What is Package Manager? | DevOps Dictionary

Understanding Linux Package Managers

What Is a Package Manager in Simple Terms

A package manager is an automated software librarian. Instead of downloading source code, compiling it, placing files in the right directories, and tracking what you installed, a package manager does all of this automatically. It also knows about dependencies — if nginx needs OpenSSL, it installs OpenSSL first.

How It Works

◈ DIAGRAM

+------------------------------------------+
| apt install nginx                        |
+------------------------------------------+
                    |
                    v
+------------------------------------------+
| Check local package index                |
| /var/lib/apt/lists/ -- run apt update    |
+------------------------------------------+
                    |
                    v
+------------------------------------------+
| Resolve dependencies                     |
| nginx needs: libssl, libpcre, zlib       |
+------------------------------------------+
                    |
                    v
+------------------------------------------+
| Download packages from repository        |
| Verify GPG signature                     |
+------------------------------------------+
                    |
                    v
+------------------------------------------+
| Install to correct locations             |
| /usr/sbin/nginx, /etc/nginx/, /lib/...   |
| Register systemd unit                    |
+------------------------------------------+

Practical Commands

Bash

## ── Debian/Ubuntu (apt) ──────────────────────────────────
 
## Update package index (must run before installing)
sudo apt update
 
## Install package
sudo apt install nginx
 
## Install specific version
sudo apt install nginx=1.24.0-1ubuntu1
 
## Remove package (keep config)
sudo apt remove nginx
 
## Remove package and config files
sudo apt purge nginx
 
## Upgrade all packages
sudo apt upgrade
 
## Search for a package
apt search nginx
apt-cache show nginx     ## show package details
 
## List installed packages
dpkg -l
dpkg -l | grep nginx
 
## Find which package owns a file
dpkg -S /usr/sbin/nginx
## nginx: /usr/sbin/nginx
 
## List files installed by a package
dpkg -L nginx
 
## Pin a package version (prevent auto-upgrade)
sudo apt-mark hold nginx
sudo apt-mark showhold    ## list held packages
 
## ── RHEL/Amazon Linux (yum/dnf) ──────────────────────────
 
sudo yum install nginx     ## or dnf install nginx
sudo yum remove nginx
sudo yum update
yum search nginx
yum info nginx
rpm -qa | grep nginx       ## list installed RPM packages
rpm -ql nginx              ## list files in package
rpm -qf /usr/sbin/nginx    ## which package owns this file

Troubleshooting

Symptom	Command	What to Check
Package not found	`sudo apt update` then retry	Index is stale
Wrong version installed	`apt-cache policy pkgname`	Which repo provides it
Dependency conflict	`sudo apt install -f`	Fix broken dependencies
GPG error adding repo	Import the signing key	`curl key

REMEMBER THIS
**Remember:** `apt update` updates the local index of available packages — it does NOT install or upgrade anything. It must be run before `apt install` to ensure you get current package versions. Forgetting this is why servers end up with outdated versions installed.

COMMON MISTAKE / WARNING
**Security:** Only add repositories from trusted sources with verified GPG keys. A malicious repository can serve packages that replace system binaries with compromised versions. Always verify the GPG key fingerprint against the vendor's official website before adding any third-party repository.