allow_vendor_change
boolean
If disabled dnf will stick to vendor when upgrading or
downgrading rpms. Default is True
WARNING:
This option is currently not supported for downgrade
and distro-sync commands
arch string
The architecture used for installing packages. By default
this is auto-detected. Often used together with ignorearch
option.
assumeno
boolean
If enabled dnf will assume No where it would normally
prompt for confirmation from user input. Default is False.
assumeyes
boolean
If enabled dnf will assume Yes where it would normally
prompt for confirmation from user input (see also
defaultyes). Default is False.
autocheck_running_kernel
boolean
Automatic check whether there is installed newer kernel
module with security update than currently running kernel.
Default is True.
basearch
string
The base architecture used for installing packages. By
default this is auto-detected.
best boolean
True instructs the solver to either use a package with the
highest available version or fail. On False, do not fail
if the latest version cannot be installed and go with the
lower version. The default is False. Note this option in
particular can be set in your configuration file by your
distribution. Also note that the use of the highest
available version is only guaranteed for the packages
directly requested and not for their dependencies.
cachedir
string
Path to a directory used by various DNF subsystems for
storing cache data. Has a reasonable root-writable
default depending on the distribution. DNF needs to be
able to create files and directories at this location.
cacheonly
boolean
If set to True DNF will run entirely from system cache,
will not update the cache and will use it even in case it
is expired. Default is False.
check_config_file_age
boolean
Specifies whether dnf should automatically expire metadata
of repos, which are older than their corresponding
configuration file (usually the dnf.conf file and the
foo.repo file). Default is True (perform the check).
Expire of metadata is also affected by metadata age. See
also metadata_expire.
clean_requirements_on_remove
boolean
Remove dependencies that are no longer used during dnf
remove. A package only qualifies for removal via
clean_requirements_on_remove if it was installed through
DNF but not on explicit user request, i.e. it was pulled
in as a dependency. The default is True. (installonlypkgs
are never automatically removed.)
config_file_path
string
Path to the default main configuration file. Default is
/etc/dnf/dnf.conf.
debuglevel
integer
Debug messages output level, in the range 0 to 10. The
higher the number the more debug output is put to stdout.
Default is 2.
debug_solver
boolean
Controls whether the libsolv debug files should be created
when solving the transaction. The debug files are created
in the ./debugdata directory. Default is False.
defaultyes
boolean
If enabled the default answer to user confirmation prompts
will be Yes. Not to be confused with assumeyes which will
not prompt at all. Default is False.
diskspacecheck
boolean
Controls wheather rpm shoud check available disk space
during the transaction. Default is True.
errorlevel
integer
Error messages output level, in the range 0 to 10. The
higher the number the more error output is put to stderr.
Default is 3. This is deprecated in DNF and overwritten by
--verbose commandline option.
exit_on_lock
boolean
Should the dnf client exit immediately when something else
has the lock. Default is False.
gpgkey_dns_verification
boolean
Should the dnf attempt to automatically verify GPG
verification keys using the DNS system. This option
requires the unbound python module (python3-unbound) to be
installed on the client system. This system has two main
features. The first one is to check if any of the already
installed keys have been revoked. Automatic removal of the
key is not yet available, so it is up to the user, to
remove revoked keys from the system. The second feature is
automatic verification of new keys when a repository is
added to the system. In interactive mode, the result is
written to the output as a suggestion to the user. In
non-interactive mode (i.e. when -y is used), this system
will automatically accept keys that are available in the
DNS and are correctly signed using DNSSEC. It will also
accept keys that do not exist in the DNS system and their
NON-existence is cryptographically proven using DNSSEC.
This is mainly to preserve backward compatibility.
Default is False.
group_package_types
list
List of the following: optional, default, mandatory. Tells
dnf which type of packages in groups will be installed
when 'groupinstall' is called. Default is: default,
mandatory.
ignorearch
boolean
If set to True, RPM will allow attempts to install
packages incompatible with the CPU's architecture.
Defaults to False. Often used together with arch option.
installonlypkgs
list
List of provide names of packages that should only ever be
installed, never upgraded. Kernels in particular fall into
this category. These packages are never removed by dnf
autoremove even if they were installed as dependencies
(see clean_requirements_on_remove for auto removal
details). This option append the list values to the
default installonlypkgs list used by DNF. The number of
kept package versions is regulated by installonly_limit.
installonly_limit
integer
Number of installonly packages allowed to be installed
concurrently. Defaults to 3. The minimal number of
installonly packages is 2. Value 0 means unlimited number
of installonly packages. Value 1 is explicitely not
allowed since it complicates kernel upgrades due to
protection of the running kernel from removal.
installroot
string
The root of the filesystem for all packaging operations.
It requires an absolute path. See also –installroot
commandline option.
install_weak_deps
boolean
When this option is set to True and a new package is about
to be installed, all packages linked by weak dependency
relation (Recommends or Supplements flags) with this
package will be pulled into the transaction. Default is
True.
keepcache
boolean
Keeps downloaded packages in the cache when set to True.
Even if it is set to False and packages have not been
installed they will still persist until next successful
transaction. The default is False.
logdir string
Directory where the log files will be stored. Default is
/var/log.
logfilelevel
integer
Log file messages output level, in the range 0 to 10. The
higher the number the more debug output is put to logs.
Default is 9.
This option controls dnf.log, dnf.librepo.log and
hawkey.log. Although dnf.librepo.log and hawkey.log are
affected only by setting the logfilelevel to 10.
log_compress
boolean
When set to True, log files are compressed when they are
rotated. Default is False.
log_rotate
integer
Log files are rotated log_rotate times before being
removed. If log_rotate is 0, the rotation is not
performed. Default is 4.
log_size
storage size
Log files are rotated when they grow bigger than log_size
bytes. If log_size is 0, the rotation is not performed.
The default is 1 MB. Valid units are 'k', 'M', 'G'.
The size applies for individual log files, not the sum of
all log files. See also log_rotate.
metadata_timer_sync
time in seconds
The minimal period between two consecutive makecache timer
runs. The command will stop immediately if it's less than
this time period since its last run. Does not affect
simple makecache run. Use 0 to completely disable
automatic metadata synchronizing. The default corresponds
to three hours. The value is rounded to the next commenced
hour.
module_obsoletes
boolean
This option controls whether dnf should apply modular
obsoletes when possible.
module_platform_id
string
Set this to $name:$stream to override PLATFORM_ID detected
from /etc/os-release. It is necessary to perform a system
upgrade and switch to a new platform.
module_stream_switch
boolean
This option controls whether it's possible to switch
enabled streams of a module.
multilib_policy
string
Controls how multilib packages are treated during install
operations. Can either be "best" (the default) for the
depsolver to prefer packages which best match the system's
architecture, or "all" to install all available packages
with compatible architectures.
obsoletes
boolean
This option only has affect during an install/update. It
enables dnf's obsoletes processing logic, which means it
makes dnf check whether any dependencies of given package
are no longer required and removes them. Useful when
doing distribution level upgrades. Default is 'true'.
Command-line option: –obsoletes
persistdir
string
Directory where DNF stores its persistent data between
runs. Default is "/var/lib/dnf".
pluginconfpath
list
List of directories that are searched for plugin
configurations to load. All configuration files found in
these directories, that are named same as a plugin, are
parsed. The default path is /etc/dnf/plugins.
pluginpath
list
List of directories that are searched for plugins to load.
Plugins found in any of the directories in this
configuration option are used. The default contains a
Python version-specific path.
plugins
boolean
Controls whether the plugins are enabled. Default is True.
protected_packages
list
List of packages that DNF should never completely remove.
They are protected via Obsoletes as well as user/plugin
removals.
The default is: dnf, glob:/etc/yum/protected.d/*.conf and
glob:/etc/dnf/protected.d/*.conf. So any packages which
should be protected can do so by including a file in
/etc/dnf/protected.d with their package name in it.
DNF will protect also the package corresponding to the
running version of the kernel. See also
protect_running_kernel option.
protect_running_kernel
boolean
Controls whether the package corresponding to the running
version of kernel is protected from removal. Default is
True.
releasever
string
Used for substitution of $releasever in the repository
configuration. See also repo variables.
reposdir
list
DNF searches for repository configuration files in the
paths specified by reposdir. The behavior of reposdir
could differ when it is used along with --installroot
option.
rpmverbosity
string
RPM debug scriptlet output level. One of: critical,
emergency, error, warn, info or debug. Default is info.
strict boolean
If disabled, all unavailable packages or packages with
broken dependencies given to DNF command will be skipped
without raising the error causing the whole operation to
fail. Currently works for install command only. The
default is True.
tsflags
list
List of strings adding extra flags for the RPM
transaction.
┌─────────────┬────────────────────────────┐
│tsflag value │ RPM Transaction Flag │
├─────────────┼────────────────────────────┤
│noscripts │ RPMTRANS_FLAG_NOSCRIPTS │
├─────────────┼────────────────────────────┤
│test │ RPMTRANS_FLAG_TEST │
├─────────────┼────────────────────────────┤
│notriggers │ RPMTRANS_FLAG_NOTRIGGERS │
├─────────────┼────────────────────────────┤
│nodocs │ RPMTRANS_FLAG_NODOCS │
├─────────────┼────────────────────────────┤
│justdb │ RPMTRANS_FLAG_JUSTDB │
├─────────────┼────────────────────────────┤
│nocontexts │ RPMTRANS_FLAG_NOCONTEXTS │
├─────────────┼────────────────────────────┤
│nocaps │ RPMTRANS_FLAG_NOCAPS │
├─────────────┼────────────────────────────┤
│nocrypto │ RPMTRANS_FLAG_NOFILEDIGEST │
└─────────────┴────────────────────────────┘
The nocrypto option will also set the _RPMVSF_NOSIGNATURES
and _RPMVSF_NODIGESTS VS flags. The test option provides a
transaction check without performing the transaction. It
includes downloading of packages, gpg keys check
(including permanent import of additional keys if
necessary), and rpm check to prevent file conflicts. The
nocaps is supported with rpm-4.14 or later. When nocaps is
used but rpm doesn't support it, DNF only reports it as an
invalid tsflag.
upgrade_group_objects_upgrade
boolean
Set this to False to disable the automatic running of
group upgrade when running the upgrade command. Default is
True (perform the operation).
varsdir
list
List of directories where variables definition files are
looked for. Defaults to "/etc/dnf/vars", "/etc/yum/vars".
See variable files in Configuration reference.
zchunk boolean
Enables or disables the use of repository metadata
compressed using the zchunk format (if available). Default
is True.
