π ~1 min read
Table of contents
Symptom & Impact
Expected patch automation does not occur, increasing security exposure windows.
Environment & Reproduction
dnf-automatic timer active but configured for download-only behavior.
systemctl status dnf-automatic.timer
dnf-automatic --help
Root Cause Analysis
apply_updates is disabled or timer executes wrong service unit profile.
Quick Triage
Inspect automatic.conf and timer targets.
grep -E 'apply_updates|download_updates' /etc/dnf/automatic.conf
systemctl list-timers | grep dnf
Step-by-Step Diagnosis
Check timer execution logs and transaction history.
journalctl -u dnf-automatic.service -n 120
dnf history list

Solution – Primary Fix
Enable apply_updates and ensure correct timer is enabled.
Still having issues? Our IT Solutions & Services team can diagnose and resolve this for you. Get in touch for a free consultation.
sudo sed -i 's/^apply_updates.*/apply_updates = yes/' /etc/dnf/automatic.conf
sudo systemctl enable --now dnf-automatic.timer

Solution – Alternative Approaches
Run staged patching via orchestration if automatic direct install is not allowed.
Verification & Acceptance Criteria
Subsequent timer runs perform package upgrades successfully.
systemctl start dnf-automatic.service
dnf history info last
Rollback Plan
Switch back to download-only mode if business policy requires manual approval.
Prevention & Hardening
Alert on stale patch levels and failed automatic transactions.
Related Errors & Cross-Refs
Related to reboot-required workflows and package lock policies.
Related tutorial: View the step-by-step tutorial for oracle-linux-10.
View all oracle-linux-10 tutorials on the Tutorials Hub β
Browse all common problems & solutions on the Tutorials Hub.
References & Further Reading
dnf-automatic service profiles and enterprise patch management practices.
Need Expert Help?
If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today β we respond within one business day.