Automic VaultAutomic Vault

brew

Installer stubby avec Homebrew, apk, apt, dnf, MacPorts, Nix, pacman

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de stubby pour les workflows d'agents IA.

Commande d'installationNotes de sécurité

installation

Commandes d'installation supplémentaires

macOS

Homebrewvérifié · 100%
brew install stubby

local Homebrew formula metadata

MacPortsvérifié · 94%
sudo port install stubby

MacPorts ports tree · net/stubby/Portfile · Source: api.github.com

Linux

Alpine Linux apkvérifié · 92%
sudo apk add stubby

Alpine Linux edge package indexes · stubby · Source: dl-cdn.alpinelinux.org

Debian aptvérifié · 92%
sudo apt install stubby

Debian stable package indexes · stubby · Source: deb.debian.org

Fedora dnfvérifié · 92%
sudo dnf install stubby

Fedora Rawhide package metadata · stubby · Source: dl.fedoraproject.org

Nixvérifié · 92%
nix profile install nixpkgs#stubby

nixpkgs package indexes · pkgs/by-name/st/stubby/package.nix · Source: api.github.com

Arch Linux pacmanvérifié · 92%
sudo pacman -S stubby

Arch Linux sync databases · stubby · Source: geo.mirror.pkgbuild.com

aperçu

Résumé du paquet

DNS privacy enabled stub resolver service based on getdns

Commandes et alias

  • stubby
  • stubby-setdns-macos.sh

historique

Historique du projet et usages

Stubby is a local DNS Privacy stub resolver that sends client DNS queries over DNS-over-TLS. In package-manager terms it is the small daemon people install when they want encrypted first-hop DNS without running a full recursive resolver.

Historique du projet

Stubby was developed by the getdns project and documented by the DNS Privacy Project as a daemon for encrypted DNS stub resolution. The official Stubby documentation says that as of August 2017 Stubby moved into its own repository while getdns became the library dependency.

The project grew out of DNS privacy work around DNS-over-TLS, standardized as RFC 7858. NLnet describes Stubby as an open source project intended to put DNS-over-TLS protection on client devices.

Historique d'adoption

The input package facts list Stubby across Homebrew, Debian, Ubuntu, Fedora/DNF, Alpine, Arch, MacPorts, and Nix, which reflects its adoption as a normal operating-system package rather than only a source build.

Its common packaging shape is a daemon plus a YAML configuration file, making it fit the Unix service model used by Linux distributions and Homebrew services.

Modes d'utilisation

Stubby listens on loopback addresses, accepts local DNS queries, and forwards them to DNS Privacy resolvers over TLS. The official docs describe strict and opportunistic privacy profiles, upstream resolver configuration, EDNS0 padding, and round-robin upstream behavior.

Users typically install it beside system DNS configuration, point local DNS at Stubby, and edit stubby.yml to choose upstream resolvers and privacy mode.

Pourquoi les passionnés de paquets s'y intéressent

Stubby matters to package nerds because it is a compact example of post-Snowden privacy infrastructure becoming a packaged background service. It turns a protocol feature, DNS-over-TLS, into something a user can install, configure, and supervise with the same tools used for other Unix daemons.

It is also useful as a comparison point with Unbound, dnscrypt-proxy, and system resolver integrations: each solves private DNS with a different packaging, service, and configuration tradeoff.

Chronologie

  • 2017: Stubby moved to its own GitHub repository while using getdns as a library dependency.
  • 2022: DNS Privacy Project documentation noted the decommissioning of older dnsovertls*.sinodun.com test nameservers.
  • 2026: Input package facts list Stubby in multiple Unix-like package managers, including Homebrew, Debian, Ubuntu, Fedora, Alpine, Arch, MacPorts, and Nix.

Related projects

  • getdns provides the library functionality used by Stubby.
  • Unbound and DNSCrypt are discussed in the Stubby FAQ as related approaches to encrypted or privacy-preserving DNS.

posture de sécurité

Niveau de risque : orange

formula declares a Homebrew service.

Classificateur de risque

risque orange · confiance moyen · infrastructure

Pourquoi

  • formula declares a Homebrew service

Signaux

  • metadata:service

Comportement d'installation

  • Aucun hook post-install Homebrew n’est enregistré dans les métadonnées de formule.
  • Les métadonnées de formule déclarent un service ou daemon.
  • Les métadonnées de bottle Homebrew sont disponibles pour 12 plateformes.
  • S’installe avec 5 dépendances d’exécution.
  • Les métadonnées de compilation listent 2 dépendances de compilation.

Revue recommandée

Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/usr/local/etc/stubby/stubby.yml

exécutables

Exécutables installés

CommandeTypeExpositionNote
stubbycliexécutable global
stubby-setdns-macos.shcliexécutable global

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-07-10
version du gestionnaire0.4.3
gestionnaire mis à jour
données localesOK
amontà jour
dernière version détectéev0.4.3

https://github.com/getdnsapi/stubby

  • infoNo package-manager update timestamp was available.confiance faible

métadonnées d'installation

Métadonnées du paquet

Clé du paquetbrew:stubby
Version0.4.3
Gestionnaire de paquetsHomebrew
Page du gestionnaire de paquetshttps://formulae.brew.sh/formula/stubby
Page d'accueilhttps://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby
Dépôthttps://github.com/getdnsapi/stubby
Docs amonthttps://dnsprivacy.org/dns_privacy_daemon_-_stubby
LicenceBSD-3-Clause
Archive sourcehttps://github.com/getdnsapi/stubby/archive/refs/tags/v0.4.3.tar.gz
Dépendancesgetdns, libidn2, libyaml, openssl@3, unbound
Dépendances de compilationcmake, libtool
Bouteilledisponible (sur arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura, x86_64_linux)
post-install Homebrewnon défini
Servicedeclared

faits du registre

Détails de la base source

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namestubby
Version Scheme0
Revision1
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

correspondances dans les bases sources

Autres enregistrements de gestionnaires de paquets

Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.

Debian apt95%

stubby 1.6.0-3.2

modern asynchronous DNS API (stub resolver)

https://getdnsapi.net/

sudo apt install stubby
  • Section: net
  • Architecture: amd64
  • Source Package: getdns
  • 6 Dépendances
  • normalized package name match
  • Correspondance par : Stubby
Debian stable package indexes · deb.debian.org · Debian stable package indexes: stubby from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

stubby

nix profile install nixpkgs#stubby
  • normalized package name match
  • Correspondance par : Stubby
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/st/stubby/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

stubby 1.6.0-3.1build3

modern asynchronous DNS API (stub resolver)

https://getdnsapi.net/

sudo apt install stubby
  • Section: universe/net
  • Architecture: amd64
  • Source Package: getdns
  • 5 Dépendances
  • normalized package name match
  • Correspondance par : Stubby
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: stubby from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

stubby 0.4.3-r2

DNS Privacy stub resolver

https://dnsprivacy.org/dns_privacy_daemon_-_stubby/

sudo apk add stubby
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: stubby
  • 1 Dépendances
  • 1 fournit
  • normalized package name match
  • Correspondance par : Stubby
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: stubby from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

stubby-doc 0.4.3-r2

DNS Privacy stub resolver (documentation)

https://dnsprivacy.org/dns_privacy_daemon_-_stubby/

sudo apk add stubby-doc
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: stubby
  • normalized package name match
  • Correspondance par : Stubby
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: stubby-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

stubby-openrc 0.4.3-r2

DNS Privacy stub resolver (OpenRC init scripts)

https://dnsprivacy.org/dns_privacy_daemon_-_stubby/

sudo apk add stubby-openrc
  • License: BSD-3-Clause
  • Architecture: x86_64
  • Source Package: stubby
  • normalized package name match
  • Correspondance par : Stubby
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: stubby-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

stubby 0.4.3-8.fc44

Application that act as a local DNS Privacy stub resolver

https://github.com/getdnsapi/stubby

sudo dnf install stubby
  • License: BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: stubby
  • 6 Dépendances
  • 3 fournit
  • normalized package name match
  • Correspondance par : Stubby
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: stubby from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
MacPorts95%

stubby

sudo port install stubby
  • normalized package name match
  • Correspondance par : Stubby
MacPorts ports tree · api.github.com · MacPorts ports tree: net/stubby/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

graphe de paquets

Les liens viennent du graphe local de relations entre paquets, des suppléments, des dépendances, des correspondances d'écosystèmes et de l'appartenance aux hubs.

Outils liés

  • getdnsRuntime dependency declared by Homebrew.
  • libidn2Runtime dependency declared by Homebrew.
  • openssl@3Runtime dependency declared by Homebrew.
  • unboundRuntime dependency declared by Homebrew.
  • cmakeBuild dependency declared by Homebrew.
  • libtoolBuild dependency declared by Homebrew.

Même workflow

  • dnscrypt-proxyShares av.db curated category or tags: cli, dns, networking, privacy.
  • dnscrypt-wrapperShares av.db curated category or tags: cli, dns, networking, privacy.
  • dogeShares av.db curated category or tags: cli, dns, dns-over-tls, networking.
  • sdnsShares av.db curated category or tags: cli, dns, networking, privacy.
  • technitium-dnsShares av.db curated category or tags: cli, dns, networking, privacy.
  • adnsShares av.db curated category or tags: cli, dns, networking.

piste source

Généré depuis les données du dépôt

Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.

Sources utilisées

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment