macOS
Homebrewverified · 100%
brew install tomcatlocal Homebrew formula metadata
brew
Install tomcat with Homebrew, chocolatey, dnf, Nix, scoop, zypper
Implementation of Java Servlet and JavaServer Pages. Version 11.0.23 via Homebrew; verified 2026-06-22.
install
Additional install commands
Linux
Fedora dnfverified · 92%
sudo dnf install tomcatFedora Rawhide package metadata · tomcat · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#tomcatnixpkgs package indexes · tomcat · source: raw.githubusercontent.com
openSUSE zypperverified · 92%
sudo zypper install tomcatopenSUSE Tumbleweed package metadata · tomcat · source: download.opensuse.org
Windows
Chocolateyverified · 92%
choco install TomcatChocolatey community package catalog · Tomcat · source: community.chocolatey.org
Scoopverified · 92%
scoop install extras/tomcatScoop official bucket manifest trees · bucket/tomcat.json · source: api.github.com
overview
Package summary
Implementation of Java Servlet and JavaServer Pages
Project links
Commands and aliases
- catalina
history
Project history and usage
Apache Tomcat is the long-running open source servlet and web application container for the Java/Jakarta ecosystem. The Apache site describes it as an implementation of Jakarta Servlet, Jakarta Pages, Expression Language, WebSocket, Annotations, and Authentication specifications, with Tomcat 10 and later aligned to Jakarta EE and Tomcat 9 and earlier aligned to Java EE.
Project history
Apache's heritage page traces Tomcat to Sun Microsystems, where it began as the reference implementation for the Java Servlet and JavaServer Pages specifications. Sun donated the code base to the Apache Software Foundation in 1999, the first Apache Tomcat release was 3.0, and the project became a top-level Apache project in 2005 after leaving the Jakarta umbrella.
The official version matrix records the long major-version sequence from Tomcat 3.x through current supported Tomcat 9, 10.1, and 11. It also shows why Tomcat packaging is version-sensitive: each major line maps to particular Servlet/JSP/Jakarta Pages, EL, WebSocket, Authentication, Annotation, and Java runtime requirements.
Adoption history
Apache states that Tomcat powers numerous large-scale, mission-critical web applications across diverse industries and organizations. Its adoption history is also visible in packaging: the input metadata lists Homebrew, Chocolatey, Fedora/DNF, Nix, Scoop, and openSUSE/Zypper names, reflecting Tomcat's role as a default installable Java web container across operating systems.
How it is used
Tomcat is commonly installed to run WAR-style Java web applications, local development servers, CI smoke-test containers, and lightweight production servlet deployments. The `catalina` command is the package-manager-visible entry point, while administrators tune `$CATALINA_BASE/conf/server.xml`, `catalina.properties`, and `tomcat-users.xml`.
For maintainers, Tomcat's source workflow also matters: Apache documents `tomcat.git` as the repository containing the Tomcat source code, with active branches for main, 11.0.x, 10.1.x, and 9.0.x, and a GitHub web view. That branch structure is exactly what downstream package maintainers track when choosing stable formula versions.
Why package nerds care
Tomcat is package-nerd significant because it is both an application server and an ecosystem compatibility boundary. A package name like `tomcat`, `tomcat@10`, or `tomcat10` carries real meaning about Java version requirements, Java EE versus Jakarta EE APIs, servlet specification versions, config-file compatibility, and how much migration work an application needs.
Timeline
- 1999: Sun donated the Tomcat code base to the Apache Software Foundation; the first Apache Tomcat release was 3.0.
- 2005: Tomcat became a top-level Apache project.
- 2022: Tomcat 10.0.x reached end of life on 2022-10-31.
- 2026: Apache lists Tomcat 11.0.x, 10.1.x, and 9.0.x as currently supported branches.
Related projects
- Official Apache source pages list related Tomcat components including Tomcat Connectors, Tomcat Native, Taglibs, the Tomcat Maven Plugin, and the Apache Tomcat migration tool for Jakarta EE.
Sources
security posture
Risk level: orange
broad file, network, media, or database tool signal. formula declares a Homebrew service.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- broad file, network, media, or database tool signal
- formula declares a Homebrew service
Signals
- metadata:service
- text:server
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Formula metadata declares a service or daemon block.
- Homebrew bottle metadata is available for 1 platform targets.
- Installs with 1 runtime dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
$CATALINA_BASE/conf/server.xml$CATALINA_BASE/conf/catalina.properties$CATALINA_BASE/conf/tomcat-users.xml
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
$CATALINA_BASE/conf/tomcat-users.xml
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
catalina | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version11.0.23
manager updated2026-06-22
local dataok
upstreamnot checked
latest detectednot detected
- infoRelease/tag comparison is only available for GitHub repositories.https://tomcat.apache.org/none confidence
install metadata
Package metadata
| Package key | brew:tomcat |
|---|---|
| Version | 11.0.23 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/tomcat |
| Homepage | https://tomcat.apache.org/ |
| Repository | https://github.com/apache/tomcat |
| Upstream docs | https://tomcat.apache.org/ |
| License | Apache-2.0 |
| Source archive | https://www.apache.org/dyn/closer.lua?path=tomcat/tomcat-11/v11.0.23/bin/apache-tomcat-11.0.23.tar.gz |
| Last updated | 2026-06-22T14:06:29-07:00 |
| Pulse | updated |
| Dependencies | openjdk |
| Bottle | available (on all) |
| Homebrew post-install | not defined |
| Service | declared |
| Caveats | Configuration files: $HOMEBREW_PREFIX/etc/tomcat |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | tomcat |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
tomcat
nix profile install nixpkgs#tomcat- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat 10.1.55-1.fc45
Apache Tomcat - Servlet and JSP engine for system-wide deployment
sudo dnf install tomcat- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 6 dependencies
- 4 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-admin-webapps 10.1.55-1.fc45
Apache Tomcat - Administrative web applications
sudo dnf install tomcat-admin-webapps- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-common 10.1.55-1.fc45
Apache Tomcat - Common files for Tomcat packages
sudo dnf install tomcat-common- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 3 dependencies
- 2 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-docs-webapp 10.1.55-1.fc45
Apache Tomcat - Online documentation web application
sudo dnf install tomcat-docs-webapp- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-el-5.0-api 10.1.55-1.fc45
Apache Tomcat Expression Language v5.0 API Implementation Classes
sudo dnf install tomcat-el-5.0-api- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 1 dependencies
- 4 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-jsp-3.1-api 10.1.55-1.fc45
Apache Tomcat JavaServer Pages v3.1 API Implementation Classes
sudo dnf install tomcat-jsp-3.1-api- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 4 dependencies
- 4 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-lib 10.1.55-1.fc45
Apache Tomcat - Core libraries for embedding Tomcat
sudo dnf install tomcat-lib- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 6 dependencies
- 2 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-servlet-6.0-api 10.1.55-1.fc45
Apache Tomcat Java Servlet v6.0 API Implementation Classes
sudo dnf install tomcat-servlet-6.0-api- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 1 dependencies
- 4 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-user-instance 10.1.55-1.fc45
Apache Tomcat - Tools for creating user-managed instances
sudo dnf install tomcat-user-instance- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Tomcat
dnf95%
tomcat-webapps 10.1.55-1.fc45
Apache Tomcat - Default ROOT web application
sudo dnf install tomcat-webapps- License: Apache-2.0
- Category: Unspecified
- Architecture: noarch
- Source Package: tomcat
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Tomcat
zypper95%
tomcat 9.0.118-1.1
Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API
sudo zypper install tomcat- License: Apache-2.0
- Category: Productivity/Networking/Web/Servers
- Architecture: noarch
- Source Package: tomcat
- 14 dependencies
- 5 provides
- normalized package name match
- Matched by: Tomcat
zypper95%
tomcat-admin-webapps 9.0.118-1.1
The host manager and manager web applications for Apache Tomcat
sudo zypper install tomcat-admin-webapps- License: Apache-2.0
- Category: Productivity/Networking/Web/Servers
- Architecture: noarch
- Source Package: tomcat
- 5 dependencies
- 3 provides
- normalized package name match
- Matched by: Tomcat
zypper95%
tomcat-docs-webapp 9.0.118-1.1
The "docs" web application for Apache Tomcat
sudo zypper install tomcat-docs-webapp- License: Apache-2.0
- Category: Productivity/Networking/Web/Servers
- Architecture: noarch
- Source Package: tomcat
- 4 dependencies
- 2 provides
- normalized package name match
- Matched by: Tomcat
zypper95%
tomcat-el-3_0-api 9.0.118-1.1
Expression Language v3.0 API
sudo zypper install tomcat-el-3_0-api- License: Apache-2.0
- Category: Development/Libraries/Java
- Architecture: noarch
- Source Package: tomcat
- 2 dependencies
- 5 provides
- normalized package name match
- Matched by: Tomcat
zypper95%
tomcat-embed 9.0.118-1.1
Libraries for Embedding Apache Tomcat
sudo zypper install tomcat-embed- License: Apache-2.0
- Category: Productivity/Networking/Web/Servers
- Architecture: noarch
- Source Package: tomcat
- 3 dependencies
- 4 provides
- normalized package name match
- Matched by: Tomcat
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment