1DNF.CONF(5) DNF DNF.CONF(5)
2
6 dnf.conf - DNF Configuration Reference
7
9 DNF by default uses the global configuration file at /etc/dnf/dnf.conf
10 and all *.repo files found under /etc/yum.repos.d. The latter is typi‐
11 cally used for repository configuration and takes precedence over
12 global configuration.
13 The configuration file has INI format consisting of section declaration
15 and name=value options below each on separate line. There are two types
16 of sections in the configuration files: main and repository. Main sec‐
17 tion defines all global configuration options and should be only one.
18 The repository sections define the configuration for each (remote or
20 local) repository. The section name of the repository in brackets serve
21 as repo ID reference and should be unique across configuration files.
22 The allowed characters of repo ID string are lower and upper case
23 alphabetic letters, digits, -, _, . and :. The minimal repository con‐
24 figuration file should aside from repo ID consists of baseurl, metalink
25 or mirrorlist option definition.
26
28 Configuration options, namely best and skip_if_unavailable, can be set
29 in the DNF configuration file by your distribution to override the DNF
30 defaults.
31
33 arch string
34 The architecture used for installing packages. By default this
36 is auto-detected. Often used together with ignorearch option.
37 assumeno
39 boolean
40 If enabled dnf will assume No where it would normally prompt for
42 confirmation from user input. Default is False.
43 assumeyes
45 boolean
46 If enabled dnf will assume Yes where it would normally prompt
48 for confirmation from user input (see also defaultyes). Default
49 is False.
50 autocheck_running_kernel
52 boolean
53 Automatic check whether there is installed newer kernel module
55 with security update than currently running kernel. Default is
56 True.
57 basearch
59 string
60 The base architecture used for installing packages. By default
62 this is auto-detected.
63 best boolean
65 True instructs the solver to either use a package with the high‐
67 est available version or fail. On False, do not fail if the lat‐
68 est version cannot be installed and go with the lower version.
69 The default is True. Note this option in particular can be set
70 in your configuration file by your distribution.
71 cachedir
73 string
74 Path to a directory used by various DNF subsystems for storing
76 cache data. Has a reasonable root-writable default depending on
77 the distribution. DNF needs to be able to create files and
78 directories at this location.
79 cacheonly
81 boolean
82 If set to True DNF will run entirely from system cache, will not
84 update the cache and will use it even in case it is expired.
85 Default is False.
86 check_config_file_age
88 boolean
89 Specifies whether dnf should automatically expire metadata of
91 repos, which are older than their corresponding configuration
92 file (usually the dnf.conf file and the foo.repo file). Default
93 is True (perform the check). Expire of metadata is also affected
94 by metadata age. See also metadata_expire.
95 clean_requirements_on_remove
97 boolean
98 Remove dependencies that are no longer used during dnf remove. A
100 package only qualifies for removal via clean_require‐
101 ments_on_remove if it was installed through DNF but not on
102 explicit user request, i.e. it was pulled in as a dependency.
103 The default is True. (installonlypkgs are never automatically
104 removed.)
105 config_file_path
107 string
108 Path to the default main configuration file. Default is
110 /etc/dnf/dnf.conf.
111 debuglevel
113 integer
114 Debug messages output level, in the range 0 to 10. The higher
116 the number the more debug output is put to stdout. Default is 2.
117 debug_solver
119 boolean
120 Controls whether the libsolv debug files should be created when
122 solving the transaction. The debug files are created in the
123 ./debugdata directory. Default is False.
124 defaultyes
126 boolean
127 If enabled the default answer to user confirmation prompts will
129 be Yes. Not to be confused with assumeyes which will not prompt
130 at all. Default is False.
131 diskspacecheck
133 boolean
134 Controls wheather rpm shoud check available disk space during
136 the transaction. Default is True.
137 errorlevel
139 integer
140 Error messages output level, in the range 0 to 10. The higher
142 the number the more error output is put to stderr. Default is 3.
143 This is deprecated in DNF and overwritten by --verbose command‐
144 line option.
145 exit_on_lock
147 boolean
148 Should the dnf client exit immediately when something else has
150 the lock. Default is False.
151 gpgkey_dns_verification
153 boolean
154 Should the dnf attempt to automatically verify GPG verification
156 keys using the DNS system. This option requires libunbound to be
157 installed on the client system. This system has two main fea‐
158 tures. The first one is to check if any of the already installed
159 keys have been revoked. Automatic removal of the key is not yet
160 available, so it is up to the user, to remove revoked keys from
161 the system. The second feature is automatic verification of new
162 keys when a repository is added to the system. In interactive
163 mode, the result is written to the output as a suggestion to the
164 user. In non-interactive mode (i.e. when -y is used), this sys‐
165 tem will automatically accept keys that are available in the DNS
166 and are correctly signed using DNSSEC. It will also accept keys
167 that do not exist in the DNS system and their NON-existence is
168 cryptographically proven using DNSSEC. This is mainly to pre‐
169 serve backward compatibility. Default is False.
170 group_package_types
172 list
173 List of the following: optional, default, mandatory. Tells dnf
175 which type of packages in groups will be installed when
176 'groupinstall' is called. Default is: default, mandatory.
177 ignorearch
179 boolean
180 If set to True, RPM will allow attempts to install packages
182 incompatible with the CPU's architecture. Defaults to False.
183 Often used together with arch option.
184 installonlypkgs
186 list
187 List of provide names of packages that should only ever be
189 installed, never upgraded. Kernels in particular fall into this
190 category. These packages are never removed by dnf autoremove
191 even if they were installed as dependencies (see
192 clean_requirements_on_remove for auto removal details). This
193 option append the list values to the default installonlypkgs
194 list used by DNF. The number of kept package versions is regu‐
195 lated by installonly_limit.
196 installonly_limit
198 integer
199 Number of installonly packages allowed to be installed concur‐
201 rently. Defaults to 3. The minimal number of installonly pack‐
202 ages is 2. Value 0 or 1 means unlimited number of installonly
203 packages.
204 installroot
206 string
207 The root of the filesystem for all packaging operations. It
209 requires an absolute path. See also --installroot commandline
210 option.
211 install_weak_deps
213 boolean
214 When this option is set to True and a new package is about to be
216 installed, all packages linked by weak dependency relation (Rec‐
217 ommends or Supplements flags) with this package will be pulled
218 into the transaction. Default is True.
219 keepcache
221 boolean
222 Keeps downloaded packages in the cache when set to True. Even if
224 it is set to False and packages have not been installed they
225 will still persist until next successful transaction. The
226 default is False.
227 logdir string
229 Directory where the log files will be stored. Default is
231 /var/log.
232 log_rotate
234 integer
235 Log files are rotated log_rotate times before being removed. If
237 log_rotate is 0, the rotation is not performed. Default is 4.
238 log_size
240 storage size
241 Log files are rotated when they grow bigger than log_size
243 bytes. If log_size is 0, the rotation is not performed. The
244 default is 1 MB. Valid units are 'k', 'M', 'G'.
245 The size applies for individual log files, not the sum of all
247 log files. See also log_rotate.
248 metadata_timer_sync
250 time in seconds
251 The minimal period between two consecutive makecache timer runs.
253 The command will stop immediately if it's less than this time
254 period since its last run. Does not affect simple makecache run.
255 Use 0 to completely disable automatic metadata synchronizing.
256 The default corresponds to three hours. The value is rounded to
257 the next commenced hour.
258 module_platform_id
260 string
261 Set this to $name:$stream to override PLATFORM_ID detected from
263 /etc/os-release. It is necessary to perform a system upgrade
264 and switch to a new platform.
265 multilib_policy
267 string
268 Controls how multilib packages are treated during install opera‐
270 tions. Can either be "best" (the default) for the depsolver to
271 prefer packages which best match the system's architecture, or
272 "all" to install all available packages with compatible archi‐
273 tectures.
274 obsoletes
276 boolean
277 This option only has affect during an install/update. It enables
279 dnf's obsoletes processing logic, which means it makes dnf check
280 whether any dependencies of given package are no longer required
281 and removes them. Useful when doing distribution level
282 upgrades. Default is 'true'.
283 Command-line option: --obsoletes
285 persistdir
287 string
288 Directory where DNF stores its persistent data between runs.
290 Default is "/var/lib/dnf".
291 pluginconfpath
293 list
294 List of directories that are searched for plugin configurations
296 to load. All configuration files found in these directories,
297 that are named same as a plugin, are parsed. The default path is
298 /etc/dnf/plugins.
299 pluginpath
301 list
302 List of directories that are searched for plugins to load. Plug‐
304 ins found in any of the directories in this configuration option
305 are used. The default contains a Python version-specific path.
306 plugins
308 boolean
309 Controls whether the plugins are enabled. Default is True.
311 protected_packages
313 list
314 List of packages that DNF should never completely remove. They
316 are protected via Obsoletes as well as user/plugin removals.
317 The default is: dnf, glob:/etc/yum/protected.d/*.conf and
319 glob:/etc/dnf/protected.d/*.conf. So any packages which should
320 be protected can do so by including a file in /etc/dnf/pro‐
321 tected.d with their package name in it.
322 DNF will protect also the package corresponding to the running
324 version of the kernel.
325 releasever
327 string
328 Used for substitution of $releasever in the repository configu‐
330 ration. See also repo variables.
331 reposdir
333 list
334 DNF searches for repository configuration files in the paths
336 specified by reposdir. The behavior of reposdir could differ
337 when it is used along with --installroot option.
338 rpmverbosity
340 string
341 RPM debug scriptlet output level. One of: critical, emergency,
343 error, warn, info or debug. Default is info.
344 strict boolean
346 If disabled, all unavailable packages or packages with broken
348 dependencies given to DNF command will be skipped without rais‐
349 ing the error causing the whole operation to fail. Currently
350 works for install command only. The default is True.
351 tsflags
353 list
354 List of strings adding extra flags for the RPM transaction.
356 ┌─────────────┬────────────────────────────┐
358 │tsflag value │ RPM Transaction Flag │
359 ├─────────────┼────────────────────────────┤
360 │noscripts │ RPMTRANS_FLAG_NOSCRIPTS │
361 ├─────────────┼────────────────────────────┤
362 │test │ RPMTRANS_FLAG_TEST │
363 ├─────────────┼────────────────────────────┤
364 │notriggers │ RPMTRANS_FLAG_NOTRIGGERS │
365 ├─────────────┼────────────────────────────┤
366 │nodocs │ RPMTRANS_FLAG_NODOCS │
367 ├─────────────┼────────────────────────────┤
368 │justdb │ RPMTRANS_FLAG_JUSTDB │
369 ├─────────────┼────────────────────────────┤
370 │nocontexts │ RPMTRANS_FLAG_NOCONTEXTS │
371 ├─────────────┼────────────────────────────┤
372 │nocaps │ RPMTRANS_FLAG_NOCAPS │
373 ├─────────────┼────────────────────────────┤
374 │nocrypto │ RPMTRANS_FLAG_NOFILEDIGEST │
375 └─────────────┴────────────────────────────┘
376 The nocrypto option will also set the _RPMVSF_NOSIGNATURES and
378 _RPMVSF_NODIGESTS VS flags. The test option provides a transac‐
379 tion check without performing the transaction. It includes down‐
380 loading of packages, gpg keys check (including permanent import
381 of additional keys if necessary), and rpm check to prevent file
382 conflicts. The nocaps is supported with rpm-4.14 or later. When
383 nocaps is used but rpm doesn't support it, DNF only reports it
384 as an invalid tsflag.
385 upgrade_group_objects_upgrade
387 boolean
388 Set this to False to disable the automatic running of group
390 upgrade when running the upgrade command. Default is True (per‐
391 form the operation).
392 varsdir
394 list
395 List of directories where variables definition files are looked
397 for. Defaults to "/etc/dnf/vars", "/etc/yum/vars". See variable
398 files in Configuration reference.
399 zchunk boolean
401 Enables or disables the use of repository metadata compressed
403 using the zchunk format (if available). Default is True.
404
406 baseurl
407 list
408 List of URLs for the repository. Defaults to [].
410 cost integer
412 The relative cost of accessing this repository, defaulting to
414 1000. This value is compared when the priorities of two reposi‐
415 tories are the same. The repository with the lowest cost is
416 picked. It is useful to make the library prefer on-disk reposi‐
417 tories to remote ones.
418 enabled
420 boolean
421 Include this repository as a package source. The default is
423 True.
424 gpgkey list of strings
426 URLs of a GPG key files that can be used for signing metadata
428 and packages of this repository, empty by default. If a file can
429 not be verified using the already imported keys, import of keys
430 from this option is attempted and the keys are then used for
431 verification.
432 metalink
434 string
435 URL of a metalink for the repository. Defaults to None.
437 mirrorlist
439 string
440 URL of a mirrorlist for the repository. Defaults to None.
442 module_hotfixes
444 boolean
445 Set this to True to disable module RPM filtering and make all
447 RPMs from the repository available. The default is False. This
448 allows user to create a repository with cherry-picked hotfixes
449 that are included in a package set on a modular system.
450 name string
452 A human-readable name of the repository. Defaults to the ID of
454 the repository.
455 priority
457 integer
458 The priority value of this repository, default is 99. If there
460 is more than one candidate package for a particular operation,
461 the one from a repo with the lowest priority value is picked,
462 possibly despite being less convenient otherwise (e.g. by being
463 a lower version).
464 type string
466 Type of repository metadata. Supported values are: rpm-md.
468 Aliases for rpm-md: rpm, repomd, rpmmd, yum, YUM.
469
471 Right side of every repo option can be enriched by the following vari‐
472 ables:
473 $arch
475 Refers to the system’s CPU architecture e.g, aarch64, i586, i686 and
476 x86_64.
477 $basearch
479 Refers to the base architecture of the system. For example, i686 and
480 i586 machines both have a base architecture of i386, and AMD64 and
481 Intel64 machines have a base architecture of x86_64.
482 $releasever
484 Refers to the release version of operating system which DNF derives
485 from information available in RPMDB.
486 In addition to these hard coded variables, user-defined ones can also
488 be used. They can be defined either via variable files, or by using
489 special environmental variables. The names of these variables must be
490 prefixed with DNF_VAR_ and they can only consist of alphanumeric char‐
491 acters and underscores:
492 $ DNF_VAR_MY_VARIABLE=value
494
496 Some options can be applied in either the main section, per repository,
497 or in a combination. The value provided in the main section is used for
498 all repositories as the default value, which repositories can then
499 override in their configuration.
500 bandwidth
502 storage size
503 Total bandwidth available for downloading. Meaningful when used
505 with the throttle option. Storage size is in bytes by default
506 but can be specified with a unit of storage. Valid units are
507 'k', 'M', 'G'.
508 countme
510 boolean
511 Determines whether a special flag should be added to a single,
513 randomly chosen metalink/mirrorlist query each week. This
514 allows the repository owner to estimate the number of systems
515 consuming it, by counting such queries over a week's time, which
516 is much more accurate than just counting unique IP addresses
517 (which is subject to both overcounting and undercounting due to
518 short DHCP leases and NAT, respectively).
519 The flag is a simple "countme=N" parameter appended to the met‐
521 alink and mirrorlist URL, where N is an integer representing the
522 "longevity" bucket this system belongs to. The following 4
523 buckets are defined, based on how many full weeks have passed
524 since the beginning of the week when this system was installed:
525 1 = first week, 2 = first month (2-4 weeks), 3 = six months
526 (5-24 weeks) and 4 = more than six months (> 24 weeks). This
527 information is meant to help distinguish short-lived installs
528 from long-term ones, and to gather other statistics about system
529 lifecycle.
530 Default is False.
532 deltarpm
534 boolean
535 When enabled, DNF will save bandwidth by downloading much
537 smaller delta RPM files, rebuilding them to RPM locally. How‐
538 ever, this is quite CPU and I/O intensive. Default is True.
539 deltarpm_percentage
541 integer
542 When the relative size of delta vs pkg is larger than this,
544 delta is not used. Default value is 75 (Deltas must be at least
545 25% smaller than the pkg). Use 0 to turn off delta rpm process‐
546 ing. Local repositories (with file:// baseurl) have delta rpms
547 turned off by default.
548 enablegroups
550 boolean
551 Determines whether DNF will allow the use of package groups for
553 this repository. Default is True (package groups are allowed).
554 excludepkgs
556 list
557 Exclude packages of this repository, specified by a name or a
559 glob and separated by a comma, from all operations. Can be dis‐
560 abled using --disableexcludes command line switch. Defaults to
561 [].
562 fastestmirror
564 boolean
565 If enabled a metric is used to find the fastest available mir‐
567 ror. This overrides the order provided by the mirrorlist/met‐
568 alink file itself. This file is often dynamically generated by
569 the server to provide the best download speeds and enabling
570 fastestmirror overrides this. The default is False.
571 gpgcheck
573 boolean
574 Whether to perform GPG signature check on packages found in this
576 repository. The default is False.
577 This option can only be used to strengthen the active RPM secu‐
579 rity policy set with the %_pkgverify_level macro (see the
580 /usr/lib/rpm/macros file for details). That means, if the macro
581 is set to 'signature' or 'all' and this option is False, it will
582 be overridden to True during DNF runtime, and a warning will be
583 printed. To squelch the warning, make sure this option is True
584 for every enabled repository, and also enable localpkg_gpgcheck.
585 includepkgs
587 list
588 Include packages of this repository, specified by a name or a
590 glob and separated by a comma, in all operations. Inverse of
591 excludepkgs, DNF will exclude any package in the repository that
592 doesn't match this list. This works in conjunction with exclude
593 and doesn't override it, so if you 'excludepkgs=*.i386' and
594 'includepkgs=python*' then only packages starting with python
595 that do not have an i386 arch will be seen by DNF in this repo.
596 Can be disabled using --disableexcludes command line switch.
597 Defaults to [].
598 ip_resolve
600 IP address type
601 Determines how DNF resolves host names. Set this to '4'/'IPv4'
603 or '6'/'IPv6' to resolve to IPv4 or IPv6 addresses only. By
604 default, DNF resolves to either addresses.
605 localpkg_gpgcheck
607 boolean
608 Whether to perform a GPG signature check on local packages
610 (packages in a file, not in a repository). The default is
611 False. This option is subject to the active RPM security policy
612 (see gpgcheck for more details).
613 max_parallel_downloads
615 integer
616 Maximum number of simultaneous package downloads. Defaults to 3.
618 metadata_expire
620 time in seconds
621 The period after which the remote repository is checked for
623 metadata update and in the positive case the local metadata
624 cache is updated. The default corresponds to 48 hours. Set this
625 to -1 or never to make the repo never considered expired. Expire
626 of metadata can bee also triggered by change of timestamp of
627 configuration files (dnf.conf, <repo>.repo). See also
628 check_config_file_age.
629 minrate
631 storage size
632 This sets the low speed threshold in bytes per second. If the
634 server is sending data at the same or slower speed than this
635 value for at least timeout option seconds, DNF aborts the con‐
636 nection. The default is 1000. Valid units are 'k', 'M', 'G'.
637 password
639 string
640 The password to use for connecting to a repository with basic
642 HTTP authentication. Empty by default.
643 proxy string
645 URL of a proxy server to connect through. Set to an empty string
647 to disable the proxy setting inherited from the main section and
648 use direct connection instead. The expected format of this
649 option is <scheme>://<ip-or-hostname>[:port]. (For backward
650 compatibility, '_none_' can be used instead of the empty
651 string.)
652 Note: The curl environment variables (such as http_proxy) are
654 effective if this option is unset. See the curl man page for
655 details.
656 proxy_username
658 string
659 The username to use for connecting to the proxy server. Empty by
661 default.
662 proxy_password
664 string
665 The password to use for connecting to the proxy server. Empty by
667 default.
668 proxy_auth_method
670 string
671 The authentication method used by the proxy server. Valid values
673 are
674 ┌──────────┬────────────────────────────┐
676 │method │ meaning │
677 ├──────────┼────────────────────────────┤
678 │basic │ HTTP Basic authentication │
679 ├──────────┼────────────────────────────┤
680 │digest │ HTTP Digest authentication │
681 ├──────────┼────────────────────────────┤
682 │negotiate │ HTTP Negotiate (SPNEGO) │
683 │ │ authentication │
684 ├──────────┼────────────────────────────┤
685 │ntlm │ HTTP NTLM authentication │
686 └──────────┴────────────────────────────┘
687 │digest_ie │ HTTP Digest authentication │
690 │ │ with an IE flavor │
691 ├──────────┼────────────────────────────┤
692 │ntlm_wb │ NTLM delegating to winbind │
693 │ │ helper │
694 ├──────────┼────────────────────────────┤
695 │none │ None auth method │
696 ├──────────┼────────────────────────────┤
697 │any │ All suitable methods │
698 └──────────┴────────────────────────────┘
699 Defaults to any
701 repo_gpgcheck
703 boolean
704 Whether to perform GPG signature check on this repository's
706 metadata. The default is False.
707 retries
709 integer
710 Set the number of times any attempt to retrieve a file should
712 retry before returning an error. Setting this to 0 makes dnf try
713 forever. Default is 10.
714 skip_if_unavailable
716 boolean
717 If enabled, DNF will continue running and disable the repository
719 that couldn't be synchronized for any reason. This option
720 doesn't affect skipping of unavailable packages after dependency
721 resolution. To check inaccessibility of repository use it in
722 combination with refresh command line option. The default is
723 False. Note this option in particular can be set in your con‐
724 figuration file by your distribution.
725 sslcacert
727 string
728 Path to the directory or file containing the certificate author‐
730 ities to verify SSL certificates. Empty by default - uses sys‐
731 tem default.
732 sslverify
734 boolean
735 When enabled, remote SSL certificates are verified. If the
737 client can not be authenticated, connecting fails and the repos‐
738 itory is not used any further. If False, SSL connections can be
739 used, but certificates are not verified. Default is True.
740 sslclientcert
742 string
743 Path to the SSL client certificate used to connect to remote
745 sites. Empty by default.
746 sslclientkey
748 string
749 Path to the SSL client key used to connect to remote sites.
751 Empty by default.
752 throttle
754 storage size
755 Limits the downloading speed. It might be an absolute value or a
757 percentage, relative to the value of the bandwidth option
758 option. 0 means no throttling (the default). The absolute value
759 is in bytes by default but can be specified with a unit of stor‐
760 age. Valid units are 'k', 'M', 'G'.
761 timeout
763 time in seconds
764 Number of seconds to wait for a connection before timing out.
766 Used in combination with minrate option option. Defaults to 30
767 seconds.
768 username
770 string
771 The username to use for connecting to repo with basic HTTP
773 authentication. Empty by default.
774 user_agent
776 string
777 The User-Agent string to include in HTTP requests sent by DNF.
779 Defaults to
780 libdnf (NAME VERSION_ID; VARIANT_ID; OS.BASEARCH)
782 where NAME, VERSION_ID and VARIANT_ID are OS identifiers read
784 from the os-release(5) file, and OS and BASEARCH are the canoni‐
785 cal OS name and base architecture, respectively. Example:
786 libdnf (Fedora 31; server; Linux.x86_64)
788 To avoid leaking identifiable data, the variant in the above
790 string will be replaced by "generic" if the value is not an
791 official Fedora variant. Likewise, the whole OS part (enclosed
792 in parenthesis) will be omitted if this is a non-Fedora system.
793
795 boolean
796 This is a data type with only two possible values.
797 One of following options can be used: 1, 0, True, False, yes, no
799 integer
801 It is a whole number that can be written without a fractional
802 component.
803 list It is an option that could represent one or more strings sepa‐
805 rated by space or comma characters.
806 string It is a sequence of symbols or digits without any whitespace
808 character.
809
811 Cache Files
812 /var/cache/dnf
813 Main Configuration File
815 /etc/dnf/dnf.conf
816 Repository
818 /etc/yum.repos.d/
819 Variables
821 Any properly named file in /etc/dnf/vars is turned into a vari‐
822 able named after the filename (or overrides any of the above
823 variables but those set from commandline). Filenames may contain
824 only alphanumeric characters and underscores and be in lower‐
825 case.
826
828 · dnf(8), DNF Command Reference
829
831 See AUTHORS in DNF source distribution.
832
834 2012-2019, Red Hat, Licensed under GPLv2+
8354.2.17 Nov 29, 2019 DNF.CONF(5)