Skip to content

AlmaLinux 9 Walkthrough

Vagrant VM: almalinux | Box: almalinux/9 | IP: 192.168.56.13 | Family: Red Hat

Supported Tools

Tool Status Notes
OpenSCAP ✅ Supported Packages: openscap-scanner, scap-security-guide (via dnf)
Lynis ✅ Supported Packages: epel-release, lynis (via dnf)
USG ❌ Not available Ubuntu-only tool
CIS-CAT Lite ✅ Supported Downloaded from CIS Workbench

VM Setup

cd cis_hardening_tool
vagrant up almalinux
vagrant ssh almalinux

Running the Tool

sudo cis-hardening-tool --version
sudo cis-hardening-tool doctor
sudo cis-hardening-tool tools install --yes
sudo cis-hardening-tool scan --tools lynis,openscap --non-interactive --export pdf --output /tmp/almalinux_report.pdf

Platform-Specific Notes

  • Package Manager: Uses dnf with --allowerasing flag for conflict resolution
  • EPEL: Required for Lynis (epel-release package installed automatically)
  • OpenSCAP SSG: Uses scap-security-guide from RHEL repos
  • SSG Content: /usr/share/xml/scap/ssg/content/ssg-almalinux9-ds.xml
  • Python: Ships with Python 3.9
  • Memory: VM configured with 2048 MB (more than Debian-family due to heavier base)

Capturing Screenshots

VBoxManage controlvm "$(cat .vagrant/machines/almalinux/virtualbox/id)" screenshotpng walkthroughs/platforms/redhat/screenshots/almalinux9_console.png