Sign in
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

CIS Hardened Image Level 1 on Red Hat Enterprise Linux 8

Center for Internet Security | 3.0.0.22

Linux/Unix, Red Hat Enterprise Linux 8 - 64-bit Amazon Machine Image (AMI)

Reviews from AWS customer

56 AWS reviews

External reviews

246 reviews
from and

External reviews are not included in the AWS star rating for the product.


    reviewer2197320

The Podman feature is most valuable as it allows you to recreate images

  • May 28, 2023
  • Review from a verified AWS customer

What is our primary use case?

There are multiple use cases, and I am mostly focused on information security. Before we promote an ACS policy to production, we should be able to test that build and see how that policy behaves for that build. We use Podman to build some test images and get them to our development box. Then we use commands that we scan against those images. That has been one of the major use cases. 

In the future, we'll move our automation program from an on-premises Windows server to a Linux server. Over a period of time, we want to move those applications to the cloud and OpenShift. Currently, we have many legacy applications that are still being run on Windows Server, and we use the title job scheduler for that. Once we mature and gain more confidence, we want to containerize those applications and move them to OpenShift and Linux.

What is most valuable?

Red Hat Enterprise Linux's most valuable features are the Podman and a lot of packages that come inbuilt as part of the regular package. Podman gives you the opportunity to build those images. Since it's a public registry, you cannot pull those images from a docker, and proxy blocks that. If we know how to recreate that scenario, we use Podman to recreate that image.

What needs improvement?

Red Hat Enterprise Linux should provide more training because many people are not very familiar with Linux's user interface. If it is made very similar to Windows and people can relate to it, they would be more comfortable.

For how long have I used the solution?

I have been using Red Hat Enterprise Linux for seven to eight years.

What do I think about the stability of the solution?

Red Hat Enterprise Linux is a stable solution.

How are customer service and support?

I have experience interacting with Red Hat support for ACS. The initial level of support is very minimal. They try to collect all the data, then go to developers or technical people, which usually takes time. So we don't get an immediate response. Hence, there is scope for improvement in Red Hat Enterprise Linux's customer support.

Raising a ticket and having somebody look into it takes time. I rate raising a ticket and addressing it a six to seven out of ten. However, we interact with a responsive relationship manager, who escalates and gets issues fixed. I rate this relationship manager an eight out of ten.

How would you rate customer service and support?

Neutral

What was our ROI?

Since we have the capability to test vulnerable images, we know much in advance what their impact will be. We can test ACS policies against those vulnerable images. That gives us early visibility instead of deploying that application and finding what is happening there. Using Red Hat Enterprise Linux and all associated components gives us that visibility into vulnerable images, and we can set policies based on whatever we see. So in terms of business impact, we avoid many vulnerabilities that get into the production.

What other advice do I have?

We run some applications on the cloud, but they are not business-critical applications. We run all business-critical applications on-premises. We are not dependent on the cloud for business-critical applications. We are not locked with the vendor.

We use Qualys to scan the underlying node. We expect any critical vulnerabilities to be patched as early as possible. We have an enterprise policy wherein any business-critical vulnerabilities seen on business-critical applications or nodes need to be fixed within 30 days. If some running application is exposed to the internet, we want that to be prioritized. If vendors can prioritize a 30-day life cycle for critical vulnerabilities, that would really help many other organizations.

Red Hat Enterprise Linux is the only option we are currently looking at. We don't want to go with Windows. We already have this ecosystem where we use OpenShift, and it's already integrated with ACS. So we would not like to go with any other different OS. Red Hat Enterprise Linux will integrate easily with the entire ecosystem.

Overall, I rate Red Hat Enterprise Linux an eight out of ten.

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)


    Russell Burgos

We can dynamically expand volumes and easily scale, and the solution offers excellent support

  • May 28, 2023
  • Review from a verified AWS customer

What is our primary use case?

We are currently using Red Hat Enterprise Linux's versions 6, 7, and 8. We run the OS both on-prem and in the cloud.

We use Red Hat Enterprise Linux for web applications, containers, Kubernetes, and simple scripting servers. The scripting servers are used to run scripts on run drops and so on. However, the biggest use cases are containers and web app workloads.

The cloud providers are AWS and Alibaba.

How has it helped my organization?

Red Hat helps our organization avoid cloud vendor lock-in because we can run Kubernetes and a few different workloads directly on Red Hat across different cloud providers. Since Red Hat is an operating system, we can migrate our workloads to any cloud provider that supports Red Hat.

Avoiding vendor lock-in and being able to move workflows between cloud providers has saved us hundreds of thousands of dollars per year.

Red Hat Enterprise Linux is easy to recover, especially from a backup. I believe this is because of its resilience. If I use an instance, I can go to my backups and restore it without much trouble. I was going to compare it to Windows for a moment, where there might be some additional steps required to clean things up after recovery. However, I haven't had many issues where I needed to do any cleanup afterward.

It is easy to move workloads between the cloud and our data center using Red Hat Enterprise Linux. The ease of migration depends on the cloud provider and what they allow us to do. However, for the most part, replication-based migration between cloud providers or on-premises works well. 

What is most valuable?

Linux is good for hardening the operating system. Logical volumes allow us to dynamically expand volumes, which is valuable from an operational perspective. This is especially true in cloud environments, where we pay for every kilobyte of storage. By using logical volumes, we can expand the disk on demand without downtime, which can help us keep costs down.

What needs improvement?

The price has room for improvement.

For how long have I used the solution?

I have been using Red Hat Enterprise Linux for three years, but I have known about the OS since version four.

What do I think about the stability of the solution?

Red Hat Enterprise Linux is definitely resilient and easy to recover, especially when compared to Windows. I enjoyed working with Red Hat Enterprise Linux more than Microsoft Windows, especially because of its resilience.

What do I think about the scalability of the solution?

Red Hat Enterprise Linux's scalability is easy to manage. We can simply spin up more instances as needed, and then turn them off when we no longer need them. This means that Red Hat Enterprise Linux's scalability is not as much of an issue with the cloud provider.

We have around 2,500 instances of Red Hat Enterprise Linux in our environment.

How are customer service and support?

Red Hat support is generally good, but it can sometimes take a little longer than we would like to get a response, especially when the issue is through a web-based chat.

How would you rate customer service and support?

Positive

What's my experience with pricing, setup cost, and licensing?

The on-premises deployments are subscription based, and the cloud instances are from the providers which are AWS and Alibaba.

We can always ask for Red Hat Enterprise Linux to be less expensive but when we compare it to other options, there are savings in the long run.

Which other solutions did I evaluate?

Red Hat Enterprise Linux was our first choice because of its enterprise support. That was the key factor. We do also run other Linux distributions, but Red Hat Enterprise Linux is our primary choice because of the enterprise support. 

The big difference between Red Hat Enterprise Linux and other Linux-based operating systems is the support. There isn't much difference other than the syntax, where the command is "at, get" versus Red Hat using YUM or DNF for installation. So outside of that, the support is the main difference.

What other advice do I have?

I give Red Hat Enterprise Linux a nine out of ten. No solution is perfect, but Red Hat Enterprise Linux is very close.

Our engineering team probably used the image-building tool. I am on the operations side, so I do not see that part of the process. I take the images that are already built and deploy them.

I think it's just a workflow issue. We need to improve our own workflows to be able to manage them better. Red Hat support is already good when we encounter something we're unfamiliar with. So, we need to get Enterprise CoreOS from Red Hat for those cases. I think as we encounter more of our own workloads, we'll need to improve our workflows even further.

Which deployment model are you using for this solution?

On-premises


    reviewer2197305

Fair licensing cost, highly scalable, and helpful for standardization and compliance

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

We use it to host applications, services, and backend databases. We aren't using it on the cloud. Most of my customers are DoD or some type of government agency. If it's not classified, it's siloed in some way. We don't get to use a lot of the functionality that makes Red Hat cool. It's all disconnected.

In terms of version, currently, mostly everything is on versions 7 and 8. I've started pulling up some of the things from version 9, but that won't go into production for a while.

How has it helped my organization?

We use it because it's stable. That's half the reason, and the other half is because the DoD standardizes on it because it has a support contract, so even though we're forced to use it, it's a very good product, and it's on-prem. We probably would use it anyway.

We needed to host applications, services, and backend databases. We have a lot of Java-based applications, and we wanted something that we could deploy in different places around the world and that everybody standardized. Windows didn't really work for us on that. Most of the time, we're not connected to the Internet. We find that Red Hat or Linux in general works a little bit better for us than macOS or Windows.

It's also across the board a little bit cheaper for what we're using it for. That's a benefit we're getting from it.

We get our compliance from DISA, which is the defense information service agency. They put out security technical implementation guides. There are specific ones for Red Hat Enterprise Linux 7 and 8. The reason we're not using Red Hat Enterprise Linux 9 is that there isn't one for it yet. In terms of how we harden the operating system we're using, it's whatever they tell us to do and then whatever extra we want to do. It's as good as any other Linux other than the fact that it's supported by the DoD. For example, SELinux helps us secure across the board with contacts across different directories and things like that. They tell us how standardized the SD-WAN layout should be. We're able to go a little bit deeper into that. Red Hat uses Podman, which has SELinux, and which by default helps us a lot. 

What is most valuable?

We run Satellite on a lot of these, so having a central repository that we can use for patch management and remote execution is huge. That's something that is very difficult in a Windows environment. We're very compliance driven, so to have that built into Red Hat is easy. We don't need an agent or anything like that to get a lot of work done, so Satellite and centralized automation are the most valuable features for us. We're dabbling into Ansible but not as much as we should be.

It's obviously a security-focused operating system versus some of the other operating systems that lay you down in the terminal as root. In Red Hat Enterprise Linux 9, you can't even root. It's disabled by default now. Overall, they are definitely more security conscious, and that's also because of their primary customer space.

For how long have I used the solution?

I've been using it for ten years or so. I've been using the solution since version 6. 

What do I think about the stability of the solution?

The stability of what we have deployed is good. The only time it crashes is if we do something or we try to configure a control that one of the engineers doesn't fully understand, which then breaks it. A lot of it's just like us breaking it ourselves or a customer asking for something that wasn't initially planned. Just pure deployment is good.

What do I think about the scalability of the solution?

Its scalability is good. It's what they excel at. If we have 10 machines or 100 machines, they have the platforms to scale that up.

How are customer service and support?

Overall, the customer support is good. It's better than Microsoft support. They are above and beyond that. They are better than others in terms of response time, getting somebody who knows what they're talking about, and not spinning their wheel. Usually, within the first response or two, people figure out what we're trying to troubleshoot here. We're not going from one queue to another queue or anything like that.

I'd rate them a ten out of ten. I've never had an issue with it. 

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We had CentOS systems. When they changed upstream, we had to pivot some systems. We pivot some systems to Oracle Enterprise Linux, but then those eventually got transitioned to Red Hat as well.

The main reason for the switch to Red Hat was for the government customer and having a support contract. You can do Oracle Enterprise Linux without a support contract, but if you're going to buy one, you might as well get Red Hat at that point for the added benefits.

We use Kali for a couple of other use cases, and we probably won't replace it with Red Hat.

We've used a lot of flavors of Linux. One thing that sticks out for me, even in just the home lab environment or deploying at work, is that if there's some backward thing that we weren't planning on going into, if I look for a solution, nine out of ten times, I'm going to find an article on Red Hat's website where somebody has either a verified solution or somebody is talking about it and there are comments that are relevant. I hate going on ServerStack, Ubuntu Stack, or something like that, where somebody has the exact problem that you have, but there are no comments and no answers. I find that to be less true with the Red Hat platform.

How was the initial setup?

The initial setup is pretty straightforward but can be tedious at times because of the compliance things that we have to implement. 

I just sat in on the training or the demo for the deployment platform, and we're already planning on setting up the Ansible automation platform where we also want to look into setting up this deployment tool because we do a lot of ISOs. We do a lot of kickstarts. We don't do any of the cloud tenants. We probably will switch to using the on-premise disconnected deployment capability because we can preconfigure everything and then run Ansible after the fact to get it all compliant.

What about the implementation team?

We're the integrators or implementors of the solution.

What was our ROI?

We're forced to buy the licensing, but it's also good. I and a couple of other staff members are all Red Hat certified engineers, and then we all have our own specialties, so we don't call them a lot, but when we submit tickets, it's definitely worth it.

The ROI is mainly in terms of needing to recover from any system downtime. If we don't have an engineer on a computer doing a certain piece of research, then we're wasting money or just not generating a product, so to have the support that we can call and then reach out to us in enough turnaround time holds value for us.

What's my experience with pricing, setup cost, and licensing?

The pricing is fair. The workstation licensing cost is fair. If you're running enterprise-level deployments, depending on what you're using, the volume licensing is good. I personally am worried that if they get so successful, they can increase the price, and then it won't matter because we'll be stuck on them. Hopefully, their open source mentality keeps that from happening. Where it's right now is good.

What other advice do I have?

In terms of the portability of applications and containers built on Red Hat Enterprise Linux, I don't know how much that applies to us. In our case, someone develops an application in a Podman container, and we ingest that and run it, but we're not doing much more than that. So, all of the Java-based applications that we run, are run within a couple of different containers, and that's about it.

I personally use Red Hat Insights in my home lab. We can't dial out for that for a lot of customer-based work, but I personally use it. It hasn't helped avoid any emergencies because it's super low risk for what I'm using it for, but I can see the benefit of it. In a more enterprise setup, such as health care where I used to work, things probably would have been interconnected, and we would have been using Insights, but we're not using it currently.

Overall, I'd rate Red Hat Enterprise Linux a 10 out of 10. 

Which deployment model are you using for this solution?

On-premises


    reviewer2197302

Improves uptime, and it's very stable, scalable, and secure

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

We are running our critical applications on it. We are using versions 7, 8, and 9, and we are running our workload on private clouds. We are currently testing Azure, but we don't have the production workload on it. 

How has it helped my organization?

By implementing Red Hat Enterprise Linux, we wanted to solve some of the reboot problems of Windows. Every patch on Windows affected our applications because the system had to be rebooted. Red Hat Enterprise Linux has improved the uptime of the applications.

For our company, Red Hat Enterprise Linux is a very secure operating system. It's much better than the Windows system. It's great for us. SELinux is a great tool to protect us from attackers. SELinux is the most important for us.

We have been Agile for two years, and Red Hat Enterprise Linux has been a part of it.

What is most valuable?

Its stability is most valuable. I'm a technical guy, and I love Linux. For me, it's the best platform.

What needs improvement?

Writing SELinux policies is sometimes very hard if you want to deploy a new application on it.

For how long have I used the solution?

I started working in 2006, and my first job was administering the Red Hat Enterprise Linux system. 

What do I think about the stability of the solution?

It's very stable.

What do I think about the scalability of the solution?

Its scalability is extremely good. You can scale it everywhere if you want. We have 600 to 700 Red Hat Enterprise Linux systems. 

How are customer service and support?

The support from Red Hat is very good. The response time is rather low. We have premium support, and we sometimes get an answer to our questions in one hour. If you explain to the support guy your problem, you will get the current answer. Overall, I'd rate them a nine out of ten because you sometimes get someone who doesn't understand your question.

I don't know about the knowledge base of Red Hat Enterprise Linux, but I know the knowledge base of OpenShift is very good now. In the past, it was updated in one single version, whereas now, the change is there for each major and minor version. There is separate documentation, and that's much better than in the past.

How would you rate customer service and support?

Positive

How was the initial setup?

It's getting better and better. In the past, versions 3 and 4 were very complex, but now, it's very easy to do it. We are now creating images and deploying it on our VMware farms, and it's much easier than making a PXE boot from our bare metal systems. 

Which other solutions did I evaluate?

We evaluated other solutions. We went for Red Hat Enterprise Linux because of better handling. It might also have been cheaper, but I'm not sure. My company decided to go with Red Hat.

What other advice do I have?

As an operating system, I would rate Red Hat Enterprise Linux a ten out of ten.


    reviewer2197299

Robust, provides good control, and has great a knowledge base and support

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

As a whole, our organization is using it on Bare Metal on-prem and the private cloud, and then also in more than one public cloud environment. We probably have all three cloud providers. We definitely have Azure and Google Cloud. The environment that I support has about 40 apps in one cloud or another, but the organization as a whole definitely has hundreds of apps in Google Cloud or Azure. They're predominantly in Azure. The Google Cloud adoption is pretty recent compared to our Azure utilization.

I'm supporting a capital markets environment. A substantial portion of my environment is still Bare Metal at Colos. I'm sure on the application side, there's plenty of JBoss in our environment. There have been recent conversations around OpenShift on-prem that I'm working on, and our enterprise cloud teams are looking at or are using ARO in the cloud. In the next year, our use of the Ansible Platform will go from zero to full throttle as quickly as we can make that happen. We found the event-driven Ansible very interesting.

How has it helped my organization?

They've helped us work on employing technologies suitable to our various use cases. We're pretty slow adapters of containers, but that seems to be changing fairly quickly at the moment. That certainly gives us portability for workloads. They helped us with some aspects there, and they've helped us with a lot of automation conversation at the summit this week as well around Ansible.

When it comes to resilience in terms of disaster recovery, the operating system is robust. If it fails, it's probably an app issue. The majority of work in any of our DR scenarios is dependent on whether we have got cold standby or hot standby. If it's hot, the data replication is already there, and things are already spinning. Maybe it's on or you turn it on. Other times, you may have to start up something. Nearly all of those things are application architecture decisions as opposed to dependencies or things from an OS perspective, but in terms of the ecosystem for managing our Linux environment, using Satellite and so on has been very good.

What is most valuable?

I prefer it to Windows because of the level of configuration, level of control, and the ability to see the performance of processes on a given system. I prefer the control over logging and the ability that logging gives you to investigate a problem.

Its community is also valuable. It's open source, and Red Hat-supported streams are also valuable.

The level of communication we've got with them is fantastic. 

What needs improvement?

The integration with the apps and support could be better.

A colleague was talking about having some recommendations for the Ansible Cloud on the console and having some way of identifying your dev or prod path and whether you've got read or execute access to a playbook. There were different things like that, and they made a lot of sense, especially if you're in a dev or prod environment because mistakenly running something in prod would be a huge issue. There could be something that Red Hat configures, or there could be a text field where organizations can add labels to a part of the console to distinguish that for themselves. Those would be things that would be useful. I can't imagine it's hard to implement but being able to know which environment you're in matters a ton.

For how long have I used the solution?

As a part of my professional career, I've been using it since 2004. I joined my current organization in 2018. It has been almost five years since I've been working with Red Hat Enterprise Linux in the security environment of our organization.

What do I think about the stability of the solution?

It's stable. We rarely have our systems crashing.

What do I think about the scalability of the solution?

It's pretty easy and getting easier. It's not an OS issue. In terms of scalability, even while running our trading apps, we don't run into limitations related to the OS. Our limitations are more hardware-defined, and even then, we're running Red Hat Enterprise Linux on servers with eighty cores and almost a terabyte of RAM, and the OS doesn't have any issues.

How are customer service and support?

Their knowledge base is great. There are lots of times when we don't even have to open a support case because we find what we're looking for.

I've spent a lot of time with the Red Hat account team over the past nine months. They've helped me understand products. They've helped develop the skills of my team. They've helped us with technology conversations with other parts of my organization. They've been hugely supportive of the technology conversation we're having with other parts of the bank.

They've been over and above the expectations in most cases. I'd rate them a ten out of ten. I don't know if it could be better. It has been extremely good. They've been extremely helpful in reaching out and figuring out what they can contribute. The account manager that they have working with us is a former colleague, so it's a really smart decision because we have a very good relationship with the guy. He knows our environment. It has been extremely positive.

It's a growing relationship with Red Hat. We have been using Red Hat Enterprise Linux for a very long time, and I don't know if we can even compare it to the other OS vendors, but having the account team working with us with that level of experience with our environment helps them work with us. It helps us accomplish what we're trying to do. It has been a very good partnership.

How would you rate customer service and support?

Positive

What's my experience with pricing, setup cost, and licensing?

We get our licenses directly through Red Hat.

What other advice do I have?

We haven't used the image builder tool or insights, but it's something that we might explore in the coming months. 

I'd rate it a ten out of ten. It's very customizable and very supportive. It never seems to crash. There could be better integration with apps, but from an OS perspective, it's excellent.


    reviewer2197296

Great support, predictable, and does what I need

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

It's pretty much everything that we have. We don't have a lot of Windows in our environment.

I've been using it a lot for several years. In the past, I ran a small web hosting company, and we used it for web servers, mail servers, FTP servers, and other things like that. After that, I was in casinos, and those were mostly Windows, but here, it's a lot of Linux, and it's all Red Hat. In my team, we just build it and make sure it keeps running, and the application teams do what they do.

We use Red Hat Enterprise Linux on-premises. We support the in-house server-based things, and we have another team that supports all the cloud-based things, so I don't have a lot of visibility into the cloud.

In terms of the version, we're trying to phase out version 7. We just brought in version 8. Our Satellite is a little bit behind. By the time that gets caught up, our version 8 should be a little bit more solid, and then they can start testing version 9.

How has it helped my organization?

I haven't been on this team for a very long time. I've only been on this team for a couple of years, and it was already in place. In the past, we used it to get the stability and the support that we needed because, for a web hosting company, it was either IIS or Apache, and that was back in the NT days, so obviously, we went with Apache. I find it a better server operating system, so that's what we use.

I don't use it in a hybrid cloud environment, but my organization does. I like its built-in security features when it comes to simplifying risk reduction and maintaining compliance. All the firewall features and iptables have been fine for me. SELinux has been great for me. With the hosting that we used to do, SELinux was great because we had to share files with customers. It made it easy to make sure that files stayed secure and only changed by whoever needed to touch them.

What is most valuable?

I just use it. I'm strictly into command lines, and they just do what I need them to do, and I know how to use them. Everything is just stable and works well. 

What needs improvement?

It works fine for me, and it does what I need already. It does everything I needed to do, and it has for so many years. The only change that stumped me was the networking in version 9. I preferred the ifconfig way of doing things, but the system changes of it have grown on me. I preferred the ifconfig way because of familiarity. I knew how to manipulate things. I knew how to get things running and stay running and script ways to keep them running and notify me if the thing went wrong. My only gripe has been the networking change and the inability to use ifconfig anymore. I talked to some people, and they did point out that it's good if you're moving from one environment to another environment—like a laptop, but for servers, I don't need that. I just put my config file where I can find it and make the changes that I need.

For how long have I used the solution?

I've been in this organization for a couple of years, but I've been using Red Hat since version 3. It has been a long time.

What do I think about the stability of the solution?

The stability has been pretty great. There are some things that we're still working on, but once we solve them, I know they'll remain solved.

What do I think about the scalability of the solution?

Scalability has been great too because when we need more, we just add more, and we're good.

How are customer service and support?

They've been great. I've worked with them a lot lately. They've been a ten out of ten. They're always there for us, and they answer us quickly.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I've personally used everything from Slackware to OpenBSD, FreeBSD, Red Hat, Fedora, and Ubuntu. I've used everything.

I like the way that everything is predictable with Red Hat Enterprise Linux. You know what you're getting. You know where everything is, and you know that you can find support if you need it. When we're upgrading or if we're adding something, I always know where I could find what I need to find.

What was our ROI?

I would think that we have seen an ROI. Our licensing has been very fair, but I don't have a lot of visibility into that.

What's my experience with pricing, setup cost, and licensing?

I like my developer account. The free sixteen licenses that they give with the developer account are great because that gives me the ability to keep using it at home instead of trying CentOS or something like that. Once CentOS went away or changed, I had the ability to just make a developer account and spin up my entire lab in Red Hat, which made it better anyway because that's what we use at work, and now I have a one-to-one instead of a clone-to-one.

What other advice do I have?

I've been trying to find a reason to use containers, but I just can't. I know our company uses it a lot, and they love it. They love the ability to shift things around and bring down servers when they want, and all of that, but for my own use cases, I haven't had a reason.

Overall, I'd rate Red Hat Enterprise Linux a ten out of ten. Everything is great.


    reviewer2197293

The solution's enterprise-level security provides peace of mind, ensures compliance, and allows us to focus on other tasks

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

One of our use cases is for our in-house applications that the development team builds. We also use it for typical tasks like running Jenkins, GitLab, and other development tools to make them accessible for the developers who write code and do software development.

What is most valuable?

One of Red Hat Enterprise Linux’s valuable features is its enterprise-level security. We are guaranteed that it's secure, and that's important for us because we need to comply with security regulations. Security always remains a top priority.

We just run Red Hat Enterprise Linux’s built-in security features day in and day out. We know it's secure, and then we just move on to other tasks. It's like a routine where we don't have to think too much because we know it's already integrated into the whole enterprise. It's the next step, and it gives us more time to focus on other tasks.

What needs improvement?

We are trying to figure out how to enable encryption or just encryption. The last thing we want is to use locks, which are a hassle for encryption. We don't have the personnel to unlock the system every time it gets rebooted. I know there's a way, like on Windows, where they have TPM. I'm not sure how Red Hat Enterprise Linux’s TPM works. That's one of the issues we face—how to utilize TPM effectively.

I think in the future, if the company requires us to encrypt everything, it would be a time-consuming process. I'm not sure how long that would take or if it will happen. I just want to understand how Red Hat Enterprise Linux and TPM work or if there's an existing solution that works similarly where I don't necessarily have to be present every time my system reboots and enter a password. At least for Windows, we know that it works, but I'm not familiar with the equivalent functionality in Red Hat Enterprise Linux.

In future releases, I would prefer a Red Hat Enterprise Linux image that fits on a DVD. The Red Hat Enterprise Linux image keeps getting larger and larger. One of the biggest requirements for my company is that it has to fit on a DVD. Now, with Red Hat Enterprise Linux 9 approaching close to ten gigabytes, it won't fit on a DVD anymore. The last thing we want to resort to is using Blu-ray. I prefer not to use Blu-ray. So we need to keep the image size on a DVD smaller. That's one of the main issues. And we can't use USB sticks either, even though they're a new option. Everything needs to be burned on a DVD. So having a Red Hat Enterprise Linux image that fits on a DVD would be beneficial for any future versions or releases.

For how long have I used the solution?

I have been using this solution for eight years now. Right now, we're migrating. I'm trying to upgrade from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7. And that process is painstaking. It's taking a lot of time. I know we want to get that done before October because I think that's when the security support for Red Hat Enterprise Linux 6 expires. We need to move everything to Red Hat Enterprise Linux 7.

We have a lot of legacy systems, and it's very time-consuming trying to figure out what will work and which version of Red Hat Enterprise Linux will support all our applications. So it's just a lengthy process to go through.

What do I think about the stability of the solution?

In terms of stability, there have been some issues, particularly on the workstation side. The workstation tends to freeze up occasionally, requiring a system restart. The server side, on the other hand, works well as intended. Although Red Hat Enterprise Linux is primarily designed for servers, our developers use it as a workstation, and that can sometimes cause issues after a couple of days of continuous use.

They may need to restart their systems when something freezes or stops working. So it's one of those things we encounter.

How are customer service and support?

I don't really use it extensively. I have some knowledge and experience with it, but I don't heavily rely on Red Hat support. Whenever I encounter a problem, I usually turn to Google for solutions.

The knowledge base provided by Red Hat exists, but I find it difficult to navigate. The information seems scattered and hard to find. I tend to prefer searching on Google since I can get immediate answers there compared to the knowledge base, which can be challenging to navigate. It seems like the knowledge base could use some improvement.

Which solution did I use previously and why did I switch?

One of the main advantages is the level of support. Red Hat Enterprise Linux provides nearly ten years of support, including two years of extended support, whereas other operating systems typically have one or two major versions released within five years. It can be challenging to allocate the budget for frequent updates over such a short period. So I think that's the main appeal of Red Hat Enterprise Linux—its ten-year support with an additional two years.

How was the initial setup?

Since I've been working with Red Hat Enterprise Linux for a long time, it feels easy for me. However, for someone completely new to it, especially coming from a Windows background, it might seem more complicated. But for me, it's second nature and not that difficult. So the initial setup depends on the level of familiarity with the system.

For a brand-new system, it might take around ten minutes.

Which other solutions did I evaluate?

I have worked with CentOS, Fedora, and Ubuntu. So I have experience with different flavors of Linux, from the Ubuntu side to Fedora. From a developer's point of view, the main difference, if I compare it to Ubuntu, is that they always get the latest packages, which helps them a lot. 

On the other hand, with Red Hat Enterprise Linux, I understand that it's set up to prioritize security. But sometimes, from a development perspective, it's challenging for them to obtain the latest packages. As an assessment, I have to go out there, fetch the package or compile the new package for the new version, and then bring it into Red Hat Enterprise Linux so that developers can use it. I think that's the issue. It's a balancing act between trying to get the latest package versions and ensuring stability and security. It's a problem that I think everyone struggles with.

What other advice do I have?

Overall, I would rate the solution an eight out of ten because there is always room for improvement when it comes to technology.

Which deployment model are you using for this solution?

On-premises


    reviewer2197290

A stable solution with an excellent knowledge base and support team

  • May 28, 2023
  • Review from a verified AWS customer

What is our primary use case?

I use the solution to develop OS for our internal use. I deliver it to our internal clients, so they can use it for whatever applications they may need to use it for.

What is most valuable?

The product is very stable. The knowledge base is excellent.

What needs improvement?

The solution should improve its documentation.

For how long have I used the solution?

I have been using the solution for 16 years.

What do I think about the scalability of the solution?

The solution scales well.

How are customer service and support?

The support is good. I would rate support an eight or nine out of ten. The documentation should be improved to make it a ten.

How would you rate customer service and support?

Positive

How was the initial setup?

The deployment is very easy for me because my organization has been doing it for a long time.

What other advice do I have?

The product’s resiliency is pretty good. It responds fast to security updates compared to some other closed-source vendors. 

We moved from other priority operating systems to Red Hat Enterprise Linux because it saves us costs on the commodity hardware. Overall, I rate the solution an eight or nine out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)


    reviewer2197287

A highly stable solution with a straightforward initial setup

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

We use Red Hat Ansible Automation Platform. We are using version 8.4, but we started with 8.3.

What is most valuable?

The solution’s stability is its most valuable feature. It has only been two years since I first started using the product. So far, I have seen a subtle comparison of the solution’s stability to other operating systems.

What needs improvement?

It is challenging to use the knowledge base and the deployment documentation. Some of it is all over the place, and it's challenging to piece them together.

For how long have I used the solution?

It has been two years since we put in the first footprint of Red Hat Enterprise Linux in our organization.

What do I think about the scalability of the solution?

We have about 30 to 40 servers.

How are customer service and support?

The support team is pretty good. Whenever I send support requests and ask questions, the team is knowledgeable enough to get me the necessary answers. Sometimes there are delays in the response. However, it has been a positive experience for me.

How would you rate customer service and support?

Positive

How was the initial setup?

I was the main engineer during the initial deployment of the product. The initial setup was straightforward. Whatever was in the documentation was exactly what was meant to be done.

We did not struggle with the documentation because I have been an engineer for years. Someone who is just getting started might have a different perspective on the ease of setup.

What's my experience with pricing, setup cost, and licensing?

We purchased the solution from a third-party vendor.

What other advice do I have?

I use Ansible Builder to build my containers. However, I do not use Red Hat Enterprise Linux’s image builder tool.

We do not use Red Hat Insights yet, but we're planning to use it in the near future. As soon as we get more servers in our environment, our firm’s directors might decide to start using Red Hat Insights. Right now, we are just using Automation Analytics. The solution’s resiliency is pretty solid.

We implemented the solution because we wanted automation. We cannot install Ansible Automation Platform in operating systems other than Red Hat Enterprise Linux.

Overall, I rate the product an eight out of ten.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure


    Joseph Gust

The solution solved our need for automation and running containers

  • May 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

Red Hat Enterprise Linux is connected to our internal private cloud that is air-gapped.

We use Red Hat Enterprise Linux as the operating system on our network management and data management servers. It is our server operating system of choice for any type of hardware that needs to be reliable and stable.

How has it helped my organization?

Red Hat Enterprise Linux solved our need for automation and running containers. It is the most stable open source operating system available. When compared to other OSes, it is reliable and works well. This is important for my line of work, where I need to be able to reliably transfer files across thousands of miles. I need to do this quickly, and I have found that other OS solutions, such as Windows Server and Ubuntu Linux Server, are not as reliable or as quick. I have found myself constantly having to troubleshoot problems with these other OSes, and there is often not a lot of documentation available to help me.

The Red Hat Enterprise Linux knowledge base is awesome. Everything is documented, so I could easily find the information I needed to troubleshoot my misconfiguration issue. The knowledge base even provides suggestions for likely causes, which was helpful because most of the time, when something isn't working right on a Red Hat Enterprise Linux system, it's a configuration issue.

Security is one of the benefits of Red Hat Enterprise Linux. It is secure from the start, and it does not take long to configure it to meet government security standards. It also performs well during the staging process, and it does not break or cause services to be lost. In contrast, other operating systems often lock accounts, break, and cause services to be lost.

Simplifying risk reduction and maintaining compliance is straightforward and uncomplicated. There is plenty of documentation to help us, so if we get lost, we can refer to it to find our way.

The portability of applications and containers built on Red Hat Enterprise Linux makes it easier for our company to stay agile. We have found that our applications and programs run just fine on Red Hat Enterprise Linux, which provides a lot of supportability.

What is most valuable?

Red Hat Enterprise Linux's most valuable feature is that it comes with all the tools we need to set up and maintain an enterprise-grade system. Even if we install the minimal version of Red Hat Enterprise Linux, we will still have everything we need to get up and running quickly and easily. And if we ever need to restore our system from a backup, Red Hat Enterprise Linux makes it easy to do so, whether we are restoring from a scratch build or a backup that is a few weeks old.

What needs improvement?

A feature that I would like to see in the image builder is the ability to open the image in live mode and access a command line interface. This would allow me to immediately apply the necessary security settings required by the STIG. By doing so, I can deploy the image with the confidence that vulnerabilities present in the live network cloud service are closed before deployment, rather than applying the settings afterward as suggested in the example by Red Hat.

Ideally, I would prefer to deploy an operating system that already has all the necessary configurations in place. This would involve accessing a command line interface, adjusting configuration files as needed, setting up banners, and establishing user accounts. After making these changes, I would create an image and deploy it. I've noticed that the current image builder is primarily designed for commercial use, but as a DoD user, I have different requirements. Therefore, having an emulator or virtual terminal that allows me to interact with the kernel and make live changes, which can then be saved to create a customized ISO, would be an excellent feature to have. It would be great if Red Hat Enterprise Linux had a similar capability. Interestingly, Ubuntu Linux does offer this functionality with its "Custom Ubuntu Basic ISO Creator" (CUBIC).

For how long have I used the solution?

I have been using Red Hat Enterprise Linux for two years.

What do I think about the stability of the solution?

Red Hat Enterprise Linux is stable.

What do I think about the scalability of the solution?

Red Hat Enterprise Linux is a scalable operating system. Red Hat Enterprise Linux offers a wide range of options and features, and we are only just beginning to explore its full potential.

How was the initial setup?

The initial setup is straightforward. I installed Red Hat Enterprise Linux using the stick method. I had to create nine different partitions, all of which were encrypted. This is where things got a little complicated. We need to decide whether to create a LUKS partition or partition and build our image on top of a LUKS partition. Initially, I was individually encrypting each partition using the "encrypt" option. However, this is not ideal because we cannot grow or shrink an LVM partition that is on an encrypted partition. Once the partition is created, it is set in stone. So, I needed to figure out how to encrypt just the partition and then create an LVM partition on top of the encrypted partition, such as SDA3. This was a bit of a challenge, and there is not a lot of documentation on how to do this. The documentation that is available is a bit confusing, and I got lost a few times. Once I figured it out, it was not too bad. The entire deployment process takes about 20 minutes.

What was our ROI?

We have seen a return on investment in all areas with Red Hat Enterprise Linux, including productivity. We use it in our daily operations in almost all of our systems. In one form or another, Red Hat Enterprise Linux is running on our systems. If we are not running Red Hat Enterprise Linux, our systems are unstable.

What other advice do I have?

I give Red Hat Enterprise Linux a ten out of ten.

For those who are looking at other open source cloud-based operating systems for Linux, I would recommend Red Hat Enterprise Linux. It is well-documented and has a large pool of information available. We can also use CentOS content with Red Hat Enterprise Linux. The pool of information for Red Hat Enterprise Linux is far greater than some other open-source solutions.

The environment in which we deployed the solution is enterprise-level.

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other