Copyright © 2020, Oracle and/or its affiliates. Legal Notices
Copyright © 2020, Oracle and/or its affiliates.
This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.
If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:
U.S. GOVERNMENT END USERS: Oracle programs (including any operating system, integrated software, any programs embedded, installed or activated on delivered hardware, and modifications of such programs) and Oracle computer documentation or other Oracle data delivered to or accessed by U.S. Government end users are "commercial computer software" or "commercial computer software documentation" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, reproduction, duplication, release, display, disclosure, modification, preparation of derivative works, and/or adaptation of i) Oracle programs (including any operating system, integrated software, any programs embedded, installed or activated on delivered hardware, and modifications of such programs), ii) Oracle computer documentation and/or iii) other Oracle data, is subject to the rights and limitations specified in the license contained in the applicable contract. The terms governing the U.S. Government's use of Oracle cloud services are defined by the applicable contract for such services. No other rights are granted to the U.S. Government.
This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.
Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
Intel and Intel Inside are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Epyc, and the AMD logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.
This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.
F33984-01
November 2020
Abstract
Oracle ® Linux 8: Release Notes for Oracle Linux 8 Update 3 provides information about the new features and known issues in the Oracle Linux 8 Update 3 release. This document may be updated after it is released.
Table of Contents
Oracle ® Linux 8: Release Notes for Oracle Linux 8 Update 3 provides information about the new features and known issues in the Oracle Linux 8 Update 3 release. This document may be updated after it is released.
Document generated on: 2020-11-05 (revision: 11039)
These release notes contain information that applies to both the x86_64 and 64-bit Arm (aarch64) architectures. See Chapter 6, Release-Specific Information for Oracle Linux 8 Update 3 (aarch64) for information that is specific just to the 64-bit Arm platform.
This document is intended for users and administrators of the Oracle Linux 8 Update 3 release. It describes potential issues that you may encounter while using the operating system; and, where appropriate, any corresponding workarounds. Oracle recommends that you read this document before installing Oracle Linux 8 Update 3. It is assumed that readers have a general understanding of the Linux operating system.
The latest version of this document and other documentation for this product are available at:
The following text conventions are used in this document:
|
Convention |
Meaning |
|---|---|
|
boldface |
Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary. |
|
italic |
Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values. |
|
|
Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter. |
For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at https://www.oracle.com/corporate/accessibility/ .
For information about documentation accessibility features that are specific to this document, see Oracle ® Linux 8: Accessibility User's Guide .
Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit https://www.oracle.com/corporate/accessibility/learning-support.html#support-tab .
Oracle is fully committed to diversity and inclusion. Oracle recognizes the influence of ethnic and cultural values and is working to remove language from our products and documentation that might be considered insensitive. While doing so, we are also mindful of the necessity to maintain compatibility with our customers' existing technologies and the need to ensure continuity of service as Oracle's offerings and industry standards evolve. Because of these technical constraints, our effort to remove insensitive terms is an ongoing, long-term process.
Table of Contents
The Oracle Linux 8 Update 3 release is supported on the following platforms:
Intel 64-bit (x86_64)
AMD 64-bit (x86_64)
64-bit Arm (aarch64)
In Oracle Linux 8 Update 3, the Arm platform is only supported with Unbreakable Enterprise Kernel Release 6 (UEK R6). See Chapter 6, Release-Specific Information for Oracle Linux 8 Update 3 (aarch64) for details.
Oracle Linux images for Oracle Linux 8 are available for Oracle Cloud Infrastructure and can be installed onto compute instances. Use these release notes in conjunction with the release notes that are available for Oracle Linux 8 images. See the release notes for the image that you are using on the Oracle Cloud Infrastructure Documentation page.
For more information about Oracle Cloud Infrastructure, visit https://docs.oracle.com/en/operating-systems/oracle-linux/oci/ .
Oracle Linux 8 Update 3 on the x86_64 platform ships with the following default kernel packages:
kernel-4.18.0-240.el8
Red Hat Compatible Kernel (RHCK)
kernel-uek-5.4.17-2011.7.4.el8uek
Unbreakable Enterprise Kernel Release 6 (UEK R6)
The Oracle Linux release is tested as a bundle, as shipped on the installation media image. When installed from the installation media image, the minimum kernel version that is supported is the kernel that is included in the image. Downgrading kernel packages is not supported, unless recommended by Oracle Support.
Table of Contents
This chapter describes new features, major enhancements, bug fixes, and other changes that are introduced in Oracle Linux 8 Update 3. These features generally apply to both the x86_64 and 64-bit Arm (aarch64) platforms, unless otherwise noted. For information that applies specifically to the Arm platform, see Chapter 6, Release-Specific Information for Oracle Linux 8 Update 3 (aarch64) .
Oracle Linux 8 Update 3 introduces the following notable features and improvements to installing and booting a system, and creating images:
In Oracle Linux 8 Update 3, the Anaconda graphical installer is updated to version 33.16.3.1. This version of the installer provides numerous changes and improvements over the previous version of the installer. Notable changes include the following:
Installation Program displays supported NVDIMM device sector sizes.
Host name is configured correctly on an installed system having IPv6 static configuration.
Capability for using non-ASCII characters in the disk encryption passphrase.
The GUI installation program displays appropriate
recommendation for creating a new file system on
/boot
,
/tmp
, and all
/var
and
/usr
mount
points, with the exception of
/usr/local
and
/var/www
.
Ability to change the LUKS version of the container in the Manual Partitioning screen now available.
Installation program successfully finishes an installation
without the
btrfs-progs
package.
Installation program uses the default LUKS2 version for an encrypted container by default.
Installation program no longer crashes when a kickstart
file puts physical volumes (PVs) of a Logical volume group
(VG) on an
ignoreddisk
list.
In Oracle Linux 8 Update 3, the graphical installation program has been
updated to include the
Root password
and
User creation
settings in the Installation
Summary screen. This improvement enables you to configure a
root
password, as well as create a user
account prior to starting the installation. In previous
releases, you performed this configuration after beginning the
installation process.
For more information about this change, see Oracle ® Linux 8: Installing Oracle Linux .
The following notable features, enhancements, and changes apply to the Red Hat Compatible Kernel (RHCK) that is shipped with Oracle Linux 8 Update 3 on the x86_64 platform.
For more information about the Unbreakable Enterprise Kernel Release 6 (UEK R6) release that is shipped with Oracle Linux 8 Update 3, see the Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
lshw command provides additional CPU information.
The List Hardware command (
lshw
) now
displays more CPU information. The CPU version field now
includes the family, model and stepping details of the
system processors in numeric format as version:
family
.
model
.
stepping
.
Extended Berkeley Packet Filter added. Oracle Linux 8 Update 3 includes support for the Extended Berkeley Packet Filter (eBPF) in-kernel virtual machine, as well as the tc classifier/action code and BCC tools.
Libbpf support included.
Support for Libbpf is added in this release. The
libbpf
package is critical for
BPF-related applications like
bpftrace
,
as well as
bpf/xdp
development.
Mellanox ConnectX-6 Dx network adapter included.
The PCI IDs of the Mellanox ConnectX-6 Dx network adapter
have been added to the
mlx5_core
driver. Oracle Linux now loads the
mlx5_core
driver automatically on hosts that use this adapter. This
feature was previously available as a technology preview
only.
tpm2-tools updated to version 4.1.1.
The
tpm2-tools
package is updated to
version 4.1.1. This version of TPM (Trusted Platform
Module) 2 provides several command changes, including
additions, updates, and removals.
TSX disabled by default. To improve OS security, the Intel Transactional Synchronization Extensions (TSX) technology is now disabled by default in the kernel. Note that this change only applies to CPUs that support disabling TSX, for example, the 2nd Generation Intel Xeon Scalable Processors (formerly known as Cascade Lake, with Intel C620 Series Chipsets).
Oracle Linux 8 Update 3 includes the Unbreakable Enterprise Kernel Release 6 (UEK R6) on the installation image, along with the Red Hat Compatible Kernel (RHCK). For new installations, UEK R6 is enabled and installed by default and is the default kernel on first boot.
UEK R6 is a heavily tested and optimized operating system kernel for Oracle Linux 7 Update 7, and later, and Oracle Linux 8 Update 1, and later. The kernel is developed, built, and tested on Arm (aarch64), Intel x86, and AMD x86 (x86_64). platforms. It is based on the mainline Linux kernel version 5.4. This release also updates drivers and includes bug and security fixes.
UEK R6 maintains compatibility with RHCK. Additional features are enabled to provide support for key functional requirements and patches are applied to improve performance and optimize the kernel for use on Oracle operating systems.
For more details, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
In this release, the built-in
best
DNF
configuration option value is set to
True
by
default.
This change means that DNF will now run with the
best
configuration option set to
False
unless you explicitly set it to
True
in a configuration file. If you have set
the
best=True
option in your DNF
configuration file (
/etc/dnf/dnf.conf
), this
behavior is unchanged. However, if you do not have this option
set in your DNF configuration file, when you run the
dnf
command to install a package, if the
package is already installed but an update is available, the
command does not attempt to install the update.
To retain the same behavior in your own configuration files,
ensure that the
best=True
option is included.
Oracle Linux 8 Update 3 includes the TigerVNC desktop feature. In this release,
the
tigervnc
packages are updated to version
1.10.1.
Oracle Linux 8 Update 3 includes the following feature changes and improvements for dynamic programming languages, and web and database servers. Note that this release also introduces several new, as well as improved, module streams:
Ruby 2.7.1 module stream added.
The new
ruby:2.7
module stream provides
a number of performance improvements, bug and security
fixes, and new features over Ruby 2.6, is introduced in
this release.
Nodejs:14 module stream added.
The new
node.js 14.4.0
module stream
provides a number of new features, bug and security fixes,
and improvements over Node.js 12, the version that was
distributed in the previous release.
git packages updated to version 2.27.
In this release, the
git
packages are
updated to version 2.27.
python38:3.8 module stream changes.
This release includes the
python38:3.8
module stream.
php:7.4 module stream added.
The new
PHP 7.4
module stream includes
a number of bug fixes and enhancements over the previous
7.3 version. The new Foreign Function Interface (FFI)
experimental extension, which is available in the
php-ffi
package, has also been
introduced in this release. This extension enables you to
do the following: call native functions, access native
variables, and create and access data structures defined
in C libraries.
Note that the following extensions have been removed:
The
wddx
extension has been removed
from the
php-xml
package
The
recode
extension has been removed
from the
php-recode
package.
nginx:1.18 module stream added.
This version of the
nginx
web and proxy
server provides a number of bug fixes, security fixes, as
well as new features and enhancements over the previous
1.16 version 1.16.
perl:5.30 module stream added.
RHEL 8.3 introduces
Perl 5.30
, which provides
a number of bug fixes and enhancements over the previously
released
Perl 5.26
. The new version also
deprecates or removes certain language features.
perl-libwww-perl:6.34 module stream added.
The new
perl-libwww-perl:6.34
module
stream includes the
perl-libwww-perl
package, which can be used for all versions of Perl that
are available in Oracle Linux 8. Note that the non-modular
perl-libwww-perl
package (available
since Oracle Linux 8) is obsoleted by the new default
perl-libwww-perl:6.34
module stream, as
that package could not be used with any Perl streams,
other than version 5.26.
perl-IO-Socket-SSL:2.066 module stream added. The new perl-IO-Socket-SSL:2.066 module stream includes the perl-IO-Socket-SSL and perl-Net-SSLeay packages. These packages are compatible with all of the Perl streams that are available in Oracle Linux 8.
squid:4 module stream updated to version 4.11.
This version of the
Squid
proxy server
includes the
squid:4
module stream,
which has been updated from version 4.4 to version 4.11.
This version of
Squid
provides a number
of bug and security fixes and various enhancements,
including new configuration options.
httpd:2.4 module stream changes.
Several bug fixes and other notable changes to the Apache
HTTP Server are made available through the
httpd:2.4
module stream.
New CustomLog directive enables logging to journald in httpd.
You can now transfer logs to
journald
from the Apache HTTP Server by using the new
CustomLog
directive.
Oracle Linux 8 Update 3 provides the following file systems and storage features, enhancements, and changes:
Btrfs removed from RHCK. The Btrfs file system is removed from RHCK in Oracle Linux 8. As such, you cannot create or mount Btrfs file systems when using this kernel. Also, any Btrfs user-space packages that are provided are not supported with RHCK.
Support for the Btrfs file system is enabled in UEK R6. Starting with Oracle Linux 8 Update 3, during an installation, you now have the option to create a Btrfs root file system, as well as select Btrfs as the file system type when formatting devices. See Oracle ® Linux 8: Installing Oracle Linux for more information about this feature.
For more information about managing the Btrfs root file system, see Oracle ® Linux 8: Managing Local File Systems .
For more information about the enhancements that have been made to Btrfs in UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
OCFS2 removed from RHCK. The Oracle Cluster File System version 2 (OCFS2) file system is removed from RHCK in Oracle Linux 8. As such, you cannot create or mount OCFS2 file systems when using this kernel. Also, any OCFS2 user-space packages that are provided are not supported with RHCK.
OCFS2 is fully supported with UEK R6 in Oracle Linux 8 Update 3.
NVMe/TCP available as a Technology Preview. NVMe over Fabrics TCP host and the target drivers have been added to RHCK in this release as a technology preview. Note that NVMe/TCP is already supported in Unbreakable Enterprise Kernel Release 6.
Oracle Linux 8 Update 3 provides the GCC Toolset 9, which is an Application
Stream that is distributed in the form of a Software Collection
in the
AppStream
repository. The GCC Toolset
is similar to the Oracle Linux Developer Toolset.
The GCC Toolset 10 contains up-to-date versions of the following developer tools:
GCC version 10.1.1
GDB version 9.2
Valgrind version 3.16.0
SystemTap version 4.3
Dyninst version 10.1.0
binutils
version 2.32
elfutils
version 0.180
dwz
version 0.12
make
version 4.2.1
strace
version 5.7
ltrace
version 0.7.91
annobin
version 9.21
The GCC Toolset 10 is available as an Application Stream within
the
AppStream
repository, in the form of a
Software Collection.
Install this toolset as follows:
# dnf install gcc-toolset-10
To run a tool from GCC Toolset 10, use the following command:
$ scl enable gcc-toolset-10 tool
The following command runs a shell session, where tool versions from the GCC Toolset 10 take precedence over system versions of the same tools:
$ scl enable gcc-toolset-10 bash
The following high availability and cluster features are included in Oracle Linux 8 Update 3:
pacemaker updated to version 2.0.4. In this release, the Pacemaker is updated to version 2.0.4. This version of the Pacemaker provides a number of bug fixes over the previous version.
Pacemaker support for recovery by demoting a promoted resource rather than fully stopping it. In this release, you can configure a promotable resource in a Pacemaker cluster to ensure that if a promote or monitor action fails for that resource or the partition in which the resource is running loses quorum, the resource is demoted but not fully stopped.
priority-fencing-delay cluster property added.
Pacemaker includes a the new
priority-fencing-delay
cluster
property. This property enables you to configure a
two-node cluster to ensure that in a split-brain
situation, the node with the fewest resources running is
fenced. This feature is useful in situations where you
would prefer that the resource continue to be available in
the unpromoted mode.
Commands for managing multiple sets of resource and operation defaults added. Commands for managing multiple sets of resource and operation defaults are included in this release. These new commands enable you to create, list, change, and delete multiple sets of resource and operation defaults. Also, when creating a set of default values, you can specify a rule that contains resource and op expressions. This capability enables you to configure a default resource value for all resources that are of a particular type. In addition, commands that list existing default values now include multiple sets of defaults in their output.
Command for tagging cluster resources added. You can now tag cluster resources in a Pacemaker cluster by using the pcs tag command. You can also use this command to remove or modify a resource tag, or display a tag configuration.
Oracle Linux 8 Update 3 introduces several version updates to infrastructure tools, including the following:
Bind updated to version 9.11.
The
bind
package is updated to version
9.11. Bind version 9.11 provides several bug fixes and
enhancements over the previous version. Notable changes
include increased reliability on systems that have
multiple CPU cores and more detailed error detection, as
well as improvements to the
dig
command
and other tools, which now can print the Extended DNS
Error (EDE) option, if present.
Powertop updated to version 2.12.
The
powertop
packages are updated to
version 2.12. Powertop version 2.12 includes several
improvements over the previous version.
Tuned updated to version 2.14.0.
The
tuned
packages are updated to
version 2.14.0 in this release. Tuned version 2.14.0
includes the following notable enhancements:
New
optimize-serial-console
profile.
A post loaded profile is included.
A
irqbalance
plugin for handing
irqbalance
settings is included.
Addition of architecture-specific tuning for Marvell ThunderX and AMD based platforms.
Scheduler plugin extended to include
cgroups-v1
for the CPU affinity
setting.
tcpdump updated to version 4.9.3. The tcpdump utility is updated to version 4.9.3 to fix some Common Vulnerabilities and Exposures (CVEs).
libpcap utility updated to version 1.9.1. The libpcap utility is updated to version 4.9.3 to fix Common Vulnerabilities and Exposures (CVEs).
memcached updated to version 1.5.22.
The
memcached
packages are updated to
version 1.5.22. This version of Memcached includes several
notable improvements over the previous version.
Oracle Linux 8 Update 3 introduces the following features, enhancements, and changes:
firewalld updated to version 0.8.2.
The
firewalld
packages are updated to
version 0.8.2 in this release. This version of
firewalld
includes a number of bug
fixes over the previous version.
IPv4 and IPv6 Netfilter tracking modules merged with nf_conntrack module.
The
nf_conntrack_ipv4
and
nf_conntrack_ipv6
Netfilter connection
tracking modules have merged with the
nf_conntrack
kernel module. A result of
this change is that blocklisting address family-specific
modules no longer works. In addition, you can now
blocklist only the
nf_conntrack
module
to disable connection tracking support for both IPv4 and
IPv6.
NetworkManager updated to version 1.26.0.
This version of
NetworkManager
provides
several important improvements and changes, including the
following:
NetworkManager
resets the
auto-negotiation, speed, and duplex setting to the
original value when deactivating a device.
Wi-Fi profiles now connect automatically if all previous activation attempts failed, meaning an initial failure to auto -connect does not block the automatism.
nm-settings-nmcli(5)
and
nm-settings-dbus(5)
manual pages
added.
Several bridge parameters added.
Virtual routing and forwarding (VRF) interfaces added.
Opportunistic Wireless Encryption mode (OWE) for Wi-Fi networks added.
mcli utility improvement enables the removal of settings by using the nmcli_connection modify command.
NetworkManager
improved to no longer
create and activate secondary devices if the primary
device is missing.
XDP available as a Technology Preview. The Express data path (XDP) feature has been added to RHCK in this release as a technology preview. XDP is a flexible and minimal kernel-based packet transport for high-speed networking. Note XDP is already supported in Unbreakable Enterprise Kernel Release 6 (UEK R6).
Oracle Linux 8 Update 3 introduces the following security features, enhancements, and changes:
CyrusSASL support for channel bindings with SASL/GSSAPI and
SASL/GSS-SPNEGO plugins.
Support has been added in this release for channel
bindings by using SASL/GSSAPI and SASL/GSS-SPNEGO plugins.
When used in the
openldap
libraries,
the feature provides CyrusSASL with the ability to
maintain compatibility with and access to Microsoft Active
Directory and Microsoft Windows systems, which introduce
mandatory channel binding for LDAP connections.
gnutls updated to version 3.6.14.
The
gnutls
packages are updated to
version 3.6.14 in this release. This version of the
gnutls
packages include several bug
fixes and improvements over the previous version.
Libreswan updated to version 3.32. In this release, Libreswan has been updated to version 3.32. This version of Libreswan provides several new features and bug fixes, including the following notable changes:
A separate FIPS 140-2 certification is no longer required.
Implementation the cryptographic recommendations of RFC 8247, and changes the preference from SHA-1 and RSA-PKCS v1.5 to SHA-2 and RSA-PSS.
Support for XFRMi virtual ipsecXX interfaces, which simplify the writing of firewall rules.
Improvement to the recovery of crashed and rebooted nodes in a full-mesh encryption network.
libseccomp library updated to version 2.4.3.
The
libseccomp
library is updated to
version 2.4.3. This library provides an interface to the
seccomp
syscall filtering mechanism.
This version of the
libseccomp
library
also includes a number of bug fixes and enhancements over
the previous version.
libcap support for ambient capabilities.
You can now grant ambient capabilities at login, which
eliminates the need to have
root
access
for appropriately configured processes.
libkcapi updated to version 1.2.0.
The
libkcapi
package is updated to
version 1.2.0. This version of
libkcapi
includes minor changes over the previous version.
libssh library updated to version 0.9.4.
The
libssh
library is updated to
version 0.9.4. This library implements the SSH protocol.
setools package updated to version 4.3.0.
The
setools
package is updated to
version 4.3.0. This package provides a collection of tools
that facilitates the SELinux policy analysis feature.
Several bug fixes and enhancements are included in this
version of the
setools
package.
The
setools
package requires the
following additional packages:
setools-console
,
setools-console-analyses
, and
setools-gui
.
stunnel updated to version 5.56.
The
stunnel
encryption wrapper is
updated to version 5.56. This version of the
stunnel
packages includes a number of
new features and bug fixes, including the following:
ticketKeySecret
and
ticketMacSecret
options for
controlling confidentiality and integrity protection of
the issued session tickets. These options enable you to
resume sessions on other nodes in a cluster.
curves
option, which controls the
list of elliptic curves in OpenSSL 1.1.0 and later.
ciphersuites
option to control the
list of permitted TLS 1.3 ciphersuites.
sslVersion
,
sslVersionMin
and
sslVersionMax
for OpenSSL 1.1.0 and
later added.
update-crypto-policies and fips-mode-setup relocated to
crypto-policies-scripts.
In this release, the
update-crypto-policies
and
fips-mode-setup
scripts are moved to
the
crypto-policies-scripts
package,
which is a separate RPM subpackage. This package is
automatically installed through the Recommends dependency
on regular installations.
OpenSCAP updated to version 1.3.3.
In this release, the
openscap
packages are updated to version 1.3.3. This version of
OpenSCAP includes several bug fixes and improvements
over the previous version, including the following
notable changes:
autotailer
script is added. This
script enables you to generate tailoring files by
using a CLI.
Timezone part is added to the Extensible Configuration Checklist Description Format (XCCDF) TestResult start and end time stamps.
yamlfilecontent
independent probe
included as a draft implementation.
urn:xccdf:fix:script:kubernetes
fix
type introduced in XCCDF
Ability to generate the
machineconfig
fix added.
oscap-podman
tool can detect
ambiguous scan targets.
rpmverifyfile
probe can verify
files from the
/bin
directory.
Fixed crashes when complicated regexes are executed in
the
textfilecontent58
probe.
Evaluation characteristics of the XCCDF report are
consistent with OVAL entities from the
system_info
probe.
Fixed file-path pattern matching in offline mode in
the
textfilecontent58
probe.
Fixed infinite recursion in the
systemdunitdependency
probe.
SCAP Workbench tool can generate results-based remediation from tailored profiles. You are now able to generate results-based remediation roles from tailored profiles by using the SCAP Workbench tool.
scap-security-guide packages updated to version 0.1.50.
The
scap-security-guide
packages have
been updated to version 0.1.50. These packages contain
the latest set of security policies for Linux systems,
as well as bug fixes and several enhancements over the
previous version improved Ansible content and several
fixes and improvements to the
scap-security-guide
content for
scanning systems.
fapolicyd packages updated to version 1.0.
The
fapolicyd
package are updated to
version 1.0. Several bug fixes and enhancements are
included in this version of the
fapolicy
packages.
fapolicyd includes an SELinux policy in fapolicyd-selinux.
The
fapolicyd
framework now provides
its own SELinux security policy. The daemon is confined
under the
fapolicyd_t
domain. The
policy is installed through the
fapolicyd-selinux
subpackage.
Individual CephFS files and directories can include SELinux labels.
The storing of SELinux labels in the extended attributes
of files has been enabled in the Ceph File System
(CephFS). This enhancement enables you to change the
labels for individual files and SELinux defines the
labels of any newly created files based on transition
rules. Any files that were previously unlabeled retain
the
system_u:object_r:cephfs_t:s0
label until explicitly changed.
The following virtualization features, enhancements, and changes are included in this release:
Bochs display device included.
The Bochs display device, which is introduced in this
release, is more secure than the
stdvga
device. Note that all VMs that are compatible with
bochs-display
, mainly those that used
UEFI, will use this device by default.
virsh guestinfo command option added. The virsh guestinfo command option provides the ability to report information about a virtual machine (VM), including the following: host name, guest OS information, active users, and time zone that is used.
To enable the
virsh guestinfo
command
option, install the
qemu-guest-agent
package on the guest OS of the target VM. You must also
enable the
guest_agent
channel in the
VM’s XML configuration.
Capability for creating QCOW2 disk images on RBD. In this release, you can create QCOW2 disk images on RADOS Block Device (RBD) storage, which means that VMs are now capable of using RBD servers for their storage backends with QCOW2 images.
Note that write performance of QCOW2 disk images on RBD storage is currently lower than intended.
Capability for migrating VMs with disk cache enabled.
The
libvirt
library is compatible with
disk cache live migration in this release, which now makes
it possible to live-migrate VMs with disk cache enabled.
Control Group v2 support added for VMs. The libvirt suite now supports control groups v2, which means that VMs hosted on Oracle Linux 8 can now take advantage of the resource control capabilities provided by Control Group v2.
IBM POWER 9 XIVE support included. Support for the External Interrupt Virtualization Engine (XIVE) feature of IBM POWER9 to RHEL 8 is included in this release. This improvement enables VMs that are running on an Oracle Linux 8 hypervisor on an IBM POWER 9 system to use XIVE, which improves the performance of I/O-intensive VMs.
QEMU packed virtqueue layout support.
The packed virtqueue layout that was introduced in
VirtIO-1.1 is now supported in QEMU. The new format
enables the exchange of requests by using a more compact
descriptor representation. This change makes it easier to
implement
virtIO
on hardware, as well
as increases system performance.
QEMU logs include time stamps.
As of this release, all logged QEMU events have a time
stamp. This improvement enables you to more easily
troubleshoot your VMs using logs in the
/var/log/libvirt/qemu/
directory.
QEMU/KVM support for discard and write-zeros commands included.
The
discard
and
write-zeroes
commands for the
virtio-blk
protocol are now supported
in QEMU/KVM. This change enables VMs to use the
virtio-blk
device to discard unused
sectors of an SSD, fill sectors with zeroes when they are
emptied, or both. You can use this capability to increase
SSD performance and also ensure that a drive is securely
erased.
QEMU now uses gcrypt library for XTS ciphers.
The QEMU emulator is updated to use the XTS cipher mode
implementation that is provided by the
gcrypt
library. This change improves
the I/O performance of VMS with host storage that uses
QEMU’s native LUKS encryption driver.
macvtap interfaces can be used by VMs in non-privileged sessions.
In this release, VMs can use a pre-existing
macvtap
interface that was previously
created by a privileged process. This change enables VMs
that are started by the non-privileged user session of
libvirtd
to use a
macvtap
interface.
Maximum number of supported VFIO devices increased to 64. In this release, you can attach up to 64 PCI devices that use VFIO to a single VM on an Oracle Linux 8 host. This number is increased from up to 32 PCI devices in Oracle Linux 8 Update 2 and previous releases.
nbdkit logging improvement.
In this release,
nbdkit
service logging
is updated to be less verbose: now, only potentially
important messages are logged. Also, logs that are created
during
virt-v2v
conversions are now
shorter and easier to interpret.
Consistency improvement for SELinux security labels and permissions on
VMs.
The
libvirt
service can now record
SELinux security labels and permissions that are
associated with files, as well as restore labels after
files are modified. This change also enables you to now
use
libguestfs
tools to modify a VM
disk image that is owned by a specific user without the
image owner being changed to
root
.
This feature does not work on file systems that do not support extended file attributes, such as Network File System (NFS).
virsh iothreadset command option added.
You can use the new
virsh iothreadset
command option to configure dynamic IOThread polling. This
additional option makes it possible to set up VMs with
lower latencies for I/O-intensive workloads at the expense
of greater CPU consumption for the IOThread. For more
information and available options, see the
virsh(1)
manual page.
VNNI for BFLOAT16 inputs supported by KVM.
Vector Neural Network Instructions (VNNI) supporting
BFLOAT16
inputs, or
AVX512_BF16
instructions, are now
supported by KVM hosts that are running on the 3rd Gen
Intel Xeon scalable processors (Cooper Lake processors).
This change enables guest software to se the
AVX512_BF16
instructions that reside
inside VMs which is enabled in the virtual CPU
configuration.
Windows Virtio drivers can now be updated using Windows Updates.
In this release, when QEMU starts, a new standard
SMBIOS
string is initiated by default.
The parameters that are provided in the
SMBIOS
fields are used to generate IDs
for the virtual hardware that is running on VM. This
changes means that a Windows Update can now identify the
virtual hardware and the RHEL hypervisor machine type and
then update the Virtio drivers on VMs that are running on
Windows 10+, Windows Server 2016, and Windows Server 2019+
systems.
In Oracle Linux 8 Update 3, the Cockpit web console includes a new option for switching between administrative access mode and limited access mode, from within a user's session. Click the Administrative access or Limited access indicator in your web console session to switch modes.
Oracle Linux maintains user-space compatibility with Red Hat Enterprise Linux (RHEL), which is independent of the kernel version that underlies the operating system. Existing applications in userspace continue to run unmodified on the Unbreakable Enterprise Kernel Release 6 (UEK R6) release and no recertifications are needed for RHEL certified applications.
To minimize impact on interoperability during releases, the Oracle Linux team works closely with third-party vendors regarding hardware and software that have dependencies on kernel modules. The kernel ABI for UEK R6 will remain unchanged in all subsequent updates to the initial release. UEK R6 contains changes to the kernel ABI, relative to UEK R5, that require recompilation of third-party kernel modules on the system. Before installing UEK R6, verify its support status with your application vendor.
Table of Contents
This chapter describes known issues in the Oracle Linux 8 Update 3 release on the x86_64 platform, unless otherwise noted. For issues that apply specifically the Arm (aarch64) platform, see Section 6.5, “Known Issues (aarch64)” .
The following are known installation and upgrade issues for Oracle Linux 8 Update 3.
Currently, no supported method is available for performing an in-place upgrade from Oracle Linux 7 to Oracle Linux 8.
During a Preboot Execution Environment
(
PXE
) installation of
Oracle Linux 8 Update 3, the installer automatically enables the Ethernet over
USB network interface with the
bootproto=dhcp
and
ONBOOT=yes
parameters. This issue causes
the
NetworkManager
service to fail to
start.
To prevent this issue from occurring or to resolve the issue if you have already encountered it, use one of the following workarounds:
Prior to the installation, disable the
ONBOOT
parameter for the Ethernet over
USB network interface in the kickstart file, as follows:
network --bootproto=dhcp --device=enp0s20f0u8u3c2 --onboot=off --ipv6=auto
During the installation, on the Network & Host Name screen, do not select the Connect automatically with priority check box to connect automatically on every reboot for the Ethernet over USB network interface.
If you have already encountered this issue, you can
resolve the issue after the installation by changing the
network configuration setting for the Ethernet over USB
network interface to
ONBOOT=no
, and
then rebooting the system.
(Bug ID 31888490)
If an alternate language is selected during an interactive installation by using the text-based installer, you cannot progress through all of the steps in the installation wizard. The installation is blocked with [!] bullets for Software Selection and Installation Destination , irrespective of what is selected for these two options.
Note that this issue does not occur when performing an installation by using the default language selection of English or if you are using the graphical installer.
(Bug IDs 30535416, 29648703)
If the installer is booted with the
inst.repo
option set, changing the
installation source to use a CD or DVD device within the
installer results in an error that prevents you from
continuing the installation, unless you set the source back to
the original source that was set at boot.
If you set the
inst.repo
option to point to
a hard disk and then attempt to change the installation source
inside the installer, the installer displays an error; but,
you can still proceed with the installation.
To avoid these issues, do not set the
inst.repo
option at boot if you do not
intend to use the installation source that is provided. Or,
use the
inst.repo
source that is defined at
boot without attempting to change installation source inside
the installer.
(Bug ID 30316179)
The following issue applies to both the x86_64 and 64-bit Arm (aarch64) platforms.
During the Oracle Linux 8 Update 3 GUI installation process, on the Network & Host Name screen, if you enable Ethernet devices but do not select the Connect automatically with priority check box for any of your devices, then no device automatically connects when you reboot the system after the installation completes. Note that this behavior is different than in previous releases, where if no network devices had this check box selected, then the default route network device would be enabled.
To configure one or more network devices to connect immediately upon reboot after an installation, do the following:
In the Network & Host Name screen of the installer, click Configure to edit the settings for the selected connection.
On the General tab, select the Connect automatically with priority check box and ensure that the connection type in the drop down list is set to Automatic .
Click Save and continue the installation process.
(Bug ID 31888128)
There is a minor upstream usability error that applies to the
graphical installer when configuring Kdump settings. In the
situation where you attempt to configure a manual kdump memory
reservation, and you then set the memory reservation value to
an unacceptable value, the installer allows you to click
Done
and return to the
Installation Summary
screen without
producing a warning or error message.
When you select an unacceptable value, the installer resets
the value to the last-known acceptable value that was entered;
or, the installer sets the default minimum value of 512 MB.
Note that this information is not displayed in the
Installation Summary
screen. Because an
incorrect value cannot be stored for this parameter, the
installation succeeds even when incorrect information is
entered.
This issue does not occur with the text-based installer, which correctly returns an error if you enter an unacceptable value, preventing you from continuing until you enter an acceptable value.
(Bug IDs 31133351, 31182708)
A minor usability error applies to the graphical installer when configuring Kdump settings. If you manually change the default memory size that is reserved for Kdump, the new setting is not displayed when the screen is refreshed. Instead, only the values for the total system memory and usable system memory are displayed. Consequently, the limits for the parameter "Memory to be reserved (Mb)" become unknown for future Kdump configuration.
The default settings for Kdump memory reservation of
auto
is adequate as the kernel will
determine what size to use when it boots
(Bug IDs 31133287 and 31182699)
A scriplet-related error similar to the following may be encountered when upgrading from Oracle Linux 8 Update 2 to Oracle Linux 8 Update 3 by using the yum update command:
Running scriptlet: tuned-2.13.0-6.0.2.el8.noarch
1089/1089
Running scriptlet: microcode_ctl-4:20191115-4.el8.x86_64
1089/1089
realpath: weak-updates/kmod-kvdo/vdo/kvdo.ko: No such file or directory
realpath: weak-updates/kmod-kvdo/uds/uds.ko: No such file or directory
dracut: installkernel failed in module kernel-modules-extra
warning: %posttrans(microcode_ctl-4:20191115-4.el8.x86_64) scriptlet failed,
exit status 1
Error in POSTTRANS scriptlet in rpm package microcode_ctl
Running scriptlet: libgcc-8.3.1-4.5.0.7.el8.x86_64
1089/1089
Running scriptlet: glibc-common-2.28-101.0.1.el8.x86_64
1089/1089
Running scriptlet: info-6.5-6.el8.x86_64
1089/1089
The error is encountered if you perform a Server with GUI
installation and boot the server by using RHCK because this
installation method installs the kernel-dependent,
kmod-kvdo
package/module, which is a
different version in Oracle Linux 8 Update 2 than the version that is in
Oracle Linux 8 Update 3. Note that the error does not occur when performing a
Minimal Install or if you boot the server by using UEK R6.
The error can be safely ignored and is of no consequence, as
the
kmod-kvdo
package is successfully
installed during the upgrade process.
(Bug ID 31292199)
Attempting to register with the Unbreakable Linux Network
(ULN) in Oracle Linux 8 Update 3 by running the
rhnreg_ks
command may fail if the
python3-rhn-virtualization-hosts
package is
installed on the system. This issue has been observed when the
libvirtd
service is not running.
To work around this issue, ensure that the
libvirtd
packages are installed on your
system and that the service is enabled and running prior to
registering with ULN by using the
rhnreg_ks
command.
(Bug ID 30366521)
When upgrading from Oracle Linux 8 Update 2 to Oracle Linux 8 Update 3, a dependency issue is
encountered if the
beignet
package is
installed, as this package requires an earlier version of the
clang-libs
package.
Currently, a newer version of the
beignet
package is not available in Oracle Linux 8 Update 3.
To work around the issue, remove the
beignet
package from the Oracle Linux 8 Update 2 system to
be installed prior to upgrading to Oracle Linux 8 Update 3.
(Bug ID 31213935)
On new installations of Oracle Linux 8, the ULN registration wizard that presents the option to register with ULN and use Oracle Ksplice is not displayed on first boot. This behavior differs from previous Oracle Linux releases, where you were presented with these options on the first boot after completing the installation.
As an alternative option, you can register with ULN after the installation completes. For instructions, visit https://linux.oracle.com/ .
(Bug ID 29933974)
To successfully install Oracle Linux 8 Update 3 on an Oracle VM VirtualBox
guest, where the graphical installer is used and the default
install of the
Server with GUI
environment
is set, requires that the Oracle VM VirtualBox guest use the
VMSVGA graphics controller and that it is configured with at
least 64MB of memory.
Failure to set the graphics controller correctly can result in an installation where the graphical display is unable to start correctly.
The VMSVGA graphics controller is the default controller when you create a new guest by using Oracle VM VirtualBox 6.0, or later, for Linux guest operating systems. This issue is more likely to appear if you attempt to install over an existing guest that was created on an earlier Oracle VM VirtualBox release. Oracle recommends that you only attempt to install Oracle Linux 8 on a newly created VM in Oracle VM VirtualBox 6.0, or later.
(Bug ID 30004543)
Certain firmware versions in the
linux-firmware
package are deprecated and
subsequently may be removed. The following firmware versions are
affected:
PLACEHOLDER
(Bug ID 32017574)
The
glusterfs-*.i686
packages are not included in either the Oracle Linux 8 Update 2 or Oracle Linux 8 Update 3 release. However, if you
installed the
glusterfs-*.i686
and
glusterfs-*.x86_64
packages on the system to be upgraded in an earlier release, running the
dnf update
glusterfs*
command fails to upgrade the packages to Oracle Linux 8 Update 3.
The workaround for this issue is to first remove the
glusterfs-*.i686
packages from the system to be upgraded, and then run
the
dnf update glusterfs*
command.
(Bug ID 30279840)
The following issue might be encountered when using the Cockpit web console in Oracle Linux 8 Update 1.
Some options for configuring disk cache characteristics in the web console are currently not available when you are creating a new VM or before the installation starts. For disks that are already added to a VM or when adding a new disk to an already running system, these configuration options are available in the web console.
As an alternative solution, you can use virt-manager to configure disk cache characteristics for a newly added disk before the installation starts, as well for disks that already exist in the VM. To configure these options, use the virt-manager command-line interface (CLI) or a corresponding CLI.
It is recommended that you use Oracle Linux Virtualization Manager for more complex virtualization requirements. For more information, see https://docs.oracle.com/en/virtualization/oracle-linux-virtualization-manager/ .
(Bug ID 30301271)
The Oracle Linux 8 Update 3 installer does not recognize some Serial Attached SCSI (SAS) controllers that are found in older Oracle Sun server models. If you attempt to install Oracle Linux 8 on these server models, the installer does not recognize the local disk and the installation fails. Examples of these server models include, but are not limited to, the following: Oracle Sun Fire X4170 M2 Server, Oracle Sun Fire X4170 M3 Server, Oracle Sun OVCA X3-2 Server, and the Oracle Sun X4-2 Server.
The following SAS controllers are removed from the
mpt2sas
driver in RHCK:
SAS2004, PCI ID 0x1000:0x0070
SAS2008, PCI ID 0x1000:0x0072
SAS2108_1, PCI ID 0x1000:0x0074
SAS2108_2, PCI ID 0x1000:0x0076
SAS2108_3, PCI ID 0x1000:0x0077
SAS2116_1, PCI ID 0x1000:0x0064
SAS2116_2, PCI ID 0x1000:0x0065
SSS6200, PCI ID 0x1000:0x007E
The following SAS controllers are removed from the
megaraid_sas
driver in RHCK:
Dell PERC5, PCI ID 0x1028:0x15
SAS1078R, PCI ID 0x1000:0x60
SAS1078DE, PCI ID 0x1000:0x7C
SAS1064R, PCI ID 0x1000:0x411
VERDE_ZCR, PCI ID 0x1000:0x413
SAS1078GEN2, PCI ID 0x1000:0x78
SAS0079GEN2, PCI ID 0x1000:0x79
SAS0073SKINNY, PCI ID 0x1000:0x73
SAS0071SKINNY, PCI ID 0x1000:0x71
One possible workaround is to attempt to boot the system by using the UEK boot ISO and then boot strap into the Oracle Linux 8 installation session on UEK so that these devices can be recognized by the UEK drivers.
(Bug ID 29120478)
Currently, there is no tool for mirroring channels from ULN to a local yum server that is hosted on Oracle Linux 8. However, you can still perform ULN mirroring on Oracle Linux 7, as well as mirror any Oracle Linux 8 Update 1 ULN channels onto a yum server that is hosted on Oracle Linux 7.
If you use the Ksplice Offline client, where a ULN mirror is required to service Oracle Linux 8 hosts, you can optionally host the ULN mirror on an Oracle Linux 7 host. For instructions, see Creating and Using a Local ULN Mirror in the Oracle ® Linux: Unbreakable Linux Network User's Guide for Oracle Linux 6 and Oracle Linux 7 . After configuring the system as a yum server, you can subscribe it to any Oracle Linux 8 ULN channels that you wish to mirror.
For more information about the Ksplice Offline client, see the Oracle ® Linux: Ksplice User's Guide .
(Bug ID 30005125)
The following are known file systems issues in Oracle Linux 8 Update 3.
The Btrfs file system is removed from RHCK in Oracle Linux 8, which means you cannot create or mount this file system when using this kernel. Also, any Btrfs user space packages that are provided are not supported with RHCK.
Support for the Btrfs file system is enabled in UEK R6. Starting with Oracle Linux 8 Update 3, during an installation, you now have the option to create a Btrfs root file system, as well as select Btrfs as the file system type when formatting devices.
