koji

What it is and what it does

Koji is the command-line client and shared library for the Koji RPM build system, which the Fedora Project and other organizations use to manage reproducible software builds. It provides programmatic access to build tracking, artifact management, and build automation through XML-RPC APIs, allowing developers and automation tools to query build status, retrieve artifacts, and trigger builds.

The package is designed as a thin, portable client that works alongside Koji's web interface and server components. It depends on standard HTTP and authentication libraries (requests, requests-gssapi, python-dateutil) to communicate with remote Koji instances, and uses defusedxml for secure XML parsing. It supports both Python 2.7 and modern Python 3 versions, making it suitable for integration into legacy and contemporary build pipelines.

Use it for:

• Query build status and retrieve RPM artifacts from a Fedora or enterprise Koji instance.
• Automate build triggering and monitoring in CI/CD pipelines that target RPM-based distributions.
• Integrate Koji build tracking into custom release or deployment tools via its XML-RPC API.
• Manage local buildroots and track buildroot contents for reproducible builds in development workflows.
• Authenticate to Koji servers using Kerberos credentials in enterprise environments.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Koji is a command-line client and library for interacting with RPM-based build systems, providing access to build tracking, artifact management, and build automation through XML-RPC APIs.

Yes, if you work with Koji-based build systems (Fedora, RHEL, or similar RPM-based projects). The package is actively maintained, has low install friction, and provides the standard client for Koji interaction. No security vulnerabilities are known. The copyleft license requires review if you plan to distribute derivative works, but poses no barrier to internal use or integration into open-source projects.

Install

koji on PyPI

pip install koji

uv add koji

poetry add koji

Installing koji

Before you install

Low install friction with pure-Python wheels available for both Python 2 and 3. Actively maintained with a release 37 days ago. Five runtime dependencies are all well-established packages (defusedxml, python-dateutil, requests, requests-gssapi, six).

License in practice

Licensed under LGPLv2 and GPLv2+, both copyleft licenses. Derivative works and distributions must comply with copyleft obligations; proprietary software linking this library must be carefully reviewed for license compatibility.

Quickstart

pip install koji

import koji
client = koji.ClientSession('https://koji.fedoraproject.org/koji')
builds = client.listBuilds()

Requires network access to a Koji server instance; Kerberos authentication may be needed depending on server configuration.

Verify before relying

• Whether requests-gssapi is required for all use cases or only when Kerberos authentication is needed.
• Specific Python 2.7 support status given the package claims Python 2.7 compatibility but Python 2 is end-of-life.
• What parameters and return types the ClientSession API accepts and returns.

Package facts

Evidence: koji-1.36.1-py2-none-any.whl; koji-1.36.1-py3-none-any.whl

Tags

More Utilities packages