CertGrid CertGrid
Configuration·LPIC-1

Repositories, and verifying what is installed

A package manager is only as good as the sources it reads, and only useful if you can tell whether what it installed is still what is on disk. This guide shows where both families configure repositories - including Debian's newer deb822 format - and then deliberately damages a binary to watch rpm -V catch it.

101: Installation and Packages Guide 7 of 33 Intermediate

Both package families, because LPI names dpkg and rpm in the objectives themselves. Every output is captured on the host it belongs to.
Server NameIP AddressOSRolesCPURAMHDD
LPIC1-A01192.168.0.76Ubuntu 26.04 LTSDebian-family host - dpkg and apt, which objective 102.4 names2 Core4 GB50 GB
LPIC1-B01192.168.0.77AlmaLinux 10.2RPM-family host - rpm and dnf, which objective 102.5 names2 Core4 GB50 GB

This guide includes

Use this because a package manager is only as good as the sources it reads. This matters because rpm -V compares the disk against the package - so an altered binary can be proved altered, and then proved restored.

Before you start

  1. Where the repositories are configured

  2. Proving a package's files are unchanged

  3. Now break it on purpose

  4. Putting it back

Official sources