783

Simple enough question: is there some shell command (or GUI method) I can use that, given the path to a file on my system, tells me what package put it there? Assuming the file did in fact come from a package, that is.

Bonus question: what if it's a file that isn't installed on my system? Is there, say, a website that will let me look up a file and see what packages, if any, provide it?

3
  • 9
    I've always wondered this myself - I know with YUM you can do yum whatprovides <filepath>/<filename> but I never really have found an alternative to that in Aptitude other than the Packages website Commented Jul 30, 2010 at 13:44
  • Same on SU: superuser.com/questions/10997/… Commented May 21, 2015 at 11:07
  • None of the answers here actually cover the Provides: mechanism. In some more detail, a command like mailx or sendmail is not included as a binary in any package; instead, various packages install their own binaries and then make some of them available under a "canonical" name via /etc/alternatives. See also askubuntu.com/questions/366135/…
    – tripleee
    Commented Jan 26, 2018 at 4:13

11 Answers 11

735

You can use dpkg command to find out which installed package owns a file:

From man dpkg:

-S, --search filename-search-pattern...
                  Search for a filename from installed packages.

Example:

$ dpkg -S /bin/ls
coreutils: /bin/ls

You can either search with a full path or with just the filename.

If you wish to search for files not yet installed on your computer, you can use the Ubuntu Packages Search, or apt-file as described in a different answer.

11
  • 7
    I highly recommend using dlocate, which is updated daily for faster lookups. Commented Nov 23, 2010 at 21:29
  • 33
    Hint: if you do not know the full path, but just the command name, use which to find he program: dpkg -S `which firefox`
    – Lekensteyn
    Commented Jun 7, 2011 at 15:38
  • 3
    @DanielTChen, but dlocate may not do the job, if dlocate's database is out of date. You have to call sudo update-dlocatedb to update it.
    – jarno
    Commented Jun 14, 2015 at 14:40
  • 3
    If dpkg the exact path doesn't return anything (e.g. dpkg /usr/bin/java), try just the executable's name (e.g. dpkg java). Commented Jan 21, 2016 at 1:05
  • 8
    You can also use realpath to resolve symlinks, like this: dpkg -S $(realpath $(which <command>)). Commented Jan 18, 2019 at 14:24
437

The apt-file command can do this for you from the command line. I use it frequently when building packages from source. For files provided by packages that are already installed on your system, apt-cache is another choice.

To install apt-file, do:

sudo apt-get install apt-file

Then, you need to update it's database:

sudo apt-file update

And, finally, search the file:

$ apt-file find kwallet.h
kdelibs5-dev: /usr/include/kwallet.h
libkf5wallet-dev: /usr/include/KF5/KWallet/kwallet.h

However a much friendlier way is to use the Ubuntu Packages Search website. They have an option to "search the contents of packages" for a specific filename.

8
  • 40
    In my opinion this should be the accepted answer. But in response to Ubuntu Packages Search, I might argue that a shell program this simple is extremely friendly and easy to remember (once you know it). If you use dpkg, apt-get, or aptitude as your standard tools, there is nothing friendly about firing up Chrome to surf the internet! Commented Apr 1, 2016 at 6:00
  • 6
    @user2097818 The reason this isn't the accepted answer is that my primary question is restricted to files on the system and packages which are installed. apt-file often finds false positives, i.e. packages that aren't installed. Of course this answer is great for the "bonus question".
    – David Z
    Commented Apr 3, 2018 at 23:36
  • 4
    For those from the Redhat side of the world - apt-file search <> is the closest analog to dnf/yum whatprovides <>.
    – ffledgling
    Commented Apr 29, 2018 at 20:14
  • 9
    I guess the question is why in the world is this functionality not built into apt, apt-get, or one of the other default apt-* programs. It seems like key piece of any package manager's search capabilities. Commented Feb 3, 2020 at 18:52
  • 1
    A couple of caveats: 1) you have to install apt-file which is really annoying; 2) it is much slower than dpkg -S, eg on my system the latter takes less than half a second, whereas apt-file find takes 20 seconds! 3) most often, if you have a path on your system, then the package is installed, so why pay for the overhead of apt-file?
    – Oliver
    Commented Oct 28, 2020 at 14:11
58

There's also apt-file for looking up files in packages that aren't installed. For example:

apt-file list packagename
0
26

You can search the contents of packages included in the various Ubuntu releases on the Ubuntu Packages website. Look under the heading "Search the contents of packages".

For example, here are the search results for libnss3.so in focal (20.04):

http://packages.ubuntu.com/search?searchon=contents&keywords=libnss3.so&mode=exactfilename&suite=focal&arch=any

1
  • 3
    This recently just returns an error. Commented May 7, 2019 at 19:23
22

You mean, which package and not which application. The application is your package manager, e.g. Software Center.

Using dpkg:

dpkg -S /usr/lib/tracker/tracker-store
dpkg -S tracker-extract
dpkg -S tracker-miner-fs

Example

% dpkg -S /usr/lib/tracker/tracker-store
tracker: /usr/lib/tracker/tracker-store

Using apt-file:

apt-file search /usr/lib/tracker/tracker-store

or also possible:

apt-file search --regex /tracker-extract$
apt-file search --regex /tracker-miner-fs$

Example

% apt-file search /usr/lib/tracker/tracker-store
tracker: /usr/lib/tracker/tracker-store

Or online here, in the section Search the contents of packages.

enter image description here

Example

enter image description here

2
  • You mean, which package and not which application. The application is your package manager, e.g. Software Center. Okay. Thank you! :)
    – ReyKev
    Commented Nov 29, 2015 at 17:14
  • Thank you for all the help! None of these suggestions helped me find which package installed this/these applications though. All searches just lead back to "Tracker". I suspected it was Enthoughts' Canopy though. That mile long EULA reminded me of my old Microsoft Windows daze, with which, I am so glad I am no longer involved. I saw that Tracker was installed yesterday so, as root, I got rid of it, along with Enthoughts' Canopy and, all problems are solved. I really thank you for all your help. It is such a great thing to have such support. Thanks again! Kevin
    – ReyKev
    Commented Nov 29, 2015 at 17:22
7

This is an extension to Alexx Roche's excellent answer. I tried to make an edit to that answer, but it got rejected (though not by Alexx)


I was trying to track down what installed which on my system. After a little work I created /usr/local/bin/apt-whatprovides

#!/bin/sh
#apt-whatprovides ver. 201801010101 Copyright alexx, MIT Licence
#rdfa:deps="[realpath,apt-file,grep,which,sh,echo]"

BINARY="$(realpath $(which $@) 2>/dev/null)"
[ -z "$BINARY" ] && BINARY="$@"
echo Searching for $BINARY
PACKAGE="$(apt-file search $BINARY|grep -E ":.*[^-.a-zA-Z0-9]${BINARY}$")"
echo "${PACKAGE}"

Though for most THINGs that are installed you can just use:

apt-file search $(realpath $(which THING)) | grep 'THING$'

For THINGs that are not installed, you can use:

apt-file search THING | grep '/THING$'

The apt-whatprovides script works for files that are and are not on your system. For example, my system lacked dig but had ping so this it what resulted:

pi@raspberrypi:~ $ apt-whatprovides ping
Searching for /bin/ping
inetutils-ping: /bin/ping
iputils-ping: /bin/ping

pi@raspberrypi:~ $ apt-whatprovides dig
Searching for dig
dnsutils: /usr/bin/dig
epic4: /usr/share/epic4/script/dig
epic4-help: /usr/share/epic4/help/8_Scripts/dig
knot-dnsutils: /usr/bin/dig

Notice that Searching for is a complete path for ping (installed) and just the binary name for dig not installed. This helped me discover that I needed to install dnsutils without needing to go search https://packages.ubuntu.com/#search_contents

4
  • This is such a good answer that I should delete mine! Commented Jul 30, 2018 at 11:49
  • with apt-file -x ... you don't need to grep the output, hence you get slightly shorter and more convenient one liner like apt-file -ix search "$( realpath $( which THING ) )$" (installed packages) resp. apt-file -ix search '/THING$' (not installed packages). Commented Jun 20, 2022 at 13:34
  • well, not even that my one liner are more convenient... i found one corner case in which they actually show a more useful resp. any result at all: if the binary is linked and uses a different name, the grep edition shows nothing while the apt-file -x edition still filters for the correct command/path. || anyway, for installed packages dpkg -S $( which THING ) or apt contains $( which THING ) is IMHO still the better choice. Commented Jun 20, 2022 at 13:56
  • lz4 -dmc /var/lib/apt/lists/*Contents* | grep -F "${BINARY#/}"$'\t' | sort -u is considerably faster than apt-file search ... | grep and way faster than apt-file search -x.
    – Juergen
    Commented Nov 2, 2023 at 15:01
4

I was trying to track down what installed which on my system. After a little work I created apt-whatprovides

