FAQs

What is CIQ ELM?

CIQ Enterprise Linux Manager (ELM) mirrors package repositories, composes curated and versioned content views, provisions machines over the network, and keeps registered hosts pointed at the right content through an on-host agent.

Which distributions can ELM manage?

Any RPM-based distribution that uses dnf/yum repositories. Debian/Ubuntu (apt) and SUSE (zypper) hosts are not supported.

Does ELM sign the repositories it publishes?

Yes. You should import your organization's OpenPGP signing key pair under Settings → Signing and enable signing for the applicable content views. ELM can also generate a key pair when needed. Your organization's certificate and key-management policy may require you to provide and control the signing material.

ELM signs repodata/repomd.xml, publishes the public key, and configures assigned agents with repo_gpgcheck=1. This verifies repository metadata. It does not sign individual RPM packages, so agent-managed repositories use gpgcheck=0 for package signatures. Secure content views separately require HTTP Basic authentication. See Settings and signing.

Does ELM provide errata or CVE information?

ELM does not add errata (updateinfo) data to composed repositories. Use Ascender Ledger Pro alongside ELM for Enterprise Linux errata, CVE, package, and affected-host visibility.

Does ELM work air-gapped?

Yes, after you stage the entitled elm-server RPM and all required container images inside the isolated environment. Package content can enter through ISO upload and rsync from internal mirrors. ELM has no telemetry, and the CIQ Depot integration is optional. See Air-gapped considerations.

Can a content view combine several sources?

No - each content view composes from exactly one input: one source, or one upstream content view. Create one view per source and assign multiple views to your hosts, or chain views for dev-to-prod promotion. See Content views.

What are the storage requirements?

Sources and content views must share a single ext4 or XFS filesystem because composes use hard links instead of copying packages. Daily source cleanup removes packages no longer present upstream unless retained snapshots or active pin rules still need them. Size the filesystem for current mirrors, retained snapshots, and growth between cleanup runs. See Installation.

Can ELM show which hosts need package updates?

Yes. The agent reports each host's installed RPM set. Open a host to compare its current packages with packages in assigned content views and preview additions and removals. The Hosts list and dashboard also identify machines with available updates.

When do scheduled syncs run?

Scheduled source syncs run weekly: you pick days of the week and a time of day, in UTC. See Sources.

Which languages does the web interface support?

Eleven: English, Arabic, German, Spanish, French, Hindi, Italian, Japanese, Korean, Dutch, and Chinese. Each user picks their own language from the selector in the navigation.

How do I get ELM?

CIQ ELM is included with enterprise licenses for RLC Pro, RLC Pro AI, and RLC Pro Hardened purchased through CIQ Portal. Customers who purchased through a cloud provider should contact CIQ Support about ELM access.