BLOG POSTS

MangoHost Blog / Package Management Basics: apt, yum, dnf, and pkg Explained

Package Management Basics: apt, yum, dnf, and pkg Explained

Package management is the backbone of Linux server administration, determining how software gets installed, updated, and removed across different distributions. Whether you’re provisioning cloud instances, maintaining production servers, or just getting familiar with Linux systems, understanding the nuances between apt, yum, dnf, and pkg will save you countless hours of frustration and make your workflow significantly more efficient. This guide breaks down the technical differences, practical usage patterns, and real-world scenarios where each package manager excels.

How Package Management Works Under the Hood

Package managers handle the complex web of software dependencies, security signatures, and system integration that would otherwise require manual compilation and configuration. Each operates on similar principles but with distinct architectural approaches:

Repository-based distribution: Software packages are stored in centralized repositories with metadata about versions, dependencies, and conflicts
Dependency resolution: Automatic calculation of required libraries and components needed for software installation
Transaction management: Atomic operations that can be rolled back if installation fails
Package verification: Cryptographic signature checking to ensure package integrity and authenticity

The key difference lies in how each package manager implements these concepts and integrates with their respective Linux distributions.

APT (Advanced Package Tool) – Debian/Ubuntu Ecosystem

APT dominates the Debian-based world and has earned its reputation through robust dependency handling and extensive package availability. It works with .deb packages and maintains a sophisticated caching system that makes repeated operations faster.

Essential APT Commands and Usage

# Update package database
sudo apt update

# Upgrade all installed packages
sudo apt upgrade

# Install specific package
sudo apt install nginx

# Install multiple packages
sudo apt install nginx mysql-server php-fpm

# Remove package but keep configuration files
sudo apt remove nginx

# Completely remove package and configuration
sudo apt purge nginx

# Search for packages
apt search "web server"

# Show detailed package information
apt show nginx

# List installed packages
apt list --installed

# Fix broken dependencies
sudo apt --fix-broken install

Advanced APT Operations

# Hold a package at current version
sudo apt-mark hold nginx

# Release package hold
sudo apt-mark unhold nginx

# Download package without installing
apt download nginx

# Install local .deb file with dependency resolution
sudo apt install ./package.deb

# Simulate installation (dry run)
sudo apt install --simulate nginx

# Clean package cache
sudo apt autoclean
sudo apt autoremove

YUM (Yellowdog Updater Modified) – RHEL/CentOS Legacy

YUM served as the primary package manager for Red Hat-based distributions for over a decade. While largely superseded by DNF, it’s still encountered on older CentOS 7 and RHEL 7 systems in production environments.

Core YUM Commands

# Update package database and upgrade packages
sudo yum update

# Install package
sudo yum install httpd

# Install group of packages
sudo yum groupinstall "Development Tools"

# Remove package
sudo yum remove httpd

# Search packages
yum search nginx

# Get package information
yum info nginx

# List installed packages
yum list installed

# Show available updates
yum list updates

# Clean cache
sudo yum clean all

YUM Repository Management

# List enabled repositories
yum repolist

# Install package from specific repository
sudo yum --enablerepo=epel install htop

# Add repository (EPEL example)
sudo yum install epel-release

# Disable repository temporarily
sudo yum --disablerepo=updates install package-name

DNF (Dandified YUM) – Modern Red Hat Systems

DNF represents the evolution of YUM with improved performance, better dependency resolution, and more robust transaction handling. It’s the default on Fedora, RHEL 8+, and CentOS 8+.

DNF Command Reference

# Update system
sudo dnf update

# Install packages
sudo dnf install nodejs npm

# Install package groups
sudo dnf group install "C Development Tools and Libraries"

# Remove packages
sudo dnf remove nodejs

# Autoremove unused dependencies
sudo dnf autoremove

# Search packages
dnf search container

# Show package details
dnf info podman

# List installed packages
dnf list installed

# Show transaction history
dnf history

# Undo last transaction
sudo dnf history undo last

DNF Module Management

DNF introduces application streams, allowing multiple versions of software to coexist:

# List available modules
dnf module list

# Install specific module stream
sudo dnf module install nodejs:14

# Switch module streams
sudo dnf module switch nodejs:14:16

# Reset module to default stream
sudo dnf module reset nodejs

# Show module information
dnf module info nodejs

PKG – FreeBSD Package Management

FreeBSD’s pkg system offers both binary packages and source-based ports, providing flexibility between convenience and customization. It’s particularly popular in server environments where performance and security are paramount.

