Skip to main content

RHEL/Fedora package ops

v0.1.7

Counterpart to the `debian` pack for RHEL/CentOS/Fedora/Alma/Rocky: rpm inventory, dnf check-update, narrow install/remove actions for a single named package. Equivalent risk model to the apt counterpart.

9 allowed by default 4 need approval by default
Pack ID
dnf-rpm
Vendor
emisar
OS
linux
Actions
13
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
rpm dnf

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host
sudo emisar pack install dnf-rpm --hash sha256:6c3d6617c7c21b60e13d7f56613baeffee1f6c014c1e21f2e419a6366aa0874f

Actions 13 total

View on GitHub
  • dnf.autoremove exec high

    dnf autoremove -y

    Remove packages installed as dependencies that are no longer required by any installed package. Useful for /var/cache cleanup after a large rollback. Read the dry-run before approving (the list can be long).

    View source on GitHub
  • dnf.reinstall_pkg exec medium

    dnf reinstall -y <pkg>

    Reinstall one package to fix a corrupted on-disk state (missing files, bad checksums). Same version, same config.

    View source on GitHub
  • dnf.upgrade_pkg exec high

    dnf upgrade -y <pkg>

    Upgrade one named package to the latest available version. Use for CVE remediation. Other packages untouched.

    View source on GitHub
  • rpm.dnf_check_update exec low

    dnf check-update

    List available updates. Exits 100 if updates available — non-zero IS the success signal.

    View source on GitHub
  • rpm.dnf_clean_metadata exec medium

    dnf clean metadata

    Wipes cached repo metadata. Next dnf call refetches.

    View source on GitHub
  • rpm.dnf_history exec low

    dnf history

    List recent DNF transactions (installs / removes / updates).

    View source on GitHub
  • rpm.dnf_install exec high

    dnf install -y <pkg>

    Installs one package + its dependencies.

    View source on GitHub
  • rpm.dnf_remove exec high

    dnf remove -y <pkg>

    Removes one package + dependencies that no longer have a reverse-dep.

    View source on GitHub
  • rpm.dnf_repolist exec low

    dnf repolist

    List enabled repositories with package counts.

    View source on GitHub
  • rpm.rpm_qa exec low

    rpm -qa

    List all installed RPMs.

    View source on GitHub
  • rpm.rpm_qi exec low

    rpm -qi <pkg>

    Show details for one package — version, release, install date, signer.

    View source on GitHub
  • rpm.rpm_ql exec low

    rpm -ql <pkg>

    List all files installed by one package.

    View source on GitHub
  • rpm.rpm_verify exec low

    rpm -Va (verify all)

    Verifies every installed file's checksum / size / perms against the rpm. Lists only mismatches.

    View source on GitHub