diff --git a/nodepool/elements/infra-package-needs/install.d/10-packages b/nodepool/elements/infra-package-needs/install.d/10-packages
index 238b6b7977..2fe1b7e995 100755
--- a/nodepool/elements/infra-package-needs/install.d/10-packages
+++ b/nodepool/elements/infra-package-needs/install.d/10-packages
@@ -20,7 +20,7 @@ if [ ${DIB_DEBUG_TRACE:-0} -gt 0 ]; then
 fi
 set -e
 
-if [[ "$DISTRO_NAME" =~ ^(centos|rocky)$ && ${DIB_RELEASE} != '9-stream' ]] ; then
+if [[ "$DISTRO_NAME" =~ ^(centos|rocky)$ && ! ${DIB_RELEASE} =~ '9' ]] ; then
     # 9-stream we are just using the default rngd
     # Note: $YUM exposed by centos|rhel-like environment, correct across releases
     ${YUM} -y install --enablerepo=epel haveged
diff --git a/nodepool/elements/infra-package-needs/pkg-map b/nodepool/elements/infra-package-needs/pkg-map
index ac90fe8b64..3041e6627b 100644
--- a/nodepool/elements/infra-package-needs/pkg-map
+++ b/nodepool/elements/infra-package-needs/pkg-map
@@ -19,6 +19,12 @@
         "ntp": "chrony",
         "ntpdate": "",
         "coreutils": ""
+      },
+      "9": {
+        "python-dev": "",
+        "ntp": "chrony",
+        "ntpdate": "",
+        "iptables": "iptables-services"
        }
     },
     "ubuntu": {
diff --git a/nodepool/elements/infra-package-needs/post-install.d/80-enable-haveged b/nodepool/elements/infra-package-needs/post-install.d/80-enable-haveged
index 63baf5b794..b07a4d9c39 100755
--- a/nodepool/elements/infra-package-needs/post-install.d/80-enable-haveged
+++ b/nodepool/elements/infra-package-needs/post-install.d/80-enable-haveged
@@ -6,8 +6,8 @@ fi
 set -eu
 set -o pipefail
 
-if [[ ${DISTRO_NAME} == 'centos' && ${DIB_RELEASE} = '9-stream' ]]; then
-    # 9-stream we are just using the default rngd
+if [[ "$DISTRO_NAME" =~ ^(centos|rocky)$ && ${DIB_RELEASE} =~ '9' ]]; then
+    # 9/9-stream we are just using the default rngd
     exit 0
 fi