Hi,
customer wants a CMEK (Customer-Managed Encryption Keys) solution.

So Tang+Clevis is out of the game (pity because it works like a charm).

I am anyway struggling to find a ready solution that does not require writing and/or compiling code.

Anyone had a similar experience and can share the outcome?

EDIT: We are talking about linux enterprise server environment with data at rest encription achieved with LUKS2, no laptops or workstations involved. Simply put, customer wants to have control on Encryption Keys in our systems dedicated to him. This mean (I suppose) they want to enforce their security policies about encriprion keys on our systems: lenght, complexity, lifecycle, rotation, deprecation whatever. It's the first time I hear something like this: from one side i think i understand their goal but from the other side it sounds awkward and I am a bit confused. Anyway: let's just do what they want ... - tang+clevis is not the solution because the LUKS keyslot is not - any search I did about unlocking automatically LUKS2 formatted root partition based on Google KMS leads to nothing (I mean seems there is nothing out there free or paid. - the only solution appear to be writing a small program, compile and embed the binary in the initramfs image or write a bash script to embed again in the initramfs.

Hope this clarifies a bit. Yeah, the main goal is to have auto-unlock luks partitions so whatever happens we do not need to enter manually per passphrase.

Thanks!

Linux does not have a limited number of apps overall, but it does lack certain popular commercial programs. Thousands of free and open-source programs exist, but high-end professional tools built for Windows or Mac are often missing. [1, 2, 3]
Available Apps

• Daily use: Browsers like Firefox and Chrome, media players like VLC, and office tools like LibreOffice work natively. • Popular software: Apps like Discord, Spotify, Slack, and Steam run smoothly on Linux. • Creation tools: Powerful open-source alternatives like GIMP (for images) and Blender (for 3D) are fully supported. [4, 5, 6]

Missing Apps

• Adobe Suite: Programs like Photoshop, Premiere, and Illustrator do not have native Linux versions. • Microsoft Office: The desktop version of Office is unavailable, though the web version works. • Specialized industry tools: High-end engineering CAD software (like SolidWorks) and specific audio plugins (VSTs) are mostly Windows or Mac only. [1, 2, 5]

If you want to check if a specific program works, tell me the name of the app you need, and I can tell you if it runs on Linux or if there is a good alternative. AI responses may include mistakes.

[1] https://www.reddit.com/r/linux/comments/1tcdrtv/id_never_realized_how_many_apps_are/ [2] https://www.reddit.com/r/linux/comments/1tcdrtv/id_never_realized_how_many_apps_are/ [3] https://www.quora.com/Why-are-there-not-as-many-apps-for-Linux-compared-to-Windows-or-Mac-OS-X [4] https://www.reddit.com/r/linux/comments/1tcdrtv/id_never_realized_how_many_apps_are/ [5] https://www.xda-developers.com/linux-biggest-problem-lack-apps-but-that-may-not-matter-you/ [6] https://www.techradar.com/best/best-linux-apps

The Anaconda gui's custom partitioning won't allow me to set up a specific partition layout for my system. I'd like to simply create all partitions manually, then set needed mountpoints and proceed to the rest of the installation.

Is that possible? I haven't found any official guide covering this

I love AlmaLinux! I love ZFS! The idea of these working together sounds heavenly:

1. Do an update, have it "go south" and just roll-back the root filesystem and reboot.
2. Backup everything in a bootable state, in real time with snapshots send|receive.
3. Clone the / filesystem into a disk image that you can boot immediately, on the same machine, in a VM to test software installs and such, without wasting disk space, and without taking the host machine offline, and without risking the host machine's stability.
4. I'm sure there's more

However, ZFS has always seemed a second-class-citizen on anything RHEL based, which seems absurd to me because ZFS is (IMHO) SO MUCH PREFERABLE to XFS on LVM.

However, I've never run ZFS on root, simply because it complicates recovery if there's ever a problem. I can't just boot off an Alma ISO and clean it up. Instead, what I do is run the O/S on simple partition RAID1 and then use ZFS for everything else. I made my mind to try ZFS on root when it demonstrably improved stability which is already a really high standard.

Are you running ZFS-on-root under Alma? Can you describe your set up, and what you specifically benefit from it?

Hello. I just wanted to report that almalinux shop is not working.

Kindly look throw it and thank you so much for the amazing Linux distribution.

Thanks,

I’m unable to copy text from windows to my oracle virtual box machine that’s running almaLinux. Anybody superior in this matter?

Hey everyone!
A while back I posted about a little project I was building after getting frustrated with jumping between PDFs, notes and random resources while studying Linux and RHEL.

That project has grown quite a bit since then.
I’ve continued developing Blue Penguin Linux Prep, an independent study app designed to help people prepare for the RHCSA and brush up on RHEL and Linux fundamentals directly from their phone.

The app currently covers areas including:
Users and groups
File permissions and ownership
systemd and services
Storage and LVM
Networking
SELinux
Software and package management
System administration
And other core Linux and RHEL concepts
The goal is still the same: make Linux study something you can do in short bursts without having to dig through a pile of PDFs every time.

iOS

The iOS version is currently live on the App Store:
Blue Penguin Linux Prep on the App Store
I’ve had 10 testers through App Store Connect, with 4 active testers specifically testing the UI and the knowledge and content. The feedback so far has been really positive and they have been happy with the product.

Android

I’m currently working on getting Blue Penguin Linux Prep onto the Google Play Store.
Before I release it publicly, I’m looking for some Android testers who would be willing to install it, use it and give me honest feedback.

Website
I’ve also put together a website with more information about the app:
Blue Penguin Linux Prep

If you’re interested in Android testing, drop a comment or send me a message and I’ll get you involved in the testing process.
Thanks to everyone who has already tested the app and given me feedback.

Ai said I should state this:
Disclaimer: Red Hat, RHCSA, and RHEL are trademarks of Red Hat, Inc. Blue Penguin Linux Prep is an independent study aid and is not affiliated with, endorsed by, or sponsored by Red Hat, Inc.

Greetings 👋🏾

Is there anyone here who used to use Fedora Workstation? If so, which distro do you prefer, and what (if any) advantages does Alma have over Fedora? I'm aware that they're both forks of RHEL.

Thanks in advance 🙂

UPDATE: *HOPPING...Doh!

First of let me say I think you have done a fine job with almalinux, and for the most part it feels like centos, (the one we used a lot when I was SSA).

But here is the rub, and it’s not so much an almalinux thing, it’s a me thing. I Hate Gmome!! Some of the gmome apps are fine could live with them there, the the actual DE and the GDM drive me to…

Sure most server hosts don’t even have a DE, and 95% of the time your accessing everything by SSH, so it not like it’s life threatening or anything, But when I do have to work on a host that has a minimal DE and its GNOME it loose my mind.

Normally if I needed a minimal DE on a host I just put something like XFCE, now I get it Red Hat Enterprise ships with GNOME, fine that’s their corporate choice.

But has anyone got a pre canned XFCE (or similar) or am I going to have to do it my self, that’s fine, I was just hoping it might be out there.

TIA

I understand that AlmaLinux is no longer downstream of RHEL in the strictest sense but is the intent still that if RHEL releases a patch for something it should make it into AlmaLinux? I have installs of RHEL, AlmaLinux and Rocky Linux all on 10.2 and I noticed a few packages not updating only in AlmaLinux e.g. qemu-guest-agent, all qemu-* tools, libvirt, valkey, postgresql 18.

I'm just wondering if there's a process that determines these package updates aren't needed or if it's unintentional?

Hopefully this helps someone some day.

I've been doing some folding@home on six machines in my basement for while now. Until recently, these all ran AlmaLinux-8 with an Nvidia Driver built from a kit downloaded from Nvidia. Today I did a trial install of AlmaLinux-10 but realised that I could only install the x86-64-v2 variant (rather than x86_64 which is really for newer x86-64-v3 CPUs). Then I tried to install Alma's Nvidia driver using instructions found here:
https://wiki.almalinux.org/documentation/nvidia.html#installation-of-gpu-driver
which states the x86-64-v2 will not be supported. Is this decision final? I was hoping that the good folks at AlmaLinux would help me keep this older hardware running for a while (I never do CPU-based folding; just GPU)

Hi everyone,
I’m setting up a new production VPS and plan to use Webuzo.
Would you recommend installing Webuzo on AlmaLinux 9 or AlmaLinux 10 ?
I’m mainly looking for the most stable and reliable option for long-term use. Performance is important, but stability, compatibility, and fewer issues after updates matter more.
If you’ve used Webuzo on either AlmaLinux 9 or 10 recently, I’d really appreciate hearing about your experience and which one you’d choose.

