urpmi¶
- ID
urpmi- Home page
- Platforms
🐧 Linux (Mageia, Mandriva Linux only)
- Operations
installed·outdated·search·install·upgrade·upgrade_all·remove·sync·cleanup- purl types
pkg:urpmi- CLI name
urpmi- Forced environment
LC_ALL=C- Issues and PRs
- Source
urpmi is the RPM front-end of the Mandriva lineage (Mageia, OpenMandriva, ROSA), spanning several binaries: urpmi (install/upgrade/cache), urpme (remove), urpmq (queries) and urpmi.update (media refresh).
Parsing notes, verified against the urpmi Perl source (urpm/args.pm, urpmq, urpme, urpmi.update) and the urpmi/urpmq/urpme man pages:
urpmi has no native installed-package listing: enumeration goes through rpm itself, which urpmi fronts (librpm is always present), with a caller-controlled
--queryformat.urpmq’s package-data output is one bare package name per line;
-rappends-version-release. The regexes split the fused NVR on its last two dash-fields.Every human-facing string is gettext-localized: LC_ALL=C keeps the parsed output stable (package data itself is not translated, but errors and prompts are).
--autosuppresses all urpmi/urpme prompts.--versionis undocumented in the man pages but implemented in the shared options table of every tool.Mutations abort for non-root users (“Only superuser is allowed to install packages”), including urpmi.update and
--clean.
What mpm adds to urpmi¶
Through mpm, urpmi gains --exact and --extended search, to narrow to exact names or match descriptions.
Bigger still, mpm reaches across every manager at once: mpm installed and mpm outdated cover urpmi alongside every other manager you run in one table, mpm upgrade --all updates them together, and mpm sbom exports the whole machine as one bill of materials.
Every mpm command also gains --dry-run and --plan previews, cross-scheme version comparison and purl identifiers. See manager augmentations for how each one is built.
Your urpmi commands, in mpm¶
You already know urpmi: each operation maps one-to-one onto mpm, in an interface shared by every manager.
To… |
With |
With |
|---|---|---|
List what’s installed |
|
|
List outdated packages |
|
|
Search for a package |
|
|
Install a package |
|
|
Upgrade one package |
|
|
Upgrade everything |
|
|
Remove a package |
|
|
Clear caches |
|
|
Prefix any command above with --dry-run to simulate the underlying manager calls without touching the system: the safe way to watch what mpm would do before trusting it.
Operations¶
Operation |
Supported |
Notes |
|---|---|---|
|
✓ |
|
|
✓ |
|
|
||
|
✓ |
exact and extended search backfilled by |
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
✓ |
|
|
Selecting and configuring urpmi¶
Deselect urpmi for a single run with --no-urpmi, or persist the choice in your configuration:
[mpm]
urpmi = false
The arguments and environment variables listed in the box atop this page are forced on every urpmi call, so runs stay quiet, non-interactive and reproducible: the defaults you would set in CI anyway.
Keep it enabled but tune how mpm drives it with a per-manager override:
[mpm.managers.urpmi]
timeout = 900
mpm config-template urpmi prints every overridable attribute as a ready-to-paste block.
Recipes¶
A few jobs you would otherwise script around urpmi, one mpm command each:
Snapshot and clone a machine:
mpm --urpmi dump urpmi.toml, thenmpm restore urpmi.tomlon the next one.Export a compliance SBOM:
mpm --urpmi sbom(CycloneDX by default,--spdxfor SPDX).
Privilege escalation¶
System-wide manager: mpm wraps its privileged operations in sudo out of the box. Instead of letting the tool prompt mid-run, mpm primes the credential cache up-front, with a single branded password prompt at most. Turn escalation off for rootless setups with --no-sudo or the per-manager sudo override.
Root is required for its cleanup_cache, install, remove, sync, upgrade, upgrade_all operations.
See privilege escalation for the full policy.
Cooldown¶
State of urpmi’s release-age gating, from the cooldown support table:
Status: ❌ None (Mageia)
A cooldown only pays off where a compromised release can be withdrawn while the clock runs, and can only be emulated where the registry dates its releases. From the retraction table:
Registry: Distro binary archives (
pkg:deb,pkg:rpm,pkg:alpm,pkg:apk)Retraction: Index revert: removal is an archive operation and the mirror is rebuilt without the package. Debian, for one, requires filing an
RM:bug againstftp.debian.org(developers-reference)Publish date: ❌ the version string is the distro maintainer’s build, carrying no upstream publication date
With --cooldown set, mpm skips this manager’s install and upgrade operations rather than run them unguarded (fail-closed); --allow-unsupported-managers opts back in.
Version probe¶
The version is probed by running:
$ urpmi --version
urpmi 8.121.7
and extracted with:
r"urpmi (?P<version>\S+)"
Reference traces¶
Raw native outputs captured in the bundled definition: the reference mpm’s parsers were written against. If you know urpmi well and a transcript below looks wrong, or a newer release changed its output format, report it.
$ rpm --query --all --queryformat %{NAME} %{VERSION}-%{RELEASE}\n
sgml-skel 0.7-24.mga9
desktop-file-utils 0.26-5.mga9
$ urpmq --auto-select -r
kernel-desktop-6.6.0-1.mga9
fvwm3-1.0.2-1.1.mga8
Feed any of these through mpm and the raw output becomes one uniform table, the same shape for every manager: filter it, project columns, or export it (mpm --urpmi installed --output json, or csv, toml, yaml), each package carrying a purl and a version comparable across managers.
Changelog¶
7.2.0(2026-07-09)Add urpmi (Mageia and the Mandriva lineage) with
installed,outdated,search,install,upgrade,remove,syncandcleanupsupport; a bundled configuration-defined manager.