dnf.conf(category21-suse.html) - phpMan

DNF.CONF(5)                           DNF                          DNF.CONF(5)
NAME
       dnf.conf - DNF Configuration Reference
DESCRIPTION
       DNF  by default uses the global configuration file at /etc/dnf/dnf.conf
       and all *.repo files found under /etc/yum.repos.d. The latter is  typi-
       cally  used  for  repository  configuration  and  takes precedence over
       global configuration.
       The configuration file has INI format consisting of section declaration
       and name=value options below each on separate line. There are two types
       of sections in the configuration files: main and repository. Main  sec-
       tion defines all global configuration options and should be only one.
       The  repository  sections  define the configuration for each (remote or
       local) repository. The section name of the repository in brackets serve
       as  repo  ID reference and should be unique across configuration files.
       The allowed characters of repo ID  string  are  lower  and  upper  case
       alphabetic letters, digits, -, _, .  and :. The minimal repository con-
       figuration file should aside from repo ID consists of baseurl, metalink
       or mirrorlist option definition.
DISTRIBUTION-SPECIFIC CONFIGURATION
       Configuration  options, namely best and skip_if_unavailable, can be set
       in the DNF configuration file by your distribution to override the  DNF
       defaults.
[MAIN] OPTIONS
       allow_vendor_change
              boolean
              If disabled dnf will stick to vendor when upgrading or downgrad-
              ing rpms.  Default is True
              WARNING:
                 This option is currently not supported for downgrade and dis-
                 tro-sync commands
       arch   string
              The  architecture  used for installing packages. By default this
              is auto-detected. Often used together with ignorearch option.
       assumeno
              boolean
              If enabled dnf will assume No where it would normally prompt for
              confirmation from user input. Default is False.
       assumeyes
              boolean
              If  enabled  dnf  will assume Yes where it would normally prompt
              for confirmation from user input (see also defaultyes).  Default
              is False.
       autocheck_running_kernel
              boolean
              Automatic  check  whether there is installed newer kernel module
              with security update than currently running kernel.  Default  is
              True.
       basearch
              string
              The  base  architecture used for installing packages. By default
              this is auto-detected.
       best   boolean
              True instructs the solver to either use a package with the high-
              est available version or fail. On False, do not fail if the lat-
              est version cannot be installed and go with the  lower  version.
              The default is False.  Note this option in particular can be set
              in your configuration file by your distribution.
       cachedir
              string
              Path to a directory used by various DNF subsystems  for  storing
              cache data.  Has a reasonable root-writable default depending on
              the distribution. DNF needs to  be  able  to  create  files  and
              directories at this location.
       cacheonly
              boolean
              If set to True DNF will run entirely from system cache, will not
              update the cache and will use it even in  case  it  is  expired.
              Default is False.
              API  Notes:  Must  be set before repository objects are created.
              Plugins must set this in the pre_config hook. Later changes  are
              ignored.
       check_config_file_age
              boolean
              Specifies  whether  dnf  should automatically expire metadata of
              repos, which are older than  their  corresponding  configuration
              file (usually the dnf.conf file and the foo.repo file).  Default
              is True (perform the check). Expire of metadata is also affected
              by metadata age.  See also metadata_expire.
       clean_requirements_on_remove
              boolean
              Remove dependencies that are no longer used during dnf remove. A
              package  only   qualifies   for   removal   via   clean_require-
              ments_on_remove  if  it  was  installed  through  DNF but not on
              explicit user request, i.e. it was pulled in  as  a  dependency.
              The  default  is True.  (installonlypkgs are never automatically
              removed.)
       config_file_path
              string
              Path  to  the  default  main  configuration  file.  Default   is
              /etc/dnf/dnf.conf.
       debuglevel
              integer
              Debug  messages  output  level, in the range 0 to 10. The higher
              the number the more debug output is put to stdout. Default is 2.
       debug_solver
              boolean
              Controls whether the libsolv debug files should be created  when
              solving  the  transaction.  The  debug  files are created in the
              ./debugdata directory.  Default is False.
       defaultyes
              boolean
              If enabled the default answer to user confirmation prompts  will
              be  Yes. Not to be confused with assumeyes which will not prompt
              at all. Default is False.
       diskspacecheck
              boolean
              Controls wheather rpm shoud check available  disk  space  during
              the transaction.  Default is True.
       errorlevel
              integer
              Error  messages  output  level, in the range 0 to 10. The higher
              the number the more error output is put to stderr. Default is 3.
              This  is deprecated in DNF and overwritten by --verbose command-
              line option.
       exit_on_lock
              boolean
              Should the dnf client exit immediately when something  else  has
              the lock. Default is False.
       gpgkey_dns_verification
              boolean
              Should  the dnf attempt to automatically verify GPG verification
              keys using the DNS system.  This  option  requires  the  unbound
              python  module  (python3-unbound)  to be installed on the client
              system. This system has two main features. The first one  is  to
              check  if  any  of the already installed keys have been revoked.
              Automatic removal of the key is not yet available, so it  is  up
              to  the user, to remove revoked keys from the system. The second
              feature is automatic verification of new keys when a  repository
              is added to the system. In interactive mode, the result is writ-
              ten to the output as a suggestion to the user.  In  non-interac-
              tive mode (i.e. when -y is used), this system will automatically
              accept keys that are available in  the  DNS  and  are  correctly
              signed  using DNSSEC. It will also accept keys that do not exist
              in the DNS system and their NON-existence  is  cryptographically
              proven using DNSSEC. This is mainly to preserve backward compat-
              ibility.  Default is False.
       group_package_types
              list
              List of the following: optional, default, mandatory.  Tells  dnf
              which  type  of  packages  in  groups  will  be  installed  when
              'groupinstall' is called. Default is: default, mandatory.
       ignorearch
              boolean
              If set to True, RPM will  allow  attempts  to  install  packages
              incompatible  with  the  CPU's  architecture. Defaults to False.
              Often used together with arch option.
       installonlypkgs
              list
              List of provide names of  packages  that  should  only  ever  be
              installed,  never upgraded. Kernels in particular fall into this
              category.  These packages are never removed  by  dnf  autoremove
              even    if    they   were   installed   as   dependencies   (see
              clean_requirements_on_remove for auto  removal  details).   This
              option  append  the  list  values to the default installonlypkgs
              list used by DNF. The number of kept package versions  is  regu-
              lated by installonly_limit.
       installonly_limit
              integer
              Number  of  installonly packages allowed to be installed concur-
              rently. Defaults to 3. The minimal number of  installonly  pack-
              ages  is  2. Value 0 means unlimited number of installonly pack-
              ages. Value 1 is explicitely not allowed  since  it  complicates
              kernel  upgrades  due  to  protection of the running kernel from
              removal.
       installroot
              string
              The root of the filesystem  for  all  packaging  operations.  It
              requires  an  absolute  path. See also --installroot commandline
              option.
       install_weak_deps
              boolean
              When this option is set to True and a new package is about to be
              installed, all packages linked by weak dependency relation (Rec-
              ommends or Supplements flags) with this package will  be  pulled
              into the transaction.  Default is True.
       keepcache
              boolean
              Keeps downloaded packages in the cache when set to True. Even if
              it is set to False and packages have  not  been  installed  they
              will  still  persist  until  next  successful  transaction.  The
              default is False.
       logdir string
              Directory where  the  log  files  will  be  stored.  Default  is
              /var/log.
       logfilelevel
              integer
              Log file messages output level, in the range 0 to 10. The higher
              the number the more debug output is put to logs. Default is 9.
              This option controls dnf.log,  dnf.librepo.log  and  hawkey.log.
              Although  dnf.librepo.log  and  hawkey.log  are affected only by
              setting the logfilelevel to 10.
       log_compress
              boolean
              When set to  True,  log  files  are  compressed  when  they  are
              rotated. Default is False.
       log_rotate
              integer
              Log  files are rotated log_rotate times before being removed. If
              log_rotate is 0, the rotation is not performed.  Default is 4.
       log_size
              storage size
              Log  files are rotated  when  they  grow  bigger  than  log_size
              bytes.  If  log_size  is  0,  the rotation is not performed. The
              default is 1 MB. Valid units are 'k', 'M', 'G'.
              The size applies for individual log files, not the  sum  of  all
              log files.  See also log_rotate.
       metadata_timer_sync
              time in seconds
              The minimal period between two consecutive makecache timer runs.
              The command will stop immediately if it's less  than  this  time
              period since its last run. Does not affect simple makecache run.
              Use 0 to completely disable  automatic  metadata  synchronizing.
              The  default corresponds to three hours. The value is rounded to
              the next commenced hour.
       module_obsoletes
              boolean
              This option controls whether dnf should apply modular  obsoletes
              when possible.
       module_platform_id
              string
              Set  this to $name:$stream to override PLATFORM_ID detected from
              /etc/os-release.  It is necessary to perform  a  system  upgrade
              and switch to a new platform.
       module_stream_switch
              boolean
              This  option  controls  whether  it's possible to switch enabled
              streams of a module.
       multilib_policy
              string
              Controls how multilib packages are treated during install opera-
              tions.  Can  either be "best" (the default) for the depsolver to
              prefer packages which best match the system's  architecture,  or
              "all" to install packages for all available architectures.
       obsoletes
              boolean
              This option only has affect during an install/update. It enables
              dnf's obsoletes processing logic, which means it makes dnf check
              whether any dependencies of given package are no longer required
              and  removes  them.   Useful  when  doing   distribution   level
              upgrades.  Default is 'true'.
              Command-line option: --obsoletes
       persistdir
              string
              Directory  where  DNF  stores  its persistent data between runs.
              Default is "/var/lib/dnf".
       pluginconfpath
              list
              List of directories that are searched for plugin  configurations
              to  load.  All  configuration  files found in these directories,
              that are named same as a plugin, are parsed. The default path is
              /etc/dnf/plugins.
       pluginpath
              list
              List of directories that are searched for plugins to load. Plug-
              ins found in any of the directories in this configuration option
              are used. The default contains a Python version-specific path.
       plugins
              boolean
              Controls whether the plugins are enabled. Default is True.
       protected_packages
              list
              List  of  packages that DNF should never completely remove. They
              are protected via Obsoletes as well as user/plugin removals.
              The  default  is:  dnf,   glob:/etc/yum/protected.d/*.conf   and
              glob:/etc/dnf/protected.d/*.conf.  So  any packages which should
              be protected can do so by  including  a  file  in  /etc/dnf/pro-
              tected.d with their package name in it.
              DNF  will  protect also the package corresponding to the running
              version of the kernel. See also protect_running_kernel option.
       protect_running_kernel
              boolean
              Controls whether the package corresponding to the  running  ver-
              sion of kernel is protected from removal. Default is True.
       releasever
              string
              Used  for substitution of $releasever in the repository configu-
              ration.  See also repo variables.
       reposdir
              list
              DNF searches for repository configuration  files  in  the  paths
              specified  by  reposdir.  The  behavior of reposdir could differ
              when it is used along with --installroot option.
       rpmverbosity
              string
              RPM debug scriptlet output level. One of:  critical,  emergency,
              error, warn, info or debug. Default is info.
       strict boolean
              If  disabled,  all  unavailable packages or packages with broken
              dependencies given to DNF command will be skipped without  rais-
              ing  the  error  causing  the whole operation to fail. Currently
              works for install command only. The default is True.
       tsflags
              list
              List of strings adding extra flags for the RPM transaction.
                        +-------------+----------------------------+
                        |tsflag value | RPM Transaction Flag       |
                        +-------------+----------------------------+
                        |noscripts    | RPMTRANS_FLAG_NOSCRIPTS    |
                        +-------------+----------------------------+
                        |test         | RPMTRANS_FLAG_TEST         |
                        +-------------+----------------------------+
                        |notriggers   | RPMTRANS_FLAG_NOTRIGGERS   |
                        +-------------+----------------------------+
                        |nodocs       | RPMTRANS_FLAG_NODOCS       |
                        +-------------+----------------------------+
                        |justdb       | RPMTRANS_FLAG_JUSTDB       |
                        +-------------+----------------------------+
                        |nocontexts   | RPMTRANS_FLAG_NOCONTEXTS   |
                        +-------------+----------------------------+
                        |nocaps       | RPMTRANS_FLAG_NOCAPS       |
                        +-------------+----------------------------+
                        |nocrypto     | RPMTRANS_FLAG_NOFILEDIGEST |
                        +-------------+----------------------------+
              The nocrypto option will also set the  _RPMVSF_NOSIGNATURES  and
              _RPMVSF_NODIGESTS  VS flags. The test option provides a transac-
              tion check without performing the transaction. It includes down-
              loading  of packages, gpg keys check (including permanent import
              of additional keys if necessary), and rpm check to prevent  file
              conflicts.  The nocaps is supported with rpm-4.14 or later. When
              nocaps is used but rpm doesn't support it, DNF only  reports  it
              as an invalid tsflag.
       upgrade_group_objects_upgrade
              boolean
              Set  this  to  False  to  disable the automatic running of group
              upgrade when running the upgrade command. Default is True  (per-
              form the operation).
       varsdir
              list
              List  of directories where variables definition files are looked
              for. Defaults to "/etc/dnf/vars", "/etc/yum/vars". See  variable
              files in Configuration reference.
       zchunk boolean
              Enables  or  disables  the use of repository metadata compressed
              using the zchunk format (if available). Default is True.
[MAIN] OPTIONS - COLORS
       color  string
              Controls if DNF uses colored output on the command line.  Possi-
              ble values: "auto", "never", "always". Default is "auto".
       color_list_available_downgrade
              color
              Color  of available packages that are older than installed pack-
              ages.  The option is used during  list  operations.  Default  is
              magenta.
       color_list_available_install
              color
              Color  of  packages that are available for installation and none
              of their versions in installed.  The option is used during  list
              operations. Default is bold,cyan.
       color_list_available_reinstall
              color
              Color of available packages that are identical to installed ver-
              sions and are available for reinstalls. Default  is  bold,under-
              line,green.  The option is used during list operations.
       color_list_available_upgrade
              color
              Color  of available packages that are newer than installed pack-
              ages. Default is bold,blue.  The  option  is  used  during  list
              operations.
       color_list_installed_extra
              color
              Color  of  installed packages that do not have any version among
              available packages.  The option is used during list  operations.
              Default is bold,red.
       color_list_installed_newer
              color
              Color  of  installed  packages  that  are newer than any version
              among available packages.  The option is used during list opera-
              tions. Default is bold,yellow.
       color_list_installed_older
              color
              Color  of  installed  packages  that  are older than any version
              among available packages.  The option is used during list opera-
              tions. Default is yellow.
       color_list_installed_reinstall
              color
              Color  of  installed  packages that are among available packages
              and can be reinstalled.  The option is used during  list  opera-
              tions. Default is cyan.
       color_search_match
              color
              Color   of   patterns  matched  in  search  output.  Default  is
              bold,magenta.
       color_update_installed
              color
              Color of removed packages. Default is red.  This option is  used
              during displaying transactions.
       color_update_local
              color
              Color of local packages that are installed from the @commandline
              repository.  This option is used during displaying transactions.
              Default is green.
       color_update_remote
              color
              Color  of  packages  that are installed/upgraded/downgraded from
              remote repositories.  This  option  is  used  during  displaying
              transactions. Default is bold,green.
REPO OPTIONS
       baseurl
              list
              List of URLs for the repository. Defaults to [].
       cost   integer
              The  relative  cost  of accessing this repository, defaulting to
              1000. This value is compared when the priorities of two  reposi-
              tories  are  the  same.  The  repository with the lowest cost is
              picked. It is useful to make the library prefer on-disk  reposi-
              tories to remote ones.
       enabled
              boolean
              Include  this  repository  as  a  package source. The default is
              True.
       gpgkey list of strings
              URLs of a GPG key files that can be used  for  signing  metadata
              and packages of this repository, empty by default. If a file can
              not be verified using the already imported keys, import of  keys
              from  this  option  is  attempted and the keys are then used for
              verification.
       metalink
              string
              URL of a metalink for the repository. Defaults to None.
       mirrorlist
              string
              URL of a mirrorlist for the repository. Defaults to None.
       module_hotfixes
              boolean
              Set this to True to disable module RPM filtering  and  make  all
              RPMs  from the repository available. The default is False.  This
              allows user to create a repository with  cherry-picked  hotfixes
              that are included in a package set on a modular system.
       name   string
              A  human-readable  name of the repository. Defaults to the ID of
              the repository.
       priority
              integer
              The priority value of this repository, default is 99.  If  there
              is  more  than one candidate package for a particular operation,
              the one from a repo with the lowest priority  value  is  picked,
              possibly  despite being less convenient otherwise (e.g. by being
              a lower version).
       type   string
              Type of  repository  metadata.  Supported  values  are:  rpm-md.
              Aliases for rpm-md: rpm, repomd, rpmmd, yum, YUM.
REPO VARIABLES
       Right  side of every repo option can be enriched by the following vari-
       ables:
       $arch
          Refers to the system's CPU architecture e.g, aarch64, i586, i686 and
          x86_64.
       $basearch
          Refers to the base architecture of the system. For example, i686 and
          i586 machines both have a base architecture of i386, and  AMD64  and
          Intel64 machines have a base architecture of x86_64.
       $releasever
          Refers  to the release version of operating system which DNF derives
          from information available in RPMDB.
       In addition to these hard coded variables, user-defined ones  can  also
       be  used.  They  can  be defined either via variable files, or by using
       special environmental variables. The names of these variables  must  be
       prefixed  with DNF_VAR_ and they can only consist of alphanumeric char-
       acters and underscores:
          $ DNF_VAR_MY_VARIABLE=value
       To use such variable in your repository configuration remove  the  pre-
       fix. E.g.:
          [myrepo]
          baseurl=https://example.site/pub/fedora/$MY_VARIABLE/releases/$releasever
       Note  that  it  is not possible to override the arch and basearch vari-
       ables using either variable files or environmental variables.
       Although users are encouraged to  use  named  variables,  the  numbered
       environmental variables DNF0 - DNF9 are still supported:
          $ DNF1=value
          [myrepo]
          baseurl=https://example.site/pub/fedora/$DNF1/releases/$releasever
OPTIONS FOR BOTH [MAIN] AND REPO
       Some options can be applied in either the main section, per repository,
       or in a combination. The value provided in the main section is used for
       all  repositories  as  the  default  value, which repositories can then
       override in their configuration.
       bandwidth
              storage size
              Total bandwidth available for downloading. Meaningful when  used
              with  the  throttle  option. Storage size is in bytes by default
              but can be specified with a unit of  storage.  Valid  units  are
              'k', 'M', 'G'.
       countme
              boolean
              Determines  whether  a special flag should be added to a single,
              randomly  chosen  metalink/mirrorlist  query  each  week.   This
              allows  the  repository  owner to estimate the number of systems
              consuming it, by counting such queries over a week's time, which
              is  much  more  accurate  than just counting unique IP addresses
              (which is subject to both overcounting and undercounting due  to
              short DHCP leases and NAT, respectively).
              The  flag is a simple "countme=N" parameter appended to the met-
              alink and mirrorlist URL, where N is an integer representing the
              "longevity"  bucket  this  system  belongs  to.  The following 4
              buckets are defined, based on how many full  weeks  have  passed
              since  the beginning of the week when this system was installed:
              1 = first week, 2 = first month (2-4  weeks),  3  =  six  months
              (5-24  weeks)  and  4 = more than six months (> 24 weeks).  This
              information is meant to help  distinguish  short-lived  installs
              from long-term ones, and to gather other statistics about system
              lifecycle.
              Default is False.
       deltarpm
              boolean
              When enabled,  DNF  will  save  bandwidth  by  downloading  much
              smaller  delta  RPM  files, rebuilding them to RPM locally. How-
              ever, this is quite CPU and I/O intensive. Default is True.
       deltarpm_percentage
              integer
              When the relative size of delta vs  pkg  is  larger  than  this,
              delta is not used.  Default value is 75 (Deltas must be at least
              25% smaller than the pkg).  Use 0 to turn off delta rpm process-
              ing.  Local  repositories (with file:// baseurl) have delta rpms
              turned off by default.
       enablegroups
              boolean
              Determines whether DNF will allow the use of package groups  for
              this repository. Default is True (package groups are allowed).
       excludepkgs
              list
              Exclude  packages  of  this repository, specified by a name or a
              glob and separated by a comma, from all operations.  Can be dis-
              abled  using --disableexcludes command line switch.  Defaults to
              [].
       fastestmirror
              boolean
              If enabled a metric is used to find the fastest  available  mir-
              ror.  This  overrides  the order provided by the mirrorlist/met-
              alink file itself. This file is often dynamically  generated  by
              the  server  to  provide  the  best download speeds and enabling
              fastestmirror overrides this. The default is False.
       gpgcheck
              boolean
              Whether to perform GPG signature check on packages found in this
              repository.  The default is False.
              This  option can only be used to strengthen the active RPM secu-
              rity policy  set  with  the  %_pkgverify_level  macro  (see  the
              /usr/lib/rpm/macros file for details).  That means, if the macro
              is set to 'signature' or 'all' and this option is False, it will
              be  overridden to True during DNF runtime, and a warning will be
              printed.  To squelch the warning, make sure this option is  True
              for every enabled repository, and also enable localpkg_gpgcheck.
       includepkgs
              list
              Include  packages  of  this repository, specified by a name or a
              glob and separated by a comma, in all  operations.   Inverse  of
              excludepkgs, DNF will exclude any package in the repository that
              doesn't  match  this  list.  This  works  in  conjunction   with
              excludepkgs  and  doesn't  override  it,  so  if  you 'excludep-
              kgs=*.i386' and 'includepkgs=python*' then only packages  start-
              ing  with  python  that do not have an i386 arch will be seen by
              DNF in this repo.  Can be disabled using --disableexcludes  com-
              mand line switch.  Defaults to [].
       ip_resolve
              IP address type
              Determines  how  DNF resolves host names. Set this to '4'/'IPv4'
              or '6'/'IPv6' to resolve to IPv4  or  IPv6  addresses  only.  By
              default, DNF resolves to either addresses.
       localpkg_gpgcheck
              boolean
              Whether  to  perform  a  GPG  signature  check on local packages
              (packages in a file, not  in  a  repository).   The  default  is
              False.  This option is subject to the active RPM security policy
              (see gpgcheck for more details).
       max_parallel_downloads
              integer
              Maximum number of simultaneous package downloads. Defaults to 3.
              Maximum of 20.
       metadata_expire
              time in seconds
              The  period  after  which  the  remote repository is checked for
              metadata update and in the  positive  case  the  local  metadata
              cache  is updated. The default corresponds to 48 hours. Set this
              to -1 or never to make the repo never considered expired. Expire
              of metadata can be also triggered by change of timestamp of con-
              figuration   files    (dnf.conf,    <repo>.repo).    See    also
              check_config_file_age.
       minrate
              storage size
              This  sets  the  low speed threshold in bytes per second. If the
              server is sending data at the same or  slower  speed  than  this
              value  for  at least timeout option seconds, DNF aborts the con-
              nection. The default is 1000. Valid units are 'k', 'M', 'G'.
       password
              string
              The password to use for connecting to a  repository  with  basic
              HTTP authentication. Empty by default.
       proxy  string
              URL of a proxy server to connect through. Set to an empty string
              in the repository configuration to disable proxy setting  inher-
              ited  from  the main section. The expected format of this option
              is <scheme>://<ip-or-hostname>[:port].  (For  backward  compati-
              bility, '_none_' can be used instead of the empty string.)
              Note:  The  curl  environment variables (such as http_proxy) are
              effective if this option is unset (or '_none_'  is  set  in  the
              repository configuration). See the curl man page for details.
       proxy_username
              string
              The username to use for connecting to the proxy server. Empty by
              default.
       proxy_password
              string
              The password to use for connecting to the proxy server. Empty by
              default.
       proxy_auth_method
              string
              The authentication method used by the proxy server. Valid values
              are
                          +----------+----------------------------+
                          |method    | meaning                    |
                          +----------+----------------------------+
                          |basic     | HTTP Basic authentication  |
                          +----------+----------------------------+
                          |digest    | HTTP Digest authentication |
                          +----------+----------------------------+
                          |negotiate | HTTP  Negotiate   (SPNEGO) |
                          |          | authentication             |
                          +----------+----------------------------+
                          |ntlm      | HTTP NTLM authentication   |
                          +----------+----------------------------+
                          |digest_ie | HTTP Digest authentication |
                          |          | with an IE flavor          |
                          +----------+----------------------------+
                          |ntlm_wb   | NTLM delegating to winbind |
                          |          | helper                     |
                          +----------+----------------------------+
                          |none      | None auth method           |
                          +----------+----------------------------+
                          |any       | All suitable methods       |
                          +----------+----------------------------+
              Defaults to any
       proxy_sslcacert
              string
              Path  to the file containing the certificate authorities to ver-
              ify proxy SSL certificates.  Empty  by  default  -  uses  system
              default.
       proxy_sslverify
              boolean
              When enabled, proxy SSL certificates are verified. If the client
              can not be authenticated, connecting fails and the repository is
              not used any further. If False, SSL connections can be used, but
              certificates are not verified. Default is True.
       proxy_sslclientcert
              string
              Path to the SSL client certificate  used  to  connect  to  proxy
              server.  Empty by default.
       proxy_sslclientkey
              string
              Path  to  the  SSL  client  key used to connect to proxy server.
              Empty by default.
       repo_gpgcheck
              boolean
              Whether to perform GPG  signature  check  on  this  repository's
              metadata.  The  default  is  False.  Note that GPG keys for this
              check are stored separately from GPG keys used in package signa-
              ture  verification. Furthermore, they are also stored separately
              for each repository.
              This means that dnf may ask to  import  the  same  key  multiple
              times.  For example, when a key was already imported for package
              signature verification and this option is turned on, it  may  be
              needed to import it again for the repository.
       retries
              integer
              Set  the  number  of total retries for downloading packages. The
              number is accumulative, so e.g. for retries=10,  dnf  will  fail
              after any package download fails for eleventh time. Setting this
              to 0 makes dnf try forever. Default is 10.
       skip_if_unavailable
              boolean
              If enabled, DNF will continue running and disable the repository
              that  couldn't  be  synchronized  for  any  reason.  This option
              doesn't affect skipping of unavailable packages after dependency
              resolution.  To  check  inaccessibility  of repository use it in
              combination with refresh command line  option.  The  default  is
              False.   Note  this option in particular can be set in your con-
              figuration file by your distribution.
       sslcacert
              string
              Path to the file containing the certificate authorities to  ver-
              ify SSL certificates.  Empty by default - uses system default.
       sslverify
              boolean
              When  enabled,  remote  SSL  certificates  are  verified. If the
              client can not be authenticated, connecting fails and the repos-
              itory  is not used any further. If False, SSL connections can be
              used, but certificates are not verified. Default is True.
       sslverifystatus
              boolean
              When enabled, revocation status of  the  server  certificate  is
              verified  using  the  "Certificate Status Request" TLS extension
              (aka. OCSP stapling). Default is False.
       sslclientcert
              string
              Path to the SSL client certificate used  to  connect  to  remote
              sites.  Empty by default.
       sslclientkey
              string
              Path  to  the  SSL  client  key used to connect to remote sites.
              Empty by default.
       throttle
              storage size
              Limits the downloading speed. It might be an absolute value or a
              percentage,  relative  to  the  value  of  the  bandwidth option
              option. 0 means no throttling (the default). The absolute  value
              is in bytes by default but can be specified with a unit of stor-
              age. Valid units are 'k', 'M', 'G'.
       timeout
              time in seconds
              Number of seconds to wait for a connection  before  timing  out.
              Used  in  combination with minrate option option. Defaults to 30
              seconds.
       username
              string
              The username to use for  connecting  to  repo  with  basic  HTTP
              authentication. Empty by default.
       user_agent
              string
              The  User-Agent  string to include in HTTP requests sent by DNF.
              Defaults to
                 libdnf (NAME VERSION_ID; VARIANT_ID; OS.BASEARCH)
              where NAME, VERSION_ID and VARIANT_ID are  OS  identifiers  read
              from the os-release(5) file, and OS and BASEARCH are the canoni-
              cal OS name and base architecture, respectively.  Example:
                 libdnf (Fedora 31; server; Linux.x86_64)
TYPES OF OPTIONS
       boolean
              This is a data type with only two possible values.
              One of following options can be used: 1, 0, True, False, yes, no
       integer
              It is a whole number that can be written  without  a  fractional
              component.
       list   It  is  an option that could represent one or more strings sepa-
              rated by space or comma characters.
       string It is a sequence of symbols or  digits  without  any  whitespace
              character.
       color  A  string describing color and modifiers separated with a comma,
              for example "red,bold".
              o Colors: black, blue, cyan, green, magenta, red, white, yellow
              o Modifiers: bold, blink, dim, normal, reverse, underline
FILES
       Cache Files
              /var/cache/dnf
       Main Configuration File
              /etc/dnf/dnf.conf
       Repository
              /etc/yum.repos.d/
       Variables
              Any properly named file in /etc/dnf/vars is turned into a  vari-
              able  named  after  the  filename (or overrides any of the above
              variables but those set from commandline). Filenames may contain
              only  alphanumeric  characters  and underscores and be in lower-
              case.  Variables are also read from /etc/yum/vars for  YUM  com-
              patibility reasons.
SEE ALSO
       o dnf(8), DNF Command Reference
AUTHOR
       See AUTHORS in DNF source distribution.
COPYRIGHT
       2012-2020, Red Hat, Licensed under GPLv2+
4.7.0                            Apr 08, 2024                      DNF.CONF(5)