Basic PKG Operations

# Update package database
sudo pkg update

# Upgrade all packages
sudo pkg upgrade

# Install package
sudo pkg install nginx

# Remove package
sudo pkg delete nginx

# Search packages
pkg search web

# Show package information
pkg info nginx

# List installed packages
pkg info

# Check which package provides a file
pkg which /usr/local/bin/nginx

PKG Advanced Features

# Install from ports (source compilation)
cd /usr/ports/www/nginx
sudo make install clean

# Lock package against updates
sudo pkg lock nginx

# Unlock package
sudo pkg unlock nginx

# Audit installed packages for security vulnerabilities
pkg audit

# Create package repository
pkg repo /path/to/packages

# Install local package
sudo pkg add ./package.txz

Performance and Feature Comparison

Feature	APT	YUM	DNF	PKG
Dependency Resolution Speed	Fast	Slow	Very Fast	Fast
Memory Usage	Moderate	High	Moderate	Low
Transaction Rollback	Limited	Yes	Yes	No
Parallel Downloads	Yes	No	Yes	Yes
Module/Stream Support	No	No	Yes	No
Binary + Source Options	Primarily Binary	Binary	Binary	Both

Real-World Use Cases and Best Practices

Production Server Management

In production environments, package management becomes critical for security updates and system stability. Here’s how each excels:

APT: Excellent for Ubuntu-based cloud instances, with unattended-upgrades for automatic security updates
DNF: Superior transaction history makes RHEL environments easier to troubleshoot and rollback
PKG: FreeBSD’s binary + ports combination allows performance-critical applications to be compiled with specific optimizations

Automated Deployment Scenarios

# APT - Docker container setup
FROM ubuntu:20.04
RUN apt update && apt install -y \
    nginx \
    php-fpm \
    mysql-client \
    && apt clean \
    && rm -rf /var/lib/apt/lists/*

# DNF - Ansible playbook task
- name: Install web server stack
  dnf:
    name:
      - httpd
      - php
      - mariadb-server
    state: present

# PKG - Shell script deployment
#!/bin/sh
pkg update
pkg install -y nginx php74 mysql57-server
sysrc nginx_enable="YES"
sysrc mysql_enable="YES"

Security Considerations

Each package manager handles security differently:

APT: Uses GPG signatures and supports pinning to prevent unwanted upgrades
DNF: Includes automatic GPG verification and repository priority management
PKG: Provides built-in vulnerability auditing with pkg audit

Common Troubleshooting Scenarios

Broken Dependencies

# APT dependency issues
sudo apt --fix-broken install
sudo dpkg --configure -a

# DNF transaction problems
sudo dnf history undo last
sudo dnf distro-sync

# PKG database corruption
sudo pkg check -d
sudo pkg check -s

Repository Problems

# APT repository key issues
wget -qO - https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | sudo bash

# DNF repository configuration
sudo dnf config-manager --add-repo https://download.docker.com/linux/fedora/docker-ce.repo

# PKG repository updates
sudo pkg update -f

Integration with Configuration Management

Modern infrastructure relies heavily on automation tools that integrate with these package managers:

Ansible: Native modules for apt, yum, dnf, and pkg operations
Puppet: Package resources that abstract across different managers
Chef: Platform-specific package installation with unified syntax
SaltStack: pkg.installed states that work across distributions

Understanding these package managers enables you to make informed decisions about Linux distribution selection, automate deployments effectively, and troubleshoot issues quickly. Each has evolved to serve specific ecosystem needs, and choosing the right one often comes down to your distribution requirements and operational preferences.

For deeper technical details, consult the official documentation: Debian APT Wiki, DNF Documentation, and FreeBSD Handbook PKG Section.

This article incorporates information and material from various online sources. We acknowledge and appreciate the work of all original authors, publishers, and websites. While every effort has been made to appropriately credit the source material, any unintentional oversight or omission does not constitute a copyright infringement. All trademarks, logos, and images mentioned are the property of their respective owners. If you believe that any content used in this article infringes upon your copyright, please contact us immediately for review and prompt action.

This article is intended for informational and educational purposes only and does not infringe on the rights of the copyright owners. If any copyrighted material has been used without proper credit or in violation of copyright laws, it is unintentional and we will rectify it promptly upon notification. Please note that the republishing, redistribution, or reproduction of part or all of the contents in any form is prohibited without express written permission from the author and website owner. For permissions or further inquiries, please contact us.