Stats
Actions
Tags
Help us improve
Share bugs, ideas, or general feedback.
From rhel-knowledge-patch
Updates on RHEL 10+ breaking changes like Valkey replacing Redis, Podman v5 with pasta networking, ISC Kea DHCP, stricter TLS/FIPS policies, and software versions. Load before RHEL tasks.
npx claudepluginhub nevaberry/nevaberry-plugins --plugin rhel-knowledge-patchHow this skill is triggered — by the user, by Claude, or both
Slash command
/rhel-knowledge-patch:rhel-knowledge-patchThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Claude's baseline knowledge covers RHEL through 9.3. This skill provides changes from RHEL 10.0 (2025-06-10) onwards.
Provides Rocky Linux 10+ updates: DNF 5 modularity removal, Valkey replacing Redis, rpmsort for RPM sorting, rh_waived kernel arg. Use for package management and service migrations post-9.x.
Provides CentOS Stream 10 updates post-training cutoff: x86_64_v3 minimum, Wayland-only (Xorg removed), Valkey replaces Redis, modularity/desktop apps removed. Load before CentOS Stream work.
Provides AlmaLinux 10+ knowledge updates: Btrfs root support, x86-64-v2 builds, CRB repo enabled by default, SPICE re-enabled, frame pointers. Use when working with AlmaLinux.
Share bugs, ideas, or general feedback.
Claude's baseline knowledge covers RHEL through 9.3. This skill provides changes from RHEL 10.0 (2025-06-10) onwards.
| What Changed | Old (RHEL 9) | New (RHEL 10+) |
|---|---|---|
| Redis | redis package | Removed — use valkey 7.2 |
| Sendmail | sendmail package | Removed — use postfix |
| DHCP server | dhcp/dhclient | Removed — use dhcpcd or ISC Kea |
| Network teaming | teamd/libteam | Removed — use bonding |
| FIPS setup | fips-mode-setup | Removed — enable at install with fips=1 kernel arg |
| FIPS check | /etc/system-fips | Removed — read /proc/sys/crypto/fips_enabled |
| TLS crypto policy | RSA key exchange allowed | RSA key exchange rejected in DEFAULT policy |
| SHA-1 in TLS | Allowed in LEGACY | Disallowed even in LEGACY policy |
| OpenSSL Engines | ENGINE API available | Removed — use providers (e.g. pkcs11-provider) |
| CA trust bundle | /etc/pki/tls/certs/ca-bundle.crt | /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem |
| Installer remote | VNC (inst.vnc) | RDP (inst.rdp, inst.rdp.password) |
| Default user privs | Non-admin | Admin by default |
| GFS2 | Supported | Removed |
| Container cgroups | v1 default | v2 default |
| Rootless networking | slirp4netns | pasta |
Python 3.12, Ruby 3.3, Node.js 22, Perl 5.40, PHP 8.3, GCC 14.2, glibc 2.39, LLVM 19.1.7, Rust 1.84.1, Go 1.23, MariaDB 10.11, MySQL 8.4, PostgreSQL 16, Valkey 7.2, Apache 2.4.62, nginx 1.26, Git 2.45, OpenSSH 9.9, GnuTLS 3.8.9.
RHEL 10.1 adds: GCC Toolset 15, Python 3.13 (alternate AppStream).
Podman v5 is the default in RHEL 10. Key differences from v4:
pasta is default rootless network (not slirp4netns)podman farm build fully supported for multi-arch images.pod files)podman update changes are persistent (SQLite and BoltDB backends)containers.conf is read-only for connections/farms — use podman.connections.json--compat-volumes option for builds (VOLUME instruction handling)zstd:chunked compression for push/pullSee references/podman-v5.md for Quadlet keys and CLI option details.
RHEL 10 makes significant crypto policy changes:
sq and sqv complement GnuPGpkcs11-providerSee references/security-changes.md for details.
ChannelTimeout keyword in sshd_config for inactive channel closureEnableEscapeCommandline option in ssh_config# These packages no longer exist in RHEL 10:
# sendmail → postfix
# redis → valkey
# dhcp/dhclient → dhcpcd or ISC Kea
# teamd/libteam → use bonding
# fips-mode-setup → fips=1 kernel arg at install
# scap-workbench → oscap CLI
# oscap-anaconda-addon → RHEL image builder OpenSCAP integration
See references/removed-features.md for the full list.
inst.rdp, inst.rdp.password, inst.rdp.usernameinst.xdriver removed)/boot partition on disk images--teamslaves/--teamconfig removed (use --bondslaves/--bondopts)auth/authconfig removed (use authselect)timezone --ntpservers removed (use timesource --ntp-server)