Document ECE RHEL 10 host prep by gigerdo · Pull Request #8239 · elastic/docs-content · GitHub
Skip to content

Document ECE RHEL 10 host prep - #8239

Open
gigerdo wants to merge 2 commits into
mainfrom
ece-rhel10-host-docs
Open

gigerdo wants to merge 2 commits into
mainfrom
ece-rhel10-host-docs

Conversation

@gigerdo

@gigerdo gigerdo commented Sep 8, 2026

Copy link
Copy Markdown
Member

Summary

ECE 4.2 already supports RHEL 10 + Podman 5 on the support matrix, but the host-prep docs still listed only RHEL 8/9. Following the RHEL 9 steps on RHEL 10 fails: containernetworking-plugins is not available, and ECE keeps Podman's default Netavark backend instead of switching to CNI.

Updates:

Host-prep differences are based on the ECE Ansible role RHEL 10 path (tasks/base/RedHat-10).

Generative AI disclosure

  1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?
  • Yes
  • No

Tool(s) and model(s) used: Cursor (Grok)

(AI-authored via Cursor 🤖)

The support matrix already lists RHEL 10 + Podman 5, but the host-prep
docs still described only RHEL 8/9 and the RHEL 9 CNI path, which fails
on RHEL 10.

Co-authored-by: Cursor <cursoragent@cursor.com>
@gigerdo gigerdo added the ece Elastic Cloud Enterprise label Sep 8, 2026
@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

Elastic Docs Style Checker (Vale)

Summary: 10 warnings found

⚠️ Warnings (10): Fix when the suggestion improves clarity or correctness.
File Line Rule Message
deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md 51 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md 135 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md 150 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md 153 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/configure-host-rhel.md 431 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/ece-ipv6-aws-setup.md 627 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/migrate-ece-to-podman-hosts.md 81 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/migrate-ece-to-podman-hosts.md 166 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/migrate-ece-to-podman-hosts.md 181 Elastic.Spelling 'Netavark' is a possible misspelling.
deploy-manage/deploy/cloud-enterprise/migrate-ece-to-podman-hosts.md 184 Elastic.Spelling 'Netavark' is a possible misspelling.

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

Leave the existing edit-in-place storage.conf step as it already was.

Co-authored-by: Cursor <cursoragent@cursor.com>
@gigerdo
gigerdo marked this pull request as ready for review September 8, 2026 15:38
@gigerdo
gigerdo requested a review from a team as a code owner September 8, 2026 15:38
@gigerdo
gigerdo requested review from eedugon and erikjenks September 8, 2026 15:38

@eedugon eedugon left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for applying these changes @gigerdo !

Shared some comments for your consideration.

* Follow your internal guidelines to create a RHEL 8 (the version must be >= 8.5), RHEL 9, Rocky Linux 8, or Rocky Linux 9 server or VM in your environment.
* Follow your internal guidelines to create a RHEL 8 (the version must be >= 8.5), RHEL 9, RHEL 10, Rocky Linux 8, or Rocky Linux 9 server or VM in your environment.

{applies_to}`ece: ga 4.2` RHEL 10 is supported with Podman 5 only. Do not install Podman 4 on RHEL 10, and do not follow the RHEL 9 CNI networking steps on RHEL 10.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm proposing a small change on this line that you are adding. Considering how we have evolved from RHEL 8 to RHEL 10 and that we still support 2 major versions of Podman and 2 network backends, I think it's a good time to introduce a short summary that will feel visually simple, not only for RHEL 10.

Suggested change
{applies_to}`ece: ga 4.2` RHEL 10 is supported with Podman 5 only. Do not install Podman 4 on RHEL 10, and do not follow the RHEL 9 CNI networking steps on RHEL 10.
The following Podman versions and network backends are supported:
* RHEL 8 and Rocky Linux 8: Podman 4 with CNI
* RHEL 9: Podman 4 or Podman 5 with CNI
* Rocky Linux 9: Podman 5 with CNI
* {applies_to}`ece: ga 4.2` RHEL 10: Podman 5 with Netavark

The previous, together with the important note where we tell the users to ensure they use a supported combination of OS and Podman based on the support matrix should be enough here.

sudo dnf -y install containernetworking-plugins
```

Do not install `containernetworking-plugins` on RHEL 10. That package is not available, and ECE on RHEL 10 uses Podman's default Netavark backend instead of CNI.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the package is not available on RHEL 10, and if the note says explicitly that it's only for RHEL 9 and Rocky Linux 9 (I suspect it's probably needed for RHEL 8 but that's a different story), then I'd say this sentence doesn't add much value here. I'd suggest to remove it.

Suggested change
Do not install `containernetworking-plugins` on RHEL 10. That package is not available, and ECE on RHEL 10 uses Podman's default Netavark backend instead of CNI.

Later in the network backend configuration we tell the readers to keep the default backend.

Comment on lines 429 to +431
On RHEL 9 and Rocky Linux 9, merge this setting with the existing `network_backend="cni"` configuration rather than creating a duplicate `[network]` section.

{applies_to}`ece: ga 4.2` On RHEL 10, do not add `network_backend`. Leave that setting unset so Podman continues to use Netavark.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we can remove these two paragraphs. network_backend shouldn't be mentioned here in the dual-stack section.

Suggested change
On RHEL 9 and Rocky Linux 9, merge this setting with the existing `network_backend="cni"` configuration rather than creating a duplicate `[network]` section.
{applies_to}`ece: ga 4.2` On RHEL 10, do not add `network_backend`. Leave that setting unset so Podman continues to use Netavark.

The only message for any OS (RHEL 8,9 or 10) would be to not create a duplicate network section, and I'd say that's already covered in the step description.

Mentioning here again network_backend and then mentioning the RHEL 10 difference makes the reading flow unexpected in the dual-stack section.

```

Then open `/etc/containers/containers.conf` and, in the `[network]` section, set `default_network`. If the file or section does not exist yet, create it. On RHEL 9 and Rocky Linux 9, merge this setting with the existing `network_backend="cni"` configuration rather than creating a duplicate `[network]` section:
Then open `/etc/containers/containers.conf` and, in the `[network]` section, set `default_network`. If the file or section does not exist yet, create it. On RHEL 9 and Rocky Linux 9, merge this setting with the existing `network_backend="cni"` configuration rather than creating a duplicate `[network]` section. {applies_to}`ece: ga 4.2` On RHEL 10, do not add `network_backend`. Leave that setting unset so Podman continues to use Netavark:

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Then open `/etc/containers/containers.conf` and, in the `[network]` section, set `default_network`. If the file or section does not exist yet, create it. On RHEL 9 and Rocky Linux 9, merge this setting with the existing `network_backend="cni"` configuration rather than creating a duplicate `[network]` section. {applies_to}`ece: ga 4.2` On RHEL 10, do not add `network_backend`. Leave that setting unset so Podman continues to use Netavark:
Then open `/etc/containers/containers.conf` and, in the `[network]` section, set `default_network`. If the file or section does not exist yet, create it. Make sure not to create a duplicate `[network]` section if one already exists.

As before, I think the best solution is to not talk about the network backend in this specific doc, as it's not necessary.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ideally we should probably include a bullet for RHEL 8 / Rocky Linux 8.

Originally this step said for RHEL 9 only because on RHEL 9 we had to update the default backend to CNI, while in RHEL 8 I think the default backend is CNI already.

Now that we are converting the step to "configure network backend" and mentioning RHEL 9 and RHEL 10 in different bullets I'd say it's worthy a bullet for RHEL 8 saying something like:

For RHEL 8, keep the default CNI backend.

Or even...

For RHEL 8, ensure that Podman uses the CNI network backend. Although CNI is the default, configure network_backend="cni" explicitly to avoid depending on the existing host configuration.

That would be aligned with:

https://github.com/elastic/ansible-elastic-cloud-enterprise/blob/master/tasks/base/RedHat-8/configure_cni_network.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ece Elastic Cloud Enterprise

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants