====== YUM Versionlock - Essential Commands ======

===== Plugin Installation =====

<code bash>
# CentOS/RHEL 7-8
sudo yum install yum-plugin-versionlock

# CentOS/RHEL 9 / Rocky Linux / AlmaLinux
sudo dnf install python3-dnf-plugin-versionlock
</code>

===== Basic Commands =====

==== Lock Packages ====

<code bash>
# Lock currently installed version
sudo yum versionlock add package-name

# Lock specific version
sudo yum versionlock add package-name-1.2.3

# Lock with wildcard (all versions starting with...)
sudo yum versionlock add 'gitlab-ee-18*'

# Lock multiple packages at once
sudo yum versionlock add package1 package2 package3
</code>

==== View Locks ====

<code bash>
# List all locked packages
sudo yum versionlock list

# Check if specific package is locked
sudo yum versionlock list | grep package-name
</code>

==== Unlock Packages ====

<code bash>
# Unlock specific package
sudo yum versionlock delete package-name

# Unlock all packages
sudo yum versionlock clear

# Unlock with wildcard
sudo yum versionlock delete 'gitlab-ee-18*'
</code>

===== Practical Examples =====

==== GitLab - Block Major Version ====

<code bash>
# Block all 18.x versions
sudo yum versionlock add 'gitlab-ee-18*'

# Allow updates only within 17.x series
sudo yum update gitlab-ee
</code>

==== Kernel - Keep Stable Version ====

<code bash>
# Lock current kernel
sudo yum versionlock add kernel

# Check which version is locked
sudo yum versionlock list | grep kernel
</code>

==== Docker - Lock Compatible Version ====

<code bash>
# Lock Docker at current version
sudo yum versionlock add docker-ce docker-ce-cli containerd.io

# List Docker locks
sudo yum versionlock list | grep docker
</code>

===== Configuration Files =====

==== File Locations ====

<code>
# Locked packages list stored in:
/etc/yum/pluginconf.d/versionlock.list

# Plugin configuration:
/etc/yum/pluginconf.d/versionlock.conf
</code>

==== Manual Editing ====

<code bash>
# Edit list directly (not recommended)
sudo nano /etc/yum/pluginconf.d/versionlock.list

# Format: EPOCH:NAME-VERSION-RELEASE.ARCH
# Example: 0:gitlab-ee-17.11.6-ee.0.el8.x86_64
</code>

===== Useful Combined Commands =====

==== Selective Updates ====

<code bash>
# Update all packages except locked ones
sudo yum update

# Force update (temporarily ignore versionlock)
sudo yum update --disableplugin=versionlock

# Update only specific package (respects locks)
sudo yum update package-name
</code>

==== Pre-Update Verification ====

<code bash>
# See what would be updated (dry-run)
sudo yum check-update

# See which packages are locked
sudo yum versionlock list

# Combine - see available updates vs locked
sudo yum check-update && echo "--- BLOCKED ---" && sudo yum versionlock list
</code>

===== Tips & Best Practices =====

<note tip>
**Useful Tips:**
  * Use wildcards to block entire version families
  * Regularly check lock list with ''yum versionlock list''
  * Test updates on staging systems before production
  * Document why you locked specific packages
</note>

<note important>
**Important Notes:**
  * Versionlock doesn't work with ''yum remove''
  * Locked packages may create unresolved dependencies
  * Check compatibility before locking critical packages
</note>

===== Troubleshooting =====

==== Common Issues ====

<code bash>
# Plugin not working
sudo yum clean all
sudo yum makecache

# Check if plugin is active
yum --help | grep versionlock

# Reset all locks if having issues
sudo yum versionlock clear
</code>

==== Plugin Status Check ====

<code bash>
# Check if plugin is installed
rpm -qa | grep versionlock

# Check configuration
cat /etc/yum/pluginconf.d/versionlock.conf
</code>