Automic VaultAutomic Vault

brew

Install dnsmasq with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper

Lightweight DNS forwarder and DHCP server. Version 2.93 via Homebrew; verified 2026-06-04.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install dnsmasq

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install dnsmasq

MacPorts ports tree · net/dnsmasq/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add dnsmasq

Alpine Linux edge package indexes · dnsmasq · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install dnsmasq

Debian stable package indexes · dnsmasq · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install dnsmasq

Fedora Rawhide package metadata · dnsmasq · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#dnsmasq

nixpkgs package indexes · pkgs/by-name/dn/dnsmasq/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S dnsmasq

Arch Linux sync databases · dnsmasq · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install dnsmasq

openSUSE Tumbleweed package metadata · dnsmasq · source: download.opensuse.org

overview

Package summary

Lightweight DNS forwarder and DHCP server

Commands and aliases

  • dnsmasq

history

Project history and usage

dnsmasq is a lightweight DNS forwarder, DHCP server, router-advertisement daemon, and network-boot helper for small networks. It is one of the classic Unix packages for making a laptop, router, lab VM, or embedded box hand out names and addresses.

Project history

Simon Kelley's dnsmasq project documents a deliberately small service for DNS, DHCP, TFTP, PXE, and related local-network functions. The official documentation emphasizes small-network infrastructure: local DNS caching and forwarding, DHCP leases, static host mappings, and boot services without deploying a full enterprise DNS/DHCP suite.

The public dnsmasq site keeps the manual, downloads, changelog, and gitweb repository together, reflecting its older upstream style: a compact C daemon, tarball releases, a traditional mailing-list-oriented maintenance model, and broad downstream packaging.

Adoption history

dnsmasq became widely adopted because it solves the ordinary edge-network problem in one daemon. It is packaged by Homebrew, Debian and Ubuntu, Fedora/DNF, Alpine, Arch, MacPorts, Nix, and openSUSE-style distributions, and it appears in routers, virtualization setups, container labs, and developer machines.

Its adoption history is also tied to network appliances and local development tooling: dnsmasq can be the DNS cache on a router, the DHCP server on a test subnet, or the wildcard/local-domain resolver on a developer laptop.

How it is used

Administrators use dnsmasq to cache and forward DNS, serve DHCP leases, define local hostnames, provide TFTP/PXE boot support, and advertise IPv6 router information. It is commonly configured with a single dnsmasq.conf file plus optional hosts and lease files.

Package users care that dnsmasq is small enough to run on embedded systems but standard enough to be scripted and supervised like any other Unix daemon.

Why package nerds care

dnsmasq is package-nerd infrastructure canon: tiny, old, everywhere, and still the fastest route from blank machine to working local DNS and DHCP. It often appears as a transitive operational dependency behind friendlier tools.

Its significance is also historical. Before every platform had polished local-network UX, dnsmasq was the practical package that let developers and operators compose DNS, DHCP, TFTP, and lab-network behavior from one service.

Timeline

  • 2004: The official changelog records dnsmasq 2.x-era releases.
  • 2010s: dnsmasq becomes common in Linux distributions, routers, virtualization, and developer-network workflows.
  • 2020s: The project continues from its official site with tarball releases, manual pages, and a public gitweb repository.

Related projects

  • Related projects include Unbound and BIND for heavier DNS service, ISC Kea for larger DHCP deployments, dnscrypt-proxy for encrypted upstream DNS forwarding, and dnsdist for load balancing and traffic control in larger DNS environments.

security posture

Risk level: orange

broad file, network, media, or database tool signal. formula declares a Homebrew service.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • broad file, network, media, or database tool signal
  • formula declares a Homebrew service

Signals

  • metadata:service
  • text:server

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Formula metadata declares a service or daemon block.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/dnsmasq.conf/usr/local/etc/dnsmasq.conf

executables

Installed executables

CommandKindExposureNote
dnsmasqcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version2.93
manager updated2026-06-04
local dataok
upstreamnot checked
latest detectednot detected

https://thekelleys.org.uk/dnsmasq/doc.html

install metadata

Package metadata

Package keybrew:dnsmasq
Version2.93
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/dnsmasq
Homepagehttps://thekelleys.org.uk/dnsmasq/doc.html
Repositoryhttp://thekelleys.org.uk/git/dnsmasq.git
Upstream docshttps://thekelleys.org.uk/dnsmasq/doc.html
LicenseGPL-2.0-only OR GPL-3.0-only
Source archivehttps://thekelleys.org.uk/dnsmasq/dnsmasq-2.93.tar.gz
Last updated2026-06-04T15:31:34Z
Pulseupdated
Build dependenciespkgconf
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicedeclared
CaveatsOn current macOS releases, `/etc/resolver/<domain>` resolver overrides do not work if the nameserver is `127.0.0.1` and dnsmasq is running on a non-53 port. To use scoped resolver zones reliably, bind dnsmasq to a non-localhost IP (e.g., a loopback alias like 10.0.0.1) on port 53.

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namednsmasq
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

dnsmasq 2.91-1+deb13u1

Small caching DNS proxy and DHCP/TFTP server - system daemon

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq
  • Section: net
  • Architecture: all
  • 3 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Dnsmasq
Debian stable package indexes · deb.debian.org · Debian stable package indexes: dnsmasq from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

dnsmasq-base 2.91-1+deb13u1

Small caching DNS proxy and DHCP/TFTP server - executable

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq-base
  • Section: net
  • Architecture: amd64
  • Source Package: dnsmasq
  • 9 dependencies
  • 1 provides
  • 1 optional deps
  • normalized package name match
  • Matched by: Dnsmasq
Debian stable package indexes · deb.debian.org · Debian stable package indexes: dnsmasq-base from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

dnsmasq-base-lua 2.91-1+deb13u1

Small caching DNS proxy and DHCP/TFTP server - executable, Lua-enabled

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq-base-lua
  • Section: net
  • Architecture: amd64
  • Source Package: dnsmasq
  • 10 dependencies
  • 1 provides
  • 1 optional deps
  • normalized package name match
  • Matched by: Dnsmasq
Debian stable package indexes · deb.debian.org · Debian stable package indexes: dnsmasq-base-lua from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

dnsmasq-utils 2.91-1+deb13u1

Utilities for manipulating DHCP leases

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq-utils
  • Section: net
  • Architecture: amd64
  • Source Package: dnsmasq
  • 1 dependencies
  • normalized package name match
  • Matched by: Dnsmasq
Debian stable package indexes · deb.debian.org · Debian stable package indexes: dnsmasq-utils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

dnsmasq

nix profile install nixpkgs#dnsmasq
  • normalized package name match
  • Matched by: Dnsmasq
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/dn/dnsmasq/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

dnsmasq 2.90-2build2

Small caching DNS proxy and DHCP/TFTP server - system daemon

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq
  • Section: universe/net
  • Architecture: all
  • 2 dependencies
  • 1 optional deps
  • normalized package name match
  • Matched by: Dnsmasq
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: dnsmasq from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

dnsmasq-base 2.90-2build2

Small caching DNS proxy and DHCP/TFTP server - executable

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq-base
  • Section: net
  • Architecture: amd64
  • Source Package: dnsmasq
  • 8 dependencies
  • 1 provides
  • 1 optional deps
  • normalized package name match
  • Matched by: Dnsmasq
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: dnsmasq-base from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

dnsmasq-base-lua 2.90-2build2

Small caching DNS proxy and DHCP/TFTP server - executable, Lua-enabled

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq-base-lua
  • Section: universe/net
  • Architecture: amd64
  • Source Package: dnsmasq
  • 9 dependencies
  • 1 provides
  • 1 optional deps
  • normalized package name match
  • Matched by: Dnsmasq
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: dnsmasq-base-lua from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

dnsmasq-utils 2.90-2build2

Utilities for manipulating DHCP leases

https://www.thekelleys.org.uk/dnsmasq/doc.html

sudo apt install dnsmasq-utils
  • Section: net
  • Architecture: amd64
  • Source Package: dnsmasq
  • 1 dependencies
  • normalized package name match
  • Matched by: Dnsmasq
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: dnsmasq-utils from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
apk95%

dnsmasq 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

dnsmasq-common 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server (common files)

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq-common
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq-common from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

dnsmasq-dnssec 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server with DNSSEC support

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq-dnssec
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq-dnssec from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

dnsmasq-dnssec-dbus 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server with DNSSEC and D-Bus support

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq-dnssec-dbus
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq-dnssec-dbus from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

dnsmasq-dnssec-nftset 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server with DNSSEC and nftables set support

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq-dnssec-nftset
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq-dnssec-nftset from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

dnsmasq-doc 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server (documentation)

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq-doc
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz
apk95%

dnsmasq-openrc 2.93-r0

A lightweight DNS, DHCP, RA, TFTP and PXE server (OpenRC init scripts)

https://www.thekelleys.org.uk/dnsmasq/

sudo apk add dnsmasq-openrc
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: dnsmasq
  • normalized package name match
  • Matched by: Dnsmasq
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: dnsmasq-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • pkgconfBuild dependency declared by Homebrew.
  • easyenginePopular package that depends on this formula.

Same workflow

  • chinadns-cShares av.db curated category or tags: cli, dns, dns-forwarder, networking.
  • hostdbShares av.db curated category or tags: cli, dhcp, dns, networking.
  • adnsShares av.db curated category or tags: cli, dns, networking.
  • aliddnsShares av.db curated category or tags: cli, dns, networking.
  • bindShares av.db curated category or tags: cli, dns, networking, server.
  • c-aresShares av.db curated category or tags: cli, dns, networking.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment