# Install bind with Homebrew, apk, dnf, Nix, pacman, scoop, zypper Implementation of the DNS protocols. Version 9.20.24 via Homebrew; verified 2026-06-22. ## Install ```sh sudo av install brew:bind ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install bind ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add bind ``` Evidence: Alpine Linux edge package indexes: bind from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install bind ``` Evidence: Fedora Rawhide package metadata: bind from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#bind ``` Evidence: nixpkgs package indexes: pkgs/by-name/bi/bind/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S bind ``` Evidence: Arch Linux sync databases: bind from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install bind ``` Evidence: openSUSE Tumbleweed package metadata: bind from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/bind ``` Evidence: Scoop official bucket manifest trees: bucket/bind.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:bind - **Package manager:** Homebrew - **Package manager page:** - **Version:** 9.20.24 - **Source summary:** Implementation of the DNS protocols - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MPL-2.0 - **Source archive:** - **Last updated:** 2026-06-22T14:02:53-07:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - arpaname (cli) - ddns-confgen (cli) - delv (cli) - dig (cli) - dnssec-cds (cli) - dnssec-dsfromkey (cli) - dnssec-importkey (cli) - dnssec-keyfromlabel (cli) - dnssec-keygen (cli) - dnssec-ksr (cli) - dnssec-revoke (cli) - dnssec-settime (cli) - dnssec-signzone (cli) - dnssec-verify (cli) - host (cli) - mdig (cli) - named (cli) - named-checkconf (cli) - named-checkzone (cli) - named-compilezone (cli) - named-journalprint (cli) - named-rrchecker (cli) - nsec3hash (cli) - nslookup (cli) - nsupdate (cli) - rndc (cli) - rndc-confgen (cli) - tsig-keygen (cli) - arpaname (alias) - ddns-confgen (alias) - delv (alias) - dig (alias) - dnssec-cds (alias) - dnssec-dsfromkey (alias) - dnssec-importkey (alias) - dnssec-keyfromlabel (alias) - dnssec-keygen (alias) - dnssec-ksr (alias) - dnssec-revoke (alias) - dnssec-settime (alias) - dnssec-signzone (alias) - dnssec-verify (alias) - host (alias) - mdig (alias) - named (alias) - named-checkconf (alias) - named-checkzone (alias) - named-compilezone (alias) - named-journalprint (alias) - named-rrchecker (alias) - nsec3hash (alias) - nslookup (alias) - nsupdate (alias) - rndc (alias) - rndc-confgen (alias) - tsig-keygen (alias) ## Dependencies - jemalloc - json-c - libidn2 - libnghttp2 - libuv - openssl@3 - readline - userspace-rcu ## Build dependencies - pkgconf ## Uses from macOS - libxml2 ## Install behavior - Post-install hook: not defined - Service: declared - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 9.20.24 - Package-manager updated: 2026-06-22 - Local data: ok - Upstream repository: https://www.isc.org/bind/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage BIND 9 is ISC's classic open-source DNS implementation: a name server, recursive resolver, DNSSEC platform, and suite of DNS administration tools including `named`, `dig`, `host`, `nslookup`, `rndc`, and DNSSEC utilities. ### Project history ISC's official BIND history says Berkeley Internet Name Domain began in the early 1980s at UC Berkeley as a DARPA-funded graduate-student project. After UC Berkeley, DEC and Paul Vixie carried major stewardship, and ISC was founded in 1994 specifically to provide a home for BIND development and maintenance. ### Adoption history BIND's adoption is bound to the adoption of DNS itself. ISC describes BIND 9 as the first, oldest, and most commonly deployed DNS solution, and says it is used for publishing the DNSSEC-signed root zone, top-level domains, hosting providers, enterprises, and large resolver farms. The input package facts show BIND packaged across major Unix and cross-platform package managers. ### How it is used Package users install BIND either for the `named` daemon or for the DNS toolbelt. On servers it acts as an authoritative name server, recursive resolver, forwarder, or split-horizon DNS service; on developer and operator workstations the package is often installed just to get `dig`, `host`, `nslookup`, `nsupdate`, and DNSSEC inspection/signing tools. ### Why package nerds care BIND is package-nerd bedrock: one package contains a daemon that helped define Internet infrastructure operations and a CLI toolkit that generations of sysadmins treat as diagnostic muscle memory. Its packaging also carries distro policy decisions about chrooting, service managers, default paths, crypto libraries, DNSSEC defaults, and whether users install the full server just to get `dig`. ### Timeline - Early 1980s: BIND originally written at UC Berkeley under a DARPA grant. - 1994: ISC founded to provide a home for BIND development and maintenance. - 1997-05: First production-ready BIND 8 released. - 2000-09: BIND 9 released as a major rewrite of the architecture. - 2009: ISC begins BIND 10 rewrite effort. - 2014: ISC ends BIND 10 development and refocuses on BIND 9. - 2016: BIND 9.11.0 and later move to the MPL 2.0 license. - 2018-02: BIND project migrates to ISC's self-hosted GitLab. - 2019-2020: ISC replaces BIND's home-grown network interface layer with libuv. ### Related projects - Related DNS software includes NSD, Unbound, Knot DNS, PowerDNS Authoritative Server, PowerDNS Recursor, dnsmasq, CoreDNS, and systemd-resolved; related BIND-era projects include the discontinued BIND 10/Bundy effort. ### Sources - Official BIND 9 README from ISC GitLab. - Official ISC BIND page. - Official ISC History of BIND page. - Packaged executable and package-manager facts from source_facts. ## Security Notes formula declares a Homebrew service. - **Geiger risk:** orange / medium - formula declares a Homebrew service ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/named.conf, /usr/local/etc/namedb/named.conf ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** bind - **Version Scheme:** 1 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - bind: normalized package name match | nixpkgs package indexes: pkgs/by-name/bi/bind/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - bind - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server | https://www.isc.org/bind/ - apk - bind-dbg - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server (debug symbols) | https://www.isc.org/bind/ - apk - bind-dev - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server (development files) | https://www.isc.org/bind/ - apk - bind-dnssec-root - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-dnssec-root from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | ISC BIND DNSSEC Root Keys | https://www.isc.org/bind/ - apk - bind-dnssec-tools - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-dnssec-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Utilities for DNSSEC keys and DNS zone files management | https://www.isc.org/bind/ - apk - bind-doc - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server (documentation) | https://www.isc.org/bind/ - apk - bind-libs - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-libs from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server (libraries) | https://www.isc.org/bind/ - apk - bind-openrc - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server (OpenRC init scripts) | https://www.isc.org/bind/ - apk - bind-plugins - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS server plugins | https://www.isc.org/bind/ - apk - bind-tools - 9.20.23-r0: normalized package name match | Alpine Linux edge package indexes: bind-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | The ISC DNS tools | https://www.isc.org/bind/ - dnf - bind - 9.18.49-1.fc45: normalized package name match | Fedora Rawhide package metadata: bind from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server | https://www.isc.org/downloads/bind/ - dnf - bind-chroot - 9.18.49-1.fc45: normalized package name match | Fedora Rawhide package metadata: bind-chroot from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | A chroot runtime environment for the ISC BIND DNS server, named(8) | https://www.isc.org/downloads/bind/ - dnf - bind-devel - 9.18.49-1.fc45: normalized package name match | Fedora Rawhide package metadata: bind-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Header files and libraries needed for bind-dyndb-ldap | https://www.isc.org/downloads/bind/ - dnf - bind-dnssec-utils - 9.18.49-1.fc45: normalized package name match | Fedora Rawhide package metadata: bind-dnssec-utils from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | DNSSEC keys and zones management utilities | https://www.isc.org/downloads/bind/ - dnf - bind-doc - 9.18.49-1.fc45: normalized package name match | Fedora Rawhide package metadata: bind-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | BIND 9 Administrator Reference Manual | https://www.isc.org/downloads/bind/ ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [jemalloc](https://www.automicvault.com/pkg/brew/jemalloc/) - Runtime dependency declared by Homebrew. - [libidn2](https://www.automicvault.com/pkg/brew/libidn2/) - Runtime dependency declared by Homebrew. - [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [knot](https://www.automicvault.com/pkg/brew/knot/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [knot-resolver](https://www.automicvault.com/pkg/brew/knot-resolver/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [ldns](https://www.automicvault.com/pkg/brew/ldns/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [sdns](https://www.automicvault.com/pkg/brew/sdns/) - Shares av.db curated category or tags: cli, dns, dnssec, networking, server. - [unbound](https://www.automicvault.com/pkg/brew/unbound/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [c-ares](https://www.automicvault.com/pkg/brew/c-ares/) - Shares av.db curated category or tags: cli, dns, networking. - [chinadns-c](https://www.automicvault.com/pkg/brew/chinadns-c/) - Shares av.db curated category or tags: cli, dns, networking. - [coredns](https://www.automicvault.com/pkg/brew/coredns/) - Shares av.db curated category or tags: cli, dns, networking, server. - [kea](https://www.automicvault.com/pkg/brew/kea/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, ddns, networking, openssl, openssl-3. - [getdns](https://www.automicvault.com/pkg/brew/getdns/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, dns, dnssec, libidn2, libuv. ## Combined YAML source View the package source record on GitHub. [combined/bind.yml](https://github.com/automic-vault/db/blob/main/combined/bind.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph