Skip to content

Rocky installation#1446

Merged
mattias-p merged 7 commits into
zonemaster:developfrom
mattias-p:rocky-installation
Dec 2, 2025
Merged

Rocky installation#1446
mattias-p merged 7 commits into
zonemaster:developfrom
mattias-p:rocky-installation

Conversation

@mattias-p

Copy link
Copy Markdown
Member

Purpose

This PR fixes problems encountered during installation testing of all components except GUI on Rocky Linux.

Context

Release testing for v2025.2. This is the first time Rocky Linux 10 is included.

Changes

Fixes:

  • Make sure systemd unit files get correct SElinux security context on Rocky 8.
  • Avoid failure to build transitive dependency on Rocky 10.
  • Add minimal custom crypto policy for Rocky 10.
  • Install dependencies unavailable on Rocky 10 from CPAN.

Security:

  • Remove login shell and home directory from zonemaster user.
  • Minimize crypto policy for Rocky 8 and 9.

User experience:

  • Make systemctl status commands non-interactive.
  • Avoid spurious warnings about inaccessible directories.

How to test this PR

Follow the installation instruction on Rocky 8, 9 and 10.

Install these from CPAN:
 * Email::Valid
 * Plack::Middleware::ReverseProxy
If postgress lacks access to your current working directory, sudo would print a
spurious warning. If we make sudo login, it will change working directory to its
home directory, which it does have access to.
Installing transitive dependency Net::Server from CPAN fails on Rocky 10, so use
OS packaged version instead.
@mattias-p mattias-p added this to the v2025.2 milestone Dec 2, 2025
@mattias-p mattias-p added V-Patch Versioning: The change gives an update of patch in version. RC-Fixes Release category: Fixes. labels Dec 2, 2025
@mattias-p mattias-p merged commit d6e3163 into zonemaster:develop Dec 2, 2025

@tgreenx tgreenx left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@MichaelTimbert

Copy link
Copy Markdown
Contributor

I tested this on Rocky 8 and everything works perfectly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

RC-Fixes Release category: Fixes. V-Patch Versioning: The change gives an update of patch in version.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants