# AlmaLinux 8.4 Release Notes

# Providing Feedback and Getting Help

Please report any issues you may encounter on the AlmaLinux Bug Tracker (opens new window). Additonally, if you feel like providing feedback, talking about anything or asking any questions you might want to check out AlmaLinux Chat (opens new window), The AlmaLinux Forums (opens new window) and The AlmaLinux Community on Reddit (opens new window).

# Changelog

  • Secure Boot is now fully supported (almbz#3 (opens new window))

  • OpenSCAP security profiles are now ready for production

  • devel repo released with extra packages and build dependencies not included in upstream distribution. This is developers only and shouldn’t be enabled on production installations

  • PowerTools repo is now disabled by default to match upstream distribution and moved to separate file almalinux-powertools.repo (almbz#74 (opens new window))

  • Added new module streams:

    • Python 3.9
    • SWIG 4.0
    • Subversion 1.14
    • Redis 6
    • PostgreSQL 13
    • MariaDB 10.5
  • Compiler Updates:

    • GCC Toolset 10
    • LLVM Toolset 11.0.0
    • Rust Toolset 1.49.0
    • Go Toolset 1.15.7

You can reference the upstream RHEL 8.4 release notes (opens new window) for a full list of changes in this release.

# Installation instructions

There are three installation ISO images available:

AlmaLinux-8.4-x86_64-boot.iso - a single network installation CD image that downloads packages over the Internet.

AlmaLinux-8.4-x86_64-minimal.iso - a minimal self-containing DVD image that makes possible offline installation.

AlmaLinux-8.4-x86_64-dvd.iso - a full installation DVD image that contains mostly all AlmaLinux packages.

The recommended way to download ISO images is using the torrent (opens new window) links. Alternatively, you can select a mirror closest to your geographic area listed on the mirrors.almalinux.org (opens new window) website (local mirrors will be a lot quicker than using repo.almalinux.org directly) and download a suitable ISO image from the 8.4/isos/x86_64/ directory, for example:

$ wget https://mirror.interserver.net/almalinux/8.4/isos/x86_64/AlmaLinux-8.4-x86_64-boot.iso

Download and import the AlmaLinux public key:

$ wget https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux
$ gpg --import RPM-GPG-KEY-AlmaLinux

Download and verify a checksums list:

$ wget https://repo.almalinux.org/almalinux/8.4/isos/x86_64/CHECKSUM

# we are looking for “Good signature”
$ gpg --verify CHECKSUM
gpg: Signature made Wed 26 May 2021 08:21:40 AM UTC using RSA key ID C21AD6EA
gpg: Good signature from "AlmaLinux <[email protected]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 5E9B 8F56 17B5 066C E920  57C3 488F CF7C 3ABB 34F8
     Subkey fingerprint: E53C F5EF 91CE B0AD 1812  ECB8 51D6 647E C21A D6EA

Verify the downloaded ISO image checksum:

# calculate the downloaded ISO SHA256 checksum
$ sha256sum AlmaLinux-8.4-x86_64-boot.iso
76e8f56892e6d90706b142868eec51b6b8c015ec3792f8d9e0730da93a2d1162  AlmaLinux-8.4-x86_64-boot.iso

# compare it with expected checksum, it should be the same
$ cat CHECKSUM | grep -E 'SHA256.*AlmaLinux-8.4-x86_64-boot.iso'
SHA256 (AlmaLinux-8.4-x86_64-boot.iso) = 76e8f56892e6d90706b142868eec51b6b8c015ec3792f8d9e0730da93a2d1162

If you've decided to use the AlmaLinux-8.4-x86_64-boot.iso image, you will need to provide the 8.4/BaseOS/x86_64/kickstart/ repository from the selected mirror as the Installation Source.

There are no extra Installation Sources required if you decided to go with either the minimal or DVD ISO images.

# Upgrade Instructions

Just run:

$ dnf upgrade -y

to update your AlmaLinux OS 8.3 stable to 8.4.
If you’re upgrading from 8.4 beta then you should run

$ dnf upgrade -y

twice.

# Known issues

  • The mirrors support implemented with help of the DNF fastestmirror plugin is known to be a bit "quirky". We are going to switch to geo-location-based mirror selection soon.
  • We don’t provide OVAL definitions for AlmaLinux updates yet so the Ensure Software Patches Installed OpenSCAP check will be marked as notchecked. However, OpenSCAP is already configured for AlmaLinux OVAL sources so no configuration will be needed when definitions become available.

# Added packages

Here is a list of added packages in comparison with upstream distribution.

Package Description
almalinux-backgrounds AlmaLinux background images.
Replaces redhat-backgrounds
almalinux-indexhtml AlmaLinux default browser page
Replaces redhat-indexhtml
almalinux-logos AlmaLinux graphics for OS
Replaces redhat-logos
almalinux-logos-httpd AlmaLinux graphics for HTTPD server
Replaces redhat-logos-httpd
almalinux-logos-ipa AlmaLinux graphics for IPA server
Replaces redhat-logos-ipa
almalinux-release AlmaLinux release package, repos, and EULA
Replaces redhat-release and redhat-release-eula

# Removed packages

Here is a list of removed packages in comparison with the upstream distribution.
AlmaLinux OS is a community distribution so all changes are subject to discussion. If you would like to do so, please join AlmaLinux Chat (opens new window) as well as filing a bug report at AlmaLinux Bug Tracker (opens new window) to discuss if you think any of the packages below should be included into the repos.

Package Description
insights-client RHEL specific package to connect to upstream vendor resources
kmod-redhat-* RHEL specific modules from Driver Update Program
kpatch* RHEL specific live patches for kernel
redhat-backgrounds RHEL specific background images
redhat-indexhtml RHEL specific default browser page
redhat-logos RHEL specific graphics for OS
redhat-logos-httpd RHEL specific graphics for HTTPD server
redhat-logos-ipa RHEL specific graphics for IPA server
redhat-release RHEL specific release package and repos
redhat-release-eula RHEL specific EULA
redhat-support-lib-python RHEL specific package to connect to upstream vendor resources
redhat-support-tool RHEL specific package to connect to upstream vendor resources
rhc RHEL specific package to connect to upstream vendor resources
rhc-worker-playbook RHEL specific package to connect to upstream vendor resources
rhsm-gtk RHEL specific GUI for Subscription Manager
rhsm-icons RHEL specific GUI for Subscription Manager
spice-client-win-x64 Contains binaries built by upstream vendor
spice-client-win-x86 Contains binaries built by upstream vendor
spice-qxl-wddm-dod Contains binaries built by upstream vendor
spice-vdagent-win-x64 Contains binaries built by upstream vendor
spice-vdagent-win-x86 Contains binaries built by upstream vendor
subscription-manager-cockpit RHEL specific Cockpit module for Subscription Manager
subscription-manager-initial-setup-addon RHEL specific initial setup addon for Subscription Manager
subscription-manager-plugin-container RHEL specific Subscription Manager plugin for upstream vendor containers
virt-who RHEL specific package to connect to upstream vendor resources
virtio-win Contain binaries built by upstream vendor

Red Hat and RHEL are trademarks or registered trademarks of Red Hat, Inc. or its subsidiaries in the United States and other countries.