CIQ

Global – October 13, 2026 -- Tenable has released Nessus detection plugins built from CIQ's security advisories, so CVEs that CIQ has already fixed on Rocky Linux from CIQ Pro (RLC Pro) hosts now resolve in scan results instead of showing as unpatched.

Community advisories left CIQ fixes uncounted on pinned LTS hosts

RLC Pro LTS lets customers pin a host to a minor release and keep receiving security fixes on it. Even-numbered minor releases receive four years of security patching, and CIQ documents those fixes in its own advisories.

Tenable's existing Rocky Linux plugins draw on community Rocky Linux advisories, which do not include CIQ's. Nessus therefore compared a pinned host against the latest release, and a CVE that CIQ had already fixed on that release could still appear as unpatched. The same gap applied to packages CIQ adds beyond community Rocky Linux.

Global – October 12, 2026 -- CIQ is making Enterprise Linux Manager (ELM) available at no additional cost with all RLC Pro subscriptions. Migrating fleets get a local mirror, curated content views, rollback and network provisioning before the first host is converted.

CIQ treats OS conversion and lifecycle tooling as separate workstreams

For RHEL, Oracle Linux and CentOS-family sources, CIQ's migrate2rlc script converts each host to RLC Pro within the same major version. The conversion changes what runs on the host. It leaves three questions open: where hosts pull packages afterward, which content each host group may install, and how teams build replacement machines. ELM answers all three, and CIQ advises putting that layer into the migration plan from the first week.

Global – October 12, 2026 -- CIQ's latest RLC Pro AI release lets a developer stand up a working local AI stack in about 10 minutes and adds CIQ Linux Kernel 6.18 for large production environments, according to Brian Dawson, the company's Director of Product Management.

CIQ targets the operating system as the overlooked layer of AI stacks

Dawson argues that organizations pour capital into GPUs, models, frameworks and applications while treating the operating system as an afterthought. "We've moved so fast with AI that the OS has become the forgotten layer," he said.

Global – October 12, 2026 -- CIQ's RLC Pro LTS bundles five active FIPS 140-3 CMVP certificates, validated per minor version on x86_64, as a standard feature rather than a paid upgrade, as the company lays out documented migration paths for RHEL, Oracle Linux, SUSE, Amazon Linux 2 and unsupported Linux users.

RHEL, Oracle Linux and CentOS users skip recertification

RLC Pro shares its Enterprise Linux foundation with RHEL, Oracle Linux and CentOS. Applications compiled against that base carry over with little to no change. Because the migration preserves the foundation, it also preserves the certification, which removes the recertification step platform teams usually budget for a full platform change.

CIQ's migrate2rlc script automates the conversion. It checks the current version, third-party repositories and FIPS requirements, then runs the migration and validates the result.

Santa Clara – October 12, 2026 -- CIQ says model loading ran 33.8 percent faster on Linux 6.18 than on a kernel frozen at general availability, based on its own benchmarks of the same workload. The company is pitching the result for RLC Pro AI, its Enterprise Linux distribution for GPU infrastructure.

CIQ's argument is that AI hardware and frameworks move faster than the operating system beneath them. NVIDIA advances the hardware, CUDA the toolkit and PyTorch the framework. An enterprise kernel, by design, trails by an average of twelve to eighteen months. RLC Pro AI ships Linux 6.18, the latest production and long-term GPU drivers, and the CUDA toolkit together, validated as one stack.

Global – October 12, 2026 -- CIQ Enterprise Linux Manager (ELM), the fleet lifecycle tool bundled with RLC Pro, runs a forward-only dependency check on draft content views so incompatible libraries surface before a patch reaches any production host.

CIQ frames the problem around operators who say the patch, not the CVE, took production down. An update can pull in an incompatible library or bump a version another component depends on. The conflict information exists before deployment, but teams often see it only after the change is live.

ELM flags dependency conflicts on unshipped drafts

Hosts install from content views, which are named, versioned snapshots of the packages and versions that ship together. When an administrator forks a new view to bring in an update, ELM maps the change forward through it. Conflicts appear on the draft without a full re-walk of the dependency tree.

United States – October 12, 2026 -- CIQ's Fuzzball 4.2 allows AI agents to interact with the HPC platform within permissions set by the customer organization, and lets workflows submit and manage other workflows. Research Computing Engineer Wolfgang Resch, who spent roughly a decade supporting researchers at the NIH High Performance Computing facility, says the agent access will lower the barrier to entry for new users and speed development of Fuzzball workflows.

Fuzzball 4.2 adds agent access and workflow-to-workflow submission

Resch sees opportunities to fold Fuzzball into existing agentic workflows and to help administrators investigate cluster issues. Workflows that launch other workflows enable more complex applications and simplify integration with workflow engines such as Nextflow.

Global – October 12, 2026 -- RLC Pro AI (Rocky Linux from CIQ) now ships as a container image bundling GPU drivers, system dependencies and inference backend software, reducing a sovereign AI deployment to three steps, according to guest author Zach Deane-Mayer of AI Insight Solutions.

The pitch targets dependence on frontier AI labs. Those labs sell turnkey AI priced by the token, set the deprecation schedule and can revoke customer access at any time. Deane-Mayer argues that businesses reliant on AI should own the stack it runs on.

Global – October 12, 2026 -- CIQ Enterprise Linux Manager (ELM) resolves subscription entitlement a single time, at the customer's mirror, whether the fleet has 200 hosts or 20,000.

Subscription authenticates against CIQ Depot at sync time

Customers point ELM at CIQ Depot with their credentials. The RLC Pro subscription governs which repositories they can mirror. Every content view built from that sync inherits the entitlement, as does every host that installs from the view.

The Depot share of the mirror sits alongside internal repositories and open repositories such as Extra Packages for Enterprise Linux (EPEL). All three sync on the same schedule, and a content view draws from them as one catalog. Mirroring accepts any RPM-based distribution. Curation, dependency resolution and errata cover Enterprise Linux content only.

United States – October 12, 2026 -- Sylabs will end-of-life SingularityPRO, Singularity Enterprise and SingularityCE on October 25, 2026, the date its engineering work on the SingularityCE project and Singularity ecosystem stops. CIQ, which backs the competing Apptainer project, says it is already moving to absorb Singularity's user base.

Sylabs releases formerly commercial features as open source

Sylabs is closing out SingularityPRO and Singularity Enterprise by open-sourcing functionality previously reserved for those paid offerings. CIQ expects the Apptainer community to pick up and maintain those features.

Singularity's 2015 HPC origins lead to a split in 2021

Gregory Kurtzer started Singularity at Lawrence Berkeley National Laboratory in 2015 for multi-user HPC clusters, where Docker's security model did not fit. He founded Sylabs in 2017 to develop it commercially.