# Install cni-plugins with Homebrew, apk, Nix, pacman, scoop, zypper, dnf, MacPorts, apt

Container Network Interface plugins. Version 1.9.1 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:cni-plugins
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install cni-plugins
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install dhcp
```

  Evidence: MacPorts ports tree: net/dhcp/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add cni-plugins
```

  Evidence: Alpine Linux edge package indexes: cni-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#cni-plugins
```

  Evidence: nixpkgs package indexes: cni-plugins from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- pacman (92%):

```sh
sudo pacman -S cni-plugins
```

  Evidence: Arch Linux sync databases: cni-plugins from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install cni-plugins
```

  Evidence: openSUSE Tumbleweed package metadata: cni-plugins from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

- dnf (92%):

```sh
sudo dnf install dhcp-client
```

  Evidence: Fedora Rawhide package metadata: dhcp-client from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Debian apt (92%):

```sh
sudo apt install vlan
```

  Evidence: Debian stable package indexes: vlan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

### Windows

- Scoop (92%):

```sh
scoop install main/cni-plugins
```

  Evidence: Scoop official bucket manifest trees: bucket/cni-plugins.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:cni-plugins
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/cni-plugins>
- **Version:** 1.9.1
- **Source summary:** Container Network Interface plugins
- **Homepage:** <https://www.cni.dev>
- **Repository:** <https://github.com/containernetworking/plugins>
- **Upstream docs:** <https://github.com/containernetworking/plugins#readme>
- **License:** Apache-2.0
- **Source archive:** <https://github.com/containernetworking/plugins/archive/refs/tags/v1.9.1.tar.gz>
- **Generated:** 2026-07-09T07:20:21+00:00

## Executables

- bandwidth (cli)
- dhcp (cli)
- dummy (cli)
- firewall (cli)
- host-device (cli)
- host-local (cli)
- ipvlan (cli)
- loopback (cli)
- macvlan (cli)
- portmap (cli)
- ptp (cli)
- sbr (cli)
- static (cli)
- tap (cli)
- tuning (cli)
- vlan (cli)
- vrf (cli)
- bandwidth (alias)
- dhcp (alias)
- dummy (alias)
- firewall (alias)
- host-device (alias)
- host-local (alias)
- ipvlan (alias)
- loopback (alias)
- macvlan (alias)
- portmap (alias)
- ptp (alias)
- sbr (alias)
- static (alias)
- tap (alias)
- tuning (alias)
- vlan (alias)
- vrf (alias)

## Build dependencies

- go

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, x86_64_linux

## Freshness

- Page generated: 2026-07-09
- Package-manager version: 1.9.1
- Local data: ok
- Upstream repository: https://github.com/containernetworking/plugins
- Upstream latest detected: v1.9.1 (current)
- info: No package-manager update timestamp was available.
## Project history and usage

cni-plugins is the reference plugin collection for CNI, the Container Network Interface used by container runtimes and orchestrators to attach Linux and Windows containers to networks.

### Project history

CNI originated at CoreOS as part of rkt and became a CNCF-hosted project in 2017. The CNI specification defines the runtime-to-plugin interface, while the separate containernetworking/plugins repository maintains practical plugins such as bridge, loopback, macvlan, ptp, host-local, static, dhcp, portmap, bandwidth, tuning, firewall, and others.

### Adoption history

CNI grew with the cloud-native container ecosystem because it gave runtimes a simple, vendor-neutral networking interface. CNCF's security self-assessment names Kubernetes, Mesos, CloudFoundry, CRI-O, and others as users, and this batch input records packaging across Homebrew, Nix, Arch, Scoop, openSUSE, Alpine, and other distributions.

### How it is used

Administrators and runtimes place CNI network configuration on disk, commonly under /etc/cni/net.d on Linux, and invoke plugin binaries with CNI environment variables and JSON configuration. The plugin set supplies common interface-creating, IPAM, and meta plugins used directly or chained together.

### Why package nerds care

Package nerds care because cni-plugins is infrastructure glue: tiny binaries with stable names that container runtimes expect to find on disk. Packaging it correctly matters more than its user interface, because the package quietly determines whether local Kubernetes, CRI-O, containerd, and lab container setups can create networks.

### Timeline

- 2015: CNI spec v0.1.0 appears as the initial specification tag.
- 2017: CNCF announced hosting for Container Networking Interface.
- 2019: CNI maintainers presented introduction and deep-dive sessions at KubeCon/CloudNativeCon.
- 2020: Spec v1.0.0 removed non-list configurations.
- 2024: cni-plugins 1.x releases continued reference-plugin maintenance.

### Related projects

- containernetworking/cni contains the specification, Go libraries, and cnitool.
- Kubernetes, CRI-O, containerd integrations, Calico, Cilium, Flannel, Weave, and other network projects sit around the CNI plugin ecosystem.

