Automic VaultAutomic Vault

brew

knot を Homebrew, apk, apt, dnf, MacPorts, pacman, zypper でインストール

knot のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install knot

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install knot

MacPorts ports tree · net/knot/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add knot

Alpine Linux edge package indexes · knot · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install knot

Debian stable package indexes · knot · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install knot

Fedora Rawhide package metadata · knot · ソース: dl.fedoraproject.org

Arch Linux pacman確認済み · 92%
sudo pacman -S knot

Arch Linux sync databases · knot · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install knot

openSUSE Tumbleweed package metadata · knot · ソース: download.opensuse.org

概要

パッケージ概要

High-performance authoritative-only DNS server

コマンドとエイリアス

  • kcatalogprint
  • kdig
  • keymgr
  • khost
  • kjournalprint
  • knotc
  • knotd
  • knsec3hash
  • knsupdate
  • kzonecheck
  • kzonesign

履歴

プロジェクトの歴史と使われ方

Knot DNS is CZ.NIC's high-performance authoritative-only DNS server. In package-manager culture it is the serious authoritative sibling to recursive resolver packages: installing `knot` brings the daemon, control tool, zone utilities, DNSSEC key tooling, and DNS query tools used by operators.

プロジェクトの歴史

CZ.NIC developed Knot DNS for authoritative DNS service, especially the demanding needs of registry and large-zone operators. The project site describes it as open source, GPL 3+ licensed, and targeted at Linux, BSD, macOS, and other POSIX systems.

The 2.0.0 release on 2015-06-26 marked a major packaging and operations milestone: DNSSEC was split into a separate library, basic KASP support was introduced, configuration moved to a new YAML text format backed by LMDB storage, and documentation included HTML and PDF manual pages. The 3.0.0 release on 2020-09-09 added XDP-based high-performance networking, catalog zones, a kzonesign utility, DoH support in kdig, and other DNSSEC and operations improvements.

採用の歴史

Knot DNS is associated with CZ.NIC, the .CZ registry, and was promoted early as a high-performance authoritative DNS server for TLD and DNS-hosting scenarios. Internet Society deployment material from 2013 described it as used by CZ.NIC for the .CZ TLD and aimed at network and DNS operators.

Its spread through Homebrew, Debian, Fedora, Arch, Alpine, MacPorts, Ubuntu, and openSUSE matters because authoritative DNS operators often need the same tooling on workstations and servers. Package availability lowers the friction for testing zone signing, transfers, dynamic updates, and `kdig` diagnostics outside production.

使われ方

Knot DNS is used to serve authoritative zones, including DNSSEC-signed zones, with zone transfers, dynamic updates, response rate limiting, automatic signing, and rapid reconfiguration. The Homebrew package exposes both server components such as knotd and operational utilities such as knotc, keymgr, kzonecheck, kzonesign, kdig, khost, and knsupdate.

A common package-level pattern is using Knot DNS tools even when the daemon is not the only DNS server in an environment. Utilities such as kdig and keymgr make the formula useful to DNS practitioners who need modern protocol testing or DNSSEC maintenance commands on macOS and Unix workstations.

パッケージ好きにとっての重要性

Knot DNS is packaging-heavy software in the good sense: it has a daemon, config files, zone storage, LMDB-backed state, DNSSEC key material, optional modules, and command-line tooling. Correct packages have to get paths, service integration, crypto libraries, and permissions right.

For package nerds, it is also one of the names that marks the DNS ecosystem beyond BIND. Seeing Knot DNS in a package index signals that a repository can support production-grade authoritative DNS alternatives, not only client lookup utilities.

タイムライン

  • 2013: Internet Society deployment material described Knot DNS as used by CZ.NIC for the .CZ TLD.
  • 2015-06-26: Knot DNS 2.0.0 introduced YAML configuration, LMDB-backed configuration storage, and basic KASP support.
  • 2017-06-05: Knot DNS 2.5.0 moved KASP data from JSON files to LMDB and expanded dynamic module support.
  • 2020-09-09: Knot DNS 3.0.0 added XDP networking, catalog zones, kzonesign, and DoH support in kdig.
  • 2026-06-12: CZ.NIC announced Knot DNS 3.5.5 on the project website.

Related projects

  • Knot Resolver is the recursive/caching project in the Knot family. Operationally related alternatives include BIND, NSD, PowerDNS Authoritative Server, YADIFA, and DNS utility packages that provide dig-like clients.

セキュリティ状態

リスクレベル: orange

broad file, network, media, or database tool signal. formula declares a Homebrew service.

リスク分類器

リスク orange · 信頼度 中 · infrastructure

理由

  • broad file, network, media, or database tool signal
  • formula declares a Homebrew service

信号

  • metadata:service
  • text:server

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • formula メタデータがサービスまたはデーモンブロックを宣言しています。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 7 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 2 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
@config_dir@/knot.conf

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
kcatalogprintcliグローバル実行可能ファイル
kdigcliグローバル実行可能ファイル
keymgrcliグローバル実行可能ファイル
khostcliグローバル実行可能ファイル
kjournalprintcliグローバル実行可能ファイル
knotccliグローバル実行可能ファイル
knotdcliグローバル実行可能ファイル
knsec3hashcliグローバル実行可能ファイル
knsupdatecliグローバル実行可能ファイル
kzonecheckcliグローバル実行可能ファイル
kzonesigncliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-10
マネージャ版3.5.5
マネージャ更新日2026-06-12
ローカルデータOK
上流not checked
検出された最新未検出

https://www.knot-dns.cz/

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:knot
バージョン3.5.5
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/knot
ホームページhttps://www.knot-dns.cz/
リポジトリhttps://gitlab.nic.cz/knot/knot-dns.git
上流ドキュメントhttps://www.knot-dns.cz/documentation
ライセンスGPL-3.0-or-later AND 0BSD AND BSD-3-Clause AND LGPL-2.0-or-later AND MIT
ソースアーカイブhttps://knot-dns.nic.cz/release/knot-3.5.5.tar.xz
最終更新2026-06-12T13:17:18Z
Pulseupdated
依存関係fstrm, gnutls, libidn2, libnghttp2, lmdb, protobuf-c, userspace-rcu
ビルド依存関係pkgconf, sphinx-doc
macOS 提供ライブラリlibedit
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービスdeclared

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameknot
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

knot 3.4.6-2

Authoritative domain name server

https://www.knot-dns.cz/

sudo apt install knot
  • Section: net
  • Architecture: amd64
  • 11 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-dnssecutils 3.4.6-2

DNSSEC tools provided with Knot DNS (kzonecheck, kzonesign, knsec3hash)

https://www.knot-dns.cz/

sudo apt install knot-dnssecutils
  • Section: net
  • Architecture: amd64
  • Source Package: knot
  • 7 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-dnssecutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-dnsutils 3.4.6-2

Clients provided with Knot DNS (kdig, knsupdate, kxdpgun)

https://www.knot-dns.cz/

sudo apt install knot-dnsutils
  • Section: net
  • Architecture: amd64
  • Source Package: knot
  • 13 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-dnsutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-doc 3.4.6-2

Documentation for Knot DNS

https://www.knot-dns.cz/

sudo apt install knot-doc
  • Section: doc
  • Architecture: all
  • Source Package: knot
  • 3 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-exporter 3.4.6-2

Prometheus exporter for Knot DNS

https://www.knot-dns.cz/

sudo apt install knot-exporter
  • Section: python
  • Architecture: all
  • Source Package: knot
  • 4 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-exporter from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-host 3.4.6-2

Version of 'host' bundled with Knot DNS

https://www.knot-dns.cz/

sudo apt install knot-host
  • Section: net
  • Architecture: amd64
  • Source Package: knot
  • 11 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-host from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-module-dnstap 3.4.6-2

dnstap module for Knot DNS

https://www.knot-dns.cz/

sudo apt install knot-module-dnstap
  • Section: net
  • Architecture: amd64
  • Source Package: knot
  • 4 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-module-dnstap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

knot-module-geoip 3.4.6-2

geoip module for Knot DNS

https://www.knot-dns.cz/

sudo apt install knot-module-geoip
  • Section: net
  • Architecture: amd64
  • Source Package: knot
  • 3 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: knot-module-geoip from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libdnssec9t64 3.4.6-2

DNSSEC shared library from Knot DNS

https://www.knot-dns.cz/

sudo apt install libdnssec9t64
  • Section: libs
  • Architecture: amd64
  • Source Package: knot
  • 2 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libdnssec9t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libknot-dev 3.4.6-2

Knot DNS shared library development files

https://www.knot-dns.cz/

sudo apt install libknot-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: knot
  • 4 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libknot-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libknot15 3.4.6-2

Authoritative domain name server (shared library)

https://www.knot-dns.cz/

sudo apt install libknot15
  • Section: libs
  • Architecture: amd64
  • Source Package: knot
  • 8 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libknot15 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libzscanner4t64 3.4.6-2

DNS zone-parsing shared library from Knot DNS

https://www.knot-dns.cz/

sudo apt install libzscanner4t64
  • Section: libs
  • Architecture: amd64
  • Source Package: knot
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libzscanner4t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

python3-libknot 3.4.6-2

Python bindings for libknot

https://www.knot-dns.cz/

sudo apt install python3-libknot
  • Section: python
  • Architecture: all
  • Source Package: knot
  • 2 依存関係
  • normalized package name match
  • 一致条件: Knot
Debian stable package indexes · deb.debian.org · Debian stable package indexes: python3-libknot from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt95%

knot 3.3.4-1.1build2

Authoritative domain name server

https://www.knot-dns.cz/

sudo apt install knot
  • Section: universe/net
  • Architecture: amd64
  • 11 依存関係
  • 1 任意依存関係
  • normalized package name match
  • 一致条件: Knot
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: knot from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

knot-dnssecutils 3.3.4-1.1build2

DNSSEC tools provided with Knot DNS (kzonecheck, kzonesign, knsec3hash)

https://www.knot-dns.cz/

sudo apt install knot-dnssecutils
  • Section: universe/net
  • Architecture: amd64
  • Source Package: knot
  • 7 依存関係
  • normalized package name match
  • 一致条件: Knot
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: knot-dnssecutils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

knot-dnsutils 3.3.4-1.1build2

Clients provided with Knot DNS (kdig, knsupdate, kxdpgun)

https://www.knot-dns.cz/

sudo apt install knot-dnsutils
  • Section: universe/net
  • Architecture: amd64
  • Source Package: knot
  • 11 依存関係
  • normalized package name match
  • 一致条件: Knot
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: knot-dnsutils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • fstrmRuntime dependency declared by Homebrew.
  • gnutlsRuntime dependency declared by Homebrew.
  • libidn2Runtime dependency declared by Homebrew.
  • lmdbRuntime dependency declared by Homebrew.
  • protobuf-cRuntime dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.
  • sphinx-docBuild dependency declared by Homebrew.
  • knot-resolverPopular package that depends on this formula.

同じワークフロー

  • nsdShares av.db curated category or tags: authoritative-dns, authoritative-server, cli, daemon, dns.
  • bindShares av.db curated category or tags: cli, dns, dnssec, networking.
  • ddclientShares av.db curated category or tags: cli, daemon, dns, networking.
  • ldnsShares av.db curated category or tags: cli, dns, dnssec, networking.
  • unboundShares av.db curated category or tags: cli, dns, dnssec, networking.
  • c-aresShares av.db curated category or tags: cli, dns, networking.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment