# Use yum: module but exclude a certain package

**URL:** <https://forum.ansible.com/t/use-yum-module-but-exclude-a-certain-package/45139>\
**Category:** Get Help\
**Tags:** yum\
**Created:** [January 20, 2026, 6:37pm UTC](https://forum.ansible.com/t/use-yum-module-but-exclude-a-certain-package/45139 "2026-01-20T18:37:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![merrittr](https://avatars.discourse-cdn.com/v4/letter/m/e480ec/32.png) [@merrittr](https://forum.ansible.com/u/merrittr)\
**Post date:** [January 20, 2026, 6:37pm UTC](https://forum.ansible.com/t/use-yum-module-but-exclude-a-certain-package/45139/1 "2026-01-20T18:37:12Z")

</div>

I have code like:

# This task will upgrade/install the rpm.s if application is stopped

```
- name: Continue if application is not running
  block:
    - name: upgrade all packages on the server
      yum:
        name: "*"
        state: latest
        disablerepo: "*"
        enablerepo: "rhui*"

```

but I want exclude  
389-ds-\* packages

will this below work?

# This task will upgrade/install the rpm.s if application is stopped

```
- name: Continue if application is not running
  block:
    - name: upgrade all packages on the server
      yum:
        name: "*"
        exclude:
          - 389-ds*
        state: latest
        disablerepo: "*"
        enablerepo: "rhui*"

```

---

<div class="post-metadata">

**Author:** ![BoerBart](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/boerbart/32/10083_2.png) [@BoerBart](https://forum.ansible.com/u/BoerBart)\
**Post date:** [January 21, 2026, 12:46pm UTC](https://forum.ansible.com/t/use-yum-module-but-exclude-a-certain-package/45139/2 "2026-01-21T12:46:58Z")

</div>

> - name: Continue if application is not running  
> block:  
> - name: upgrade all packages on the server  
> yum:  
> name: "_"  
> exclude:  
> - 389-ds_  
> state: latest  
> disablerepo: “_"  
> enablerepo: "rhui_”

That would work, though might be with a minor tweak. [The yum module documentation](https://docs.ansible.com/projects/ansible-core/2.16/collections/ansible/builtin/yum_module.html) displays the following:

```auto
exclude: kernel*,foo*

```

So, in your case, I’d apply it as following:

```auto
 - name: Continue if application is not running
  block:
    - name: upgrade all packages on the server
      yum:
        name: "*"
        exclude: 389-ds*
        state: latest
        disablerepo: "*"
        enablerepo: "rhui*"

```

As a sidenote, the Ansible documentation always advices to use the [Fully Qualified Collection Name (FQCN)](https://docs.ansible.com/projects/ansible-core/2.16/reference_appendices/glossary.html#term-Fully-Qualified-Collection-Name-FQCN) of modules.