macOS
Homebrewverified · 100%
brew install duo_unixlocal Homebrew formula metadata
brew
Install duo_unix with Homebrew, apk, apt, dnf, Nix
Two-factor authentication for SSH. Version 2.2.3 via Homebrew; verified 2026-06-22.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add duo_unixAlpine Linux edge package indexes · duo_unix · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install libduo-devDebian stable package indexes · libduo-dev · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install duo_unixFedora Rawhide package metadata · duo_unix · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#duo-unixnixpkgs package indexes · pkgs/by-name/du/duo-unix/package.nix · source: api.github.com
overview
Package summary
Two-factor authentication for SSH
Project links
Commands and aliases
- duo_unix_support.sh
- login_duo
history
Project history and usage
Duo Unix is Duo Security's Unix integration for adding Duo two-factor authentication to SSH, sudo, and other PAM-protected services. It packages two important surfaces: the `pam_duo` PAM module and the `login_duo` standalone login wrapper.
Project history
The public Duo Unix repository was created in 2011 and is maintained by Duo Security. The README describes it as Duo two-factor authentication for Unix systems, with the repository intended for development or cutting-edge versions while stable release tarballs and packages are recommended for production deployments.
The project is written mainly in C and uses traditional Unix build machinery: bootstrap, configure, make, and make install. Its docs and README center on the practical security integration points: PAM, login wrappers, OpenSSL-backed TLS, and config files containing Duo integration keys and API host information.
Adoption history
Duo Unix adoption follows Duo's enterprise MFA adoption path: administrators add a Duo Unix integration in the Duo Admin Panel, deploy packages or stable tarballs, configure SSH or sudo, and place integration credentials in `/etc/duo` or `/etc/security` config files.
Package metadata shows distribution through Homebrew, Alpine, Debian/Ubuntu development packages, Fedora, and Nix. That breadth matters because PAM integrations are usually installed by OS package managers on servers rather than vendored into applications.
How it is used
Typical usage is to install Duo Unix with PAM support, create a Unix integration in the Duo Admin Panel, put the integration key, secret key, and API hostname into `pam_duo.conf` or `login_duo.conf`, and then wire `pam_duo` into the PAM stack for SSH or sudo.
`login_duo` can also protect command execution without PAM. The README shows a test invocation that runs a command only after successful Duo authentication.
Why package nerds care
Duo Unix is package-nerd significant because it lives at a high-risk boundary: a small C package, config files with secrets, PAM modules, and remote MFA API calls can affect whether administrators can log into their own machines.
Its packaging history illustrates why security integrations stay conservative: upstream points production users at stable tarballs/packages, while the GitHub repo remains the development surface. For package managers, correct file placement and clear upgrade behavior matter as much as the executable.
Timeline
- 2011: The public duosecurity/duo_unix repository is created.
- 2025: Duo Unix 2.1.0 and 2.2.x releases are published on GitHub.
- 2026: The repository remains active with updates and package-manager distribution across multiple Unix-like systems.
Related projects
- Duo Security's Unix integration and Admin Panel are the operational counterpart to the open-source Unix package.
- OpenPAM/Linux-PAM, OpenSSH, sudo, and OpenSSL are adjacent infrastructure because Duo Unix plugs into PAM-protected login flows and uses the system OpenSSL library for TLS.
Sources
- https://raw.githubusercontent.com/duosecurity/duo_unix/master/README.md documents purpose, PAM and standalone modes, production packaging guidance, build steps, config files, Duo Admin Panel setup, and TLS support.
- https://duo.com/docs/duounix documents official Duo Unix deployment guidance.
- https://api.github.com/repos/duosecurity/duo_unix documents repository creation, language, activity, and public metadata.
- https://api.github.com/repos/duosecurity/duo_unix/releases documents recent release tags.
security posture
Risk level: blue
broad file, network, media, or database tool signal.
Risk classifier
blue risk · medium confidence · tool
Why
- broad file, network, media, or database tool signal
Signals
- text:ssh
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Installs with 1 runtime dependencies.
- Build metadata lists 3 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/etc/duo/pam_duo.conf/etc/security/pam_duo.conf/etc/duo/login_duo.conf/etc/security/login_duo.conf
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
/etc/duo/pam_duo.conf/etc/security/pam_duo.conf/etc/duo/login_duo.conf/etc/security/login_duo.conf
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
duo_unix_support.sh | cli | global executable | |
login_duo | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version2.2.3
manager updated2026-06-22
local dataok
upstreamcurrent
latest detectedduo_unix-2.2.3
https://github.com/duosecurity/duo_unix
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:duo_unix |
|---|---|
| Version | 2.2.3 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/duo_unix |
| Homepage | https://www.duosecurity.com/docs/duounix |
| Repository | https://github.com/duosecurity/duo_unix |
| Upstream docs | https://duo.com/docs/duounix |
| License | GPL-2.0-or-later |
| Source archive | https://github.com/duosecurity/duo_unix/archive/refs/tags/duo_unix-2.2.3.tar.gz |
| Last updated | 2026-06-22T14:03:12-07:00 |
| Pulse | updated |
| Dependencies | openssl@3 |
| Build dependencies | autoconf, automake, libtool |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | duo_unix |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
libduo-dev 1.11.3-1.2+b1
Duo Security development libraries and header files
https://github.com/duosecurity/duo_unix
sudo apt install libduo-dev- Section: libdevel
- Architecture: amd64
- Source Package: duo-unix
- 1 dependencies
- normalized package name match
- Matched by: Duo Unix
Debian apt95%
libduo3t64 1.11.3-1.2+b1
Duo Security library
https://github.com/duosecurity/duo_unix
sudo apt install libduo3t64- Section: libs
- Architecture: amd64
- Source Package: duo-unix
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Duo Unix
Debian apt95%
libpam-duo 1.11.3-1.2+b1
PAM module for Duo Security two-factor authentication
https://github.com/duosecurity/duo_unix
sudo apt install libpam-duo- Section: libs
- Architecture: amd64
- Source Package: duo-unix
- 4 dependencies
- normalized package name match
- Matched by: Duo Unix
Debian apt95%
login-duo 1.11.3-1.2+b1
login wrapper for Duo Security two-factor authentication
https://github.com/duosecurity/duo_unix
sudo apt install login-duo- Section: admin
- Architecture: amd64
- Source Package: duo-unix
- 3 dependencies
- normalized package name match
- Matched by: Duo Unix
Nix95%
duo-unix
nix profile install nixpkgs#duo-unix- normalized package name match
- Matched by: Duo Unix
Ubuntu apt95%
libduo-dev 1.11.3-1.1build2
Duo Security development libraries and header files
https://github.com/duosecurity/duo_unix
sudo apt install libduo-dev- Section: universe/libdevel
- Architecture: amd64
- Source Package: duo-unix
- 1 dependencies
- normalized package name match
- Matched by: Duo Unix
Ubuntu apt95%
libduo3t64 1.11.3-1.1build2
Duo Security library
https://github.com/duosecurity/duo_unix
sudo apt install libduo3t64- Section: universe/libs
- Architecture: amd64
- Source Package: duo-unix
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Duo Unix
Ubuntu apt95%
libpam-duo 1.11.3-1.1build2
PAM module for Duo Security two-factor authentication
https://github.com/duosecurity/duo_unix
sudo apt install libpam-duo- Section: universe/libs
- Architecture: amd64
- Source Package: duo-unix
- 4 dependencies
- normalized package name match
- Matched by: Duo Unix
Ubuntu apt95%
login-duo 1.11.3-1.1build2
login wrapper for Duo Security two-factor authentication
https://github.com/duosecurity/duo_unix
sudo apt install login-duo- Section: universe/admin
- Architecture: amd64
- Source Package: duo-unix
- 3 dependencies
- normalized package name match
- Matched by: Duo Unix
apk95%
duo_unix 1.12.1-r2
Duo two-factor authentication for Unix systems with Pluggable Authentication Modules (PAM)
sudo apk add duo_unix- License: GPL-2.0-only
- Architecture: x86_64
- Source Package: duo_unix
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Duo Unix
apk95%
duo_unix-dev 1.12.1-r2
Duo two-factor authentication for Unix systems with Pluggable Authentication Modules (PAM) (development files)
sudo apk add duo_unix-dev- License: GPL-2.0-only
- Architecture: x86_64
- Source Package: duo_unix
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Duo Unix
apk95%
duo_unix-doc 1.12.1-r2
Duo two-factor authentication for Unix systems with Pluggable Authentication Modules (PAM) (documentation)
sudo apk add duo_unix-doc- License: GPL-2.0-only
- Architecture: x86_64
- Source Package: duo_unix
- normalized package name match
- Matched by: Duo Unix
dnf95%
duo_unix 2.2.3-1.fc44
Duo two-factor authentication for UNIX systems
sudo dnf install duo_unix- License: GPL-2.0-with-classpath-exception AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND FSFAP AND FSFULLR AND GPL-1.0-only AND
- Category: Unspecified
- Architecture: i686
- Source Package: duo_unix
- 7 dependencies
- 2 provides
- normalized package name match
- Matched by: Duo Unix
dnf95%
duo_unix-devel 2.2.3-1.fc44
Development files and documentation for duo_unix
sudo dnf install duo_unix-devel- License: GPL-2.0-with-classpath-exception AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND FSFAP AND FSFULLR AND GPL-1.0-only AND
- Category: Unspecified
- Architecture: i686
- Source Package: duo_unix
- 4 dependencies
- 2 provides
- normalized package name match
- Matched by: Duo Unix
dnf95%
duo_unix-doc 2.2.3-1.fc44
Documentation and license files for duo_unix
sudo dnf install duo_unix-doc- License: GPL-2.0-with-classpath-exception AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND FSFAP AND FSFULLR AND GPL-1.0-only AND
- Category: Unspecified
- Architecture: noarch
- Source Package: duo_unix
- 1 provides
- normalized package name match
- Matched by: Duo Unix
dnf95%
duo_unix-selinux 2.2.3-1.fc44
SELinux rules for duo_unix
sudo dnf install duo_unix-selinux- License: GPL-2.0-with-classpath-exception AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND FSFAP AND FSFULLR AND GPL-1.0-only AND
- Category: Unspecified
- Architecture: x86_64
- Source Package: duo_unix
- 8 dependencies
- 1 provides
- normalized package name match
- Matched by: Duo Unix
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment