RPM-SCRIPTLETS(7) Miscellaneous Information Manual RPM-SCRIPTLETS(7)

# [NAME](#NAME)

rpm-scriptlets - RPM transaction scriptlets

# [SYNOPSIS](#SYNOPSIS)

**%SCRIPT** \[options] \[*NAME*]  
\[body]

**%TRIGGER** \[options] \[*NAME*] **--** *TRIGGERCOND* ...  
\[body]

**%FILETRIGGER** \[options] \[filetrigger-options] \[*NAME*] **--** *PATHPREFIX* ...  
\[body]

# [DESCRIPTION](#DESCRIPTION)

RPM supports running arbitrary programs at various pre-determined stages of a package's lifetime, such as after installation, just before uninstall or when another package is installed or updated in *transactions*. These programs are called *scriptlets* and the places where they run are called *slots*.

There are three main types of scriptlets:

- **Scripts** are unconditionally invoked at their predetermined slots in a transaction.
- **Triggers** are conditionally invoked when their specified *trigger condition* matches other packages on the installed system or in a transaction.
- **File triggers** are conditionally invoked when their specified *path prefix* matches other files on the installed system or in a transaction.

By default, scriptlets are executed with the */bin/sh* shell, but this can be overridden (see **OPTIONS**). Typically a scriptlet has a body for the interpreter to execute, but the interpreter can also be a standalone, special-purpose program, in which case the scriptlet body may be omitted. The scriptlet interpreter dependency is automatically added by RPM, but other dependencies to tools used by scriptlets must be manually added in the spec.

Scriptlets cannot be interactive, and should not rely on their output to be seen by users.

# [ARGUMENTS](#ARGUMENTS)

*NAME*

The name of the subpackage the scriptlet is associated with, within the spec file. If omitted, the main package is assumed. See [**rpm-spec**(5)](/man/os/rpm/rpm-spec.5) for details.

*TRIGGERCOND*

A trigger condition is a name of a package, optionally followed by a version range: *NAME* \[*op* *EVR*] where *op* is one of **<**, **<=**, **=**, **>=** or **>** and *EVR* is an [**rpm-version**(7)](/man/os/rpm/rpm-version.7) label. For example, **glibc < 2.40**.

*PATHPREFIX*

A path prefix on which the file trigger is triggered on. The prefix must be a complete path of its own, typically a directory whose contents the trigger is interested in, e.g. */usr/lib*.

# [OPTIONS](#OPTIONS)

**-e**

Perform runtime [**rpm-macros**(7)](/man/os/rpm/rpm-macros.7) expansion on the scriptlet before executing it.

Note that macros intended to be runtime expanded generally need to be escaped in specs to avoid buildtime expansion.

**-n**

Interpret *NAME* as a full package name.

**-p** *EXECUTABLE*

Execute the scriptlet using *EXECUTABLE* as the interpreter.

As a special case, specifying **<lua>** as the *EXECUTABLE* invokes the embedded Lua interpreter. The various special behaviors of such scriplets are documented in the [**rpm-lua**(7)](/man/os/rpm/rpm-lua.7) manual.

**-q**

Perform [**rpm-queryformat**(7)](/man/os/rpm/rpm-queryformat.7) on the package header, using the scriptlet as the format.

Note the need to escape things that look like macros, and constructs that are special to the shell, such as **{}** and **\[]**.

# [FILETRIGGER OPTIONS](#FILETRIGGER_OPTIONS)

**-P** *NUMBER*

Priority of the trigger, among the other file triggers of the same kind. The default priority of file triggers is 100000. A larger priority means earlier execution.

# [SCRIPTS](#SCRIPTS)

**%SCRIPT** \[options] \[*NAME*]  
\[body]

Scripts execute unconditionally at their pre-determined slots in a transaction.

Scripts receive one argument (**$1**), which contains the number of installed instances of the package when the operation on the package containing the executing script completes. RPM performs upgrades as two separate but related operations: install of the new version, and erase of the old version. This can be used to differentiate install, erase and upgrade/downgrade from each other: the argument is **1** on initial install, and **0** on final removal. Otherwise it's an upgrade/downgrade (or parallel install).

The scripts of a package can be examined with a **rpm -q --scripts** query.

## [Package scripts](#Package_scripts)

Package scripts execute before and after the main operation (install/remove etc.) of the package inside a transaction.

Package scripts should only be used for actions that are fundamentally package specific. Domain specific registries, databases, caches and such are much better handled centrally by file triggers. Similarly, user and group creation should be handled by [**rpm-sysusers**(7)](/man/os/rpm/rpm-sysusers.7), rather than scripting them.

**%pre**

Executed just before unpacking the contents of the package. Non-zero exit prevents the installation of the containing package.

**%post**

Executed just after unpacking the contents of the package.

**%preun**

Executed just before removing the contents of the package. Non-zero exit prevents the uninstallation of the containing package.

**%postun**

Executed just after removing the contents of the package.

**%verify**

Executed when a package is verified using **rpm --verify**.

Unlike all the other scriptlet types, **%verify** never executes as a part of install/erase etc. operations.

## [Transaction scripts](#Transaction_scripts)

Transaction scripts run before and after all the other package level operations (install/remove etc.) in a transaction.

When multiple transaction scripts for a given slot are present in a transaction, they are executed in the order of their install/removal order within the transaction.

**%pretrans**

Executed just before an install/update/reinstall transaction on the containing package starts.

No files from the transaction have been installed or removed yet. That is, in a fresh installation to an empty system root, there are no files around and no interpreter to run, so the only interpreter that can be reliably used in this slot is the embedded [**rpm-lua**(7)](/man/os/rpm/rpm-lua.7) interpreter.

Non-zero exit prevents the installation of the containing package.

This is a very special and a dangerous slot, and is best avoided.

**%posttrans**

Executed just after an install/update/reinstall transaction on the containing package finishes.

All files from the transaction have been installed or removed at this point.

**%preuntrans**

Executed just before an uninstall/updated-from transaction on the containing package starts.

**%postuntrans**

Executed just after an uninstall/updated-from transaction on the containing package finishes.

# [TRIGGERS](#TRIGGERS)

**%TRIGGER** \[options] \[*NAME*] **--** *TRIGGERCOND* ...  
\[body]

Triggers are package scriptlets that are set off by changes to other packages. Unlike scripts, triggers are only executed when their *trigger condition* is satisfied. Besides just reacting to changes to other packages, they are often used for version specific migration tasks.

A trigger scriptlet may have more than one condition, and any of them matching sets off the trigger. A trigger will only run once even if there are multiple packages setting it off.

Triggers receive one argument (**$1**), which contains the number of installed instances of the *triggered package* (ie. the package containing the trigger scriptlet) when the operation has completed. In addition, triggers receive a second argument (**$2**), which contains the number of installed instaces of the *triggering package* (ie. the package that set off the trigger).

The triggers of a package can be examined with a **rpm -q --triggers** query.

**%triggerprein**

Executed just before the installation of a triggering package.

**%triggerin**

Executed just after the installation of a triggering package.

**%triggerun**

Executed just before the removal of a triggering package.

**%triggerpostun**

Executed just after the removal of a triggering package.

# [FILE TRIGGERS](#FILE_TRIGGERS)

**%FILETRIGGER** \[options] \[filetrigger-options] \[*NAME*] **--** *PATHPREFIX* ...  
\[body]

File triggers are scriptlets that are set off by changes to files, ie. triggers whose trigger condition is path-based. File triggers are used to centralize script patterns that repeat across multiple packages, such as registering domain-specific files into databases or updating system-wide caches.

File triggers receive the matching paths via standard input, one per line.

Like triggers, they receive one argument (**$1**), which contains the number of installed instances of the *triggered package* (ie. the package containing the file trigger scriptlet) when the operation has completed.

In addition, **Package File Triggers** receive a second argument (**$2**), which contains the number of installed instances of the the *triggering package* (ie. the package which set off the trigger).

The file triggers of a package can be examined with a **rpm -q --filetriggers** query.

## [Package File Triggers](#Package_File_Triggers)

Package file triggers execute once per each triggering package.

**%filetriggerin**

Executed just after the installation of each triggering package.

**%filetriggerun**

Executed just before the removal of each triggering package.

**%filetriggerpostun**

Executed just after the removal of each triggering package.

Note: not executed when the package containing the trigger is removed.

## [Transaction File Triggers](#Transaction_File_Triggers)

Transaction file triggers only execute once per transaction, regardless of how many packages triggered it.

**%transfiletriggerin**

Executed once at the end of a transaction, for all matching installed files (ie. from the transaction or previously installed).

**%transfiletriggerun**

Executed once at the start of a transaction, for all matching removed files.

**%transfiletriggerpostun**

Executed once at the end of a transaction if there were matching removed files.

Note: the list of triggering files is not available in this slot.

# [EXECUTION ORDER](#EXECUTION_ORDER)

The relative execution order of scriptlets within a transaction for a single package upgrade is as follows. *new* refers to a newly installed package version, *old* refers to the already installed package version to be replaced by *new*, *rpmdb* means installed packages, and *any* means both *rpmdb* and the other packages in the current transaction.

1\.

**%pretrans** of *new*

2\.

**%preuntrans** of *old*

3\.

**%transfiletriggerun** of *any*, set off by removal of *old*

4\.

**%sysusers** of *new* (implicit)

5\.

**%triggerprein** of *rpmdb*, set off by install of *new*

6\.

**%triggerprein** of *new*, set off by *rpmdb*

7\.

**%pre** of *new*

8\.

(unpack *new* files)

9\.

**%filetriggerin** of *any* (high priority), set off by *new*

10\.

**%filetriggerin** of *new* (high priority), set off by *any*

11\.

**%post** of *new*

12\.

**%triggerin** of *rpmdb*, set off by *new*

13\.

**%triggerin** of *new*, set off by *rpmdb*

14\.

**%filetriggerin** of *any* (low priority), set off by *new*

15\.

**%filetriggerin** of *new* (low priority), set off by *any*

16\.

**%triggerun** of *old*, set off by *rpmdb*

17\.

**%triggerun** of *rpmdb*, set off by *old*

18\.

**%filetriggerun** of *old* (high priority), set off by *any*

19\.

**%filetriggerun** of *any* (high priority), set off by *old*

20\.

**%preun** of *old*

21\.

**%filetriggerun** of *old* (low priority), set off by *any*

22\.

**%filetriggerun** of *any* (low priority), set off by *old*

23\.

(erase *old* files)

24\.

**%filetriggerpostun** of *new* (high priority), set off by *any*

25\.

**%filetriggerpostun** of *any* (high priority), set off by *new*

26\.

**%postun** of *old*

27\.

**%filetriggerpostun** of *new* (low priority), set off by *any*

28\.

**%filetriggerpostun** of *any* (low priority), set off by *new*

29\.

**%posttrans** of *new*

30\.

**%postuntrans** of *old*

31\.

**%transfiletriggerpostun** of *any*, set off by *old*

32\.

**%transfiletriggerin** of *any*, set off by *new*

# [ENVIRONMENT](#ENVIRONMENT)

**RPM\_INSTALL\_PREFIX\_**​*N*

The *N*'th install prefix in relocatable packages.

**RPM\_INSTALL\_PREFIX**

Same as **RPM\_INSTALL\_PREFIX0**, for legacy compatibility.

# [EXIT STATUS](#EXIT_STATUS)

A non-zero exit code from any scriptlet will be reflected as an error in the transaction result code. Additionally, non-zero exit from the various pre-scriptlets (noted above for each such scriptlet) stop further processing related to *that package*, not the whole transaction.

