Rocky Linux10.2
Rocky Linux 10 is a release compatible with RHEL 10, which was released in May 2025, and will be supported until the end of May 2032.
Rocky Linux 10.2, which is based on Red Hat Enterprise Linux 10.2 (released on May 7, 2026), was released on May 28, 2026.
１．Rocky Linux 10.2 Download
To download the Rocky Linux 10.2 installation image, access the following site and download Rocky-10.2-x86_64-dvd1.iso.
https://download.rockylinux.org/pub/rocky/10.2/isos/x86_64/
2．Rocky Linux 10.2 Install
Install USB media Change BIOS settings to boot from USB media.
The installation procedure is the same as for Rocky Linux 10.0, so it will be omitted here.
Please refer to the page below.
Initial Setup
1. Disabling SELinux
First, disable selinux. selinux is a feature that improves auditing and security in Linux, but when enabled, it places considerable restrictions on the behavior of services and on what can be configured. Therefore, it is basically disabled in many cases.
SELinux operating modes
Enforcing : SELinux functionality is enabled and access control is enabled
Permissive : SElinux will warn, but no access restrictions will be placed
disabled : Both SElinux function and access control are disabled
①Current SELinux status
# getenforce
Enforcing
②Switching to [permissive] mode
# setenforce 0
# getenforce
Permissive
For reference :Switching to [enforcing] mode
# setenforce 1
# getenforce
Enforcing
➂Completely disable SELinux
You must add selinux=0 to the kernel command line as shown below and then reboot.
# grubby --update-kernel ALL --args selinux=0
# shutdown -r now
※ To return SELinux to active, do the following (reboot after changes)
# grubby --update-kernel ALL --remove-args selinux
# shutdown -r now
2. System Modernization
Perform package updates as soon as possible after installing the operating system.
# dnf -y update
To exclude the kernel from updates,
execute dnf -y update followed by specifying --exclude=kernel* to exclude the kernel from the update targets.
# dnf -y update --exclude=kernel*
3. Services to be stopped due to security measures
# systemctl stop atd.service && systemctl disable atd.service && systemctl stop kdump.service && systemctl disable kdump.service && systemctl stop lvm2-monitor.service && systemctl disable lvm2-monitor.service && systemctl stop mdmonitor.service && systemctl disable mdmonitor.service && systemctl stop smartd.service && systemctl disable smartd.service && systemctl stop dm-event.socket && systemctl disable dm-event.socket
4. Adding Repositories
① Add EPEL repository
# dnf config-manager --set-enabled crb
# dnf -y install epel-release
# vi /etc/yum.repos.d/epel.repo
[epel]
name=Extra Packages for Enterprise Linux $releasever - $basearch
# It is much more secure to use the metalink, but if you wish to use a local mirror
# place its address here.
#baseurl=https://download.example/pub/epel/$releasever${releasever_minor:+z}/Everything/$basearch/
metalink=https://mirrors.fedoraproject.org/metalink?repo=epel${releasever_minor:+-z}-$releasever&arch=$basearch
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-$releasever_major
gpgcheck=1
repo_gpgcheck=0
metadata_expire=24h
countme=1
enabled=1
priority=10 ← Add(Specify priority in the range of 1~99)
➁ Added Remi's RPM repository
# dnf -y install https://rpms.remirepo.net/enterprise/remi-release-10.1.rpm
# dnf -y config-manager --set-enabled remi
# vi /etc/yum.repos.d/remi-safe.repo
# This repository is safe to use with RHEL/CentOS base repository
# it only provides additional packages for the PHP stack
# all dependencies are in base repository or in EPEL
[remi-safe]
name=Safe Remi's RPM repository for Enterprise Linux $releasever_major - $basearch
#baseurl=http://rpms.remirepo.net/enterprise/$releasever_major/safe/$basearch/
#mirrorlist=https://rpms.remirepo.net/enterprise/$releasever_major/safe/$basearch/httpsmirror
mirrorlist=http://cdn.remirepo.net/enterprise/$releasever_major/safe/$basearch/mirror
enabled=1
priority=10 ← Add(Specify priority in the range of 1~99)
gpgcheck=1
# can be enabled if not behind a proxy because of possible cache issue
repo_gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi.el$releasever_major
5. Network Settings(Configure via the command line)
① Check network device name
# nmcli dev s
DEVICE TYPE STATE CONNECTION
ens160 ethernet connected ens160
lo loopback connected (externally) lo
The network device name can be found as "ens160"
➁ Host Name Change
Change the host name to Lepard
# hostnamectl set-hostname Lepard
Log in again
huong@Lepard:~$
➂ Static IPv4 address configuration
If the default setting during OS installation is to obtain an IP address via DHCP, change the network settings to use a static IP address as needed.In this case, the network interface is named "ens160." We will change the static IPv4 address to "192.168.11.83."
Change by "nmcli" command
Fixed IPv4 address setting
# nmcli connection modify ens160 ipv4.addresses 192.168.11.83/24
Gateway Configuration
# nmcli connection modify ens160 ipv4.gateway 192.168.11.1
Referenced DNS settings
# nmcli connection modify ens160 ipv4.dns 192.168.11.1
DNS search base settings (own domain name)
# nmcli connection modify ens160 ipv4.dns-search [Domain]
Set to fixed IP address assignment
# nmcli connection modify ens160 ipv4.method manual
Reboot interface to reflect settings
# nmcli connection down ens160; nmcli connection up ens160
6. Network Settings (Configure via GUI)
① Static IP Address Configuration
# nmtui
Click<OK>
Click<Edit...>
Enter the information in the fields below and click <OK>.
➁ Changing the Host Name
Change the hostname to Lepard
Return to the first screen of [NetworkManager TUI], select [Set system hostname], and click <OK>.
Enter [Hostname] and click<OK>
7. Vim Configuration
①Vim Install
# dnf -y install vim-enhanced
②Apply and reflect Vim
# vi ~/.bashrc
Add alias to the last line
alias vi='vim'
# source ~/.bashrc
③Configure Vim as a user-specific environment
# vi ~/.vimrc
Description
" Use vim's own extensions (not compatible with vi)
set nocompatible
" Specify character code
set encoding=utf-8
" Specify file encoding (read from the beginning until success)
set fileencodings=utf-8,iso-2022-jp,sjis,euc-jp
" Specify the line feed code to be recognized automatically
set fileformats=unix,dos
" Get Backup
set backup
" Specify the directory from which to obtain backups
set backupdir=~/backup
" Number of generations to keep search history
set history=50
" Do not distinguish between upper and lower case letters when searching
set ignorecase
" Mixing capital letters in search terms makes the search case sensitive
set smartcase
" Highlight words matching your search term
set hlsearch
" Use incremental search
set incsearch
" Display line number
set number
" Visualize line breaks ( $ ) and tabs ( ^I )
set list
" Highlight corresponding parentheses when entering parentheses
set showmatch
" No newlines at the end of files
set binary noeol
" Enable automatic indentation
set autoindent
" Color-coded display by syntax
syntax on
" Change color of comment text in case of syntax on
highlight Comment ctermfg=LightCyan
" Wrap lines by window width
set wrap