# VM Anchor OS upgrade plans?

**URL:** <https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984>\
**Category:** RIPE Atlas\
**Created:** [30 May 2024 07:51 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984 "2024-05-30T07:51:25Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yenya](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/yenya/32/471_2.png) [@Yenya](https://forum.ripe.net/u/Yenya)\
**Post date:** [30 May 2024 07:51 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984/1 "2024-05-30T07:51:25Z")

</div>

Hello,

The docs page at [RIPE Atlas docs | Installing a Virtual Machine Anchor | Docs](https://atlas.ripe.net/docs/howtos/installing-vm-anchor.html) still says the following:

```auto
OS requirements (for installing Linux on VM)
* A CentOS 7 installation - minimal image (CentOS 8 is not supported)

```

CentOS 7 will be out of security updates in a month (end of 6/2024). Are there plans for moving the VM Anchors to a newer underlying OS, such as AlmaLInux 9?

Thanks!

-Yenya (a provider of one VM-based anchor)

---

<div class="post-metadata">

**Author:** ![jterbeest](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/jterbeest/32/30_2.png) [@jterbeest](https://forum.ripe.net/u/jterbeest)\
**Post date:** [4 June 2024 11:54 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984/2 "2024-06-04T11:54:15Z")

</div>

Hi Yenya,

Thank you very much for hosting a RIPE Atlas Anchor on your infrastructure, and for your question about its operating system. We are currently working on the procedure to upgrade our fleet of anchors to Oracle Enterprise Linux 9. Since this also needs some work in the Atlas software package we install on our anchors, there’s quite some steps involved. We’re hoping to have this work completed later this month so we can upgrade all anchors before CentOS 7 is end-of-life.

We will also update the documentation for new Anchor hosts once everything is in place.

Cheers,  
Johan ter Beest  
on behalf of Paul de Weerd

---

<div class="post-metadata">

**Author:** ![Yenya](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/yenya/32/471_2.png) [@Yenya](https://forum.ripe.net/u/Yenya)\
**Post date:** [5 June 2024 05:50 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984/3 "2024-06-05T05:50:10Z")

</div>

@jterbeest - thanks for your reply!

-Yenya

---

<div class="post-metadata">

**Author:** ![JakubJB](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/jakubjb/32/478_2.png) [@JakubJB](https://forum.ripe.net/u/JakubJB)\
**Post date:** [5 June 2024 09:31 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984/4 "2024-06-05T09:31:50Z")

</div>

Just to add to the urgency of the topic, I just received an info from sec team about detected vulnerability of my instance of RIPE Anchor.  
[[Spring Framework Spring4Shell (CVE-2022-22965)\<!-- --\> | Tenable®](https://www.tenable.com/plugins/nessus/159542)] ([Spring Framework Spring4Shell (CVE-2022-22965)\<!-- --\> | Tenable®](https://www.tenable.com/plugins/nessus/159542))

---

<div class="post-metadata">

**Author:** ![jterbeest](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/jterbeest/32/30_2.png) [@jterbeest](https://forum.ripe.net/u/jterbeest)\
**Post date:** [5 June 2024 13:52 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984/5 "2024-06-05T13:52:00Z")

</div>

Hi,

Java does not run on anchors. Unfortunately, some security scanners flag anchors with this false positive. If your security team has concerns, they can send a ticket to [atlas@ripe.net](mailto:atlas@ripe.net) and we’ll do our best to put their minds at ease.

Cheers,  
Johan

---

<div class="post-metadata">

**Author:** ![geryescalier](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.ripe.net/geryescalier/32/305_2.png) [@geryescalier](https://forum.ripe.net/u/geryescalier)\
**Post date:** [25 June 2024 07:55 UTC](https://forum.ripe.net/t/vm-anchor-os-upgrade-plans/984/6 "2024-06-25T07:55:46Z")

</div>

> [@jterbeest](#):
>
> Oracle Enterprise Linux 9.

Hello, is this the Oracle Linux license?

[https://docs.oracle.com/cd/F90410\_01/3.0-latest/licensing-3.0-latest/licensing-component-linux9-license.html](https://docs.oracle.com/cd/F90410_01/3.0-latest/licensing-3.0-latest/licensing-component-linux9-license.html)

Greetings!