Rhel 9 docker-ce rpm missing zstd dependency declaration

[awkohr]

Bug report

RHEL 9 dnf updates are failing due to docker-ce's failing to Updates providing an error message of "zstd is required to decompress"

This seems to be because for some reason this box does not have the zstd binary installed (only the libraries) and the docker-ce-3:29.7.2-1.el9.x86_64 rpm does not declare that having a zstd dependency. (I am not sure how far back this goes but we were able to install docker-ce-3:29.5.2-1.el9.x86_64 without zstd installed.)

Full errors.

[2026-09-02 00:23:57-0400] [1623101] [INFO]: Output from spawned process 139039 is: /var/cache/dnf/docker-ce-stable-bf3f46ea9ceedb40/repodata/15785a63d2ef1d07302d019d57565000357f16c14
21237558eba5342e218f36d-updateinfo.xml.zst
/var/cache/dnf/epel-4b20c555de8aed94/repodata/24031c9cce93f4409758f14e9ea2eec458cd9704ad21b7ef2ef4ed778665d9d8-updateinfo.xml.bz2
/var/cache/dnf/codeready-builder-for-rhel-9-x86_64-rhui-rpms-4f8e146aea3b75e3/repodata/76306333abd16898107eeae6e7649296a2232ef1d64e8d361526c38985cdeb92-updateinfo.xml.gz
/var/cache/dnf/rhel-9-for-x86_64-supplementary-rhui-rpms-849dea4ef1a821e7/repodata/4c2ed716f41966c755cbef304b7d655db8f03a56bcb2b87fda30bf10d3236bbd-updateinfo.xml.gz
/var/cache/dnf/rhel-9-for-x86_64-appstream-rhui-rpms-c11275d364213f83/repodata/6cacf8fbe2be91a9b3e6d377fecb5e06cb92fa1de6939c8a1ce7920cc43a752b-updateinfo.xml.gz
/var/cache/dnf/rhel-9-for-x86_64-baseos-rhui-rpms-13ac8cb9c570e46c/repodata/eb697e77daef04dc9ce23e8bbade21a7b4489f0b3d7ec7bc2fdea495ad32a8aa-updateinfo.xml.gz
.
[2026-09-02 00:23:57-0400] [1623101] [INFO]: Spawned process 139039 has exited with code 0.
[2026-09-02 00:23:57-0400] [1623101] [ERROR]: zstd compression utility is not installed. Installation of zstd is required to decompress /var/cache/dnf/docker-ce-stable-bf3f46ea9ceedb40/repodata/15785a63d2ef1d07302d019d57565000357f16c1421237558eba5342e218f36d-updateinfo.xml.zst.

the RPM's dependcy information
sudo dnf deplist docker-ce
package: docker-ce-3:29.7.2-1.el9.x86_64
dependency: (iptables-nft or iptables)
provider: iptables-legacy-1.8.10-11.1.el9.x86_64
provider: iptables-nft-1.8.10-11.el9_5.x86_64
dependency: /bin/sh
provider: bash-5.1.8-9.el9.x86_64
dependency: /usr/sbin/groupadd
provider: shadow-utils-2:4.9-16.el9.x86_64
dependency: container-selinux
provider: container-selinux-4:2.245.0-1.el9.noarch
dependency: containerd.io >= 2.1.5
provider: containerd.io-2.3.4-1.el9.x86_64
dependency: docker-ce-cli
provider: docker-ce-cli-1:29.7.2-1.el9.x86_64
dependency: libc.so.6(GLIBC_2.34)(64bit)
provider: aznfs-3.0.4-1.x86_64
provider: glibc-2.34-275.el9_8.x86_64
dependency: libresolv.so.2()(64bit)
provider: glibc-2.34-275.el9_8.x86_64
dependency: libsystemd.so.0()(64bit)
provider: systemd-libs-252-67.el9_8.4.x86_64
dependency: libsystemd.so.0(LIBSYSTEMD_209)(64bit)
provider: systemd-libs-252-67.el9_8.4.x86_64
dependency: nftables
provider: nftables-1:1.0.9-9.el9_8.i686
provider: nftables-1:1.0.9-9.el9_8.x86_64
dependency: rtld(GNU_HASH)
provider: glibc-2.34-275.el9_8.i686
provider: glibc-2.34-275.el9_8.x86_64
dependency: systemd
provider: systemd-252-67.el9_8.4.i686
provider: systemd-252-67.el9_8.4.x86_64
dependency: tar
provider: tar-2:1.34-13.el9_8.x86_64
dependency: xz
provider: xz-5.2.5-8.el9_0.x86_64

zstd packages installed on the box.
sudo dnf list installed | grep zstd
libzstd.x86_64 1.5.5-1.el9 @System

Platform

Linux

Version information

Note the problem is with the RHEL 9 docker-ce-3:29.7.2-1.el9.x86_64 rpm and not the currently installed version

Currently installed version. 
sudo docker version && sudo docker info
Client: Docker Engine - Community
 Version:           29.5.2
 API version:       1.54
 Go version:        go1.26.3
 Git commit:        79eb04c
 Built:             Wed May 20 14:41:26 2026
 OS/Arch:           linux/amd64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          29.5.2
  API version:      1.54 (minimum version 1.40)
  Go version:       go1.26.3
  Git commit:       568f755
  Built:            Wed May 20 14:37:33 2026
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          v2.2.4
  GitCommit:        193637f7ee8ae5f5aa5248f49e7baa3e6164966e
 runc:
  Version:          1.3.5
  GitCommit:        v1.3.5-0-g488fc13e
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0
Client: Docker Engine - Community
 Version:    29.5.2
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.34.1
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v5.1.4
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Server:
 Containers: 2
  Running: 2
  Paused: 0
  Stopped: 0
 Images: 2
 Server Version: 29.5.2
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: systemd
 Cgroup Version: 2
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: runc io.containerd.runc.v2
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 193637f7ee8ae5f5aa5248f49e7baa3e6164966e
 runc version: v1.3.5-0-g488fc13e
 init version: de40ad0
 Security Options:
  seccomp
   Profile: builtin
  cgroupns
 Kernel Version: 5.14.0-611.45.1.el9_7.x86_64
 Operating System: Red Hat Enterprise Linux 9.8 (Plow)
 OSType: linux
 Architecture: x86_64
 CPUs: 4
 Total Memory: 15.31GiB
 Name: eu2angadtapp01.tuhs.prv
 ID: 704a6633-abbd-4829-ae6e-7251d02b03c0
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Username: mckinnely
 Experimental: false
 Insecure Registries:
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false
 Firewall Backend: iptables
  EnableUserlandProxy: true
  UserlandProxyPath: /usr/bin/docker-proxy

Diagnostics ID

No response