View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0000094||AlmaLinux-8||-OTHER||public||2021-06-02 14:57||2021-06-04 17:41|
|Priority||normal||Severity||crash||Reproducibility||have not tried|
|Summary||0000094: 8.4 Minimal ISO fails to install when using PCI-DSS security baseline due to missing packages|
|Description||I'm trying out the 8.4 minimal ISO on a HPE server over iLO. The machine, has no networking, and thus, the minimal installation has to pull everything from the ISO image.|
When using the PCI:DSS security profile, the installer correctly states it is going to include more packages like openscap & aide. During the installation process, and error is tripped when trying to install those same packages, and if you ignore them, then a more fatal error is tripped when the process seemingly tries to use the openscap program which it previously couldn't install. The installation fails.
I think the root cause is that any "extra packages" which the security baselines need may not be included in the minimal ISO, and on a machine without networking, it makes a mess. So this issue is less of a problem with AlmaLinux or the Anaconda installer, and more about how the ISO is packed up.
I'm a very experienced CentOS user, but I honestly don't know if I have ever tried to install the "minimal" ISO while the machine has absolutely no networking. I'm adapting and using our own [internal] instructions for "setting up CentOS 7 minimal on bare metal" to be used with AlmaLinux 8. It's possible this minimal ISO issue goes all the way up the foodchain to RHEL as well?
|Steps To Reproduce||Try to install AlmaLinux 8.4 on a machine, using the minimal ISO file, without any networking configured at installation. Use the PCI:DSS security profile when configuring the installation.|
|Tags||No tags attached.|
Hello. Thanks for report.
Minimal ISO includes only BaseOS repo and should only be used for simple minimal installations.
Packages needed for OpenSCAP are in AppStream repo.
You should try with full DVD ISO image to get OpenSCAP working.
I'll add this to known issue.