AlmaLinux 8 or 9?

I am wanting to migrate some existing AlmaLinux8 based CWP servers to new OS installs - due to recent security issues and possible compromises.

As there seem to have been a number of #9 issues, I wanted to ask the subject question before moving.

Shall I stick with #8 or is it reasonably painless to move to version 9?

Even then, is it safe to continue with CWP Nginx now or should I set it to the AlmaLinux repository again?

Thanks.

I am firmly in the AlmaLinux 8 camp still -- and will be as long as it is supported with security updates (05/29). https://endoflife.date/almalinux
I tend toward the conservative side of the software curve, though -- far behind the bleeding edge. I probably will skip AL9 altogether and when the time comes, migrate to AL10.

I use the mainline Nginx (AlmaLinux repositories).

I am firmly in the AlmaLinux 8 camp still
I use the mainline Nginx (AlmaLinux repositories).

thanks @overseer - that was my thinking too.  While I've cleaned up the compromises on a couple of machines, they can't be fully trusted, so time to rebuild.

We run AlmaLinux 9, who's active support ends on May 31, 2027, with security support ending on May 31, 2032.

AlmaLinux 8 active support ended on May 31, 2024 with version 8.10.
Security support ends on May 31, 2029.

We run AlmaLinux 9, who's active support ends on May 31, 2027, with security support ending on May 31, 2032.

Noted @Starburst - and thanks for your posts and HowTos etc.  It is appreciated.

I've chosen v8 at present due to there seemingly being fewer workarounds for issues.

Have you tried ELevate for an in-place upgrade 8 -> 9 yet?  Might have to play with that at some stage.

In Almalinux 9 somefeatures does not work well.

1.Firewall says its disable but its enabled;
2. NodeJS apps shows as stopped state even when its running;

I could check this

From the CLI, what does the following show:

Code: [Select]

systemctl status csf

Code: [Select]

systemctl status lfd

And which CSF are you running?

Code: [Select]

csf -v
There are multiple forks out there.

From the CLI, what does the following show:

Code: [Select]

systemctl status csf

Code: [Select]

systemctl status lfd

And which CSF are you running?

Code: [Select]

csf -v
There are multiple forks out there.

Follow the instructions in the this post and that problem will disappear (About CSF):
https://forum.centos-webpanel.com/csf-firewall/cannot-enable-firewall/msg53360/#msg53360


And...

Hi everyone!

I'm facing the same dilemma!

I'm planning to reinstall a server and put it into production, but I'm still undecided between AlmaLinux 8 and 9.

I've been testing AL9 with CWP9 and, although most things work fine, I've run into a few issues along the way.

I'd prefer AL9 because of its longer support lifecycle, but stability is really important to me, especially for a production server.

For those already using CWP9 in production, would you recommend AL9 for a fresh installation, or is AL8 still the safer choice?

Thanks a lot for your advice!

At this point I think it's 1/2 & 1/2.

AL8 might be slightly more stable, but is in the phase where only major security flaws are being fixed.

AL9 and AL10 are still in active development.

Current AL 9.9 and AL 10.3 are in beta.

If you are using the Aetherinox fork of CSF, it work on AL9 and AL10.

I don't know if the other forks do or not.

Thanks for your reply!

Yes, I'm using the Aetherinox fork of CSF (v15.10), and it's working fine.

My main concern is actually CWP itself rather than AlmaLinux. I've been testing CWP9 and encountered a few issues, although I've managed to resolve them.

In your experience, is CWP9 now as reliable as CWP8 for production use, or does it still require some workarounds?

Thanks again!

All of our internal servers run AL 9.8

Best thing I could tell you is setup a test box and see which works best for you.

Just note, as I've mentioned before AL8 is not under current development.
But is the most compatible to CentOS 7 configs.

Thanks again for your advice!

I've actually been testing AL9.8 with CWP9, so I think I'll stick with AL9 for the fresh installation and see how it goes.

Really appreciate your help!

The break point is -- do you need to migrate accounts? If so, use AlmaLinux 8. If you want a more modern foundation going forward, use AlmaLinux 9.