Skip to navigationSkip to content

Featured links

  • Support
  • Console
  • Developers
  • Start a trial
    • For customers
      • Customer support
      • Subscription management
      • Support Cases
      • Red Hat Ecosystem Catalog
      • Find a partner
    • For partners
      • Partner portal
      • Partner support
      • Become a partner
    • Try, buy, & sell
      • Red Hat Store
      • Contact Sales
      • Start a trial
    • Learning resources
      • Training and certification
      • Hybrid cloud learning hub
      • Interactive labs
      • Learning community
      • Red Hat TV
      • Architecture Center
    • Open source communities
      • Global advocacy
      • How we contribute
Red Hat Documentation
  • AI
  • Learn
  • Documentation
  • Resources
SupportConsoleDevelopersStart a trialContact

Red Hat Enterprise Linux

This documentation may not be available for all versions.

View the product page for all versions

Table of contents

What's new
  • Red Hat Enterprise Linux 10.3 release notes
    • Overview of Red Hat Enterprise Linux 10.3
      • Major changes in RHEL 10.3
      • In-place upgrade
      • Red Hat Customer Portal Labs
      • Additional resources
    • Architectures for Red Hat Enterprise Linux 10.3
    • Distribution of content in RHEL 10
      • Installation
      • Repositories
      • Application Streams
    • Important changes to external kernel parameters
      • New kernel parameters
      • Updated kernel parameters
      • Removed kernel parameters
    • Device drivers
      • New drivers
      • Updated drivers
    • New features and enhancements
      • Installer and image creation
      • Security
      • RHEL for Edge
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • Boot loader
      • File systems and storage
      • High availability and clusters
      • Dynamic programming languages, web and database servers
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Desktop
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • Supportability
      • Containers
      • RHEL Lightspeed
    • Technology Preview features
      • Security
      • Dynamic programming languages, web and database servers
      • Identity Management
      • Desktop
      • AI accelerator driver availability
      • Technology Preview features identified in RHEL 10.2
      • Technology Preview features identified in RHEL 10.1
      • Technology Preview features identified in RHEL 10.0
      • Technology Preview features identified in previous releases
    • Developer Preview features
      • RHEL Lightspeed
      • Developer Preview features identified in RHEL 10.2
      • Developer Preview features identified in RHEL 10.1
    • Removed features
      • Kernel
      • Desktop
    • Deprecated features
      • RHEL for Edge
      • Kernel
      • High availability and clusters
      • Compilers and development tools
      • RHEL Lightspeed
      • Deprecated features identified in RHEL 10.2
      • Deprecated features identified in RHEL 10.1
      • Deprecated features identified in RHEL 10.0
      • Deprecated features identified in previous releases
      • Deprecated packages
    • Known issues
      • Installer and image creation
      • Kernel
      • File systems and storage
      • Compilers and development tools
      • Virtualization
      • Known issues identified in RHEL 10.2
      • Known issues identified in RHEL 10.1
      • Known issues identified in RHEL 10.0
      • Known issues identified in previous releases
    • Fixed issues
      • Installer and image creation
      • Security
      • Software management
      • Shells and command-line tools
      • RHEL for Edge
      • Networking
      • Kernel
      • File systems and storage
      • High availability and clusters
      • Identity Management
      • SSSD
      • Desktop
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Supportability
      • Containers
      • Virtualization
    • Available BPF features
    • List of tickets by component
    • Revision history
  • Red Hat Enterprise Linux 10.2 release notes
    • Overview of Red Hat Enterprise Linux 10.2
      • Major changes in RHEL 10.2
    • Architectures for Red Hat Enterprise Linux 10.2
    • Distribution of content in RHEL 10
      • Installation
      • Repositories
      • Application Streams
    • Important changes to external kernel parameters
      • New kernel parameters
      • Updated kernel parameters
      • Removed kernel parameters
      • New sysctl parameters
      • Updated sysctl parameters
    • Device drivers
      • New drivers
      • Updated drivers
    • New features and enhancements
      • Installer and image creation
      • Security
      • RHEL for Edge
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • Boot loader
      • File systems and storage
      • High availability and clusters
      • Dynamic programming languages, web and database servers
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Desktop
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • Supportability
      • Containers
      • RHEL Lightspeed
    • Technology Preview features
      • Installer and image creation
      • File systems and storage
      • Identity Management
      • SSSD
      • Desktop
      • Virtualization
      • Containers
      • Technology Preview features identified in RHEL 10.1
      • Technology Preview features identified in RHEL 10.0
      • Technology Preview features identified in previous releases
    • Developer Preview features
      • Installer and image creation
      • RHEL Lightspeed
      • Developer Preview features identified in RHEL 10.1
    • Removed features
      • Security
      • Infrastructure services
      • Identity Management
      • SSSD
    • Deprecated features
      • High availability and clusters
      • Containers
      • Kernel
      • Deprecated features identified in RHEL 10.1
      • Deprecated features identified in RHEL 10.0
      • Deprecated features identified in previous releases
      • Deprecated packages
    • Known issues
      • Installer and image creation
      • Security
      • RHEL for Edge
      • Software management
      • Networking
      • Kernel
      • File systems and storage
      • Dynamic programming languages, web and database servers
      • Identity Management
      • Virtualization
      • RHEL in cloud environments
      • Containers
      • RHEL Lightspeed
      • Known issues identified in RHEL 10.1
      • Known issues identified in RHEL 10.0
      • Known issues identified in previous releases
    • Fixed issues
      • Installer and image creation
      • Security
      • Software management
      • Shells and command-line tools
      • Networking
      • Kernel
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • Supportability
      • Containers
      • RHEL Lightspeed
    • Available BPF features
    • List of tickets by component
    • Revision history
  • Red Hat Enterprise Linux 10.1 release notes
    • Overview
      • Major changes in RHEL 10.1
    • Architectures
    • Distribution of content in RHEL 10
      • Installation
      • Repositories
      • Application Streams
    • Important changes to external kernel parameters
      • New kernel parameters
      • Updated kernel parameters
      • Updated sysctl parameters
    • Device drivers
      • New drivers
      • Updated drivers
    • New features and enhancements
      • Installer and image creation
      • Security
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • Boot loader
      • File systems and storage
      • High availability and clusters
      • Dynamic programming languages, web and database servers
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Desktop
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Supportability
      • Containers
      • RHEL Lightspeed
      • AI accelerator driver availability
    • Technology Preview features
      • Installer and image creation
      • Software management
      • Shells and command-line tools
      • Kernel
      • File systems and storage
      • Dynamic programming languages, web and database servers
      • Compilers and development tools
      • Identity Management
      • Virtualization
      • Containers
      • Technology Preview features identified in previous releases
    • Developer Preview features
      • RHEL Lightspeed
    • Removed features
      • Installer and image creation
      • Networking
      • Compilers and development tools
      • Identity Management
      • Red Hat Enterprise Linux System Roles
      • Virtualization
    • Deprecated features
      • Installer and image creation
      • Security
      • Software management
      • Infrastructure services
      • Networking
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • Containers
      • Deprecated features identified in RHEL 10.0
      • Deprecated features identified in previous releases
    • Deprecated packages
    • Known issues
      • Installer and image creation
      • Security
      • Shells and command-line tools
      • Infrastructure services
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • Dynamic programming languages, web and database servers
      • Identity Management
      • SSSD
      • Desktop
      • Graphics infrastructures
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Containers
      • RHEL Lightspeed
      • Known issues identified in previous releases
    • Fixed issues
      • Installer and image creation
      • Security
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • Boot loader
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Supportability
      • Containers
      • RHEL Lightspeed
    • Available BPF features
    • List of tickets by component
    • Revision history
  • Red Hat Enterprise Linux 10.0 release notes
    • Overview
      • Major changes in RHEL 10.0
    • Architectures
    • Distribution of content in RHEL 10
      • Installation
      • Repositories
      • Application Streams
    • Important changes to external kernel parameters
      • New kernel parameters
      • Updated kernel parameters
      • Removed kernel parameters
      • New sysctl parameters
      • Updated sysctl parameters
    • Device drivers
      • New drivers
      • Updated drivers
    • New features and enhancements
      • Installer and image creation
      • Security
      • RHEL for Edge
      • Subscription management
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • Boot loader
      • File systems and storage
      • High availability and clusters
      • Dynamic programming languages, web and database servers
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Desktop
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Supportability
      • Containers
      • Lightspeed
    • Technology Preview features
      • Security
      • Software management
      • Kernel
      • File systems and storage
      • Compilers and development tools
      • Identity Management
      • Virtualization
      • Containers
      • Technology Preview features identified in previous releases
    • Removed features
      • Installer and image creation
      • Security
      • Subscription management
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Desktop
      • Graphics infrastructures
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Containers
    • Deprecated features
      • Installer and image creation
      • Security
      • Networking
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • Containers
      • Deprecated features identified in previous releases
    • Deprecated packages
    • Known issues
      • Installer and image creation
      • Security
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Kernel
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Desktop
      • Graphics infrastructures
      • The web console
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Containers
      • Lightspeed
      • Known issues identified in previous releases
    • Fixed issues
      • Installer and image creation
      • Security
      • Software management
      • Shells and command-line tools
      • Infrastructure services
      • Networking
      • Boot loader
      • File systems and storage
      • High availability and clusters
      • Compilers and development tools
      • Identity Management
      • SSSD
      • Red Hat Enterprise Linux System Roles
      • Virtualization
      • RHEL in cloud environments
      • Supportability
      • Containers
    • Available BPF features
    • List of tickets by component
    • Revision history
Get started
  • Get started as a RHEL desktop user
    • Overview of GNOME interfaces
      • GNOME interfaces and display protocols
      • GNOME Standard
      • GNOME Classic
      • Select a GNOME interface
    • Register the system for updates by using GNOME
      • Register a system by using an activation key on GNOME
      • Unregister the system by using GNOME
    • Launch applications in GNOME
      • Launch an application in the standard GNOME session
      • Launch an application in GNOME Classic
      • Launch an application in GNOME by using a command
    • Configure applications to start automatically on login
    • Search for files in GNOME
      • Perform a basic file search
      • Perform an advanced file search
    • Bookmark files and locations
      • Add a bookmark
      • Remove a bookmark
      • Rename a bookmark
      • Add a bookmark for all users
    • Record your screen in GNOME
    • Enable accessibility for visually impaired users
      • Components that provide accessibility features
      • Enable the Accessibility menu
      • Enable the screen reader
      • Enable a Braille display device
Plan
  • Monitor infrastructure lifecycle and plan future transitions
    • Dynamically create a digital roadmap to manage RHEL systems
      • Access the Red Hat Lightspeed for RHEL planning feature
    • Use Red Hat Enterprise Linux Lightspeed for RHEL planning dashboard
      • The Life Cycle page
      • The Roadmap page
  • Plan and prepare for RHEL installation
    • System requirements and supported architectures
      • Supported installation targets
      • Disk and memory requirements
      • Graphics display resolution requirements
      • UEFI Secure Boot and Beta release requirements
    • The value of registering your RHEL system to Red Hat
    • Installation media customization
    • Image mode for RHEL
      • Overview of image mode for RHEL
      • Deployment modes for image mode in RHEL
      • Available local container registries options for image mode for RHEL
  • Validate environment readiness for RHEL 10
    • Key resources for evaluating an upgrade to RHEL 10
    • Architectures
    • Software repositories
    • Application Streams
    • Containers
    • Compilers and development tools
    • Desktop
    • Dynamic programming languages, web servers, database servers
    • RHEL for Edge
    • File systems and storage
    • Hardware enablement
      • Deprecated hardware support
      • Unmaintained hardware support
      • Removed hardware support
    • High availability and clusters
    • Identity Management
    • Infrastructure services
    • Installer and image creation
      • Graphical user interface
      • Kickstart changes
      • Image creation
    • Kernel
      • Notable changes to kernel
      • Notable changes to boot loader
    • The command-line assistant
    • Network considerations
    • Performance
    • Security
      • Security compliance changes
      • Changes to cryptographic components
      • Changes to SELinux
    • Shells and command-line tools
      • Notable changes to system management
      • Notable changes to command line tools
    • Software management
      • Notable changes to DNF
      • Notable changes to createrepo_c
      • Notable changes to RPM
    • System roles
    • Virtualization
    • The web console
    • Changes to packages
      • New packages
      • Package replacements
      • Moved packages
      • Removed packages
      • Packages with removed support
  • Package manifest
    • Red Hat Enterprise Linux 10 content
    • Repositories
      • The BaseOS repository
      • The AppStream repository
      • The CodeReady Linux Builder repository
      • The Supplementary repository
      • The Extensions repository
      • The High Availability add-on
    • Revision History
Install
  • Build, deploy, and manage RHEL in image mode
    • Image mode for RHEL
      • Overview of image mode for RHEL
      • Deployment modes for image mode in RHEL
      • Available local container registries options for image mode for RHEL
    • Build and test RHEL bootc images
      • bootc-based images from a Containerfile
      • Reproducible container image builds with container tools
      • Build a container image
      • Run a container image
      • Override the version of bootc images
      • Benefits of custom bootable images with multi-stage builds
      • Push a container image to the registry
      • Use the command-line assistant component functions in image mode for RHEL
    • Adapt RPM packages for image mode builds
      • RPM build environment differences in image mode
      • Common RPM scriptlet patterns that fail in image mode builds
      • Adapt RPM scriptlets for bootc image-based builds
      • Verify RPM compatibility with bootc image builds
      • Checklist for adapting RPMs for image mode
    • Build and manage logically bound images
      • Introduction to logically bound images
      • Create logically bound images
    • Build and manage physically bound images
      • Introduction to physically bound images
      • Create physically bound images by using system roles
    • Create bootc-compatible base disk images by using image-builder-cli
      • About image mode for RHEL for image-builder-cli
      • Install image-builder-cli
      • Supported image customizations for a configuration file
      • Create QEMU disk images by using image-builder-cli
      • Create VMDK images by using image-builder-cli
      • Create GCE images by using image-builder-cli
      • Create AMI images by using image-builder-cli and uploading them to AWS
      • Create raw disk images by using image-builder-cli
      • Create bootable ISOs with Kickstart and partitioning
      • Use image-builder-cli to build ISO images with a Kickstart file
      • Build stateless PXE images with image-builder-cli
      • Build bootc images in offline and air-gapped environments
    • Best practices for running containers by using local sources
      • Import custom certificate to a container by using bind mounts
      • Import custom certificates to an image by using a Containerfile
    • Deploy RHEL bootc images
      • Prepare registry access and authentication
      • Deploy a container image by using a single command
      • Deploy bootc images to cloud and virtualized environment
      • Deploy bootc images to bare metal and network infrastructure
      • Deploy bootc images to air-gapped and custom disk structures
    • Create bootc images from scratch
      • Use pinned content to build images
      • Build a base image up from minimal
      • Build required privileges
      • Generate your bootc images from scratch
      • Optimize container images to a smaller version
    • Test and deploy bootable containers with bcvk
      • The bootc container virtualization kit
      • Install the bcvk tool
      • Discover bootable container images
      • Manage ephemeral virtual machines
      • Configure persistent virtualization with libvirt and bcvk
      • Generate disk images from bootc containers
    • Harden and secure bootc images
      • Enable FIPS mode in a bootc image build
      • Security hardening and compliance of bootable images
    • Cryptographic seal of bootc images
      • Understand cryptographic sealing of bootc images
      • The UEFI Secure Boot key hierarchy
      • Generate Secure Boot keys for image sealing
      • Seal a bootc container image with Secure Boot keys
      • Deploy sealed bootc images
      • Configure sealed bootc images with transient /etc and /var
      • Manage sealed image lifecycle operations
    • Create root level directories and symlinks at runtime with image mode for RHEL
      • The transient-ro=true option
      • Create dynamic mountpoints with transient-ro
    • Manage RHEL bootc images
      • Switch the container image reference
      • Add or changing content in the bootc image initramfs
      • Perform manual updates from an installed operating system
      • Perform rollbacks from an updated operating system
      • Deploy updates to system groups
      • Check inventory health
      • Automation and GitOps
      • Perform a factory reset of an image mode system
    • Manage kernel arguments in bootc systems
      • Add support to inject kernel arguments by using bootc
      • Modify kernel arguments by using bootc install configurations
      • Inject kernel arguments in the Containerfile
      • Inject kernel arguments at installation time
      • Add install-time kernel arguments by using image-builder-cli
      • Post-installation kernel argument changes with kargs.d
      • Edit kernel arguments in bootc systems
    • Integrate third-party drivers in image mode for RHEL
      • Differences between package mode and image mode for third-party providers
      • Deployment workflow for image mode drivers
      • Integrate a driver by using a Containerfile
    • Manage file systems in image mode for RHEL
      • Overview of physical and logical root with /sysroot
      • Version selection and bootup
    • Configure bootc images on first boot by using Ignition
      • About dynamic provisioning in bootc by using Ignition
      • About Ignition integration layers for bootc
      • Required packages for Ignition support
      • Ignition platform parameters
      • Enable Ignition in bootc container images
      • Create an Ignition configuration for bare-metal deployments
      • Create an Ignition configuration for cloud deployments
      • Ignition configuration options
      • Ignition troubleshooting
    • Perform a soft reboot of a bootc system
      • Overview of performing soft reboots to RHEL bootc images
      • Soft reboot behavior in package and image mode
      • Initiate a soft reboot
      • Known limitations of soft reboots
    • Manage users, groups, SSH keys, and secrets in image mode for RHEL
      • Users and groups configuration
      • Methods for injecting secrets into bootc systems
      • Inject secrets in image mode for RHEL
      • Inject pull secrets for registries and disable TLS
      • Configure container pull secrets
    • Apply host settings on a bootc system
      • Transient runtime reconfiguration
      • DNF with image mode for RHEL
      • Network configuration
      • Set a hostname in image mode for RHEL
      • Configure proxied internet access in image Mode for RHEL
    • Get the source code and contribute to bootc upstream
      • Source code of bootc container images
      • Contribute to bootc
  • Install RHEL on local systems
    • Create a bootable installation medium for RHEL
      • Installation boot media options
      • Bootable DVDs
      • Create a bootable USB device on Linux
      • Create a bootable USB device on Windows
      • Create a bootable USB device on macOS
    • Install RHEL as a virtual machine
    • Boot the installation media
    • Optional: Customize boot options
      • Boot options
      • Edit the GRUB2 menu
    • Update drivers during installation
      • Overview
      • Types of driver update
      • Prepare a driver update CD or DVD
      • Prepare a driver update USB drive
      • Perform an automatic driver update
      • Perform an assisted driver update
      • Perform a manual driver update
      • Disable a driver
    • Consoles and logging during installation
    • Customize the system in the installer
      • Set the installer language
      • Configure the storage devices
      • Advanced storage options
      • Configure the root account and create users
      • Manual partitioning requirements and planning
      • File system and partition creation
      • Software RAID and LVM volume configuration
      • Configure the base environment and additional software
      • Optional: Configure the network and host name
      • Optional: Configure the keyboard layout
      • Optional: Configure the language support
      • Optional: Configure the date and time-related settings
      • Optional: Subscribe to and activate Red Hat Lightspeed
      • Optional: Use network-based repositories
      • Optional: Configure the Kdump kernel crash-dumping mechanism
    • Register your RHEL system
      • Register a system by using the RHC client
      • Register your system by using the subscription manager
      • Register RHEL 10 by using the installer GUI
      • Registration Assistant
    • Configure System Purpose with subscription-manager CLI
    • Post-installation security hardening
    • Change a subscription service
      • Unregister from Subscription Management Server
      • Unregister by using the command line
      • Unregister by using the Subscription Manager user interface
      • Unregister from Satellite Server
    • Change basic environment settings
      • Configure the keyboard layout
      • Configure the date, time and timezone settings manually
      • Configure the system locale
    • Tools and tips for troubleshooting and bug reporting
      • Dracut
      • Installation log files
      • Verify boot media
      • Solutions for display issues
    • Hardware and storage troubleshooting after installation
      • Disks are not detected
      • Cannot boot with a RAID card
      • Set memory manually if RAM is not recognized
      • System is displaying signal 11 errors
      • Unable to IPL from network storage on IBM Power Systems
    • Boot failures, display issues, and rescue procedures
      • Resume an interrupted download attempt
      • Graphical boot sequence is not responding
      • ip= boot option returns an error
      • Troubleshoot graphical installation on iLO or iDRAC devices
      • Rootfs image is not initramfs
      • Recover a system with rescue mode
    • Boot options reference
      • Installation source boot options
      • Network boot options
      • Console boot options
      • Debug boot options
      • Storage boot options
  • Install RHEL on remote or headless systems
    • RHEL installation with Satellite Server
    • Prepare network-based repositories
      • Create an installation source on an NFS server
      • Create an installation source by using HTTP or HTTPS
      • Create an installation source by using FTP
    • Prepare a UEFI HTTP installation source
      • Network installation overview
      • Configure the DHCPv4 server for network boot
      • Configure the DHCPv6 server for network boot
      • Configure the HTTP server for HTTP boot
    • Prepare a PXE installation source
      • Network installation overview
      • Configure the DHCPv4 server for network boot
      • Configure the DHCPv6 server for network boot
      • Configure a TFTP server for BIOS-based clients
      • Configure a TFTP server for UEFI-based clients
    • RHEL installations on IBM Power Servers
      • Supported IBM Power Servers
      • Overview of installation on PowerVM LPAR with the HMC
    • Plan and prepare a 64-bit IBM Z environment
      • Plan installation on 64-bit IBM Z
      • Boot media compatibility for IBM Z servers
      • Supported environments and components for IBM Z servers
      • Overview of installation process on 64-bit IBM Z servers
      • Boot media for installing RHEL on 64-bit IBM Z servers
      • Prepare an installation in a z/VM guest virtual machine
    • Boot parameters and configuration files for RHEL on 64-bit IBM Z
      • Customization of boot parameters
      • Parameters and configuration files on 64-bit IBM Z
    • Install RHEL as a virtual machine
    • Boot the installation media
      • Boot the installation from a network by using HTTP
      • Boot the installation from a network by using PXE
      • Boot the installation on IBM Z to install RHEL in an LPAR
      • Boot the installation on IBM Z to install RHEL in z/VM
    • Optional: Customize boot options
      • Boot options
      • Edit the GRUB2 menu
    • Update drivers during installation
      • Overview
      • Types of driver update
      • Prepare a driver update CD or DVD
      • Prepare a driver update USB drive
      • Perform an automatic driver update
      • Perform an assisted driver update
      • Perform a manual driver update
      • Disable a driver
    • Prepare a remote installation by using RDP
      • Remote desktop protocol overview
      • Considerations for using remote desktop protocol
    • Start a remote installation by using the Remote Desktop Protocol
      • Perform a remote RHEL installation with an RDP client
      • Perform a remote RHEL installation by using RDP on IBM Z
    • Consoles and logging during installation
    • Customize the system in the installer
      • Set the installer language
      • Configure the storage devices
      • Advanced storage options
      • Configure the root account and create users
      • Manual partitioning requirements and planning
      • File system and partition creation
      • Software RAID and LVM volume configuration
      • Configure the base environment and additional software
      • Optional: Configure the network and host name
      • Optional: Configure the keyboard layout
      • Optional: Configure the language support
      • Optional: Configure the date and time-related settings
      • Optional: Subscribe to and activate Red Hat Lightspeed
      • Optional: Use network-based repositories
      • Optional: Configure the Kdump kernel crash-dumping mechanism
    • Register your RHEL system
      • Register a system by using the RHC client
      • Register your system by using the subscription manager
      • Register RHEL 10 by using the installer GUI
      • Registration Assistant
    • Configure System Purpose with subscription-manager CLI
    • Post-installation security hardening
    • Change a subscription service
      • Unregister from Subscription Management Server
      • Unregister by using the command line
      • Unregister by using the Subscription Manager user interface
      • Unregister from Satellite Server
    • Change basic environment settings
      • Configure the keyboard layout
      • Configure the date, time and timezone settings manually
      • Configure the system locale
    • Configure a Linux instance on 64-bit IBM Z
      • DASDs on a z/VM system
      • Set DASDs online dynamically
      • Prepare a new DASD with low-level formatting
      • Persistent DASD configuration
      • DASDs that are part of the root file system
      • DASDs that are not part of the root file system
      • FCP LUNs that are part of the root file system
      • FCP LUNs that are not part of the root file system
      • Configure IBM Z network devices for the network root file system
    • Tools and tips for troubleshooting and bug reporting
      • Dracut
      • Installation log files
      • Verify boot media
      • Solutions for display issues
    • Hardware and storage troubleshooting after installation
      • Disks are not detected
      • Cannot boot with a RAID card
      • Set memory manually if RAM is not recognized
      • System is displaying signal 11 errors
      • Unable to IPL from network storage on IBM Power Systems
    • Boot failures, display issues, and rescue procedures
      • Resume an interrupted download attempt
      • Graphical boot sequence is not responding
      • ip= boot option returns an error
      • Troubleshoot graphical installation on iLO or iDRAC devices
      • Rootfs image is not initramfs
      • Recover a system with rescue mode
    • Boot options reference
      • Installation source boot options
      • Network boot options
      • Console boot options
      • Debug boot options
      • Storage boot options
  • Automatically install RHEL at scale
    • Create a bootable installation medium for RHEL
      • Installation boot media options
      • Bootable DVDs
      • Create a bootable USB device on Linux
      • Create a bootable USB device on Windows
      • Create a bootable USB device on macOS
    • Prepare network-based repositories
      • Create an installation source on an NFS server
      • Create an installation source by using HTTP or HTTPS
      • Create an installation source by using FTP
    • Prepare a UEFI HTTP installation source
      • Network installation overview
      • Configure the DHCPv4 server for network boot
      • Configure the DHCPv6 server for network boot
      • Configure the HTTP server for HTTP boot
    • Prepare a PXE installation source
      • Network installation overview
      • Configure the DHCPv4 server for network boot
      • Configure the DHCPv6 server for network boot
      • Configure a TFTP server for BIOS-based clients
      • Configure a TFTP server for UEFI-based clients
    • Plan and prepare a 64-bit IBM Z environment
      • Plan installation on 64-bit IBM Z
      • Boot media compatibility for IBM Z servers
      • Supported environments and components for IBM Z servers
      • Overview of installation process on 64-bit IBM Z servers
      • Boot media for installing RHEL on 64-bit IBM Z servers
      • Prepare an installation in a z/VM guest virtual machine
    • Boot parameters and configuration files for RHEL on 64-bit IBM Z
      • Customization of boot parameters
      • Parameters and configuration files on 64-bit IBM Z
    • Automated installation workflow
    • Create Kickstart files
      • Create a Kickstart file with the Kickstart Generator
      • Create a Kickstart file from a manual installation
      • Convert a Kickstart file from a previous RHEL installation
      • Custom image creation with Image Builder
    • Add the Kickstart file to a UEFI HTTP or PXE installation source
      • Share the installation files on an NFS server
      • Share the installation files on an HTTP or HTTPS server
      • Share the installation files on an FTP server
    • Semi-automated installations: Make Kickstart files available to the RHEL installer
      • Share the installation files on a local volume
      • Share installation files on a local volume for auto-detection
    • Start Kickstart installations
      • Start an automated Kickstart installation over PXE or HTTP boot
      • Start an automated Kickstart installation from a local volume
      • Boot the installation on IBM Z to install RHEL in an LPAR
      • Boot the installation on IBM Z to install RHEL in z/VM
    • Consoles and logging during installation
    • Install Kernel-64k on ARM by using the command line
    • Register your RHEL system
      • Register a system by using the RHC client
      • Register your system by using the subscription manager
      • Register RHEL 10 by using the installer GUI
      • Registration Assistant
    • Configure System Purpose with subscription-manager CLI
    • Post-installation security hardening
    • Change a subscription service
      • Unregister from Subscription Management Server
      • Unregister by using the command line
      • Unregister by using the Subscription Manager user interface
      • Unregister from Satellite Server
    • Configure a Linux instance on 64-bit IBM Z
      • DASDs on a z/VM system
      • Set DASDs online dynamically
      • Prepare a new DASD with low-level formatting
      • Persistent DASD configuration
      • DASDs that are part of the root file system
      • DASDs that are not part of the root file system
      • FCP LUNs that are part of the root file system
      • FCP LUNs that are not part of the root file system
      • Configure IBM Z network devices for the network root file system
    • Kickstart file format
    • Package selection in Kickstart
      • Package selection section
      • Package selection commands
      • Common package selection options
      • Options for specific package groups
      • Install the kernel-64k package on 64-bit ARM by using Kickstart
    • Scripts in Kickstart file
      • %pre script
      • %pre-install script
      • %post script
      • Example: Mount NFS in a post-install script
    • Kickstart error handling section
    • Kickstart add-on sections
    • Kickstart certificates section
    • Kickstart commands for installation media and sources
      • cdrom
      • driverdisk
      • harddrive
      • liveimg
      • nfs
      • ostreecontainer
      • url
    • Kickstart commands for installer execution and display
      • bootc
      • cmdline
      • eula
      • firstboot
      • graphical
      • hmc
      • ostreesetup
      • rdp
      • text
    • Kickstart commands for system power, logging, and inclusions
      • halt
      • logging
      • mediacheck
      • poweroff
      • reboot
      • rhsm
      • shutdown
      • sshpw
      • %include
      • %ksappend
    • Kickstart commands for user accounts and system security
      • authselect
      • firewall
      • group
      • rootpw
      • selinux
      • sshkey
      • user
    • Kickstart commands for localization, time, and display
      • keyboard
      • lang
      • skipx
      • timezone
      • timesource
      • xconfig
    • Kickstart commands for software repositories, services, and system purpose
      • module
      • repo
      • services
      • syspurpose
    • Kickstart commands for network configuration
      • network
      • realm
    • Kickstart commands for disk selection and initialization
      • ignoredisk
      • clearpart
      • zerombr
    • Kickstart commands for partition creation and bootloader configuration
      • bootloader
      • autopart
      • reqpart
      • part or partition
    • Kickstart commands for LVM storage, RAID arrays, and file systems
      • raid
      • volgroup
      • logvol
      • snapshot
      • mount
    • Kickstart commands for network storage and mainframe disks
      • zipl
      • fcoe
      • iscsi
      • iscsiname
      • zfcp
    • Kickstart command for installation add-ons
    • Kickstart command for system recovery
    • Installation source boot options
    • Network boot options
    • Console boot options
    • Debug boot options
    • Storage boot options
  • Customize installation and deployment tooling
    • Customize the RHEL installer
      • Prepare to customize the installer
      • Customize installer branding and boot menus
      • Anaconda architecture and add-on structure
      • Create add-on interfaces and deploy add-ons
      • Complete post customization tasks
    • Build custom RHEL system images
      • Get started with RHEL image builder
      • Configure RHEL image builder repositories
      • Create system images by using the RHEL image builder CLI
      • Customize packages, containers, and user accounts
      • Customize kernel, system settings, and services
      • Customize storage and Kickstart configurations
      • Create system images by using RHEL image builder web console interface
      • Create boot ISO and network installer images
      • Create security-hardened and FIPS-compliant images
      • Prepare and deploy virtual machine images
      • Create stateless and container-embedded images
    • Automate RHEL instance configuration by using cloud-init
      • Understand cloud-init architecture and configurations
      • Cloud-init support in Red Hat products
      • Configure boot time settings by using cloud-init
      • Configure system settings by using cloud-init
      • Manage cloud-init files and troubleshoot issues
Upgrade
  • Upgrade in-place from RHEL 9 to RHEL 10
    • Plan the upgrade from RHEL 9 to RHEL 10
      • Key migration terminology
      • Supported upgrade paths
      • Plan an upgrade to RHEL 10
    • Prepare for the upgrade
      • Prepare a RHEL 9 system for the upgrade
      • Prepare a Satellite-registered system for the upgrade
      • Configure the upgrade from RHEL 9.8 to RHEL 10.2 or RHEL 9.9 to RHEL 10.3 with LiveMode
    • Manually upgrade small deployments
      • Review the pre-upgrade report
      • About the pre-upgrade report
      • Assess upgradability from the command line
      • Assess upgradability and apply automated remediations through the web console
      • Perform the upgrade
      • Perform the upgrade from RHEL 9.8 to RHEL 10.2 or RHEL 9.9 to RHEL 10.3
      • Perform the upgrade from RHEL 9.6 to RHEL 10.0
    • Upgrade large deployments by using Ansible
      • Ansible roles for upgrading large deployments
      • Run the pre-upgrade report by using Ansible roles
      • Remediate the pre-upgrade report by using Ansible roles
      • Upgrade to RHEL 10 by using Ansible roles
    • Verify and clean up the RHEL 10 system
      • Verify the post-upgrade state
      • Perform post-upgrade tasks on the RHEL 10 system
      • Apply security policies
    • Troubleshoot and resolve upgrade errors
      • Troubleshooting resources
      • Troubleshooting tips
      • Known issues for the RHEL 9.9 to RHEL 10.3 upgrade
      • Known issues for the RHEL 9.8 to RHEL 10.2 upgrade
      • Known issues for the RHEL 9.6 to RHEL 10.0 upgrade
      • Support options
    • Repository mappings
    • Related information
Deploy
  • Deploy and manage RHEL on Amazon Web Services
    • Introduction to RHEL on public cloud platforms
      • Benefits of using RHEL in a public cloud
      • Public cloud use cases for RHEL
      • Frequent concerns when migrating to a public cloud
      • RHEL for public cloud deployments
      • Methods for creating RHEL cloud instances
    • Deploy a RHEL image as an EC2 instance on AWS
      • Available RHEL image types for public cloud
      • Deploy a RHEL instance by using a custom base image
      • Upload a RHEL image to AWS by using the command line
      • Upload a RHEL image to AWS by using the AWS console
    • Configure RHEL on AWS with Secure Boot
      • Overview of Secure Boot for RHEL on cloud
      • Configure a RHEL instance on the AWS Marketplace with Secure Boot
      • Configure a RHEL instance on Amazon Web Services from a custom RHEL image with Secure Boot
    • Configure RHEL on Public Cloud Platforms with AMD SEV SNP
      • Overview of AMD SEV SNP
      • Configure a RHEL instance on Amazon Web Services with AMD SEV SNP
      • Configure a RHEL instance on Google Cloud with AMD SEV SNP
      • Configure a RHEL VM on Azure with AMD SEV SNP
    • Configure RHEL on Public Cloud Platforms with UKI
      • Overview of Unified Kernel Image
  • Deploy and manage RHEL on Google Cloud
    • Introduction to RHEL on public cloud platforms
      • Benefits of using RHEL in a public cloud
      • Public cloud use cases for RHEL
      • Frequent concerns when migrating to a public cloud
      • RHEL for public cloud deployments
      • Methods for creating RHEL cloud instances
    • Deploy a RHEL image as a Google Compute Engine instance on Google Cloud
      • Available RHEL image types for public cloud
      • Deploy a RHEL instance by using a custom base image
      • Upload and run a RHEL instance on Google Cloud
      • Install the Google Cloud SDK
      • Create a new project on Google Cloud
      • Create and upload a RHEL image on Google Cloud Storage
      • Launch a RHEL Google Compute Engine instance
      • Connect to a RHEL Google Compute Engine instance
      • Attach Red Hat subscriptions
      • Configure automatic registration on Google Cloud gold images
    • Configure RHEL on Google Cloud with Secure Boot
      • Overview of Secure Boot for RHEL on cloud
      • Configure a RHEL instance on Google Cloud from a custom RHEL image with Secure Boot
      • Configure a RHEL instance on the Google Cloud Marketplace with Secure Boot
    • Configure RHEL on Public Cloud Platforms with Intel TDX
      • Overview of Intel TDX
      • Configure a RHEL instance on Google Cloud with Intel TDX
      • Configure a RHEL VM on Azure with Intel TDX
    • Configure RHEL on Public Cloud Platforms with AMD SEV SNP
      • Overview of AMD SEV SNP
      • Configure a RHEL instance on Amazon Web Services with AMD SEV SNP
      • Configure a RHEL instance on Google Cloud with AMD SEV SNP
      • Configure a RHEL VM on Azure with AMD SEV SNP
    • Configure RHEL on Public Cloud Platforms with UKI
      • Overview of Unified Kernel Image
  • Deploy and manage RHEL on Microsoft Azure
    • Introduction to RHEL on public cloud platforms
      • Benefits of using RHEL in a public cloud
      • Public cloud use cases for RHEL
      • Frequent concerns when migrating to a public cloud
      • RHEL for public cloud deployments
      • Methods for creating RHEL cloud instances
    • Deploy a RHEL image as a compute instance on Azure
      • Available RHEL image types for public cloud
      • Required system packages
      • Deploy a RHEL instance by using a custom base image
      • Install the Azure CLI
      • Install Hyper-V device drivers
      • Configure swap space with cloud-init on Azure
      • Prepare a virtual machine for Azure deployment
      • Convert a RHEL image to Azure disk image
      • Configure the Azure resources for a RHEL image
      • Upload a VHD image to Azure Blob storage
      • Launch and connect to a RHEL VM in Azure
      • Types of SSH authentication methods
      • Attach Red Hat subscriptions
      • Configure automatic registration on Azure gold images
      • Configure kdump for Microsoft Azure virtual machines
    • Configure RHEL on Azure with CVM
      • Overview of confidential virtual machines
      • Overview of confidential OS disk encryption on Azure
      • Generate hardware attestation report for RHEL CVM on Azure
      • Use cases for confidential virtual machine
      • Overview of the RHEL CVM boot process on Azure
    • Configure RHEL on Azure with Secure Boot
      • Overview of Secure Boot for RHEL on cloud
      • Configure a RHEL VM on Azure with Secure Boot
      • Configure a RHEL VM on Azure with NoSignatureTemplate Secure Boot
    • Configure RHEL on Public Cloud Platforms with Intel TDX
      • Overview of Intel TDX
      • Configure a RHEL instance on Google Cloud with Intel TDX
      • Configure a RHEL VM on Azure with Intel TDX
    • Configure RHEL on Public Cloud Platforms with AMD SEV SNP
      • Overview of AMD SEV SNP
      • Configure a RHEL instance on Amazon Web Services with AMD SEV SNP
      • Configure a RHEL instance on Google Cloud with AMD SEV SNP
      • Configure a RHEL VM on Azure with AMD SEV SNP
    • Configure RHEL on Public Cloud Platforms with UKI
      • Overview of Unified Kernel Image
  • Prepare and upload cloud images
    • Prepare and upload AMI images to AWS
      • Prepare to manually upload AWS AMI images
      • Manually upload an AMI image to AWS by using the CLI
      • Create and automatically upload images to the AWS Cloud AMI
    • Prepare and upload VHD images to Microsoft Azure
      • Prepare to upload Microsoft Azure VHD images manually
      • Manually upload VHD images to Microsoft Azure cloud
      • Create and automatically upload VHD images to Microsoft Azure cloud
    • Prepare and upload VMDK custom images to vSphere
      • Create and automatically uploading customized RHEL VMDK images by using image builder
      • Upload VMDK images and create a RHEL virtual machine in vSphere
      • Create and automatically uploading VMDK images to vSphere using image builder GUI
    • Prepare and upload custom GCE images to Google Cloud
      • Configure and upload a gce image to Google Cloud by using the CLI
      • How RHEL image builder sorts the authentication order of different Google Cloud credentials
    • Prepare and upload custom images directly to OCI
      • Create and automatically uploading custom images to OCI
    • Prepare and upload customized QCOW2 images directly to OpenStack
      • Upload QCOW2 images to OpenStack
    • Prepare and upload customized RHEL images to the Alibaba Cloud
      • Create an instance of a customized RHEL image using Alibaba Cloud
      • Import images to Alibaba Cloud
      • Upload customized RHEL images to Alibaba
      • Prepare to upload customized RHEL images to Alibaba Cloud
  • Build, deploy, and manage RHEL for Edge systems
    • Introduction to image mode for RHEL on edge devices
    • Compact OCI image updates with oci-delta
    • Create a delta between two image versions on bootc
    • Apply a delta on a bootc system
    • Understand FDO architecture and system concepts
      • The FDO trust model process overview
      • Components of the FDO system
      • The FDO workflow
      • Cryptographic credentials for FDO
    • Set up FDO certificates and database backends
      • Generate test certificates for single-host evaluation
      • Configuration reference for HTTPS and database
    • Install and run FDO Manufacturing and Rendezvous servers
      • Install the FDO Manufacturing server
      • Configure the FDO Manufacturing server
      • Run the FDO Manufacturing server
      • Install the FDO Rendezvous server
      • Run the FDO Rendezvous server
      • Advanced Rendezvous configuration (TO0)
    • Install and run the FDO Owner server and FSIMs
      • Install the FDO Owner server
      • Configure the FDO Owner server
      • FDO ServiceInfo Modules (FSIMs)
      • Configure FDO ServiceInfo Modules (FSIMs) for device provisioning
      • Run the FDO Owner server
    • Configure FDO clients and troubleshoot deployments
      • Install and configure the FIDO Device Onboard (FDO) client on RHEL 10
      • Configure the FDO client
      • Store the device credentials in a TPM
      • Verify the FDO device credential
      • Clear FDO device credentials
      • FDO troubleshooting reference
    • Automatically provision and onboard RHEL for Edge devices with FDO (Deprecated)
      • The FIDO Device Onboarding (FDO) process overview
      • FDO automatic onboarding technologies
      • Automatically provision and onboard RHEL for Edge devices with FDO
      • Generate keys and certificates
      • Install and configure the manufacturing server
      • Install, configure, and run the Rendezvous server
      • Install, configure, and run the Owner server
      • Automate RHEL for Edge device onboarding with FDO
      • Deploy image mode for RHEL systems by using FDO
  • Host and manage Linux virtual machines
    • Basic concepts of virtualization in RHEL
      • What is virtualization?
      • Advantages of virtualization
      • Virtual machine components and their interaction
      • Tools and interfaces for virtualization management
      • User-space connection types for virtualization
      • Red Hat virtualization solutions
    • Prepare RHEL to host virtual machines
      • Prepare an AMD64 or Intel 64 system to host virtual machines
      • Prepare an IBM Z system to host virtual machines
      • Prepare an ARM 64 system to host virtual machines
      • Configure the web console to manage virtual machines
      • Configure easier access to remote virtualization hosts
    • Create virtual machines
      • Create virtual machines by using the command line
      • Create virtual machines by using the web console
      • Create new virtual machines by using the web console
      • Create virtual machines by importing disk images with the web console
      • Create virtual machines with cloud image authentication by using the web console
      • Enable QEMU Guest Agent features on your virtual machines
    • Start virtual machines
      • Start a virtual machine by using the command line
      • Start virtual machines by using the web console
      • Start virtual machines automatically when the host starts
    • Convert virtual machines to the Q35 machine type
    • Connect to virtual machines
      • Connect to virtual machines by using the web console
      • Open a virtual machine graphical console by using the command line
      • Connect to a virtual machine by using SSH
      • Open a virtual machine serial console by using the command line
      • Replace the SPICE remote display protocol with VNC by using the command line
    • Shut down and restart virtual machines
      • Shut down a virtual machine by using the command line
      • Shut down a virtual machine by using the web console
      • Restart a virtual machine by using the command line
      • Restart a virtual machine by using the web console
    • Delete virtual machines
      • Delete virtual machines by using the command line
      • Delete virtual machines by using the web console
    • View information about virtual machines
      • View virtual machine information by using the command line
      • View virtual machine information by using the web console
      • Sample virtual machine XML configuration
    • Clone virtual machines
      • How cloning virtual machines works
      • Create virtual machine templates
      • Create a virtual machine template by using virt-sysprep
      • Create a virtual machine template manually
      • Clone a virtual machine by using the command line
      • Clone a virtual machine by using the web console
    • Migrate virtual machines
      • How migrating virtual machines works
      • Benefits of migrating virtual machines
      • Limitations for migrating virtual machines
      • Migrate a virtual machine by using the command line
      • Live migrating a virtual machine by using the web console
      • Live migrating a virtual machine with an attached Mellanox virtual function
      • Live migrating a virtual machine with an attached NVIDIA vGPU
      • Share virtual machine disk images with other hosts
      • Verify host CPU compatibility for virtual machine migration
      • Supported hosts for virtual machine migration
    • Manage storage for virtual machines
      • Available methods for attaching storage to virtual machines
      • View virtual machine storage information by using the web console
      • View virtual machine storage information by using the command line
      • Attach storage to virtual machines
      • Attach a file-based virtual disk to your virtual machine by using the command line
      • Attach a file-based virtual disk to your virtual machine by using the web console
      • Attach disk-based storage to your virtual machine by using the command line
      • Attach disk-based storage to your virtual machine by using the web console
      • Attach LVM-based storage to your virtual machine by using the command line
      • Attach LVM-based storage to your virtual machine by using the web console
      • Attach NFS-based storage to your virtual machine by using the command line
      • Attach NFS-based storage to your virtual machine by using the web console
      • Check the consistency of a virtual disk
      • Resize a virtual disk
      • Convert between virtual disk formats
      • Remove virtual machine storage by using the command line
      • Remove virtual machine storage by using the web console
      • Supported disk image formats
    • Save and restore virtual machine state by using snapshots
      • Support limitations for virtual machine snapshots
      • Create virtual machine snapshots by using the command line
      • Create virtual machine snapshots by using the web console
      • Revert to a virtual machine snapshot by using the command line
      • Revert to a virtual machine snapshot by using the web console
      • Delete virtual machine snapshots by using the command line
      • Delete virtual machine snapshots by using the web console
    • Attach host devices to virtual machines
      • How virtual devices work
      • Types of virtual devices
      • Attach USB devices to virtual machines by using the command line
      • Attach PCI devices to virtual machines by using the command line
      • Attach host devices to virtual machines by using the web console
      • Remove USB devices from virtual machines by using the command line
      • Remove PCI devices from virtual machines by using the command line
      • Remove host devices from virtual machines by using the web console
      • Attach ISO images to virtual machines
      • Configure SCSI passthrough for virtual machines
      • Configure SCSI3-Persistent Reservation for virtual machines
      • Attach DASD devices to virtual machines on IBM Z
      • Attach a watchdog device to a virtual machine by using the web console
    • Configure virtual machine network connections
      • How virtual networks work
      • The default configuration for virtual machine networks
      • Network connection types for virtual machines
      • Use the web console for managing virtual machine network interfaces
      • Manage SR-IOV networking devices
      • What is SR-IOV?
      • Attach SR-IOV networking devices to virtual machines
      • Supported devices for SR-IOV assignment
      • Boot virtual machines from a PXE server
      • Configure externally visible virtual machines
      • Configure externally visible virtual machines by using the command line
      • Configure externally visible virtual machines by using the web console
      • macvtap connection replacement
      • Configure bridges on a network bond to connect virtual machines with the network
      • Configure the passt user-space connection
    • Manage GPU devices in virtual machines
      • Assign a GPU to a virtual machine
      • Manage NVIDIA vGPU devices
      • Configure NVIDIA vGPU devices
      • Remove NVIDIA vGPU devices
      • Configure NVIDIA vGPU legacy devices
      • Remove NVIDIA vGPU legacy devices
      • Obtain NVIDIA legacy vGPU information about your system
      • Live migrating a virtual machine with an attached NVIDIA vGPU
      • Remote desktop streaming services for NVIDIA vGPU
    • Optimize virtual machine performance
      • What influences virtual machine performance
      • Optimize virtual machine performance by using TuneD
      • Virtual machine performance optimization for specific workloads
      • Configure virtual machine memory
      • Memory overcommitment
      • Add and removing virtual machine memory by using virtio-mem
      • Configure virtual machines to use huge pages
      • Optimize virtual machine I/O performance
      • Tune block I/O in virtual machines
      • Configure disk I/O throttling in virtual machines
      • Enable multi-queue on storage devices
      • Configure dedicated IOThreads
      • Configure virtual disk caching
      • Optimize virtual machine CPU performance
      • vCPU overcommitment
      • Add and removing virtual CPUs by using the command line
      • Manage virtual CPUs by using the web console
      • Configure NUMA in a virtual machine
      • Configure virtual CPU pinning
      • Configure virtual CPU capping
      • Tune CPU weights
      • Enable and disabling kernel same-page merging
      • Optimize virtual machine network performance
      • Virtual machine performance monitoring tools
    • Secure virtual machines
      • How security works in virtual machines
      • Best practices for securing virtual machines
      • Default features for virtual machine security
      • Enable standard hardware security on Windows virtual machines
      • Enable enhanced hardware security on Windows virtual machines
      • Limit what actions are available to virtual machine users
      • Configure VNC passwords
      • SELinux booleans for virtualization
      • Create a Secure Boot Windows virtual machine
      • Create a Secure Boot Linux virtual machine
      • Configure IBM Secure Execution on IBM Z
      • Attach cryptographic coprocessors to virtual machines on IBM Z
      • Enable SEV-SNP
      • Enable TDX
    • Share files between the host and its virtual machines
      • Share files between the host and Linux virtual machines by using the command line
      • Share files between the host and Linux virtual machines by using the web console
      • Remove files shared between the host and virtual machines by using the command line
      • Remove files shared between the host and Linux virtual machines by using the web console
    • Diagnose virtual machine problems
      • Generate libvirt debug logs
      • Dump a virtual machine core
      • Backtrace virtual machine processes
      • Keep kernel panic parameters disabled in virtualized environments
      • Additional resources for reporting virtual machine problems and providing logs
    • Back up and recover virtual machines
      • Back up a virtual machine
      • Recover a virtual machine
    • Create nested virtual machines
      • What is nested virtualization?
      • Support limitations for nested virtualization
      • Create a nested virtual machine on Intel
      • Create a nested virtual machine on AMD
      • Create a nested virtual machine on IBM Z
    • Feature support and limitations in RHEL 10 virtualization
      • How RHEL virtualization support works
      • Recommended features in RHEL 10 virtualization
      • Unsupported features in RHEL 10 virtualization
      • Resource allocation limits in RHEL 10 virtualization
      • Support differences between Linux and Windows virtual machines
      • How virtualization on IBM Z differs from AMD64 and Intel 64
      • How virtualization on ARM 64 differs from AMD64 and Intel 64
      • Overview of virtualization features support in RHEL 10
  • Host and manage Windows virtual machines
    • Basic concepts of virtualization in RHEL
      • What is virtualization?
      • Advantages of virtualization
      • Virtual machine components and their interaction
      • Tools and interfaces for virtualization management
      • User-space connection types for virtualization
      • Red Hat virtualization solutions
    • Prepare RHEL to host virtual machines
      • Prepare an AMD64 or Intel 64 system to host virtual machines
      • Configure the web console to manage virtual machines
      • Configure easier access to remote virtualization hosts
    • Create virtual machines
      • Create virtual machines by using the command line
      • Create virtual machines by using the web console
      • Create new virtual machines by using the web console
      • Create virtual machines by importing disk images with the web console
      • Create virtual machines with cloud image authentication by using the web console
      • Create Windows virtual machines
      • Enable QEMU Guest Agent features on your virtual machines
    • Optimize Windows virtual machines
      • Install KVM paravirtualized drivers for Windows virtual machines
      • How Windows virtio drivers work
      • Prepare virtio driver installation media on a host machine
      • Install virtio drivers on a Windows guest
      • Update virtio drivers on a Windows guest
      • Enable Hyper-V enlightenments
      • Configure NetKVM driver parameters
      • NetKVM driver parameters
      • Optimize background processes on Windows virtual machines
      • Enable Hotpatch on Windows Server 2025 virtual machines
    • Start virtual machines
      • Start a virtual machine by using the command line
      • Start virtual machines by using the web console
      • Start virtual machines automatically when the host starts
    • Convert virtual machines to the Q35 machine type
    • Connect to virtual machines
      • Connect to virtual machines by using the web console
      • Open a virtual machine graphical console by using the command line
      • Connect to a virtual machine by using SSH
      • Open a virtual machine serial console by using the command line
      • Replace the SPICE remote display protocol with VNC by using the command line
    • Shut down and restart virtual machines
      • Shut down a virtual machine by using the command line
      • Shut down a virtual machine by using the web console
      • Restart a virtual machine by using the command line
      • Restart a virtual machine by using the web console
    • Delete virtual machines
      • Delete virtual machines by using the command line
      • Delete virtual machines by using the web console
    • View information about virtual machines
      • View virtual machine information by using the command line
      • View virtual machine information by using the web console
      • Sample virtual machine XML configuration
    • Clone virtual machines
      • How cloning virtual machines works
      • Create virtual machine templates
      • Create a virtual machine template by using virt-sysprep
      • Create a virtual machine template manually
      • Clone a virtual machine by using the command line
      • Clone a virtual machine by using the web console
    • Migrate virtual machines
      • How migrating virtual machines works
      • Benefits of migrating virtual machines
      • Limitations for migrating virtual machines
      • Migrate a virtual machine by using the command line
      • Live migrating a virtual machine by using the web console
      • Live migrating a virtual machine with an attached Mellanox virtual function
      • Live migrating a virtual machine with an attached NVIDIA vGPU
      • Share virtual machine disk images with other hosts
      • Verify host CPU compatibility for virtual machine migration
      • Supported hosts for virtual machine migration
    • Manage storage for virtual machines
      • Available methods for attaching storage to virtual machines
      • View virtual machine storage information by using the web console
      • View virtual machine storage information by using the command line
      • Attach storage to virtual machines
      • Attach a file-based virtual disk to your virtual machine by using the command line
      • Attach a file-based virtual disk to your virtual machine by using the web console
      • Attach disk-based storage to your virtual machine by using the command line
      • Attach disk-based storage to your virtual machine by using the web console
      • Attach LVM-based storage to your virtual machine by using the command line
      • Attach LVM-based storage to your virtual machine by using the web console
      • Attach NFS-based storage to your virtual machine by using the command line
      • Attach NFS-based storage to your virtual machine by using the web console
      • Check the consistency of a virtual disk
      • Resize a virtual disk
      • Convert between virtual disk formats
      • Remove virtual machine storage by using the command line
      • Remove virtual machine storage by using the web console
      • Supported disk image formats
    • Save and restore virtual machine state by using snapshots
      • Support limitations for virtual machine snapshots
      • Create virtual machine snapshots by using the command line
      • Create virtual machine snapshots by using the web console
      • Revert to a virtual machine snapshot by using the command line
      • Revert to a virtual machine snapshot by using the web console
      • Delete virtual machine snapshots by using the command line
      • Delete virtual machine snapshots by using the web console
    • Attach host devices to virtual machines
      • How virtual devices work
      • Types of virtual devices
      • Attach USB devices to virtual machines by using the command line
      • Attach PCI devices to virtual machines by using the command line
      • Attach host devices to virtual machines by using the web console
      • Remove USB devices from virtual machines by using the command line
      • Remove PCI devices from virtual machines by using the command line
      • Remove host devices from virtual machines by using the web console
      • Attach ISO images to virtual machines
      • Configure SCSI passthrough for virtual machines
      • Configure SCSI3-Persistent Reservation for virtual machines
      • Attach a watchdog device to a virtual machine by using the web console
    • Configure virtual machine network connections
      • How virtual networks work
      • The default configuration for virtual machine networks
      • Network connection types for virtual machines
      • Use the web console for managing virtual machine network interfaces
      • Manage SR-IOV networking devices
      • What is SR-IOV?
      • Attach SR-IOV networking devices to virtual machines
      • Supported devices for SR-IOV assignment
      • Boot virtual machines from a PXE server
      • Configure externally visible virtual machines
      • Configure externally visible virtual machines by using the command line
      • Configure externally visible virtual machines by using the web console
      • macvtap connection replacement
      • Configure bridges on a network bond to connect virtual machines with the network
      • Configure the passt user-space connection
    • Manage GPU devices in virtual machines
      • Assign a GPU to a virtual machine
      • Manage NVIDIA vGPU devices
      • Configure NVIDIA vGPU devices
      • Remove NVIDIA vGPU devices
      • Configure NVIDIA vGPU legacy devices
      • Remove NVIDIA vGPU legacy devices
      • Obtain NVIDIA legacy vGPU information about your system
      • Live migrating a virtual machine with an attached NVIDIA vGPU
      • Remote desktop streaming services for NVIDIA vGPU
    • Optimize virtual machine performance
      • What influences virtual machine performance
      • Optimize virtual machine performance by using TuneD
      • Virtual machine performance optimization for specific workloads
      • Configure virtual machine memory
      • Memory overcommitment
      • Add and removing virtual machine memory by using virtio-mem
      • Configure virtual machines to use huge pages
      • Optimize virtual machine I/O performance
      • Tune block I/O in virtual machines
      • Configure disk I/O throttling in virtual machines
      • Enable multi-queue on storage devices
      • Configure dedicated IOThreads
      • Configure virtual disk caching
      • Optimize virtual machine CPU performance
      • vCPU overcommitment
      • Add and removing virtual CPUs by using the command line
      • Manage virtual CPUs by using the web console
      • Configure NUMA in a virtual machine
      • Configure virtual CPU pinning
      • Configure virtual CPU capping
      • Tune CPU weights
      • Enable and disabling kernel same-page merging
      • Optimize virtual machine network performance
      • Virtual machine performance monitoring tools
    • Secure virtual machines
      • How security works in virtual machines
      • Best practices for securing virtual machines
      • Default features for virtual machine security
      • Enable standard hardware security on Windows virtual machines
      • Enable enhanced hardware security on Windows virtual machines
      • Limit what actions are available to virtual machine users
      • Configure VNC passwords
      • SELinux booleans for virtualization
      • Create a Secure Boot Windows virtual machine
      • Create a Secure Boot Linux virtual machine
      • Configure IBM Secure Execution on IBM Z
      • Attach cryptographic coprocessors to virtual machines on IBM Z
      • Enable SEV-SNP
      • Enable TDX
    • Share files between the host and its virtual machines
      • Remove files shared between the host and virtual machines by using the command line
      • Share files between the host and Windows virtual machines by using the command line
    • Diagnose virtual machine problems
      • Generate libvirt debug logs
      • Dump a virtual machine core
      • Backtrace virtual machine processes
      • Additional resources for reporting virtual machine problems and providing logs
    • Back up and recover virtual machines
      • Back up a virtual machine
      • Recover a virtual machine
    • Create nested virtual machines
      • What is nested virtualization?
      • Support limitations for nested virtualization
      • Create a nested virtual machine on Intel
      • Create a nested virtual machine on AMD
    • Feature support and limitations in RHEL 10 virtualization
      • How RHEL virtualization support works
      • Recommended features in RHEL 10 virtualization
      • Unsupported features in RHEL 10 virtualization
      • Resource allocation limits in RHEL 10 virtualization
      • Support differences between Linux and Windows virtual machines
  • Manage containerized applications and pods
    • Introduction to containers
      • Information about containers command-line tools
      • Characteristics of Podman, Podman Desktop, Buildah, and Skopeo
      • Running containers without Docker
      • Supported architectures for container deployment in RHEL
      • Install container tools
      • Install Podman Desktop
      • Special considerations for rootless containers
      • Modules for advanced Podman configuration
    • Types of container images
      • General characteristics of RHEL container images
      • Characteristics of UBI images
      • The UBI standard images
      • The UBI init images
      • The UBI minimal images
      • The UBI micro images
    • Work with container registries
      • Container registries
      • Container registry configuration
      • Search for container images
      • Short-name alias configuration
      • Container signature verification with the policy.json file
    • Customize container images
      • Choose between Podman, Skopeo, and Buildah for image tasks
      • Download container images onto your system
      • Find out what is inside an image
      • Tag and publish an image to a registry
      • Copy an image from one registry to another
      • Save an image to an archive and load it on another system
      • Build multi-architecture images
      • Reclaim disk space used by images
    • Run containers
      • Overview of Podman run command
      • Run commands in a container from the host
      • Run commands inside the container
      • Build a container
      • List containers
      • Start containers
      • Execute commands inside a running container
      • Stop containers
      • Remove containers
    • Configure containers
      • Inspect containers from the host
      • Mount directory on localhost to the container
      • Mount a container filesystem
      • Run a service as a daemon with a static IP
      • Share files between two containers
      • Export and import containers
      • SELinux policies for containers
      • Configure pre-execution hooks in Podman
      • Application debugging in containers
    • Introduction to reproducible container builds
      • Benefits of reproducible container builds
      • Impact of reproducible container builds on different environments
      • Reproducibility in RHEL container tools
      • Work with reproducible container builds
    • Add software to a UBI container
      • Use the UBI init images
      • Use the UBI micro images
      • Software in UBI containers on subscribed hosts
      • Add software in a standard UBI container
      • Add software in a minimal UBI container
      • Add software to a UBI container on an unsubscribed host
      • Build UBI-based images
      • Application Stream runtime images
      • Get UBI container image source code
    • Sign container images
      • Sign container images with sigstore signatures by using a private key
      • Sign container images with sigstore signatures by using Fulcio and Rekor
      • Sign container images with sigstore signatures with a private key and Rekor
      • Sign container images with GPG signatures
      • Sign container images in Podman by using the Sequoia PGP
    • Work with pods
      • Create pods
      • Display pod information
      • Stop pods
      • Remove pods
    • Manage a container network
      • List container networks
      • Inspect a network
      • Create a network
      • Connect a container to a network
      • Disconnect a container from a network
      • Remove a network
      • Remove all unused networks
    • Configure communication among containers
      • The network modes and layers
      • Characteristics of pasta network mode
      • Set the network mode
      • Inspect a network setting of a container
      • Configure communication between a container and an application
      • Test communication between a container and a host
      • Expose containers by using port mapping
      • Test communication between containers using DNS
      • Test communication between containers in a pod
      • Expose services in a pod
      • Attach a pod to the container network
      • Set HTTP Proxy variables for Podman
    • Set container network modes
      • Run containers with a static IP
      • Assign multiple IP addresses to a container on creation
      • Run the DHCP plugin for Netavark using systemd
      • The MacVLAN plugin
    • Port containers to systemd by using Podman
      • Running containers with quadlets and systemd
      • Enable systemd services
      • Auto-start containers by using systemd
      • Advantages of using Quadlets over the podman generate systemd command
      • Generate a systemd unit file using Podman
      • Automatically generate a systemd unit file by using Podman
      • Automatically start pods using systemd
      • Automatically update containers using Podman
      • Automatically update containers by using systemd
    • Port containers to OpenShift by using Podman
      • Generate a Kubernetes YAML file by using Podman
      • Generate a Kubernetes YAML file in OpenShift environment
      • Start containers and pods with Podman
      • Start containers and pods in OpenShift environment
      • Manually run containers and pods by using Podman
      • Generate a YAML file by using Podman
      • Automatically run containers and pods using Podman
      • Automatically stop and remove pods by using Podman
    • Manage containers by using RHEL system roles
      • RHEL system roles integration with bootc-based image building
      • Configure image registry management for Podman and other container tools
      • Create a rootless container with bind mount by using the podman RHEL system role
      • Create a rootful container with Podman volume by using the podman RHEL system role
      • Create a Quadlet application with secrets by using the podman RHEL system role
    • Manage container images by using the RHEL web console
      • Pull container images in the web console
      • Prune container images in the web console
      • Delete container images in the web console
    • Manage containers by using the RHEL web console
      • Create a container checkpoint in the web console
      • Restore a container checkpoint in the web console
      • Create pods in the web console
      • Create containers in the pod in the web console
    • Configure unified configuration for rootless Podman
      • Overview of unified configuration for rootless Podman
      • Configure unified configuration
    • Run Skopeo, Buildah, and Podman in a container
      • Overview of Skopeo, Buildah, and Podman in a container
      • Run Skopeo in a container
      • Run Skopeo in a container using credentials
      • Run Skopeo in a container using authfiles
      • Copy container images to or from the host
      • Run Buildah in a container
      • Privileged and unprivileged Podman containers
      • Run Podman with extended privileges
      • Run Podman with less privileges
      • Build a container inside a Podman container
    • Monitor containers
      • Health checks on containers
      • Perform a health check using the command line
      • Perform a health check using a Containerfile
      • Display Podman system information
      • Podman event types
      • Monitor Podman events
      • Use Podman events for auditing
    • Use Toolbx for development and troubleshooting
      • Start a Toolbx container
      • Use Toolbx for development
      • Use Toolbx for troubleshooting a host system
      • Stop the Toolbx container
    • Run special container images
      • Privileges to the host
      • Container images with runlabels
      • Run support-tools with runlabels
    • Use the container-tools API
      • Enable the Podman API using systemd in root mode
      • Enable the Podman API using systemd in rootless mode
      • Run the Podman API manually
Network
  • Establish and maintain network connectivity
    • Manage consistent network interface naming
      • How the udev device manager renames network interfaces
      • Network interface naming policies
      • Network interface naming schemes
      • Switch to a different network interface naming scheme
      • Customize the prefix for Ethernet interfaces during installation
      • Configure user-defined network interface names by using udev rules
      • Configure user-defined network interface names by using systemd link files
      • Assign alternative names to a network interface by using systemd link files
    • Configure network connections and interface types
      • Configure an Ethernet connection
      • Configure a network bond
      • Configure VLAN tagging
      • Configure a network bridge
      • Configure IP tunnels
      • Manage wifi connections
      • Configure a persistent qeth device on IBM Z
      • Configure NetworkManager to ignore certain interfaces
    • Configure network routing and gateways
      • Manage the default gateway
      • Configure a static route
      • Configure policy-based routing to define alternative routes
    • Configure host identification and DNS resolution
      • Change a hostname by using hostnamectl
      • Configure the DHCP timeout behavior of a NetworkManager connection
      • Configure the order of DNS servers
      • Use different DNS servers for different domains
    • Network configuration backends, file formats, and management tools
      • NetworkManager connection profiles in keyfile format
      • Systemd network targets and services
      • Nmstate declarative network manager API
    • Enable Multipath TCP for redundant network connections
      • Multipath TCP protocol and its advantages
      • Permanently configure multiple paths for MPTCP applications
      • Configure mptcpd
    • Manage network traffic shaping and bandwidth rules
      • Network queuing disciplines
      • Inspect qdiscs of a network interface by using the tc utility
      • Update the default qdisc
      • Temporarily set the current qdisc of a network interface by using the tc utility
      • Permanently set the current qdisc of a network interface by using NetworkManager
      • Configure the rate limiting of packets by using the tc-ctinfo utility
      • Available qdiscs in RHEL
    • Manage high-speed RDMA subsystems and IPoIB interfaces
      • InfiniBand and RDMA network technologies
      • Configure the core RDMA subsystem
      • Configure IPoIB
      • Configure RoCE
      • Increase the amount of memory that users are allowed to pin in the system
      • Enable NFS over RDMA on an NFS server
      • InfiniBand subnet manager
  • Manage networking infrastructure services
    • Configure a BIND DNS server
      • Considerations about protecting BIND with SELinux or running it in a change-root environment
      • Configure BIND as a caching DNS server
      • Configure logging on a BIND DNS server
      • Write BIND access control lists
      • Configure zones on a BIND DNS server
      • The start of authority record in zone files
      • Configure a forward zone on a BIND primary server
      • Configure a reverse zone on a BIND primary server
      • Update a BIND zone file
      • Sign a DNSSEC zone by using the automated key generation and zone maintenance features
      • Configure zone transfers among BIND DNS servers
      • Configure response policy zones in BIND to override DNS records
      • Record DNS queries by using dnstap
    • Configure Unbound as a caching DNS server
    • Provide DHCP services
      • The difference between static and dynamic IP addressing
      • DHCP transaction phases
      • Overview of using Kea for DHCPv4 and DHCPv6
      • The Kea lease database
      • Configure a Kea DHCP server
      • Configure loggers in Kea
      • Assign a static address to a host by using DHCP
      • Classify clients in Kea
      • Comparison of DHCPv6 to radvd
      • Configure the radvd service for IPv6 routers
Storage
  • Manage storage devices
    • Overview of available storage options
      • Local storage overview
      • Remote storage overview
    • Persistent naming attributes
      • Persistent attributes for identifying file systems and block devices
      • udev device naming rules
    • Disk partitions
      • Overview of partitions
      • Comparison of partition table types
      • GUID partition table
      • MBR disk partitions
      • Extended MBR partitions
      • MBR partition types
      • Partition types
      • Partition naming scheme
      • Mount points and disk partitions
    • Get started with partitions
      • Create a partition table on a disk with parted
      • View the partition table with parted
      • Create a partition with parted
      • Set a partition type with fdisk
      • Resize a partition with parted
      • Remove a partition with parted
    • Strategies for repartitioning a disk
      • Unpartitioned free space
      • Space from an unused partition
      • Use free space from an active partition
    • Configure an iSCSI target
      • Install targetcli
      • Create an iSCSI target
      • iSCSI Backstore
      • Create a fileio storage object
      • Create a block storage object
      • Create a pscsi storage object
      • Create a Memory Copy RAM disk storage object
      • Create an iSCSI portal
      • Create an iSCSI LUN
      • Create a read-only iSCSI LUN
      • Create an iSCSI ACL
      • Configure the CHAP Authentication for the target
      • Remove an iSCSI object by using targetcli tool
    • Configure an iSCSI initiator
      • Create an iSCSI initiator
      • Configure the CHAP authentication for the initiator
      • Monitor an iSCSI session by using the iscsiadm utility
      • DM Multipath overrides of the device timeout
    • Use Fibre Channel devices
      • Re-scanning Fibre Channel logical units after resizing a LUN
      • Determine the link loss behavior of device using Fibre Channel
      • Fibre Channel configuration files
    • Overview of NVMe over fabric devices
    • Configure NVMe over fabrics by using NVMe/RDMA
      • Configure an NVMe/RDMA controller using configfs
      • Configure the NVMe™/RDMA controller using nvmetcli
      • Configure an NVMe/RDMA host
    • Configure NVMe over fabrics by using NVMe/FC
      • Configure the NVMe host for Broadcom adapters
      • Configure the NVMe host for QLogic adapters
    • Configure NVMe over fabrics by using NVMe/TCP
      • Configure an NVMe/TCP host
      • Connect the NVMe/TCP host to the NVMe/TCP controller
      • Configure NVMe host authentication
      • Configure an NVMe/TCP host using TLS with Pre-Shared-Keys
    • Get started with swap
      • Overview of swap space
      • Recommended system swap space
      • Create an LVM logical volume for swap
      • Create and manage a standard swap partition
      • Create a swap file
      • Create a swap volume by using the storage RHEL system role
      • Extend swap on an LVM logical volume
      • Recreate a swap area on a reduced LVM logical volume
      • Remove an LVM logical volume for swap
      • Remove a swap file
      • Adjust Virtual Memory (VM) Tunables
    • Configure Fibre Channel over Ethernet
      • Hardware FCoE HBAs in RHEL
    • Manage tape devices
      • Types of tape devices
      • Install tape drive management tool
      • Tape commands
      • Write to rewinding tape devices
      • Write to non-rewinding tape devices
      • Switch tape head in tape devices
      • Restore data from tape devices
      • Erase data from tape devices
    • Manage RAID
      • Overview of RAID
      • RAID types
      • RAID levels and linear support
      • Supported RAID conversions
      • RAID subsystems
      • Create a software RAID during the installation
      • Create a software RAID on an installed system
      • Create RAID in the web console
      • Format RAID in the web console
      • RAID services
      • Create a partition table on RAID by using the web console
      • Create partitions on RAID by using the web console
      • Create a volume group on top of RAID by using the web console
      • Configure a RAID volume by using the storage RHEL system role
      • Extend RAID
      • Shrink RAID
      • Convert a root disk to RAID1 after installation
      • Create advanced RAID devices
      • Configure email notifications to monitor a RAID
      • Replace a failed disk in RAID
      • Repair RAID disks
    • Encrypt block devices by using LUKS
      • LUKS disk encryption
      • LUKS versions in RHEL
      • Options for data protection during LUKS2 re-encryption
      • Encrypt existing data on a block device using LUKS2
      • Encrypt existing data on a block device using LUKS2 with a detached header
      • Encrypt a blank block device using LUKS2
      • Configure the LUKS passphrase in the web console
      • Change the LUKS passphrase by using the command line
      • Change the LUKS passphrase in the web console
      • Create a LUKS2 encrypted volume by using the storage RHEL system role
    • Use NVDIMM persistent memory storage
      • The NVDIMM persistent memory technology
      • NVDIMM interleaving and regions
      • NVDIMM namespaces
      • NVDIMM access modes
      • Install ndctl
      • Create a device DAX namespace on an NVDIMM
      • Create a file system DAX namespace on an NVDIMM
      • Monitor NVDIMM health by using S.M.A.R.T.
      • Detect and replace a broken NVDIMM device
    • Discard unused blocks
      • Types of block discard operations
      • Perform batch block discard
      • Enable online block discard
      • Enable online block discard by using the storage RHEL system role
      • Enable periodic block discard
    • Remove storage devices
      • Safe removal of storage devices
      • Remove block devices and associated metadata
    • Set up a remote diskless system
      • Prepare environments for the remote diskless system
      • Configure a TFTP service for diskless clients
      • Configure a DHCP server for diskless clients
      • Configure an exported file system for diskless clients
      • Re-configure a remote diskless system
      • Common issues with loading a remote diskless system
    • Configure Stratis file systems
      • Components of a Stratis file system
      • Block devices compatible with Stratis
      • Install Stratis
      • Create an unencrypted Stratis pool
      • Create an unencrypted Stratis pool by using the web console
      • Create an encrypted Stratis pool by using a key in the kernel keyring
      • Create an encrypted Stratis pool by using Clevis
      • Create an encrypted Stratis pool by using the storage RHEL system role
      • Create an encrypted Stratis pool by using the web console
      • Rename a Stratis pool by using the web console
      • Configure overprovisioning mode in a Stratis file system
      • Bind a Stratis pool to NBDE
      • Bind a Stratis pool to TPM
      • Unlock an encrypted Stratis pool with kernel keyring
      • Unbind a Stratis pool from supplementary encryption
      • Change the encryption of an existing Stratis pool
      • Start and stop a Stratis pool
      • Create a Stratis file system
      • Mount a Stratis file system
      • Mount a Stratis file system at boot
      • Create and configure a Stratis file system by using the web console
    • Extend a Stratis pool with additional block devices
      • Add block devices to a Stratis pool
      • Add a block device to a Stratis pool by using the web console
    • Monitor Stratis file systems
      • Display information about Stratis file systems
      • View a Stratis pool by using the web console
    • Use snapshots on Stratis file systems
      • Characteristics of Stratis snapshots
      • Create a Stratis snapshot
      • Access the content of a Stratis snapshot
      • Revert a Stratis file system to a previous snapshot
      • Remove a Stratis snapshot
    • Remove Stratis file systems
      • Remove a Stratis file system
      • Delete a file system from a Stratis pool by using the web console
      • Remove a Stratis pool
      • Delete a Stratis pool by using the web console
  • Manage file systems
    • Overview of available file systems
      • Types of file systems
      • Local file systems
      • The XFS file system
      • The ext4 file system
      • Comparison of XFS and ext4
      • Local file system selection
      • Network file systems
      • Shared storage file systems
      • Network and shared storage file systems
      • Volume-managing file systems
    • Manage partitions by using the web console
      • Display partitions formatted with file systems in the web console
      • Create partitions in the web console
      • Delete partitions in the web console
    • Overview of persistent naming attributes
      • Disadvantages of non-persistent naming attributes
      • File system and device identifiers
      • Device names managed by the udev mechanism in /dev/disk/
      • The World Wide Identifier with DM Multipath
      • Limitations of the udev device naming convention
      • List persistent naming attributes
      • Modify persistent naming attributes
    • Partition operations with parted
      • View the partition table with parted
      • Create a partition table on a disk with parted
      • Create a partition with parted
      • Remove a partition with parted
      • Resize a partition with parted
    • Strategies for repartitioning a disk
      • Unpartitioned free space
      • Space from an unused partition
      • Use free space from an active partition
    • Get started with XFS
      • The XFS file system
      • Comparison of tools used with ext4 and XFS
    • Create an XFS file system
      • Create an XFS file system with mkfs.xfs
    • Back up an XFS file system
      • Features of XFS backup
      • Back up an XFS file system with xfsdump
    • Restore an XFS file system from backup
      • Features of restoring XFS from backup
      • Restore an XFS file system from backup with xfsrestore
      • Informational messages when restoring an XFS backup from a tape
    • Increase the size of an XFS file system
      • Increase the size of an XFS file system with xfs_growfs
    • Configure XFS error behavior
      • Configurable error handling in XFS
      • Configuration files for specific and undefined XFS error conditions
      • Set XFS behavior for specific conditions
      • Set XFS behavior for undefined conditions
      • Set the XFS unmount behavior
    • Performance analysis of XFS with PCP
      • Install XFS PMDA manually
      • Examine XFS performance metrics with pminfo
      • Reset XFS performance metrics with pmstore
      • PCP metric groups for XFS
      • Per-device PCP metric groups for XFS
    • Check and repair a file system
      • Scenarios that require a file system check
      • Potential side effects of running fsck
      • Error-handling mechanisms in XFS
      • Check an XFS file system with xfs_repair
      • Repair an XFS file system with xfs_repair
      • Error handling mechanisms in ext2, ext3, and ext4
      • Check an ext2, ext3, or ext4 file system with e2fsck
      • Repair an ext2, ext3, or ext4 file system with e2fsck
    • Mount file systems
      • The Linux mount mechanism
      • List currently mounted file systems
      • Mount a file system with mount
      • Move a mount point
      • Unmount a file system with umount
      • Mount and unmount file systems in the web console
      • Common mount options
    • Share a mount on multiple mount points
      • Types of shared mounts
      • Create a private mount point duplicate
      • Create a shared mount point duplicate
      • Create a slave mount point duplicate
      • Prevent a mount point from being duplicated
    • Persistently mount file systems
      • The /etc/fstab file
      • Add a file system to /etc/fstab
    • Mount file systems on demand
      • The autofs service
      • The autofs configuration files
      • Configure autofs mount points
      • Configure autofs to use ldap for storing and retrieving automount maps
      • Automount NFS server user home directories with autofs service
      • autofs site configuration file overrides and augmentation
      • Use systemd.automount to mount a file system on-demand with /etc/fstab
      • Use systemd.automount to mount a file system on-demand with a mount unit
    • Use the SSSD component from IdM to cache the autofs maps
      • Configure SSSD to cache autofs maps
    • Set read-only permissions for the root file system
      • Files and directories that always retain write permissions
      • Configure the root file system to mount with read-only permissions on boot
    • Limit storage space usage on XFS with quotas
      • Disk quotas
      • The xfs_quota tool
      • File system quota management in XFS
      • Enable disk quotas for XFS
      • Report XFS usage
      • Modify XFS quota limits
      • Set project limits for XFS
    • Limit storage space usage on ext4 with quotas
      • Install the quota tool
      • Enable quota feature on file system creation
      • Enable quota feature on existing file systems
      • Enable quota enforcement
      • Assign quotas per user
      • Assign quotas per group
      • Assign quotas per project
      • Set the grace period for soft limits
      • Turn file system quotas off
      • Report on disk quotas
    • Discard unused blocks
      • Types of block discard operations
      • Perform batch block discard
      • Enable online block discard
      • Enable online block discard by using the storage RHEL system role
      • Enable periodic block discard
    • Factors affecting I/O and file system performance
      • Tools for monitoring and diagnosing I/O and file system issues
      • Available tuning options for formatting a file system
      • Available tuning options for mounting a file system
      • Unused block discarding
      • Solid-state disks tuning considerations
      • Generic block device tuning parameters
    • Configure Stratis file systems
      • Components of a Stratis file system
      • Block devices compatible with Stratis
      • Install Stratis
      • Create an unencrypted Stratis pool
      • Create an unencrypted Stratis pool by using the web console
      • Create an encrypted Stratis pool by using a key in the kernel keyring
      • Create an encrypted Stratis pool by using Clevis
      • Create an encrypted Stratis pool by using the storage RHEL system role
      • Create an encrypted Stratis pool by using the web console
      • Rename a Stratis pool by using the web console
      • Configure overprovisioning mode in a Stratis file system
      • Bind a Stratis pool to NBDE
      • Bind a Stratis pool to TPM
      • Unlock an encrypted Stratis pool with kernel keyring
      • Unbind a Stratis pool from supplementary encryption
      • Change the encryption of an existing Stratis pool
      • Start and stop a Stratis pool
      • Create a Stratis file system
      • Mount a Stratis file system
      • Mount a Stratis file system at boot
      • Create and configure a Stratis file system by using the web console
    • Extend a Stratis pool with additional block devices
      • Add block devices to a Stratis pool
      • Add a block device to a Stratis pool by using the web console
    • Monitor Stratis file systems
      • Display information about Stratis file systems
      • View a Stratis pool by using the web console
    • Use snapshots on Stratis file systems
      • Characteristics of Stratis snapshots
      • Create a Stratis snapshot
      • Access the content of a Stratis snapshot
      • Revert a Stratis file system to a previous snapshot
      • Remove a Stratis snapshot
    • Remove Stratis file systems
      • Remove a Stratis file system
      • Delete a file system from a Stratis pool by using the web console
      • Remove a Stratis pool
      • Delete a Stratis pool by using the web console
    • Get started with an ext4 file system
      • Features of an ext4 file system
      • Create an ext4 file system
      • Mount an ext4 file system
      • Resize an ext4 file system
      • Comparison of tools used with ext4 and XFS
    • Manage file systems by using the storage RHEL system role
  • Configure and manage logical volumes
    • Overview of logical volume management
      • LVM architecture
      • Advantages of LVM
    • Manage LVM physical volumes
      • Create an LVM physical volume
      • Resize physical volumes by using the storage RHEL system role
      • Remove LVM physical volumes
      • Create logical volumes in the web console
      • Format logical volumes in the web console
      • Resize logical volumes in the web console
    • Manage LVM volume groups
      • Create an LVM volume group
      • Create volume groups in the web console
      • Rename an LVM volume group
      • Extend an LVM volume group
      • Combine LVM volume groups
      • Remove physical volumes from a volume group
      • Split an LVM volume group
      • Move a volume group to another system
      • Remove LVM volume groups
      • Remove LVM volume groups in a cluster environment
    • Overview of logical volume features
    • Resize logical volumes
      • Extend a linear logical volume
      • Extend a thin logical volume
      • Extend a VDO Pool
      • Shrink logical volumes
      • Manually extend a thin pool
      • Automatically extend a thin pool
    • Create logical volumes
      • Create a linear (thick) logical volume
      • Create or resize a logical volume by using the storage RHEL system role
      • Create a striped logical volume
      • Create a RAID logical volume
      • Create a thin logical volume
      • Create a VDO logical volume
    • Rename logical volumes
    • Remove logical volumes
    • Activate logical volumes
    • Deactivate logical volumes
    • Manage logical volume snapshots
      • Logical volume snapshots
      • Manage thick logical volume snapshots
      • Manage thin logical volume snapshots
    • Cache logical volumes
      • Cache logical volumes with dm-cache
      • Cache logical volumes with dm-writecache
      • Uncache a logical volume
    • Create a custom thin pool
    • Extend a thin pool
      • Manually extend a thin pool
      • Automatically extend a thin pool
    • Create a custom VDO logical volume
    • Manage system upgrades with snapshots
      • Overview of the Snapshot Manager process
      • Size policies
      • Upgrade to another version by using Snapshot Manager
      • Switch between Red Hat Enterprise Linux versions
      • Delete the snapshot set after a successful upgrade
      • Revert after an unsuccessful update
    • Customize the LVM report
      • LVM display format control
      • LVM display units
      • Customize the LVM configuration file
      • LVM selection criteria
    • Configure LVM on shared storage
      • Configure LVM for VM disks
      • Configure LVM to use SAN disks on one machine
      • Configure LVM to use SAN disks for failover
      • Configure LVM to share SAN disks among multiple machines
      • Create shared LVM devices by using the storage RHEL system role
    • Configure RAID logical volumes
      • RAID levels and linear support
      • LVM RAID segment types
      • Parameters for creating a RAID0
      • Create RAID logical volumes
      • Configure an LVM volume group on RAID by using the storage RHEL system role
      • Create a RAID0 striped logical volume
      • Configure a stripe size for RAID LVM volumes by using the storage RHEL system role
      • Soft data corruption
      • Create a RAID logical volume with DM integrity
      • Convert a RAID logical volume to another RAID level
      • Convert a linear device to a RAID logical volume
      • Convert an LVM RAID1 logical volume to an LVM linear logical volume
      • Convert a mirrored LVM device to a RAID1 logical volume
      • Change the number of images in an existing RAID1 device
      • Split off a RAID image as a separate logical volume
      • Split and merge a RAID image
      • Set the RAID fault policy to allocate
      • Set the RAID fault policy to warn
      • Replace a working RAID device
      • Replace a failed RAID device in a logical volume
      • Check data coherency in a RAID logical volume
      • I/O operations on a RAID1 logical volume
      • Reshape a RAID volume
      • Change the region size on a RAID logical volume
    • Limit LVM device visibility and usage
      • The LVM devices file
      • Persistent identifiers for LVM filtering
      • The LVM device filter
    • Control LVM allocation
      • Allocate extents from specified devices
      • LVM allocation policies
      • Prevent allocation on a physical volume
    • Group LVM objects with tags
      • LVM object tags
      • Add tags to LVM objects
      • Remove tags from LVM objects
      • Display tags on LVM objects
      • Logical volume activation control with tags
    • Troubleshoot LVM
      • Gather diagnostic data on LVM
      • Information about failed LVM devices
      • Remove lost LVM physical volumes from a volume group
      • Find the metadata of a missing LVM physical volume
      • Restore metadata on an LVM physical volume
      • Rounding errors in LVM output
      • Prevent the rounding error when creating an LVM volume
      • LVM metadata and their location on disk
      • Extract VG metadata from a disk
      • Save extracted metadata to a file
      • Repair a disk with damaged LVM headers and metadata by using the pvcreate and the vgcfgrestore commands
      • Repair a disk with damaged LVM headers and metadata by using the pvck command
      • Troubleshoot duplicate physical volume warnings for multipathed LVM devices
    • Manage LVM storage by using the storage RHEL system role
    • Configure RAID by using the storage RHEL system role
  • Deduplicate and compress logical volumes on RHEL
    • Introduction to VDO on LVM
    • LVM-VDO requirements
      • VDO memory requirements
      • Differences between the sparse and dense index
      • VDO storage space requirements
      • Examples of VDO requirements by physical size
      • Placement of LVM-VDO in the storage stack
      • LVM-VDO deployment scenarios
    • Create a deduplicated and compressed logical volume
      • The physical and logical size of an LVM-VDO volume
      • Slab size in VDO
      • Install VDO
      • Create and mount an LVM-VDO volume
      • Configure an LVM-VDO volume by using the storage RHEL system role
      • Create LVM-VDO volumes in the web console
      • Format LVM-VDO volumes in the web console
      • Extend LVM-VDO volumes in the web console
      • Change the compression settings on an LVM-VDO volume
      • Change the deduplication settings on an LVM-VDO volume
      • Manage thin-provisioned LVM-VDO volumes
    • Trim options on an LVM-VDO volume
      • Enable discard mount option on an LVM-VDO volume
      • Configure periodic TRIM operation
    • Optimize LVM-VDO performance
      • VDO thread types
      • Identify performance bottlenecks
      • Redistribute VDO threads
      • Increase block map cache size to enhance performance
      • Speed up discard operations
      • Optimize CPU frequency scaling
  • Establish highly available and resilient storage connections
    • DM Multipath configurations
      • Active/Passive multipath configuration with one RAID device
      • Active/Passive multipath configuration with two RAID devices
      • Active/Active multipath configuration with one RAID device
      • DM Multipath components
      • Display multipath topology
      • Path status
    • Multipath devices
      • Multipath device identifiers
      • Multipath devices in logical volumes
    • Configure DM Multipath
      • Check for the device-mapper-multipath package
      • Set up a basic failover configuration with DM Multipath
      • Exclude local disks when generating multipath devices
      • Configure additional storage with DM Multipath
      • Configure multipathing in initramfs
    • Modify the DM Multipath configuration file
      • Configuration file overview
      • Configuration file defaults
      • Configuration file multipaths section
      • Configuration file devices section
      • Configuration file overrides section
      • DM Multipath overrides of the device timeout
      • Modify multipath configuration file defaults
      • Modify multipath settings for specific devices
      • Modify the multipath configuration for specific devices with protocol
      • Modify multipath settings for storage controllers
      • Set multipath values for all devices
    • Exclude devices from multipathing
      • Conditions when DM Multipath creates a multipath device for a path
      • Criteria for disabling multipathing on certain devices
      • Disable multipathing by WWID
      • Disable multipathing by device name
      • Disable multipathing by device type
      • Disable multipathing by udev property
      • Disable multipathing by device protocol
      • Configure exceptions for devices with disabled multipathing
    • Manage and scale active multipathed volumes
      • Resize an online multipath device
      • Move a root file system from a single path device to a multipath device
      • Move a swap file system from a single path device to a multipath device
      • Determine device mapper entries for multipath devices
      • Administer the multipathd daemon
    • Remove storage devices
      • Safe removal of storage devices
      • Remove block devices and associated metadata
    • Troubleshoot DM Multipath
      • Troubleshoot issues with queue_if_no_path feature
      • Troubleshoot with the multipathd interactive console
    • Configure maximum time for storage error recovery with eh_deadline
      • The eh_deadline parameter
      • Set the eh_deadline parameter
  • Share and access network storage
    • Use Samba as a server
      • Understand the different Samba services and modes
      • Verify the smb.conf file by using the testparm utility
      • Set up Samba as a standalone server
      • Understand and configure Samba ID mapping
      • Planning Samba ID ranges
      • The * default domain
      • The tdb ID mapping back end
      • Use the ad ID mapping back end
      • Use the rid ID mapping back end
      • Use the autorid ID mapping back end
      • Set up Samba as an AD domain member server
      • Set up Samba on an IdM domain member
      • Set up a Samba file share that uses POSIX ACLs
      • Add a share that uses POSIX ACLs
      • Set standard Linux ACLs on a Samba share that uses POSIX ACLs
      • Set extended ACLs on a Samba share that uses POSIX ACLs
      • Set permissions on a share that uses POSIX ACLs
      • Set up a share that uses Windows ACLs
      • Manage ACLs on an SMB share by using smbcacls
      • Access control entries
      • Display ACLs by using smbcacls
      • ACE mask calculation
      • ACL management with smbcacls
      • Enable users to share directories on a Samba server
      • Configure a share to allow access without authentication
      • Configure Samba for macOS clients
      • Use the smbclient utility to access an SMB share
      • Set up Samba as a print server
      • Set up automatic printer driver downloads for Windows clients on Samba print servers
      • Run Samba on a server with FIPS mode enabled
      • Tune the performance of a Samba server
      • Configure Samba to be compatible with clients that require an SMB version lower than the default
      • Frequently used Samba command-line utilities
    • Mount SMB shares
      • Supported SMB protocol versions
      • UNIX extensions support
      • Manually mount an SMB share
      • Mount an SMB share automatically when the system boots
      • Create a credentials file to authenticate to an SMB share
      • Perform a multi-user SMB mount
      • Mount a share with the multiuser option
      • Verify if an SMB share is mounted with the multiuser option
      • Share access as a user
      • Frequently used SMB mount options
    • Deploy an NFS server
      • Key features of minor NFSv4 versions
      • The AUTH_SYS authentication method
      • The AUTH_GSS authentication method
      • File permissions on exported file systems
      • Services required on an NFS server
      • The /etc/exports configuration file
      • Configure an NFSv4-only server
      • Configure an NFSv3 server with optional NFSv4 support
      • Enable quota support on an NFS server
      • Enable NFS over RDMA on an NFS server
      • Set up an NFS server with Kerberos in an Identity Management domain
      • Configure an NFS server with TLS support
      • Configure an NFS client with TLS support
      • Configure an NFS client with mutual TLS support
    • Mount NFS shares
      • Services required on an NFS client
      • Prepare an NFSv3 client to run behind a firewall
      • Prepare an NFSv4 client to run behind a firewall
      • Manually mount an NFS share
      • Mount an NFS share automatically when the system boots
      • Connect NFS mounts in the web console
      • Customize NFS mount options in the web console
      • Set up an NFS client with Kerberos in an IdM domain
      • Configure GNOME to store user settings on home directories hosted on an NFS share
      • Configure an NFS server with TLS support
      • Configure an NFS client with TLS support
      • Configure an NFS client with mutual TLS support
      • Frequently used NFS mount options
      • Enable client-side caching of NFS content
Administer
  • Automate consistent configuration and management at scale
    • RHEL system roles for remote system management
    • Prepare a control node and managed nodes to use RHEL system roles
      • Prepare a control node on RHEL 10
      • Prepare a managed node
    • Register the system by using RHEL system roles
      • Register a system by using the rhc RHEL system role
      • Disable the connection to Red Hat Lightspeed after the registration by using the rhc RHEL system role
      • Manage repositories by using the rhc RHEL system role
      • Lock the system to a particular release by using the rhc RHEL system role
      • Use a proxy server when registering the host by using the rhc RHEL system role
      • Manage auto updates of Red Hat Lightspeed rules by using the rhc RHEL system role
      • Configure Red Hat Lightspeed remediations by using the rhc RHEL system role
      • Configure Red Hat Lightspeed tags by using the rhc RHEL system role
      • Unregister a system by using the rhc RHEL system role
    • Ansible vault for encrypting sensitive data
    • Join RHEL systems to an Active Directory by using RHEL system roles
      • Join RHEL to an Active Directory domain by using the ad_integration RHEL system role
    • Configure the GRUB 2 boot loader by using RHEL system roles
      • Update the existing boot loader entries by using the bootloader RHEL system role
      • Secure the boot menu with a password by using the bootloader RHEL system role
      • Set a timeout for the boot loader menu by using the bootloader RHEL system role
      • Collect the boot loader configuration information by using the bootloader RHEL system role
    • Request certificates from a CA and create self-signed certificates by using RHEL system roles
    • Request a new certificate from an IdM CA by using the certificate RHEL system role
    • Request a new self-signed certificate by using the certificate RHEL system role
    • Install and configure the web console by using RHEL system roles
      • Install the web console by using the cockpit RHEL system role
    • Build and manage immutable systems (ostree) by using RHEL system roles
      • RHEL system roles support for rpm-ostree systems
      • Install system role dependencies in a container build
    • Set a custom cryptographic policy by using RHEL system roles
      • Enhance security with the FUTURE cryptographic policy using the crypto_policies RHEL system role
    • Restrict the execution of applications by using the fapolicyd RHEL system role
      • Prevent users from executing untrustworthy code by using the fapolicyd RHEL system role
    • Configure firewalld by using RHEL system roles
    • Configure the Audit daemon by using RHEL system roles
    • Configure a high-availability cluster by using the ha_cluster system role
      • Initialize and secure the cluster environment
      • Configure core cluster resources and governance
      • Implement advanced cluster services and quorum options
    • Configure the systemd journal by using RHEL system roles
      • Configure persistent logging by using the journald RHEL system role
    • Configure automatic crash dumps by using RHEL system roles
      • Configure the kernel crash dumping mechanism by using the kdump RHEL system role
    • Configure kernel parameters permanently by using RHEL system roles
      • Apply selected kernel parameters by using the kernel_settings RHEL system role
    • Configure logging by using RHEL system roles
      • Filter local log messages by using the logging RHEL system role
      • Apply a remote logging solution by using the logging RHEL system role
      • Use the logging RHEL system role with TLS
      • Configure client logging with TLS
      • Configure server logging with TLS
      • Use the logging RHEL system roles with RELP
      • Configure client logging with RELP
      • Configure server logging with RELP
    • Configure performance monitoring with PCP by using RHEL system roles
      • Configure Performance Co-Pilot by using the metrics RHEL system role
      • Configure Performance Co-Pilot with authentication by using the metrics RHEL system role
      • Set up Grafana by using the metrics RHEL system role to monitor multiple hosts with Performance Co-Pilot
      • Configure web hooks in Performance Co-Pilot by using the metrics RHEL system role
    • Configure NBDE by using RHEL system roles
    • Configure network settings by using RHEL system roles
      • Configure network connections and interfaces by using the network RHEL system role
      • Manage network routing by using the network RHEL system role
      • Configure network interface performance by using the network RHEL system role
      • Network states for the network RHEL system role
    • Manage containers by using RHEL system roles
      • RHEL system roles integration with bootc-based image building
      • Configure image registry management for Podman and other container tools
      • Create a rootless container with bind mount by using the podman RHEL system role
      • Create a rootful container with Podman volume by using the podman RHEL system role
      • Create a Quadlet application with secrets by using the podman RHEL system role
    • Configure Postfix MTA by using RHEL system roles
      • Configure Postfix as a null client for only sending outgoing emails
    • Install and configure a PostgreSQL database server by using RHEL system roles
      • Configure PostgreSQL with an existing TLS certificate by using the postgresql RHEL system role
      • Configure PostgreSQL with a TLS certificate issued from IdM by using the postgresql RHEL system role
    • Configure SELinux by using RHEL system roles
      • Restore the SELinux context on directories by using the selinux RHEL system role
      • Manage SELinux network port labels by using the selinux RHEL system role
      • Deploy an SELinux module by using the selinux RHEL system role
    • Configure the OpenSSH server and client by using RHEL system roles
    • Manage local storage by using RHEL system roles
      • Manage file systems by using the storage RHEL system role
      • Manage LVM storage by using the storage RHEL system role
      • Configure RAID by using the storage RHEL system role
      • Create a LUKS2 encrypted volume by using the storage RHEL system role
    • Configure sudo access by using RHEL system roles
      • Apply custom sudoers configuration by using RHEL system roles
    • Manage systemd units by using RHEL system roles
      • Manage services by using the systemd RHEL system role
      • Deploy systemd drop-in files by using the systemd RHEL system role
      • Deploy systemd units by using the systemd RHEL system role
      • Deploy systemd user units by using the systemd RHEL system role
    • Configure time synchronization by using RHEL system roles
      • Configure time synchronization over NTP by using the timesync RHEL system role
      • Configure time synchronization over NTP with NTS by using the timesync RHEL system role
    • Configure a system for session recording by using RHEL system roles
      • Configure session recording for individual users by using the tlog RHEL system role
      • Exclude certain users and groups from session recording by using the tlog RHEL system role
    • Configure IPsec VPN connections by using RHEL system roles
  • Manage system environments with AI or graphical user interfaces
    • Manage systems in the RHEL web console
      • Get started with the RHEL web console
      • Install web console add-ons and create custom pages
      • Manage remote systems in the web console
      • Manage subscriptions in the web console
      • Configure smart card authentication with the web console for centrally managed users
      • Configure SSO authentication for the RHEL web console in the IdM domain
      • Satellite host management and monitoring in the web console
    • Interact with the command-line assistant
      • Introduction to RHEL command-line assistant on RHEL
        • Introduction to goose
        • How the goose package processes your data
      • Install the command-line assistant
        • Install and configure the goose-redhat package
          • Install standalone goose
          • Common goose CLI commands
          • Integrate the RHEL Model Context Protocol (MCP) server
          • Migrate from the command-line assistant to goose-redhat
      • Provision the command-line assistant to RHEL deployments with Red Hat Satellite
      • Use the command-line assistant on RHEL systems
      • Use the RHEL command-line assistant with self-managed inference
        • The self-managed RHEL command-line assistant architecture
        • Deploy the self-managed RHEL command-line assistant backend on a single RHEL system
        • Configure user-specific settings for the RHEL command-line assistant
        • Use goose as a client
        • Update the self-managed RHEL command-line assistant
          • Deployment configuration reference
      • Troubleshoot the command-line assistant
      • Use the command-line assistant to debug or troubleshoot system issues
      • Use the MCP server for RHEL to enable AI assistants to run, discover, and troubleshoot complex issues
        • Troubleshoot MCP server operations
        • Frequently asked questions about the MCP server for RHEL
      • Use the MCP server for RHEL in air-gapped environments
      • Configure Guarded Command Execution in linux-mcp-server
      • Advanced features for the MCP Server for RHEL
      • HTTP transport mode and OAuth 2.0 authentication in MCP server for RHEL
      • Configure OAuth 2.0 authentication with HTTP transport mode
      • Troubleshoot OAuth 2.0 authentication issues
      • Advanced PCP monitoring and visualization
        • Install PCP bpftrace
        • View the PCP bpftrace System Analysis dashboard
        • Install PCP Vector
        • View the PCP Vector Checklist
        • Use heatmaps in Grafana
        • Configure pcp-geolocate for Grafana geomaps
        • Visualize PCP data with geomaps in Grafana
        • Manage SELinux booleans for Grafana
        • Troubleshoot Grafana issues
      • Manage databases with the command-line assistant daemon
      • Modify the configuration of the command-line assistant
  • Manage system services and boot behavior
    • Manage system services with systemctl
      • List system services
      • System service status display
      • Start and stop a systemd unit
      • Restart and reload a system service
      • Enable a system service to start at boot
      • Disable a system service to start at boot
    • Work with systemd unit files
      • Introduction to unit files
      • Systemd unit files locations
      • Unit file structure
      • Important [Unit] section options
      • Important [Service] section options
      • Important [Install] section options
      • Create custom unit files
      • Create a custom unit file by using the second instance of the sshd service
      • systemd service descriptions and dependencies
      • Default targets of the service
      • Files used by the service
      • Modify existing unit files
      • Extend the default unit configuration
      • Override the default unit configuration
      • Change the timeout limit
      • Monitor overridden units
      • Instantiated units
      • Important unit specifiers
    • Boot into a target system state
      • Target unit files
      • Change the default target for booting a system
      • Temporarily change the current target
      • Boot to rescue mode
      • Troubleshoot the boot process
    • Shut down, suspend, and hibernate the system
      • Schedule a system shutdown
      • Shut down the system using the systemctl command
      • Restart the system
      • Power consumption optimization through suspend and hibernate
      • Change the behavior of the power button when GNOME is not running
      • Change the behavior of the power button in GNOME
    • Optimize systemd to shorten the boot time
      • Examine system boot performance
      • A guide to disable selective services
    • Reinstall GRUB
      • Reinstall GRUB on BIOS-based machines
      • Reinstall GRUB on UEFI-based machines
      • Reinstall GRUB on IBM Power machines
      • Reset GRUB
    • Configure kernel command-line parameters
      • What are kernel command-line parameters
      • Boot entries
      • Change kernel command-line parameters for all boot entries
      • Change kernel command-line parameters for a single boot entry
      • Change kernel command-line parameters temporarily at boot time
      • Configure GRUB settings to enable serial console connection
      • Change boot entries with the GRUB configuration file
    • Configure kernel parameters at runtime
      • What are kernel parameters
      • Configure kernel parameters temporarily with sysctl
      • Configure kernel parameters permanently with sysctl
      • Use configuration files in /etc/sysctl.d/ to adjust kernel parameters
      • Configure kernel parameters temporarily through /proc/sys/
    • Manage kernel command-line parameters with UKI
      • Kernel command-line parameters with UKI
      • Boot entries
      • Acquire UKI add-ons to add kernel command-line parameters
      • Change kernel command-line parameters for all boot entries
      • Change kernel command-line parameters for a single UKI
      • Create UKI to contain customized kernel command-line parameters
    • Manage kernel modules
      • Introduction to kernel modules
      • Kernel module dependencies
      • List installed kernel modules
      • List currently loaded kernel modules
      • Display information about kernel modules
      • Load kernel modules at system runtime
      • Unload kernel modules at system runtime
      • Unload kernel modules at early stages of the boot process
      • Load kernel modules automatically at system boot time
      • Prevent kernel modules from being automatically loaded at system boot time
      • Compile custom kernel modules
  • Back up and recover data
    • Recover and restore a system
      • Configure ReaR and manually create a backup
      • Use a ReaR rescue image on the 64-bit IBM Z architecture
      • Recover your system by using ReaR
      • Modify the content of the ReaR backup
    • Back up an XFS file system
      • Features of XFS backup
      • Back up an XFS file system with xfsdump
    • Restore an XFS file system from backup
      • Features of restoring XFS from backup
      • Restore an XFS file system from backup with xfsrestore
      • Informational messages when restoring an XFS backup from a tape
    • Use snapshots on Stratis file systems
      • Characteristics of Stratis snapshots
      • Create a Stratis snapshot
      • Access the content of a Stratis snapshot
      • Revert a Stratis file system to a previous snapshot
      • Remove a Stratis snapshot
    • Manage system upgrades with snapshots
      • Overview of the Snapshot Manager process
      • Size policies
      • Upgrade to another version by using Snapshot Manager
      • Switch between Red Hat Enterprise Linux versions
      • Delete the snapshot set after a successful upgrade
      • Revert after an unsuccessful update
    • Save and restore virtual machine state by using snapshots
      • Support limitations for virtual machine snapshots
      • Create virtual machine snapshots by using the command line
      • Create virtual machine snapshots by using the web console
      • Revert to a virtual machine snapshot by using the command line
      • Revert to a virtual machine snapshot by using the web console
      • Delete virtual machine snapshots by using the command line
      • Delete virtual machine snapshots by using the web console
  • Install, upgrade, and remove packages to provision and maintain your system
    • Distribution of content in RHEL 10
      • Software repositories
      • Application Streams
    • Configure DNF
      • Display the current DNF configurations
      • Configure DNF main options
      • Enable and disable DNF plugins
      • Exclude packages from DNF operations
    • Add and configure custom software repositories
    • Search for RHEL content
      • Search for software packages
      • List software packages
      • Display package information
      • List package groups and packages they provide
      • List enabled and disabled repositories
      • Specify glob expressions in DNF input
    • Install RHEL content
      • Install software packages
      • Install package groups
    • Update RHEL content
      • Check for available software updates
      • Update software packages
      • Update security-related packages
    • Automate software updates in RHEL
      • Install DNF Automatic
      • Structure of the DNF Automatic configuration file
      • Enable automated updates
      • Systemd timer units for automated package updates
    • Remove unnecessary RHEL content
      • Remove installed packages
      • Remove package groups
    • Audit package management history and revert changes
      • List DNF transactions
      • Revert DNF transactions
    • DNF command reference
      • Commands for listing content in RHEL
      • Commands for installing content in RHEL
      • Commands for removing content in RHEL
    • Install and maintain the kernel package
      • What the kernel is
      • Understand RHEL kernel version numbers
      • What the version string does not mean
      • How RHEL kernels evolve
      • Examples on RHEL 8, RHEL 9, and RHEL 10
      • How to determine kernel capabilities
      • RPM packages
      • The Linux kernel RPM package overview
      • The 64k page size kernel
      • Determine kernel page size by system architecture
      • Display contents of the kernel package
      • Install specific kernel versions
      • Update the kernel
      • Set a kernel as default
  • Deploy and manage database servers
    • Deploy and manage MariaDB
      • Install MariaDB
      • Use containers to run multiple MariaDB and MySQL instances on a single host
      • Configure network access to MariaDB
      • Set up TLS encryption on a MariaDB server
      • Configure the MariaDB client to use TLS encryption by default
      • Back up and restore MariaDB data with logical dumps
      • Back up and restore MariaDB data with physical copies
      • Replicate MariaDB with Galera
      • Migrate a MariaDB instance from a previous RHEL version to MariaDB 10.11 on RHEL 10
      • Upgrade from a RHEL 10 version of MariaDB 10.11 to MariaDB 11.8
    • Deploy and manage MySQL
      • Install MySQL
      • Use containers to run multiple MariaDB and MySQL instances on a single host
      • Configure network access to MySQL
      • Set up TLS encryption on a MySQL server
      • Configure the MySQL client to use TLS encryption by default
      • Back up and restore MySQL data with logical dumps
      • Back up and restore MySQL data with physical copies
      • Replicate MySQL with TLS encryption
      • Migrate a MySQL instance from a previous RHEL version to MySQL 8.4 on RHEL 10
    • Deploy and manage PostgreSQL
      • Install PostgreSQL
      • Use containers to run multiple PostgreSQL instances on a single host
      • Create PostgreSQL users
      • Configure PostgreSQL
      • Configure TLS encryption on a PostgreSQL server
      • Back up and restore PostgreSQL data with logical dumps
      • Back up and restore PostgreSQL data with physical copies
      • Back up and restore PostgreSQL data with continuous archiving
      • Directly transfer a PostgreSQL database from one server to another
      • Migrate a PostgreSQL instance from a previous RHEL version to PostgreSQL on RHEL 10
      • Upgrade from a RHEL 10 version of PostgreSQL 16 to PostgreSQL 18
  • Host and secure web applications and proxy traffic
    • Deploy and configure Apache HTTP Server
      • The Apache HTTP web server
      • The Apache configuration files
      • Manage the httpd service
      • Configure a single-instance Apache HTTP server
      • Configure Apache name-based virtual hosts
      • Configure Kerberos authentication for the Apache HTTP web server
      • Configure TLS encryption on an Apache HTTP server
      • Configure TLS client certificate authentication
      • Install the Apache HTTP server manual
      • Work with Apache modules
    • Deploy and configure NGINX
      • Install and prepare NGINX
      • Configure NGINX to serve content for multiple domains
      • Add TLS encryption to NGINX
      • Configure NGINX as an HTTP reverse proxy
      • Configure NGINX as an HTTP load balancer
    • Deploy and configure Squid caching proxy
      • Configure Squid as a caching proxy without authentication
      • Configure Squid as a caching proxy with LDAP authentication
      • Configure Squid as a caching proxy with Kerberos authentication
      • Configure a domain deny list in Squid
      • Configure the Squid service to listen on a specific port or IP address
  • Establish shared printing for an organization
    • Set up a centralized print server
      • Install and configure CUPS
      • Configure TLS encryption on a CUPS server
      • Grant administration permissions to manage a CUPS server in the web interface
      • Configure a high-availability CUPS print server environment
    • Add and manage printers on the print server
      • Add a printer to CUPS by using the web interface
      • Add a printer to CUPS by using the lpadmin utility
      • Perform maintenance and administration tasks on CUPS printers by using the web interface
      • Packages with printer drivers
      • Determine whether a printer supports driverless printing
      • Driverless USB printing
      • Set up a legacy printer
    • Integrate with other print environments
      • Use Samba to print to a Windows print server with Kerberos authentication
      • Use cups-browsed to locally integrate printers from a remote print server
    • Troubleshoot printing errors
      • Access the CUPS logs in the systemd journal
      • Configure CUPS to store logs in files instead of the systemd journal
    • Access the CUPS documentation
  • Host and manage mail server services
    • Configure and maintain a Dovecot IMAP and POP3 server
      • Configure a Dovecot server with PAM authentication
      • Install Dovecot
      • Configure TLS encryption on a Dovecot server
      • Prepare Dovecot to use virtual users
      • Use PAM as the Dovecot authentication back end
      • Complete the Dovecot configuration
      • Configure a Dovecot server with LDAP authentication
      • Install Dovecot
      • Configure TLS encryption on a Dovecot server
      • Prepare Dovecot to use virtual users
      • Use LDAP as the Dovecot authentication back end
      • Complete the Dovecot configuration
      • Configure a Dovecot server with MariaDB SQL authentication
      • Install Dovecot
      • Configure TLS encryption on a Dovecot server
      • Prepare Dovecot to use virtual users
      • Use a MariaDB SQL database as the Dovecot authentication back end
      • Complete the Dovecot configuration
      • Additional Dovecot configuration
      • Configure replication between two Dovecot servers
      • Automatically subscribe users to IMAP mailboxes
      • Configure an LMTP socket and LMTPS listener
      • Disable the IMAP or POP3 service in Dovecot
      • Enable server-side email filtering with Sieve on a Dovecot IMAP server
      • How Dovecot processes configuration files
    • Deploy and configure a Postfix SMTP server
      • Install and configure a Postfix SMTP server
      • Customize TLS settings of a Postfix server
      • Configure Postfix to forward all emails to a mail relay
      • Configure Postfix as a destination for multiple domains
      • Use an LDAP directory as a lookup table
      • Configure Postfix as an outgoing mail server to relay for authenticated users
      • Deliver email from Postfix to Dovecot running on the same host
      • Deliver email from Postfix to Dovecot running on a different host
      • Secure the Postfix service
  • Maintain accurate system time
    • Introduction to chrony suite
    • Configure and manage chrony for time synchronization
      • Manage chrony
      • Manually adjust the system clock
      • Disable a NetworkManager dispatcher script
      • Configure chrony in an isolated network
      • Configure remote monitoring access
      • Check if chrony is synchronized
      • Monitor NTP clients
    • Improve time accuracy with hardware timestamping
      • Verify support for hardware timestamping
      • Enable hardware timestamping
      • Configure PTP-NTP bridge
    • Secure time synchronization with Network Time Security
      • Enable Network Time Security (NTS) on a client
      • Enable Network Time Security (NTS) on a time server
  • Set up RHEL desktops for managed deployments
    • Remotely access the desktop
      • Enable desktop sharing on the server by using GNOME
      • Configure GNOME remote login
      • Connect to a remote desktop by using GNOME
      • Connect to a remote desktop session on a headless server for a single user
      • Connect to a remote desktop session on a headless server for multiple users
    • Remotely access a graphical application
      • Launch an application remotely by using waypipe
      • Launch an application remotely by using X11 forwarding
      • Enable X11 forwarding on the server
    • Set a default desktop session for all users
    • Configure GNOME to store user settings on home directories hosted on an NFS share
    • Enable automatic login
    • Enable authentication with enterprise credentials in GNOME
      • Configure enterprise credentials in GNOME
      • Add enterprise users in GNOME
      • Log in to GNOME with enterprise credentials
    • Enable authentication mechanism selection in GDM using SSSD
      • Passwordless authentication for centrally managed users in GDM
      • Enable authentication mechanism selection in GDM using SSSD
    • Customize desktop appearance and branding
      • Customize desktop backgrounds
      • Customize the branding of the login screen
    • Display system security classification
      • Enable system security classification banners
      • Notify of the system security classification
    • Change system power settings
      • Change the power button behavior
      • Change how your system behaves when you close the laptop lid
    • Restrict the desktop session
      • Disable user logout and user switching
      • Disable printing
      • Disable file saving
      • Disable the shell prompt
      • Disable repartitioning
      • Restrict the session to a single application
    • Set up a printer
      • Access printer settings in GNOME
      • Add a new printer in Settings
      • Print a test page in Settings
      • Modify printer settings
    • Enable and enforce GNOME Shell extensions
      • Enable system-wide GNOME Shell extensions
      • Restrict GNOME Shell extensions
      • Manage GNOME Shell extensions by using the command line
    • Install applications by using Flatpak
      • The Flatpak technology
      • Set up Flatpak
      • Enable the Red Hat Flatpak remote on an unsubscribed system
      • Search for Flatpak applications
      • Install Flatpak applications
      • Launch Flatpak applications
      • Update Flatpak applications
      • Install Flatpak applications in the graphical interface
      • Update Flatpak applications in the graphical interface
  • Deploy and maintain high availability cluster environments
    • High Availability Add-On
    • Set up the HA Cluster Management add-on for the RHEL web console
      • Install and enable the HA Cluster Management add-on for the RHEL web console
      • Grant HA Cluster Management permissions
    • Create a Red Hat High-Availability cluster with Pacemaker
      • Install cluster software
      • Install the pcp-zeroconf package
      • Create a high availability cluster
      • High availability cluster with multiple links
      • Configure fencing
      • Back up and restore a cluster configuration
      • Enable ports for the High Availability Add-On
      • Key resources for configuring a Red Hat High Availability cluster with IBM z or VM instances as cluster members
    • Configure an active/passive Apache HTTP server in a Red Hat High Availability cluster
      • Configure an LVM volume with an XFS file system in a Pacemaker cluster
      • Configure an Apache HTTP Server
      • Create the resources and resource groups
      • Test the resource configuration
    • Configure an active/passive NFS server in a Red Hat High Availability cluster
      • Configure an LVM volume with an XFS file system in a Pacemaker cluster
      • Configure an NFS share
      • Configure the resources and resource group for an NFS server in a cluster
      • NFS resource configuration testing
    • Save a configuration change to a working file
    • Cluster status display
    • Configure cluster parameters by managing the corosync.conf file with pcs
      • Modify the corosync.conf file
      • Display the corosync.conf file
      • Export the corosync.conf file
    • Configure fencing in a Red Hat High Availability cluster
    • Discover and create fencing devices
    • Available fence agents and their options
    • Create a fence device
    • General properties of fencing devices
    • Fencing delays
    • Test a fence device
    • Configure fencing levels and topologies
    • Configure fencing levels
    • Remove a fence level
    • Clear fence levels
    • Verify nodes and devices in fence levels
    • Specify nodes in fencing topology
    • Configure fencing for redundant power supplies
    • Administer fence devices
    • Configure SBD fencing in a high-availability cluster
      • SBD fencing methods comparison
      • Configure watchdog-only SBD fencing
      • Create a visible watchdog device for selective fencing
      • Configure watchdog-only SBD fencing in a 2-node cluster with a QDevice
      • Configure poison-pill SBD fencing
      • Timing configuration considerations in poison-pill fencing
    • Configure cluster resources
      • Resource agent identifiers
      • Resource display commands
      • Add descriptions to cluster resources and elements
      • Resource meta options
      • Set meta options
      • Change the default value of a resource option
      • Change the default value of a resource option for sets of resources
      • Display currently configured resource defaults
      • Resource groups
      • Resource dependencies
    • Configure resource placement on specific cluster nodes
      • Configure location constraints
      • Limit resource discovery to node subsets
      • Location constraint strategy
      • Resource preferences for current nodes
    • Configure resource execution sequences
      • A mandatory ordering constraint
      • Configure advisory ordering
      • Ordered resource sets
      • Configure startup order for resource dependencies not managed by Pacemaker
    • Colocate cluster resources
      • Specify mandatory placement of resources
      • Advisory placement of resources
      • Resource colocation sets
    • Export resource constraints as pcs commands
    • Node attributes for node-specific values
    • Determine resource location with rules
      • Pacemaker rules
      • Pacemaker location constraint rules
      • Remove a Pacemaker rule
    • Manage cluster resources
      • Export cluster resources as pcs commands
      • Modify resource parameters
      • Clear cluster resource failure statuses
      • Move resources in a cluster
      • Configure and manage cluster resource tags
    • Create cluster resources active on multiple nodes
      • Create and remove a cloned resource
      • Clone resource constraints
      • Promotable clone resources
    • Manage cluster nodes
      • Stop cluster services
      • Enable and disable cluster services
      • Add cluster nodes
      • Remove cluster nodes
      • Add a node to a cluster with multiple links
      • Add and modify links in an existing cluster
      • Configure a node health strategy
      • Configuration settings for large clusters with many resources
    • Set user permissions for a Pacemaker cluster
      • Set permissions for node access over a network
      • Set local permissions by using ACLs
    • Configure monitoring operations to track resource health
      • Resource monitoring operation options
      • Modify resource monitoring options
      • Global resource operation defaults
      • Configure multiple monitoring operations
      • Disable a monitoring operation
    • Manage Pacemaker cluster properties
      • Summary of cluster properties and options
      • Set and remove cluster properties
      • Query cluster property settings
      • Export cluster properties as pcs commands
    • Configure resources to remain stopped on clean node shutdown
      • Shutdown lock properties for resource control
      • Set the shutdown-lock cluster property
    • Node placement strategies and resource allocation
      • Utilization attributes and placement strategy
      • Pacemaker resource allocation
      • Resource placement strategy guidelines
      • The NodeUtilization resource agent
    • Configure a virtual domain as a resource
      • Virtual domain resource options
      • Create the virtual domain resource
    • Configure cluster quorum
      • Quorum configuration options
      • Modify quorum options
      • Display quorum configuration and status
      • Run inquorate clusters
    • Configure quorum devices
      • Install quorum device packages
      • Configure a quorum device
      • Quorum device service management options
      • Quorum device management options in a cluster
    • Trigger scripts for cluster events
      • Install and configure sample alert agents
      • Create a cluster alert
      • Commands for displaying, modifying, and removing cluster alerts
      • Commands for configuring cluster alert recipients
      • Configure cluster alert meta options
      • Display configured cluster alerts as pcs commands
      • Create and modify a cluster alert
      • Cluster alert agent specifications
    • Configure multi-site Pacemaker clusters
      • Booth cluster ticket manager
      • Configure multi-site clusters with Pacemaker
      • Remove a Booth ticket
    • Integrate non-corosync nodes into a cluster
      • Configure host and guest authentication for pacemaker_remote nodes
      • Configure KVM guest nodes
      • Resource options for Pacemaker remote nodes
      • Configure a remote node
      • Change the default port location
      • Upgrade systems with pacemaker_remote nodes
      • Verify that remote nodes are not fenced unnecessarily
    • Perform cluster maintenance
      • Put a node into standby mode
      • Options to move cluster resource location
      • Disable, enable, and ban cluster resources
      • Set a resource to unmanaged mode
      • Cluster maintenance mode options
      • RHEL high availability cluster updates
      • Upgrade remote nodes and guest nodes
      • Migrate VMs in a RHEL cluster
      • Identify clusters by UUID
      • Rename a cluster
    • Remove the cluster configuration
    • Configure disaster recovery clusters
      • Considerations for disaster recovery clusters
      • Display status of recovery clusters
    • Resource agent OCF return codes
    • Configure a Red Hat High Availability cluster on AWS
      • Benefits of using high-availability clusters on public cloud platforms
      • Install the High Availability packages and agents
      • Create a high availability cluster
      • Configure fencing in a Red Hat High Availability cluster
      • Discover and create fencing devices
      • Available fence agents and their options
      • Create a fence device
      • General properties of fencing devices
      • Fencing delays
      • Test a fence device
      • Configure fencing levels and topologies
      • Configure fencing levels
      • Remove a fence level
      • Clear fence levels
      • Verify nodes and devices in fence levels
      • Specify nodes in fencing topology
      • Configure fencing for redundant power supplies
      • Administer fence devices
      • Configure ACPI for use with integrated fence devices
      • Disable ACPI Soft-Off with the BIOS
      • Disable ACPI Soft-Off in the logind.conf file
      • Disable ACPI completely in the GRUB 2 file
      • Configure IP address resources on AWS
      • Configure shared block storage
    • Configure a Red Hat High Availability Cluster on Google Cloud
      • Benefits of using high-availability clusters on public cloud platforms
      • Required system packages
      • Create a custom virtual private cloud network and subnet
      • Create and configure a base Google Cloud instance
      • Create a snapshot image
      • Create an HA node template instance and HA nodes
      • Install the high availability packages and agents for Google Cloud
      • Create a high availability cluster
      • Configure fencing in a Red Hat High Availability cluster
      • Discover and create fencing devices
      • Available fence agents and their options
      • Create a fence device
      • General properties of fencing devices
      • Fencing delays
      • Test a fence device
      • Configure fencing levels and topologies
      • Configure fencing levels
      • Remove a fence level
      • Clear fence levels
      • Verify nodes and devices in fence levels
      • Specify nodes in fencing topology
      • Configure fencing for redundant power supplies
      • Administer fence devices
      • Configure ACPI for use with integrated fence devices
      • Disable ACPI Soft-Off with the BIOS
      • Disable ACPI Soft-Off in the logind.conf file
      • Disable ACPI completely in the GRUB 2 file
      • Configure the virtual IP management resource agent
    • Configure a Red Hat High Availability cluster on Microsoft Azure
      • Benefits of using high-availability clusters on public cloud platforms
      • Install the High Availability packages and agents for Azure
      • Create an Azure AD application
      • Create a high availability cluster
      • Configure fencing in a Red Hat High Availability cluster
      • Discover and create fencing devices
      • Available fence agents and their options
      • Create a fence device
      • General properties of fencing devices
      • Fencing delays
      • Test a fence device
      • Configure fencing levels and topologies
      • Configure fencing levels
      • Remove a fence level
      • Clear fence levels
      • Verify nodes and devices in fence levels
      • Specify nodes in fencing topology
      • Configure fencing for redundant power supplies
      • Administer fence devices
      • Configure ACPI for use with integrated fence devices
      • Disable ACPI Soft-Off with the BIOS
      • Disable ACPI Soft-Off in the logind.conf file
      • Disable ACPI completely in the GRUB 2 file
      • Create an Azure internal load balancer
      • Configure the load balancer resource agent
      • Configure shared block storage
Develop
  • Prepare, build, and manage applications on your operating system
    • Prepare a development workstation
      • Enable debug and source repositories
      • Install Git to manage application versions
      • Install development tools for C and C++
      • Install tools to debug applications
      • Install tools to measure application performance
    • Build code with GCC
    • Create C or C++ applications
      • GCC in RHEL 10
      • Build code with GCC
      • Create libraries with GCC
      • Use libraries with the GCC
      • Manage more code with Make
    • Debug applications
      • Enable Debugging with Debug Information
      • Inspect application internal state with GDB
      • Record application interactions
      • Debug a crashed application
      • Debug applications in containers
    • Use the gcc-toolset-15 container image
      • Introduction to the gcc-toolset-15 container image
      • Supported platforms and architectures for the gcc-toolset-15 container image
      • Prepare a RHEL host for the gcc-toolset-15 container image
      • Authenticate to the container registry
      • Pull the gcc-toolset-15 container image
      • Use the gcc-toolset-15 to run interactive development containers
      • Run noninteractive builds with gcc-toolset-15
      • Maintain the gcc-toolset-15 container image
      • gcc-toolset-15 container image troubleshooting
      • Operational and security considerations for the gcc-toolset-15 container image
    • Additional toolsets for development
      • Use the GCC Toolset
      • GCC Toolset 15
      • Compiler toolsets
    • Use annocheck extra tools
      • Enable the built-by tool
      • Enable the notes tool
      • Enable the section-size tool
      • Hardening checker basics
    • The Annobin project
      • Use the annobin plugin
      • Use the annocheck program
      • Remove redundant annobin notes
    • Notable changes in RHEL 10
      • Compatibility breaking changes in C++
      • Compatibility breaking changes to glibc
      • C23 support in glibc
      • RHEL 10 uses IEEE binary128 for long double on POWER
    • Install and use Python
      • Python versions
      • Install Python 3
      • Install additional Python 3 packages
      • Install additional Python 3 tools for developers
      • Use Python
    • Change the python3 interpreter on RHEL
      • System Python on RHEL
      • Change the python3 interpreter by using symbolic links
      • env in Python interpreter directives
    • Use the PHP scripting language
      • Install the PHP scripting language
      • Upgrade from a RHEL 10 version of PHP 8.3 to PHP 8.4
      • Use the PHP scripting language with a web server
      • Run a PHP script using the command line
    • Install Tcl/Tk
      • Install Tcl
      • Install Tk
  • Package and distribute software components
    • The RPM Package Manager
      • RPM packages
      • List RPM packaging utilities
    • Set up RPM packaging workspace
      • Configure RPM packaging workspace
      • RPM packaging workspace directories
    • Manage RPM macros
      • Display the built-in RPM macros
      • Display RPM distribution macros
      • Customize RPM behavior by using macros
      • Define custom RPM macros in a spec file
      • Common RPM directives in the %files section of spec
      • The %autosetup and %setup macros
    • Create software for RPM packaging
      • Source code examples for RPM use cases
      • Methods to create software
      • Build software from source
    • Prepare software for RPM packaging
      • Patch software
      • Create a LICENSE file
      • Create a source code archive for distribution
    • Package software with RPM
      • About spec files
      • Preamble items of a spec file
      • Body items of a spec file
      • Advanced spec file items
      • The Epoch directive
      • Package versioning essentials
      • spec file conditionals
      • BuildRoots
      • Work with spec files
      • Build RPMs
      • Log RPM activity to syslog
      • Extract RPM content
    • Sign RPM packages
      • Sign RPM packages with GnuPG
      • Sign RPM packages with Sequoia PGP
      • Sign RPM packages with Sequoia PGP by using PQC
    • Package Python 3 RPMs
      • A spec file description for an example Python package
      • Common macros for Python 3 RPMs
      • Use automatically generated dependencies for Python RPMs
      • Package Python projects with pyproject RPM macros
    • Modify interpreter directives in Python scripts
    • Package Ruby gems
      • How RubyGems relate to RPM
      • RubyGems spec file conventions
      • RubyGems macros
      • Use gem2rpm to generate a spec file
Configure
  • Configure your RHEL desktop environment
    • Common GNOME keyboard shortcuts
    • Configure applications to start automatically on login
    • Customize the desktop environment
      • Change the language by using the desktop GUI
      • Enable Chinese, Japanese, or Korean text input
      • Enable desktop icons
      • Use special characters in GNOME
    • Enable accessibility for visually impaired users
      • Components that provide accessibility features
      • Enable the Accessibility menu
      • Enable the screen reader
      • Enable a Braille display device
    • Browse files on a network share
      • GVFS URI format for network shares
      • Mount a storage volume in GNOME
      • Unmount a storage volume in GNOME
    • Configure file associations
      • Multipurpose Internet Mail Extension types
      • Add a custom MIME type for all users
      • Add a custom MIME type for individual users
      • Options to override default MIME types
      • Override default registered application for all the users
      • Override default registered application for individual users
    • Record your screen in GNOME
    • Manage storage volumes in GNOME
      • The GVFS system
      • The format of the GVFS URI string
      • Mount a storage volume in GNOME
      • Unmount a storage volume in GNOME
      • Access to GVFS mounts in the file system
      • Available GIO commands
      • Overview of GVFS metadata
      • Set custom GIO metadata attribute
      • Password management of GVFS mounts
      • GVFS back ends
    • Troubleshoot volume management in GNOME
      • Troubleshoot access to GVFS locations from non-GIO clients
      • Troubleshoot an invisible connected USB disk
      • Troubleshoot unknown or unwanted partitions listed in Files
      • Troubleshoot if a connection to the remote GVFS file system is unavailable
      • Troubleshoot a busy disk in GNOME
    • Tablets
      • Add support for a new tablet
      • Set Wacom tablet configuration values in the CLI
Secure
  • Secure and harden base systems
    • Switch RHEL to FIPS mode
      • Federal Information Processing Standards 140 and FIPS mode
      • Install the system with FIPS mode enabled
      • Enable FIPS mode with RHEL image builder
      • Create a bootable disk image for a FIPS-enabled system
      • List of RHEL applications using cryptography that is not compliant with FIPS 140-3
    • Use system-wide cryptographic policies
      • Manage system-wide cryptographic policies
      • Customize system-wide cryptographic policies
    • Ensure system integrity with Keylime
      • Remote system integrity monitoring
      • Deploy Keylime server components
      • Deploy Keylime agents and tenants
      • Configure Keylime attestation
      • Deploy a Keylime server by using RHEL system roles
      • Variables for the keylime_server RHEL system role
    • Check file integrity with AIDE
      • Install AIDE
      • Perform integrity checks with AIDE
      • Update an AIDE database
      • File-integrity tools: AIDE and IMA
      • Configure file integrity checks with the aide RHEL system role
    • Enhance security with the kernel integrity subsystem
      • The kernel integrity subsystem
      • Enable IMA signature appraisal
      • Enable remote attestation with IMA measurement
      • Good reference values for IMA appraisal
      • Add IMA signatures for immutable files
      • Generate reference values for IMA appraisal
      • Write a custom IMA policy
      • Create custom IMA keys
      • Load a signed IMA policy
      • Troubleshoot IMA policy load failures
      • Sign custom-built packages
      • Choose IMA or fapolicyd
    • Block and allow applications by using fapolicyd
      • The fapolicyd framework structure
      • Deploy fapolicyd
      • Mark files as trusted using an additional source of trust
      • Add custom allow and deny rules for fapolicyd
      • Enable fapolicyd integrity checks
      • Problems related to fapolicyd
      • Prevent users from executing untrustworthy code by using the fapolicyd RHEL system role
    • Configure user privileges and command permissions by managing sudo access
      • User authorizations in sudoers
      • Grant sudo access to a user
      • Enable unprivileged users to run certain commands
      • Apply custom sudoers configuration by using RHEL system roles
    • Control access to smart cards by using polkit
      • Smart-card access control through polkit
      • Problems related to PC/SC and polkit
      • Display more detailed information about polkit authorization to PC/SC
    • Configure applications to use cryptographic hardware through PKCS #11
      • Cryptographic hardware support through PKCS #11
      • Authenticate by SSH keys stored on a smart card
      • Application settings for authentication with certificates on smart cards
      • HSMs protecting private keys in Apache
    • Configure automated unlocking of encrypted volumes by using policy-based decryption
      • Deploy and manage Tang servers
      • Configure NBDE clients
      • Configure TPM2 and PKCS #11 volume unlocking
      • Deploy NBDE in advanced scenarios
      • Configure NBDE by using RHEL system roles
    • Protect systems against intrusive USB devices
      • USBGuard intrusion prevention
      • Install USBGuard
      • Block and authorize a USB device by using the CLI
      • Permanently block and authorize a USB device
      • Create a custom policy for USB devices
      • Create a structured custom policy for USB devices
      • Authorize users and groups to use the USBGuard IPC interface
      • Log USBguard authorization events to the Linux Audit log
    • Protect systems at the firmware and boot level
      • Protect systems at the firmware level with Secure Boot
      • Update the Secure Boot Revocation List
      • Enable HTTPS boot encryption
  • Comply with security standards
    • Configuration compliance tools in RHEL
    • Configuration compliance scanning
      • Configuration compliance in RHEL
      • Possible results of an OpenSCAP scan
      • View profiles for configuration compliance
      • Assess configuration compliance with a specific baseline
      • Assess security compliance of a container or a container image with a specific baseline
    • Configuration compliance remediation
      • Remediate the system to align with a specific baseline
      • Remediate the system to align with a specific baseline by using an SSG Ansible Playbook
      • Create a remediation Ansible Playbook to align the system with a specific baseline
    • Perform a hardened installation of RHEL with Kickstart
    • Customize a security profile with autotailor
    • SCAP Security Guide profiles supported in RHEL 10
    • Harden and secure bootc images
      • Enable FIPS mode in a bootc image build
      • Security hardening and compliance of bootable images
  • Protect network boundaries and transit data
    • Secure communication between two systems with OpenSSH
      • Configure OpenSSH authentication
      • Make OpenSSH more secure
      • Connect to a remote server through an SSH jump host
      • Configure the OpenSSH server and client by using RHEL system roles
    • Manage TLS encryption and certificates
      • Plan and implement TLS
      • Create and manage TLS keys and certificates
      • Use shared system certificates
      • Request certificates from a CA and create self-signed certificates by using RHEL system roles
      • Request a new certificate from an IdM CA by using the certificate RHEL system role
      • Request a new self-signed certificate by using the certificate RHEL system role
    • Configure an IPsec VPN
      • Components in an IPsec VPN
      • Libreswan authentication methods
      • Manually configure an IPsec host-to-host VPN with raw RSA key authentication
      • Manually configure an IPsec site-to-site VPN with raw RSA key authentication
      • Manually configure an IPsec host-to-site VPN with certificate-based authentication
      • Manually configure an IPsec mesh VPN with certificate-based authentication
      • Protect the IPsec NSS database with a password
      • IPsec on a system with FIPS mode enabled
      • Configure TCP fallback for an IPsec VPN connection
      • Enable legacy ciphers and algorithms in Libreswan
      • Assign a VPN connection to a dedicated routing table to prevent the connection from bypassing the tunnel
      • Configure IPsec VPN connections by using RHEL system roles
      • Configure IPsec VPN connections by using nmstatectl
      • Troubleshoot IPsec configurations
    • Configure a WireGuard VPN
      • Protocols and primitives used by WireGuard
      • How WireGuard uses tunnel IP addresses, public keys, and remote endpoints
      • WireGuard clients behind NAT
      • Create private and public keys to be used in WireGuard connections
      • Configure a WireGuard server by using nmcli
      • Configure a WireGuard server by using nmtui
      • Configure a WireGuard server by using the RHEL web console
      • Configure firewalld on a WireGuard server by using the command line
      • Configure firewalld on a WireGuard server by using the RHEL web console
      • Configure a WireGuard client by using nmcli
      • Configure a WireGuard client by using nmtui
      • Configure a WireGuard client by using the RHEL web console
      • Assign a VPN connection to a dedicated routing table to prevent the connection from bypassing the tunnel
    • Use and configure firewalld
      • Firewall zones
      • Firewall policies
      • Firewall rules
      • Firewall direct rules
      • Predefined firewalld services
      • Work with firewalld zones
      • Control network traffic by using firewalld
      • Filter forwarded traffic between zones
      • Configure NAT by using firewalld
      • Prioritize rich rules
      • Enable traffic forwarding between different interfaces or sources within a firewalld zone
      • Configure firewalld by using RHEL system roles
      • Accelerate firewalld forwarded traffic
      • Configure zone priorities for traffic classification by using firewalld
    • Control traffic with nftables
      • What is nftables
      • When to use firewalld or nftables
      • Concepts in the nftables framework
      • Create and manage nftables tables, chains, and rules
      • Configure NAT using nftables
      • Write and run nftables scripts
      • Use sets in nftables commands
      • Use verdict maps in nftables commands
      • Example: Protect a LAN and DMZ by using an nftables script
      • Use nftables to limit the amount of connections
      • Debug nftables rules
      • Back up and restore the nftables rule set
      • Accelerate nftables packet forwarding by using flowtables
      • Migrate from iptables to nftables
    • Secure system DNS traffic with encrypted DNS (eDNS)
      • Overview of components for eDNS in RHEL
      • Install RHEL with eDNS enabled from a local installation media
      • Install RHEL with eDNS enabled using a custom bootable ISO
      • Enable eDNS on an existing RHEL installation
      • Kernel parameters for DNS configuration
    • Use MACsec to encrypt layer-2 traffic in the same physical network
      • How MACsec increases security
      • Configure a MACsec connection by using nmcli
      • Configure a MACsec connection by using nmstatectl
    • Authenticate clients to the network with 802.1X
      • Configure 802.1X network authentication on an existing Ethernet connection by using nmcli
      • Configure a static Ethernet connection with 802.1X network authentication by using nmstatectl
      • Configure a static Ethernet connection with 802.1X network authentication by using the network RHEL system role
      • Configure a wifi connection with 802.1X network authentication by using the network RHEL system role
    • Provide 802.1X authentication for LAN clients
      • Set up the authenticator bridge
      • Configure FreeRADIUS with EAP
      • Configure hostapd as an authenticator in a wired network
      • Test EAP-TTLS authentication against a FreeRADIUS server or authenticator
      • Block and allow traffic based on hostapd authentication events
    • eBPF networking features in RHEL 10
      • Overview of networking eBPF features in RHEL 10
      • Overview of XDP features in RHEL 10 by network cards
    • Trace network connections with BPF tools
      • Install the bcc-tools package
      • Display TCP connections added to the accept queue
      • Trace outgoing TCP connection attempts
      • Measure latency of outgoing TCP connections
      • Display TCP packets dropped by the kernel
      • Trace TCP sessions
      • Trace TCP retransmissions
      • Display TCP state changes
      • Summarize TCP traffic to specific subnets
      • Display network throughput by IP and port
      • Trace established TCP connections
      • Trace IPv4 and IPv6 listen attempts
      • Summarize soft interrupt service time
      • Summarize packet size and count
    • Filter DDoS traffic at the NIC
      • Drop network packets that match an xdp-filter rule
      • Drop all network packets except the ones that match an xdp-filter rule
    • Capture packets dropped by XDP programs
    • Secure network services
      • Secure the rpcbind service
      • Secure the rpc.mountd service
      • Secure the NFS service
      • Secure the FTP service
      • Secure HTTP servers
      • Secure PostgreSQL by limiting access to local users
      • Secure the Memcached service
      • Secure the Postfix service
  • Control how users and processes interact with files
    • Get started with SELinux
      • Introduction to SELinux
      • Benefits of running SELinux
      • SELinux examples
      • SELinux architecture and packages
      • SELinux states and modes
    • Change SELinux states and modes
      • Permanent changes in SELinux states and modes
      • Relabel the file system when changing SELinux modes
      • Change SELinux to permissive mode
      • Change SELinux to enforcing mode
      • Enable SELinux on systems that previously had it disabled
      • Disable SELinux
      • SELinux kernel boot parameters
    • Manage confined and unconfined users
      • Confined and unconfined users in SELinux
      • Roles and access rights of SELinux users
      • Confined non-administrator roles in SELinux
      • Confined administrator roles in SELinux
      • Add a new user automatically mapped to the SELinux unconfined_u user
      • Add a new user as an SELinux-confined user
      • Confine regular users in SELinux
      • Confine an administrator by mapping to sysadm_u
      • Confine an administrator by using sudo and the sysadm_r role
    • Configure SELinux for applications and services with non-standard configurations
      • Customize the SELinux policy for the Apache HTTP server in a non-standard configuration
      • Adjust the policy for sharing NFS and CIFS volumes by using SELinux booleans
      • Find the correct SELinux type for managing access to non-standard directories
      • Manage access to non-standard shared directories for unprivileged SELinux users
    • Troubleshoot problems related to SELinux
      • Identify SELinux denials
      • Analyze SELinux denial messages
      • Fix analyzed SELinux denials
      • Create a local SELinux policy module
      • SELinux denials in the Audit log
    • Use Multi-Level Security (MLS)
      • Multi-Level Security (MLS)
      • SELinux roles in MLS
      • Switch the SELinux policy to MLS
      • Establish user clearance in MLS
      • Change a user’s clearance level within the defined security range in MLS
      • Increase file sensitivity levels in MLS
      • Change file sensitivity in MLS
      • Separate system administration from security administration in MLS
      • Define a secure terminal in MLS
      • Allow MLS users to edit files on lower levels
    • Use Multi-Category Security (MCS) for data confidentiality
      • Multi-Category Security (MCS)
      • Configure Multi-Category Security for data confidentiality
      • Define category labels in MCS
      • Assign categories to users in MCS
      • Assign categories to files in MCS
    • Write a custom SELinux policy
      • Custom SELinux policies and related tools
      • Create and enforce an SELinux policy for a custom application
    • Create SELinux policies for containers
      • Introduction to the udica SELinux policy generator
      • Create and use an SELinux policy for a custom container
    • Deploy the same SELinux configuration on multiple systems
      • Create an SELinux configuration Ansible Playbook in the web console
      • Transfer SELinux settings to another system with semanage
    • Configure SELinux by using RHEL system roles
      • Restore the SELinux context on directories by using the selinux RHEL system role
      • Manage SELinux network port labels by using the selinux RHEL system role
      • Deploy an SELinux module by using the selinux RHEL system role
    • Configure polyinstantiated directories
  • Remediate security vulnerabilities and apply patches
    • Manage and monitor security updates
      • Identify security updates
      • Install security updates
    • Apply patches with kernel live patching
      • Limitations of kpatch
      • Support for third-party live patching
      • Access to kernel live patches
      • The process of live patching kernels
      • Apply patches with kernel live patching in the web console
      • Subscribe the currently installed kernels to the live patching stream
      • Automatically subscribe any future kernel to the live patching stream
      • Disable automatic subscription to the live patching stream
      • Update kernel patch modules
      • CVE reporting for kernel live patches
      • Identify CVEs patched by kernel live patches
      • Remove the live patching package
      • Uninstall the kernel patch module
      • Disable kpatch.service
Observe
  • Analyze system logs to investigate issues
    • Troubleshoot problems by using log files
      • Basic troubleshooting by using log files
      • Services that handle syslog messages
      • Subdirectories that store syslog messages
      • Commands for viewing logs
    • Review and filter logs in the web console
      • Review logs in the web console
      • Filter logs in the web console
      • Text search options for filtering logs in the web console
      • Use a text search box to filter logs in the web console
      • Options for filtering logs
    • Configure logging by using RHEL system roles
      • Filter local log messages by using the logging RHEL system role
      • Apply a remote logging solution by using the logging RHEL system role
      • Use the logging RHEL system role with TLS
      • Configure client logging with TLS
      • Configure server logging with TLS
      • Use the logging RHEL system roles with RELP
      • Configure client logging with RELP
      • Configure server logging with RELP
    • Get started with kernel logging
      • What is the kernel ring buffer
      • Role of printk on log-levels and kernel logging
  • Centralize and retain system log data
    • Configure a remote logging solution
      • The Rsyslog logging service
      • Install Rsyslog documentation
      • Configure a server for remote logging over TCP
      • Configure remote logging to a server over TCP
      • Configure TLS-encrypted remote logging
      • Configure a server for receiving remote logging information over UDP
      • Configure remote logging to a server over UDP
      • Load balancing helper in Rsyslog
      • Configure reliable remote logging
      • Supported Rsyslog modules
      • Configure Netconsole to log kernel messages to a remote host
    • Configure logging by using RHEL system roles
      • Filter local log messages by using the logging RHEL system role
      • Apply a remote logging solution by using the logging RHEL system role
      • Use the logging RHEL system role with TLS
      • Configure client logging with TLS
      • Configure server logging with TLS
      • Use the logging RHEL system roles with RELP
      • Configure client logging with RELP
      • Configure server logging with RELP
  • Monitor and manage system status and performance
    • Overview of performance monitoring options
    • Configure Performance Co-Pilot
      • PCP installation methods
      • PCP deployment architectures
      • Install PCP by using pcp-zeroconf
      • Install and enable PCP manually
      • PCP archive rotation, compression, and comparison
      • Deploy minimal configuration for archiving collected metrics
      • Configure Performance Co-Pilot by using the metrics RHEL system role
      • System services and tools distributed with PCP
    • Configure pmda-openmetrics
      • Overview of pmda-openmetrics
      • Install and configure pmda-openmetrics
    • Log performance data with pmlogger
      • Modify the pmlogger configuration file with pmlogconf
      • Configure pmlogger manually
      • Enable the pmlogger service
      • Configure a client system for metrics collection
      • Configure a central server to collect data
      • Systemd units and pmlogger
      • Manage systemd services triggered by pmlogger
      • Replay the PCP log archives with pmrep
    • Monitor performance with Performance Co-Pilot
      • Monitor postfix with pmda-postfix
      • Visually trace PCP log archives with the PCP Charts application
      • Collect data from SQL server by using PCP
    • Set up PCP with Grafana
      • Configure a grafana-server
      • Configure valkey
      • Access the Grafana web UI
      • Configure secure connections for Valkey and PCP
      • Create panels and alerts in PCP Valkey data source
      • Add notification channels for alerts
      • Configure authentication between PCP components
    • Advanced PCP monitoring and visualization
      • Install PCP bpftrace
      • View the PCP bpftrace System Analysis dashboard
      • Install PCP Vector
      • View the PCP Vector Checklist
      • Use heatmaps in Grafana
      • Configure pcp-geolocate for Grafana geomaps
      • Visualize PCP data with geomaps in Grafana
      • Manage SELinux booleans for Grafana
      • Troubleshoot Grafana issues
    • Monitor system performance in the web console
      • Performance tuning options in the web console
      • Set a performance profile in the web console
      • Monitor performance on the local system by using the web console
      • Monitor performance on several systems by using the web console and Grafana
    • Manage power consumption with PowerTOP
      • Power management basics
      • Audit and analysis overview
      • Tools for auditing
      • The purpose of PowerTOP
      • Install PowerTOP
      • Start PowerTOP
      • Calibrate PowerTOP
      • Set the measuring interval
      • Control CPU frequency drivers and modes
      • Generate an HTML output
      • Optimize power consumption
    • Profile CPU and events with perf
      • Install perf
      • Common perf commands
    • Profile CPU usage in real time with perf top
      • The purpose of perf top
      • Profile CPU usage with perf top
      • Perf output and symbol resolution
      • Enable debug and source repositories
      • Get debuginfo packages for an application or library by using GDB
    • Count events during process execution with perf stat
      • The purpose of perf stat
      • Count events with perf stat
      • Interpretation of perf stat output
      • Attach perf stat to a running process
    • Record and analyze performance profiles with perf
      • The purpose of perf record
      • Record a performance profile
      • Record a performance profile in per-CPU mode
      • Capture call graph data with perf record
      • Analyze perf.data with perf report
      • Attach perf record to a running process
      • Interpretation of perf report output
      • Generate a perf.data file readable on a different device
      • Analyze a perf.data file from a different device
    • Investigate busy CPUs with perf
      • Display CPU events counted with perf stat
      • Display CPU samples taken with perf report
      • Display specific CPUs during profiling with perf top
      • Monitor specific CPUs by using perf record and perf report
    • Create uprobes with perf
      • Create uprobes at the function level with perf
      • Create uprobes on lines within a function with perf
      • Perf script output of data recorded over uprobes
    • Profile memory accesses with perf mem
      • Sample memory access with perf mem
      • Interpretation of perf mem report output
    • Detect false sharing
      • The purpose of perf c2c
      • Detect cache-line contention with perf c2c
      • Visualize a perf.data file recorded with perf c2c record
      • Interpretation of perf c2c report output
      • Detect false sharing with perf c2c
    • Visualize hot paths with flamegraphs
      • Install flamegraphs
      • Create flamegraphs over the entire system
      • Create flamegraphs over specific processes
      • Analyze stack traces and function hotspots in flamegraphs
    • Catch performance bottlenecks with perf snapshots
      • Circular buffers and event-specific snapshots with perf
      • Collect specific data to monitor for performance bottlenecks by using perf circular buffers
    • Manage tracepoints by using perf collector without restarting perf
      • Add tracepoints to a running perf collector without stopping or restarting perf
      • Remove tracepoints from a running perf collector without stopping or restarting perf
    • Analyze system performance with BPF Compiler Collection
      • Install the bcc-tools package
      • Examine the system processes with execsnoop
      • Track files opened by a command with opensnoop
      • Monitor the top processes performing I/O operations on the disk with biotop
      • Expose unexpectedly slow file system operations with xfsslower
    • Trace kernel and user events with SystemTap
      • The purpose of SystemTap
      • Install SystemTap
      • Privileges to run SystemTap
      • Run SystemTap scripts
      • Sample SystemTap scripts
      • SystemTap cross-instrumentation
      • Initialize cross-instrumentation of SystemTap
    • Profile memory allocation with numastat
      • Default numastat statistics
      • View memory allocation with numastat
    • Install kdump
      • What kdump does and why it matters
      • Install kdump using Anaconda
      • Install kdump on the command line
    • Enable kdump
      • Enable kdump for all installed kernels
      • Enable kdump for a specific kernel
      • Disable the kdump service
    • Configure kdump on the command line
      • Estimate the kdump crash dump size
      • Configure kdump memory reservation
      • Configure the kdump storage target
      • The kdump core collector
      • Configure the kdump core collector
      • Configure the kdump default failure responses
      • Configuration file for kdump
      • Test the kdump configuration
      • Files produced by kdump after system crash
      • Enable or disable the kdump service
      • Prevent kernel drivers from loading for kdump
      • Run kdump on an encrypted disk system
    • Supported kdump configurations and targets
      • Memory requirements for kdump
      • Minimum threshold for automatic memory reservation
      • Supported kdump targets
      • kdump filtering levels
      • Supported default failure responses
      • Use final_action parameter
      • Use failure_action parameter
    • Firmware assisted dump mechanisms
      • Firmware assisted dump on IBM PowerPC hardware
      • Enable firmware assisted dump mechanism
      • Firmware assisted dump mechanisms on IBM Z hardware
      • Use sadump on Fujitsu PRIMEQUEST systems
    • Use early kdump to capture boot time crashes
      • Enable early kdump
    • Analyze a core dump
      • Install the crash utility
      • Run and exiting the crash utility
      • Display various indicators in the crash utility
      • Use Kernel Oops Analyzer
      • The Kdump Helper tool
    • Automate crash dump analysis
      • Create a systemd path unit for vmcore detection
      • Script crash utility commands for vmcore analysis
      • Extract backtraces from vmcore programmatically
  • Trace and analyze security events
    • Audit the system
      • Linux Audit
      • Audit system architecture
      • Audit settings for a secure environment
      • Commands to start and control auditd
      • Audit log entries
      • Examples of Audit rules defined with auditctl
      • Audit persistent rules
      • Pre-configured Audit rules files for compliance with standards
      • Disable augenrules
      • Configure Audit to monitor software updates
      • Monitor user login times with Audit
    • Configure the Audit daemon by using RHEL system roles
Integrate
  • Integrate RHEL systems directly with Windows Active Directory
    • Connect RHEL systems directly to AD by using SSSD
    • Configure AD provider DNS and domain settings
    • Connect RHEL systems directly to AD using Samba Winbind
    • Join RHEL systems to an Active Directory by using RHEL system roles
    • Manage RHEL systems directly connected to AD
    • Apply Group Policy Object access control in RHEL
    • Access AD with a Managed Service Account
Optimize
  • Tune and optimize system performance
    • Overview of performance monitoring options
    • Optimize system performance with TuneD
      • TuneD profiles distributed with RHEL
      • Real-time TuneD profiles distributed with RHEL
      • Install and enable TuneD
      • Manage TuneD profiles
      • Profile inheritance and variables for profile customization
      • Built-in functions for profile customization
      • TuneD plugins
      • Create a new TuneD profile
      • Modify an existing TuneD profile
      • Enable TuneD no-daemon mode
    • Set the disk scheduler
      • Available disk schedulers
      • Different disk schedulers for different use cases
      • Determine the active disk scheduler
      • Set the disk scheduler using TuneD
      • Set the disk scheduler using udev rules
      • Temporarily set a scheduler for a specific disk
    • Monitor system performance in the web console
      • Performance tuning options in the web console
      • Set a performance profile in the web console
      • Monitor performance on the local system by using the web console
      • Monitor performance on several systems by using the web console and Grafana
    • Configure an operating system to optimize CPU utilization
      • Tools for monitoring and diagnosing processor issues
      • Types of system topology
      • Display system topologies
      • Configure kernel tick time
      • Overview of an interrupt request
      • Balance interrupts manually
      • Set the smp_affinity mask
    • Review a system by using the tuna interface
      • Install the tuna tool
      • View the system status by using the tuna tool
      • Tune CPUs by using the tuna tool
      • Tune IRQs by using the tuna tool
    • Configure an operating system to optimize memory access
      • Tools for monitoring and diagnosing system memory issues
      • Overview of system memory
      • Virtual memory parameters
      • File system parameters
      • Kernel parameters
      • Set memory-related kernel parameters
    • Tune scheduling policy
      • Categories of scheduling policies
      • Static priority scheduling with SCHED_FIFO
      • Round robin priority scheduling with SCHED_RR
      • Normal scheduling with SCHED_OTHER
      • Set scheduler policies
      • Policy options for the chrt command
      • Change the priority of services during the boot process
      • Real-time priority ranges
      • TuneD cpu-partitioning profile
      • Use the TuneD cpu-partitioning profile for low-latency tuning
      • Customize the cpu-partitioning TuneD profile
    • Configure huge pages
      • Available huge page features
      • Parameters for reserving HugeTLB pages at boot time
      • HugeTLB configuration at boot time
      • Configure HugeTLB by using kernel command line parameters
      • Configure HugeTLB by using systemd service unit
      • Parameters for reserving HugeTLB pages at run time
      • Configure HugeTLB at run time
      • Transparent huge page management
      • Manage transparent huge pages with runtime configuration
      • Manage transparent huge pages with TuneD profiles
      • Manage transparent huge pages with kernel command line parameters
      • Manage transparent huge pages with a systemd unit file
      • Impact of page size on translation lookaside buffer size
    • Set system resource limits for applications by using control groups
      • What are control groups
      • Kernel resource controllers
      • Kernel namespaces for resource isolation
    • Monitor systemd-managed resources
      • Role of systemd in resource management
      • Distribution models of system sources
      • Overview of systemd hierarchy for cgroups
      • List systemd units
      • View systemd cgroups hierarchy
      • View cgroups of processes
      • Monitor resource consumption
      • Allocate system resources using systemd
    • Configure CPU affinity and NUMA with systemd
      • Use systemd unit files to set limits for applications
      • Use the systemctl command to set CPU affinity for applications
      • Set global default CPU affinity through manager configuration
      • Configure NUMA policies by using systemd
      • NUMA policy configuration options for systemd
    • Manage transient control groups
      • Create transient cgroups using systemd-run command
      • Remove transient control groups
    • Analyze system performance with eBPF
      • Use the bpftrace package
      • Install the bcc-tools package
      • Use selected bcc-tools for performance analyses
    • Adjust kernel parameters for database servers
      • Introduction to database servers
      • Parameters affecting performance of database applications
    • Manage memory devices
      • Automatic memory onlining with udev
      • Configure ZONE_NORMAL for GPGPU and other CXL accelerator memory use cases
      • Disable automatic memory onlining
      • Manually online memory
      • Manage CXL memory devices
    • Use cgroupfs to manually manage cgroups
      • Create cgroups and enable controllers in cgroups-v2
      • Distribute CPU time by using cgroup weights
      • Mount cgroups-v1
      • Set CPU limits to applications by using cgroups-v1
Troubleshoot
  • Diagnose and optimize the Linux network stack and applications
    • Optimize physical interface and kernel packet handling
      • Tune network adapter settings
      • Tune IRQ balancing
      • Tune the device driver and NIC
      • Configure network adapter offload settings
      • Flow control for Ethernet networks
      • Configure ethtool settings in NetworkManager connection profiles
    • Minimize latency for time-sensitive traffic
      • Improve network latency
      • Tune interrupt coalescence settings
    • Maximize network transport throughput for large data payloads
      • Improve throughput for large amounts of contiguous data streams
      • Tune TCP connections for high throughput
      • Tune UDP connections
      • Identify application read socket buffer bottlenecks
      • Benefits of TCP timestamps
    • Structure systems for high-concurrency connections
      • Tune applications with a large number of incoming requests
      • Avoid listen queue lock contention
    • Troubleshoot NetworkManager runtime and configuration behavior
      • Introduction to NetworkManager Debugging
  • Provide diagnostic data to Red Hat Support to resolve system incidents
    • Generate an sos report for technical support
      • The sos utility
      • Install the sos package from the command line
      • Generate an sos report from the command line
      • Generate and collect sos reports on multiple systems concurrently
      • Clean a sos report
      • Generate a sos report and encrypt it with a GPG passphrase
      • Generate an sos report and secure it with GPG encryption based on a keypair
      • Create a GPG2 key
      • Generate an sos report from the rescue environment
      • Methods for providing an sos report to Red Hat technical support
    • Generate and maintain the diagnostic reports by using the RHEL web console
      • Generate diagnostic reports by using the RHEL web console
      • Download diagnostic reports in the RHEL web console
      • Delete diagnostic reports by using the RHEL web console
  • Resolve security denials
    • Troubleshoot problems related to SELinux
      • Identify SELinux denials
      • Analyze SELinux denial messages
      • Fix analyzed SELinux denials
      • Create a local SELinux policy module
      • SELinux denials in the Audit log
    • Block and allow applications by using fapolicyd
      • The fapolicyd framework structure
      • Deploy fapolicyd
      • Mark files as trusted using an additional source of trust
      • Add custom allow and deny rules for fapolicyd
      • Enable fapolicyd integrity checks
      • Problems related to fapolicyd
      • Prevent users from executing untrustworthy code by using the fapolicyd RHEL system role
Download PDF
  • Red Hat Enterprise Linux 10 PDF Reference
  1. Home
  2. Products
  3. Red Hat Enterprise Linux
  4. 10
  5. Set up RHEL desktops for managed deployments
  6. Set up a printer

Set up a printer

Open Table of contents

Set up a printer

In GNOME, you can set up printing by using the Settings application.

  • Access printer settings in GNOME
    You can access the options for you printers from the Settings application.
  • Add a new printer in Settings
    You can add a new printer by using the Settings application.
  • Print a test page in Settings
    You can print a test page to make sure that the printer functions properly.
  • Modify printer settings
    In GNOME, you can modify printer settings by using the Settings application.
Restrict the session to a single application
Access printer settings in GNOME
Back to top
Red Hat logoGithubRedditYoutubeTwitter

Learn

  • Developer resources
  • Cloud learning hub
  • Interactive labs
  • Training and certification
  • Customer support
  • See all documentation

Try, buy, & sell

  • Product trial center
  • Red Hat Ecosystem Catalog
  • Red Hat Store
  • Buy online (Japan)

Communities

  • Customer Portal Community
  • Events
  • How we contribute

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility
Back to top