CentOS-7 (1804) Release Notes
Last updated: October 30, 2018
Contents
1. Translations
Translations of these release notes are available for the following languages:
2. Introduction
|
The CentOS Project does not provide any verification, certification, or software assurance with respect to security for CentOS Linux. The Security Profiles provided in the CentOS Linux installers are a conversion of the ones included in RHEL Source Code. If certified / verified software that has guaranteed assurance is what you are looking for, then you likely do not want to use CentOS Linux. See this link if you plan to use Security Profiles. |
Hello and welcome to the sixth CentOS-7 release. The CentOS Linux distribution is a stable, predictable, manageable and reproducible platform derived from the sources of Red Hat Enterprise Linux (RHEL)1. You can read our official product announcement for this release here.
CentOS conforms fully with Red Hat's redistribution policy and aims to have full functional compatibility with the upstream product. CentOS mainly changes packages to remove Red Hat's branding and artwork.
We have decided not to follow Red Hat's usage of Installation Roles. In CentOS Linux all content from every distribution 'channel' is made available to the user at time of installation.
The continuous release (CR) repository makes generally available packages that will appear in the next point release of CentOS, on a testing and hotfix basis until formally released. Please read through the other sections before trying an install or reporting an issue.
3. Install Media
Various installation images are available for installing CentOS. Which image you need to download depends on your installation environment. All of these images can either be burned on a DVD or dd’ed to an USB memory stick.
If you are unsure which image to use, pick the DVD image. It allows selecting which components you want to install and contains all packages that can be selected from the GUI installer. The 'Everything' DVD is almost twice the size of the ordinary DVD and is not required for most common installs - it is intended for use by sysadmins who want to run their own local mirror.
Live media images are also available, both for Gnome and KDE desktop environments. These allow you to test out CentOS by booting from the DVD or USB stick. You can also install CentOS to your hard disk from the live media images, but please note that what gets installed on your hard disk is exactly the same as you see when using the live media. For more flexibility in selecting which packages you want to have installed, please use the DVD image.
The netinstall image can be used for doing installs over network. After booting the computer with the netinstall image, the installer will ask from where it should fetch the packages to be installed.
The everything image contains all the packages that are available for CentOS-7, including those that are not directly installable from the installer. If you want to install those other packages, you must mount the install media on your installed system after the installation, and copy or install the packages from there. For most users installing from the DVD image and then installing the other packages with ”yum install <packagename>” instead is probably easier.
Attention |
4. Verifying Downloaded Installation Images
Before copying the image to your preferred installation media you should check the sha256sum of the downloaded installation images.
sha256sum x86_64: 506e4e06abf778c3435b4e5745df13e79ebfc86565d7ea1e128067ef6b5a6345 CentOS-7-x86_64-DVD-1804.iso b346daae2a93caed88e822e722e7284c648f9919d475ff98489b424350f99a45 CentOS-7-x86_64-LiveGNOME-1804.iso 040ddfb27d30e48efad8709c9df946202cec169077c843fd2cbe8d802187ff8e CentOS-7-x86_64-LiveKDE-1804.iso 714acc0aefb32b7d51b515e25546835e55a90da9fb00417fbee2d03a62801efd CentOS-7-x86_64-Minimal-1804.iso 99723c8b87dcec21df8aed23de1eb810346d42cfd2a3fafafe70a68296053417 CentOS-7-x86_64-Everything-1804.iso 937bf0a7b0932817f84f7230f15ed88911bbbd85c0c958680792b7f8d8f9c1a9 CentOS-7-x86_64-NetInstall-1804.iso
5. Major Changes
Since release 1503 (abrt>= 2.1.11-19.el7.centos.0.1) CentOS-7 can report bugs directly to bugs.centos.org. You can find information about that feature at this page.
More information can be found in the RHEL 7.5 Release Notes.
If you plan to use Security Profiles in Anaconda, please see this link.
6. Deprecated Features
This release - as already mentioned - features various changes to cryptographic abilities of various packages. Some insecure cryptographic algorithms and protocols are removed from the distro. For a complete list of all removed functions and deprecated packages please take a look at this page.
7. Known Issues
A list of known upstream issues can be found here. Given that we build from the same sources, many if not all of those issues will likely also apply to CentOS Linux. You can also find information on notable updates here.
|
Some security profiles enable a global repo_gpgcheck option in /etc/yum.conf to cryptographically verify the repository metadata. While this works for CentOS repositories, some third party repositories (such as EPEL) do not support GPG signed metadata. If repo_gpgcheck is enabled yum will try to download the signed metadata file repomd.xml.asc. If the file does not exist, yum will output an error message and exit. You may need to either remove repo_gpgcheck from /etc/yum.conf or set repo_gpgcheck=0 for each individual repository that does not support GPG signed metadata. |
|
Installation of a package which depends on libexiv2.so.12 fails because the latest exiv2-libs-0.26-3.el7 from CentOS 7.5 only provides libexiv2.so.26. For more details see RHBZ#1568618. |
|
Dell OpenManage (srvadmin) depends on a library file named libsmbios.so.2, included in libsmbios. This package is available in Dell's repositories and also in EPEL. Previous versions of CentOS did not have libsmbios, but it is now available in 7.5.1804. Unfortunately the CentOS version of libsmbios does not provide this particular libsmbios.so.2 library file, leading to a dependency problem when upgrading a system that has srvadmin-storage installed. As a workaround, add --exclude libsmbios,smbios-utils-bin to your yum command line to keep using libsmbios provided by Dell or EPEL. You can also add exclude=libsmbios smbios-utils-bin to CentOS-Base.repo and/or CentOS-CR.repo in /etc/yum.repos.d for a more permanent change. It is possible that a future release of OMSA will address this issue. Please see this Linux-PowerEdge thread and RHBZ#1570019 (closed) or RH knowledgebase article for more information. |
|
The base 7.5.1804 kernel (kernel-3.10.0-862.el7) has an issue with QLogic qla2xxx (aka ISP2xxx) based scsi controllers. One exact model that has this issue is 03:07.0 Fibre Channel: QLogic Corp. ISP2312-based 2Gb Fibre Channel to PCI-X HBA (rev 02). This controller is on the deprecated list and it will not work later on RHEL 8 (or therefore CentOS 8), so finding an alternative would likely be a good idea anyway. This issue also happens in the RHEL 7.5 kernel. See this mailing list thread for more information. |
|
If you are using ZFS on Linux, the base 7.5.1804 kernel (kernel-3.10.0-862.el7) causes this issue. This is also present in the upstream RHEL-7.5 kernel. |
|
There is a possible libguestfs dependency issue on the ppc64le (and also possibly the ppc64 and aarch64) arches where qemu-*-ma is used 1570533 and RHBZ#1568676. |
|
If you are upgrading from CentOS-7.0.1406 and if you have NetworkManager.i686 installed, you will have to uninstall NetworkManager.i686 before the upgrade. (Thanks to the Scientific Linux team for finding this issue) |
|
Security profiles "Standard System Security Profile" and "C2S for CentOS Linux 7" can't be used in the installer. A bug causes the installer to require a separate partition for /dev/shm, which is not possible. RHBZ#1570956 |
|
VPN users may need to update to kernel-3.10.0-862.2.3.el7 to use aes_gcm256 with IPsec. There was a bug in the GA kernel RHBZ#1568167 but fixed in kernel-3.10.0-862.2.3.el7. |
|
A version of nftables was added in RHEL-7.3 which is seen as a downgrade to a version previously available in EPEL. libnftnl was updated in RHEL-7.5 and may now cause a conflict with nftables if the EPEL version is still installed. You can use yum downgrade nftables to bring in the proper libnftnl and nftables, then continue with your upgrade with yum update. RHBZ#1575059 has a few more technical details. |
|
For the ppc64le arch, if you currently have qemu-*-ev from the extras repository installed and you want to upgrade to the included qemu-*-ma which is now included in ppc64le, you must manually remove qemu-*-ev. If you would rather continue to use qemu-*-ev, you can get those RPMs from the Virt SIG here |
|
AWS users should beware of a problem before updating. A version of awscli was added in RHEL-7.5 which is an upgrade from the version currently available in EPEL. It has pre-reqs of python-s3transfer where the EPEL copy required python2-s3transfer. If you update awscli without removing python2-s3transfer and installing python-s3transfer then awscli will die with a stacktrace. You can yum swap python2-s3transfer python-s3transfer to exchange the two packages and awscli from the base repo should then work. |
|
Some digital cameras connected through USB do not work. This is due to a bug in libgphoto2. For more details see RHBZ#1551747. |
8. Fixed Issues
For all the fixed issues it is best to look at the errata release page here and look for fixes dated starting April 10th 2018.
9. Packages and Applications
9.1. Packages modified by CentOS
- abrt
- anaconda
- apache-commons-net
- basesystem
- cloud-init
- compat-glibc
- dhcp
- firefox
- glusterfs
- grub2
- httpd
- initial-setup
- ipa
- kabi-yum-plugins
- kernel
- kde-settings
- libguestfs
- libreport
- ntp
- openssl098e
- oracleasm
- oscap-anaconda-addon
PackageKit
- pcs
- plymouth
- redhat-lsb
- redhat-rpm-config
- scap-security-guide
- shim
- shim-signed
- sos
- subscription-manager
- system-config-date
- system-config-kdump
- thunderbird
- xulrunner
- yum
9.2. Packages removed from CentOS that are included upstream
- insights-client
- Red_Hat_Enterprise_Linux-Release_Notes-7-*
- redhat-access-gui
- redhat-bookmarks
- redhat-indexhtml
- redhat-logos
- redhat-release-*
- subscription-manager-migration
- subscription-manager-migration-data
9.3. Packages added by CentOS that are not included upstream
- centos-bookmarks
- centos-indexhtml
- centos-logos
- centos-release
9.4. Packages released as 7.4.1708 updates with older packages on the 7.5.1804 install media
- firefox
- motif
- slf4j
- thunderbird
- tzdata
10. Sources
All CentOS-7 sources are hosted at git.centos.org. All code released into the distribution originated from git.centos.org.
Source RPMs will also be published once the release is done, in the usual location at http://vault.centos.org/centos/7/
From a CentOS machine you can easily retrieve sources using the yumdownloader --source <packagename> command.
11. How to help and get help
As a CentOS user there are various ways you can help out with the CentOS community. Take a look at our Contribute page for further information on how to get involved.
11.1. Special Interest Groups
CentOS consists of different Special Interest Groups (SIGs) that bring together people with similar interests. The following SIGs already exist (among others):
Artwork - create and improve artwork for CentOS releases and promotion
Promotion - help promoting CentOS online or at events
Virtualization - unite people around virtualization in CentOS
And we encourage people to join any of these SIGs or start up a new SIG, e.g.
- ARM, PPC and i386 port - help with porting CentOS to other architectures
- Hardware compatibility - provide feedback about specific hardware
- RPM Packaging - contribute new useful RPM packages
- Translation - help translating the documentation, website and Wiki content
11.2. Mailing Lists and Forums
Another way you can help others in the community is by actively helping and resolving problems that users come up against in the mailing lists and the forums.
11.3. Wiki and Website
Even as an inexperienced CentOS user we can use your help. Because we like to know what problems you encountered, if you had problems finding specific information, how you would improve documentation so it becomes more accessible. This kind of feedback is as valuable to others as it would have been to you so your involvement is required to make CentOS better.
So if you want to help out and improve our documentation and Wiki, register on the Wiki or subscribe to the centos-docs mailing list.
11.4. IRC Presence
The CentOS project maintains a presence on the freenode IRC network as an additional venue for community support and interaction. Please see our IRC wiki article for more information.
12. Further Reading
The following websites contain large amounts of information to help people with their CentOS systems:
Upstream release notes and documentation : https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/
13. Thanks
We thank everyone involved for helping us produce this product and would like to specifically acknowledge the extra effort made by the QA Team. Without them working lots and lots of hours in evenings, nights, weekends and holidays, we couldn't have released this Release in the time we did. A special thanks also goes to the CentOS-community. A more complete list of the contributors to this release can be found at /usr/share/doc/centos-release/Contributors of your new CentOS-7 installation.
Copyright (C) 2018 The CentOS Project
Visit https://www.redhat.com/rhel/ (1)