Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Keep every Rocky Linux 9 host on the newest supported 9.x minor release by running sudo dnf upgrade in a controlled maintenance window. Rocky Linux documentation identifies that command as the requirement for maintaining supported status. Preview the transaction, confirm healthy repositories and backups, apply the packages, then use dnf needs-restarting to decide which services or systems need restarting. The release table used for this guide lists Rocky Linux 9.8 as the latest 9.x release on 28 May 2026; check the current release table before each maintenance cycle because a newer minor release can supersede it.

What “up to date” means on Rocky Linux 9

Updating Rocky Linux 9 is more than installing an occasional security fix. A normal DNF upgrade brings in security advisories, bug fixes, and enhancements that are available for the enabled repositories. Rocky’s release policy supports only the newest minor release in the Rocky 9 series. Once a minor release is superseded, it moves to the vault and no longer receives bug-fix or security updates. A server that still reports an older 9.x point release may therefore be running “Rocky 9” but not a supported Rocky 9 system.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Lifecycle item Published status or date Operational meaning
Rocky Linux 9 (Blue Onyx) active/general support Through 31 May 2027 Bug fixes and normal maintenance continue until this date under the published lifecycle.
Rocky Linux 9 security support Through 31 May 2032 Security maintenance is scheduled to continue through this date.
Rocky Linux 9.8 Listed as the latest 9.x release on 28 May 2026 Use the latest release table to determine whether a newer minor release has replaced 9.8.
Superseded 9.x minor releases Moved to the vault They no longer receive Rocky bug-fix or security updates, so move the host to the current minor release.

These dates describe the Rocky Linux 9 branch, not a promise that every old installation remains supported. The support rule is tied to the current minor release, so schedule updates regularly instead of waiting for a minor release to approach retirement.

Prepare a safe maintenance window

DNF can change libraries, services, kernels, and dependency sets in one transaction. Treat an update as a controlled change rather than an interactive command to run during peak traffic.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
  • Confirm the target: Verify that the machine is Rocky Linux 9 and note its current minor release, kernel, and important package versions.
  • Protect recovery: Confirm a recent, restorable backup or snapshot. For a virtual machine, verify that the snapshot can actually be mounted or reverted; for a physical server, confirm console or out-of-band access.
  • Check repository health: Ensure the intended Rocky repositories are enabled and reachable. A repository outage or an old vault configuration can make a healthy host appear to have no updates.
  • Plan availability: Reserve time for service restarts or a reboot. In a cluster, update one node at a time so another node remains available.
  • Define a rollback: Decide in advance whether recovery means restoring a snapshot, reinstalling a node and restoring data, or using another approved procedure. Do not begin a change without knowing how to recover from a failed boot or package script.
  • Have monitoring ready: Arrange alerts for failed services, disk pressure, application health, and loss of network reachability while the change runs.

Inspect the host and preview the transaction

Record a baseline before changing anything. The baseline lets you prove what changed and gives support staff a precise point of comparison if a service behaves differently afterward.

cat /etc/rocky-release
uname -r
rpm -q kernel
dnf repolist --enabled

The release file confirms the distribution and minor version, uname -r records the running kernel, rpm -q kernel lists installed kernel packages, and the repository query shows which enabled sources DNF can use. Save the output with the maintenance ticket.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Next, ask DNF what it intends to do without changing the system:

sudo dnf check-update
sudo dnf upgrade --assumeno

dnf check-update provides a quick view of available updates. dnf upgrade --assumeno resolves dependencies and prints the proposed transaction while declining the final confirmation. Review package additions, removals, replacements, kernel updates, dependency changes, and any exclusions. If the metadata is stale, use the refresh form during the preview:

sudo dnf upgrade --refresh --assumeno

Do not approve a transaction that unexpectedly removes a required application, switches repositories, or leaves a critical dependency unresolved. Investigate the repository configuration and exclusions first.

Apply the normal Rocky Linux 9 update

For the ordinary maintenance cycle, run:

sudo dnf upgrade

Use sudo dnf upgrade --refresh when repository metadata needs to be fetched again. DNF displays the package set, download size, installed size, and final confirmation prompt. Read that summary before entering y. Keep the terminal session attached to reliable console access, and avoid interrupting the transaction while packages are being installed or scripts are running.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

A normal upgrade is the broadest routine option: it includes security updates as well as bug fixes and enhancements. It may update user-space libraries, daemons, development components, firmware-related packages, and the kernel. After DNF finishes, retain the transaction output and package history with the change record. If a script reports an error, stop and investigate the failed package scripts and dependency state before attempting another broad upgrade.

Use a security-only transaction when policy requires it

Some environments permit only packages associated with published security advisories during an emergency window. The DNF security workflow for RHEL-compatible systems is:

sudo dnf update --security

This command depends on advisory metadata being available in the enabled repositories. Confirm that your repository sources publish security advisories; a repository that provides RPMs without update metadata cannot reliably filter the transaction by advisory. Security-only mode narrows the scope, but it is not a substitute for the normal update cadence: non-security bug fixes and enhancements can remain outstanding, and dependencies required by a security update may still be included.

Preview the security transaction, document the advisories or packages selected by your repository tooling, and use the same backup, approval, and verification controls as for a full upgrade.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Decide whether services or the whole server must restart

Installing a new package does not replace code already loaded into a running process. Rocky Linux’s administration guidance states that after a dnf update, running processes continue with the old binaries. Run:

sudo dnf needs-restarting

Use its results to identify processes that should be restarted. Restart an individual service when that is sufficient and your change procedure permits it. A service restart is usually less disruptive than rebooting the host, but it still requires an application health check and a plan for in-flight connections.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Schedule a full reboot when the transaction updates the kernel, systemd, glibc, or another core component for which a complete restart is the appropriate way to load new code. A kernel package can be installed without changing the kernel that is currently running; only a reboot selects the new kernel. In a high-availability or clustered system, drain or fail over one node, reboot it, verify it, and only then proceed to the next node. Never reboot all members of a service pool at once.

Verify the result after the transaction

Verification is part of the update, not an optional postscript. Recheck the running kernel and installed kernel packages:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
uname -r
rpm -q kernel

Then work through the service and application checks appropriate to the host:

  • Confirm every expected systemd service is active and has not entered a failed state.
  • Check that required listening ports are present and reachable from the permitted networks.
  • Verify storage mounts, encrypted volumes, scheduled jobs, and network routes.
  • Run the application’s own health endpoint, smoke test, or representative transaction.
  • Review system, package-manager, and application logs for failed scripts, permission changes, repeated crashes, or authentication errors.
  • Confirm monitoring and backup agents have reconnected and are reporting fresh data.

Record the final kernel, package, and Rocky minor-release values, the transaction result, service restarts, reboot time, validation checks, and any follow-up work. This record makes the next maintenance window faster and supplies the evidence needed for an audit or incident review.

Automate updates with dnf-automatic

Rocky Linux documents dnf-automatic for scheduled patching. Install the package and open its configuration file:

sudo dnf install dnf-automatic
sudoedit /etc/dnf/automatic.conf

Choose the behavior that matches your change-control policy. The tool can notify administrators, download packages without installing them, or apply updates automatically. Configure the required mode in /etc/dnf/automatic.conf, then enable its systemd timer:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
sudo systemctl enable --now dnf-automatic.timer

The Rocky guide describes a daily timer with a randomized delay and persistent execution after downtime. The randomized delay helps prevent a fleet from starting identical work at the same instant, while persistent execution lets a missed run occur after the machine returns. Confirm the actual timer state and review the resulting logs through your normal systemd and monitoring procedures.

Notify-only scheduling

Use notification-only mode when an administrator must approve every change. The timer discovers available updates and alerts the responsible team; an operator then previews and applies the transaction during an approved window. This provides scheduling without unattended package changes.

Download-only scheduling

Download-only mode separates network and repository work from installation. Packages can be fetched during a low-impact period and installed later under a change ticket. You still need to review the transaction at installation time because dependencies, exclusions, and repository state can change.

Automatic application

Unattended application reduces the time a host remains exposed to known fixes, but it demands the strongest safeguards. Test the configuration on a representative server before broad rollout, keep transaction logs, alert on failures, and define how service restarts and reboots are handled. Installing packages automatically does not guarantee that a kernel or a process using old libraries has been restarted.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose an update approach by risk and scale

Approach Package scope Automation level Restart impact Best operational fit
Manual full upgrade Security, bug-fix, and enhancement packages Operator runs and approves dnf upgrade Operator evaluates dnf needs-restarting, restarts services, and schedules a reboot when required Servers that require an explicit maintenance window and transaction review
Manual security-only update Packages selected through available security advisory metadata Operator runs and approves dnf update --security Same restart assessment as a full update Emergency or tightly scoped security windows; not a replacement for regular full maintenance
Automatic notification Updates discovered by the configured DNF policy Timer notifies; administrator applies Handled during the approved follow-up window Strict change control with a desire for daily visibility
Automatic download Updates selected by the configured DNF policy and downloaded in advance Timer downloads; administrator installs Handled when installation is approved Sites that want shorter installation windows without unattended changes
Unattended automatic application Updates selected by the configured DNF policy and installed by the timer Timer applies packages automatically Package installation still does not equal a reboot; service and kernel handling must be planned separately Large fleets with tested policy, strong monitoring, and a documented recovery process

For a fleet, begin with a representative host, inspect its transaction and application behavior, then expand in controlled batches. Keep at least one healthy node serving traffic in a clustered service, and pause the rollout if monitoring shows a regression.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot common update problems

DNF reports no updates

Refresh metadata and inspect enabled repositories. If the host is on a superseded Rocky 9 minor release or points at a vault snapshot, it may not see current fixes. Confirm the Rocky release and repository definitions before concluding that the machine is current.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

The transaction proposes surprising removals or conflicts

Return to dnf upgrade --assumeno and inspect dependencies, exclusions, enabled repositories, and package replacements. Do not force a transaction simply to make the prompt disappear. Correct an accidental exclusion or repository mismatch, preview again, and obtain approval for any package removal that affects an application.

A package script fails

Preserve the error output and package-manager logs. Check disk space, filesystem health, service state, and the exact package named in the failure. Avoid rebooting until you know whether the package database and boot artifacts are consistent. Use the approved recovery or snapshot procedure if the host cannot be returned to a known-good state.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Applications still use old libraries

This is expected when a running process has loaded an older binary. Run dnf needs-restarting, restart the affected service when safe, and schedule a reboot if core components or the kernel were updated.

A reboot would risk availability

For clustered or high-availability systems, fail over or drain one node, update and validate it, then restore it to service before moving on. If no redundancy exists, schedule an explicit outage and verify console access before rebooting.

Do not treat a major-version move as a routine update

Rocky Linux’s supported-upgrade guidance does not support an in-place major-version change such as Rocky Linux 8 to Rocky Linux 9. The supported path is a fresh Rocky Linux 9 installation, followed by migration of configuration and data, application validation, and the normal dnf upgrade process on the new system.

A fresh installation changes the project from package maintenance to migration planning. Inventory services, credentials, firewall rules, storage, scheduled tasks, and monitoring before the cutover. Test the migrated system, keep the old host available for rollback according to your policy, and switch traffic only after health checks pass. Once the new Rocky Linux 9 host is serving production, keep it on the newest supported 9.x minor release with the maintenance process described above.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A repeatable operating cadence

Use this sequence for every maintenance cycle:

  1. Confirm the host is Rocky Linux 9 and record its current minor release, kernel, and package state.
  2. Confirm backups or snapshots, console access, repository health, an approved window, and a rollback plan.
  3. Preview available work with dnf check-update or dnf upgrade --assumeno; add --refresh when metadata must be refreshed.
  4. Apply sudo dnf upgrade, or the approved sudo dnf update --security transaction when policy requires security-only scope.
  5. Review the transaction output and logs, including dependency changes, exclusions, removals, and failed scripts.
  6. Run dnf needs-restarting; restart individual services and reboot when the kernel or core components require it.
  7. Verify the kernel, services, application checks, ports, mounts, logs, and monitoring.
  8. Record the change and schedule the next cycle. Do not defer maintenance until the installed minor release has moved to the vault.

This cadence keeps routine patching, security-only response, restart decisions, and lifecycle management as separate, auditable decisions instead of one risky command run without verification.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.