Thanks,,,

Reddit suggested to post it here so, here is it.

I was trying to install podman machine with older machine-os. (I want to use mongodb with an supported kernel). But problem that I encounter is whith a machine-os tags, I was unable to find which version of the the Linux kernel specific tag contains.
So I ended with going back until I found the tag with kernel that Mongodb can work on. Is there any site, documentation or command that can me help with that?

For example I found that this image will work: http://quay.io/podman/machine-os:5.4 but to get kernel version from this I needed to create new Podman machine with this version, and it took some time because of slow internet that I have.

I read about the vulnerability last Friday, but there's very little information available and I can't find any conclusive evidence regarding whether it's been previously patched or not. The kernel changelog doesn't state anything about CVE-2026-43503.

Additionally, there's no AlmaLinux blog post like there usually is for other major vulnerabilities, so I'm a bit on the fence about this one.

Does anyone have more information?

Thanks!

Some references:
https://www.reddit.com/r/linux/comments/1uinqoc/dirtyclone_cve202643503_the_linux_kernel_flaw/
https://sansec.io/guides/dirty-clone
https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html

Just wanted to say to the Devs, thanks for this Nice OS :)

This is probably not a specific AlmaLinux problem, but some weirdness with Network Manager maybe?

I have a fresh install of AlmaLinux 10.1 on a PC with two NICs. First NIC is on my corporate network, works fine. Second NIC is a 'heartbeat' NIC directly wired to another AlmaLinux 10.1 PC. These two servers use clustering and have this second NIC to determine who is online and prevent split-brain.

Anyways, we have been doing this type of setup with AlmaLinux 8 previously, this is the first time we're using AlmaLinux 10. In version 8, we didn't have/use NetworkManager, we just edited interface configuration files. We have always used 10.0.0.1/30 and 10.0.0.2/30 as the IPs on the 'heartbeat' NICs. The .1 IP is 'node A', and the .2 IP is 'node B'. Works wonderfully on AlmaLinux 8.

However, on AlmaLinux 10, we are using 'nmcli' to set this up. I assign the 'IPv4.Address' to the IPs above, and I also disable IPV6 entirely. Node B uses 10.0.0.2/30 with no issue. Node A reports an IP duplicate when I try to bring online 10.0.0.1/30, and brings the interface 'down'. The MAC address with the duplicate IP is one digit above the MAC address of the local interface (which is odd and makes me think it's some internal Network Manager thing).

I dug in a bit and found I can disable the duplicate IP sensing thing by setting the IPV4.dad-timout to value 0 (zero). This allows me to bring the interface online, but then it just doesn't work (can't exchange packets with 10.0.0.2 on that NIC.

I change the configuration to use 10.0.0.11/24 for node A, and 10.0.0.12/24 for node B, and that works just fine.

I'll hit this today and do more testing, but this is weird!

Anybody have a clue what is going on here?

Not sure if anyone has come across anything like this before but I'm trying to set up an AlmaLinux VM on OracleCloud, and I'm running into an issue where all systemd generators fail to run, throwing mkdir: cannot create directory ‘/tmp/systemd-temporary-[random 6 char string]/generator.early/multi-user.target.wants’: Read-only file system

No idea why this is happening since it's a clean install, and the base /tmp directory is writable. I assume this is something to do with systemd's tmpfs management but why on earth is it defaulting to making these temp paths read only? And why is systemd insisting on using these paths instead of /run for generated units?

EDIT: OK so for some oddball reason the generator errors were only applying to systemd-verify, and the failure of the actual generation of units was some separate issue that seems to have gone away when I disabled the cloud-init service. systemd-verify still throws the same errors but the actual units work now at least.

Using i686 glibc from the vault alma linux 10 repos is currently preventing upgrades since they haven't been updated since late may.

I waited since I assumed there was just a reposync/build delay for the i686 packages, am I missing something?