# How to keep in Rocky linux 9.3 ( not update 9.4)

**URL:** <https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045>\
**Category:** Rocky Linux Help & Support\
**Created:** [May 14, 2024, 6:07am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045 "2024-05-14T06:07:32Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![az1minami](https://avatars.discourse-cdn.com/v4/letter/a/65b543/32.png) [@az1minami](https://forums.rockylinux.org/u/az1minami)\
**Post date:** [May 14, 2024, 6:07am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/1 "2024-05-14T06:07:32Z")

</div>

Congratuation, and thnaks your work 9.4 new reease

but my team using over 600 servers still keep 9.3.  
until 9.4 will stablized and recongized

Add to `/etc/dnf/dnf.conf` something like this: is still useful ?

```auto
exclude=kernel*
excludepkgs=kernel*

```

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [May 14, 2024, 6:13am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/2 "2024-05-14T06:13:15Z")

</div>

Excluding those packages will not stop you from updating to 9.4; that only stops the kernel from updating. You would need to switch to the vault, [which is not a supported configuration](https://wiki.rockylinux.org/rocky/repo/#vault).

[9.3 is no longer supported](https://wiki.rockylinux.org/rocky/version/#__tabbed_1_2) and you are recommended to keep your system up to date.

---

<div class="post-metadata">

**Author:** ![az1minami](https://avatars.discourse-cdn.com/v4/letter/a/65b543/32.png) [@az1minami](https://forums.rockylinux.org/u/az1minami)\
**Post date:** [May 14, 2024, 7:03am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/3 "2024-05-14T07:03:17Z")

</div>

Thanks！reply . and suppiort.

but i tested 9.3 azure snapshot .  
dnf update made kernel 9.4. 😂 😂

cat /etc/os-release | grep ROCKY\_SUPPORT\_PRODUCT\_VERSION  
ROCKY\_SUPPORT\_PRODUCT\_VERSION=“9.4”

/var/log/dnf.log told , exclude was fine.  
2024-05-14T15:48:59+0900 DEBUG Excludes in dnf.conf: kernel\*  
[root@RL-MASTER log]# cat /etc/dnf/dnf.conf  
[main]  
gpgcheck=1  
installonly\_limit=3  
clean\_requirements\_on\_remove=True  
best=True  
skip\_if\_unavailable=False

exclude=kernel\*  
excludepkgs=kernel\*

---

<div class="post-metadata">

**Author:** ![az1minami](https://avatars.discourse-cdn.com/v4/letter/a/65b543/32.png) [@az1minami](https://forums.rockylinux.org/u/az1minami)\
**Post date:** [May 14, 2024, 8:03am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/4 "2024-05-14T08:03:48Z")

</div>

“Excluding those packages will not stop you from updating to 9.4;”  
is meaning " dnf update makes 9.3 to 9.4 " ?

“that only stops the kernel from updating.”  
is meaning " when in kernel 9.3 installing some products, mysql,psql or php.kernel module excude 9.3 patch " ?

---

<div class="post-metadata">

**Author:** ![az1minami](https://avatars.discourse-cdn.com/v4/letter/a/65b543/32.png) [@az1minami](https://forums.rockylinux.org/u/az1minami)\
**Post date:** [May 14, 2024, 8:53am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/5 "2024-05-14T08:53:01Z")

</div>

Thanks your support.

_exclude=kernel,rocky_\*\*  
_excludepkgs=kernel,rocky_\*\*

protected !

cat /etc/os-release | grep REDHAT\_SUPPORT\_PRODUCT\_VERSION  
REDHAT\_SUPPORT\_PRODUCT\_VERSION=“9.3”

dnf update

## Last metadata expiration check: 0:06:08 ago on Tue May 14 17:43:54 2024. Dependencies resolved. Nothing to do. Complete!

mod /etc/dnf/dnf.conf , exclude ,excludepackages, to comment  
we can check  
dnf check-update kernel\*  
Last metadata expiration check: 0:07:25 ago on Tue May 14 17:43:54 2024.

kernel.x86\_64 5.14.0-427.16.1.el9\_4 baseos  
kernel-core.x86\_64 5.14.0-427.16.1.el9\_4 baseos  
kernel-modules.x86\_64 5.14.0-427.16.1.el9\_4 baseos  
kernel-modules-core.x86\_64 5.14.0-427.16.1.el9\_4 baseos  
kernel-tools.x86\_64 5.14.0-427.16.1.el9\_4 baseos  
kernel-tools-libs.x86\_64 5.14.0-427.16.1.el9\_4 baseos  
[root@RL-MASTER log]# dnf check-update rocky\*  
Last metadata expiration check: 0:07:32 ago on Tue May 14 17:43:54 2024.

rocky-gpg-keys.noarch 9.4-1.5.el9 baseos  
rocky-logos.x86\_64 90.15-2.el9 appstream  
rocky-release.noarch 9.4-1.5.el9 baseos  
rocky-repos.noarch 9.4-1.5.el9 baseos  
[root@RL-MASTER log]#

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [May 14, 2024, 9:06am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/6 "2024-05-14T09:06:12Z")

</div>

All you did was stop the kernel installing and stop rocky-release from saying it’s Rocky 9.4. The remainder of packages that are updated are still 9.4. So your system is Rocky 9.4, except the fact rocky-release was blocked by you. So doesn’t really mean you are on 9.3 at all.

If you wanted to stay on 9.3, you just change the /etc/yum.repos.d/\*.repo files to point to the vault and 9.3. But that isn’t recommend, since you no longer get updates, and have vulnerable systems as well without bug fixes and security fixes.

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [May 14, 2024, 9:08am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/7 "2024-05-14T09:08:28Z")

</div>

> How to keep in Rocky linux 9.3 ( not update 9.4)

Easy. Do _nothing_. Don’t run update. Don’t install any more packages.

(Naturally, your system is unsupported and new security vulnerabilities will be discovered in it, but that is what you want?)

---

<div class="post-metadata">

**Author:** ![Ritov](https://avatars.discourse-cdn.com/v4/letter/r/3ec8ea/32.png) [@Ritov](https://forums.rockylinux.org/u/Ritov)\
**Post date:** [May 14, 2024, 9:15am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/8 "2024-05-14T09:15:44Z")

</div>

@az1minami - what is actually your problem that you want to be addressed?

If you want stability then you should update to the current and only supported version - the latest available one. Everything else will destabilize over time, especially in terms of security.

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [May 14, 2024, 11:31am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/9 "2024-05-14T11:31:15Z")

</div>

@Ritov I’d guess that the “actual problem” behind

> [@az1minami](#):
>
> until 9.4 will stablized and recongized

is some of:

- Incomplete comprehension of what “stable” means in Enterprise Linux
- Use of third-party packages that are not (yet) in sync with el9\_4
- Third-party applications that have hardcoded _is this supported platform_ checks – for _“reasons”_

Third parties rebuild their packages/repos when they do. The trivial (but not the safest) solution is to not update before they have done their part.  
Third-party (proprietary) vendors might need _incentives_ (e.g. “I’ll take my money elsewhere”) to abandon their “no exact X.Y → no support” practices. Again, _no update, no change_ will help temporarily.

One can let test system to update completely and then run test to verify that everything still functions correctly. It either does, or doesn’t. If it does, then perhaps Neo starts to believe … (in Rocky)

---

<div class="post-metadata">

**Author:** ![Ritov](https://avatars.discourse-cdn.com/v4/letter/r/3ec8ea/32.png) [@Ritov](https://forums.rockylinux.org/u/Ritov)\
**Post date:** [May 14, 2024, 12:10pm UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/10 "2024-05-14T12:10:07Z")

</div>

@jlehtone - sure - everything valid. The OP didn’t provided the problem description. So, hardly to tell if the underlying problem is actually the 9.4 compose or just a coincidence.

---

<div class="post-metadata">

**Author:** ![az1minami](https://avatars.discourse-cdn.com/v4/letter/a/65b543/32.png) [@az1minami](https://forums.rockylinux.org/u/az1minami)\
**Post date:** [May 15, 2024, 6:59am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/11 "2024-05-15T06:59:42Z")

</div>

Thank you for your advice and opinions.  
Thanks your time to spend us.

We do not trying to block 9.4 development or dislike updates.  
Once again, I would like to express my gratitude to the developers.

Specifying the OS version is very important when delivering products to customers.

We know about,  
There may be other items to check besides the contents of the /etc/os-release file.  
and it would be dangerous to determine the OS version based only on the LOGIN banner version.

However, “os-release, login banner” is a confirmation requirement for “systems”

“keeping repository” no-requirement, old version php and psql,mysql ando more , reasone is products ownd repository was installed.

The 9.4 update Projects will start after the delivery of 9.3.  
In this case, the customer will incur the cost.

Stopped delivary 9.3 and re-configure , test applications. taking cost is … Customer will not pay for us.

Fortunately, the service outage is minimal for updates 9.3-\>9,4.  
In case there is no version update of Psql, mysql, etc.

The preliminary test for updating from 9.3 to 9.4 requires the same steps and requires a certain amount of man-hours.

Customers will not hope to pay the cost of throwing away all previous 9.3 test results and restarting over.

Due to the end of support for CentOS7, 9.3 was selected as the migration destination.

The release of 9.4 , support for 9.3 ended, so we will be retesting and preparing for rockylinux 9.4 on over 600 machines after delivary 9.3.

temporary freezes on 9.3, it’s still somewhat better than continuing to use CentOS7.

If a super critical issue is reported with CVE-nnnn-nnnn and the only option is to upgrade to 9.4,I will not hesitate to upgrade to 9.4.

Once again, would like to express my gratitude to the developers.

regards and Thanks!

---

<div class="post-metadata">

**Author:** ![nouvo09](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/nouvo09/32/2920_2.png) [@nouvo09](https://forums.rockylinux.org/u/nouvo09)\
**Post date:** [May 20, 2024, 4:52pm UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/12 "2024-05-20T16:52:28Z")

</div>

Set all repos to “disable” it’s done.

---

<div class="post-metadata">

**Author:** ![AJCxZ0](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/ajcxz0/32/2289_2.png) [@AJCxZ0](https://forums.rockylinux.org/u/AJCxZ0)\
**Post date:** [May 20, 2024, 11:14pm UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/13 "2024-05-20T23:14:11Z")

</div>

> [@az1minami](#):
>
> Specifying the OS version is very important when delivering products to customers.

You appear to have a fundamental misunderstanding of how versions and releases of Enterprise Linux work, as mentioned by @jlehtone. This is easily remedied by understanding that while you may have installed the _release_ 9.3, you are running _version_ 9 and will continue to do so until you replace it.

While keeping your systems which are running EL9 up-to-date, as you should, you will notice that tools and files which report release versions will increment minor versions as all the installed packages which constitute your installed platform, including the “release” package(s) which contains this detail, are updated.

```sh
$ rpm -ql $( rpm -qf /etc/os-release )

```

Now that you understand, you should be able to explain to your customers how you, as a responsible provider, keep your installed EL9 platforms stable and secure with regular (and occasionally irregular) updates (with a suitable acceptance testing, QA, etc. process).

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [May 21, 2024, 6:27am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/14 "2024-05-21T06:27:16Z")

</div>

No sane customer should accept release 9.3-based anything any more. It was known already last year that 9.3 is dead this month.

* * *

Rocky did build and test the entire 9.4 within couple weeks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [July 20, 2024, 6:27am UTC](https://forums.rockylinux.org/t/how-to-keep-in-rocky-linux-9-3-not-update-9-4/14045/15 "2024-07-20T06:27:35Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
