Skip to content

Commit 8a9d99d

Browse files
authored
Merge pull request #7809 from Brenduns/14645908-tunnel-support-for-rhel
14645908 tunnel support for rhel 8.6 - OOB for 2206
2 parents 8d5d793 + a7f7850 commit 8a9d99d

3 files changed

Lines changed: 20 additions & 7 deletions

File tree

memdocs/intune/fundamentals/whats-new.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ keywords:
77
author: Erikre
88
ms.author: erikre
99
manager: dougeby
10-
ms.date: 06/10/2022
10+
ms.date: 06/17/2022
1111

1212
ms.topic: conceptual
1313
ms.service: microsoft-intune
@@ -61,6 +61,18 @@ You can use RSS to be notified when this page is updated. For more information,
6161
### Scripts
6262
-->
6363

64+
## Week of June 13, 2022
65+
66+
### Device security
67+
68+
#### Microsoft Tunnel support for Red Hat Enterprise Linux 8.6<!-- 14642908 -->
69+
70+
You can now use Red Hat Enterprise Linux (RHEL) 8.6 with [Microsoft Tunnel](../protect/microsoft-tunnel-overview.md). There are no additional requirements beyond those that are needed for RHEL 8.5 support.
71+
72+
Like RHEL 8.5, you can use the [readiness tool](../protect/microsoft-tunnel-prerequisites.md#run-the-readiness-tool) (mst-readiness) to check for the presence of the ip_tables module in the Linux kernel. By default, RHEL 8.6 doesn’t load the ip_tables module.
73+
74+
For Linux servers that don't load the module, we've provided [instructions](../protect/microsoft-tunnel-prerequisites.md#manually-load-ip_tables) to load them immediately, and to configure the Linux server to automatically load them at boot.
75+
6476
## Week of June 6, 2022
6577

6678
### App management

memdocs/intune/protect/microsoft-tunnel-prerequisites.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ keywords:
55
author: brenduns
66
ms.author: brenduns
77
manager: dougeby
8-
ms.date: 05/18/2022
8+
ms.date: 06/17/2022
99
ms.topic: how-to
1010
ms.service: microsoft-intune
1111
ms.subservice: protect
@@ -34,7 +34,7 @@ At a high level, you’ll need the following to use the Microsoft Tunnel:
3434
- An Azure subscription.
3535
- An Intune subscription.
3636
- A Linux server that runs containers. This server can be on-premises or in the cloud:
37-
- Podman for Red Hat Enterprise Linux (RHEL) 8.4 and 8.5 (See the [Linux server](#linux-server) requirements.)
37+
- Podman for Red Hat Enterprise Linux (RHEL) 8.4, 8.5, and 8.6 (See the [Linux server](#linux-server) requirements.)
3838
- Docker for all other Linux distributions
3939
- A Transport Layer Security (TLS) certificate for the Linux server to secure connections from devices to the Tunnel Gateway server.
4040
- Devices that run Android or iOS/iPadOS.
@@ -60,6 +60,7 @@ Set up a Linux based virtual machine or a physical server on which Microsoft Tun
6060
| Red Hat (RHEL) 7.4+ | Docker CE | |
6161
| Red Hat (RHEL) 8.4 | Podman 3.0 | |
6262
| Red Hat (RHEL) 8.5 | Podman 3.0 | This version of RHEL doesn't automatically load the *ip_tables* module into the Linux kernel. When you use this version, plan to [manually load the ip_tables](#manually-load-ip_tables) before Tunnel is installed.|
63+
| Red Hat (RHEL) 8.6 | Podman 3.0 | This version of RHEL doesn't automatically load the *ip_tables* module into the Linux kernel. When you use this version, plan to [manually load the ip_tables](#manually-load-ip_tables) before Tunnel is installed.|
6364
| Ubuntu 18.04 | Docker CE | |
6465
| Ubuntu 20.04 | Docker CE | |
6566

@@ -90,7 +91,7 @@ Set up a Linux based virtual machine or a physical server on which Microsoft Tun
9091
> [!NOTE]
9192
> The preceding link directs you to the CentOS download and installation instructions. Use those same instructions for RHEL 7.4. The version installed on RHEL 7.4 by default is too old to support Microsoft Tunnel Gateway.
9293
- [Install Docker Engine on Ubuntu](https://docs.docker.com/engine/install/ubuntu/)
93-
- [Install Podman on Red Hat Enterprise Linux 8.4 and 8.5 (scroll down to RHEL8)](https://podman.io/getting-started/installation)
94+
- [Install Podman on Red Hat Enterprise Linux 8.4, 8.5, or 8.6 (scroll down to RHEL8)](https://podman.io/getting-started/installation)
9495
These versions of RHEL don't support Docker. Instead, these versions use Podman, and *podman* is part of a module called "container-tools". In this context, a module is a set of RPM packages that represent a component and that usually install together. A typical module contains packages with an application, packages with the application-specific dependency libraries, packages
9596
with documentation for the application, and packages with helper utilities. For more information, see [Introduction to modules](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/installing_managing_and_removing_user-space_components/introduction-to-modules_using-appstream) in the Red Hat documentation.
9697

@@ -376,7 +377,7 @@ Before you start a server install, we recommend you download and run the most re
376377

377378
- Confirms that your network configuration allows Microsoft Tunnel to access the required Microsoft endpoints.
378379

379-
- Checks for the presence of the ip_tables module on the Linux server. This check was added to the script on February 11 2022, when support for RHEL 8.5 was added. RHEL 8.5 doesn’t load the ip_tables module by default. If they're missing after the Linux server installs, you must [manually load the ip_tables module](#manually-load-ip_tables).
380+
- Checks for the presence of the ip_tables module on the Linux server. This check was added to the script on February 11 2022, when support for RHEL 8.5 was added. RHEL 8.5 and 8.6 don't load the ip_tables module by default. If they're missing after the Linux server installs, you must [manually load the ip_tables module](#manually-load-ip_tables).
380381

381382
> [!IMPORTANT]
382383
> The readiness tool doesn't validate inbound ports, which is a common misconfiguration. After the readiness tool runs, review the [firewall prerequisites](#firewall) and manually validate your firewalls pass inbound traffic.

memdocs/intune/protect/microsoft-tunnel-upgrade.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ keywords:
55
author: brenduns
66
ms.author: brenduns
77
manager: dougeby
8-
ms.date: 02/15/2022
8+
ms.date: 06/17/2022
99
ms.topic: how-to
1010
ms.service: microsoft-intune
1111
ms.subservice: protect
@@ -192,7 +192,7 @@ Image hash values:
192192
Changes in this release:
193193

194194
- Minor bug fixes
195-
- A new version of the *mst-readiness* tool is available for download. We recommend using the updated script, which now checks the Linux server build for the presence of the *ip_tables* module. While most Linux distributions load this module be default, some versions, like RHEL 8.5, do not.
195+
- A new version of the *mst-readiness* tool is available for download. We recommend using the updated script, which now checks the Linux server build for the presence of the *ip_tables* module. While most Linux distributions load this module be default, some versions, like RHEL 8.5 and RHEL 8.6, do not.
196196

197197
For more information including where to download the tool, see [Run the readiness tool](../protect/Microsoft-tunnel-prerequisites.md#run-the-readiness-tool).
198198

0 commit comments

Comments
 (0)