rhel9-expert

RHEL 9 Expert

Expert knowledge base for Red Hat Enterprise Linux 9 system administration, security, and operations. Contains 613 justified beliefs covering SELinux, cryptographic policies, Identity Management (IdM), kernel configuration, networking, storage, virtualization, provisioning, and lifecycle management.

What is this?

This is an External Epistemic Memory (EEM) — a model-agnostic knowledge base that any LLM can use via the reasons CLI or tool calling. Unlike a LoRA or fine-tune, this knowledge is not baked into model weights. It is external, inspectable, correctable, and works with any model.

Stats

Top Topics

Domain Coverage

• RHEL 9 Core Platform: content delivery architecture (BaseOS/AppStream), DNF package management, module streams, minor release lifecycle, deprecations (317 beliefs)
• Identity Management (IdM): 389 Directory Server, MIT Kerberos, Dogtag CA, SSSD, DNS integration, trust relationships, complete identity stack (37 beliefs)
• SELinux: enforcing mode, policy management, booleans, file contexts, container MCS isolation, troubleshooting (27 beliefs)
• RHEL 9.4 Specifics: minor release changes, new features, updated defaults (20 beliefs)
• Kickstart & Provisioning: automated installation, Kickstart directives, PXE boot, Image Builder, end-to-end provisioning pipeline (15 beliefs)
• Security Framework: defense-in-depth across four integrated layers, cryptographic policies (DEFAULT/LEGACY/FUTURE/FIPS), crypto policy lifecycle, audit subsystem (21 beliefs)
• Kernel & Boot: kernel module management, GRUB2 configuration, bootloader, kdump crash recovery, kernel parameters (23 beliefs)
• Networking: NetworkManager, firewalld, nftables, bonding, teaming, network configuration (included in core beliefs)
• Storage: LVM, Stratis, VDO deduplication, XFS/ext4, LUKS encryption, layered data protection (included in core beliefs)
• Virtualization: KVM/QEMU/libvirt managed stack, virsh, virt-install, VM lifecycle management (included in core beliefs)
• Containers: Podman, rootless containers, container SELinux policies, MCS isolation model (included in core beliefs)
• Audit & Logging: unified audit subsystem, rsyslog, systemd journal, file watch rules, log dispatch (14 beliefs)

How to Use

Import into a reasons database

reasons init
reasons import-json network.json

Query beliefs

reasons search "SELinux container isolation"
reasons explain rhel9-defense-in-depth-security-framework
reasons show rhel9-four-predefined-crypto-policies

Use as an MCP tool or CLI

Any LLM agent that can call reasons search, reasons show, and reasons explain can use this knowledge base. The agent does not need to be told it is an expert — the knowledge base speaks for itself.

Key Beliefs

Sources

Built from exploration of Red Hat Enterprise Linux 9 documentation, release notes, and operational experience across security, identity management, networking, storage, and platform administration.

Files

Quality

• All 613 beliefs are IN (none retracted)
• 457 premises grounded in direct observations of RHEL 9 behavior and documentation
• 156 derived beliefs justified from premises via SL justifications
• 0 nogoods — no contradictions detected
• Max derivation depth of 6, indicating multi-step reasoning chains
• Built and reviewed using ftl-reasons derive and review-beliefs pipeline

Limitations

• Focused on RHEL 9.x as of mid-2026
• RHEL evolves across minor releases; some beliefs may become stale
• Heavier coverage of security, IdM, and SELinux than storage or performance tuning
• Does not cover RHEL 8 or earlier versions
• No ATMS or assumption-based beliefs (single-context TMS only)

Authors

• Ben Thomasson (@benthomasson)

License

mit