Automic VaultAutomic Vault

brew

Install cri-tools with Homebrew, apk, dnf, Nix, zypper, pacman

CLI and validation tools for Kubelet Container Runtime Interface (CRI). Version 1.36.0 via Homebrew; verified 2026-04-24.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install cri-tools

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add cri-tools

Alpine Linux edge package indexes · cri-tools · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install cri-tools

Fedora Rawhide package metadata · cri-tools · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#cri-tools

nixpkgs package indexes · pkgs/by-name/cr/cri-tools/package.nix · source: api.github.com

openSUSE zypperverified · 92%
sudo zypper install cri-tools

openSUSE Tumbleweed package metadata · cri-tools · source: download.opensuse.org

Arch Linux pacmanverified · 92%
sudo pacman -S crictl

Arch Linux sync databases · crictl · source: geo.mirror.pkgbuild.com

overview

Package summary

CLI and validation tools for Kubelet Container Runtime Interface (CRI)

Commands and aliases

  • crictl
  • critest

history

Project history and usage

cri-tools is the Kubernetes SIG Node companion project for Container Runtime Interface debugging and conformance tooling. It packages crictl for direct CRI interaction and critest for validation tests, making it useful to runtime implementers, cluster operators, and distribution maintainers who need a tool outside the kubelet itself.

Project history

The project grew around Kubernetes' Container Runtime Interface, the gRPC plugin interface that lets kubelet work with different container runtimes without recompiling cluster components. Its README describes the scope narrowly: debugging and validation tools for kubelet CRI, not a user-facing container runtime or a replacement orchestration layer.

The compatibility matrix ties cri-tools minor versions to Kubernetes minor versions, with v0.1 aligned to Kubernetes 1.7 and later 1.x releases tracking Kubernetes release branches. That version coupling is central to how distributions package it, because CRI features can diverge between Kubernetes and cri-tools minor versions.

Adoption history

crictl and critest became general-availability tools in the v1.11 era according to their official docs. The project is maintained under kubernetes-sigs and points users to Kubernetes SIG Node community channels, which made it part of the normal Kubernetes runtime-development workflow rather than a third-party diagnostic utility.

How it is used

crictl is used to inspect, pull, run, stop, and debug containers and pod sandboxes through CRI-compatible runtimes such as containerd, CRI-O, and cri-dockerd. critest is used to verify that a runtime's CRI server implementation conforms to Kubernetes expectations without running full Kubernetes end-to-end tests.

Why package nerds care

For package maintainers, cri-tools matters because it is version-skew sensitive: the official README recommends matching the cri-tools and Kubernetes minor versions. It is also a canonical example of a Kubernetes-adjacent package where the CLI binary is operationally useful but its version policy follows a larger platform's release cadence.

Timeline

  • 2017: v0.1 release published for the Kubernetes 1.7 compatibility line.
  • 2018: crictl and CRI validation testing documented as GA since v1.11.0.
  • 2020s: Project continues to follow Kubernetes minor release lines and ships crictl and critest archives from GitHub releases.

Related projects

  • Kubernetes kubelet and cri-api define the runtime interface that cri-tools exercises.
  • containerd, CRI-O, and cri-dockerd are common CRI-compatible runtimes used with crictl.

security posture

Risk level: orange

generalized runtime or code generation signal. infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • generalized runtime or code generation signal
  • infrastructure mutation or orchestration signal

Signals

  • text:container
  • text:runtime

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/crictl.yaml
Windows
%USERPROFILE%\.crictl\crictl.yaml

executables

Installed executables

CommandKindExposureNote
crictlcliglobal executable
critestcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.36.0
manager updated2026-04-24
local dataok
upstreamcurrent
latest detectedv1.36.0

https://github.com/kubernetes-sigs/cri-tools

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:cri-tools
Version1.36.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/cri-tools
Homepagehttps://github.com/kubernetes-sigs/cri-tools
Repositoryhttps://github.com/kubernetes-sigs/cri-tools
Upstream docshttps://github.com/kubernetes-sigs/cri-tools#readme
LicenseApache-2.0
Source archivehttps://github.com/kubernetes-sigs/cri-tools/archive/refs/tags/v1.36.0.tar.gz
Last updated2026-04-24T17:59:05Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecri-tools
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

cri-tools

nix profile install nixpkgs#cri-tools
  • normalized package name match
  • Matched by: Cri Tools
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cr/cri-tools/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

cri-tools 1.36.0-r1

CLI tool for Kubelet Container Runtime Interface (CRI)

https://github.com/kubernetes-sigs/cri-tools

sudo apk add cri-tools
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: cri-tools
  • 1 provides
  • normalized package name match
  • Matched by: Cri Tools
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cri-tools from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

cri-tools 1.29.0-13.fc44

CLI and validation tools for Container Runtime Interface

https://github.com/kubernetes-sigs/cri-tools

sudo dnf install cri-tools
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cri-tools
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Cri Tools
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cri-tools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cri-tools1.33 1.33.0-10.fc44

CLI and validation tools for Kubelet Container Runtime Interface (CRI)

https://github.com/kubernetes-sigs/cri-tools

sudo dnf install cri-tools1.33
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cri-tools1.33
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Cri Tools
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cri-tools1.33 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cri-tools1.34 1.34.0-5.fc44

CLI and validation tools for Kubelet Container Runtime Interface (CRI)

https://github.com/kubernetes-sigs/cri-tools

sudo dnf install cri-tools1.34
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cri-tools1.34
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Cri Tools
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cri-tools1.34 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cri-tools1.35 1.35.0-4.fc44

CLI and validation tools for Kubelet Container Runtime Interface (CRI)

https://github.com/kubernetes-sigs/cri-tools

sudo dnf install cri-tools1.35
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cri-tools1.35
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Cri Tools
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cri-tools1.35 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cri-tools1.36 1.36.0-3.fc45

CLI and validation tools for Kubelet Container Runtime Interface (CRI)

https://github.com/kubernetes-sigs/cri-tools

sudo dnf install cri-tools1.36
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cri-tools1.36
  • 3 dependencies
  • 3 provides
  • normalized package name match
  • Matched by: Cri Tools
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cri-tools1.36 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
zypper95%

cri-tools 1.36.0-1.1

CLI and validation tools for Kubelet Container Runtime Interface

https://github.com/kubernetes-sigs/cri-tools

sudo zypper install cri-tools
  • License: Apache-2.0
  • Category: System/Management
  • Architecture: x86_64
  • Source Package: cri-tools
  • 1 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Cri Tools
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: cri-tools from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
pacman92%

crictl 1.36.0-1

A CLI for CRI-compatible container runtimes

https://github.com/kubernetes-sigs/cri-tools

sudo pacman -S crictl
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Crictl
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: crictl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
pacman92%

critest 1.36.0-1

A benchmarking CLI for CRI-compatible container runtimes

https://github.com/kubernetes-sigs/cri-tools

sudo pacman -S critest
  • License: Apache-2.0
  • Architecture: x86_64
  • 1 dependencies
  • installed executable or alias match
  • Matched by: Critest
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: critest from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • cdebugShares av.db curated category or tags: cli, containers, developer-tools, kubernetes.
  • komposeShares av.db curated category or tags: cli, containers, developer-tools, kubernetes.
  • minikubeShares av.db curated category or tags: cli, containers, developer-tools, kubernetes.
  • cekitShares av.db curated category or tags: cli, containers, developer-tools.
  • chart-releaserShares av.db curated category or tags: cli, developer-tools, kubernetes.
  • chart-testingShares av.db curated category or tags: cli, developer-tools, kubernetes.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment