Table of Contents
- Title and Copyright Information
- Preface
- 1 About Oracle Linux 10
-
2
New Features and Changes
-
Installation and Boot
- Image Builder Disk Images Have Predictable Network Interface Names
- New Users Made Administrators by Default in the Installer
- NVMe Over Fabrics Devices Available in Installer
- Remote Desktop Protocol Replaces Virtual Network Computing
- Enhanced Kickstart Provides Encrypted DNS Configuration
- Disk Images Can Have Consistent Default Locale and Timezone
- grub2 Released at Version 2.12
-
Operating System and Software Management
- dnf-plugins-core Released at Version 4.7.0
- Filelists Metadata No Longer Downloaded
- Consolidation of PGP Key Verification in DNF and RPM
- createrepo_c Package Added
- Improved Package Upgrades With DNF and Related Tools
- RPM Database Moved for Simplified System Snapshots
- Enhanced Control Over Stale Processes With the --exclude-services Flag
- Shells and Command Line Tools
-
Compilers and Development Tools
- GCC Released at Version 14.2
- GCC Released at 14 x86-64-v3 Default
- annobin Released at Version 12.55
- binutils Released at Version 2.41
- Gnu ld linker --section-ordering-file option
- glibc Released at Version 2.39
- glibc AMD Zen 3 and 4 Optimizations
- glibc Intel APX-enabled Dynamic Linking of Functions
- GDB Released at Version 14.2
- elfutils Released at Version 0.192
- SystemTap Released at Version 5.2
- Valgrind Released at Version 3.24.0
- Dyninst Version 12.3.0 Available
- libabigail Released at Version 2.6
- LLVM Toolset Released at Version 19.1.7
- llvm-doc Package Update
- Rust Toolset Released at Version 1.84
- Go Toolset Released at Version 1.23
- PCP Released at Version 6.3.2
- Grafana-PCP Plugin Update
- Valkey Replaces Redis
- zlib-ng-compat Replaces zlib
- SWIG Released at Version 4.2.1
- OpenJDK Released at Version 21
- debugedit Version 5.1
- cmake 3.30.5
- .NET 9.0 and 8.0
- Dynamic Programming Languages, Web and Database Servers
- File Systems and Storage
-
High Availability and Clusters
- Pacemaker Released at Version 2.1.8
- pcs status wait Command Added
- --output-format Option Available for pcs Commands
- HA Cluster Management Web UI
- pcs Validation on Resource Creation and Update
- pcs Confirmation Option For Destructive Actions
- pcs Command to Query the Status of Resources
- Deleting Several Resources With a Single pcs Command
- Creating Globally Unique Cluster Resource Clones
- Updated Date Specification and Duration Options in Pacemaker Rules
- Infrastructure Services
-
Networking
- Enable Duplicate Address Detection for IPv4 in NetworkManager
- xdp-tools Released at Version 1.5.1
- nftables Released at Versions 1.1.1
- iptables Released at Version 1.8.11
- firewalld Released at Version 2.3.0
- nmstate Includes the require-id-on-certificate Setting for Libreswan Configuration
- Automatic Reset for Problematic SR-IOV Virtual Functions in i40e Driver for RHCK
-
Security
- keylime-agent-rust Released at Version 0.2.7
- Libreswan Released at Version 5.2
- Libreswan Improved Adding Connection Speed
- OpenSSH Released at Version 9.9
- libkcapi Released at Version 1.5.0
- p11-kit Released at Version 0.25.5
- setools Released at Version 4.5.0
- NSS Released at Version 3.101
- gnutls Released at Version 3.8.9
- clevis Released at Version 21
- jose Released at Version 14
- openCryptoki Released at Version 3.24.0
- SELinux Userspace Component Updated in Version 3.8
- polkit Released at Version 125
- SCAP Security Guide Released at Version 0.1.76
- OpenSCAP Released at Version 1.4.1
