag

  • python3-subscription-manager-rhsm

  • qclib

  • redhat-logos

  • redhat-logos-httpd

  • s390utils

  • servicelog

  • subscription-manager

  • subscription-manager-cockpit

  • subscription-manager-plugin-container

  • subscription-manager-plugin-ostree

  • subscription-manager-rhsm-certificates

A.2.5 Removed AppStream Source Packages

The following source packages from the AppStream upstream release have been removed:

  • insights-client

  • libical-devel

  • redhat-logos-ipa

  • redhat-support-lib-python

  • redhat-support-tool

  • SLOF

  • subscription-manager-initial-setup-addon

  • subscription-manager-migration

  • subscription-manager-migration-data

  • toolbox

  • virtio-win

  • virt-who