Your team has deployed on CentOS Linux for years and now has to choose a platform for the next five. Explain what CentOS Stream is in relation to Red Hat Enterprise Linux, and where AlmaLinux and Rocky Linux fit in that picture.
answer
- the arrow flipped direction
- Stream is not the old CentOS
- Fedora, then Stream, then RHEL
- downstream seat is now Alma and Rocky
- bug-for-bug versus ABI-compatible
basics
~20 sCentOS Stream sits upstream of RHEL, not downstream: it is the rolling preview of the next RHEL minor release rather than a free rebuild of the current one. The downstream rebuilds are now AlmaLinux and Rocky Linux.
solid answer
~50 sThe old CentOS Linux was a downstream rebuild — RHEL's sources recompiled, released after RHEL and tracking it. In 2020 Red Hat retired that model and repositioned CentOS Stream as the *upstream* of RHEL: a continuously delivered distribution that runs slightly ahead of the next RHEL minor release. That inverts its role, so it is a development and testing platform, not a conservative production clone. The downstream niche is now filled by AlmaLinux and Rocky Linux, which rebuild for compatibility with the matching RHEL major version. They diverge in philosophy: Rocky aims to stay bug-for-bug identical, while AlmaLinux has committed to application binary interface compatibility and will ship fixes that RHEL has not yet released. For a five-year horizon I would pick paid RHEL where support or certification is required, and a rebuild where it is not — never Stream for a stability-first fleet.
go deeper
Be able to say plainly that CentOS Linux is finished, that CentOS Stream comes before RHEL rather than after it, and that AlmaLinux and Rocky are the free RHEL-compatible options today.
Explain the reversal of position and its consequence: Stream's content is heading into the next minor release, so there is no frozen point to certify against, which is what makes it unsuitable as a conservative production base.
Show the operational consequence — pick per workload rather than per organisation, keep automation distribution-agnostic so hosts stay convertible, and know that ISV support statements and validated cryptography attach to Red Hat's own builds.
Own the platform-strategy call for the organisation: decide which tiers carry a vendor relationship and which do not, keep CentOS Stream in the pipeline as early warning, and make the choice defensible to a risk owner rather than a matter of taste.
## The pipeline, and which way it flows Red Hat's distribution chain has three positions. Fedora is the fast-moving community distribution where new technology lands first. CentOS Stream is the midpoint. RHEL is the stabilised, supported product with a decade-long life. The single fact that trips people up is the direction of flow at the middle position. Until 2020, CentOS Linux sat *after* RHEL: Red Hat published sources, the CentOS project rebuilt them, and a CentOS 7.9 release appeared some time after RHEL 7.9 and was as close to identical as a rebuild can be. That made it the default "RHEL without the invoice" for an enormous number of shops. CentOS Stream sits *before* RHEL. It is continuously delivered and tracks the content that is heading into the next RHEL minor release. Packages appear there first, get exercised by the community, and then form the basis of the next minor. It is a legitimate and useful thing — it is where you test whether your software will survive RHEL 9.7 before RHEL 9.7 exists — but it is not a conservative platform, and treating it as a drop-in successor to CentOS Linux is the mistake the announcement caused. ## What actually happened, in sequence - **December 2020:** Red Hat announces CentOS Linux 8 will end at the close of 2021, years earlier than its published lifecycle, and that focus shifts to CentOS Stream. CentOS Linux 7 ran to its ordinary end of life in 2024. - **2021:** AlmaLinux and Rocky Linux launch to occupy the vacated downstream position, both targeting compatibility with the current RHEL majors. - **June 2023:** Red Hat stops publishing RHEL source packages to the public git.centos.org repository, pointing to CentOS Stream as the public source. Rebuilders adapt their sourcing. That last change is what caused the two rebuilds to diverge philosophically, and it is the part an interviewer is usually probing for. ## AlmaLinux versus Rocky Linux Both produce a distribution on which RHEL binaries and RHEL-targeted third-party packages run. They differ in what they promise: - **Rocky Linux** continues to aim at bug-for-bug identity with the corresponding RHEL release — the closest thing to the old CentOS Linux contract. - **AlmaLinux** has explicitly moved from "identical" to "ABI compatible": it guarantees that software built for RHEL runs, but reserves the freedom to differ. In practice it has shipped security fixes ahead of RHEL and has kept hardware support that RHEL dropped in a major release. Neither difference matters to a typical web application. It matters a great deal if you run a certified ISV product whose support statement names an exact platform, or if you must be able to say the running kernel is byte-identical to a vendor-supported one. Other options exist at the same layer — Oracle Linux is a long-standing RHEL-compatible rebuild, and an industry body was formed in 2023 to keep enterprise Linux sources publicly available — but Alma and Rocky are the two an interview expects you to name. ## Choosing for a five-year horizon Structure the decision rather than picking a favourite: 1. **Does anything on this fleet require vendor support or ISV certification?** Databases, SAP workloads, some storage and security agents will only be supported on genuine RHEL. Those hosts need subscriptions; there is no argument to have. 2. **Does anything require a validated cryptographic module or a certification artefact?** Certificates attach to Red Hat's own builds, not to a rebuild of them. 3. **Everything else** — build agents, internal services, ephemeral compute — can run a rebuild at no cost with the same operational habits, because the ABI and the packaging are the same. 4. **CentOS Stream** belongs in the pipeline as a forward-looking test platform: run your integration suite there and you find out about a breaking change one minor release early instead of on upgrade day. ## The migration angle Moving between these platforms in place is a solved problem in both directions: Red Hat ships `convert2rhel` to bring a compatible rebuild onto RHEL, and the rebuild projects ship their own conversion scripts to go the other way. That lowers the cost of being wrong, which is a reasonable argument for starting on a rebuild and converting the hosts that later turn out to need support — but it does not make the choice free, because the two halves of a split fleet need one automation codebase, not two.
- Is there any legitimate production use for CentOS Stream, or is it purely a test platform?There is: teams that want to be early on the next minor release, or that contribute fixes upstream, run it deliberately, and it is a supported base for building software targeting RHEL. What it is not is a conservative platform — content changes continuously and there is no frozen minor release to certify against, so a fleet whose selling point is stability should not sit on it.
- If AlmaLinux ships a security fix before RHEL does, is that an advantage or a problem?Both, depending on what you promised. Operationally, getting a fix earlier is good. Contractually, it means the platform is no longer identical to the RHEL release your ISV certified against, which is exactly the compatibility guarantee AlmaLinux stopped making. If your obligation is "matches the certified platform", divergence — even helpful divergence — is a deviation you have to record.
- How would you keep the door open if you start on a rebuild and later need genuine RHEL?Keep the fleet convertible: no distribution-specific package names in automation, no third-party repositories that only one platform carries, and a build pipeline that produces artefacts for the major version rather than for a specific vendor. Then in-place conversion tooling — `convert2rhel` in that direction — is a routine operation rather than a rebuild of every host.
saying these in an interview costs you the question
- Calls CentOS Stream a free downstream rebuild of RHEL.
- Thinks CentOS Stream is the beta of an already-released minor.
- Believes AlmaLinux and Rocky are the same project rebranded.
- Says a rebuild distribution carries Red Hat's certifications.
- Assumes CentOS Linux 8 still receives security updates.