- libssh Released at Version 0.11.1
- OpenSC Released at Version 0.26.1
- Rsyslog Released at Version 8.2412.0
- setroubleshoot Released at Version 3.3.35
- Keylime Released at Version 7.12
- nettle Library Released at Version 3.10.1
- OpenSSL pkcs11-provider Hardware Tokens
- pkcs11-provider New Custom Configurations
- /var/run = /run in SELinux Policy
- Stricter SSH Host Key Permissions
- pkeyutl Encapsulation and Decapsulation
- OpenSSL New no-atexit Option
- OpenSSL FIPS-Compliant PKCS #12 Files
- GnuTLS Certificate Compression
- DEFAULT Cryptographic Policy Includes New Scopes
- FIPS Mode OpenSSH Generates RSA Keys by Default
- NSS FIPS-Compliant PKCS #12 Files
- New SELinux Policy libvirt Services Rules
- SELinux Policy Confinement for More Services
- dmesg Hardening for Administrator Privileges
- Flatpak Applications can now use Smart Card Functionality (opensc)
- tpm2-openssl New Package
- Enhanced Audit Event Filtering and Forwarding
- Optimized SELinux Policy Packaging for EPEL
- Group Merging Added in authselect
- authselect Is a Required Component of PAM
- authselect Local Profile Replaces SSSD Files Provider
- New SSSD exop_force Option
- SSSD can Run With Reduced Privileges
- KnownHostsCommand Added to SSSD
- Cockpit Web Console
-
Containers
- Podman Released at Version 5.4
- Buildah Artifact Manifests
- Disable Podman Healthcheck Events
- Persistent Changes to Resources
- Default Settings for Podman Version 5.0
- Handling Compatible Volumes
- podman pod inspect Returns a JSON Array
- Customizable Healthcheck Output in Podman
- Container Storage Configuration File Moved
- Support
-
Installation and Boot
- 3 Deprecated Features
-
4
Removed Features
-
Installer and Image Creation
- Authconfig Commands
- Inst.xdriver and Inst.usefbx Options
- Capturing Screenshots from the Anaconda GUI
- Removed Boot Options
- Automatic Bug Reporting System
- Timezone Kickstart Command Options
- Logging Kickstart Command Parameter
- Support for %anaconda Kickstart Command
- Pwpolicy Kickstart Command
- Support for Adding Additional Repositories from GUI
- Support for LUKS Version Selection from Anaconda
- Initial-Setup Package
- Anaconda Built-in Help
- Teaming Options from the Network Kickstart Command
- NVDIMM Reconfiguration Support during the Installation Process
- Options from %packages
-
Security
- Scap-Workbench
- Oscap-Anaconda-Addon
- DSA and SEED Algorithms
- Fips-Mode-Setup
- /etc/system-fips
- TLS HeartBeat
- SRP Authentication
- Keylime HTTP
- DEFAULT Cryptographic Policy
- Ca-Certificates Trust Store
- LEGACY Cryptographic Policy
- Pam_Ssh_Agent_Auth
- OpenSSL SHA-1 in TLS
- Stunnel OpenSSL ENGINE API
- OpenSSL Engines
- Libsss_Simpleifp Subpackage
- SSSD Files Provider
- Ad-Allow-Remote-Domain-Local-Groups Option
- Reconnection_Retries Option
- Software Management
- Infrastructure Services
- Networking
- Kernel
- File Systems and Storage
- High Availability and Clusters
- Compilers and Development Tools
- Containers
-
Installer and Image Creation
- 5 Known Issues
-
6
Package Changes From the Upstream Release
-
Changes to Binary Packages
- Added Binary Packages for BaseOS by Oracle
- Added Binary Packages for AppStream by Oracle
- Added Binary Packages for CodeReady Linux Builder by Oracle
- Modified BaseOS Binary Packages
- Modified Binary Packages for CodeReady Linux Builder by Oracle
- Modified AppStream Binary Packages
- Removed BaseOS Binary Packages
- Removed AppStream Binary Packages
- Removed CodeReady Linux Builder Binary Packages
- Changes to Source Packages
-
Changes to Binary Packages