View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000654 | AlmaLinux-10 | General | public | 2026-07-20 18:39 | 2026-07-20 18:42 |
| Reporter | jiazixin | Assigned To | |||
| Priority | urgent | Severity | major | Reproducibility | always |
| Status | new | Resolution | open | ||
| Platform | x86_86 | OS | almalinux | OS Version | 10.2 |
| Summary | 0000654: iptables-nft-1.8.11-15.el10_2 pulls kernel-debug packages during fresh AlmaLinux 10.2 installation | ||||
| Description | A fresh AlmaLinux 10.2 x86_64 installation performed by Anaconda installs both the normal kernel and the complete kernel-debug package set. Environment: - Distribution: AlmaLinux 10.2 - Architecture: x86_64 - Installation method: Anaconda - Installation media: AlmaLinux 10.2 x86_64 Boot ISO - Affected package: iptables-nft-1.8.11-15.el10_2.x86_64 - Kernel version: 6.12.0-211.34.1.el10_2.x86_64 Actual result: The installation contains both the normal kernel: kernel-core-6.12.0-211.34.1.el10_2.x86_64 and the complete debug kernel package set: kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64 kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64 kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64 kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64 The first DNF/Anaconda transaction contains: Install iptables-libs-1.8.11-15.el10_2.x86_64 @anaconda Install iptables-nft-1.8.11-15.el10_2.x86_64 @AppStream Install kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64 @anaconda Install kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64 @anaconda Install kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64 @anaconda Install kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64 @anaconda This proves that the debug kernel packages were selected during the initial installation. They are not leftovers from an earlier iptables version or a previous system update. Expected result: A normal AlmaLinux installation should install only the normal kernel variant. The kernel-debug packages should not be installed unless explicitly selected by the user. | ||||
| Steps To Reproduce | 1. Boot the AlmaLinux 10.2 x86_64 Boot ISO. 2. Configure the current AlmaLinux 10.2 BaseOS and AppStream installation repositories. 3. Perform a fresh installation onto an empty disk using the Minimal Install software selection 4. Boot the newly installed system. 5. Check the installed packages: rpm -qa | sort | grep '^kernel' rpm -q iptables-nft iptables-libs 6. Inspect the initial installation transaction: dnf history info 1 7. Observe that both kernel-core and the complete kernel-debug package set were installed in the initial Anaconda transaction. Reproducibility: Always | ||||
| Additional Information | This appears to be an incomplete fix for the iptables-nft conditional kernel dependency problem. Related Red Hat issues: 1. RHEL-176386: https://redhat.atlassian.net/browse/RHEL-176386 In this issue, the RHEL iptables maintainer explicitly noted that using the nft_compat kernel module capability could pull in kernel-debug-modules-extra because the debug package provides the same capability. 2. RHEL-186232: https://redhat.atlassian.net/browse/RHEL-186232 This related issue concerns iptables selecting the wrong kernel variant. It was resolved with iptables-1.8.11-15.el10_2, but the fresh Anaconda x86_64 installation scenario reported here still selects the debug kernel variant. The issue was reproduced using current AlmaLinux 10.2 BaseOS and AppStream repository metadata. The exact installation repository URL, installation time, DNF transaction output, installed package list, and Anaconda logs are included in the attached evidence archive. | ||||
| Tags | almalinux-10.2, anaconda, iptables-nft, kernel-debug | ||||
| Attached Files | |||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2026-07-20 18:39 | jiazixin | New Issue | |
| 2026-07-20 18:39 | jiazixin | Tag Attached: almalinux-10.2 | |
| 2026-07-20 18:39 | jiazixin | Tag Attached: anaconda | |
| 2026-07-20 18:39 | jiazixin | Tag Attached: iptables-nft | |
| 2026-07-20 18:39 | jiazixin | Tag Attached: kernel-debug | |
| 2026-07-20 18:39 | jiazixin | File Added: log.tar | |
| 2026-07-20 18:42 | jiazixin | Note Added: 0001233 |
