Table of Contents

• Title and Copyright Information
• Preface
• 1 About Oracle Linux 9
  • System Requirements and Limitations
  • Available Architectures
  • Shipped Kernels
  • About the Unbreakable Enterprise Kernel
  • User Space Compatibility
  • Obtaining Installation Images
  • Upgrading From Previous Oracle Linux Releases
• 2 New Features and Changes
  • Installation and Boot
    • --allow-ssh Kickstart Option Enables Password-based SSH Root Logins
  • Operating System and Software Management
    • modulesync Command Replaces Certain Workflows
    • Boot Loader Menu Hidden by Default
  • Shells and Command Line Tools
    • xmlstarlet Package is Available in a Recognized Repository
    • Updated Packages
    • sysctl Introduces Same Syntax as systemd-sysctl for Handling Arguments
  • Infrastructure Services
    • chrony Uses DHCPv6 NTP Servers
    • chrony Updated to Version 4.2
    • unbound Updated to Version 1.16.2
    • Password Encryption Function Available in whois
    • frr Updated to Version 8.2.2
  • Security
    • OpenSSH Supports Setting the Minimum RSA Key Length
    • crypto-policies Enforces OpenSSH 2048-bit RSA Key Length Minimum by Default
    • OpenSSL Option Supports SHA-1 for Signatures
    • crypto-policies Supports [e-mail] Key Exchange (KEX) Method
    • Support RSA Keys Shorter Than 1023 Bits Removed in NSS
    • SCAP Security Guide Updated to 0.1.63
    • keylime Package Available
    • Rsyslog Error Files Can Be Set With Maximum Size Option
    • opencryptoki Updated to Version 3.18.0
    • fapolicyd Updated to 1.1.3
    • SELinux Policy Confines Additional Services
    • SELinux Supports the self Keyword in Type Transitions
    • SELinux User-space Packages Updated
    • SELinux Automatic Relabeling Now Parallel by Default
  • Networking
    • firewalld Updated to version 1.1.1
    • NetworkManager Displays Warnings About Unavailability of WEP Support
  • Kernel and System Libraries
    • BPF Updated to the Linux Kernel Version 5.16
    • tpm2-tools Package Updated to 5.2.1
  • High Availability and Clusters
    • pcs stonith update-scsi-devices Accepts Updates to Multipath SCSI Devices Without Restarting the Cluster
    • Pacemaker Clusters Have UUIDs
    • Pacemaker Updated to Version 2.1.4
    • Samba Not Installed With Cluster Packages
  • Dynamic Programming Languages, Web and Database Servers
    • nodejs:18 Module Stream
    • php:8.1 Module Stream Available
    • Ruby 3.1.2 Available as a New Module Stream
    • httpd Updated to Version 2.4.53
    • LimitRequestBody Directive in httpd Configuration Updated With a New Default Value
    • httpd-core Package is Available
    • pcre2 Updated to Version 10.40
  • Compilers and Development Tools
    • GCC Toolset 12 is Available
    • GDB Supports Power 10 PLT Instructions
    • Rust Toolset Updated to Version 1.62.1
    • LLVM Toolset Updated to Version 14.0.0
    • maven:3.8 Module Stream Updated
  • Virtualization
    • open-vm-tools Updated to 12.0.5
• 3 Technology Preview
  • Networking
    • systemd-resolved Service
    • KTLS
    • WireGuard
  • Kernel
    • SGX Available
    • Intel® Data Streaming Accelerator Driver
  • File Systems and Storage
    • nvme-stas Package
    • Stratis
    • NVMe-oF Discovery Service
    • DAX File System Available
  • Virtualization
    • virtio-mem for Intel® and AMD Systems
    • Virtualization for Arm Platforms
    • SEV and SEV-ES
  • Compilers and Development Tools
    • jmc-core and owasp-java-encoder
• 4 Deprecated Features
  • Installation
    • Kickstart Commands
  • Security
    • SHA-1 Algorithm
    • SCP Protocol
    • OpenSSL Cryptographic Algorithms
    • Digest-MD5
    • /etc/system-fips File
    • libcrypt.so.1
    • fapolicyd.rules File
  • Networking
    • Network Teams
    • /etc/sysconfig/network-scripts File
    • iptables Framework
  • Kernel
    • Asynchronous Transfer Mode
  • File Systems and Storage
    • lvm2-activation-generator
  • Dynamic Programming Languages, Web and Database Servers
    • Berkeley DB (libdb)
  • Desktop
    • X.org Server
    • Motif Toolkit
  • Virtualization
    • Signatures Using SHA-1
    • Virtual Machine Manager
    • Virtual Machine Snapshots
    • libvirtd Daemon
    • Virtual Floppy Driver
    • qcow2-v2 Format
  • Containers
    • Oracle Linux 9 Containers on Oracle Linux 7 Hosts
    • SHA-1 Algorithm Within Podman
• 5 Known Issues
  • Installation Issues
    • Network Installation With PXE Boot Server Fails
    • fwupd Error Reported During an Oracle Linux 9 Update
  • Virtualization Issues
    • KVM Virtual Machines Panic When Started on Oracle Linux 9 Hosts
    • Virtual Machines Fail to Start at Boot Because the virbr0 Interface Isn't Available
  • Kernel Issues
    • Kdump Might Fail on Some AMD Hardware
  • flatpak-system-helper File Access Triggers SELinux Policy Violations
  • (aarch64) Some GUI Elements Aren't Displayed During Installation and Boot Using VGA Output
  • Certain SEV Guest Configurations Might Cause Hypervisor CPU Soft-Lockup Warnings
  • Tuned Profile Packages for Oracle Cloud Infrastructure Are Moved
• 6 Package Changes From the Upstream Release
  • Changes to Binary Packages
    • Added Binary Packages for BaseOS by Oracle
    • Added Binary Packages for AppStream by Oracle:
    • Added Binary Packages for CodeReady Linux Builder by Oracle
    • Modified BaseOS Binary Packages
    • Modified Binary Packages for CodeReady Linux Builder by Oracle
    • Modified AppStream Binary Packages
    • Removed BaseOS Binary Packages
    • Removed AppStream Binary Packages
    • Removed CodeReady Linux Builder Binary Packages
  • Changes to Source Packages
    • Added Source Packages for BaseOS by Oracle
    • Added Source Packages for AppStream by Oracle
    • Modified BaseOS Source Packages
    • Modified AppStream Source Packages
    • Modified Source Packages for CodeReady Linux Builder by Oracle
    • Removed BaseOS Source Packages
    • Removed AppStream Source Packages