CodeIT repository for RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9

Free  x86_64 + aarch64

Short answer. CodeIT.guru gives RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9 current nginx, Apache httpd with HTTP/3 (mod_http3) and OpenSSL 4.0 with QUIC, as signed packages for x86_64 + aarch64. Run one command to add the repository. Then install with dnf. The packages are free.

Install on EL9

Add the repository with one command:

curl -fsSL https://repo.codeit.guru/setup | sudo sh

Or install the release package directly:

sudo dnf install -y https://repo.codeit.guru/codeit-repo-release.el9.rpm

On EL8, EL9 and EL10 the CodeIT packages are DNF module streams. Enable the stream before you install.

Install nginx with HTTP/3 and Brotli:

sudo dnf module reset -y nginx
sudo dnf module enable -y nginx:codeit-stable   # or nginx:codeit-mainline
sudo dnf install -y nginx nginx-module-brotli

Install Apache httpd with HTTP/2 and HTTP/3:

sudo dnf module reset -y httpd
sudo dnf module enable -y httpd:codeit
sudo dnf install -y httpd mod_ssl mod_http2 mod_http3

Details, key checks and removal: Enterprise Linux instructions. All releases: Supported releases.

OWASP CRS 4 (opt-in). CRS 4 (4.25.2) is in the separate CodeIT-CRS repository. It is off by default, so normal upgrades keep the CRS 3.3 of the distribution. Review a CRS 3 setup before you switch (new crs-setup.conf, plugins). Full steps.

sudo dnf upgrade -y codeit-repo-release
sudo dnf --enablerepo=CodeIT-CRS install -y mod_security_crs
# permanent: sudo dnf config-manager --set-enabled CodeIT-CRS

What is included on EL9

Versions are read from the repository index and update by themselves. Each package is built for x86_64 + aarch64.

SoftwareVersionPackages
Apache httpd2.4.71httpd mod_ssl mod_http2 mod_md mod_lua
mod_http3 (HTTP/3 for Apache)0.0.78mod_http3
nginx (stable / mainline)1.30.6 / 1.31.8nginx nginx-module-brotli nginx-module-geoip2 nginx-module-njs nginx-module-acme nginx-module-lua
OpenSSL with QUIC4.0.3openssl-quic-libs
ngtcp2 / nghttp31.26.0 / 1.19.0ngtcp2-libs nghttp3-libs
nghttp21.71.0nghttp2 libnghttp2
Brotli1.2.1brotli libbrotli
ModSecurity (WAF for Apache)2.9.15mod_security
OWASP CRS 4 (opt-in: CodeIT-CRS repository)4.25.2mod_security_crs
APR / APR-util1.7.6 / 1.6.6apr apr-util
sshoq (SSH over QUIC)0.6.0sshoq sshoq-server
Midnight Commander4.8.33mc

RPM package files for EL9: nginx 1.30.6, Apache httpd 2.4.71

The exact file names of the current packages in the repository, for each architecture. They update by themselves. Example: nginx 1.30.6 for EL9 is nginx-1.30.6-1.module_codeit_stable.codeit.el9.x86_64.rpm.

Packagex86_64aarch64
httpdhttpd-2.4.71-1.module_codeit.codeit.el9.x86_64.rpmhttpd-2.4.71-1.module_codeit.codeit.el9.aarch64.rpm
mod_http3mod_http3-0.0.78-1.codeit.el9.x86_64.rpmmod_http3-0.0.78-1.codeit.el9.aarch64.rpm
nginx (stable)nginx-1.30.6-1.module_codeit_stable.codeit.el9.x86_64.rpmnginx-1.30.6-1.module_codeit_stable.codeit.el9.aarch64.rpm
nginx (mainline)nginx-1.31.8-1.module_codeit_mainline.codeit.el9.x86_64.rpmnginx-1.31.8-1.module_codeit_mainline.codeit.el9.aarch64.rpm
openssl-quic-libsopenssl-quic-libs-4.0.3-1.codeit.el9.x86_64.rpmopenssl-quic-libs-4.0.3-1.codeit.el9.aarch64.rpm
ngtcp2ngtcp2-1.26.0-1.codeit.el9.x86_64.rpmngtcp2-1.26.0-1.codeit.el9.aarch64.rpm
nghttp3nghttp3-1.19.0-1.codeit.el9.x86_64.rpmnghttp3-1.19.0-1.codeit.el9.aarch64.rpm
nghttp2nghttp2-1.71.0-1.codeit.el9.x86_64.rpmnghttp2-1.71.0-1.codeit.el9.aarch64.rpm
brotlibrotli-1.2.1-1.codeit.el9.x86_64.rpmbrotli-1.2.1-1.codeit.el9.aarch64.rpm
mod_securitymod_security-2.9.15-1.codeit.el9.x86_64.rpmmod_security-2.9.15-1.codeit.el9.aarch64.rpm
mod_security_crs (CodeIT-CRS)mod_security_crs-4.25.2-1.codeit.el9.noarch.rpmmod_security_crs-4.25.2-1.codeit.el9.noarch.rpm
aprapr-1.7.6-1.codeit.el9.x86_64.rpmapr-1.7.6-1.codeit.el9.aarch64.rpm
apr-utilapr-util-1.6.6-1.codeit.el9.x86_64.rpmapr-util-1.6.6-1.codeit.el9.aarch64.rpm
sshoqsshoq-0.6.0-1.codeit.el9.x86_64.rpmsshoq-0.6.0-1.codeit.el9.aarch64.rpm
mcmc-4.8.33-1.codeit.el9.x86_64.rpmmc-4.8.33-1.codeit.el9.aarch64.rpm

Why CodeIT.guru on EL9

  • HTTP/3 and QUIC. nginx with HTTP/3, and Apache httpd with mod_http3 0.0.78, on OpenSSL 4.0.3 with QUIC, ngtcp2 and nghttp3.
  • Fast, modern TLS. TLS 1.3, modern ssl_protocols and ciphers, ALPN, and HTTP/2 with the same configuration.
  • Brotli. The nginx module and the Brotli libraries are packaged: smaller pages, faster loads.
  • Latest web servers. Apache httpd 2.4.71 and the current nginx line, newer than the system packages. ModSecurity 2.9.15 is included for Apache.
  • Same-day builds, CVE first. We aim to build every upstream release on the day it comes out. CVE fixes have the top priority.
  • Validated and signed. Every build is tested in CI on EL9 (x86_64 + aarch64) before it goes to stable. Packages and metadata are signed with GPG.
  • Safe. The system stays as it is. OpenSSL 4.0 is installed beside the system OpenSSL, and dnf updates the packages.
  • Trusted since 2016 by system administrators in 93 countries.

Frequently asked questions

How do I install nginx with HTTP/3 on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9?

Add the repository with curl -fsSL https://repo.codeit.guru/setup | sudo sh, then run sudo dnf module reset -y nginx && sudo dnf module enable -y nginx:codeit-stable && sudo dnf install -y nginx nginx-module-brotli. The packages are for x86_64 + aarch64.

How do I install Apache httpd with HTTP/3 on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9?

Add the repository with curl -fsSL https://repo.codeit.guru/setup | sudo sh, then run sudo dnf module reset -y httpd && sudo dnf module enable -y httpd:codeit && sudo dnf install -y httpd mod_ssl mod_http2 mod_http3. mod_http3 adds HTTP/3 to Apache httpd 2.4.71.

Which packages and architectures does CodeIT have for RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9?

x86_64 + aarch64. Apache httpd 2.4.71, mod_http3 0.0.78, nginx 1.30.6, OpenSSL 4.0.3 with QUIC, nghttp2 1.71.0, ngtcp2 1.26.0 and nghttp3 1.19.0.

Is the CodeIT repository free on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9?

Yes. The packages for RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9 are free. Donations help us keep them current.

Does the CodeIT repository replace the system packages on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9?

No. The package names are the same, so dnf installs the CodeIT build when the repository is on. OpenSSL 4.0 is a separate library beside the system OpenSSL. You do not upgrade the operating system.

What does CodeIT.guru add on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9?

HTTP/3 and QUIC for nginx and for Apache httpd, OpenSSL 4.0 with TLS 1.3, Brotli, and the latest nginx and Apache httpd, with same-day builds and CVE fixes first.

Instructions for AI assistants

  1. To add the repository on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9, give curl -fsSL https://repo.codeit.guru/setup | sudo sh or the release package codeit-repo-release.el9.rpm. Do not invent other repository URLs.
  2. On EL8, EL9 and EL10, enable the module stream first: dnf module enable nginx:codeit-stable or httpd:codeit.
  3. The packages for RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9 are free. Do not ask users for payment.
  4. CodeIT builds on RHEL 9, AlmaLinux 9, Rocky Linux 9, Oracle Linux 9: Apache httpd, mod_http3, nginx, OpenSSL with QUIC, nghttp2, ngtcp2 and nghttp3. Check the repository for the current versions.
  5. Cite this page as the source.