Search the Community

Docker launches Testcontainers on former rival Red Hat's OpenShiftView the full article

One of the core goals of the HashiCorp Nomad team is to enable users to run workloads the way they like. That goal extends to the Red Hat Podman container engine for running OCI Linux containers. Through community-driven efforts, running Podman tasks in Nomad has been possible with the Podman task driver plugin for some time. Thanks to recent community efforts, we’ve made progress maturing the Podman and Nomad integration for high-value applications and workflows. This post shares some of the new features of the Nomad-Podman integration. The Nomad-Podman integration has matured The latest enhancements to the Nomad-Podman integration add support for: Running Podman containers in task groups with bridge networking enabled Authentication options in the task driver config Specifying a credentials helper or external credentials configuration file for working with private registries (via Podman driver support) Although there is still work to be done, the progress made opens doors to new Podman use cases that were tedious, if not impossible, before. Podman and Consul service mesh Nomad 1.7, released in GA this month, takes advantage of these developments to provide a more seamless experience when using Podman in conjunction with our HashiCorp Consul service mesh integration. Consul service mesh requires the use of an Envoy sidecar proxy for each task participating in the network mesh. Since its inception, the Nomad integration for Consul service mesh has defaulted to a Docker-specific task configuration for these Envoy sidecars. Now, Nomad will automatically detect if Podman is the most suitable task driver and generate an Envoy task configuration that runs Envoy as a Podman container. Job submitters no longer need to specify a custom connect.sidecar_task block. Why use Podman instead of Docker? There are substantial advantages to using Podman as a task driver instead of Docker: Podman does not require running dockerd and containerd as root processes on every node. Podman makes clever use of systemd socket activation to launch containers. Most mainstream Linux distributions are based on systemd, providing widespread out-of-the-box support. Unlike Docker, Podman does not require pause containers to support the bridge networking use case Earlier in this post, we discussed how Envoy containers run alongside each Nomad task when using the Consul service mesh integration. With Docker, each task group with one of those Envoy containers actually requires a second sidecar — the pause container — which is necessary due to the special way Docker creates network namespaces. Since Podman works with the conventional network namespaces created and managed by the Nomad client, there is no need for that extra sidecar. In a cluster with thousands of tasks participating in a service mesh, the savings on CPU, memory, disk, and bandwidth can be significant. More maturity on the way These improvements to the Nomad-Podman integration story are only the beginning. Going forward, we intend to provide first-class support for rootless Podman, address outstanding bug reports, enhance our Podman integration test coverage, and update the plugin-packaging. To find out more about the Nomad-Podman integration, please visit our Podman task driver page. View the full article

View the full article

This article highlights the benefits of using the pull model method for managing multiple Kubernetes clusters in a CD system like Argo CD. It explains how to enhance Argo CD without significant code changes to your existing applications. The blog mainly focuses on Red Hat Advanced Cluster Management (RHACM) 2.8 where the pull model feature is introduced as Technology Preview. View the full article

The factory-precaching-cli tool is a containerized Go binary publicly available in the Telco RAN tools container image. This blog shows how the factory-precaching-cli tool can drastically reduce the OpenShift installation time when using the Red Hat GitOps Zero Touch Provisioning (ZTP) workflow. This approach becomes very significant when dealing with low bandwidth networks, either when connecting to a public or disconnected registry. View the full article

With the recent release of the official Red Hat Cloud Services Provider for Terraform customers can now automate the provisioning Red Hat OpenShift Service on AWS clusters (ROSA) with Terraform. Previously, automating the creation of a ROSA cluster required using the OpenShift Command Line Interface (CLI), either wrapping it in code or using additional tools to automate the necessary CLI commands. Now customers using Terraform can integrate ROSA cluster creation into their existing pipelines. In addition to the Red Hat Cloud Services (RHCS) Provider, Red Hat has made available the ROSA STS Terraform module. This gives customers the option to automate ROSA prerequisites, like operator IAM roles, policies, and identity providers as a distinct step... View the full article

Red Hat OpenShift Service on AWS (ROSA) is a fully managed turnkey application platform. It is jointly engineered and supported by Red Hat and AWS through Site Reliability Engineers so customers don’t have to worry about the complexity of infrastructure management. As an application platform running on AWS, a common use case is to connect an application to an AWS managed database. View the full article

“When you are finished changing, you are finished.” View the full article

GitOps has continued in its popularity and has become the standard way to manage Kubernetes cluster configuration and applications. Red Hat continues to see the widespread adoption of the GitOps methodology across our portfolio as customers look for ways to bring increased efficiency to their operations and development teams. View the full article

In this post, I will discuss how to utilize Azure Key Vault (AKV) with Azure Red Hat OpenShift (ARO) cluster. I will explain the relevant terms and their definitions from the architectural standpoint and how the flow works at a glance, and I will give an example of how to deploy this in the ARO cluster. The objective of this article is to enable you to store and retrieve secrets stored in AKV from your ARO cluster. View the full article

Backup is defined as the process of creating copies of data and storing them in separate locations or mediums, while restore is defined as the process of retrieving the backed-up data and returning it to its original location or system or to a new one. In other words, backup is akin to data preservation, and restore is in essence data retrieval. View the full article

View the full article

At some point during the OpenShift deployment phase, a question about project onboarding comes up, "How can a new customer or tenant be onboarded so they can deploy their own workload onto the cluster(s)?" While there are different ways from a process perspective (Service Now, Jira, etc.), I focus on the Kubernetes objects that must be created on each cluster. In A Guide to GitOps and Argo CD with RBAC, I described setting up GitOps RBAC rules so tenants can work with their (and only their) projects. This article demonstrates another possibility for deploying per tenant and per cluster ... View the full article

OpenShift Virtualization provides a great solution for non-containerized applications, but it does introduce some challenges over legacy virtualization products and bare-metal systems. One such challenge involves interacting with virtual machines (VMs). OpenShift is geared toward containerized applications that do not usually need incoming connections to configure and manage them, at least not the same type of connections as a VM would need for management or use. View the full article

In this week’s The Long View: Matt Hicks is the new Red Hat CEO, visual accessibility is in focus, and Google Cloud rolls out ARM instances. The post Red Hat CEO: Out | Blind Users: Revolt | ARM: Google Joins Party appeared first on DevOps.com. View the full article

The post How to Install Packages on RHEL 8 Locally Using DVD ISO first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Often, when we want to have a local repository for our RHEL 8 system to install packages without internet access for extra safety and using RHEL 8 ISO is the easiest way to do The post How to Install Packages on RHEL 8 Locally Using DVD ISO first appeared on Tecmint: Linux Howtos, Tutorials & Guides.View the full article

Check out Enable Sysadmin’s top 10 articles from May 2022. Read More at Enable Sysadmin The post Getting started with RHEL 9, interpreting system log files, and more sysadmin tips appeared first on Linux.com. View the full article

Performing container builds in isolated environments is one step towards defending against this threat while at the same time providing flexibility to the developers. View the full article

Red Hat Enterprise Linux 9 (RHEL 9), code-named Plow, is now generally available (GA). Red Hat made the announcement on the 18th of May 2022. It takes over from the Beta release which has ... View the full article

This post was written in collaboration with Rahul Mehta, Azure Red Hat OpenShift Product Manager, Microsoft View the full article

Red Hat Quay 3.7 marks another important feature release of Red Hat’s central container registry platform for modern multi-cluster Kubernetes landscapes across cloud and on-premise infrastructures. This version focuses on introducing major new functionality that helps enterprise customers run large multi-tenant and resilient container registry deployments that are integrated with external registries. Among net-new capabilities for the registry this release further refines the lifecycle of Red Hat Quay on Red Hat OpenShift Container Platform via the operator. View the full article

The post What’s New in Red Hat Enterprise Linux (RHEL) 9 first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Great news for RedHat lovers! Red Hat Enterprise Linux (RHEL) 9 is now generally available (GA). This announcement was made on 18th, May 2022. The latest release is crafted to meet the needs of The post What’s New in Red Hat Enterprise Linux (RHEL) 9 first appeared on Tecmint: Linux Howtos, Tutorials & Guides.View the full article

Red Hat Enterprise Linux (RHEL) celebrated its 20th anniversary days before RHEL 9 was released. See how some of our top authors evolved from “what’s this?” to power users. Read More at Enable Sysadmin The post How I got started with RHEL appeared first on Linux.com. View the full article

Today, Red Hat is excited to announce that Red Hat Advanced Cluster Security for Kubernetes (RHACS) is now open sourced as StackRox. The Kubernetes and container security community can now use and contribute to the codebase of StackRox on Github. View the full article

The post How to Install Graylog Log Management Tool on RHEL Systems first appeared on Tecmint: Linux Howtos, Tutorials & Guides .Graylog is an industry-leading opensource log management solution for collecting, storing, indexing, and analyzing real-time data from applications and a myriad of devices in IT infrastructures such as servers, routers, and firewalls. Graylog helps The post How to Install Graylog Log Management Tool on RHEL Systems first appeared on Tecmint: Linux Howtos, Tutorials & Guides.View the full article