Automic VaultAutomic Vault

brew

Install bind with Homebrew, apk, dnf, Nix, pacman, scoop, zypper

Implementation of the DNS protocols. Version 9.20.24 via Homebrew; verified 2026-06-22.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install bind

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add bind

Alpine Linux edge package indexes · bind · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install bind

Fedora Rawhide package metadata · bind · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#bind

nixpkgs package indexes · pkgs/by-name/bi/bind/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S bind

Arch Linux sync databases · bind · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install bind

openSUSE Tumbleweed package metadata · bind · source: download.opensuse.org

Windows

Scoopverified · 92%
scoop install main/bind

Scoop official bucket manifest trees · bucket/bind.json · source: api.github.com

overview

Package summary

Implementation of the DNS protocols

Commands and aliases

  • arpaname
  • ddns-confgen
  • delv
  • dig
  • dnssec-cds
  • dnssec-dsfromkey
  • dnssec-importkey
  • dnssec-keyfromlabel
  • dnssec-keygen
  • dnssec-ksr
  • dnssec-revoke
  • dnssec-settime
  • dnssec-signzone
  • dnssec-verify
  • host
  • mdig
  • named
  • named-checkconf
  • named-checkzone
  • named-compilezone
  • named-journalprint
  • named-rrchecker
  • nsec3hash
  • nslookup
  • nsupdate
  • rndc
  • rndc-confgen
  • tsig-keygen

history

Project history and usage

BIND 9 is ISC's classic open-source DNS implementation: a name server, recursive resolver, DNSSEC platform, and suite of DNS administration tools including `named`, `dig`, `host`, `nslookup`, `rndc`, and DNSSEC utilities.

Project history

ISC's official BIND history says Berkeley Internet Name Domain began in the early 1980s at UC Berkeley as a DARPA-funded graduate-student project. After UC Berkeley, DEC and Paul Vixie carried major stewardship, and ISC was founded in 1994 specifically to provide a home for BIND development and maintenance.

Adoption history

BIND's adoption is bound to the adoption of DNS itself. ISC describes BIND 9 as the first, oldest, and most commonly deployed DNS solution, and says it is used for publishing the DNSSEC-signed root zone, top-level domains, hosting providers, enterprises, and large resolver farms. The input package facts show BIND packaged across major Unix and cross-platform package managers.

How it is used

Package users install BIND either for the `named` daemon or for the DNS toolbelt. On servers it acts as an authoritative name server, recursive resolver, forwarder, or split-horizon DNS service; on developer and operator workstations the package is often installed just to get `dig`, `host`, `nslookup`, `nsupdate`, and DNSSEC inspection/signing tools.

Why package nerds care

BIND is package-nerd bedrock: one package contains a daemon that helped define Internet infrastructure operations and a CLI toolkit that generations of sysadmins treat as diagnostic muscle memory. Its packaging also carries distro policy decisions about chrooting, service managers, default paths, crypto libraries, DNSSEC defaults, and whether users install the full server just to get `dig`.

Timeline

  • Early 1980s: BIND originally written at UC Berkeley under a DARPA grant.
  • 1994: ISC founded to provide a home for BIND development and maintenance.
  • 1997-05: First production-ready BIND 8 released.
  • 2000-09: BIND 9 released as a major rewrite of the architecture.
  • 2009: ISC begins BIND 10 rewrite effort.
  • 2014: ISC ends BIND 10 development and refocuses on BIND 9.
  • 2016: BIND 9.11.0 and later move to the MPL 2.0 license.
  • 2018-02: BIND project migrates to ISC's self-hosted GitLab.
  • 2019-2020: ISC replaces BIND's home-grown network interface layer with libuv.

Related projects

  • Related DNS software includes NSD, Unbound, Knot DNS, PowerDNS Authoritative Server, PowerDNS Recursor, dnsmasq, CoreDNS, and systemd-resolved; related BIND-era projects include the discontinued BIND 10/Bundy effort.

Sources

  • Official BIND 9 README from ISC GitLab.
  • Official ISC BIND page.
  • Official ISC History of BIND page.
  • Packaged executable and package-manager facts from source_facts.

security posture

Risk level: orange

formula declares a Homebrew service.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service

Signals

  • metadata:service

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Formula metadata declares a service or daemon block.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 8 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/named.conf/usr/local/etc/namedb/named.conf

executables

Installed executables

CommandKindExposureNote
arpanamecliglobal executable
ddns-confgencliglobal executable
delvcliglobal executable
digcliglobal executable
dnssec-cdscliglobal executable
dnssec-dsfromkeycliglobal executable
dnssec-importkeycliglobal executable
dnssec-keyfromlabelcliglobal executable
dnssec-keygencliglobal executable
dnssec-ksrcliglobal executable
dnssec-revokecliglobal executable
dnssec-settimecliglobal executable
dnssec-signzonecliglobal executable
dnssec-verifycliglobal executable
hostcliglobal executable
mdigcliglobal executable
namedcliglobal executable
named-checkconfcliglobal executable
named-checkzonecliglobal executable
named-compilezonecliglobal executable
named-journalprintcliglobal executable
named-rrcheckercliglobal executable
nsec3hashcliglobal executable
nslookupcliglobal executable
nsupdatecliglobal executable
rndccliglobal executable
rndc-confgencliglobal executable
tsig-keygencliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version9.20.24
manager updated2026-06-22
local dataok
upstreamnot checked
latest detectednot detected

https://www.isc.org/bind/

install metadata

Package metadata

Package keybrew:bind
Version9.20.24
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/bind
Homepagehttps://www.isc.org/bind/
Repositoryhttps://gitlab.isc.org/isc-projects/bind9
Upstream docshttps://bind9.readthedocs.io/
LicenseMPL-2.0
Source archivehttps://downloads.isc.org/isc/bind9/9.20.24/bind-9.20.24.tar.xz
Last updated2026-06-22T14:02:53-07:00
Pulseupdated
Dependenciesjemalloc, json-c, libidn2, libnghttp2, libuv, openssl@3, readline, userspace-rcu
Build dependenciespkgconf
Uses from macOSlibxml2
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicedeclared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebind
Version Scheme1
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

bind

nix profile install nixpkgs#bind
  • normalized package name match
  • Matched by: Bind
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bi/bind/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

bind 9.20.23-r0

The ISC DNS server

https://www.isc.org/bind/

sudo apk add bind
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-dbg 9.20.23-r0

The ISC DNS server (debug symbols)

https://www.isc.org/bind/

sudo apk add bind-dbg
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-dev 9.20.23-r0

The ISC DNS server (development files)

https://www.isc.org/bind/

sudo apk add bind-dev
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-dnssec-root 9.20.23-r0

ISC BIND DNSSEC Root Keys

https://www.isc.org/bind/

sudo apk add bind-dnssec-root
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-dnssec-root from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-dnssec-tools 9.20.23-r0

Utilities for DNSSEC keys and DNS zone files management

https://www.isc.org/bind/

sudo apk add bind-dnssec-tools
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-dnssec-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-doc 9.20.23-r0

The ISC DNS server (documentation)

https://www.isc.org/bind/

sudo apk add bind-doc
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-libs 9.20.23-r0

The ISC DNS server (libraries)

https://www.isc.org/bind/

sudo apk add bind-libs
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-libs from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-openrc 9.20.23-r0

The ISC DNS server (OpenRC init scripts)

https://www.isc.org/bind/

sudo apk add bind-openrc
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-plugins 9.20.23-r0

The ISC DNS server plugins

https://www.isc.org/bind/

sudo apk add bind-plugins
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

bind-tools 9.20.23-r0

The ISC DNS tools

https://www.isc.org/bind/

sudo apk add bind-tools
  • License: MPL-2.0
  • Architecture: x86_64
  • Source Package: bind
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bind
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bind-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
dnf95%

bind 9.18.49-1.fc45

The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

https://www.isc.org/downloads/bind/

sudo dnf install bind
  • License: MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bind
  • 29 dependencies
  • 4 provides
  • normalized package name match
  • Matched by: Bind
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bind from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

bind-chroot 9.18.49-1.fc45

A chroot runtime environment for the ISC BIND DNS server, named(8)

https://www.isc.org/downloads/bind/

sudo dnf install bind-chroot
  • License: MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bind
  • 6 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Bind
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bind-chroot from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

bind-devel 9.18.49-1.fc45

Header files and libraries needed for bind-dyndb-ldap

https://www.isc.org/downloads/bind/

sudo dnf install bind-devel
  • License: MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
  • Category: Unspecified
  • Architecture: i686
  • Source Package: bind
  • 10 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Bind
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bind-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

bind-dnssec-utils 9.18.49-1.fc45

DNSSEC keys and zones management utilities

https://www.isc.org/downloads/bind/

sudo dnf install bind-dnssec-utils
  • License: MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bind
  • 6 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bind
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bind-dnssec-utils from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

bind-doc 9.18.49-1.fc45

BIND 9 Administrator Reference Manual

https://www.isc.org/downloads/bind/

sudo dnf install bind-doc
  • License: MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
  • Category: Unspecified
  • Architecture: noarch
  • Source Package: bind
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bind
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bind-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • jemallocRuntime dependency declared by Homebrew.
  • libidn2Runtime dependency declared by Homebrew.
  • openssl@3Runtime dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.

Same workflow

  • knotShares av.db curated category or tags: cli, dns, dnssec, networking.
  • knot-resolverShares av.db curated category or tags: cli, dns, dnssec, networking.
  • ldnsShares av.db curated category or tags: cli, dns, dnssec, networking.
  • sdnsShares av.db curated category or tags: cli, dns, dnssec, networking, server.
  • unboundShares av.db curated category or tags: cli, dns, dnssec, networking.
  • c-aresShares av.db curated category or tags: cli, dns, networking.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment