9.3 - HackMD

--- title: '9.3' --- # AlmaLinux 9.3 Release Notes These are the release notes for AlmaLinux OS 9.3 Stable for all supported architectures: * x86_64 * aarch64 * ppc64le * s390x Codename: Shamrock Pampas Cat Distributed kernel version: 5.14.0-362.8.1.el9_3 ## Providing Feedback and Getting Help Please report any issues you may encounter during tests on the [AlmaLinux Bug Tracker](https://bugs.almalinux.org/). Additionally, if you feel like providing feedback, talking about anything or asking any questions you might want to check out [The AlmaLinux Community Chat](https://chat.almalinux.org), [The AlmaLinux Forums](https://almalinux.discourse.group/) and [The AlmaLinux Community on Reddit](https://reddit.com/r/almalinux). ## Changelog * Updated toolchain components: * GCC 11.4.1 * Performance tools and debuggers updates: * Valgrind 3.21 * SystemTap 4.9 * elfutils 0.189 * Updated performance monitoring tools: * PCP 6.0.5 * Grafana 9.2.10 * Compiler updates: * GCC Toolset 13 * LLVM Toolset 16.0.6 * Rust Toolset 1.71.1 * Go Toolset 1.20.10 * Updated dynamic programming languages, web and database servers: * Redis 7 * Node.js 20 * Apache HTTP Server 2.4.57 * Security updates: * Keylime 7.3.0. * OpenSSH was further migrated from the less secure SHA-1 message digest. * The pcsc-lite-ccid USB Chip/Smart Card Interface Device(CCID) and Integrated Circuit Card Device (ICCD) driver was rebased to version 1.5.2. * AlmaLinux 9.3 introduces further improvements to support the Extended Master Secret (EMS) extension (RFC 7627) required by the FIPS-140-3 standard for all TLS 1.2 connections. * SEtools, the collection of graphical tools, command-line tools, and libraries for SELinux policy analysis, was rebased to version 4.4.3. * OpenSCAP was rebased to version 1.3.8. * SCAP Security Guide was rebased to version 0.1.69 including updates: * ANSSI profiles were updated to version 2.0. * Three new SCAP profiles were added for AlmaLinux 9 aligned with the CCN-STIC-610A22 Guide. You can reference the [RHEL 9.3 release notes](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/overview) for a full list of changes in this release. ## Installation instructions There are three installation ISO images available: `AlmaLinux-9.3-x86_64-boot.iso` - a single network installation CD image that downloads packages over the Internet. `AlmaLinux-9.3-x86_64-minimal.iso` - a minimal self-containing DVD image that makes possible offline installation. `AlmaLinux-9.3-x86_64-dvd.iso` - a full installation DVD image that contains mostly all AlmaLinux packages. You can select a mirror closest to your geographic area listed on the [mirrors.almalinux.org](https://mirrors.almalinux.org) website. A local mirror will be a lot quicker than using ```repo.almalinux.org``` directly. Then, download a suitable ISO image from the 9.3/isos/$arch/ directory of your source, for example: ```bash $ wget https://atl.mirrors.knownhost.com/almalinux/9.3/isos/x86_64/AlmaLinux-9.3-x86_64-boot.iso ``` Download and import the AlmaLinux public key: ```bash $ wget https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux-9 $ gpg --import RPM-GPG-KEY-AlmaLinux-9 ``` Download and verify a checksums list: ```bash $ wget https://repo.almalinux.org/almalinux/9.3/isos/x86_64/CHECKSUM # we are looking for “Good signature” $ gpg --verify CHECKSUM gpg: Signature made Sun 12 Nov 2023 06:08:57 PM EST gpg: using RSA key D36CB86CB86B3716 gpg: Good signature from "AlmaLinux OS 9 <packager@almalinux.org>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: BF18 AC28 7617 8908 D6E7 1267 D36C B86C B86B 3716 ``` Verify the downloaded ISO image checksum: ```bash # calculate the downloaded ISO SHA256 checksum $ sha256sum AlmaLinux-9.3-x86_64-boot.iso af5377a1d16bbe599ea91a8761ad645f2f54687075802bdc0c0703ee610182e9 AlmaLinux-9.3-x86_64-boot.iso # compare it with expected checksum, it should be the same $ cat CHECKSUM | grep -E 'SHA256.*AlmaLinux-9.3-x86_64-boot.iso' SHA256 (AlmaLinux-9.3-x86_64-boot.iso) = af5377a1d16bbe599ea91a8761ad645f2f54687075802bdc0c0703ee610182e9 ``` If you decide to use the `AlmaLinux-9.3-x86_64-boot.iso` image, you may need to provide the `9.3/BaseOS/x86_64/kickstart/` URL repository from the selected mirror as the Installation Source in the event that the installer is not able to find the closest mirror for some reason. There are no extra Installation Sources required if you decided to go with either the minimal or DVD ISO images. ## Upgrade Instructions To update your AlmaLinux OS 9 to 9.3 run: ```bash $ dnf upgrade -y ``` ## Additional packages Here is a list of packages that are AlmaLinux-specific, and will not be found in compatible versions of RHEL. | Package | Description | | --- | --- | | almalinux-backgrounds | AlmaLinux background images. Replaces `redhat-backgrounds` | | almalinux-indexhtml | AlmaLinux default browser page Replaces `redhat-indexhtml` | | almalinux-logos | AlmaLinux graphics for OS Replaces `redhat-logos` | | almalinux-logos-httpd | AlmaLinux graphics for HTTPD server Replaces `redhat-logos-httpd` | | almalinux-logos-ipa | AlmaLinux graphics for IPA server Replaces `redhat-logos-ipa` | | almalinux-release | AlmaLinux release package, repos, and EULA Replaces `redhat-release` and `redhat-release-eula` | ## Removed packages Here is a list of packages you will not find in AlmaLinux when comparing with the compatible version of RHEL. AlmaLinux OS is a community distribution so all changes are subject to discussion. If you would like to do so, please join [AlmaLinux Chat](https://chat.almalinux.org/almalinux/channels/engineeringpackaging) as well as filing a bug report at [AlmaLinux Bug Tracker](https://bugs.almalinux.org) to discuss if you think any of the packages below should be included into the repos. | Package | Description | | --- | --- | | insights-client | RHEL specific package to connect to upstream vendor resources | | kmod-redhat-* | RHEL specific modules from Driver Update Program | | kpatch* | RHEL specific live patches for kernel | | redhat-backgrounds | RHEL specific background images | | redhat-indexhtml | RHEL specific default browser page | | redhat-logos | RHEL specific graphics for OS | | redhat-logos-httpd | RHEL specific graphics for HTTPD server | | redhat-logos-ipa | RHEL specific graphics for IPA server | | redhat-release | RHEL specific release package and repos | | redhat-release-eula | RHEL specific EULA | | redhat-support-lib-python | RHEL specific package to connect to upstream vendor resources | | redhat-support-tool | RHEL specific package to connect to upstream vendor resources | | rhc | RHEL specific package to connect to upstream vendor resources | | rhc-worker-playbook | RHEL specific package to connect to upstream vendor resources | | rhsm-gtk | RHEL specific GUI for Subscription Manager | | rhsm-icons | RHEL specific GUI for Subscription Manager | | spice-client-win-x64 | Contains binaries built by upstream vendor | | spice-client-win-x86 | Contains binaries built by upstream vendor | | spice-qxl-wddm-dod | Contains binaries built by upstream vendor | | spice-vdagent-win-x64 | Contains binaries built by upstream vendor | | spice-vdagent-win-x86 | Contains binaries built by upstream vendor | | subscription-manager-cockpit | RHEL specific Cockpit module for Subscription Manager | | subscription-manager-initial-setup-addon | RHEL specific initial setup addon for Subscription Manager | | subscription-manager-plugin-container | RHEL specific Subscription Manager plugin for upstream vendor containers | | virt-who | RHEL specific package to connect to upstream vendor resources | | virtio-win | Contain binaries built by upstream vendor | Red Hat and RHEL are trademarks or registered trademarks of Red Hat, Inc. or its subsidiaries in the United States and other countries.