For further details, see the following documentation:
For information about creating a Btrfs root file system during an installation, see Oracle ® Linux 8: Installing Oracle Linux .
For information about managing the Btrfs file system, see Oracle ® Linux 8: Managing Local File Systems .
For more information about other enhancements that have been made to Btrfs in UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
The OCFS2 file system is removed from RHCK in Oracle Linux 8, which means you cannot create or mount this file system when using this kernel. Also, OCFS2 user space packages that are provided are not supported with RHCK.
Note that support for OCFS2 file systems is enabled in UEK R6. For more information about other enhancements that have been made to OCFS2 in UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
If a system that is using the
ext4
file
system is repeatedly or frequently shut down, the file system
might become corrupted. Note that this issue is considered to
be a corner-case issue because it is difficult to replicate
it. The issue exists in the upstream code and proposed patches
are currently under review.
(Bug ID 27547113)
The following are known kernel issues in Oracle Linux 8 Update 3.
Creating a KVM guest by using a default kernel from a particular vendor and then attempting to boot or run that guest by using a different vendor kernel may fail with the following error:
[root@host ~]# virsh start myGuest --console
error: Failed to start domain myGuest
error: operation failed: guest CPU doesn't match specification: missing features: md-clear
This issue only occurs in situations where you are attempting to interchange an RHCK kernel for a UEK kernel or a UEK kernel for an RHCK kernel. The issue is not encountered if you are interchanging kernel versions from the same vendor.
To avoid encountering this issue, make sure to boot and run KVM guests by using the same kernel on which they were initially created.
(Bug ID 30561489)
The following errors might be displayed repeatedly when KVM guests are booting on 64-bit AMD hosts:
[ 12.474069] amd64_edac_mod: Unknown symbol amd_register_ecc_decoder (err 0) [ 12.474083] amd64_edac_mod: Unknown symbol amd_report_gart_errors (err 0) [ 12.852250] amd64_edac_mod: Unknown symbol amd_unregister_ecc_decoder (err 0) [ 12.852297] amd64_edac_mod: Unknown symbol amd_register_ecc_decoder (err 0) . . .
These errors occur because the module code for the kernel
erroneously returns
-EEXIST
for modules
that failed to load and are in the process of being removed
from the module list. The
amd64_edac_mod
module will not be loaded in a VM. These errors can be
ignored, as they do not impact functionality in any way.
This issue occurs on Oracle Linux 8 Update 3 hosts that are running RHCK only and is not encountered on UEK R6 hosts.
(Bug ID 29853602)
A bug in the Oracle Linux 8 Update 3 code causes Retropline support to not be
displayed in the output of the
modinfo
command, even though the
CONFIG_RETPOLINE
flag is set to
Y
, for example:
# modinfo -F retpoline
/usr/lib/modules/4.18.0-80.el8.x86_64/kernel/sound/usb/usx2y/snd-usb-us122l.ko.xz
#
The
CONFIG_RETPOLINE=Y
flag is still
required to add and display Retpoline support. If the
parameter is enabled, the kernel builds with a
retpoline-capable compiler.
To confirm whether the
CONFIG_RETPOLINE
flag is enabled, search the configuration file, for example:
# cat /boot/config-5.4.17-2011.7.4.el8uek.x86_64 | grep RETPOLINE
CONFIG_RETPOLINE=y
(Bug ID 29894295)
Kdump might fail on some AMD hardware that is running Oracle Linux 8 Update 3 with the default RHCK kernel. Impacted hardware includes the AMD EPYC CPU (codename Naples and Rome) servers.
To work around this issue, modify the
/etc/sysconfig/kdump
configuration file,
remove the "iommu=off" command-line option from
KDUMP_COMMANDLINE_APPEND
, then restart the
kdump
service for the changes to take
effect.
Note that this issue does not occur on this particular hardware if you are running UEK R6 with Oracle Linux 8 Update 3.
(Bug ID 31274238)
The new LVM
dm-writecache
caching method
has certain limitations that do not exist with the
dm-cache
method, including the following:
Cannot attach or detach
dm-writecache
when a logical volume is active.
Cannot take a snapshot of a logical volume when the
logical volume is using
dm-writecache
.
Must use a
dm-writecache
block size
that matches the existing file system block size when
attaching
dm-writecache
to an inactive
logical volume.
Cannot resize a logical volume when
dm-writecache
is attached to the
volume.
Cannot use
pvmove
commands on devices
that are used with
dm-writecache
.
Cannot use logical volumes with
dm-writecache
when using thin pools or
the virtual data optimizer (VDO).
For more information about the
dm-writecache
caching method, see the the
Section 3.8, “File Systems and Storage”
features section of
these release notes. See also the
lvmcache(7)
manual page.
The following are networking issues in Oracle Linux 8 Update 3.
For more information about network-related issues that may be encountered during an installation, see Section 4.1, “Installation and Upgrade Issues” .
Installing one kernel on a system that has a Mellanox ConnectX-6 Dx network adapter, such as RHCK, and then booting that system by using another kernel, such as the UEK R6 kernel, causes the network configuration to be lost. This issue occurs because the RHCK and UEK kernels use different network interface names, which are not recognized by each other.
For example, the following output indicates that the RHCK name
for
eth1
is
ens300f1np1
:
RHCK 4.18.0-221.el8.x86_64 [ 13.099909] mlx5_core 0000:4b:00.1 ens300f1np1: renamed from eth1 [ 13.115261] mlx5_core 0000:4b:00.0 ens300f0np0: renamed from eth0
By comparison, the UEK name for same interface
(
eth1
) is
ens300f1
:
UEK 5.4.17-2011.5.3.el8uek.x86_64 [ 18.372266] mlx5_core 0000:4b:00.0 ens300f0: renamed from eth0 [ 18.385085] mlx5_core 0000:4b:00.1 ens300f1: renamed from eth1
One workaround for this issue is to avoid using different kernels on the same system. If you do need to use both RHCK and UEK kernels on the same system, you should use a non-persistent interface naming policy rather than predictable network interface names.
(Bug ID 31923376)
Running the
tracepath6
command fails to
parse the destination IPv6 address correctly. Consequently,
the tool traces a route to the wrong host.
To work around this issue, you can use a tool with similar
capabilities to the
tracepath6
command.
(Bug ID 29540588)
If you run the nohup command on an Oracle Linux 8 Update 3 system, and then attempt to remotely connect to that system by using the ssh command, the ssh command hangs, for example:
# /usr/bin/nohup ./myscript > nohup.out &
To work around for this issue, modify the nohup command as follows:
# /usr/bin/nohup ./myscript > nohup.out 2>&1 &
(Bug ID 30287091)
Restarting the firewalld service leads to an SSH connection timeout on the terminal from which the service was started. Note that other SSH terminals remain connected.
(Bug ID 29478124)
An error indicating that the mcelog service does not support the processor can appear in the system log on systems with AMD processors, such as some Oracle Server hardware. The message might be displayed as follows:
mcelog: ERROR: AMD Processor family 23: mcelog does not support this processor. Please use the edac_mce_amd module instead.
The
mcelog
daemon is a service that is used
on x86_64 platforms to log and handle hardware error messaging,
but it is not required on AMD systems, where the
edac_mce_amd
kernel module handles machine
exception logging. This error should be downgraded to a warning.
(Bug ID 29501190)
For more information about the Podman container management tool, including any known issues, see the Oracle ® Linux: Podman User's Guide .
TLS 1.3 is enabled by default in Oracle Linux 8 Update 3. Applications that are built with NSS do not support connections that require TLS 1.3 in FIPS mode. To make such connections work, disable FIPS mode or use TLS 1.2.
Booting from a multipath attached LUN when using the Emulex 32GB
FC Adapter may fail. Note that booting from single path attached
LUNs are not affected by this issue. To work around the issue,
add the
rd.multipath=1 rd.driver.pre=lpfc
boot parameter.
For systems with multiple boot disks, such as a local boot disk
and a SAN boot disk, the
rd.driver.pre=lpfc
option does not guarantee that the SAN attached storage is
discovered first. To avoid booting from devices other than the
SAN, such as from a local disk, additional
module_blacklist=
boot options are required; for example,
disk_driver
rd.driver.blacklist=megaraid_sas
module_blacklist=megaraid_sas
.
(Bug ID 31898488)
Table of Contents
You can download a full Oracle Linux 8 Update 3 installation media image from the Oracle Software Delivery Cloud at https://edelivery.oracle.com/ . Note that a smaller boot ISO is also available to perform a network-based installation.
For convenience, the three most recent Oracle Linux installation media images, for each release, are also available from the Oracle Linux yum server at https://yum.oracle.com/oracle-linux-isos.html .
You can also install a full Oracle Linux 8 Update 3 media image for the x86_64 platform on a compute instance on Oracle Cloud Infrastructure. To access the image, you must first obtain an Oracle Cloud Infrastructure account. For more information, visit https://www.oracle.com/index.html .
The latest Oracle Linux 8 Update 3 packages are also available on ULN and the Oracle Linux yum server.
To obtain the latest packages from ULN and install additional software for Oracle Linux 8 Update 3, subscribe to the different channels on ULN by logging in to https://linux.oracle.com and then select the View Channels option.
To install additional software for Oracle Linux 8 Update 3 from the Oracle Linux yum server, enable the required repositories within your yum configuration. To view the Oracle Linux yum repositories that are available for Oracle Linux 8 Update 3, visit https://yum.oracle.com/ .
The Oracle Linux yum server does not provide equivalent repositories for some of the channels that are available on ULN. These channels provide non-open source packages.
Oracle also makes the Oracle Linux 8 Update 3 release available at https://www.oracle.com/linux/downloads/linux-arm-downloads.html . See Chapter 6, Release-Specific Information for Oracle Linux 8 Update 3 (aarch64) for more information.
Oracle Linux 8 Update 3 ships with UEK R6 as the default kernel.
Oracle also provides Remote Direct Memory Access (RDMA) packages for use with UEK R6. The RDMA feature enables direct memory access between two systems that are connected by a network. RDMA facilitates high-throughput and low-latency networking in clusters.
To use RDMA features, you must first install the Oracle-supported RDMA packages. To do so, ensure that your system is subscribed to the appropriate channels on ULN or that you have enabled the appropriate repositories on the Oracle Linux yum server.
If you are subscribed to ULN, enable the
ol8_x86_64_UEKR6
,
ol8_x86_64_latest
, and
ol8_x86_64_UEKR6_RDMA
channels. Note that if
your system is newly registered on ULN, it is already subscribed
to the
ol8_x86_64_UEKR6
and
ol8_x86_64_latest
channels by default.
However, you must explicitly subscribe to the
ol8_x86_64_UEKR6_RDMA
channel prior to
installing RDMA packages.
If you are using the Oracle Linux yum server, enable the
ol8_UEKR6
,
ol8_latest
, and
ol8_UEKR6_RDMA
repositories. Note that if
your system already uses the Oracle Linux yum server, the
ol8_UEKR6
and
ol8_latest
repositories are enabled by default. However, you must
explicitly enable the
ol8_UEKR6_RDMA
repository prior to installing RDMA packages.
For more information about RDMA, including any known issues, see the Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
Table of Contents
The following information applies specifically to the Oracle Linux 8 Update 3 (aarch64) release.
Some information in this chapter may also apply generally to the x86_64 platform. For general information that may apply to both the x86_64 and Arm platforms, and information that is specific to the x86_64 platform, refer to the previous chapters of this document.
To determine whether your hardware is supported on the current Oracle Linux 8 release, check the Hardware Certification List at https://linux.oracle.com/hardware-certifications . Note that hardware is listed as it becomes available and is validated on Oracle Linux.
The Oracle Linux 8 Update 3 (aarch64) release ships with Unbreakable Enterprise Kernel Release 6 (UEK R6). This kernel is currently the only kernel that is supported on the 64-bit Arm (aarch64) platform.
The default UEK R6 kernel version that is shipped with Oracle Linux 8 Update 3 (aarch64) is
kernel-uek-5.4.17-2011.7.4.el8uek
.
The Oracle Linux release is tested as a bundle, as shipped on the installation media image. When installed from the installation media image, the minimum kernel version that is supported is the kernel that is included in the image. Note that downgrading kernel packages is not supported, unless specifically recommended by Oracle Support.
The following new features are specific to the 64-bit Arm (aarch64) platform. See Chapter 3, New Features and Changes for all of the new features in Oracle Linux 8 Update 3, most of which are also supported on the 64-bit Arm (aarch64) platform.
In this release, the Virtual Network Computing (VNC) remote console is available as a technology preview on the 64-bit Arm platform only . The remaining components of the graphics stack are unverified on this platform.
The following are known issues for the Oracle Linux 8 Update 3 (aarch64) release. See Chapter 4, Known Issues for information about known issues on the x86_64 platform, some of which might also apply to the 64-bit Arm (aarch64) platform, as noted.
For more information about additional issues that exist for UEK R6, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
An attempt to subsequently register a cache set after removing it fails with the following error:
echo "CACHE_DEV" > /sys/fs/bcache/register echo: write error: Invalid argument In dmesg we can see following error message: bcache: register_bcache() error /dev/CACHE_DEV: Not a bcache superblock
This issue is related to 64KB page size
(
CONFIG_ARM64_64K_PAGES=y
), which
bcache
currently does not support.
Because the superblock for the cache device becomes corrupted during this process, it is not possible to re-register the device.
The workaround for this issue is to reinstall the
bcache-tools
package and then create a new
bcache
configuration.
An alternative workaround is to avoid using a bcache configuration on Oracle Linux 8 Update 3 (aarch64).
Note that this issue does not occur on the x86_64 platform.
(Bug ID 30210051)
The following installation and availability information applies to installing Oracle Linux 8 Update 3 (aarch64) on the 64-bit Arm platform. For general installation and availability information, as well as information that applies specifically to the x86_64 platform, see Chapter 5, Installation and Availability .
Oracle Linux 8 Update 2 is made available as an ISO image
(
OracleLinux-R8-U3-Server-aarch64-dvd.iso
),
which can be used for a standard installation on generic 64-bit
Armv8 hardware. This ISO has been tested on Arm hardware and is
engineered for use with Ampere
™
eMAG
™-based EVK platform and the Marvell
ThunderX2® processor. For the latest hardware that is
validated for Oracle Linux 8 Update 2 (aarch64), refer to the Hardware Certification List
at
https://linux.oracle.com/hardware-certifications
.
Note that hardware is listed as it becomes available.
The Oracle Linux 8 Update 2 (aarch64) ISO image is also available from the Oracle Software Delivery Cloud at https://edelivery.oracle.com/ .
The latest Oracle Linux 8 Update 3 (aarch64) packages are available from ULN and the Oracle Linux yum server. To explore the channels that are available on ULN, log into https://linux.oracle.com/ and view the Channels option. You can obtain the latest Oracle Linux 8 (aarch64) packages from the Oracle Linux yum server at https://yum.oracle.com/ .
The Oracle Linux yum server does not provide equivalent repositories for some of the channels that are available on ULN. These channels provide non-open source packages.
The default boot kernel for fresh installations of Oracle Linux 8 (aarch64) is Unbreakable Enterprise Kernel Release 6 (UEK R6). Note that UEK R6 is the only supported kernel for the aarch64 platform in this release. For more information, see Unbreakable Enterprise Kernel: Release Notes for Unbreakable Enterprise Kernel Release 6 .
Table of Contents
The following sections list the changes to binary and source packages from the upstream release.
This section contains information about the removed, modified, and new binary packages in this release. For information about the source package changes, see Section A.2, “Changes to Source Packages” .
The following binary packages have been added to the BaseOS by Oracle:
bcache-tools
btrfs-progs
dtrace
dtrace-devel
dtrace-testsuite
kernel-uek
kernel-uek-debug
kernel-uek-debug-devel
kernel-uek-devel
kernel-uek-doc
ocfs2-tools
oracle-backgrounds
oraclelinux-release
oraclelinux-release-el8
oracle-logos
oracle-logos-httpd
oracle-logos-ipa
The following binary packages have been added to AppStream by Oracle:
libblockdev-btrfs
The following binary packages from the BaseOS upstream release have been modified:
autofs
binutils
boom-boot
boom-boot-conf
boom-boot-grub2
chrony
cockpit
cockpit-bridge
cockpit-doc
cockpit-system
cockpit-ws
coreutils
coreutils-common
coreutils-single
dbus
dbus-common
dbus-daemon
dbus-libs
dbus-tools
dracut
dracut-caps
dracut-config-generic
dracut-config-rescue
dracut-live
dracut-network
dracut-squash
dracut-tools
efibootmgr
efi-filesystem
firewalld
firewalld-filesystem
fuse
fuse3
fuse3-devel
fuse3-libs
fuse-common
fuse-devel
fuse-libs
fwupd
fwupdate
fwupdate-efi
fwupdate-libs
glibc
glibc-all-langpacks
glibc-common
glibc-devel
glibc-headers
glibc-langpack-aa
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-ak
glibc-langpack-am
glibc-langpack-an
glibc-langpack-anp
glibc-langpack-ar
glibc-langpack-as
glibc-langpack-ast
glibc-langpack-ayc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
glibc-langpack-bg
glibc-langpack-bhb
glibc-langpack-bho
glibc-langpack-bi
glibc-langpack-bn
glibc-langpack-bo
glibc-langpack-br
glibc-langpack-brx
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-cs
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-doi
glibc-langpack-dsb
glibc-langpack-dv
glibc-langpack-dz
glibc-langpack-el
glibc-langpack-en
glibc-langpack-eo
glibc-langpack-es
glibc-langpack-et
glibc-langpack-eu
glibc-langpack-fa
glibc-langpack-ff
glibc-langpack-fi
glibc-langpack-fil
glibc-langpack-fo
glibc-langpack-fr
glibc-langpack-fur
glibc-langpack-fy
glibc-langpack-ga
glibc-langpack-gd
glibc-langpack-gez
glibc-langpack-gl
glibc-langpack-gu
glibc-langpack-gv
glibc-langpack-ha
glibc-langpack-hak
glibc-langpack-he
glibc-langpack-hi
glibc-langpack-hif
glibc-langpack-hne
glibc-langpack-hr
glibc-langpack-hsb
glibc-langpack-ht
glibc-langpack-hu
glibc-langpack-hy
glibc-langpack-ia
glibc-langpack-id
glibc-langpack-ig
glibc-langpack-ik
glibc-langpack-is
glibc-langpack-it
glibc-langpack-iu
glibc-langpack-ja
glibc-langpack-ka
glibc-langpack-kab
glibc-langpack-kk
glibc-langpack-kl
glibc-langpack-km
glibc-langpack-kn
glibc-langpack-ko
glibc-langpack-kok
glibc-langpack-ks
glibc-langpack-ku
glibc-langpack-kw
glibc-langpack-ky
glibc-langpack-lb
glibc-langpack-lg
glibc-langpack-li
glibc-langpack-lij
glibc-langpack-ln
glibc-langpack-lo
glibc-langpack-lt
glibc-langpack-lv
glibc-langpack-lzh
glibc-langpack-mag
glibc-langpack-mai
glibc-langpack-mfe
glibc-langpack-mg
glibc-langpack-mhr
glibc-langpack-mi
glibc-langpack-miq
glibc-langpack-mjw
glibc-langpack-mk
glibc-langpack-ml
glibc-langpack-mn
glibc-langpack-mni
glibc-langpack-mr
glibc-langpack-ms
glibc-langpack-mt
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-nb
glibc-langpack-nds
glibc-langpack-ne
glibc-langpack-nhn
glibc-langpack-niu
glibc-langpack-nl
glibc-langpack-nn
glibc-langpack-nr
glibc-langpack-nso
glibc-langpack-oc
glibc-langpack-om
glibc-langpack-or
glibc-langpack-os
glibc-langpack-pa
glibc-langpack-pap
glibc-langpack-pl
glibc-langpack-ps
glibc-langpack-pt
glibc-langpack-quz
glibc-langpack-raj
glibc-langpack-ro
glibc-langpack-ru
glibc-langpack-rw
glibc-langpack-sa
glibc-langpack-sah
glibc-langpack-sat
glibc-langpack-sc
glibc-langpack-sd
glibc-langpack-se
glibc-langpack-sgs
glibc-langpack-shn
glibc-langpack-shs
glibc-langpack-si
glibc-langpack-sid
glibc-langpack-sk
glibc-langpack-sl
glibc-langpack-sm
glibc-langpack-so
glibc-langpack-sq
glibc-langpack-sr
glibc-langpack-ss
glibc-langpack-st
glibc-langpack-sv
glibc-langpack-sw
glibc-langpack-szl
glibc-langpack-ta
glibc-langpack-tcy
glibc-langpack-te
glibc-langpack-tg
glibc-langpack-th
glibc-langpack-the
glibc-langpack-ti
glibc-langpack-tig
glibc-langpack-tk
glibc-langpack-tl
glibc-langpack-tn
glibc-langpack-to
glibc-langpack-tpi
glibc-langpack-tr
glibc-langpack-ts
glibc-langpack-tt
glibc-langpack-ug
glibc-langpack-uk
glibc-langpack-unm
glibc-langpack-ur
glibc-langpack-uz
glibc-langpack-ve
glibc-langpack-vi
glibc-langpack-wa
glibc-langpack-wae
glibc-langpack-wal
glibc-langpack-wo
glibc-langpack-xh
glibc-langpack-yi
glibc-langpack-yo
glibc-langpack-yue
glibc-langpack-yuw
glibc-langpack-zh
glibc-langpack-zu
glibc-locale-source
glibc-minimal-langpack
grub2-common
grub2-efi-aa64-modules
grub2-efi-ia32
grub2-efi-ia32-cdboot
grub2-efi-ia32-modules
grub2-efi-x64
grub2-efi-x64-cdboot
grub2-efi-x64-modules
grub2-pc
grub2-pc-modules
grub2-tools
grub2-tools-efi
grub2-tools-extra
grub2-tools-minimal
grubby
iproute
iproute-tc
iptables
iptables-arptables
iptables-devel
iptables-ebtables
iptables-libs
iptables-services
iptables-utils
iscsi-initiator-utils
iscsi-initiator-utils-iscsiuio
iwl1000-firmware
iwl100-firmware
iwl105-firmware
iwl135-firmware
iwl2000-firmware
iwl2030-firmware
iwl3160-firmware
iwl3945-firmware
iwl4965-firmware
iwl5000-firmware
iwl5150-firmware
iwl6000-firmware
iwl6000g2a-firmware
iwl6000g2b-firmware
iwl6050-firmware
iwl7260-firmware
kexec-tools
kmod
kmod-kvdo
kmod-libs
ksc
libasan
libatomic
libatomic-static
libdnf
libertas-sd8686-firmware
libertas-sd8787-firmware
libertas-usb8388-firmware
libertas-usb8388-olpc-firmware
libgcc
libgfortran
libgomp
libgomp-offload-nvptx
libipa_hbac
libitm
libkcapi
libkcapi-hmaccalc
liblsan
libnsl
libquadmath
libreport-filesystem
libsss_autofs
libsss_certmap
libsss_idmap
libsss_nss_idmap
libsss_simpleifp
libsss_sudo
libstdc++
libtsan
libubsan
libxml2
libxslt
linux-firmware
mcelog
microcode_ctl
mozjs52
mozjs60
nscd
nss_db
opa-address-resolution
opa-basic-tools
opa-fastfabric
opa-fm
opa-libopamgt
OpenIPMI
OpenIPMI-lanserv
OpenIPMI-libs
OpenIPMI-perl
oracle-backgrounds
oraclelinux-release
oraclelinux-release-el8
oracle-logos
oracle-logos-httpd
oracle-logos-ipa
os-prober
parted
platform-python
policycoreutils
policycoreutils-dbus
policycoreutils-devel
policycoreutils-newrole
policycoreutils-python-utils
policycoreutils-restorecond
polkit
polkit-devel
polkit-docs
polkit-libs
python3-boom
python3-configshell
python3-firewall
python3-hawkey
python3-iscsi-initiator-utils
python3-libdnf
python3-libipa_hbac
python3-libs
python3-libsss_nss_idmap
python3-libxml2
python3-openipmi
python3-policycoreutils
python3-rtslib
python3-sss
python3-sssdconfig
python3-sss-murmur
python3-test
python3-urllib3
redhat-indexhtml
redhat-release
sanlock-lib
selinux-policy
selinux-policy-devel
selinux-policy-doc
selinux-policy-minimum
selinux-policy-mls
selinux-policy-sandbox
selinux-policy-targeted
shim-ia32
shim-x64
sos
sos-audit
sssd
sssd-ad
sssd-client
sssd-common
sssd-common-pac
sssd-dbus
sssd-ipa
sssd-kcm
sssd-krb5
sssd-krb5-common
sssd-ldap
sssd-libwbclient
sssd-nfs-idmap
sssd-polkit-rules
sssd-proxy
sssd-tools
sssd-winbind-idmap
systemd
systemd-container
systemd-devel
systemd-journal-remote
systemd-libs
systemd-pam
systemd-tests
systemd-udev
target-restore
tuned
tuned-profiles-atomic
tuned-profiles-compat
tuned-profiles-cpu-partitioning
tuned-profiles-mssql
tuned-profiles-oracle
vim-minimal
The following binary packages to CodeReady Linux Builder by Oracle have been modified:
crash-devel
cups-filters-devel
gcc-plugin-devel
glibc-benchtests
glibc-nss-devel
glibc-static
iproute-devel
iscsi-initiator-utils-devel
kmod-devel
libreoffice-sdk
libreoffice-sdk-doc
libsss_nss_idmap-devel
libstdc++-static
mozjs52-devel
mozjs60-devel
nss_hesiod
ocaml-libguestfs
ocaml-libguestfs-devel
OpenIPMI-devel
openscap-engine-sce-devel
PackageKit-glib-devel
parted-devel
sanlock-devel
sblim-cmpi-devel
shim-unsigned-ia32
shim-unsigned-x64
tog-pegasus-devel
The following binary packages from the AppStream upstream release have been modified:
abrt
abrt-addon-ccpp
abrt-addon-coredump-helper
abrt-addon-kerneloops
abrt-addon-pstoreoops
abrt-addon-vmcore
abrt-addon-xorg
abrt-cli
abrt-cli-ng
abrt-console-notification
abrt-dbus
abrt-desktop
abrt-gui
abrt-gui-libs
abrt-java-connector
abrt-libs
abrt-plugin-machine-id
abrt-plugin-sosreport
abrt-tui
adwaita-gtk2-theme
anaconda
anaconda-core
anaconda-dracut
anaconda-gui
anaconda-install-env-deps
anaconda-tui
anaconda-user-help
anaconda-widgets
aspnetcore-runtime-3.0
aspnetcore-runtime-3.1
aspnetcore-targeting-pack-3.0
aspnetcore-targeting-pack-3.1
autocorr-af
autocorr-bg
autocorr-ca
autocorr-cs
autocorr-da
autocorr-de
autocorr-en
autocorr-es
autocorr-fa
autocorr-fi
autocorr-fr
autocorr-ga
autocorr-hr
autocorr-hu
autocorr-is
autocorr-it
autocorr-ja
autocorr-ko
autocorr-lb
autocorr-lt
autocorr-mn
autocorr-nl
autocorr-pl
autocorr-pt
autocorr-ro
autocorr-ru
autocorr-sk
autocorr-sl
autocorr-sr
autocorr-sv
autocorr-tr
autocorr-vi
autocorr-zh
binutils-devel
blivet-data
buildah
buildah-tests
clang
clang-analyzer
clang-devel
clang-libs
clang-tools-extra
cloud-init
cockpit-composer
cockpit-dashboard
cockpit-machines
cockpit-packagekit
cockpit-pcp
cockpit-session-recording
cockpit-storaged
compat-libgfortran-48
compat-libpthread-nonshared
composer-cli
containernetworking-plugins
containers-common
cpp
crash
cups-filters
cups-filters-libs
dbus-devel
dbus-x11
delve
dnf-plugin-spacewalk
dotnet
dotnet-apphost-pack-3.0
dotnet-apphost-pack-3.1
dotnet-host
dotnet-hostfxr-3.0
dotnet-hostfxr-3.1
dotnet-runtime-3.0
dotnet-runtime-3.1
dotnet-sdk-3.0
dotnet-sdk-3.1
dotnet-targeting-pack-3.0
dotnet-targeting-pack-3.1
dotnet-templates-3.0
dotnet-templates-3.1
efi-srpm-macros
firefox
firewall-applet
firewall-config
gcc
gcc-c++
gcc-gdb-plugin
gcc-gfortran
gcc-offload-nvptx
gdb
gdb-doc
gdb-gdbserver
gdb-headless
git-clang-format
glibc-utils
gnome-themes-standard
golang
golang-bin
golang-docs
golang-misc
golang-race
golang-src
golang-tests
grafana-pcp
httpd
httpd-devel
httpd-filesystem
httpd-manual
httpd-tools
icedtea-web
icedtea-web-javadoc
initial-setup
initial-setup-gui
ipa-client
ipa-client-common
ipa-client-epn
ipa-client-samba
ipa-common
ipa-python-compat
ipa-server
ipa-server-common
ipa-server-dns
ipa-server-trust-ad
kernel-rpm-macros
ksh
libcmpiCppImpl0
libguestfs
libguestfs-bash-completion
libguestfs-benchmarking
libguestfs-devel
libguestfs-gfs2
libguestfs-gobject
libguestfs-gobject-devel
libguestfs-inspect-icons
libguestfs-java
libguestfs-java-devel
libguestfs-javadoc
libguestfs-man-pages-ja
libguestfs-man-pages-uk
libguestfs-rescue
libguestfs-rsync
libguestfs-tools
libguestfs-tools-c
libguestfs-xfs
libitm-devel
libquadmath-devel
libreoffice-base
libreoffice-calc
libreoffice-core
libreoffice-data
libreoffice-draw
libreoffice-emailmerge
libreoffice-filters
libreoffice-gdb-debug-support
libreoffice-graphicfilter
libreoffice-gtk3
libreoffice-help-ar
libreoffice-help-bg
libreoffice-help-bn
libreoffice-help-ca
libreoffice-help-cs
libreoffice-help-da
libreoffice-help-de
libreoffice-help-dz
libreoffice-help-el
libreoffice-help-en
libreoffice-help-es
libreoffice-help-et
libreoffice-help-eu
libreoffice-help-fi
libreoffice-help-fr
libreoffice-help-gl
libreoffice-help-gu
libreoffice-help-he
libreoffice-help-hi
libreoffice-help-hr
libreoffice-help-hu
libreoffice-help-id
libreoffice-help-it
libreoffice-help-ja
libreoffice-help-ko
libreoffice-help-lt
libreoffice-help-lv
libreoffice-help-nb
libreoffice-help-nl
libreoffice-help-nn
libreoffice-help-pl
libreoffice-help-pt-BR
libreoffice-help-pt-PT
libreoffice-help-ro
libreoffice-help-ru
libreoffice-help-si
libreoffice-help-sk
libreoffice-help-sl
libreoffice-help-sv
libreoffice-help-ta
libreoffice-help-tr
libreoffice-help-uk
libreoffice-help-zh-Hans
libreoffice-help-zh-Hant
libreoffice-impress
libreofficekit
libreoffice-langpack-af
libreoffice-langpack-ar
libreoffice-langpack-as
libreoffice-langpack-bg
libreoffice-langpack-bn
libreoffice-langpack-br
libreoffice-langpack-ca
libreoffice-langpack-cs
libreoffice-langpack-cy
libreoffice-langpack-da
libreoffice-langpack-de
libreoffice-langpack-dz
libreoffice-langpack-el
libreoffice-langpack-en
libreoffice-langpack-es
libreoffice-langpack-et
libreoffice-langpack-eu
libreoffice-langpack-fa
libreoffice-langpack-fi
libreoffice-langpack-fr
libreoffice-langpack-ga
libreoffice-langpack-gl
libreoffice-langpack-gu
libreoffice-langpack-he
libreoffice-langpack-hi
libreoffice-langpack-hr
libreoffice-langpack-hu
libreoffice-langpack-id
libreoffice-langpack-it
libreoffice-langpack-ja
libreoffice-langpack-kk
libreoffice-langpack-kn
libreoffice-langpack-ko
libreoffice-langpack-lt
libreoffice-langpack-lv
libreoffice-langpack-mai
libreoffice-langpack-ml
libreoffice-langpack-mr
libreoffice-langpack-nb
libreoffice-langpack-nl
libreoffice-langpack-nn
libreoffice-langpack-nr
libreoffice-langpack-nso
libreoffice-langpack-or
libreoffice-langpack-pa
libreoffice-langpack-pl
libreoffice-langpack-pt-BR
libreoffice-langpack-pt-PT
libreoffice-langpack-ro
libreoffice-langpack-ru
libreoffice-langpack-si
libreoffice-langpack-sk
libreoffice-langpack-sl
libreoffice-langpack-sr
libreoffice-langpack-ss
libreoffice-langpack-st
libreoffice-langpack-sv
libreoffice-langpack-ta
libreoffice-langpack-te
libreoffice-langpack-th
libreoffice-langpack-tn
libreoffice-langpack-tr
libreoffice-langpack-ts
libreoffice-langpack-uk
libreoffice-langpack-ve
libreoffice-langpack-xh
libreoffice-langpack-zh-Hans
libreoffice-langpack-zh-Hant
libreoffice-langpack-zu
libreoffice-math
libreoffice-ogltrans
libreoffice-opensymbol-fonts
libreoffice-pdfimport
libreoffice-pyuno
libreoffice-ure
libreoffice-ure-common
libreoffice-wiki-publisher
libreoffice-writer
libreoffice-x11
libreoffice-xsltfilter
libreport
libreport-anaconda
libreport-cli
libreport-gtk
libreport-newt
libreport-plugin-bugzilla
libreport-plugin-kerneloops
libreport-plugin-logger
libreport-plugin-mailx
libreport-plugin-reportuploader
libreport-plugin-ureport
libreport-web
libreswan
libstdc++-devel
libstdc++-docs
libvirt
libvirt-admin
libvirt-bash-completion
libvirt-client
libvirt-daemon
libvirt-daemon-config-network
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-interface
libvirt-daemon-driver-network
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-scsi
libvirt-daemon-kvm
libvirt-devel
libvirt-docs
libvirt-libs
libvirt-lock-sanlock
libvirt-nss
libxml2-devel
libxslt-devel
lorax
lorax-composer
lorax-lmc-novirt
lorax-lmc-virt
lorax-templates-generic
lorax-templates-rhel
lua-guestfs
mecab-ipadic
mecab-ipadic-EUCJP
mod_ldap
mod_proxy_html
mod_session
mod_ssl
nbdkit
nbdkit-bash-completion
nbdkit-basic-filters
nbdkit-basic-plugins
nbdkit-curl-plugin
nbdkit-devel
nbdkit-example-plugins
nbdkit-gzip-plugin
nbdkit-linuxdisk-plugin
nbdkit-python-plugin
nbdkit-server
nbdkit-ssh-plugin
nbdkit-vddk-plugin
nbdkit-xz-filter
netstandard-targeting-pack-2.1
nginx
nginx-all-modules
nginx-filesystem
nginx-mod-http-image-filter
nginx-mod-http-perl
nginx-mod-http-xslt-filter
nginx-mod-mail
nginx-mod-stream
openchange
openscap
openscap-devel
openscap-engine-sce
openscap-python3
openscap-scanner
openscap-utils
open-vm-tools
open-vm-tools-desktop
open-vm-tools-sdmp
osinfo-db
PackageKit
PackageKit-command-not-found
PackageKit-cron
PackageKit-glib
PackageKit-gstreamer-plugin
PackageKit-gtk3-module
perl-Sys-Guestfs
perl-XML-Parser
pesign
pki-base
pki-base-java
pki-ca
pki-kra
pki-server
pki-symkey
pki-tools
platform-python
platform-python-debug
platform-python-devel
plymouth
plymouth-core-libs
plymouth-graphics-libs
plymouth-plugin-fade-throbber
plymouth-plugin-label
plymouth-plugin-script
plymouth-plugin-space-flares
plymouth-plugin-throbgress
plymouth-plugin-two-step
plymouth-scripts
plymouth-system-theme
plymouth-theme-charge
plymouth-theme-fade-in
plymouth-theme-script
plymouth-theme-solar
plymouth-theme-spinfinity
plymouth-theme-spinner
podman
podman-docker
podman-remote
podman-tests
policycoreutils-gui
policycoreutils-sandbox
pykickstart
python2
python2-backports
python2-debug
python2-devel
python2-libs
python2-test
python2-tkinter
python2-tools
python2-urllib3
python38-urllib3
python3-abrt
python3-abrt-addon
python3-abrt-container-addon
python3-abrt-doc
python3-blivet
python3-clang
python3-dnf-plugin-spacewalk
python3-idle
python3-ipaclient
python3-ipalib
python3-ipaserver
python3-kickstart
python3-libguestfs
python3-libreport
python3-pki
python3-rhn-check
python3-rhn-client-tools
python3-rhnlib
python3-rhnpush
python3-rhn-setup
python3-rhn-setup-gnome
python3-sanlock
python3-spacewalk-backend-libs
python3-spacewalk-usix
python3-test
python3-tkinter
rear
redhat-lsb
redhat-lsb-core
redhat-lsb-cxx
redhat-lsb-desktop
redhat-lsb-languages
redhat-lsb-printing
redhat-lsb-submod-multimedia
redhat-lsb-submod-security
redhat-rpm-config
rhn-check
rhn-client-tools
rhn-custom-info
rhnlib
rhnpush
rhnsd
rhn-setup
rhn-setup-gnome
rpmdevtools
ruby-libguestfs
sanlk-reset
sanlock
scap-security-guide
scap-security-guide-doc
scap-workbench
setroubleshoot
setroubleshoot-plugins
setroubleshoot-server
skopeo
skopeo-tests
sos-collector
spacewalk-usix
spice-streaming-agent
systemtap
systemtap-client
systemtap-devel
systemtap-exporter
systemtap-initscript
systemtap-runtime
systemtap-runtime-java
systemtap-runtime-python3
systemtap-runtime-virtguest
systemtap-runtime-virthost
systemtap-sdt-devel
systemtap-server
thunderbird
tog-pegasus
tog-pegasus-libs
tuned-gtk
tuned-utils
tuned-utils-systemtap
vim-common
vim-enhanced
vim-filesystem
vim-X11
virt-dib
virt-install
virt-manager
virt-manager-common
virt-p2v-maker
virt-v2v
WALinuxAgent
wget
xsane
xsane-common
xsane-gimp
The following binary packages from the BaseOS upstream release have been removed:
dnf-plugin-subscription-manager
grub2-ppc64le-modules
kpatch
perl-DBI
python3-subscription-manager-rhsm
python3-syspurpose
redhat-logos
redhat-logos-httpd
redhat-release-eula
rhsm-icons
subscription-manager
subscription-manager-cockpit
subscription-manager-plugin-ostree
subscription-manager-rhsm-certificates
The following binary packages from the AppStream upstream release have been removed:
insights-client
libreport-plugin-rhtsupport
libreport-rhel
libreport-rhel-anaconda-bugzilla
libreport-rhel-bugzilla
redhat-backgrounds
redhat-logos-ipa
redhat-support-lib-python
redhat-support-tool
rhsm-gtk
spice-client-win-x64
spice-client-win-x86
spice-qxl-wddm-dod
spice-vdagent-win-x64
spice-vdagent-win-x86
subscription-manager-initial-setup-addon
subscription-manager-migration
subscription-manager-migration-data
toolbox
virtio-win
virt-who
This section contains information about the removed, modified, and new source packages in this release. For information about the binary package changes, see Section A.1, “Changes to Binary Packages” .
The following source packages have been added to the BaseOS by Oracle:
bcache-tools
btrfs-progs
dtrace
kernel-uek
ocfs2-tools
oraclelinux-release
oraclelinux-release-el8
oracle-logos
The following source packages have been added to AppStream by Oracle:
dtrace
The following source packages from the BaseOS upstream release have been modified:
autofs
binutils
boom-boot
chrony
cockpit
coreutils
dbus
dracut
efibootmgr
efi-rpm-macros
firewalld
fuse
fwupd
fwupdate
gcc
glibc
grub2
grubby
iproute
iptables
iscsi-initiator-utils
kexec-tools
kmod
kmod-kvdo
ksc
libdnf
libkcapi
libreport
libxml2
libxslt
linux-firmware
mcelog
microcode_ctl
mozjs52
mozjs60
opa-ff
opa-fm
OpenIPMI
os-prober
parted
policycoreutils
polkit
python3
python-configshell
python-rtslib
python-urllib3
redhat-indexhtml
redhat-release
sanlock
selinux-policy
shim
sos
sssd
systemd
tuned
vim
The following source packages from the AppStream upstream release have been modified:
abrt
abrt-java-connector
anaconda
anaconda-user-help
binutils
buildah
clang
cloud-init
cockpit-appstream
cockpit-composer
cockpit-session-recording
compat-libgfortran-48
containernetworking-plugins
crash
cups-filters
dbus
delve
dnf-plugin-spacewalk
dotnet3.0
dotnet3.1
efi-rpm-macros
firefox
firewalld
gcc
gdb
glibc
gnome-themes-standard
golang
grafana-pcp
httpd
icedtea-web
initial-setup
ipa
ksh
libguestfs
libreoffice
libreport
libreswan
libvirt
libxml2
libxslt
lorax
lorax-templates-rhel
mecab-ipadic
nbdkit
nginx
openchange
openscap
open-vm-tools
osinfo-db
PackageKit
perl-XML-Parser
pesign
pki-core
plymouth
podman
policycoreutils
pykickstart
python2
python3
python-backports
python-blivet
python-urllib3
rear
redhat-lsb
redhat-rpm-config
rhn-client-tools
rhn-custom-info
rhnlib
rhnpush
rhnsd
rpmdevtools
sanlock
sblim-cmpi-devel
scap-security-guide
scap-workbench
setroubleshoot
setroubleshoot-plugins
skopeo
sos-collector
spacewalk-backend
spacewalk-usix
spice-streaming-agent
systemtap
thunderbird
tog-pegasus
tuned
vim
virt-manager
virt-p2v
WALinuxAgent
wget
xsane
The following source packages from the BaseOS upstream release have been removed:
kpatch
redhat-logos
subscription-manager
subscription-manager-migration-data
Copyright © 2020, Oracle and/or its affiliates. Legal Notices