Author's Posts

Hello All. So most of you diehard CentOS users (I am one of them) must have heard the news by now regarding the fate of the operating system. The Community Enterprise Operating System or CentOS project, owned by RedHat, but still an independent, community-supported computing platform functionally compatible with its upstream source, Red Hat Enterprise Linux (RHEL) has announced a number of changes including:

  • Accelerated end-of-life for CentOS 8; no further operating system updates will be available after December 31, 2021.
  • CentOS 8 will be transformed into an upstream (development) branch of Red Hat Enterprise Linux (RHEL) called CentOS Stream; previous CentOS versions will remain part of the stable branch.

Unfortunately CentOS 8 will no longer be considered appropriate for use in production environments. I can speak for many that this will affect our decisions on OS selection for environments such as AWS going forward, not to mention migration plans of the platform prior to the end of 2021 when the OS will no longer be considered “supported”.

Now, one hitch, the CentOS 7 lifecycle will remain unchanged, with updates and security patches continuing to be available through June of 2024. Though this timeline could potentially change in the future given these recent announcements.

The unfortunate issue is most people on CentOS 8 that do not want to consider the cost of RHEL will move to platforms such as Ubuntu LTS – I assume most providers of shared environments will move to this (i.e. Linode, AWS, etc. as their de facto standard for Linux).

The future of CentOS will be via CentOS Stream.

CentOS Stream is an upstream development platform for ecosystem developers. It is a single, continuous stream of content with updates several times daily, encompassing the latest and greatest from the RHEL codebase. It’s a view into what the next version of RHEL will look like, available to a much broader community than just a beta or “preview” release.

The CentOS Stream project sits between the Fedora Project and RHEL in the RHEL Development process, providing a “rolling preview” of future RHEL kernels and features. This enables developers to stay one or two steps ahead of what’s coming in RHEL, which was not previously possible with traditional CentOS releases. CentOS Stream better connects ISV, IHV and other ecosystem developers to the operating system developers of the Fedora Project, shortening the feedback loop and making it easier for all voices to be heard in the creation of the next RHEL versions.

Further details on the EOL status can be found at: https://wiki.centos.org/About/Product as well as https://blog.centos.org/2020/12/future-is-centos-stream

To read more about CentOS Stream, please visit the RedHat blog site: https://www.redhat.com/en/blog/transforming-development-experience-within-centos

Read more

Hello All. Quick follow-up to my post – SolarWinds Survival on December 29.  DHS’s Cybersecurity and Infrastructure Security Agency (CISA) have ordered all US federal agencies to update their SolarWinds Orion platform to the latest version by the end of business hours on December 31, 2020, including those running non-affected versions of Orion.

“We issued V2 supplemental guidance to Emergency Directive 21-01,” CISA tweeted. “Agencies using non-affected versions must update to the new version.”

“The National Security Agency (NSA) has examined this version and verified that it eliminates the previously identified malicious code,” the agency said.

“Given the number and nature of disclosed and undisclosed vulnerabilities in SolarWinds Orion, all instances that remain connected to federal networks must be updated to 2020.2.1 HF2 by COB December 31, 2020.”

CISA has indicated that agencies using non-affected versions must update to the new version since Orion Platform versions 2019.4 HF6 and 2020.2.1 HF2 given they are designed to protect from both the SUNBURST and SUPERNOVA malware.

Further information on the DHS CISA directive can be found at – https://cyber.dhs.gov/ed/21-01/#supplemental-guidance

Read more