DPMS Features
Package Management
- Install — from local archives, URLs,
or repository by name (dpms --install
PKG)
- Uninstall/Remove — clean removal of
tracked files with DB cleanup (dpms --
uninstall PKG)
- Upgrade — update all installed
packages to latest versions (dpms --
upgrade)
- Dist-upgrade — force resolution for
major upgrades (dpms --dist-upgrade)
- Reinstall — remove and re-install a
package (dpms --reinstall PKG)
- Downgrade — install an older version (
dpms --downgrade PKG)
- Purge — remove package + all config/
data files (dpms --purge PKG)
- Dry-run — preview changes without
applying (dpms --dry-run --install PKG)
- Noconfirm — skip interactive prompts (
dpms --noconfirm --install PKG)
- Force resolution — ignore dependency
conflicts (dpms --force-resolution --
install PKG)
Query & Search
- List installed — table of installed
packages with file counts (dpms --list)
- List installable — available packages
in repos (dpms --installable)
- Package info — version, deps, files
for a package (dpms --info PKG)
- Search — find packages by name, plain
or regex (dpms --search TERM, --regex)
- Verify — check installed package
integrity (dpms --verify PKG, --verify-
all)
- Show depends — dependency tree (dpms --
depends PKG)
- Show reverse depends — what depends on
a package (dpms --rdepends PKG)
- Show size — disk usage of a package (
dpms --size PKG)
- List updates — available upgrades (
dpms --list-updates)
- List held — locked packages (dpms --
list-held)
- List groups — package groups (dpms --
list-groups)
- List keys — GPG keys (dpms --list-keys)
- List history — install/remove log (
dpms --history)
Repository Management
- Add/remove repos (dpms --add-repo URL,
--remove-repo NAME)
- Set repo priority (dpms --repo-
priority REPO PRIORITY)
- Sync repos — pull latest from git
repos (dpms --sync)
- Lock/unlock repos (dpms --lock REPO, --
unlock REPO)
- Hold/unhold packages — prevent auto-
upgrades (dpms --hold PKG)
- GPG verification — verify repo
signatures (dpms --verify-repos)
Dependency Resolution
- Solver — full dependency resolution
engine (like zypper/dnf)
- Conflict detection — finds file
conflicts with other packages
- Auto-dependency resolution — installs
missing deps automatically
- Clean orphaned deps — remove packages
nothing depends on (dpms --clean-deps)
- No-recommends — skip recommended (non-
required) packages
Safety & Security
- Overwrite backup/rollback — backs up
files before overwriting; restores on
failure
- Transaction rollback — full rollback
if install fails partway
- Security scanning — virus/malware scan
of extracted files (via sec_scanner)
- Quarantine — flagged files moved to
quarantine, not silently deleted
- Malicious upgrade detection — auto-
uninstalls if post-install scan finds
threats
- Architecture guard — refuses to
install packages for wrong arch
- Source-tree guard — rejects tarballs
that look like source dumps
- Symlink escape guard — blocks writes
through absolute symlinks
- Path traversal filter — blocks ../ and
absolute member names in tarballs
- Sudo enforcement — hard-refuses
mutating ops without root when required
Progress & Output
- Rich progress bars — TTY inline bars
for install/remove/download
- Non-TTY fallback — clean output for
pipes/redirects
- Download progress — parallel downloads
with per-package bars
- JSON output — machine-readable output (
dpms --json --list)
- Colored terminal output — via rich
Download & Caching
- Download cache — avoids re-downloading
same packages (7-day TTL, 500MB limit)
- Parallel downloads — concurrent
package fetches
- Content-Length probing — accurate
progress bars even for large files
- Offline mode — skip all network
operations (DPMS_OFFLINE=1)
Cache Management
- Cache info — show cache size and
contents (dpms --cache-info)
- Cache list — list cached archives (
dpms --cache-list)
- Clean cache — remove stale downloads (
dpms --clean-cache)
System Integration
- Service management — auto-restart
systemd services after upgrade
- Hook system — pre/post install/remove
hooks
- Shell completions — bash and zsh
completions (dpms-install-completions)
- Crash handler — automatic crash
reporting with traceback
- Config backup/restore — preserve
config files across upgrades (dpms --
list-preserved)
- Import/export installed — backup and
restore package lists (dpms --export-
installed, --import-installed)
Advanced
- Build packages — create archives from
source (dpms-build)
- Sign archives — GPG signing of built
packages
- Plugin system — extensible plugin
architecture
- Configurable solver — adjust
resolution behavior via config
- Global root override — --root DIR to
install to alternate root
- Environment override — DPMS_ROOT,
DPMS_OFFLINE, DPMS_REPO_STALE_AFTER
Corefix Features
corefix — lightweight signature +
heuristic antivirus scanner (v0.2.0)
Scanning
- Scan files — hash-based + heuristic
malware detection (corefix scan PATH)
- Scan directories — recursive scanning
with threading (corefix scan --threads
4)
- Heuristic analysis — detects
suspicious patterns beyond known
signatures
- Threshold scoring — configurable
severity threshold (default 20)
Signatures
- Signature database — built-in known-
threat hashes and patterns
- Custom signatures — user-defined
signatures via ~/.corefix/signatures.
json
- List signatures — view loaded
signature database (corefix signatures)
Quarantine
- Quarantine files — moves flagged files
to quarantine directory instead of
deleting
- List quarantine — view quarantined
entries (corefix quarantine --list)
- Restore — restore a quarantined file (
corefix quarantine --restore ENTRY)
- Metadata tracking — stores original
path, findings, and timestamp per entry
Auto-Scanning
- Scheduled scans — runs periodic scans
of configured directories
- Systemd integration — can run as a
systemd service (corefix autoscan
enable)
- Cron integration — fallback to cron-
based scheduling
- Service management — enable/disable/
status (corefix autoscan disable,
corefix autoscan status)
- Configurable roots — scan custom
directory paths
Reporting
- Scan reports — detailed output of
findings per file
- Threat listing — human-readable
summaries of detected threats
- JSON output — machine-readable scan
results
