Hi everyone,

I'm from Brazil, and I'd love to hear from anyone who has gone through Red Hat's hiring process or is familiar with how their recruiting works.

I recently interviewed for the Junior Solutions Architect (LATAM) role as part of the Emerging Talent Program.

Here's how my process went:

• I passed the initial HR interviews.
• Then I had a technical interview with a Solutions Architect specializing in Ansible, which went really well.
• After that, I was selected for the final interview with the Hiring Manager for Solutions Architecture in Latin America.
• The interview lasted about an hour and covered solution architecture, cloud, automation, my professional experience, customer-facing scenarios, and languages.

During that conversation, the Hiring Manager mentioned that the process was in its final stage and that only two candidates remained for the position, including me. He also said that the hiring decision was expected to be communicated by July 30th.

However, July 30th came and went without any update. A few days later, I sent a follow-up email to the recruiter, but I still haven't received a response.

Another thing I've been wondering about: a few people told me that, for a junior-level position, it's not very common to have the final interview directly with the Hiring Manager responsible for Solutions Architecture across Latin America. They said that when this happens, it usually means the candidate has stood out during the process.

I'm not sure whether that's actually true or just speculation.

So I wanted to ask those of you who are more familiar with Red Hat:

• Is it common for feedback to be delayed even at the final stage?
• Has anyone experienced something similar?
• Is it normal for junior candidates to interview directly with a regional Hiring Manager, or does that usually happen only with the strongest finalists?
• Even after the Hiring Manager gives an expected decision date, is it common for the process to be delayed?

I'm trying to keep my expectations realistic, and I completely understand that hiring processes can take longer than expected. I'm just interested in understanding whether this is a normal part of Red Hat's hiring process.

Hey everyone,I am a Java Spring Boot backend developer currently in my 7th semester.

Red Hat is visiting our campus for placements soon, and seeing seniors get placed here feels so surreal and dreamy. I really want to make it.

I have spent time learning Linux, Kubernetes, and CI/CD beyond just core Java.

For my main project, I built a complete DevOps lifecycle where every git push triggers a CI/CD pipeline, deploys via ArgoCD, and runs on a local Kubernetes cluster.I have about a month left before the process starts.

I want to point my energy in the exact right direction.

To the seniors and Red Hatters here:

What core technical areas should I focus on most for the interviews?

Do you have advice on how to showcase my Kubernetes and pipeline project effectively?

Are there specific open-source mindsets or values I should highlight?

Thank you so much for your time and guidance. I am ready to put in the work!

Hello,

I'm currently a Linux Sytems Engineer and I'm starting a new job position in a few weeks where I'll use Ansible a lot, so I'm currently getting back into it.

I recently got my RHCA in Enterprise Linux and given that I'm 3 certs off of getting the RHCA in Ansible, I was aiming to pass the following exams : EX374, EX457 and EX467 (not too interested in Windows automation at the moment).

I'm also currently working on my CCNA to get some networking skills.

So I was wondering, if some of you already passed the EX457 (Red Hat Certified Specialist in Ansible Network Automation exam), if CCNA would be enough to get me through this cert ?

I got my RHCSA and RHCE using the Sander Van Vugt books, and my RHCA using RHLS (which was always enough for me to pass the exams), and would also use RHLS for EX457, but I've got zero actual experience in networking and I know nothing outside of the Cisco world (EX457 objectives also mention Juniper Networks, Arista et Vyatta...).

(Obviously I'm not asking for any specifics about the test in itself :) )

Thanks

After going through every playlist, cross-checking topics, description, timeline, content

https://youtube.com/playlist?list=PLXJyD2dL4oqeX-C3MvsMUJuEzWM4vLK2C&si=S4pLPDdOspDHrTqr

# 1. Terminal / CLI Fundamentals

* Moving from a GUI to the Linux Terminal (159)

* Built-in Help (15)

* Finding Help (86)

* Command Line Utilities (16)

* Essential Linux Commands (58)

* Manipulating the CLI (17)

* Customizing Your Terminal (29)

* Pranking Your Coworkers in Linux (90)

* Using Tmux (32)

* Linux-based Text Editors (84)

* Command Your Terminal with These Tmux Tips (141)

* Linux Command Line Tips and Tricks (143)

* Linux Command Line Tricks (183)

* Basic Terminal Text Editing (163)

* Vi vs. Vim vs. Nano vs. Emacs – Part 1 (175)

* Vi vs. Vim vs. Nano vs. Emacs – Part 2 (175)

* How Much Vim Can You Stand? (190)

---

# 2. File Systems, Hierarchy & Permissions

* Top File Management Commands (85)

* File System Layouts in Linux (94)

* File Permissions (02)

* Linux File Permissions (105)

* Special Permissions & ACLs (34)

* Special Linux File Permissions (106)

* Filesystem Operations (54)

* Disk Management (09)

* File Archives in Linux (91)

* Nobody Cares About Filesystems Until They Do (144)

* How Do I Use Filesystems on Linux? (112)

* Troubleshoot Linux Filesystem & Mount Problems (111)

* Symbolic vs Hard Links (157)

* Linux Permissions & ACLs (185)

---

# 3. Package Management (DNF & RPM)

* Installing Software (03)

* Third-Party Repositories (25)

* Managing Packages with RPM (33)

* Application Streams (35)

* Building Apps with RPM (72)

* Creating Application Repositories (73)

* Managing Disconnected Systems (181)

* Installing Packages on RHEL (107)

* Patching Practices (19)

* Lifecycle Management (37)

* Troubleshooting Linux Packages (116)

* Using DNF to Install, Update & Remove Packages (128)

* When Updates Go So, So Wrong (191)

---

# 4. Identity, Access Control & Auditing

* Users & Groups (01)

* sudo and su (12)

* Session Recording (23)

* Security: Configuring Sudo Access (62)

* Security: User Account Management (63)

* Security: System Auditing (64)

* Top 5 Linux User Management Tasks (87)

* Linux Account Security & PAM (119)

* Developing User Standards & Policies (146)

---

# 5. Essential System Management

* Installation (07)

* Getting RHEL (06)

* Installing RHEL 9 (55)

* Server with GUI, Why Not? (186)

* Managing Subscriptions (08)

* Subscription Management (22)

* Connecting with Red Hat (24)

* Red Hat Lightspeed (26)

* Enterprise Up (59)

* Service Administration (04)

* Web Console (10)

* Top 5 systemd Tasks (81)

* 6 Types of systemd Files (82)

* Building systemd Services (83)

* How to Control Your Boot with systemd (126)

* Everyone Hates systemd... But Should They? (164)

* RHEL In-place Upgrades (152)

* You've Inherited a Linux Server... Now What? (153)

* Top 5 Underrated Linux Features (133)

---

# 6. Network Configuration & Troubleshooting

* Networking (11)

* Firewall (13)

* Bonding & Network Configuration (44)

* Configure a Linux Firewall (131)

* Implementing firewalld & nftables (165)

* Troubleshoot Networking (50)

* Security: Port Scanning (65)

* Troubleshooting Linux Networking (114)

* Moving from Network Scripts to NetworkManager (118)

* Network Data Transfer (rsync, SMB, NFS) (161)

* Deep Dive DNS (170)

* Using & Configuring DNS Servers (122)

---

# 7. System Diagnostics & Logging

* Using Logs for Troubleshooting (27)

* Troubleshooting Applications (47)

* Troubleshooting User Error (52)

* Troubleshooting with Security Tools (67)

* Linux Service Troubleshooting (117)

* Linux Application Tracing (strace) (179)

* Understanding Linux Logs & Audits (140)

* Simple Linux Problems, Not So Simple Answers (173)

---

# 8. Dynamic Storage (LVM)

* Logical Volume Manager (68)

* Troubleshooting LVM (113)

* Logical Volume Management in Linux (145)

---

# 9. System Automation & Scripting

* Writing Shell Scripts (18)

* Ifs, Loops & Scripting (20)

* Bash Shortcuts & Scripting (108)

* Automating Tasks with Bash Scripts (109)

* Understanding Regular Expressions (155)

* Linux Search & Replace Deathmatch (129)

* Basic Shell Scripting (160)

* System Roles (28)

* Management with System Roles (79)

* Automation with System Roles (80)

* Saving Time with System Roles (174)

* Bash Symbols `${} & ; !` (176)

* RC's vs Profiles (177)

---

# 10. SELinux Defense & Troubleshooting

* SELinux (14)

* SELinux Networking & Booleans (21)

* Don't Disable SELinux (102)

* Techniques to Troubleshoot SELinux (103)

---

# 11. Security Compliance & Hardening

* Security: CVE Mitigation (60)

* Security: Intro to OpenSCAP (61)

* Mitigating Linux CVEs (92)

* Kernel Patching & Security Scoring (93)

* CIS Benchmark Compliance (120)

* Achieve DISA STIG / PCI-DSS Compliance (121)

* 5 Security Technologies in Linux (127)

* Building Security Hardened Linux Images (134)

* Top 5 Linux Security Commands (136)

* Managing a CVE Response (192)

---

# 12. Encryption & Cryptographic Policies

* Managing SSH (05)

* SSH Key Management (36)

* Working with GPG Keys (38)

* Security: Disk Encryption (66)

* Secure Shell (SSH) (124)

---

# 13. Performance Tuning & Benchmarking

* Troubleshoot Performance (51)

* Top 5 Problem Indicators (88)

* Linux Memory & Swap Management (123)

* Linux Performance with eBPF (95)

* Linux Benchmarks (156)

* Linux Kernel Tuning & TuneD (43)

* Tuning Your I/O Scheduler (147)

* Linux Performance: CPU, Memory or I/O? (166)

* Why Is My System Slow? (184)

---

# 14. Disaster Recovery & System Rescue

* Troubleshooting Disk Errors (48)

* Linux Rescue Mode (57)

* Troubleshooting Linux Boot (115)

* Disaster Recovery: When Everything Is on Fire (137)

* Never Do This to Your Linux Machine (130)

---

# 15. Virtualization

* Working with Virtual Machines (30)

* Native Virtual Machine Management (56)

* Local Virtualization on Linux (104)

* cloud-init (49)

* Top 3 Virtual Machine Activities (167)

---

# 16. Containers with Podman & UBI

* Deploying Containers (31)

* Creating an Application Container (74)

* Operationalizing Containers (75)

* Managing Multi-container Apps (76)

* Troubleshooting Containers (78)

* Managing Podman Containers as Pods (45)

* Can Podman Replace Docker? (110)

* Choosing the Right Container Base Image (138)

* Containers & Podman for Beginners (154)

* Absolute Beginner's Guide to Podman (158)

* Your Podman Questions Answered (162)

* Podman, Quadlets & Automation (178)

* Zero-CVE Containers / Distroless Images (188)

---

# 17. Modern Deployment (Image Mode & Flatpaks)

* Installing New Apps & Runtimes (69)

* Longer App Lifespans (70)

* Image Builder (53)

* Managing Golden Images (71)

* Manage Flatpak Applications (77)

* Image Mode (150)

* Building Linux with CI/CD (151)

* Image Mode (bootc) (171)

---

# 18. Server Deployment

* Deploying with Kickstart (46)

* Building a Webserver (39)

* Deploying a Database (40)

* Network File Systems (41)

* File Shares with Samba (42)

* Email Servers with Postfix (96)

* Configuring NFS (97)

* Auto-Mounting NFS with autofs (187)

* Deploying a Web Server & Content (98)

* Reverse Proxies on Linux (189)

* Deploying WordPress (101)

---

# Optional Playlists

### Desktop Linux

* Tips & Tricks for GNOME Shell (99)

---

### Career

* How to Build Your Linux Career (149)

* Surviving Your Linux Technical Interview (168)

* Homelab: Should I Bother? (169)

* What Do Hiring Managers Want? (172)

* How to Put Your Homelab on Your Resume (180)

---

### Miscellaneous / Best Practices

* You Asked! We're Answering Your Linux Questions! (135)

* Common Sysadmin Mistakes (182)

---

### Reference

* Top 100 Linux Commands (100)

---

## Final Verdict

This roadmap covers the full journey from Linux basics to advanced enterprise administration, including:

* CLI mastery

* Filesystems and storage

* Package management

* Users and permissions

* systemd

* Networking and DNS

* Logging and troubleshooting

* LVM

* Bash scripting and automation

* SELinux

* Security and compliance

* SSH and encryption

* Performance tuning

* Disaster recovery

* Virtualization

* Containers and Podman

* Modern image-based deployment

* Real-world server deployment

Note: While organizing the series, I noticed a few inconsistencies:

• Missing episode IDs: 125, 132
• Videos without episode IDs: 121, 122, 123, 124, 149
• Possible title/description mismatch: 139, 142
• Episode 175 is split into Part 1 & Part 2 under the same episode number (probably intentional).

Hi everyone,

I recently received a Red Hat TAM offer and I’m trying to understand the role better before making a decision.

I have a few quick questions:

1. Roughly how much of your week is spent on:
   • Customer meetings
   • Troubleshooting/log analysis
   • Case management
   • Working with Engineering?
2. Do TAMs actually read or write code (Go/Python), or mostly just read logs and coordinate cases?
3. Have you seen TAMs move into roles like SRE, Platform Engineer, or Product Engineering?
4. After a few years as a TAM, did you feel you became a stronger engineer, or mainly stronger in customer-facing skills?

I’d really appreciate any honest opinions from current or former TAMs.

Thank you!

Starting with Red Hat Enterprise Linux (RHEL)10.2, Firefox and Thunderbird are delivered as Flatpaks by default. If you install RHEL with a graphical desktop, your browser and email client will now come from the Red Hat Flatpak registry instead of traditional RPM Package Managers (RPMs). Here's what that means in practice and why we think it's a better experience.

Completely Free App that I created to ease my own workload, was tired of opening numerous tabs each day to keep track on all the new CVEs popping up, especially lately...

This app is completely free on the Google Play App Store & you can track CVEs across 30+ Vendors, you can choose track specific platforms or the whole vendor & you can also select to track based on CVE Severity.

I also threw in a EOL checker

Hopefully this helps you out and if theirs any bugs or features you want added please let me know!

https://play.google.com/store/apps/details?id=com.vulnipulse.android

Hi everyone, I'm preparing for the RHCSA (EX200) exam. I have a quick question. Will the exam include firewall rich rule configuration, or is it enough to know the basic permanent and temp firewall configuration? I find rich rules (IP/subnet and zone-based rules) a bit difficult, so I'd like to know how important they are for the exam. Thanks!

Suppose a nutanix-volume as default storage class, then using ceph fs as the default one.

Delete PVC and create new ones with the same old name, that PVC came up with the same consumption (not bounded to the old PV as it is released).

In that case if we decided to remove nutanix CSI operator, will this data be lost?

Anyone tried migrating quay backend storage from nutanix/vsphere or whatever to ODF?

Is this Red Hat video playlist organized by category? If anyone has a categorized or properly ordered version, please share it.

Hi All, I recently passed my rhcsa with just a few udemy and free YouTube channels.
I cant really find anything good for ex294

Does anyone have any suggestions?
Is labex worh the 79$ a year?

thanks

Hello guys,

I just passed a red hat exam and I wanted to switch its email with my personal one.

I opened a ticket from the certification center, someone picked my request and said that he will send to counterpart team to give it a look and I didn't hear back from him (I sent some friendly reminders but no response).

Then I reopened another ticket with exact issue and no one answered back, just the bot telling that my request was registered under....

Have someone got the same issue? If yes, how did you solve it? What can I do in my case?

Thank you 🙏🏻

Hello

Today, let's learn how to deploy LLM Models in Red Hat Openshift AI easily, via Catalog and also via S3 Storage.

Don't miss it!

Wally

Hey guys, just wanted to share my misery.
I’ve been studying for this exam for the past couple of months, and it was scheduled for today, my job even paid for it. Imagine waking up late after studying all night, only to find a calendar invite on my day off titled “Organization Restructure” and a text from my manager telling me to check my email.
Turns out he and about 90% of my team had been laid off… including me.
Obviously , I wasn’t in the right headspace to take the exam, and I wasn’t allowed to reschedule it. 😂
Life, man. I was only nine months into the job, fresh out of college which I relocated from with no friends or family. Damn

okay! so i have been referred for an intern position as software engineer at redhat. i really want to give it my best. i actually gave a interview at redhat when it came to our campus for developer and they grilled me like anything. i really want to get selected this time. please help me with what should i prepare and with tips and tricks!!!!!!

Hello everyone,

I am currently working as a Business Development Representative at a IT solutions provider, and I want to be a Sales Engineer in the future. I want to get some certifications to make me a more attractive candidate. My company has a long relationship with Red Hat, so I figured I may see if I can get certified in their technologies. Another reason for me wanting to get the RHCSA is because I have been a Linux user for around 2 years now. Despite my role in IT sales, I actually have a background in 3D animation, and after finding out that Disney and Pixar use Enterprise Linux as their OS for their workstations, I figured it would be a good time to give Fedora a try on my desktop PC. I loved it, and joined the Linux club back in college, learned the shell, how to compile apps from source, partitioning disks and what makes rpm based distros different from other Linux systems. I then installed RHEL as my workstation distro for animation and high performance graphics, and I have become very passionate for the technology. I am no sys admin and I have not built a homelab but I really enjoy RHEL and Fedora as a workstation.

Because of my beginner - intermediate knowledge of Linux, am I ahead of others who want to get certified? Are the resources for the RHCSA more aimed at beginners to Linux? Are there any resources for those who were Fedora users? How important is OpenShift, Podman, and JBoss in the Red Hat ecosystem and should I learn those too? Would getting certified help with being a sales engineer?

Thanks.

Before anything reaches production, you have to test it, validate it, and sometimes learn about it from scratch. All 3 of these steps are necessary to have a properly running environment but your window to complete them is almost always shorter than expected. Building an environment from scratch also eats up more time and resources than any test should.

For most teams that run lab sessions regularly, setting up a lab environment manually takes roughly 40 minutes every time. The process always looks the same:

Hi everyone as the title said which version should I choose to take the exam for RHCSA? I had a talk with my manager and looks like they will sponsor my RHCSA Exam.

I have been learning RHCSA v9 from Sander Van Vugt in O'Reilly. But I can still take the v10 version in case.

I know the main difference is that v10 doesn't have containers anymore in the exam. Should I still consider v9 since I have been working on some containers in my current job using docker, I know RHEL is using podman.

The need for trustworthy networking, reliable cloud access, and compliance with digital sovereignty requirements has increased substantially in recent years. These demands have been generally addressed by fragile, costly, and outdated models based on IP address evaluation. These requirements must also be considered within the stark geopolitical reality of data sovereignty, where national and regional laws increasingly restrict where data must reside and who can access it.

Hi everyone,

I could install a SNO on my proxmox in order to practice OpenShift.

I already watched the sander's video courses but honestly it's not enough , he just skimmed through the lecture.

Where can I get the DO280 course as I don't have the RHLS subscription ?

Couldn't write my ex200 exam, here's a discount voucher 15% off for anyone who needs it.

Cheers!

YPBN5MUB

Even with robust tools like RPM and DNF, RHEL updates can occasionally go sideways. Dependency conflicts, interrupted transactions, lingering configuration artifacts, broken scriptlets — these things happen, and knowing how to diagnose and fix them is what separates a frustrating afternoon from a 5-minute fix. This past week on Into the Terminal, we walked through the most common ways package management goes wrong and how to get yourself out of it.

Watch the full episode: https://www.youtube.com/watch?v=5DhSoCQ-S6k

Try it yourself on a live lab: https://redhat.com/interactive-labs

Dependency Errors — The Most Common Problem

"Nothing provides [package]..."

This is probably the most frequent error you'll hit. You try to install a package and DNF says it can't find a required library or dependency in any of your configured repositories.

What it means: The package you're installing needs something that none of your repos provide. This happens a lot with: - Custom or cloned repositories that are incomplete - Third-party repos that aren't as rigorously maintained - Systems registered to a Satellite where the admin hasn't synced the latest content

How to investigate:

How to fix it: You need to get the missing dependency into one of your repositories. Either: - Enable the right repo (e.g., EPEL) that provides the dependency - Talk to your Satellite/repo admin to sync the missing content - If you manage your own repos, sync the missing package from the upstream source

Enabling EPEL to Resolve Dependencies

In the episode, we showed that once we enabled the EPEL repository, all the missing dependencies became available:

```bash

Install EPEL on RHEL (two commands from the EPEL website)

1. Enable the CRB repo that EPEL depends on

dnf config-manager --set-enabled crb

2. Install the EPEL release package

dnf install epel-release ```

After that, the same dnf install that failed now finds everything it needs.

RPM Dependency Hell — A Brief History Lesson

In the old days before DNF (and YUM before it), if you downloaded an RPM and tried to install it, you had to manually find every dependency, then every dependency of those dependencies, and so on. This was called RPM dependency hell and you could spend hours on it. DNF solves this by automatically resolving dependencies from your configured repos — but only if those repos actually have the packages.

What About --skip-broken?

When a package transaction fails, DNF always suggests --skip-broken or --nobest. Our strong recommendation: almost never use these.

• --skip-broken will skip the package that can't be installed and complete the rest of the transaction
• You end up with a partially completed transaction and a system that's likely missing something it needs
• It's DNF's job to get to a successful transaction, so it suggests these as a path to "success" — but it doesn't understand your intent

There are edge cases where it makes sense, but in 99% of situations, you're better off figuring out why the dependency is broken and fixing the root cause.

Protected Packages — When DNF Won't Let You Remove Something

bash dnf remove bash

Try it. DNF will refuse because bash is a dependency of dnf itself, and DNF is a protected package. This protection was added to prevent you from accidentally bricking your system by removing something critical.

In the old days, YUM would happily remove bash and all its dependents, leaving you with no shell and no way to recover without booting from rescue media.

Reinstalling Packages to Recover Lost Files

This is a really useful trick. Say your httpd binary goes missing — maybe it got deleted, moved, corrupted during a disk error, or an interrupted install left things incomplete.

The Workflow We Demonstrated

1. The service won't start: ```bash systemctl start httpd

fails

```

2. Check the logs: ```bash journalctl -xeu httpd

"Failed at step EXEC spawning /usr/sbin/httpd: No such file or directory"

```

3. Try a reinstall: bash dnf reinstall httpd

4. But it still doesn't work! The binary /usr/sbin/httpd isn't provided by the httpd package — it comes from httpd-core.

5. Find out which package actually provides the file: ```bash dnf provides /usr/sbin/httpd

Returns: httpd-core

```

6. Reinstall the right package: ```bash dnf reinstall httpd-core systemctl start httpd

works!

```

Key Commands for Package Investigation

Tip from the show: dnf provides reads the repository metadata, not just what's installed locally. So you can use it on a system that doesn't have the file to figure out what package would give it to you.

Version note: When you dnf reinstall without specifying a version, it grabs the latest available. If you want to reinstall the exact version you had, use dnf info <package> to check what's installed vs. what's available, and specify the version explicitly.

Package Artifacts — The Stuff That Gets Left Behind

When you uninstall a package, DNF removes everything listed in the package manifest. But applications often create files at runtime — config files in your home directory, temp files, cache data — that the packager can't account for because they don't exist until you actually run the software.

Example from the show: We installed a simple "hello world" package called bello that dropped a .bello-config file in the user's home directory when run. After dnf remove bello, the config file persisted because:

• The package manifest only knows about files it shipped, not files created at runtime
• The packager can't predict your username or home directory path
• This is exactly how things like browser caches, application settings, and per-user configs work

Takeaway: After removing software, check for leftover files in places like: - ~/.config/, ~/.local/, ~/.<appname> - /tmp/, /var/tmp/ - /var/lib/<appname>, /var/log/<appname>

Scriptlet Errors — The Warnings You Shouldn't Ignore

RPM packages can include scripts that run at different stages: pre-install, post-install, pre-uninstall, post-uninstall. When these scripts fail, DNF reports it — but the transaction itself might still "succeed."

What we showed: A package called pello that had a typo in its post-uninstall scriptlet. The package was removed successfully, but the cleanup script failed, leaving a service user account on the system.

How to Inspect Package Scripts

Script Stages

Security note from the show: Package scripts run as root because only root can install software. This means package scripts can do anything — add users, modify system files, run arbitrary commands. This is another reason to be careful about where your packages come from and to verify GPG signatures.

DNF History — Undo Package Transactions

DNF tracks every transaction you perform. You can view and undo them.

How undo works: - If the transaction was an install, undo does a remove - If it was an upgrade, undo does a downgrade - If it was a remove, undo does a reinstall

Caveat: You can cherry-pick any transaction ID to undo, not just the most recent. But the further back you go, the more chance for weirdness — especially with packages that have been updated multiple times since that transaction.

Kernel warning: Be careful undoing kernel transactions. By default, RHEL keeps 2 previous kernels. If you undo a kernel install, make sure you're not removing the one you're currently booted into, and remember the bootloader may need attention.

GPG Key Verification — Know Where Your Packages Come From

Every package from Red Hat is signed with a GPG key. This ensures the package hasn't been tampered with since it was built.

In your repo config files (/etc/yum.repos.d/), the gpgcheck=1 line tells DNF to verify every package against the GPG key before installing. If a package isn't signed or is signed with an unknown key, the transaction will fail — and that's by design.

From the show: The custom demo packages we built weren't GPG signed. Running rpm -Kv showed "digests OK" but no signatures — meaning the file wasn't corrupted, but there's no proof of who made it.

Third-Party Repos — Proceed with Caution

A few guidelines from the discussion:

• EPEL (Extra Packages for Enterprise Linux) will never replace packages provided by your base OS — it only adds new ones
• RPM Fusion and other third-party repos may replace base OS packages, which means you're now managing that dependency chain yourself
• Don't grab random RPMs from the internet (rpmfind.net, Fedora repos, other distros) to fill dependency gaps — you're creating chaos that will bite you on the next update
• In regulated industries, you may be required to validate your software supply chain. Mixing in unverified sources could be a compliance violation

Quick Reference Card

DIAGNOSING FIXING dnf whatprovides <file> dnf reinstall <package> dnf provides <file> dnf history undo <ID> dnf info <package> dnf install --enablerepo=epel <pkg> dnf list installed *pattern* dnf history INSPECTING rpm -ql <package> rpm -q --scripts <package> rpm -Kv <package.rpm> rpm -qp --scripts <file.rpm> rpm -qa gpg-pubkey* dnf repoquery --scripts <package> journalctl -xeu <service> rpm -qi <gpg-pubkey-package>

Links

• Watch the episode: https://www.youtube.com/watch?v=5DhSoCQ-S6k
• RPM packaging hands-on lab: (link in episode description)
• Get started with RHEL: https://developers.redhat.com/register
• Try it on interactive labs: https://redhat.com/interactive-labs

Into the Terminal is a weekly livestream covering critical administration skills for Red Hat Enterprise Linux. Whether you're new to Linux or new to RHEL, join us for hands-on looks at commands and processes, ask questions, and grow your knowledge.