Scriptlets should be designed to always return with zero exit code, as RPM cannot undo or roll back a transaction.

For example, an exit code of 1 from a **%pre** script prevents the install/update of that package, but the rest of the transaction will still take place, even if there are missing dependencies.

# [EXAMPLES](#EXAMPLES)

## [Example 1. Update /etc/shell on package install/removal](#Example_1._Update_/etc/shell_on_package_install/removal)

```
%post
if [ $1 -eq 1 ]; then


    # Initial install


    grep -q '^/bin/mysh$' /etc/shells || echo '/bin/mysh' >> /etc/shells
fi
%postun
if [ $1 -eq 0 ] ; then


    # Package removal, not upgrade


    sed -i '/^/bin/mysh$/d' /etc/shells
fi
```

## [Example 2. Manage alternatives in a subpackage](#Example_2._Manage_alternatives_in_a_subpackage)

```
Name: frobber
[...]
%package myimpl
[...]
%post myimpl
update-alternatives --install /usr/bin/frobber \
	frobber /usr/bin/frobber.myimpl 10
%preun myimpl
if [ $1 -eq 0]; then


    # Package removal, not upgrade


    update-alternatives --remove frobber /usr/bin/frobber.myimpl 10
fi
```

## [Example 3. Manage the MIME database](#Example_3._Manage_the_MIME_database)

```
%transfiletriggerin -- /usr/share/mime
/usr/bin/update-mime-database -n /usr/share/mime &> /dev/null ||:
%transfiletriggerpostun -- /usr/share/mime
/usr/bin/update-mime-database -n /usr/share/mime &> /dev/null ||:
```

Note that these would go to the package owning the */usr/bin/update-mime-database* binary, which then centrally handles all updates to the */usr/share/mime* directory. Besides removing the need to have such scriptlets in all packages with such content, it also eliminates the need to have dependencies to the helper binary in all related packages.

## [Example 4. Enable a systemd preset on upgrade from older version](#Example_4._Enable_a_systemd_preset_on_upgrade_from_older_version)

```
Name: my
Version: 3.0
[...]
# On update from 2.x
%triggerun -- my < 3.0-1
if [ -x /usr/bin/systemctl ]; then


    systemctl --no-reload preset mydb-migrate ||:
fi
```

## [Example 5. Execute a program in %pretrans](#Example_5._Execute_a_program_in__pretrans)

```
%pretrans -p <lua>
if posix.access('/usr/bin/mything', 'x') then


    rpm.execute('/usr/bin/mything')
end
```

Note that this seemingly simple thing is generally not possible in **%pretrans** without using **-p &lt;lua&gt;**, as on the initial install of a system, even */bin/sh* is not present at all.

## [Example 6. Runtime macro expansion](#Example_6._Runtime_macro_expansion)

```
%post -e
ln -s %{_datadir}/bar/some.ext %%{_libdir}/foo/some.ext
```

## [Example 7. Runtime queryformat expansion for installed filenames](#Example_7._Runtime_queryformat_expansion_for_installed_filenames)

```
%post -q
for f in [%%{instfilenames} ]; do


    echo $f
done
```

The filenames printed by this accurately reflect any file policies from the time of installation, such as **--nodocs**.

# [BUGS](#BUGS)

Priority for **Transaction File Triggers** is not currently implemented.

# [SEE ALSO](#SEE_ALSO)

[**rpm**(8)](/man/os/rpm/rpm.8), [**rpm-lua**(7)](/man/os/rpm/rpm-lua.7), [**rpm-sysusers**(7)](/man/os/rpm/rpm-sysusers.7), [**rpm-spec**(5)](/man/os/rpm/rpm-spec.5)

2026-10-04 RPM 6.1.0

---

Document: rpm-scriptlets(7) from rpm 6.1.0-r2 (Chainguard OS)
Source: https://github.com/rpm-software-management/rpm