📖 ~1 min read
Table of contents
Symptom & Impact
`dnf-automatic.timer` is active yet no security updates are installed.
Environment & Reproduction
Caused by default conf having `apply_updates = no` in /etc/dnf/automatic.conf.
Root Cause Analysis
Default config downloads but does not apply security updates.
Quick Triage
Inspect /etc/dnf/automatic.conf and timer status.
Step-by-Step Diagnosis
Confirm `apply_updates` setting and timer last-run via `systemctl list-timers`.

Solution – Primary Fix
Set `apply_updates = yes` and restart `dnf-automatic.timer`.
Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.

Solution – Alternative Approaches
Run `dnf-automatic.service` manually to validate before relying on the timer.
Verification & Acceptance Criteria
Security updates install on schedule and journal logs success.
Rollback Plan
Revert `apply_updates` to `no` if reboots become disruptive.
Prevention & Hardening
Schedule reboot policy when applying kernel updates.
Related Errors & Cross-Refs
Linked to crash-only services that require restart after library updates.
Related tutorial: View the step-by-step tutorial for centos-stream-10.
View all centos-stream-10 tutorials on the Tutorials Hub →
Browse all common problems & solutions on the Tutorials Hub.
References & Further Reading
dnf-automatic manual for CentOS Stream 10.
Need Expert Help?
If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.