Rocky Linux 10.2 has been released

3 min read

Rocky Linux 10.2 was officially released on 28 May 2026, one day after Rocky Linux 9.8. The installer, container, cloud and live images are available on the download page; the release uses the 6.12.0-211.16.1 kernel.

Software versions in Rocky Linux 10.2

For web server operators, the 10.2 most important new features are PHP 8.4, Python 3.14 and PostgreSQL 18.

Area Versions
Languages PHP 8.4 (alongside PHP 8.3), Python 3.14, Ruby 4.0, Node.js 24, OpenJDK 25
Web and database servers Apache HTTP Server 2.4.63, PostgreSQL 18, MariaDB 11.8
Basic toolchain GCC 14.3, glibc 2.39, binutils 2.41, Annobin 13.02
Compilers and toolkits GCC Toolset 15 (GCC 15.2, Binutils 2.44), LLVM Toolset 21.1.8, Rust Toolset 1.92.0, Go Toolset 1.26
Debugging GDB 16.3, Valgrind 3.26.0, SystemTap 5.4, elfutils 0.194, PCP 7.0.3
Infrastructure Samba 4.23.0, chrony 4.8, FRR 10.4.1, nftables 1.1.5, Podman 5.8.2, Cockpit 356

Please note: two PHP versions

As both PHP 8.3 and 8.4 are available in version 10.2, dnf may select the wrong version when installing a PHP extension. According to the release notes, you should first check which package is compatible with your installed version of PHP and install that one:

dnf provides php-json

Post-quantum encryption

  • OpenSSH: ML-KEM and elliptic curve hybrid key exchange, also in FIPS mode
  • libssh: hybrid post-quantum key exchange
  • Directory Server: ML-DSA key-based TLS certificates
  • p11-kit and podman-sequoia: post-quantum definitions and composite signatures
  • FUTURE policy: only permits hybrid ML-KEM key exchange. The announcement warns that this will sever connections with non-PQC-capable endpoints, i.e. the majority of the internet; the default DEFAULT policy is not affected by this.

Further security updates include keylime-agent 0.2.9, clevis-pin-trustee (LUKS unlocking via remote authentication), fapolicyd 1.4.3 and libreswan-minimal for containers.

Installation, desktop and system

  • The default size of the /boot partition has increased from 1 GiB to 2 GiB, whilst Kickstart’s new rdp command enables a headless, RDP-based graphical installation.
  • Firefox and Thunderbird are installed as Flatpak by default in the graphical environment; the RPM packages have remained in the AppStream repository and can be restored using Kickstart.
  • io_uring is now available as a technology preview in the kernel, whilst kdump now handles LUKS-encrypted systems more effectively.
  • The vi command no longer launches the full version of Vim if both vim-minimal and vim-enhanced are installed: to launch the full editor, you must use the vim command.
  • Podman uses Sequoia-PGP instead of GnuPG for OpenPGP signature verification, whilst Cockpit issues warnings about irregular shutdowns. FreeIPA’s new web interface is available at /ipa/modern-ui.

A full list of changes can be found in the Rocky Linux 10.2 release notes and the list of known issues for RHEL 10.2.

ISO verification

curl -O https://dl.rockylinux.org/pub/rocky/RPM-GPG-KEY-Rocky-10
gpg --import RPM-GPG-KEY-Rocky-10
curl -O https://download.rockylinux.org/pub/rocky/10.2/isos/x86_64/CHECKSUM
curl -O https://download.rockylinux.org/pub/rocky/10.2/isos/x86_64/CHECKSUM.asc
gpg --verify CHECKSUM.asc CHECKSUM
sha256sum -c CHECKSUM --ignore-missing

Run the commands in the folder where you saved the ISO. The line ‘Good signature from “Release Engineering (Rocky Linux 10)”’ (fingerprint: FC22 6859 C086 0BF0 DDB9 5B08 5B10 6C73 6FED FC85) and the ‘OK’ next to the ISO indicate that the download is genuine and intact.

Update and migration

To upgrade from Rocky Linux 10.0 or 10.1, use this single command:

sudo dnf -y upgrade

If you are migrating from another Enterprise Linux 10 distribution, migrate2rocky can help with the transition. There is no in-place upgrade from Rocky Linux 8 or 9; the project recommends a fresh installation and restoring data from a backup. We have covered the ELevate tool at the end of our ELevate guide.

How long is it supported for?

Active support for Rocky Linux 10 (“Red Quartz”) will continue until 31 May 2030, and its lifecycle will end on 31 May 2035. Previous releases in the 10 series:

You can choose Rocky Linux on both our KVM VPS servers and our dedicated servers. Our cPanel hosting servers, meanwhile, run CloudLinux OS, which is also RHEL-compatible.

Back to the blog