RHEL 10 – dnf metadata expiration causing stale package results – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Package searches and updates return outdated versions, delaying security patching and causing dependency confusion.

Environment & Reproduction

Observed on RHEL 10 hosts behind mirrors or proxies with aggressive caching.

cat /etc/redhat-release
dnf repolist
dnf check-update

Root Cause Analysis

Expired or inconsistent cache metadata, proxy cache stickiness, or repo sync lag can present stale package indexes.

Quick Triage

Validate cache age and active repo state quickly.

dnf clean metadata
dnf makecache
dnf repoinfo

Step-by-Step Diagnosis

Confirm repo freshness and compare package visibility after clean cache operations.

dnf clean all
dnf makecache --refresh
dnf list --showduplicates openssl

Solution – Primary Fix

Refresh metadata, validate mirror responsiveness, and re-run update workflow.

dnf clean all
dnf makecache --refresh
dnf upgrade -y

Solution – Alternative Approaches

Pin to known-good internal mirrors or temporarily disable failing repos.

dnf config-manager --set-disabled problematic-repo
dnf config-manager --set-enabled rhel-10-baseos

Verification & Acceptance Criteria

New package versions appear and upgrade transactions resolve without stale metadata errors.

dnf check-update
dnf info openssl
journalctl -u dnf-makecache --since '30 min ago'

Rollback Plan

Restore previous repo config and cached state if downstream tooling depends on prior snapshots.

cp -a /etc/yum.repos.d /etc/yum.repos.d.bak
dnf clean all
dnf makecache

Prevention & Hardening

Schedule metadata refresh and monitor mirror freshness to prevent stale package windows.

systemctl status dnf-makecache.timer
systemctl enable --now dnf-makecache.timer

Related Errors & Cross-Refs

Can overlap with subscription entitlement drift, repo GPG failures, and proxy timeout issues.

Related tutorial: View the step-by-step tutorial for rhel-10.

View all rhel-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Red Hat documentation for dnf cache behavior, repository management, and update lifecycle.