{"id":48736,"date":"2022-08-15T22:35:24","date_gmt":"2022-08-15T22:35:24","guid":{"rendered":"https:\/\/linuxiac.com\/?p=48736"},"modified":"2022-08-15T22:45:51","modified_gmt":"2022-08-15T22:45:51","slug":"how-to-set-up-automatic-updates-on-rocky-linux-almalinux","status":"publish","type":"post","link":"https:\/\/linuxiac.com\/how-to-set-up-automatic-updates-on-rocky-linux-almalinux\/","title":{"rendered":"How to Set up Automatic Updates on Rocky Linux \/ AlmaLinux"},"content":{"rendered":"\n<p>One central part of keeping Linux servers secure is installing security updates on time. Therefore, keeping the system up to date is one of the most critical tasks for Linux administrators.<\/p>\n\n\n\n<p>One of the most common approaches used by Linux system administrators is manually installing security updates. However, the problem with this approach is that it cannot ensure consistent regularity. <\/p>\n\n\n\n<p>In other words, if the administrator forgets or is prevented for some reason from performing this action, it can lead to serious security threats.<\/p>\n\n\n\n<p>Fortunately, RHEL-based Linux derivatives like <a href=\"https:\/\/linuxiac.com\/rocky-linux-9-0-is-here-with-10-years-of-support\/\">Rocky Linux<\/a> and <a href=\"https:\/\/linuxiac.com\/almalinux-9-is-now-available-for-download-this-is-whats-new\/\">AlmaLinux<\/a> provide a ready-made solution to deal with this case that can be quickly and easily implemented without much effort. As a result, the security of your Linux system will be strengthened. So let us show you how.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-set-up-automatic-updates-on-rocky-linux-almalinux\">Set up Automatic Updates on Rocky Linux \/ AlmaLinux<\/h2>\n\n\n\n<p>To enable automatic updates on your Rocky Linux or AlmaLinux system, you need to install the <code>dnf-automatic<\/code> package and then configure it according to your needs. So let&#8217;s first install it using the following <a href=\"https:\/\/linuxiac.com\/dnf-command-linux\/\">DNF command<\/a>:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code lang=\"bash\" class=\"hljs language-bash\">sudo dnf install dnf-automatic<\/code><\/span><\/pre>\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-install.png\"><img decoding=\"async\" width=\"1024\" height=\"949\" src=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-install-1024x949.png\" alt=\"Installing the dnf-automatic package on Rocky Linux \/ AlmaLinux\" class=\"wp-image-48745\" srcset=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-install-1024x949.png 1024w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-install-380x352.png 380w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-install-768x712.png 768w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-install.png 1102w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>After installing the dnf-automatic package, you should edit <code>\/etc\/dnf\/automatic.conf<\/code> to configure the settings. So, use your preferred <a href=\"https:\/\/linuxiac.com\/micro-text-editor\/\">text editor<\/a> to open the file:<\/p>\n\n\n<pre class=\"wp-block-code\"><span><code lang=\"bash\" class=\"hljs language-bash\">sudo vim \/etc\/dnf\/automatic.conf<\/code><\/span><\/pre>\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p>Make sure the <code>apply_updates<\/code> option is set to <code>yes<\/code>. By default, its value is <code>no<\/code>. Otherwise, <code>dnf-automatic<\/code> will download but not install available updates.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure.png\"><img decoding=\"async\" width=\"1024\" height=\"623\" src=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure-1024x623.png\" alt=\"Configure the dnf-automatic package\" class=\"wp-image-48748\" srcset=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure-1024x623.png 1024w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure-380x231.png 380w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure-768x467.png 768w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure.png 1101w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>You can then change the value of the <code>upgrade_type<\/code> option. By default, all packages are updated, but this can be risky if some of your applications are sensitive to updates. So you could change it to only apply security updates by replacing the <code>default<\/code> value with <code>security<\/code>.<\/p>\n\n\n\n<p>However, our recommendation is to stick with the <code>default<\/code> option.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure2.png\"><img decoding=\"async\" width=\"1024\" height=\"524\" src=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure2-1024x524.png\" alt=\"Configure the dnf-automatic package\" class=\"wp-image-48751\" srcset=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure2-1024x524.png 1024w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure2-380x194.png 380w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure2-768x393.png 768w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure2.png 1102w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>Additionally, after each automatic update, you can further configure the options in the <code>[email]<\/code> section if you want to receive email notifications from your Rocky Linux \/ AlmaLinux system.<\/p>\n\n\n\n<p>The next step is optional, but you can configure the <code>dnf-automatic.timer<\/code> service according to your needs if you want. Unlike some systemd services, <code>dnf-automatic<\/code> is implemented as a timer rather than a service that runs in the background perpetuity.<\/p>\n\n\n\n<p>But what are timers? Let us explain. Timers are systemd unit files that end in <code>.timer<\/code> and control <code>.service<\/code> files or events. In other words, they can be used as an alternative to <a href=\"https:\/\/linuxiac.com\/how-to-use-cron-and-crontab-on-linux\/\">cron<\/a>.<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-1\" data-shcb-language-name=\"CSS\" data-shcb-language-slug=\"css\"><span><code lang=\"bash\" class=\"hljs language-css language-bash\"><span class=\"hljs-selector-tag\">sudo<\/span> <span class=\"hljs-selector-tag\">systemctl<\/span> <span class=\"hljs-selector-tag\">edit<\/span> <span class=\"hljs-selector-tag\">dnf-automatic<\/span><span class=\"hljs-selector-class\">.timer<\/span><\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-1\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">CSS<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">css<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<p>In the configuration below, the automatic update process on your Rocky Linux or AlmaLinux system will start between 6:00 am and 7:00 am. The <code>RandomizedDelaySec=60m<\/code> option is used as a random extra time delta to avoid all of your machines updating simultaneously.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure3.png\"><img decoding=\"async\" width=\"1024\" height=\"647\" src=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure3-1024x647.png\" alt=\"Configure the dnf-automatic package\" class=\"wp-image-48754\" srcset=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure3-1024x647.png 1024w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure3-380x240.png 380w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure3-768x485.png 768w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure3.png 1100w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>Finally, to update and enable the <code>dnf-automatic<\/code> service, use the command shown below:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-2\" data-shcb-language-name=\"CSS\" data-shcb-language-slug=\"css\"><span><code lang=\"bash\" class=\"hljs language-css language-bash\"><span class=\"hljs-selector-tag\">sudo<\/span> <span class=\"hljs-selector-tag\">systemctl<\/span> <span class=\"hljs-selector-tag\">enable<\/span> <span class=\"hljs-selector-tag\">--now<\/span> <span class=\"hljs-selector-tag\">dnf-automatic<\/span><span class=\"hljs-selector-class\">.timer<\/span><\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-2\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">CSS<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">css<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><a href=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure4.png\"><img decoding=\"async\" width=\"1024\" height=\"196\" src=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure4-1024x196.png\" alt=\"Enabling automatic updates on Rocky Linux \/ AlmaLinux\" class=\"wp-image-48757\" srcset=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure4-1024x196.png 1024w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure4-380x73.png 380w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure4-768x147.png 768w, https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-configure4.png 1084w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>Use the following command to check the status of the automatic update process:<\/p>\n\n\n<pre class=\"wp-block-code\" aria-describedby=\"shcb-language-3\" data-shcb-language-name=\"PHP\" data-shcb-language-slug=\"php\"><span><code lang=\"bash\" class=\"hljs language-php language-bash\">sudo systemctl <span class=\"hljs-keyword\">list<\/span>-timers dnf-*<\/code><\/span><small class=\"shcb-language\" id=\"shcb-language-3\"><span class=\"shcb-language__label\">Code language:<\/span> <span class=\"shcb-language__name\">PHP<\/span> <span class=\"shcb-language__paren\">(<\/span><span class=\"shcb-language__slug\">php<\/span><span class=\"shcb-language__paren\">)<\/span><\/small><\/pre>\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p>This article taught you how to configure the automatic installation of the updates on your Rocky Linux or AlmaLinux system. The&nbsp;<code>dnf-automatic<\/code>&nbsp;service keeps your system updated and secure by installing the most recent updates and security patches as soon as they become available.<\/p>\n\n\n\n<p>We strongly advise you to use this feature, at the very least, for security updates. Many compromised hosts would have been safe if they had used the <code>dnf-automatic<\/code> tool.<\/p>\n\n\n\n<p>We hope you found this guide helpful. Any suggestions and comments are welcome in the comments section below.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This article shows how to set up the dnf-automatic service to apply updates automatically on a Rocky Linux or AlmaLinux system.<\/p>\n","protected":false},"author":10,"featured_media":48739,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,4417],"tags":[3248,2039,3254,3374],"class_list":["post-48736","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tips","category-linux-knowledge","tag-almalinux","tag-automatic-updates","tag-rocky-linux","tag-security"],"blocksy_meta":{"post_title_panel":"","has_hero_section":"default","6d31c61c2fd1ce6ac3aece30aaaea5ed":"","hero_section":"type-2","hero_elements":[{"id":"custom_title","enabled":true,"heading_tag":"h1","title":"Home","__id":"p8Gs6j0jpYOcX0UCtfgWk"},{"id":"custom_description","enabled":false,"description_visibility":{"desktop":true,"tablet":true,"mobile":false},"__id":"88AihYec0_txmkO4Alfa_"},{"id":"custom_meta","enabled":true,"meta_elements":[{"id":"author","enabled":true,"label":"By","has_author_avatar":"yes","avatar_size":50,"__id":"2vHxJK_gJ_qGSbneLUzkB"},{"id":"post_date","enabled":true,"label":"On","date_format_source":"default","date_format":"M j, Y","__id":"GTw-qj0aPIb3qJ_G_f30u"},{"id":"updated_date","enabled":false,"label":"On","date_format_source":"default","date_format":"M j, Y","__id":"t231JeFDYnIPZQ-yY6H55"},{"id":"categories","enabled":false,"label":"In","style":"simple","__id":"Jwr-MfM043Ctdsl6dba95"},{"id":"comments","enabled":true,"__id":"KVkeKZxYvqSoeNAF4UuC7"}],"page_meta_elements":{"joined":true,"articles_count":true,"comments":true},"__id":"Q0b-L4WS57L2dhHBQ4Fvc","meta_divider":"circle"},{"id":"breadcrumbs","enabled":false,"__id":"3R_NKfTFA5T-EV8f7SFPN"}],"010e7362bf306c7237bbb3bf93f20a32":"","hero_alignment1":"CT_CSS_SKIP_RULE","hero_margin":40,"hero_alignment2":"center","hero_vertical_alignment":"center","dd2c01cc66f67d8ee64897851caa4cbb":"","hero_structure":"normal","4394b049c7e590d98f8b4fe2fbc6e0dd":"","page_title_bg_type":"custom_image","custom_hero_background":{"attachment_id":48742,"url":"https:\/\/linuxiac.com\/wp-content\/uploads\/2022\/08\/rocky-alma-autoupdate-header-1024x237.jpg"},"page_title_image_size":"full","parallax":{"desktop":false,"tablet":false,"mobile":false},"4c5fce1db9eaeacacff1bbb4024395f1":"","hero_height":"250px","pageTitleFont":{"family":"Default","variation":"Default","size":{"desktop":"2.8em","tablet":"2.8em","mobile":"2.8em","__changed":[]},"line-height":"CT_CSS_SKIP_RULE","letter-spacing":"CT_CSS_SKIP_RULE","text-transform":"CT_CSS_SKIP_RULE","text-decoration":"CT_CSS_SKIP_RULE"},"pageTitleFontColor":{"default":{"color":"CT_CSS_SKIP_RULEDEFAULT"}},"pageMetaFont":{"family":"Default","variation":"n6","size":"12px","line-height":"1.3","letter-spacing":"CT_CSS_SKIP_RULE","text-transform":"uppercase","text-decoration":"CT_CSS_SKIP_RULE"},"pageMetaFontColor":{"default":{"color":"CT_CSS_SKIP_RULEDEFAULT"},"hover":{"color":"CT_CSS_SKIP_RULEDEFAULT"}},"page_meta_button_type_font_colors":{"default":{"color":"CT_CSS_SKIP_RULEDEFAULT"},"hover":{"color":"CT_CSS_SKIP_RULEDEFAULT"}},"page_meta_button_type_background_colors":{"default":{"color":"CT_CSS_SKIP_RULEDEFAULT"},"hover":{"color":"CT_CSS_SKIP_RULEDEFAULT"}},"pageExcerptFont":{"family":"Default","variation":"Default","size":"CT_CSS_SKIP_RULE","line-height":"CT_CSS_SKIP_RULE","letter-spacing":"CT_CSS_SKIP_RULE","text-transform":"CT_CSS_SKIP_RULE","text-decoration":"CT_CSS_SKIP_RULE"},"pageExcerptColor":{"default":{"color":"CT_CSS_SKIP_RULEDEFAULT"}},"breadcrumbsFont":{"family":"Default","variation":"Default","size":"CT_CSS_SKIP_RULE","line-height":"CT_CSS_SKIP_RULE","letter-spacing":"CT_CSS_SKIP_RULE","text-transform":"CT_CSS_SKIP_RULE","text-decoration":"CT_CSS_SKIP_RULE"},"breadcrumbsFontColor":{"default":{"color":"CT_CSS_SKIP_RULEDEFAULT"},"initial":{"color":"CT_CSS_SKIP_RULEDEFAULT"},"hover":{"color":"CT_CSS_SKIP_RULEDEFAULT"}},"pageTitleOverlay":{"background_type":"color","background_pattern":"type-1","background_image":{"attachment_id":null,"x":0,"y":0},"gradient":"linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%)","background_repeat":"repeat","background_size":"auto","background_attachment":"scroll","patternColor":{"default":{"color":"#e5e7ea"}},"overlayColor":{"default":{"color":"CT_CSS_SKIP_RULE"}},"backgroundColor":{"default":{"color":"CT_CSS_SKIP_RULE"}}},"pageTitleBackground":{"background_type":"color","background_pattern":"type-1","background_image":{"attachment_id":null,"x":0,"y":0},"gradient":"linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%)","background_repeat":"repeat","background_size":"auto","background_attachment":"scroll","patternColor":{"default":{"color":"#e5e7ea"}},"overlayColor":{"default":{"color":"CT_CSS_SKIP_RULE"}},"backgroundColor":{"default":{"color":"var(--theme-palette-color-6)"}}},"pageTitlePadding":{"top":"50px","bottom":"50px","left":"auto","right":"auto","linked":true},"906b4e618e207eccfa06c8a6f83df003":"","page_structure_type":"default","50c1e87777a90f4c3bc05be68dc38710":"","content_style_source":"inherit","content_style":"wide","ba51a8020af3183cde0bce87cc898f28":"","vertical_spacing_source":"inherit","content_area_spacing":"both","background":{"background_type":"color","background_pattern":"type-1","background_image":{"attachment_id":null,"x":0,"y":0},"gradient":"linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%)","background_repeat":"repeat","background_size":"auto","background_attachment":"scroll","patternColor":{"default":{"color":"#e5e7ea"}},"overlayColor":{"default":{"color":"CT_CSS_SKIP_RULE"}},"backgroundColor":{"default":{"color":"CT_CSS_SKIP_RULE"}}},"content_background":{"background_type":"color","background_pattern":"type-1","background_image":{"attachment_id":null,"x":0,"y":0},"gradient":"linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%)","background_repeat":"repeat","background_size":"auto","background_attachment":"scroll","patternColor":{"default":{"color":"#e5e7ea"}},"overlayColor":{"default":{"color":"CT_CSS_SKIP_RULE"}},"backgroundColor":{"default":{"color":"var(--theme-palette-color-8)"}}},"content_boxed_shadow":{"inherit":false,"blur":18,"spread":-6,"v_offset":12,"h_offset":0,"inset":false,"enable":true,"color":{"color":"rgba(34, 56, 101, 0.04)"}},"content_boxed_border":{"width":1,"style":"none","color":{"color":"rgba(44,62,80,0.2)"}},"content_boxed_radius":{"top":"3px","bottom":"3px","left":"3px","right":"3px","linked":true},"boxed_content_spacing":{"desktop":{"top":"40px","bottom":"40px","left":"40px","right":"40px","linked":true},"tablet":{"top":"35px","bottom":"35px","left":"35px","right":"35px","linked":true},"mobile":{"top":"20px","bottom":"20px","left":"20px","right":"20px","linked":true}},"5ab30f0f5879d360dcd2d84c0cdddd89":"","disable_featured_image":"no","disable_post_tags":"no","disable_share_box":"no","disable_author_box":"no","disable_posts_navigation":"no","4be6a17c7cc81d2c9fcf6e5ba6899a26":"","disable_related_posts":"no","disable_header":"no","disable_footer":"no","d52d4c21efc0555bc9b6ae83b02c7127":"","header_footer_scripts_panel":"","header_scripts":"","7f83d9bae7890fef20dfdda64e59e690":"","header_after_body_scripts":"","00ab176096d272d2157d3f0165ff14de":"","footer_scripts":"","styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"_links":{"self":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts\/48736","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/comments?post=48736"}],"version-history":[{"count":0,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts\/48736\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/media\/48739"}],"wp:attachment":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/media?parent=48736"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/categories?post=48736"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/tags?post=48736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}