Add RLCPlus-9 and RLCPlus-10 (Rocky Linux Plus, CIQ)

[Patrick Swartz (pswartzclan)]

Summary of the Pull Request

Adds RLCPlus-9 and RLCPlus-10 — Rocky Linux Plus, CIQ's free enterprise Linux offering built on Rocky Linux — to the WSL distribution manifest, for both x86_64 and aarch64. RLCPlus-10 is set as the default version.

PR Checklist
Closes: N/A - new distro addition, not tied to an existing issue
Communication: No prior discussion with core contributors on this specific PR. CIQ Rocky Linux Security Team is a current member of the linux-distros security mailing list (https://oss-security.openwall.org/wiki/mailing-lists/distros), which the WSL distro packaging documentation references as a membership criterion.
Tests: No automated tests apply (manifest-only change); manual validation performed and detailed below. validate-modern.py passes clean against this branch with no errors.
Localization: N/A - no new end-user-facing strings introduced beyond the existing FriendlyName field pattern used by other entries.
Dev docs: N/A - no dev-facing documentation changes needed.
Documentation updated: Not yet filed against MicrosoftDocs/wsl - happy to follow up there if maintainers want a docs PR alongside this one.
Detailed Description of the Pull Request / Additional comments

Both RLCPlus-9 and RLCPlus-10 images are built from CIQ's RLC+ GenericCloud qcow2 releases. The build masks NetworkManager/NetworkManager-wait-online/tmp.mount (per the packaging guidance), and additionally masks cloud-init and its related units, since the GenericCloud source image expects a cloud datasource that doesn't exist under WSL - without masking it, first boot hangs indefinitely waiting for a datasource that never arrives.

Build tooling, overlay configuration, and full documentation are public at https://github.com/ctrliq/rlcplus-wsl-images.

Validation Steps Performed

All four combinations (9/10 x x86_64/aarch64) were built and fully boot-tested on real hardware (x86_64 on a Windows desktop, aarch64 on a Snapdragon X2 Plus machine). For each, verified:

Clean install via wsl --install --from-file
OOBE first-run user creation and passwordless sudo
NetworkManager correctly masked, with WSL's own networking still fully functional
Shortcut icon renders correctly in Windows Terminal
/etc/os-release and uname -a confirm correct distro identity and architecture

validate-modern.py --compare-with-branch origin/master run locally against this branch passes with no errors (only the same category of "discouraged system unit" warnings already present on existing, merged entries like Ubuntu).

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Adds CIQ’s Rocky Linux Plus (RLCPlus) as new Modern Distribution entries in the WSL distribution manifest, including both major versions and both amd64/arm64 download targets.

Changes:

• Add a new RLCPlus distribution group with RLCPlus-9 and RLCPlus-10 entries.
• Provide GitHub release URLs and SHA-256 hashes for both amd64 and arm64 for each version.
• Set RLCPlus-10 as the default within the RLCPlus group.

Suppressed comments (1)

distributions/DistributionInfo.json:125

• Continuation of the indentation inconsistency: the remainder of the RLCPlus-10 entry and the closing ] are not indented to match the surrounding manifest structure.

            "Sha256": "2b181172c9aa3160a803d5ecaee517d237f59b41eb21848ee60699b89d5b8d84"
        },
        "Arm64Url": {
            "Url": "https://github.com/ctrliq/rlcplus-wsl-images/releases/download/v20260812/RLCPlus-10-WSL-10-20260812.0.aarch64.wsl",
            "Sha256": "b87c820232b2ce1b76be3643be615c4fee7ebc6bb31de4ac222d52b58d9cdd67"
        }
    }
],

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Patrick Swartz (pswartzclan)]

@microsoft-github-policy-service agree company="CIQ"

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (1)

distributions/DistributionInfo.json:122

• Indentation for the RLCPlus-10 entry is inconsistent starting at the Sha256 field in Amd64Url through the end of the RLCPlus array. While JSON whitespace is ignored, this makes the manifest harder to read/review and breaks the established formatting used by the surrounding entries.

            "Sha256": "2b181172c9aa3160a803d5ecaee517d237f59b41eb21848ee60699b89d5b8d84"
        },
        "Arm64Url": {
            "Url": "https://github.com/ctrliq/rlcplus-wsl-images/releases/download/v20260812/RLCPlus-10-WSL-10-20260812.0.aarch64.wsl",
            "Sha256": "b87c820232b2ce1b76be3643be615c4fee7ebc6bb31de4ac222d52b58d9cdd67"

[Patrick Swartz (pswartzclan)]

Pushed a follow-up commit to re-trigger CI (previous run's workflow approval expired after sitting unreviewed for several weeks).

Also confirmed there are no security.selinux extended attributes on the built images (checked the same class of issue that came up on a prior Rocky Linux submission, #13094) — clean at both a shallow and full recursive scan.

Happy to address any other feedback whenever someone gets a chance to look this over.

[Craig Loewen (craigloewen-msft)]

I tested it out and looks great! Thank you Patrick for the submission.

[Ben Hillis (benhillis)]

/azp run

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).

[Copilot]

Copilot review overview

🟢 Approval recommended

The sole finding is a non-blocking indentation nit.

Review effort: Lite
Findings: 1

Open (1)

• Reindent RLCPlus-10 manifest block to match four-space indentation · New