#!/bin/sh
#apt-whatprovides ver. 201801010101 Copyright alexx, MIT Licence
#rdfa:deps="[realpath,apt-file,grep,which,sh,echo]"

BINARY=$(realpath $(which $@))
PACKAGE=$(apt-file search $BINARY|grep -E ":\s*${BINARY}$")
echo ${PACKAGE%:*}

Though for most THINGs you can just use

apt-file search $(realpath $(which THING))|grep 'THING$'
3
  • 1
    Alexx, I love this answer. I hope you don't mind my edit. I made it also work for files that are not installed on the system. I made a backup at gist.github.com/RichardBronosky/… and will create my own answer if you revert/reject it. Commented Jul 15, 2018 at 5:00
  • Update: It feels slimy to copy pasta this answer and make subtle changes to it, but my edit got rejected. I hope you feel like I maintained the integrity of your answer in mine. Commented Jul 18, 2018 at 5:47
  • Feel free to edit or hack; anything that makes it better for you, (that's why I added MIT Licence! I don't even need credit.) Commented Jul 30, 2018 at 11:41
4

You can use:

$ apt-file --fixed-string  search /bin/ls
coreutils: /bin/ls

or,

$ apt-file --fixed-string --package-only search /bin/ls
coreutils

You can also read from file like bellow:

echo "/bin/ls" | apt-file --fixed-string --from-file --package-only search -

Instead you echo you can use like cat files.txt.

For Linux Mint you can use apt to do it.

$ apt contains /bin/ls
coreutils: /bin/ls

The output is same as:

$ dpkg -S /bin/ls
coreutils: /bin/ls

P.S. In the above commands, you can replace --fixed-string with -F; --package-only with -l and --from-file with -f.

3
  • 2
    apt contains is not a valid operation, at least for apt v2.4.8. Commented Oct 23, 2022 at 14:24
  • @TeemuLeisti apparently it's from linux mint. maketecheasier.com/ultimate-guide-apt-and-apt-get-commands
    – qwr
    Commented Jul 10, 2023 at 2:57
  • @qwr i have checked the answer after you mentioned that this is linux mint only. Yes you are right. It is not even in debian 12, apt 2.6.1. I have updated the answer. Please check. Commented Jul 10, 2023 at 4:10
2

One reason you might have to do this is if you are compiling software which there already is an ubuntu package, you can run apt-get build-dep $PACKAGENAME. That will install all packages you need to compile $PACKAGENAME.

1

Why:

Different distro has its own way, too many commands to remember o(╥﹏╥)o

How:

A universal solution: pacapt -Qo file_path

Outcome:

On ubuntu:

$ pacapt -Qo /usr/bin/iostat
sysstat: /usr/bin/iostat

On centos:

$ pacapt -Qo /usr/bin/iostat
sysstat-10.1.5-19.el7.x86_64

Even can find path itself:

$ pacapt -Qo iostat
sysstat: /usr/share/man/man1/iostat.1.gz
sysstat: /usr/bin/cifsiostat
sysstat: /usr/bin/iostat
sysstat: /usr/share/man/man1/cifsiostat.1.gz

What is pacapt:

pacapt is a wrapper for many package managers

Install:

Simply download the portable script:

wget -O $HOME/bin/pacapt https://github.com/icy/pacapt/raw/ng/pacapt

2
  • 1
    What's "pacapt"? How does one get that?
    – pomsky
    Commented Oct 14, 2020 at 11:40
  • @pomsky I have updated pacapt information. And you can get pacapt by wget as descripted in the answer.
    – Qinsi
    Commented Oct 16, 2020 at 1:45
1

I usually use dpkg -S but it only works when it's pointing at the canonical file.

DPKG can't find the file I'm looking for:

$ dpkg -S /lib/x86_64-linux-gnu/libicuuc.so.70
dpkg-query: no path found matching pattern /lib/x86_64-linux-gnu/libicuuc.so.70

Some path of the path is a symbolic link. If you don't want to inspect each parts one by one, use realpath

$ realpath /lib/x86_64-linux-gnu/libicuuc.so.70
/usr/lib/x86_64-linux-gnu/libicuuc.so.70.1

DPKG works with the real path (canonical) of the file:

$ dpkg -S /usr/lib/x86_64-linux-gnu/libicuuc.so.70.1
libicu70:amd64: /usr/lib/x86_64-linux-gnu/libicuuc.so.70.1

Or, all at once:

$ dpkg -S $(realpath /lib/x86_64-linux-gnu/libicuuc.so.70)
libicu70:amd64: /usr/lib/x86_64-linux-gnu/libicuuc.so.70.1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .