macOS
Homebrew確認済み · 100%
brew install knot-resolverlocal Homebrew formula metadata
MacPorts確認済み · 94%
sudo port install knot-resolverMacPorts ports tree · net/knot-resolver/Portfile · ソース: api.github.com
brew
knot-resolver を Homebrew, apk, apt, dnf, MacPorts, pacman でインストール
knot-resolver のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
インストール
追加のインストールコマンド
Linux
Alpine Linux apk確認済み · 92%
sudo apk add knot-resolverAlpine Linux edge package indexes · knot-resolver · ソース: dl-cdn.alpinelinux.org
Debian apt確認済み · 92%
sudo apt install knot-resolverDebian stable package indexes · knot-resolver · ソース: deb.debian.org
Fedora dnf確認済み · 92%
sudo dnf install knot-resolverFedora Rawhide package metadata · knot-resolver · ソース: dl.fedoraproject.org
Arch Linux pacman確認済み · 92%
sudo pacman -S knot-resolverArch Linux sync databases · knot-resolver · ソース: geo.mirror.pkgbuild.com
概要
パッケージ概要
Minimalistic, caching, DNSSEC-validating DNS resolver
プロジェクトリンク
コマンドとエイリアス
- knot-resolver
- kres-cache-gc
- kresctl
- kresd
履歴
プロジェクトの歴史と使われ方
Knot Resolver is CZ.NIC's caching, DNSSEC-validating recursive resolver, built as the resolver-side member of the Knot DNS family. Its package-manager identity matters because it is both a server daemon and a scriptable DNS platform: the Homebrew formula installs command-line tools such as kresd, kresctl, and cache maintenance utilities, while Unix packages place it beside other serious recursive resolvers.
プロジェクトの歴史
The project reached its first public 1.0.0 release on 2016-05-30. Its early design combined a small C core with Lua/LuaJIT scripting and optional modules, a contrast with larger monolithic resolver codebases. The 1.1.0 release on 2016-08-12 already added features that became important to modern recursive DNS operations, including DNS Cookies, DNS over TLS, Prometheus metrics, query minimisation improvements, and a DNS firewall module.
Knot Resolver later split from the older ReadTheDocs-hosted documentation flow into CZ.NIC-controlled GitLab Pages documentation for the 6.x series, while keeping a stable public website and development repository under the CZ.NIC GitLab. The project remained tightly related to Knot DNS but serves the opposite side of DNS: recursive/caching resolution rather than authoritative zone service.
採用の歴史
CZ.NIC presents Knot Resolver as scalable from home routers to large resolver farms. The project website records operational adoption beyond CZ.NIC, including CETIN using it in infrastructure since 2017 and Cloudflare describing it as a cornerstone of the 1.1.1.1 public resolver service.
Its adoption story is package-nerd relevant because recursive resolver software is often chosen conservatively. A resolver that appears in Homebrew, Debian, Fedora, Arch, Alpine, MacPorts, and Ubuntu packaging occupies a practical testing and operations lane next to Unbound, BIND, PowerDNS Recursor, and systemd-resolved.
使われ方
Users install Knot Resolver to run local, organizational, ISP, or public recursive DNS service with DNSSEC validation and caching. Its module system is central to usage: policy rules, forwarding, DNS-over-TLS, DNS-over-HTTPS, metrics, cache behavior, and filtering can be adjusted without treating the daemon as a black box.
The package also exposes companion tools for control and maintenance, so it is not just a background daemon formula. In package sets, that makes it useful to DNS operators who want reproducible installs on laptops, CI images, lab hosts, and production-like Unix systems.
パッケージ好きにとっての重要性
Knot Resolver is interesting to package maintainers because it combines a network daemon, a scripting/runtime layer, DNSSEC crypto dependencies, system service integration, and changing configuration formats. Those are the things that expose weak packaging: wrong paths, missing service users, broken Lua module paths, or mismatched library versions show up quickly.
It also represents the post-2010 shift in DNS software toward encrypted transports, observability, and programmable policy. For users browsing package indexes, it is the recursive counterpart to Knot DNS and one of the few widely packaged alternatives that is both modern and registry-backed.
タイムライン
- 2016-05-30: Knot Resolver 1.0.0 initial release.
- 2016-08-12: Knot Resolver 1.1.0 added DNS Cookies, DNS over TLS, Prometheus metrics, and query-minimisation improvements.
- 2017: CETIN adoption is described by CZ.NIC's project site as part of its infrastructure history.
- 2024-2025: The 5.7.x release series included KeyTrap-related DNSSEC hardening and maintenance updates.
- 2026-06-16: CZ.NIC announced Knot Resolver 6.4.0 on the project website.
Related projects
- Knot DNS is the authoritative DNS server in the same CZ.NIC family. Knot Resolver commonly appears in comparisons with Unbound, BIND, PowerDNS Recursor, and systemd-resolved because all can occupy recursive DNS roles, though their architecture and operational tradeoffs differ.
ソース
セキュリティ状態
リスクレベル: orange
formula declares a Homebrew service.
リスク分類器
リスク orange · 信頼度 中 · infrastructure
理由
- formula declares a Homebrew service
信号
- metadata:service
インストール挙動
- formula メタデータに Homebrew post-install フックは記録されていません。
- formula メタデータがサービスまたはデーモンブロックを宣言しています。
- Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
- 10 件の実行時依存関係とともにインストールされます。
- ビルドメタデータには 3 件のビルド依存関係があります。
推奨レビュー
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/etc/knot-resolver/config.yaml
実行可能ファイル
インストールされる実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
knot-resolver | cli | グローバル実行可能ファイル | |
kres-cache-gc | cli | グローバル実行可能ファイル | |
kresctl | cli | グローバル実行可能ファイル | |
kresd | cli | グローバル実行可能ファイル |
鮮度
バージョンと鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
ページ生成日2026-07-10
マネージャ版6.4.0
マネージャ更新日2026-07-04
ローカルデータOK
上流not checked
検出された最新未検出
- 情報Release/tag comparison is only available for GitHub repositories.https://www.knot-resolver.cz信頼度 none
インストールメタデータ
パッケージメタデータ
| パッケージキー | brew:knot-resolver |
|---|---|
| バージョン | 6.4.0 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/knot-resolver |
| ホームページ | https://www.knot-resolver.cz |
| リポジトリ | https://gitlab.nic.cz/knot/knot-resolver.git |
| 上流ドキュメント | https://www.knot-resolver.cz/documentation |
| ライセンス | CC0-1.0 AND GPL-3.0-or-later AND LGPL-2.1-or-later AND MIT |
| ソースアーカイブ | https://knot-resolver.nic.cz/release/knot-resolver-6.4.0.tar.xz |
| 最終更新 | 2026-07-04T13:13:40+09:00 |
| Pulse | updated |
| 依存関係 | fstrm, gnutls, knot, libnghttp2, libuv, libyaml, lmdb, luajit, protobuf-c, python@3.14 |
| ビルド依存関係 | meson, ninja, pkgconf |
| macOS 提供ライブラリ | libedit |
| Bottle | 利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | declared |
レジストリ情報
ソースデータベース詳細
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | knot-resolver |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
他のパッケージマネージャ記録
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
Debian apt95%
knot-resolver 5.7.5-1
caching, DNSSEC-validating DNS resolver
sudo apt install knot-resolver- Section: net
- Architecture: amd64
- 22 依存関係
- 3 任意依存関係
- normalized package name match
- 一致条件: Knot Resolver
Debian apt95%
knot-resolver-doc 5.7.5-1
Documentation for Knot Resolver
sudo apt install knot-resolver-doc- Section: doc
- Architecture: all
- Source Package: knot-resolver
- 2 依存関係
- normalized package name match
- 一致条件: Knot Resolver
Debian apt95%
knot-resolver-module-http 5.7.5-1
HTTP module for Knot Resolver
sudo apt install knot-resolver-module-http- Section: net
- Architecture: amd64
- Source Package: knot-resolver
- 6 依存関係
- normalized package name match
- 一致条件: Knot Resolver
Ubuntu apt95%
knot-resolver 5.7.2-1
caching, DNSSEC-validating DNS resolver
sudo apt install knot-resolver- Section: universe/net
- Architecture: amd64
- 23 依存関係
- 3 任意依存関係
- normalized package name match
- 一致条件: Knot Resolver
Ubuntu apt95%
knot-resolver-doc 5.7.2-1
Documentation for Knot Resolver
sudo apt install knot-resolver-doc- Section: universe/doc
- Architecture: all
- Source Package: knot-resolver
- 2 依存関係
- normalized package name match
- 一致条件: Knot Resolver
Ubuntu apt95%
knot-resolver-module-http 5.7.2-1
HTTP module for Knot Resolver
sudo apt install knot-resolver-module-http- Section: universe/net
- Architecture: amd64
- Source Package: knot-resolver
- 6 依存関係
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver 5.7.6-r0
Minimalistic caching DNS resolver implementation
sudo apk add knot-resolver- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- 1 提供
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-dbg 5.7.6-r0
Minimalistic caching DNS resolver implementation (debug symbols)
sudo apk add knot-resolver-dbg- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-dev 5.7.6-r0
Minimalistic caching DNS resolver implementation (development files)
sudo apk add knot-resolver-dev- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- 1 提供
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-doc 5.7.6-r0
Minimalistic caching DNS resolver implementation (documentation)
sudo apk add knot-resolver-doc- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-libs-static 5.7.6-r0
Minimalistic caching DNS resolver implementation (static library)
sudo apk add knot-resolver-libs-static- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-mod-dnstap 5.7.6-r0
Knot Resolver - dnstap logging
sudo apk add knot-resolver-mod-dnstap- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-mod-http 5.7.6-r0
Knot Resolver - HTTP/2 services
sudo apk add knot-resolver-mod-http- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- normalized package name match
- 一致条件: Knot Resolver
apk95%
knot-resolver-openrc 5.7.6-r0
Minimalistic caching DNS resolver implementation (OpenRC init scripts)
sudo apk add knot-resolver-openrc- License: GPL-3.0-or-later
- Architecture: x86_64
- Source Package: knot-resolver
- 1 依存関係
- normalized package name match
- 一致条件: Knot Resolver
dnf95%
knot-resolver 5.7.6-3.fc44
Caching full DNS Resolver
sudo dnf install knot-resolver- License: GPL-3.0-or-later
- Category: Unspecified
- Architecture: i686
- Source Package: knot-resolver
- 24 依存関係
- 5 提供
- normalized package name match
- 一致条件: Knot Resolver
dnf95%
knot-resolver-devel 5.7.6-3.fc44
Development headers for Knot Resolver
sudo dnf install knot-resolver-devel- License: GPL-3.0-or-later
- Category: Unspecified
- Architecture: i686
- Source Package: knot-resolver
- 4 依存関係
- 2 提供
- normalized package name match
- 一致条件: Knot Resolver
ソース経路
リポジトリデータから生成
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
Combined YAML source
View the package source record on GitHub.
使用ソース
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment