Risk Factor: high (inhibitor) Title: Legacy network configuration found Summary: Network configuration files in legacy "ifcfg" format are present.In Red Hat Enterprise Linux 10, support for these files is no longer enabled and the configuration will be ignored. The following files were found: - /etc/sysconfig/network-scripts/ifcfg-eth0 Related links: - How to migrate the connection from ifcfg to NetworkManager keyfile plugin?: https://access.redhat.com/solutions/7083803 - nmcli(1) manual, describes "connection migrate" sub-command.: https://networkmanager.dev/docs/api/latest/nmcli.html - nm-settings-ifcfg-rh(5), description of the "ifcfg" format: https://networkmanager.dev/docs/api/latest/nm-settings-ifcfg-rh.html - nm-settings-keyfile(5), description of the "keyfile" format: https://networkmanager.dev/docs/api/latest/nm-settings-keyfile.html Remediation: [hint] Convert the configuration into NetworkManager native "keyfile" format. [command] nmcli connection migrate /etc/sysconfig/network-scripts/ifcfg-eth0 Key: 7de70b43c3c9d20075e30894ac24a4c4e2d70837 ---------------------------------------- Risk Factor: high Title: Detected custom leapp actors or files. Summary: We have detected installed custom actors or files on the system. These can be provided e.g. by third party vendors, Red Hat consultants, or can be created by users to customize the upgrade (e.g. to migrate custom applications). This is allowed and appreciated. However Red Hat is not responsible for any issues caused by these custom leapp actors. Note that upgrade tooling is under agile development which could require more frequent update of custom actors. The list of custom leapp actors and files: - /usr/share/leapp-repository/repositories/system_upgrade/common/files/distro/almalinux/rpm-gpg/10/RPM-GPG-KEY-AlmaLinux-10 - /usr/share/leapp-repository/repositories/system_upgrade/common/files/rpm-gpg/10/RPM-GPG-KEY-AlmaLinux-10 Related links: - Customizing your Red Hat Enterprise Linux in-place upgrade: https://red.ht/customize-rhel-upgrade Remediation: [hint] In case of any issues connected to custom or third party actors, contact vendor of such actors. Also we suggest to ensure the installed custom leapp actors are up to date, compatible with the installed packages. Key: 2064870018370ce2bde3f977cf753ed8c59848d0 ---------------------------------------- Risk Factor: high Title: Packages not signed by Red Hat found on the system Summary: The following packages have not been signed by Red Hat and may be removed during the upgrade process in case Red Hat-signed packages to be removed during the upgrade depend on them: - hc-utils Related links: - Handling the migration of your custom and third-party applications: https://red.ht/customize-rhel-upgrade-actors Remediation: [hint] The most simple solution that does not require additional knowledge about the upgrade process is the uninstallation of such packages before the upgrade and installing these (or their newer versions compatible with the target system) back after the upgrade. Also you can just try to upgrade the system on a testing machine (or after the full system backup) to see the result. However, it is common use case to migrate or upgrade installed third party packages together with the system during the in-place upgrade process. To examine how to customize the process to deal with such packages, follow the documentation in the attached link for more details. Key: 13f0791ae5f19f50e7d0d606fb6501f91b1efb2c ---------------------------------------- Risk Factor: medium Title: Berkeley DB (libdb) has been detected on your system Summary: Libdb was marked as deprecated in RHEL-9 and in RHEL-10 is not included anymore. There are a couple of alternatives in RHEL-10; the applications that depend on libdb will not work. Such applications must implement another type of backend storage. And migrate existing data to the new database format. Related links: - Migrating to a RHEL 10 without libdb: https://access.redhat.com/articles/7099256 Remediation: [hint] Back up your data before proceeding with the data upgrade/migration. For the conversion, the tool db_converter from the libdb-utils rpm could be used. This database format conversion must be performed before the system upgrade. The db_converter is not available in RHEL 10 systems. For more information, see the provided article. Key: fdc8f5b084e95922a4f59485a807a92cae2fc738 ---------------------------------------- Risk Factor: low Title: Some enabled RPM repositories are unknown to Leapp Summary: The following repositories with Red Hat-signed packages are unknown to Leapp: - baseos - elevate - appstream And the following packages installed from those repositories may not be upgraded: - geolite2-country - policycoreutils-python-utils - krb5-libs - rpm-libs - ima-evm-utils - harfbuzz - pciutils-libs - rpm-plugin-audit - dnf-plugins-core - python3-hawkey - almalinux-release - python3-pyudev - libdnf - libselinux - shadow-utils - util-linux - wget - checkpolicy - alternatives - nftables - libtool-ltdl - systemd - python3-gobject-base-noarch - chrony - python3-setuptools - grub2-tools-extra - rpm-build-libs - python3-pysocks - almalinux-repos - python3-audit - python3-chardet - NetworkManager - coreutils-common - kernel-modules-core - libpng - openssh-server - pciutils - python3-babel - grub2-common - libss - dhcp-common - python3-urllib3 - leapp - systemd-udev - tar - grub2-efi-aa64-modules - cronie - kernel-tools-libs - openldap - authselect-libs - libmount - libsss_sudo - python3-libselinux - kernel-tools - gpm-libs - python3-oauthlib - sg3_utils-libs - lshw - irqbalance - libblockdev-utils - python3-attrs - expat - fuse-libs - logrotate - rsync - systemd-pam - python3-jinja2 - device-mapper-persistent-data - freetype - libtdb - libuser - sssd-kcm - hwdata - dhcp-client - fwupd - iputils - libblockdev-swap - systemd-container - rsyslog - audit-libs - libblockdev-fs - libbpf - e2fsprogs - libldb - elfutils-libelf - python3-markupsafe - python3-rpm - rpm - gnutls - libsemanage - ipcalc - libblkid - python3-libsemanage - fwupd-plugin-flashrom - python3-dnf-plugins-core - libnl3-cli - python3-dnf - NetworkManager-tui - coreutils - device-mapper - numactl-libs - glibc-gconv-extra - python3-gobject-base - yum - xfsprogs - rpm-plugin-selinux - ethtool - systemd-rpm-macros - libsss_idmap - authselect - libfdisk - libmaxminddb - dnf-data - libblockdev-loop - openssh-clients - libtasn1 - audit - binutils - python3-distro - python3-requests - rpm-plugin-systemd-inhibit - grub2-tools-minimal - elfutils-debuginfod-client - kbd-legacy - cloud-init - libzstd - lvm2-libs - python3-setools - grub2-efi-aa64 - libcom_err - openssh - python-unversioned-command - crypto-policies-scripts - device-mapper-event - python3-jsonschema - glib2 - python3-jsonpatch - vim-common - python3-idna - systemd-libs - iptables-nft - libsss_nss_idmap - python3 - rsyslog-logrotate - vim-filesystem - kernel-modules - python3-prettytable - sssd-client - elfutils-libs - cronie-anacron - NetworkManager-team - grub2-tools - python3-leapp - python3-pyserial - python3-pyyaml - dracut - kexec-tools - libblockdev-mdraid - leapp-upgrade-el9toel10-deps - kernel-core - libsmartcols - NetworkManager-libnm - libnftnl - vim-minimal - e2fsprogs-libs - crypto-policies - initscripts-service - parted - selinux-policy-targeted - glibc - libxml2 - python3-netifaces - lvm2 - geolite2-city - nano - iproute - kpartx - libblockdev-crypto - almalinux-gpg-keys - elfutils-default-yama-scope - dnf - libuuid - python3-policycoreutils - qemu-guest-agent - selinux-policy - vim-enhanced - dracut-config-rescue - leapp-deps - binutils-gold - rootfiles - rpm-sign-libs - cloud-utils-growpart - graphite2 - kbd - python3-pytz - kernel - libblockdev-part - nettle - libnl3 - cryptsetup - libselinux-utils - libnvme - python3-jsonpointer - pam - iproute-tc - glibc-langpack-en - python3-libs - libdb - python3-configobj - libsepol - python3-libdnf - dracut-squash - leapp-data-almalinux - sg3_utils - gobject-introspection - device-mapper-libs - pigz - libblockdev - leapp-upgrade-el9toel10 - python3-pyrsistent - libdb-utils - device-mapper-event-libs - volume_key-libs - sssd-common - util-linux-core - initscripts-rename-device - dracut-network - glibc-common - libaio - kbd-misc - libsss_certmap Remediation: [hint] You can file a request to add this repository to the scope of in-place upgrades by filing a support ticket Key: 8e89e20c645cea600b240156071d81c64daab7ad ---------------------------------------- Risk Factor: info Title: SElinux relabeling will be scheduled Summary: SElinux relabeling will be scheduled as the status is permissive/enforcing. Key: 8fb81863f8413bd617c2a55b69b8e10ff03d7c72 ----------------------------------------