CentOS 7 EOL and CentOS Stream: What Actually Changed

The story of CentOS in enterprise Linux is a five-year lesson in reading what a distribution actually promises. CentOS Linux shipped as the free, binary-identical rebuild of RHEL; in December 2020 Red Hat announced it would be replaced by CentOS Stream, an upstream preview that moves faster than RHEL itself; CentOS 8 reached end of life a year later while still running on many servers; and CentOS 7, the last true CentOS Linux, hit end of life on June 30, 2024. Any box still running it receives no patches from anyone. This post retraces the timeline so you can explain it to your team, then walks the audit that finds the machines in your world that still need a decision.

The Timeline, Unpacked

CentOS Linux existed for a simple reason: RHEL is built from public source code, and rebuilding it into a free, binary-compatible distribution was both legal and genuinely useful. The catch was that Red Hat was funding a product that competed with its own flagship, and the pivot to Stream made sense as corporate strategy even though it stranded the old 10-year support promises. CentOS Stream reframes the project as the midstream between Fedora and RHEL: newer than RHEL, older than Fedora, moving continuously. That single word describes the change, because Stream is upstream of RHEL, where CentOS Linux was downstream of it.

What CentOS Stream Actually Is

Stream follows the same major version as RHEL and includes features slated for upcoming RHEL minor releases, which makes it a reasonable base for development, for hardware enablement, and for teams that want to track RHEL close to its edge. It is not a drop-in production replacement for the old contract, because packages move continuously and the release is not guaranteed to stay point-in-time stable. For enterprises the practical result is that the free, stable RHEL-compatible option now lives with AlmaLinux and Rocky, while Stream occupies a specialist niche near the front of the RHEL pipeline.

Find the Boxes Still on EOL Software

CentOS 7 identifies itself plainly in /etc/os-release, so the audit is a fleet-wide one-liner. Run it everywhere, and also record the install age and the running kernel, because a box labelled CentOS 7 that is "kept patched from third-party mirrors" is still an unsupported machine regardless of how current its packages look.

grep -E '^(ID|VERSION_ID)=' /etc/os-release
rpm -q centos-linux-release || rpm -q centos-release
uname -r
ls -ld --time-style=long-iso /etc/redhat-release

The Migration Menu

The decision is three-way. Rebuild fresh when the box is reproducible: export the package list and data, stand up AlmaLinux or Rocky 9, replay your provisioning, and discard the old instance once checks pass. Convert in place when the machine is too intricate to rebuild faithfully and the tooling supports the path: ELevate migrates CentOS 7 to EL8 and then on to EL9 rebuilds, while almalinux-deploy and migrate2rocky handle same-major conversions between EL-family systems. Decommission when the machine's job already exists elsewhere, which more CentOS 7 boxes qualify for than anyone is comfortable admitting.

# Fresh-rebuild bookkeeping before you stop the box
rpm -qa --qf '%{NAME}
' | sort -u > /root/server-packages.txt
tar czf /root/etc-backup-$(date +%F).tar.gz /etc
echo "captured; verify the archive before touching anything"

# Convert path (ELevate from CentOS 7 to EL9 rebuilds):
#  1. install leapp and the elevate-data set from the project repo
#  2. run leapp preupgrade to list the obstacles
#  3. follow the generated recommendations, then leapp upgrade
# Run on a node you can snapshot, inside an SSH session kept in tmux.
leapp preupgrade
leapp upgrade

Whatever path you choose, snapshot the instance first and verify the data export before any step that modifies the system. EOL software does not get surprises on its timeline; it gets them on yours.

Takeaway

CentOS 7 is now legacy debt, not a running system: it has no patch stream, so it is unmaintained the moment you stop looking at it. The fix is a decision, and each of the three paths beats leaving the box where it is. Retrace the story once, audit the fleet once, and the CentOS-era chapter of your infrastructure closes cleanly.

You can boot a fresh EL9 VPS on Netbay in under 60 seconds and copy the package list across, which is the fastest practical way out of the CentOS 7 trap — netbayhosts.in.