---
id: koji
version: "1.36.1"
license: LGPLv2 and GPLv2+
license_treatment: copyleft
maintenance: active
---

# koji — Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface.

License: copyleft · Maintenance: active · Downloads: 199.3K/mo

## What it is and what it does

Koji is the command-line client and shared library for the Koji RPM build system, which the Fedora Project and other organizations use to manage reproducible software builds. It provides programmatic access to build tracking, artifact management, and build automation through XML-RPC APIs, allowing developers and automation tools to query build status, retrieve artifacts, and trigger builds.

The package is designed as a thin, portable client that works alongside Koji's web interface and server components. It depends on standard HTTP and authentication libraries (requests, requests-gssapi, python-dateutil) to communicate with remote Koji instances, and uses defusedxml for secure XML parsing. It supports both Python 2.7 and modern Python 3 versions, making it suitable for integration into legacy and contemporary build pipelines.

Use it for:

- Query build status and retrieve RPM artifacts from a Fedora or enterprise Koji instance.
- Automate build triggering and monitoring in CI/CD pipelines that target RPM-based distributions.
- Integrate Koji build tracking into custom release or deployment tools via its XML-RPC API.
- Manage local buildroots and track buildroot contents for reproducible builds in development workflows.
- Authenticate to Koji servers using Kerberos credentials in enterprise environments.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Koji is a command-line client and library for interacting with RPM-based build systems, providing access to build tracking, artifact management, and build automation through XML-RPC APIs.

Yes, if you work with Koji-based build systems (Fedora, RHEL, or similar RPM-based projects). The package is actively maintained, has low install friction, and provides the standard client for Koji interaction. No security vulnerabilities are known. The copyleft license requires review if you plan to distribute derivative works, but poses no barrier to internal use or integration into open-source projects.

## Install

pip install koji
uv add koji
poetry add koji

## Installing koji

Before you install: Low install friction with pure-Python wheels available for both Python 2 and 3. Actively maintained with a release 37 days ago. Five runtime dependencies are all well-established packages (defusedxml, python-dateutil, requests, requests-gssapi, six).

License in practice: Licensed under LGPLv2 and GPLv2+, both copyleft licenses. Derivative works and distributions must comply with copyleft obligations; proprietary software linking this library must be carefully reviewed for license compatibility.

Quickstart:

pip install koji

import koji
client = koji.ClientSession('https://koji.fedoraproject.org/koji')
builds = client.listBuilds()

Requires network access to a Koji server instance; Kerberos authentication may be needed depending on server configuration.

Verify before relying:

- Whether requests-gssapi is required for all use cases or only when Kerberos authentication is needed.
- Specific Python 2.7 support status given the package claims Python 2.7 compatibility but Python 2 is end-of-life.
- What parameters and return types the ClientSession API accepts and returns.

## Package facts

- License: LGPLv2 and GPLv2+ (copyleft)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 199.3K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

rpm build system client, koji build tracking, fedora build automation, rpm package build management, build system xml-rpc api, rpm buildroot tracking, koji command line tool, rpm-builds, fedora-ecosystem, build-automation

[View on SkillFed](https://skillfed.io/packages/koji) · [View on PyPI](https://pypi.org/project/koji/)