I am wanting to migrate some existing AlmaLinux8 based CWP servers to new OS installs - due to recent security issues and possible compromises.
As there seem to have been a number of #9 issues, I wanted to ask the subject question before moving.
Shall I stick with #8 or is it reasonably painless to move to version 9?
Even then, is it safe to continue with CWP Nginx now or should I set it to the AlmaLinux repository again?
Thanks.
I am firmly in the AlmaLinux 8 camp still -- and will be as long as it is supported with security updates (05/29). https://endoflife.date/almalinux
I tend toward the conservative side of the software curve, though -- far behind the bleeding edge. I probably will skip AL9 altogether and when the time comes, migrate to AL10.
I use the mainline Nginx (AlmaLinux repositories).
Quote from: overseer on September 14, 2026, 03:20:20 AM
I am firmly in the AlmaLinux 8 camp still
I use the mainline Nginx (AlmaLinux repositories).
thanks @overseer - that was my thinking too. While I've cleaned up the compromises on a couple of machines, they can't be fully trusted, so time to rebuild.
We run AlmaLinux 9, who's active support ends on May 31, 2027, with security support ending on May 31, 2032.
AlmaLinux 8 active support ended on May 31, 2024 with version 8.10.
Security support ends on May 31, 2029.
Quote from: Starburst on September 14, 2026, 08:27:11 AM
We run AlmaLinux 9, who's active support ends on May 31, 2027, with security support ending on May 31, 2032.
Noted @Starburst - and thanks for your posts and HowTos etc. It is appreciated.
I've chosen v8 at present due to there seemingly being fewer workarounds for issues.
Have you tried ELevate for an in-place upgrade 8 -> 9 yet? Might have to play with that at some stage.
In Almalinux 9 somefeatures does not work well.
1.Firewall says its disable but its enabled;
2. NodeJS apps shows as stopped state even when its running;
I could check this
From the CLI, what does the following show:
systemctl status csf
systemctl status lfd
And which CSF are you running?
csf -v
There are multiple forks out there.
Quote from: Starburst on October 17, 2026, 11:46:47 PM
From the CLI, what does the following show:
systemctl status csf
systemctl status lfd
And which CSF are you running?
csf -v
There are multiple forks out there.
Follow the instructions in the this post and that problem will disappear (About CSF):
https://forum.centos-webpanel.com/csf-firewall/cannot-enable-firewall/msg53360/#msg53360
And...
Hi everyone!
I'm facing the same dilemma!
I'm planning to reinstall a server and put it into production, but I'm still undecided between AlmaLinux 8 and 9.
I've been testing AL9 with CWP9 and, although most things work fine, I've run into a few issues along the way.
I'd prefer AL9 because of its longer support lifecycle, but stability is really important to me, especially for a production server.
For those already using CWP9 in production, would you recommend AL9 for a fresh installation, or is AL8 still the safer choice?
Thanks a lot for your advice!
At this point I think it's 1/2 & 1/2.
AL8 might be slightly more stable, but is in the phase where only major security flaws are being fixed.
AL9 and AL10 are still in active development.
Current AL 9.9 and AL 10.3 are in beta.
If you are using the Aetherinox fork of CSF, it work on AL9 and AL10.
I don't know if the other forks do or not.
Thanks for your reply!
Yes, I'm using the Aetherinox fork of CSF (v15.10), and it's working fine.
My main concern is actually CWP itself rather than AlmaLinux. I've been testing CWP9 and encountered a few issues, although I've managed to resolve them.
In your experience, is CWP9 now as reliable as CWP8 for production use, or does it still require some workarounds?
Thanks again!
All of our internal servers run AL 9.8
Best thing I could tell you is setup a test box and see which works best for you.
Just note, as I've mentioned before AL8 is not under current development.
But is the most compatible to CentOS 7 configs.
Thanks again for your advice!
I've actually been testing AL9.8 with CWP9, so I think I'll stick with AL9 for the fresh installation and see how it goes.
Really appreciate your help!
The break point is -- do you need to migrate accounts? If so, use AlmaLinux 8. If you want a more modern foundation going forward, use AlmaLinux 9.
Or perhaps go straight to AlmaLinux 10? I see that a lot of work has been going into resolving compatibility issues lately.
That seems to be the current trajectory. [Soon] I plan on leaping from AL8 to AL10, skipping 9 altogether.
I have been using AL9 for almost 2 years now and although servers had some minor issues, they all seem to have been solved with the release of cwppro 130 - there might still be some minor issues I haven´t come around yet, but I can recommend AL9 and cwp together now.
If I was to start on a fresh server, I would still wait a while, to be sure that cwp is up to speed on AL10 as well - they might be, but I haven´t checked it yet
If there is enough time, do a testinstall with AL10 and see if it rolls without major issues
If it does have issues, delete and go for AL9
As Starburst mentions elsewhere, AL9 is security supported for several years to come, although major changes runs out next year