1DNF.CONF(5) DNF DNF.CONF(5)
2
3
4
6 dnf.conf - DNF Configuration Reference
7
9 DNF by default uses the global configuration file at /etc/dnf/dnf.conf
10 and all *.repo files found under /etc/yum.repos.d. The latter is typi‐
11 cally used for repository configuration and takes precedence over
12 global configuration.
13
14 The configuration file has INI format consisting of section declaration
15 and name=value options below each on separate line. There are two types
16 of sections in the configuration files: main and repository. Main sec‐
17 tion defines all global configuration options and should be only one.
18
19 The repository sections define the configuration for each (remote or
20 local) repository. The section name of the repository in brackets serve
21 as repo ID reference and should be unique across configuration files.
22 The allowed characters of repo ID string are lower and upper case
23 alphabetic letters, digits, -, _, . and :. The minimal repository con‐
24 figuration file should aside from repo ID consists of baseurl, metalink
25 or mirrorlist option definition.
26
28 Configuration options, namely best and skip_if_unavailable, can be set
29 in the DNF configuration file by your distribution to override the DNF
30 defaults.
31
33 allow_vendor_change
34 boolean
35
36 If disabled dnf will stick to vendor when upgrading or downgrad‐
37 ing rpms. Default is True
38
39 WARNING:
40 This option is currently not supported for downgrade and dis‐
41 tro-sync commands
42
43 arch string
44
45 The architecture used for installing packages. By default this
46 is auto-detected. Often used together with ignorearch option.
47
48 assumeno
49 boolean
50
51 If enabled dnf will assume No where it would normally prompt for
52 confirmation from user input. Default is False.
53
54 assumeyes
55 boolean
56
57 If enabled dnf will assume Yes where it would normally prompt
58 for confirmation from user input (see also defaultyes). Default
59 is False.
60
61 autocheck_running_kernel
62 boolean
63
64 Automatic check whether there is installed newer kernel module
65 with security update than currently running kernel. Default is
66 True.
67
68 basearch
69 string
70
71 The base architecture used for installing packages. By default
72 this is auto-detected.
73
74 best boolean
75
76 True instructs the solver to either use a package with the high‐
77 est available version or fail. On False, do not fail if the lat‐
78 est version cannot be installed and go with the lower version.
79 The default is False. Note this option in particular can be set
80 in your configuration file by your distribution.
81
82 cachedir
83 string
84
85 Path to a directory used by various DNF subsystems for storing
86 cache data. Has a reasonable root-writable default depending on
87 the distribution. DNF needs to be able to create files and
88 directories at this location.
89
90 cacheonly
91 boolean
92
93 If set to True DNF will run entirely from system cache, will not
94 update the cache and will use it even in case it is expired.
95 Default is False.
96
97 check_config_file_age
98 boolean
99
100 Specifies whether dnf should automatically expire metadata of
101 repos, which are older than their corresponding configuration
102 file (usually the dnf.conf file and the foo.repo file). Default
103 is True (perform the check). Expire of metadata is also affected
104 by metadata age. See also metadata_expire.
105
106 clean_requirements_on_remove
107 boolean
108
109 Remove dependencies that are no longer used during dnf remove. A
110 package only qualifies for removal via clean_require‐
111 ments_on_remove if it was installed through DNF but not on
112 explicit user request, i.e. it was pulled in as a dependency.
113 The default is True. (installonlypkgs are never automatically
114 removed.)
115
116 config_file_path
117 string
118
119 Path to the default main configuration file. Default is
120 /etc/dnf/dnf.conf.
121
122 debuglevel
123 integer
124
125 Debug messages output level, in the range 0 to 10. The higher
126 the number the more debug output is put to stdout. Default is 2.
127
128 debug_solver
129 boolean
130
131 Controls whether the libsolv debug files should be created when
132 solving the transaction. The debug files are created in the
133 ./debugdata directory. Default is False.
134
135 defaultyes
136 boolean
137
138 If enabled the default answer to user confirmation prompts will
139 be Yes. Not to be confused with assumeyes which will not prompt
140 at all. Default is False.
141
142 diskspacecheck
143 boolean
144
145 Controls wheather rpm shoud check available disk space during
146 the transaction. Default is True.
147
148 errorlevel
149 integer
150
151 Error messages output level, in the range 0 to 10. The higher
152 the number the more error output is put to stderr. Default is 3.
153 This is deprecated in DNF and overwritten by --verbose command‐
154 line option.
155
156 exit_on_lock
157 boolean
158
159 Should the dnf client exit immediately when something else has
160 the lock. Default is False.
161
162 gpgkey_dns_verification
163 boolean
164
165 Should the dnf attempt to automatically verify GPG verification
166 keys using the DNS system. This option requires the unbound
167 python module (python3-unbound) to be installed on the client
168 system. This system has two main features. The first one is to
169 check if any of the already installed keys have been revoked.
170 Automatic removal of the key is not yet available, so it is up
171 to the user, to remove revoked keys from the system. The second
172 feature is automatic verification of new keys when a repository
173 is added to the system. In interactive mode, the result is writ‐
174 ten to the output as a suggestion to the user. In non-interac‐
175 tive mode (i.e. when -y is used), this system will automatically
176 accept keys that are available in the DNS and are correctly
177 signed using DNSSEC. It will also accept keys that do not exist
178 in the DNS system and their NON-existence is cryptographically
179 proven using DNSSEC. This is mainly to preserve backward compat‐
180 ibility. Default is False.
181
182 group_package_types
183 list
184
185 List of the following: optional, default, mandatory. Tells dnf
186 which type of packages in groups will be installed when
187 'groupinstall' is called. Default is: default, mandatory.
188
189 ignorearch
190 boolean
191
192 If set to True, RPM will allow attempts to install packages
193 incompatible with the CPU's architecture. Defaults to False.
194 Often used together with arch option.
195
196 installonlypkgs
197 list
198
199 List of provide names of packages that should only ever be
200 installed, never upgraded. Kernels in particular fall into this
201 category. These packages are never removed by dnf autoremove
202 even if they were installed as dependencies (see
203 clean_requirements_on_remove for auto removal details). This
204 option append the list values to the default installonlypkgs
205 list used by DNF. The number of kept package versions is regu‐
206 lated by installonly_limit.
207
208 installonly_limit
209 integer
210
211 Number of installonly packages allowed to be installed concur‐
212 rently. Defaults to 3. The minimal number of installonly pack‐
213 ages is 2. Value 0 or 1 means unlimited number of installonly
214 packages.
215
216 installroot
217 string
218
219 The root of the filesystem for all packaging operations. It
220 requires an absolute path. See also --installroot commandline
221 option.
222
223 install_weak_deps
224 boolean
225
226 When this option is set to True and a new package is about to be
227 installed, all packages linked by weak dependency relation (Rec‐
228 ommends or Supplements flags) with this package will be pulled
229 into the transaction. Default is True.
230
231 keepcache
232 boolean
233
234 Keeps downloaded packages in the cache when set to True. Even if
235 it is set to False and packages have not been installed they
236 will still persist until next successful transaction. The
237 default is False.
238
239 logdir string
240
241 Directory where the log files will be stored. Default is
242 /var/log.
243
244 logfilelevel
245 integer
246
247 Log file messages output level, in the range 0 to 10. The higher
248 the number the more debug output is put to logs. Default is 9.
249
250 This option controls dnf.log, dnf.librepo.log and hawkey.log.
251 Although dnf.librepo.log and hawkey.log are affected only by
252 setting the logfilelevel to 10.
253
254 log_compress
255 boolean
256
257 When set to True, log files are compressed when they are
258 rotated. Default is False.
259
260 log_rotate
261 integer
262
263 Log files are rotated log_rotate times before being removed. If
264 log_rotate is 0, the rotation is not performed. Default is 4.
265
266 log_size
267 storage size
268
269 Log files are rotated when they grow bigger than log_size
270 bytes. If log_size is 0, the rotation is not performed. The
271 default is 1 MB. Valid units are 'k', 'M', 'G'.
272
273 The size applies for individual log files, not the sum of all
274 log files. See also log_rotate.
275
276 metadata_timer_sync
277 time in seconds
278
279 The minimal period between two consecutive makecache timer runs.
280 The command will stop immediately if it's less than this time
281 period since its last run. Does not affect simple makecache run.
282 Use 0 to completely disable automatic metadata synchronizing.
283 The default corresponds to three hours. The value is rounded to
284 the next commenced hour.
285
286 module_obsoletes
287 boolean
288
289 This option controls whether dnf should apply modular obsoletes
290 when possible.
291
292 module_platform_id
293 string
294
295 Set this to $name:$stream to override PLATFORM_ID detected from
296 /etc/os-release. It is necessary to perform a system upgrade
297 and switch to a new platform.
298
299 module_stream_switch
300 boolean
301
302 This option controls whether it's possible to switch enabled
303 streams of a module.
304
305 multilib_policy
306 string
307
308 Controls how multilib packages are treated during install opera‐
309 tions. Can either be "best" (the default) for the depsolver to
310 prefer packages which best match the system's architecture, or
311 "all" to install all available packages with compatible archi‐
312 tectures.
313
314 obsoletes
315 boolean
316
317 This option only has affect during an install/update. It enables
318 dnf's obsoletes processing logic, which means it makes dnf check
319 whether any dependencies of given package are no longer required
320 and removes them. Useful when doing distribution level
321 upgrades. Default is 'true'.
322
323 Command-line option: --obsoletes
324
325 persistdir
326 string
327
328 Directory where DNF stores its persistent data between runs.
329 Default is "/var/lib/dnf".
330
331 pluginconfpath
332 list
333
334 List of directories that are searched for plugin configurations
335 to load. All configuration files found in these directories,
336 that are named same as a plugin, are parsed. The default path is
337 /etc/dnf/plugins.
338
339 pluginpath
340 list
341
342 List of directories that are searched for plugins to load. Plug‐
343 ins found in any of the directories in this configuration option
344 are used. The default contains a Python version-specific path.
345
346 plugins
347 boolean
348
349 Controls whether the plugins are enabled. Default is True.
350
351 protected_packages
352 list
353
354 List of packages that DNF should never completely remove. They
355 are protected via Obsoletes as well as user/plugin removals.
356
357 The default is: dnf, glob:/etc/yum/protected.d/*.conf and
358 glob:/etc/dnf/protected.d/*.conf. So any packages which should
359 be protected can do so by including a file in /etc/dnf/pro‐
360 tected.d with their package name in it.
361
362 DNF will protect also the package corresponding to the running
363 version of the kernel. See also protect_running_kernel option.
364
365 protect_running_kernel
366 boolean
367
368 Controls whether the package corresponding to the running ver‐
369 sion of kernel is protected from removal. Default is True.
370
371 releasever
372 string
373
374 Used for substitution of $releasever in the repository configu‐
375 ration. See also repo variables.
376
377 reposdir
378 list
379
380 DNF searches for repository configuration files in the paths
381 specified by reposdir. The behavior of reposdir could differ
382 when it is used along with --installroot option.
383
384 rpmverbosity
385 string
386
387 RPM debug scriptlet output level. One of: critical, emergency,
388 error, warn, info or debug. Default is info.
389
390 strict boolean
391
392 If disabled, all unavailable packages or packages with broken
393 dependencies given to DNF command will be skipped without rais‐
394 ing the error causing the whole operation to fail. Currently
395 works for install command only. The default is True.
396
397 tsflags
398 list
399
400 List of strings adding extra flags for the RPM transaction.
401
402 ┌─────────────┬────────────────────────────┐
403 │tsflag value │ RPM Transaction Flag │
404 ├─────────────┼────────────────────────────┤
405 │noscripts │ RPMTRANS_FLAG_NOSCRIPTS │
406 ├─────────────┼────────────────────────────┤
407 │test │ RPMTRANS_FLAG_TEST │
408 ├─────────────┼────────────────────────────┤
409 │notriggers │ RPMTRANS_FLAG_NOTRIGGERS │
410 ├─────────────┼────────────────────────────┤
411 │nodocs │ RPMTRANS_FLAG_NODOCS │
412 ├─────────────┼────────────────────────────┤
413 │justdb │ RPMTRANS_FLAG_JUSTDB │
414 ├─────────────┼────────────────────────────┤
415 │nocontexts │ RPMTRANS_FLAG_NOCONTEXTS │
416 ├─────────────┼────────────────────────────┤
417 │nocaps │ RPMTRANS_FLAG_NOCAPS │
418 ├─────────────┼────────────────────────────┤
419 │nocrypto │ RPMTRANS_FLAG_NOFILEDIGEST │
420 └─────────────┴────────────────────────────┘
421
422 The nocrypto option will also set the _RPMVSF_NOSIGNATURES and
423 _RPMVSF_NODIGESTS VS flags. The test option provides a transac‐
424 tion check without performing the transaction. It includes down‐
425 loading of packages, gpg keys check (including permanent import
426 of additional keys if necessary), and rpm check to prevent file
427 conflicts. The nocaps is supported with rpm-4.14 or later. When
428 nocaps is used but rpm doesn't support it, DNF only reports it
429 as an invalid tsflag.
430
431 upgrade_group_objects_upgrade
432 boolean
433
434 Set this to False to disable the automatic running of group
435 upgrade when running the upgrade command. Default is True (per‐
436 form the operation).
437
438 varsdir
439 list
440
441 List of directories where variables definition files are looked
442 for. Defaults to "/etc/dnf/vars", "/etc/yum/vars". See variable
443 files in Configuration reference.
444
445 zchunk boolean
446
447 Enables or disables the use of repository metadata compressed
448 using the zchunk format (if available). Default is True.
449
451 color string
452
453 Controls if DNF uses colored output on the command line. Possi‐
454 ble values: "auto", "never", "always". Default is "auto".
455
456 color_list_available_downgrade
457 color
458
459 Color of available packages that are older than installed pack‐
460 ages. The option is used during list operations.
461
462 color_list_available_install
463 color
464
465 Color of packages that are available for installation and none
466 of their versions in installed. The option is used during list
467 operations.
468
469 color_list_available_reinstall
470 color
471
472 Color of available packages that are identical to installed ver‐
473 sions and are available for reinstalls. The option is used dur‐
474 ing list operations.
475
476 color_list_available_upgrade
477 color
478
479 Color of available packages that are newer than installed pack‐
480 ages. The option is used during list operations.
481
482 color_list_installed_extra
483 color
484
485 Color of installed packages that do not have any version among
486 available packages. The option is used during list operations.
487
488 color_list_installed_newer
489 color
490
491 Color of installed packages that are newer than any version
492 among available packages. The option is used during list opera‐
493 tions.
494
495 color_list_installed_older
496 color
497
498 Color of installed packages that are older than any version
499 among available packages. The option is used during list opera‐
500 tions.
501
502 color_list_installed_reinstall
503 color
504
505 Color of installed packages that are among available packages
506 and can be reinstalled. The option is used during list opera‐
507 tions.
508
509 color_search_match
510 color
511
512 Color of patterns matched in search output.
513
514 color_update_installed
515 color
516
517 Color of removed packages. This option is used during display‐
518 ing transactions.
519
520 color_update_local
521 color
522
523 Color of local packages that are installed from the @commandline
524 repository. This option is used during displaying transactions.
525
526 color_update_remote
527 color
528
529 Color of packages that are installed/upgraded/downgraded from
530 remote repositories. This option is used during displaying
531 transactions.
532
534 baseurl
535 list
536
537 List of URLs for the repository. Defaults to [].
538
539 cost integer
540
541 The relative cost of accessing this repository, defaulting to
542 1000. This value is compared when the priorities of two reposi‐
543 tories are the same. The repository with the lowest cost is
544 picked. It is useful to make the library prefer on-disk reposi‐
545 tories to remote ones.
546
547 enabled
548 boolean
549
550 Include this repository as a package source. The default is
551 True.
552
553 gpgkey list of strings
554
555 URLs of a GPG key files that can be used for signing metadata
556 and packages of this repository, empty by default. If a file can
557 not be verified using the already imported keys, import of keys
558 from this option is attempted and the keys are then used for
559 verification.
560
561 metalink
562 string
563
564 URL of a metalink for the repository. Defaults to None.
565
566 mirrorlist
567 string
568
569 URL of a mirrorlist for the repository. Defaults to None.
570
571 module_hotfixes
572 boolean
573
574 Set this to True to disable module RPM filtering and make all
575 RPMs from the repository available. The default is False. This
576 allows user to create a repository with cherry-picked hotfixes
577 that are included in a package set on a modular system.
578
579 name string
580
581 A human-readable name of the repository. Defaults to the ID of
582 the repository.
583
584 priority
585 integer
586
587 The priority value of this repository, default is 99. If there
588 is more than one candidate package for a particular operation,
589 the one from a repo with the lowest priority value is picked,
590 possibly despite being less convenient otherwise (e.g. by being
591 a lower version).
592
593 type string
594
595 Type of repository metadata. Supported values are: rpm-md.
596 Aliases for rpm-md: rpm, repomd, rpmmd, yum, YUM.
597
599 Right side of every repo option can be enriched by the following vari‐
600 ables:
601
602 $arch
603 Refers to the system’s CPU architecture e.g, aarch64, i586, i686 and
604 x86_64.
605
606 $basearch
607 Refers to the base architecture of the system. For example, i686 and
608 i586 machines both have a base architecture of i386, and AMD64 and
609 Intel64 machines have a base architecture of x86_64.
610
611 $releasever
612 Refers to the release version of operating system which DNF derives
613 from information available in RPMDB.
614
615 In addition to these hard coded variables, user-defined ones can also
616 be used. They can be defined either via variable files, or by using
617 special environmental variables. The names of these variables must be
618 prefixed with DNF_VAR_ and they can only consist of alphanumeric char‐
619 acters and underscores:
620
621 $ DNF_VAR_MY_VARIABLE=value
622
623 To use such variable in your repository configuration remove the pre‐
624 fix. E.g.:
625
626 [myrepo]
627 baseurl=https://example.site/pub/fedora/$MY_VARIABLE/releases/$releasever
628
629 Note that it is not possible to override the arch and basearch vari‐
630 ables using either variable files or environmental variables.
631
632 Although users are encouraged to use named variables, the numbered
633 environmental variables DNF0 - DNF9 are still supported:
634
635 $ DNF1=value
636
637 [myrepo]
638 baseurl=https://example.site/pub/fedora/$DNF1/releases/$releasever
639
641 Some options can be applied in either the main section, per repository,
642 or in a combination. The value provided in the main section is used for
643 all repositories as the default value, which repositories can then
644 override in their configuration.
645
646 bandwidth
647 storage size
648
649 Total bandwidth available for downloading. Meaningful when used
650 with the throttle option. Storage size is in bytes by default
651 but can be specified with a unit of storage. Valid units are
652 'k', 'M', 'G'.
653
654 countme
655 boolean
656
657 Determines whether a special flag should be added to a single,
658 randomly chosen metalink/mirrorlist query each week. This
659 allows the repository owner to estimate the number of systems
660 consuming it, by counting such queries over a week's time, which
661 is much more accurate than just counting unique IP addresses
662 (which is subject to both overcounting and undercounting due to
663 short DHCP leases and NAT, respectively).
664
665 The flag is a simple "countme=N" parameter appended to the met‐
666 alink and mirrorlist URL, where N is an integer representing the
667 "longevity" bucket this system belongs to. The following 4
668 buckets are defined, based on how many full weeks have passed
669 since the beginning of the week when this system was installed:
670 1 = first week, 2 = first month (2-4 weeks), 3 = six months
671 (5-24 weeks) and 4 = more than six months (> 24 weeks). This
672 information is meant to help distinguish short-lived installs
673 from long-term ones, and to gather other statistics about system
674 lifecycle.
675
676 Default is False.
677
678 deltarpm
679 boolean
680
681 When enabled, DNF will save bandwidth by downloading much
682 smaller delta RPM files, rebuilding them to RPM locally. How‐
683 ever, this is quite CPU and I/O intensive. Default is True.
684
685 deltarpm_percentage
686 integer
687
688 When the relative size of delta vs pkg is larger than this,
689 delta is not used. Default value is 75 (Deltas must be at least
690 25% smaller than the pkg). Use 0 to turn off delta rpm process‐
691 ing. Local repositories (with file:// baseurl) have delta rpms
692 turned off by default.
693
694 enablegroups
695 boolean
696
697 Determines whether DNF will allow the use of package groups for
698 this repository. Default is True (package groups are allowed).
699
700 excludepkgs
701 list
702
703 Exclude packages of this repository, specified by a name or a
704 glob and separated by a comma, from all operations. Can be dis‐
705 abled using --disableexcludes command line switch. Defaults to
706 [].
707
708 fastestmirror
709 boolean
710
711 If enabled a metric is used to find the fastest available mir‐
712 ror. This overrides the order provided by the mirrorlist/met‐
713 alink file itself. This file is often dynamically generated by
714 the server to provide the best download speeds and enabling
715 fastestmirror overrides this. The default is False.
716
717 gpgcheck
718 boolean
719
720 Whether to perform GPG signature check on packages found in this
721 repository. The default is False.
722
723 This option can only be used to strengthen the active RPM secu‐
724 rity policy set with the %_pkgverify_level macro (see the
725 /usr/lib/rpm/macros file for details). That means, if the macro
726 is set to 'signature' or 'all' and this option is False, it will
727 be overridden to True during DNF runtime, and a warning will be
728 printed. To squelch the warning, make sure this option is True
729 for every enabled repository, and also enable localpkg_gpgcheck.
730
731 includepkgs
732 list
733
734 Include packages of this repository, specified by a name or a
735 glob and separated by a comma, in all operations. Inverse of
736 excludepkgs, DNF will exclude any package in the repository that
737 doesn't match this list. This works in conjunction with
738 excludepkgs and doesn't override it, so if you 'excludep‐
739 kgs=*.i386' and 'includepkgs=python*' then only packages start‐
740 ing with python that do not have an i386 arch will be seen by
741 DNF in this repo. Can be disabled using --disableexcludes com‐
742 mand line switch. Defaults to [].
743
744 ip_resolve
745 IP address type
746
747 Determines how DNF resolves host names. Set this to '4'/'IPv4'
748 or '6'/'IPv6' to resolve to IPv4 or IPv6 addresses only. By
749 default, DNF resolves to either addresses.
750
751 localpkg_gpgcheck
752 boolean
753
754 Whether to perform a GPG signature check on local packages
755 (packages in a file, not in a repository). The default is
756 False. This option is subject to the active RPM security policy
757 (see gpgcheck for more details).
758
759 max_parallel_downloads
760 integer
761
762 Maximum number of simultaneous package downloads. Defaults to 3.
763
764 metadata_expire
765 time in seconds
766
767 The period after which the remote repository is checked for
768 metadata update and in the positive case the local metadata
769 cache is updated. The default corresponds to 48 hours. Set this
770 to -1 or never to make the repo never considered expired. Expire
771 of metadata can be also triggered by change of timestamp of con‐
772 figuration files (dnf.conf, <repo>.repo). See also
773 check_config_file_age.
774
775 minrate
776 storage size
777
778 This sets the low speed threshold in bytes per second. If the
779 server is sending data at the same or slower speed than this
780 value for at least timeout option seconds, DNF aborts the con‐
781 nection. The default is 1000. Valid units are 'k', 'M', 'G'.
782
783 password
784 string
785
786 The password to use for connecting to a repository with basic
787 HTTP authentication. Empty by default.
788
789 proxy string
790
791 URL of a proxy server to connect through. Set to an empty string
792 to disable the proxy setting inherited from the main section and
793 use direct connection instead. The expected format of this
794 option is <scheme>://<ip-or-hostname>[:port]. (For backward
795 compatibility, '_none_' can be used instead of the empty
796 string.)
797
798 Note: The curl environment variables (such as http_proxy) are
799 effective if this option is unset. See the curl man page for
800 details.
801
802 proxy_username
803 string
804
805 The username to use for connecting to the proxy server. Empty by
806 default.
807
808 proxy_password
809 string
810
811 The password to use for connecting to the proxy server. Empty by
812 default.
813
814 proxy_auth_method
815 string
816
817 The authentication method used by the proxy server. Valid values
818 are
819
820 ┌──────────┬────────────────────────────┐
821 │method │ meaning │
822 ├──────────┼────────────────────────────┤
823 │basic │ HTTP Basic authentication │
824 ├──────────┼────────────────────────────┤
825 │digest │ HTTP Digest authentication │
826 ├──────────┼────────────────────────────┤
827 │negotiate │ HTTP Negotiate (SPNEGO) │
828 │ │ authentication │
829 ├──────────┼────────────────────────────┤
830 │ntlm │ HTTP NTLM authentication │
831 ├──────────┼────────────────────────────┤
832 │digest_ie │ HTTP Digest authentication │
833 │ │ with an IE flavor │
834 ├──────────┼────────────────────────────┤
835 │ntlm_wb │ NTLM delegating to winbind │
836 │ │ helper │
837 ├──────────┼────────────────────────────┤
838 │none │ None auth method │
839 ├──────────┼────────────────────────────┤
840 │any │ All suitable methods │
841 └──────────┴────────────────────────────┘
842
843 Defaults to any
844
845 proxy_sslcacert
846 string
847
848 Path to the file containing the certificate authorities to ver‐
849 ify proxy SSL certificates. Empty by default - uses system
850 default.
851
852 proxy_sslverify
853 boolean
854
855 When enabled, proxy SSL certificates are verified. If the client
856 can not be authenticated, connecting fails and the repository is
857 not used any further. If False, SSL connections can be used, but
858 certificates are not verified. Default is True.
859
860 proxy_sslclientcert
861 string
862
863 Path to the SSL client certificate used to connect to proxy
864 server. Empty by default.
865
866 proxy_sslclientkey
867 string
868
869 Path to the SSL client key used to connect to proxy server.
870 Empty by default.
871
872 repo_gpgcheck
873 boolean
874
875 Whether to perform GPG signature check on this repository's
876 metadata. The default is False.
877
878 retries
879 integer
880
881 Set the number of total retries for downloading packages. The
882 number is accumulative, so e.g. for retries=10, dnf will fail
883 after any package download fails for eleventh time. Setting this
884 to 0 makes dnf try forever. Default is 10.
885
886 skip_if_unavailable
887 boolean
888
889 If enabled, DNF will continue running and disable the repository
890 that couldn't be synchronized for any reason. This option
891 doesn't affect skipping of unavailable packages after dependency
892 resolution. To check inaccessibility of repository use it in
893 combination with refresh command line option. The default is
894 False. Note this option in particular can be set in your con‐
895 figuration file by your distribution.
896
897 sslcacert
898 string
899
900 Path to the file containing the certificate authorities to ver‐
901 ify SSL certificates. Empty by default - uses system default.
902
903 sslverify
904 boolean
905
906 When enabled, remote SSL certificates are verified. If the
907 client can not be authenticated, connecting fails and the repos‐
908 itory is not used any further. If False, SSL connections can be
909 used, but certificates are not verified. Default is True.
910
911 sslclientcert
912 string
913
914 Path to the SSL client certificate used to connect to remote
915 sites. Empty by default.
916
917 sslclientkey
918 string
919
920 Path to the SSL client key used to connect to remote sites.
921 Empty by default.
922
923 throttle
924 storage size
925
926 Limits the downloading speed. It might be an absolute value or a
927 percentage, relative to the value of the bandwidth option
928 option. 0 means no throttling (the default). The absolute value
929 is in bytes by default but can be specified with a unit of stor‐
930 age. Valid units are 'k', 'M', 'G'.
931
932 timeout
933 time in seconds
934
935 Number of seconds to wait for a connection before timing out.
936 Used in combination with minrate option option. Defaults to 30
937 seconds.
938
939 username
940 string
941
942 The username to use for connecting to repo with basic HTTP
943 authentication. Empty by default.
944
945 user_agent
946 string
947
948 The User-Agent string to include in HTTP requests sent by DNF.
949 Defaults to
950
951 libdnf (NAME VERSION_ID; VARIANT_ID; OS.BASEARCH)
952
953 where NAME, VERSION_ID and VARIANT_ID are OS identifiers read
954 from the os-release(5) file, and OS and BASEARCH are the canoni‐
955 cal OS name and base architecture, respectively. Example:
956
957 libdnf (Fedora 31; server; Linux.x86_64)
958
960 boolean
961 This is a data type with only two possible values.
962
963 One of following options can be used: 1, 0, True, False, yes, no
964
965 integer
966 It is a whole number that can be written without a fractional
967 component.
968
969 list It is an option that could represent one or more strings sepa‐
970 rated by space or comma characters.
971
972 string It is a sequence of symbols or digits without any whitespace
973 character.
974
975 color A string describing color and modifiers separated with a comma,
976 for example "red,bold".
977
978 · Colors: black, blue, cyan, green, magenta, red, white, yellow
979
980 · Modifiers: bold, blink, dim, normal, reverse, underline
981
983 Cache Files
984 /var/cache/dnf
985
986 Main Configuration File
987 /etc/dnf/dnf.conf
988
989 Repository
990 /etc/yum.repos.d/
991
992 Variables
993 Any properly named file in /etc/dnf/vars is turned into a vari‐
994 able named after the filename (or overrides any of the above
995 variables but those set from commandline). Filenames may contain
996 only alphanumeric characters and underscores and be in lower‐
997 case. Variables are also read from /etc/yum/vars for YUM com‐
998 patibility reasons.
999
1001 · dnf(8), DNF Command Reference
1002
1004 See AUTHORS in DNF source distribution.
1005
1007 2012-2021, Red Hat, Licensed under GPLv2+
1008
1009
1010
1011
10124.6.1 Mar 02, 2021 DNF.CONF(5)