### Sources

- <https://www.cni.dev/>
- <https://www.cni.dev/docs/>
- <https://www.cni.dev/docs/spec/>
- <https://github.com/containernetworking/plugins#readme>
- <https://www.cncf.io/blog/2017/05/23/cncf-hosts-container-networking-interface-cni/>
- <https://tag-security.cncf.io/community/assessments/projects/cni/self-assessment/>


## Security Notes

broad file, network, media, or database tool signal. infrastructure mutation or orchestration signal.

- **Geiger risk:** orange / medium
- broad file, network, media, or database tool signal
- infrastructure mutation or orchestration signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: /etc/cni/net.d
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** cni-plugins
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Requirements:** linux
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** yes
- **URL Keys:** head, stable

## Other Package-Manager Records

- Nix - cni-plugins: normalized package name match | nixpkgs package indexes: cni-plugins from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- apk - cni-plugins - 1.9.1-r2: normalized package name match | Alpine Linux edge package indexes: cni-plugins from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Some standard networking plugins, maintained by the CNI team | https://www.cni.dev/
- apk - cni-plugins-doc - 1.9.1-r2: normalized package name match | Alpine Linux edge package indexes: cni-plugins-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Some standard networking plugins, maintained by the CNI team (documentation) | https://www.cni.dev/
- pacman - cni-plugins - 1.9.1-1: normalized package name match | Arch Linux sync databases: cni-plugins from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Some standard networking plugins, maintained by the CNI team | https://github.com/containernetworking/plugins
- zypper - cni-plugins - 1.6.2-1.5: normalized package name match | openSUSE Tumbleweed package metadata: cni-plugins from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Container Network Interface plugins | https://github.com/containernetworking/plugins
- Scoop - main/cni-plugins: normalized package name match | Scoop official bucket manifest trees: bucket/cni-plugins.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
- MacPorts - dhcp: installed executable or alias match | MacPorts ports tree: net/dhcp/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Debian apt - vlan - 2.0.5+nmu3: installed executable or alias match | Debian stable package indexes: vlan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | ifupdown legacy integration for vlan configuration
- Nix - vlan: installed executable or alias match | nixpkgs package indexes: pkgs/by-name/vl/vlan/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - vlan - 2.0.5ubuntu5: installed executable or alias match | Ubuntu 24.04 LTS package indexes: vlan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | ifupdown integration for vlan configuration
- apk - vlan - 2.3-r1: installed executable or alias match | Alpine Linux edge package indexes: vlan from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Scripts for configuring VLAN network interfaces | https://wiki.alpinelinux.org/wiki/Vlan
- dnf - dhcp-client - 4.4.3-26.fc44: installed executable or alias match | Fedora Rawhide package metadata: dhcp-client from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Provides the ISC DHCP client daemon and dhclient-script | https://www.isc.org/dhcp/
- dnf - dhcp-common - 4.4.3-26.fc44: installed executable or alias match | Fedora Rawhide package metadata: dhcp-common from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Common files used by ISC dhcp client, server and relay agent | https://www.isc.org/dhcp/
- dnf - dhcp-devel - 4.4.3-26.fc44: installed executable or alias match | Fedora Rawhide package metadata: dhcp-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Development headers and libraries for interfacing to the DHCP server | https://www.isc.org/dhcp/
- dnf - dhcp-devel-doc - 4.4.3-26.fc44: installed executable or alias match | Fedora Rawhide package metadata: dhcp-devel-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Developer's Guide for ISC DHCP | https://www.isc.org/dhcp/
- dnf - dhcp-libs-static - 4.4.3-26.fc44: installed executable or alias match | Fedora Rawhide package metadata: dhcp-libs-static from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Shared libraries used by ISC dhcp client and server | https://www.isc.org/dhcp/


## Related links

- [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew.
- [cilium-cli](https://www.automicvault.com/pkg/brew/cilium-cli/) - Shares av.db curated category or tags: cli, kubernetes, networking.
- [coredns](https://www.automicvault.com/pkg/brew/coredns/) - Shares av.db curated category or tags: cli, kubernetes, networking, plugins.
- [hubble](https://www.automicvault.com/pkg/brew/hubble/) - Shares av.db curated category or tags: cli, kubernetes, networking.
- [kubefwd](https://www.automicvault.com/pkg/brew/kubefwd/) - Shares av.db curated category or tags: cli, kubernetes, networking.
- [slirp4netns](https://www.automicvault.com/pkg/brew/slirp4netns/) - Shares av.db curated category or tags: cli, containers, networking.
- [aerleon](https://www.automicvault.com/pkg/brew/aerleon/) - Shares av.db curated category or tags: cli, networking.
- [ahcpd](https://www.automicvault.com/pkg/brew/ahcpd/) - Shares av.db curated category or tags: cli, networking.
- [airshare](https://www.automicvault.com/pkg/brew/airshare/) - Shares av.db curated category or tags: cli, networking.
- [node-static](https://www.automicvault.com/pkg/npm/node-static/) - Executable or command metadata overlaps with this package. Shared terms: cli, networking, static.

## Combined YAML source

View the package source record on GitHub. [combined/cni-plugins.yml](https://github.com/automic-vault/db/blob/main/combined/cni-plugins.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
