🟡 Medium   ⏱ 5–30 min  Last verified: 20 May 2026
Affected versions: Oracle Linux 10

📖 ~1 min read

Table of contents
  1. Symptom & Impact
  2. Environment & Reproduction
  3. Root Cause Analysis
  4. Quick Triage
  5. Step-by-Step Diagnosis
  6. Solution – Primary Fix
  7. Solution – Alternative Approaches
  8. Verification & Acceptance Criteria
  9. Rollback Plan
  10. Prevention & Hardening
  11. Related Errors & Cross-Refs
  12. References & Further Reading

Symptom & Impact

Expected unattended security updates do not run, leaving systems exposed between maintenance windows.

Environment & Reproduction

Occurs when timer is disabled, masked, or config has `apply_updates = no`.

systemctl status dnf-automatic.timer
grep -E 'apply_updates|upgrade_type' /etc/dnf/automatic.conf
dnf updateinfo summary

Root Cause Analysis

The automation unit is inactive or misconfigured, so periodic update transactions never execute.

Quick Triage

Inspect timer schedule and recent run attempts.

systemctl list-timers | grep dnf
journalctl -u dnf-automatic -n 80 --no-pager
dnf repolist

Step-by-Step Diagnosis

Verify timer unit dependencies and configuration syntax.

systemctl cat dnf-automatic.timer
systemctl cat dnf-automatic.service
python3 -m configparser /etc/dnf/automatic.conf 2>/dev/null || true
Illustrative mockup for oracle-linux-10 — terminal_or_shell
Checking dnf-automatic timer state — Illustrative mockup — Progressive Robot

Solution – Primary Fix

Configure automatic security application and enable timer.

Still having issues? Our Managed IT Services team can diagnose and resolve this for you. Get in touch for a free consultation.

sudo sed -i 's/^apply_updates.*/apply_updates = yes/' /etc/dnf/automatic.conf
sudo sed -i 's/^upgrade_type.*/upgrade_type = security/' /etc/dnf/automatic.conf
sudo systemctl enable --now dnf-automatic.timer
sudo systemctl start dnf-automatic.service
Illustrative mockup for oracle-linux-10 — log_or_config
Enabling timer and configuring apply_updates — Illustrative mockup — Progressive Robot

Solution – Alternative Approaches

Use orchestrated patching with Ansible while keeping timer for cache refresh only.

sudo sed -i 's/^apply_updates.*/apply_updates = no/' /etc/dnf/automatic.conf
sudo systemctl restart dnf-automatic.timer

Verification & Acceptance Criteria

Timer is active, next run is scheduled, and logs show successful transactions.

systemctl is-active dnf-automatic.timer
systemctl list-timers dnf-automatic.timer
journalctl -u dnf-automatic -n 40 --no-pager

Rollback Plan

Disable timer if unexpected package changes impact production.

sudo systemctl disable --now dnf-automatic.timer
sudo dnf history list | head -n 20

Prevention & Hardening

Monitor unattended update outcomes and notify on failed transactions.

Automate patch management and compliance across your fleet with our DevOps services.

dnf updateinfo list security
systemctl status dnf-automatic.timer

Related to subscription entitlement failures, mirror reachability issues, and package GPG problems.

Related tutorial: View the step-by-step tutorial for oracle-linux-10.

View all oracle-linux-10 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

RHEL automatic updates and lifecycle patching documentation for enterprise operations.

Need Expert Help?

If you cannot resolve this yourself, our team offers hands-on Server Management, Managed IT Services, and flexible Support Plans. Contact us today — we respond within one business day.