Provided by: dnf-data_4.14.0-4.1ubuntu1_all bug

NAME

       dnf.conf - DNF Configuration Reference

DESCRIPTION

       DNF  by  default uses the global configuration file at /etc/dnf/dnf.conf and all *.repo files found under
       /etc/yum.repos.d. The latter is typically used for repository configuration  and  takes  precedence  over
       global configuration.

       The configuration file has INI format consisting of section declaration and name=value options below each
       on  separate  line. There are two types of sections in the configuration files: main and repository. Main
       section defines all global configuration options and should be only one.

       The repository sections define the configuration for each (remote or local) repository. The section  name
       of the repository in brackets serve as repo ID reference and should be unique across configuration files.
       The  allowed  characters  of  repo ID string are lower and upper case alphabetic letters, digits, -, _, .
       and :. The minimal repository configuration file should aside from repo ID consists of baseurl,  metalink
       or mirrorlist option definition.

DISTRIBUTION-SPECIFIC CONFIGURATION

       Configuration  options,  namely best and skip_if_unavailable, can be set in the DNF configuration file by
       your distribution to override the DNF defaults.

[MAIN] OPTIONS

       allow_vendor_change
              boolean

              If disabled dnf will stick to vendor when upgrading or downgrading rpms.  Default is True

              WARNING:
                 This option is currently not supported for downgrade and distro-sync commands

       arch   string

              The architecture used for installing packages.  By  default  this  is  auto-detected.  Often  used
              together with ignorearch option.

       assumeno
              boolean

              If  enabled  dnf  will  assume No where it would normally prompt for confirmation from user input.
              Default is False.

       assumeyes
              boolean

              If enabled dnf will assume Yes where it would normally prompt for  confirmation  from  user  input
              (see also defaultyes). Default is False.

       autocheck_running_kernel
              boolean

              Automatic check whether there is installed newer kernel module with security update than currently
              running kernel. Default is True.

       basearch
              string

              The base architecture used for installing packages. By default this is auto-detected.

       best   boolean

              True  instructs  the solver to either use a package with the highest available version or fail. On
              False, do not fail if the latest version cannot be installed and go with the  lower  version.  The
              default  is  False.   Note this option in particular can be set in your configuration file by your
              distribution. Also note that the use of the highest available version is only guaranteed  for  the
              packages directly requested and not for their dependencies.

       cachedir
              string

              Path  to  a  directory  used  by  various DNF subsystems for storing cache data.  Has a reasonable
              root-writable default depending on the distribution. DNF needs to be  able  to  create  files  and
              directories at this location.

       cacheonly
              boolean

              If  set to True DNF will run entirely from system cache, will not update the cache and will use it
              even in case it is expired. Default is False.

              API Notes: Must be set before repository objects  are  created.  Plugins  must  set  this  in  the
              pre_config hook. Later changes are ignored.

       check_config_file_age
              boolean

              Specifies  whether  dnf  should automatically expire metadata of repos, which are older than their
              corresponding configuration file (usually the dnf.conf file and the foo.repo  file).   Default  is
              True  (perform  the  check).  Expire  of  metadata  is  also  affected  by metadata age.  See also
              metadata_expire.

       clean_requirements_on_remove
              boolean

              Remove dependencies that are no longer used during  dnf  remove.  A  package  only  qualifies  for
              removal  via clean_requirements_on_remove if it was installed through DNF but not on explicit user
              request, i.e. it was pulled in as a dependency. The default is True.  (installonlypkgs  are  never
              automatically removed.)

       config_file_path
              string

              Path to the default main configuration file. Default is /etc/dnf/dnf.conf.

       debuglevel
              integer

              Debug  messages output level, in the range 0 to 10. The higher the number the more debug output is
              put to stdout. Default is 2.

       debug_solver
              boolean

              Controls whether the libsolv debug files should be created when solving the transaction. The debug
              files are created in the ./debugdata directory.  Default is False.

       defaultyes
              boolean

              If enabled the default answer to user confirmation prompts will be Yes. Not to  be  confused  with
              assumeyes which will not prompt at all. Default is False.

       diskspacecheck
              boolean

              Controls whether rpm should check available disk space during the transaction.  Default is True.

       errorlevel
              integer

              Error  messages output level, in the range 0 to 10. The higher the number the more error output is
              put to stderr. Default is 3. This is deprecated in DNF and overwritten  by  --verbose  commandline
              option.

       exclude_from_weak
              list

              Prevent  installing packages as weak dependencies (recommends or supplements). The packages can be
              specified by a name or a glob and separated by a comma. Defaults to [].

       exclude_from_weak_autodetect
              boolean

              If enabled, dnf will autodetect unmet weak dependencies (recommends or  supplements)  of  packages
              installed on the system. Providers of these weak dependencies will not be installed by dnf as weak
              dependencies  any  more  (they  will  still  be  installed  if pulled in as a regular dependency).
              Defaults to true.

       exit_on_lock
              boolean

              Should the dnf client exit immediately when something else has the lock. Default is False.

       gpgkey_dns_verification
              boolean

              Should the dnf attempt to automatically verify GPG verification keys using the  DNS  system.  This
              option  requires the unbound python module (python3-unbound) to be installed on the client system.
              This system has two main features. The first one is to check if any of the already installed  keys
              have  been revoked. Automatic removal of the key is not yet available, so it is up to the user, to
              remove revoked keys from the system. The second feature is automatic verification of new keys when
              a repository is added to the system. In interactive mode, the result is written to the output as a
              suggestion to the user. In  non-interactive  mode  (i.e.  when  -y  is  used),  this  system  will
              automatically  accept keys that are available in the DNS and are correctly signed using DNSSEC. It
              will also  accept  keys  that  do  not  exist  in  the  DNS  system  and  their  NON-existence  is
              cryptographically proven using DNSSEC. This is mainly to preserve backward compatibility.  Default
              is False.

       group_package_types
              list

              List  of  the  following: optional, default, mandatory. Tells dnf which type of packages in groups
              will be installed when 'groupinstall' is called. Default is: default, mandatory.

       ignorearch
              boolean

              If set to True,  RPM  will  allow  attempts  to  install  packages  incompatible  with  the  CPU's
              architecture. Defaults to False. Often used together with arch option.

       installonlypkgs
              list

              List  of  provide names of packages that should only ever be installed, never upgraded. Kernels in
              particular fall into this category.  These packages are never removed by dnf  autoremove  even  if
              they  were  installed as dependencies (see clean_requirements_on_remove for auto removal details).
              This option append the list values to the default installonlypkgs list used by DNF. The number  of
              kept package versions is regulated by installonly_limit.

       installonly_limit
              integer

              Number  of  installonly  packages allowed to be installed concurrently. Defaults to 3. The minimal
              number of installonly packages is 2. Value 0 means unlimited number of installonly packages. Value
              1 is explicitly not allowed since it complicates kernel upgrades due to protection of the  running
              kernel from removal.

       installroot
              string

              The  root  of  the filesystem for all packaging operations. It requires an absolute path. See also
              --installroot commandline option.

       install_weak_deps
              boolean

              When this option is set to True and a new package is about to be installed, all packages linked by
              weak dependency relation (Recommends or Supplements flags) with this package will be  pulled  into
              the transaction.  Default is True.

       keepcache
              boolean

              Keeps  downloaded  packages in the cache when set to True. Even if it is set to False and packages
              have not been installed they will still persist until next successful transaction. The default  is
              False.

       logdir string

              Directory where the log files will be stored. Default is /var/log.

       logfilelevel
              integer

              Log  file messages output level, in the range 0 to 10. The higher the number the more debug output
              is put to logs. Default is 9.

              This option  controls  dnf.log,  dnf.librepo.log  and  hawkey.log.  Although  dnf.librepo.log  and
              hawkey.log are affected only by setting the logfilelevel to 10.

       log_compress
              boolean

              When set to True, log files are compressed when they are rotated. Default is False.

       log_rotate
              integer

              Log  files  are rotated log_rotate times before being removed. If log_rotate is 0, the rotation is
              not performed.  Default is 4.

       log_size
              storage size

              Log  files are rotated when they grow bigger than log_size bytes. If log_size is 0,  the  rotation
              is not performed. The default is 1 MB. Valid units are 'k', 'M', 'G'.

              The size applies for individual log files, not the sum of all log files.  See also log_rotate.

       metadata_timer_sync
              time in seconds

              The minimal period between two consecutive makecache timer runs. The command will stop immediately
              if it's less than this time period since its last run. Does not affect simple makecache run. Use 0
              to  completely  disable  automatic metadata synchronizing. The default corresponds to three hours.
              The value is rounded to the next commenced hour.

       module_obsoletes
              boolean

              This option controls whether dnf should apply modular obsoletes when possible. Default is False.

       module_platform_id
              string

              Set this to $name:$stream to override PLATFORM_ID detected from /etc/os-release.  It is  necessary
              to perform a system upgrade and switch to a new platform.

       module_stream_switch
              boolean

              This  option  controls  whether  it's  possible  to switch enabled streams of a module. Default is
              False.

       multilib_policy
              string

              Controls how multilib packages are treated during install operations. Can either  be  "best"  (the
              default) for the depsolver to prefer packages which best match the system's architecture, or "all"
              to install packages for all available architectures.

       obsoletes
              boolean

              This option only has affect during an install/update. It enables dnf's obsoletes processing logic,
              which  means  it  makes dnf check whether any dependencies of given package are no longer required
              and removes them.  Useful when doing distribution level upgrades.  Default is 'true'.

              Command-line option: --obsoletes

       persistdir
              string

              Directory where DNF stores its persistent data between runs. Default is "/var/lib/dnf".

       pluginconfpath
              list

              List of directories that are searched for plugin configurations to load. All  configuration  files
              found  in  these  directories,  that  are  named same as a plugin, are parsed. The default path is
              /etc/dnf/plugins.

       pluginpath
              list

              List of directories that are searched for plugins to load. Plugins found in any of the directories
              in this configuration option are used. The default contains a Python version-specific path.

       plugins
              boolean

              Controls whether the plugins are enabled. Default is True.

       protected_packages
              list

              List of packages that DNF should never completely remove. They are protected via Obsoletes as well
              as user/plugin removals.

              The default is: dnf, glob:/etc/yum/protected.d/*.conf and glob:/etc/dnf/protected.d/*.conf. So any
              packages which should be protected can do so by including  a  file  in  /etc/dnf/protected.d  with
              their package name in it.

              DNF  will  protect  also  the package corresponding to the running version of the kernel. See also
              protect_running_kernel option.

       protect_running_kernel
              boolean

              Controls whether the package corresponding to the running version  of  kernel  is  protected  from
              removal. Default is True.

       releasever
              string

              Used for substitution of $releasever in the repository configuration.  See also repo variables.

       reposdir
              list

              DNF  searches  for repository configuration files in the paths specified by reposdir. The behavior
              of reposdir could differ when it is used along with --installroot option.

       rpmverbosity
              string

              RPM debug scriptlet output level. One of: critical, emergency, error, warn, info or debug. Default
              is info.

       strict boolean

              If disabled, all unavailable packages or packages with broken dependencies given  to  DNF  command
              will be skipped without raising the error causing the whole operation to fail. Currently works for
              install command only. The default is True.

       tsflags
              list

              List of strings adding extra flags for the RPM transaction.
                                        ┌──────────────┬────────────────────────────┐
                                        │ tsflag value │ RPM Transaction Flag       │
                                        ├──────────────┼────────────────────────────┤
                                        │ noscripts    │ RPMTRANS_FLAG_NOSCRIPTS    │
                                        ├──────────────┼────────────────────────────┤
                                        │ test         │ RPMTRANS_FLAG_TEST         │
                                        ├──────────────┼────────────────────────────┤
                                        │ notriggers   │ RPMTRANS_FLAG_NOTRIGGERS   │
                                        ├──────────────┼────────────────────────────┤
                                        │ nodocs       │ RPMTRANS_FLAG_NODOCS       │
                                        ├──────────────┼────────────────────────────┤
                                        │ justdb       │ RPMTRANS_FLAG_JUSTDB       │
                                        ├──────────────┼────────────────────────────┤
                                        │ nocontexts   │ RPMTRANS_FLAG_NOCONTEXTS   │
                                        ├──────────────┼────────────────────────────┤
                                        │ nocaps       │ RPMTRANS_FLAG_NOCAPS       │
                                        ├──────────────┼────────────────────────────┤
                                        │ nocrypto     │ RPMTRANS_FLAG_NOFILEDIGEST │
                                        └──────────────┴────────────────────────────┘

