Keep every Rocky Linux 9 host on the newest supported 9.x minor release by running a controlled sudo dnf upgrade, reviewing the transaction, and checking restart requirements afterward. Rocky Linux’s release policy says only the latest minor release remains supported and specifically instructs administrators to run sudo dnf upgrade to maintain supported status.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
The release table identified Rocky Linux 9.8 as the latest 9.x release on 28 May 2026. Treat that as a dated reference point: confirm the currently published minor release before each maintenance cycle, because an older 9.x point release can move to the vault and stop receiving fixes.
As an Amazon Associate I earn from qualifying purchases.
What a Rocky Linux 9 update actually does
A normal DNF upgrade brings installed packages to the versions available from your enabled Rocky repositories. That normally includes security fixes, bug fixes, and enhancements rather than security advisories alone. The operation can update libraries, daemons, tools, firmware packages, and the kernel, so it is a change to the operating system rather than a single application patch.
Rocky Linux 9 is supported as a release line, but support applies to the current 9.x minor release. Rocky’s policy lists general and active support through 31 May 2027 and security support through 31 May 2032. When a newer minor release supersedes the one on your server, the older release moves to the vault and no longer receives ordinary bug-fix or security updates.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Normal updates versus security-only updates
| Approach | Command | Scope | When it fits |
|---|---|---|---|
| Full maintenance update | sudo dnf upgrade |
Security, bug-fix, and enhancement packages offered by enabled repositories | Routine server maintenance and maintaining Rocky’s supported status |
| Refresh plus full update | sudo dnf upgrade --refresh |
Same package scope, with repository metadata refreshed first | When metadata is stale, a repository was changed, or the available-update view looks wrong |
| Security-only workflow | sudo dnf update --security |
Packages associated with available security advisories | Change policies that allow only security advisories during a restricted window |
The security-only command depends on advisory metadata being published by and available from the enabled repositories. If that metadata is absent, the result cannot be treated as a complete security inventory; use the repository administrator’s documented advisory source and verify what was actually evaluated.
Before touching packages: prepare the maintenance window
Updates are safest when the host can be observed, recovered, and taken out of service if a package script or reboot exposes an application problem. The preparation is part of the change, not optional paperwork.
Recommended Free Tools
Confirm the operating system and current state
- Display the installed Rocky release with
cat /etc/rocky-release. Confirm that the host is Rocky Linux 9 rather than Rocky Linux 8 or another distribution. - Record the running kernel with
uname -rand list installed kernel packages withrpm -q kernel. Save the output in the change record. - Capture a baseline of important services, listening ports, mounts, and application health checks. The exact checks depend on the workload, but they should be repeatable after the transaction and after any reboot.
- Check enabled repositories with
dnf repolist --enabled. A missing base repository, an unintended third-party repository, or an expired subscription-like source can change the transaction or prevent metadata refresh.
Confirm recovery options
- Verify that current backups can be restored and that the backup includes the application data and configuration the server actually needs.
- Take an approved virtual-machine snapshot or storage snapshot when your platform supports it and when the snapshot is suitable for rollback. A snapshot is not a substitute for an independent backup.
- Keep console or out-of-band access available. If networking, SSH, or a boot component fails, remote shell access alone may not be enough.
- Define the rollback decision before starting. Package downgrades are not a universal undo button, and restoring a snapshot after a database write can have application-level consequences.
- For clustered or high-availability systems, identify which node can be drained first and confirm that another node will remain available.
Check capacity and scheduling
Ensure that the filesystems containing package caches, the installed system, logs, and boot kernels have free space. Schedule a window long enough for downloads, package scripts, service restarts, health checks, and—if required—a reboot. Notify users or upstream systems before draining a production node.
Preview the transaction before approving it
Do not begin by accepting a large transaction blindly. First ask DNF what it sees.
- Run
dnf check-updateto check whether updates are available. Review the package list and note that DNF can use a nonzero status when updates exist; automation should interpret the command’s status correctly rather than treating every nonzero result as a failure. - Run
sudo dnf upgrade --assumenoto calculate the transaction without applying it. Read the package additions, upgrades, removals, dependency changes, and download size. - If repository metadata is suspect, repeat the preview as
sudo dnf upgrade --refresh --assumeno. - Look specifically for excluded packages, disabled repositories, module or stream changes, package removals, and a new kernel. Resolve unexpected changes before the maintenance window rather than improvising at the confirmation prompt.
- Record the preview or export the terminal output into the change record. It gives you a basis for comparing what was planned with what actually installed.
Do not work around a dependency conflict by deleting packages from the command line. Determine which repository or exclusion caused it, and obtain an approved package or repository fix. If a repository is not intended for this host, disable it through the normal repository configuration rather than using ad-hoc flags that will be forgotten on the next run.
Apply a standard Rocky Linux 9 update
Once the preview matches the approved change, apply the transaction from a privileged shell:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
- Run
sudo dnf upgrade. Usesudo dnf upgrade --refreshwhen you have approved a metadata refresh or when the normal preview did not reflect a known repository change. - Read the confirmation summary. Check package counts, removals, downloads, and any notice about configuration files or script failures before entering
y. - Watch the transaction to completion. Do not close the console while packages are being unpacked or scripts are running.
- Review the final output for failed scripts, unresolved dependencies, interrupted downloads, or packages that were skipped because of exclusions.
- Inspect the transaction history with
sudo dnf historyand, when needed,sudo dnf history info <ID>, replacing<ID>with the transaction identifier shown by DNF. - Record the resulting kernel and key package versions. At minimum, run
uname -randrpm -q kernelagain so the record distinguishes the running kernel from kernels installed on disk.
A successful DNF exit code means the package transaction completed; it does not prove that every application is healthy. Continue with process, service, and application validation before returning the host to normal traffic.
Use the security-only workflow when policy requires it
Some organizations permit only fixes associated with security advisories during an emergency or a tightly controlled window. In that case, use sudo dnf update --security after confirming that the enabled repositories provide advisory metadata.
- Check the enabled repository set and confirm that advisory data is available for the host’s repositories.
- Preview the proposed security transaction with
sudo dnf update --security --assumeno. - Review packages that will be updated and any dependencies that DNF must include. Security-only filtering does not mean the transaction has no dependency impact.
- Apply the approved command, then inspect DNF history and package versions as you would for a full update.
- Track what was intentionally deferred. Security-only maintenance can leave bug fixes and enhancements pending, so schedule a full update when change policy permits.
Do not describe a security-only run as a complete patch cycle if advisory metadata was unavailable or if packages were excluded. The record should state the repository scope and the limitations of the scan.
Decide whether services or the whole server must restart
Installing a new package does not replace code already loaded by a running process. Rocky Linux’s administration guidance states: “After running a dnf update, the running processes will continue to run but with the old binaries.” A server can therefore report a completed transaction while daemons continue using pre-update code.
Find processes that need attention
Run dnf needs-restarting after the transaction. Use its output to identify processes that should be restarted. Restart an individual service when that is safe and sufficient for the component, then check its status and application health.
When a reboot is the right choice
Plan a full reboot when the transaction updates the kernel, systemd, glibc, or another core component for which a complete process restart is appropriate under your policy. A reboot is also a straightforward way to ensure that all services load the intended libraries and that the new kernel is actually running.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
- Drain the node from load balancers or cluster schedulers before rebooting.
- Confirm that another high-availability node is healthy and serving traffic.
- Use the approved console or remote-management path and set an expected outage notification.
- After boot, verify the running kernel with
uname -r, then check failed units withsystemctl --failed. - Check service status, listening ports, storage mounts, application probes, logs, and monitoring alerts before restoring traffic.
If the kernel was installed but the running kernel did not change, the package update succeeded but the reboot requirement has not been completed.
Automate recurring patching with dnf-automatic
Rocky Linux documents dnf-automatic for scheduled patching. It can download updates, notify administrators, or apply updates automatically through a systemd timer. The correct mode depends on the server’s change-control requirements; unattended application is not automatically appropriate for every production workload.
Free tools Windows power users keep installed
One-click scans. No signup required.
Install and enable the timer
- Install the package with
sudo dnf install dnf-automatic. - Edit
/etc/dnf/automatic.conf. Select the documented behavior for your policy: automatic application, download-only, or notification-only. Configure notification delivery and repository behavior according to your operational standards. - Enable and start the timer with
sudo systemctl enable --now dnf-automatic.timer. - Inspect the timer with
systemctl list-timers dnf-automatic.timerand verify that the next run is scheduled. - Review the service and timer logs after a test run. Keep transaction logs and route failures to monitoring rather than relying on a silent timer.
Understand the timer’s scheduling behavior
The Rocky guide describes a daily timer with a randomized delay and persistent execution after downtime. The randomized delay prevents a fleet from downloading and installing at exactly the same instant; persistent execution allows a missed run to be attempted after the host returns. Those defaults reduce synchronized load, but they do not replace a staged rollout or a reboot plan.
Roll automation out safely
- Test the configuration on a representative, noncritical host first.
- Start with notification-only or download-only mode when the organization needs an approval gate.
- Use automatic application only where the service owner accepts unattended package changes and has defined restart behavior.
- Roll through small cohorts before broad deployment. Keep one healthy node serving in a cluster while another is patched.
- Alert on failed transactions, low disk space, repository errors, and hosts that have not completed a patch run within the expected interval.
A repeatable maintenance runbook
Use this sequence for a manual cycle or as the checklist around an automated one.
- Confirm the host is Rocky Linux 9 and record its current kernel and important package state.
- Confirm backups, snapshots where approved, console access, repository health, free space, and a rollback plan.
- Check available updates with
dnf check-updateor preview withsudo dnf upgrade --assumeno. - Apply
sudo dnf upgrade,sudo dnf upgrade --refresh, or the approved security-only command. - Review transaction output and DNF history. Investigate failed scripts, dependency changes, removals, and exclusions.
- Run
dnf needs-restarting. Restart individual services where practical and schedule a reboot when the kernel or core components require it. - Verify the running kernel, service status, application checks, logs, storage mounts, ports, and monitoring.
- Record the change, including the transaction identifier, resulting versions, restart decision, and any deferred packages.
- Repeat on the next scheduled cadence rather than waiting for a minor release to approach end of support.
Compare update approaches by risk and scale
| Method | Automation level | Change scope | Restart impact | Change-control profile | Best use |
|---|---|---|---|---|---|
| Manual full upgrade | Operator initiated | All repository-approved updates | Operator checks processes and schedules service restarts or reboot | Strong review and approval at each host | Critical servers, first host in a rollout, or environments requiring hands-on validation |
| Manual security-only update | Operator initiated | Security-advisory packages, subject to advisory metadata | Same restart analysis as a full update | Narrower package scope, but deferred fixes must be tracked | Emergency windows or policies that temporarily prohibit nonsecurity changes |
| dnf-automatic notification-only | Scheduled detection and notification | Reports according to configured update policy | No package-triggered restart because packages are not automatically applied | Approval remains manual | Teams that need daily visibility before approving changes |
| dnf-automatic download-only | Scheduled downloads | Obtains packages without applying them | No service impact during download | Separates network activity from the approved installation window | Sites that want faster, predictable maintenance execution |
| dnf-automatic unattended apply | Scheduled installation | Configured full or security-focused policy | Still requires process checks and an explicit reboot strategy | Requires tested configuration, monitoring, rollback planning, and owner approval | Large fleets with standardized workloads and mature change automation |
Fleet size changes the operational answer. A single host can use a maintenance checklist and console review. A large fleet needs cohorts, randomized scheduling, consistent repository configuration, transaction-log collection, alerting, and a rule that prevents every node in a cluster from restarting together.
Troubleshoot common update problems
DNF reports no updates
Check the Rocky release, enabled repositories, and metadata freshness. Run sudo dnf upgrade --refresh --assumeno. If the host is on an old 9.x minor release or its repositories point to a vault, it may not be receiving supported updates. Correct the repository configuration through your approved process and rerun the preview.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Metadata cannot be downloaded
Verify DNS, routing, proxy settings, repository URLs, credentials where applicable, and system time. Confirm that the repository is intended for Rocky Linux 9 and enabled for this host. Do not approve a partial transaction simply because one repository responded; record which sources failed and resolve the outage.
The transaction proposes unexpected removals or replacements
Stop at the preview. Inspect enabled repositories, exclusions, package streams, and dependency explanations. A third-party repository can provide a version that changes the solver’s result. Disable an unintended source through its normal configuration or obtain an owner-approved compatibility fix before applying packages.
A package script fails
Keep the terminal output and transaction identifier. Do not repeatedly rerun random install commands. Check the failing package’s service, disk space, mounts, and prerequisite state, then follow the package or platform owner’s recovery procedure. After the system is consistent, use DNF history to document what completed and what remains.
A service still uses old code
Run dnf needs-restarting, restart the affected service, and verify its status and logs. If the affected code is part of a core component or the kernel, use the approved reboot procedure instead of assuming that a service restart is enough.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →The server does not return cleanly after reboot
Use console access to identify boot, filesystem, network, or service failures. Confirm which kernel is running and whether the expected mounts and units are available. Keep the node out of production until application probes and monitoring are healthy; use the preapproved recovery or snapshot plan if the host cannot be restored safely.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Know the boundary between Rocky Linux 9 updates and upgrades
dnf upgrade keeps an existing Rocky Linux 9 installation current within the 9.x series. It is not a supported in-place path from Rocky Linux 8 to Rocky Linux 9. Rocky’s supported-upgrade guidance requires a fresh installation for that major-version change, followed by migration of configuration and data and then normal DNF updates on the new Rocky Linux 9 system.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Plan a major-version migration separately
- Build a new Rocky Linux 9 host rather than converting the old major release in place.
- Install the required applications and security controls on the new system.
- Migrate configuration and data using an application-aware procedure.
- Test services, permissions, firewall rules, scheduled jobs, storage, and monitoring before cutover.
- Keep the old host available for the agreed rollback period, then retire it through normal change management.
For a host already on Rocky Linux 9, the immediate supported-maintenance action remains keeping it on the latest available 9.x minor release, not waiting for a major upgrade window.
What to record after every cycle
A useful patch record lets another administrator prove what happened and reproduce the decision. Store the maintenance date and host identity, Rocky release, enabled repository set, preview output, DNF transaction identifier, packages or kernel installed, failed or deferred items, service restarts, reboot result, and post-change health checks. Include the operator or automation job that performed the work and links to the internal incident or change ticket when your system uses them.
Trend the records across the fleet. Hosts that repeatedly miss timer runs, remain on an old minor release, fail repository refreshes, or require manual recovery need remediation rather than another one-off command.
Practical policy for keeping servers current
Set a recurring maintenance cadence that is short enough to avoid accumulating a large transaction, but realistic for application testing and approvals. Use full upgrades for ordinary maintenance, reserve security-only filtering for an explicitly approved exception, and treat every kernel or core-library update as a restart decision rather than merely a download event.
The essential control is simple: verify the host and repositories, preview the transaction, run the approved DNF command, inspect what changed, restart processes that still hold old binaries, reboot when core components warrant it, and verify the workload before closing the change. That sequence keeps Rocky Linux 9 systems aligned with the supported minor release while preserving the evidence and recovery options administrators need.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →
