Appendix: Commands Learned

subscription-manager register

Register system with Red Hat (RHEL-specific)

subscription-manager repos --enable <repo>

Enable a Red Hat repository

dnf module enable <module>:<stream>

Enable an AppStream module stream (e.g., nodejs:20)

firewall-cmd --permanent --add-service=<svc>

Allow a service through firewalld (persistent)

firewall-cmd --reload

Apply permanent firewalld rules

getenforce / setenforce

Check / set SELinux mode (Enforcing, Permissive, Disabled)

semanage fcontext -a -t <type> "<path>(/.*)?"

Add SELinux file context rule

restorecon -Rv <path>

Restore default SELinux context on files

getsebool -a / setsebool -P <bool> on

List / set SELinux booleans (persistent with -P)

ausearch -m AVC -ts recent

Search audit log for SELinux denials

audit2allow -a

Generate SELinux allow rules from denials

lvextend -L +2G /dev/<vg>/<lv>

Extend a logical volume

xfs_growfs <mountpoint>

Grow XFS filesystem to fill LV (online)

podman generate systemd --name <ctr> --new

Generate systemd unit from Podman container

loginctl enable-linger <user>

Keep user systemd services running after logout

nmcli connection modify <conn> ipv4.method manual

Set static IP via NetworkManager

cockpit (port 9090)

RHEL web management console