              The  nocrypto  option  will  also set the _RPMVSF_NOSIGNATURES and _RPMVSF_NODIGESTS VS flags. The
              test option  provides  a  transaction  check  without  performing  the  transaction.  It  includes
              downloading  of  packages,  gpg  keys  check  (including  permanent  import  of additional keys if
              necessary), and rpm check to prevent file conflicts.  The nocaps is  supported  with  rpm-4.14  or
              later. When nocaps is used but rpm doesn't support it, DNF only reports it as an invalid tsflag.

       upgrade_group_objects_upgrade
              boolean

              Set  this  to  False  to  disable  the automatic running of group upgrade when running the upgrade
              command. Default is True (perform the operation).

       varsdir
              list

              List of directories where variables definition files are looked for. Defaults to  "/etc/dnf/vars",
              "/etc/yum/vars". See variable files in Configuration reference.

       zchunk boolean

              Enables  or  disables  the  use  of  repository  metadata  compressed  using the zchunk format (if
              available). Default is True.

[MAIN] OPTIONS - COLORS

       color  string

              Controls if DNF uses colored output on  the  command  line.   Possible  values:  "auto",  "never",
              "always". Default is "auto".

       color_list_available_downgrade
              color

              Color  of  available  packages  that are older than installed packages.  The option is used during
              list operations. Default is magenta.

       color_list_available_install
              color

              Color of packages that are available for installation and none of  their  versions  in  installed.
              The option is used during list operations. Default is bold,cyan.

       color_list_available_reinstall
              color

              Color  of  available  packages  that  are  identical  to  installed versions and are available for
              reinstalls. Default is bold,underline,green.  The option is used during list operations.

       color_list_available_upgrade
              color

              Color of available packages that are newer than installed packages.  Default  is  bold,blue.   The
              option is used during list operations.

       color_list_installed_extra
              color

              Color  of installed packages that do not have any version among available packages.  The option is
              used during list operations. Default is bold,red.

       color_list_installed_newer
              color

              Color of installed packages that are newer than any version among available packages.  The  option
              is used during list operations. Default is bold,yellow.

       color_list_installed_older
              color

              Color  of installed packages that are older than any version among available packages.  The option
              is used during list operations. Default is yellow.

       color_list_installed_reinstall
              color

              Color of installed packages that are among available packages and can be reinstalled.  The  option
              is used during list operations. Default is cyan.

       color_search_match
              color

              Color of patterns matched in search output. Default is bold,magenta.

       color_update_installed
              color

              Color of removed packages. Default is red.  This option is used during displaying transactions.

       color_update_local
              color

              Color  of local packages that are installed from the @commandline repository.  This option is used
              during displaying transactions. Default is green.

       color_update_remote
              color

              Color of packages that are installed/upgraded/downgraded from remote repositories.  This option is
              used during displaying transactions. Default is bold,green.

REPO OPTIONS

       baseurl
              list

              List of URLs for the repository. Defaults to [].

              URLs are tried in the listed order (equivalent to yum's "failovermethod=priority" behaviour).

       cost   integer

              The relative cost of accessing this repository, defaulting to 1000. This value  is  compared  when
              the priorities of two repositories are the same. The repository with the lowest cost is picked. It
              is useful to make the library prefer on-disk repositories to remote ones.

       enabled
              boolean

              Include this repository as a package source. The default is True.

       gpgkey list of strings

              URLs  of  a  GPG  key files that can be used for signing metadata and packages of this repository,
              empty by default. If a file can not be verified using the already imported keys,  import  of  keys
              from this option is attempted and the keys are then used for verification.

       metalink
              string

              URL of a metalink for the repository. Defaults to None.

       mirrorlist
              string

              URL of a mirrorlist for the repository. Defaults to None.

       module_hotfixes
              boolean

              Set  this to True to disable module RPM filtering and make all RPMs from the repository available.
              The default is False.  This allows user to create a repository with  cherry-picked  hotfixes  that
              are included in a package set on a modular system.

       name   string

              A human-readable name of the repository. Defaults to the ID of the repository.

       priority
              integer

              The  priority value of this repository, default is 99. If there is more than one candidate package
              for a particular operation, the one from a repo with the lowest priority value is picked, possibly
              despite being less convenient otherwise (e.g. by being a lower version).

       type   string

              Type of repository metadata. Supported values are:  rpm-md.   Aliases  for  rpm-md:  rpm,  repomd,
              rpmmd, yum, YUM.

REPO VARIABLES

       Right side of every repo option can be enriched by the following variables:

       $arch
          Refers to the system’s CPU architecture e.g, aarch64, i586, i686 and x86_64.

       $basearch
          Refers  to  the  base architecture of the system. For example, i686 and i586 machines both have a base
          architecture of i386, and AMD64 and Intel64 machines have a base architecture of x86_64.

       $releasever
          Refers to the release version of operating system which DNF  derives  from  information  available  in
          RPMDB.

       In addition to these hard coded variables, user-defined ones can also be used. They can be defined either
       via  variable  files,  or  by using special environmental variables. The names of these variables must be
       prefixed with DNF_VAR_ and they can only consist of alphanumeric characters and underscores:

          $ DNF_VAR_MY_VARIABLE=value

       To use such variable in your repository configuration remove the prefix. E.g.:

          [myrepo]
          baseurl=https://example.site/pub/fedora/$MY_VARIABLE/releases/$releasever

       Note that it is not possible to override the arch and basearch variables using either variable  files  or
       environmental variables.

       Although  users  are  encouraged to use named variables, the numbered environmental variables DNF0 - DNF9
       are still supported:

          $ DNF1=value

          [myrepo]
          baseurl=https://example.site/pub/fedora/$DNF1/releases/$releasever

OPTIONS FOR BOTH [MAIN] AND REPO

       Some options can be applied in either the main section, per repository, or in a  combination.  The  value
       provided  in  the  main section is used for all repositories as the default value, which repositories can
       then override in their configuration.

       bandwidth
              storage size

              Total bandwidth available for downloading. Meaningful when used with the throttle option.  Storage
              size is in bytes by default but can be specified with a unit of storage. Valid units are 'k', 'M',
              'G'.

       countme
              boolean

              Determines whether a special flag should be added to a single, randomly chosen metalink/mirrorlist
              query each week.  This allows the repository owner to estimate the number of systems consuming it,
              by counting such queries over a week's time, which is much more accurate than just counting unique
              IP addresses (which is subject to both overcounting and undercounting due to short DHCP leases and
              NAT, respectively).

              The flag is a simple "countme=N" parameter appended to the metalink and mirrorlist URL, where N is
              an  integer  representing  the "longevity" bucket this system belongs to.  The following 4 buckets
              are defined, based on how many full weeks have passed since the beginning of the  week  when  this
              system was installed: 1 = first week, 2 = first month (2-4 weeks), 3 = six months (5-24 weeks) and
              4  = more than six months (> 24 weeks).  This information is meant to help distinguish short-lived
              installs from long-term ones, and to gather other statistics about system lifecycle.

              Default is False.

       deltarpm
              boolean

              When enabled, DNF will save bandwidth by downloading much smaller delta RPM files, rebuilding them
              to RPM locally. However, this is quite CPU and I/O intensive. Default is True.

       deltarpm_percentage
              integer

              When the relative size of delta vs pkg is larger than this, delta is not used.  Default  value  is
              75  (Deltas  must  be at least 25% smaller than the pkg).  Use 0 to turn off delta rpm processing.
              Local repositories (with file:// baseurl) have delta rpms turned off by default.

       enablegroups
              boolean

              Determines whether DNF will allow the use of package groups for this repository. Default  is  True
              (package groups are allowed).

       excludepkgs
              list

              Exclude  packages of this repository, specified by a name or a glob and separated by a comma, from
              all operations.  Can be disabled using --disableexcludes command line switch.  Defaults to [].

       fastestmirror
              boolean

              If enabled a metric is used to find  the  fastest  available  mirror.  This  overrides  the  order
              provided  by  the mirrorlist/metalink file itself. This file is often dynamically generated by the
              server to provide the best download speeds and enabling fastestmirror overrides this. The  default
              is False.

       gpgcheck
              boolean

              Whether  to  perform  GPG  signature  check  on packages found in this repository.  The default is
              False.

              This option can only  be  used  to  strengthen  the  active  RPM  security  policy  set  with  the
              %_pkgverify_level  macro (see the /usr/lib/rpm/macros file for details).  That means, if the macro
              is set to 'signature' or 'all' and this option is False, it will be overridden to True during  DNF
              runtime, and a warning will be printed.  To squelch the warning, make sure this option is True for
              every enabled repository, and also enable localpkg_gpgcheck.

       includepkgs
              list

              Include  packages  of  this repository, specified by a name or a glob and separated by a comma, in
              all operations.  Inverse of excludepkgs, DNF will exclude  any  package  in  the  repository  that
              doesn't match this list. This works in conjunction with excludepkgs and doesn't override it, so if
              you 'excludepkgs=*.i386' and 'includepkgs=python*' then only packages starting with python that do
              not  have  an i386 arch will be seen by DNF in this repo.  Can be disabled using --disableexcludes
              command line switch.  Defaults to [].

       ip_resolve
              IP address type

              Determines how DNF resolves host names. Set this to '4'/'IPv4' or '6'/'IPv6' to resolve to IPv4 or
              IPv6 addresses only. By default, DNF resolves to either addresses.

       localpkg_gpgcheck
              boolean

              Whether to perform a GPG signature check  on  local  packages  (packages  in  a  file,  not  in  a
              repository).  The default is False.  This option is subject to the active RPM security policy (see
              gpgcheck for more details).

       max_parallel_downloads
              integer

              Maximum number of simultaneous package downloads. Defaults to 3. Maximum of 20.

       metadata_expire
              time in seconds

              The  period  after  which the remote repository is checked for metadata update and in the positive
              case the local metadata cache is updated. The default corresponds to 48 hours. Set this to  -1  or
              never  to  make  the  repo  never  considered expired. Expire of metadata can be also triggered by
              change   of   timestamp   of   configuration   files    (dnf.conf,    <repo>.repo).    See    also
              check_config_file_age.

       minrate
              storage size

              This  sets  the low speed threshold in bytes per second. If the server is sending data at the same
              or slower speed than this value for at least timeout option seconds, DNF  aborts  the  connection.
              The default is 1000. Valid units are 'k', 'M', 'G'.

       password
              string

              The  password  to  use  for  connecting  to  a repository with basic HTTP authentication. Empty by
              default.

       proxy  string

              URL of a proxy server to connect through. Set to an empty string in the  repository  configuration
              to  disable  proxy  setting inherited from the main section. The expected format of this option is
              <scheme>://<ip-or-hostname>[:port].  (For backward compatibility, '_none_' can be used instead  of
              the empty string.)

              Note:  The  curl  environment variables (such as http_proxy) are effective if this option is unset
              (or '_none_' is set in the repository configuration). See the curl man page for details.

       proxy_username
              string

              The username to use for connecting to the proxy server. Empty by default.

       proxy_password
              string

              The password to use for connecting to the proxy server. Empty by default.

       proxy_auth_method
              string

              The authentication method used by the proxy server. Valid values are
                                    ┌───────────┬───────────────────────────────────────┐
                                    │ method    │ meaning                               │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ basic     │ HTTP Basic authentication             │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ digest    │ HTTP Digest authentication            │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ negotiate │ HTTP        Negotiate        (SPNEGO) │
                                    │           │ authentication                        │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ ntlm      │ HTTP NTLM authentication              │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ digest_ie │ HTTP Digest authentication with an IE │
                                    │           │ flavor                                │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ ntlm_wb   │ NTLM delegating to winbind helper     │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ none      │ None auth method                      │
                                    ├───────────┼───────────────────────────────────────┤
                                    │ any       │ All suitable methods                  │
                                    └───────────┴───────────────────────────────────────┘

              Defaults to any

       proxy_sslcacert
              string

              Path  to  the file containing the certificate authorities to verify proxy SSL certificates.  Empty
              by default - uses system default.

       proxy_sslverify
              boolean

              When enabled, proxy SSL certificates are  verified.  If  the  client  can  not  be  authenticated,
              connecting  fails  and  the  repository  is not used any further. If False, SSL connections can be
              used, but certificates are not verified. Default is True.

       proxy_sslclientcert
              string

              Path to the SSL client certificate used to connect to proxy server.  Empty by default.

       proxy_sslclientkey
              string

              Path to the SSL client key used to connect to proxy server.  Empty by default.

       repo_gpgcheck
              boolean

              Whether to perform GPG signature check on this repository's metadata. The default is False.   Note
              that  GPG  keys  for  this  check  are  stored  separately from GPG keys used in package signature
              verification. Furthermore, they are also stored separately for each repository.

              This means that dnf may ask to import the same key multiple times. For example,  when  a  key  was
              already imported for package signature verification and this option is turned on, it may be needed
              to import it again for the repository.

       retries
              integer

              Set  the number of total retries for downloading packages. The number is accumulative, so e.g. for
              retries=10, dnf will fail after any package download fails for eleventh time. Setting  this  to  0
              makes dnf try forever. Default is 10.

       skip_if_unavailable
              boolean

              If enabled, DNF will continue running and disable the repository that couldn't be synchronized for
              any  reason.  This  option  doesn't  affect  skipping  of  unavailable  packages  after dependency
              resolution. To check inaccessibility of repository use it in combination with refresh command line
              option. The default is False.  Note this option in particular can be  set  in  your  configuration
              file by your distribution.

       sslcacert
              string

              Path  to  the  file  containing  the certificate authorities to verify SSL certificates.  Empty by
              default - uses system default.

       sslverify
              boolean

              When enabled, remote SSL certificates are verified.  If  the  client  can  not  be  authenticated,
              connecting  fails  and  the  repository  is not used any further. If False, SSL connections can be
              used, but certificates are not verified. Default is True.

       sslverifystatus
              boolean

              When enabled, revocation status of the server  certificate  is  verified  using  the  "Certificate
              Status Request" TLS extension (aka. OCSP stapling). Default is False.

       sslclientcert
              string

              Path to the SSL client certificate used to connect to remote sites.  Empty by default.

       sslclientkey
              string

              Path to the SSL client key used to connect to remote sites.  Empty by default.

       throttle
              storage size

              Limits the downloading speed. It might be an absolute value or a percentage, relative to the value
              of  the  bandwidth  option  option.  0 means no throttling (the default). The absolute value is in
              bytes by default but can be specified with a unit of storage. Valid units are 'k', 'M', 'G'.

       timeout
              time in seconds

              Number of seconds to wait for a connection before timing out. Used  in  combination  with  minrate
              option option. Defaults to 30 seconds.

       username
              string

              The username to use for connecting to repo with basic HTTP authentication. Empty by default.

       user_agent
              string

              The User-Agent string to include in HTTP requests sent by DNF.  Defaults to

                 libdnf (NAME VERSION_ID; VARIANT_ID; OS.BASEARCH)

              where  NAME, VERSION_ID and VARIANT_ID are OS identifiers read from the os-release(5) file, and OS
              and BASEARCH are the canonical OS name and base architecture, respectively.  Example:

                 libdnf (Fedora 31; server; Linux.x86_64)

TYPES OF OPTIONS

       boolean
              This is a data type with only two possible values.

              One of following options can be used: 1, 0, True, False, yes, no

       integer
              It is a whole number that can be written without a fractional component.

       list   It is an option that could represent one or more strings separated by space or comma characters.

       string It is a sequence of symbols or digits without any whitespace character.

       color  A string describing color and modifiers separated with a comma, for example "red,bold".

              • Colors: black, blue, cyan, green, magenta, red, white, yellow

              • Modifiers: bold, blink, dim, normal, reverse, underline

FILES

       Cache Files
              /var/cache/dnf

       Main Configuration File
              /etc/dnf/dnf.conf

       Repository
              /etc/yum.repos.d/

       Variables
              Any properly named file in /etc/dnf/vars is turned into a variable named after  the  filename  (or
              overrides  any  of the above variables but those set from commandline). Filenames may contain only
              alphanumeric characters and underscores and  be  in  lowercase.   Variables  are  also  read  from
              /etc/yum/vars for YUM compatibility reasons.

SEE ALSO

dnf(8), DNF Command Reference

AUTHOR

       See AUTHORS in DNF source distribution.

COPYRIGHT

       2012-2024, Red Hat, Licensed under GPLv2+

4.14.0                                            Mar 09, 2024                                       DNF.CONF(5)