Automic VaultAutomic Vault

brew

Install blocky with Homebrew, apk, Nix

Fast and lightweight DNS proxy as ad-blocker for local network. Version 0.33.0 via Homebrew; verified 2026-06-30.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install blocky

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add blocky

Alpine Linux edge package indexes · blocky · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#blocky

nixpkgs package indexes · pkgs/by-name/bl/blocky/package.nix · source: api.github.com

overview

Package summary

Fast and lightweight DNS proxy as ad-blocker for local network

Commands and aliases

  • blocky

history

Project history and usage

blocky is a Go DNS proxy and ad blocker for local networks. It belongs to the self-hosted DNS-adblocking family, but its package identity is a single binary with YAML configuration, modern encrypted DNS protocols, metrics, and router/Raspberry Pi friendly deployment.

Project history

GitHub metadata dates blocky's repository to November 2019. The official README describes it as a fast, lightweight DNS proxy and ad blocker for local networks, written in Go, with blocking lists, allowlists, conditional forwarding, caching, DNSSEC-related features, Prometheus/Grafana integration, REST endpoints, and a CLI.

The README emphasizes simple operation: stateless behavior, no required database, Docker multi-arch images, a single binary, and support for x86-64, ARM, and MIPS. The docs describe YAML configuration, folder-based multi-file config merging, and generated JSON schema validation.

Adoption history

blocky's adoption tracks the home-network and homelab move from appliance-style ad blockers to packaged, containerized, and declarative DNS services. The input metadata records packages in Alpine apk, Homebrew, and Nix, while the README advertises Docker pulls and multi-architecture deployment.

The release stream is active: official releases include v0.32.1 on June 20, 2026, with several 0.30-plus releases earlier in 2026.

How it is used

Operators run blocky as a DNS service and configure upstream resolvers, blocklists, allowlists, ports, logging, privacy options, and protocol support in YAML. The official configuration docs explain `config.yaml`, `config.yml`, and using `--config` to point at a folder of `.yml` or `.yaml` files that are merged in lexical order.

Why package nerds care

blocky is interesting to package people because it packages an infrastructure service like a normal CLI: one Go binary, config schema, validation command, system-service-friendly behavior, and no mandatory database. That makes it easy to slot into Homebrew, Nix, Alpine, containers, routers, and homelab automation.

It also sits in the same practical category as Pi-hole and AdGuard Home while keeping a config-file-first shape that appeals to users who prefer declarative package-managed systems.

Timeline

  • 2019: Official GitHub repository created.
  • Early release line: Tags begin with v0.2.0 in the public repository.
  • 2026: v0.32.1 released on June 20 after several active 2026 releases.

Related projects

  • Pi-hole and AdGuard Home are related local-network DNS blocking projects.
  • Prometheus and Grafana are named integrations in the README.
  • DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, DNSSEC, and OpenWrt/Raspberry Pi deployments are adjacent ecosystem pieces named by the official docs and README.

security posture

Risk level: orange

formula declares a Homebrew service.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service

Signals

  • metadata:service

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Formula metadata declares a service or daemon block.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
config.yamlconfig.ymlfolder passed to --config containing *.yml*.yaml files

executables

Installed executables

CommandKindExposureNote
blockycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version0.33.0
manager updated2026-06-30
local dataok
upstreamcurrent
latest detectedv0.33.0

https://github.com/0xerr0r/blocky

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:blocky
Version0.33.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/blocky
Homepagehttps://0xerr0r.github.io/blocky/
Repositoryhttps://github.com/0xerr0r/blocky
Upstream docshttps://0xerr0r.github.io/blocky/latest
LicenseApache-2.0
Source archivehttps://github.com/0xerr0r/blocky/archive/refs/tags/v0.33.0.tar.gz
Last updated2026-06-30T09:18:06Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicedeclared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameblocky
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

blocky

nix profile install nixpkgs#blocky
  • normalized package name match
  • Matched by: Blocky
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bl/blocky/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

blocky 0.30.0-r0

DNS proxy ad-blocker for local network

https://github.com/0xERR0R/blocky

sudo apk add blocky
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: blocky
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Blocky
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: blocky from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

blocky-openrc 0.30.0-r0

DNS proxy ad-blocker for local network (OpenRC init scripts)

https://github.com/0xERR0R/blocky

sudo apk add blocky-openrc
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: blocky
  • normalized package name match
  • Matched by: Blocky
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: blocky-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment