Secure a new Rocky Linux server
The first hour on a Rocky Linux or AlmaLinux VPS: dnf updates, a wheel user, key only SSH, firewalld, dnf-automatic, and SELinux left enforcing.
#selinux
Filtering by topic #selinux · clear
Change the SSH port with SELinux and firewalld
Moving sshd to a new port on Rocky Linux or AlmaLinux needs firewalld, an SELinux port label and sshd_config. Do it in the order that keeps you logged in.
Run Ollama in rootless Podman on a VPS
Run Ollama as a rootless Podman container on a VPS: a dedicated user, lingering, a Quadlet unit that survives reboot, SELinux labels, and a closed port.
SELinux basics for a server: what it breaks
nginx returns 403 and the permissions look fine. Read the SELinux denial, fix the label with semanage and restorecon, and leave enforcing on.
Install Docker on Rocky Linux or AlmaLinux
Install Docker Engine on Rocky Linux or AlmaLinux with dnf, then fix what Ubuntu guides skip: podman owning the docker command and SELinux on bind mounts.