# Install tomcat with Homebrew, chocolatey, dnf, Nix, scoop, zypper

Implementation of Java Servlet and JavaServer Pages. Version 11.0.23 via Homebrew; verified 2026-06-22.

## Install

```sh
sudo av install brew:tomcat
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install tomcat
```

  Evidence: local Homebrew formula metadata

### Linux

- dnf (92%):

```sh
sudo dnf install tomcat
```

  Evidence: Fedora Rawhide package metadata: tomcat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#tomcat
```

  Evidence: nixpkgs package indexes: tomcat from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- zypper (92%):

```sh
sudo zypper install tomcat
```

  Evidence: openSUSE Tumbleweed package metadata: tomcat from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install Tomcat
```

  Evidence: Chocolatey community package catalog: Tomcat from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','timberwinr'

- Scoop (92%):

```sh
scoop install extras/tomcat
```

  Evidence: Scoop official bucket manifest trees: bucket/tomcat.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:tomcat
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/tomcat>
- **Version:** 11.0.23
- **Source summary:** Implementation of Java Servlet and JavaServer Pages
- **Homepage:** <https://tomcat.apache.org/>
- **Repository:** <https://github.com/apache/tomcat>
- **Upstream docs:** <https://tomcat.apache.org/>
- **License:** Apache-2.0
- **Source archive:** <https://www.apache.org/dyn/closer.lua?path=tomcat/tomcat-11/v11.0.23/bin/apache-tomcat-11.0.23.tar.gz>
- **Last updated:** 2026-06-22T14:06:29-07:00
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- catalina (cli)
- catalina (alias)

## Dependencies

- openjdk

## Install behavior

- Post-install hook: not defined
- Service: declared
- Caveats: Configuration files: $HOMEBREW_PREFIX/etc/tomcat
- Bottle: available on all

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 11.0.23
- Package-manager updated: 2026-06-22
- Local data: ok
- Upstream repository: https://tomcat.apache.org/
- info: Release/tag comparison is only available for GitHub repositories.
## Project history and usage

Apache Tomcat is the long-running open source servlet and web application container for the Java/Jakarta ecosystem. The Apache site describes it as an implementation of Jakarta Servlet, Jakarta Pages, Expression Language, WebSocket, Annotations, and Authentication specifications, with Tomcat 10 and later aligned to Jakarta EE and Tomcat 9 and earlier aligned to Java EE.

### Project history

Apache's heritage page traces Tomcat to Sun Microsystems, where it began as the reference implementation for the Java Servlet and JavaServer Pages specifications. Sun donated the code base to the Apache Software Foundation in 1999, the first Apache Tomcat release was 3.0, and the project became a top-level Apache project in 2005 after leaving the Jakarta umbrella.

The official version matrix records the long major-version sequence from Tomcat 3.x through current supported Tomcat 9, 10.1, and 11. It also shows why Tomcat packaging is version-sensitive: each major line maps to particular Servlet/JSP/Jakarta Pages, EL, WebSocket, Authentication, Annotation, and Java runtime requirements.

### Adoption history

Apache states that Tomcat powers numerous large-scale, mission-critical web applications across diverse industries and organizations. Its adoption history is also visible in packaging: the input metadata lists Homebrew, Chocolatey, Fedora/DNF, Nix, Scoop, and openSUSE/Zypper names, reflecting Tomcat's role as a default installable Java web container across operating systems.

### How it is used

Tomcat is commonly installed to run WAR-style Java web applications, local development servers, CI smoke-test containers, and lightweight production servlet deployments. The `catalina` command is the package-manager-visible entry point, while administrators tune `$CATALINA_BASE/conf/server.xml`, `catalina.properties`, and `tomcat-users.xml`.

For maintainers, Tomcat's source workflow also matters: Apache documents `tomcat.git` as the repository containing the Tomcat source code, with active branches for main, 11.0.x, 10.1.x, and 9.0.x, and a GitHub web view. That branch structure is exactly what downstream package maintainers track when choosing stable formula versions.

### Why package nerds care

Tomcat is package-nerd significant because it is both an application server and an ecosystem compatibility boundary. A package name like `tomcat`, `tomcat@10`, or `tomcat10` carries real meaning about Java version requirements, Java EE versus Jakarta EE APIs, servlet specification versions, config-file compatibility, and how much migration work an application needs.

### Timeline

- 1999: Sun donated the Tomcat code base to the Apache Software Foundation; the first Apache Tomcat release was 3.0.
- 2005: Tomcat became a top-level Apache project.
- 2022: Tomcat 10.0.x reached end of life on 2022-10-31.
- 2026: Apache lists Tomcat 11.0.x, 10.1.x, and 9.0.x as currently supported branches.

### Related projects

- Official Apache source pages list related Tomcat components including Tomcat Connectors, Tomcat Native, Taglibs, the Tomcat Maven Plugin, and the Apache Tomcat migration tool for Jakarta EE.

### Sources

- <https://tomcat.apache.org/>
- <https://tomcat.apache.org/heritage.html>
- <https://tomcat.apache.org/source.html>
- <https://tomcat.apache.org/whichversion.html>
- source_facts.package-manager


## Security Notes

broad file, network, media, or database tool signal. formula declares a Homebrew service.

- **Geiger risk:** orange / medium
- broad file, network, media, or database tool signal
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: $CATALINA_BASE/conf/server.xml, $CATALINA_BASE/conf/catalina.properties, $CATALINA_BASE/conf/tomcat-users.xml

## Credential files

- Unix: $CATALINA_BASE/conf/tomcat-users.xml
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** tomcat
- **Aliases:** tomcat@11
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Nix - tomcat: normalized package name match | nixpkgs package indexes: tomcat from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- dnf - tomcat - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Servlet and JSP engine for system-wide deployment | http://tomcat.apache.org/
- dnf - tomcat-admin-webapps - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-admin-webapps from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Administrative web applications | http://tomcat.apache.org/
- dnf - tomcat-common - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-common from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Common files for Tomcat packages | http://tomcat.apache.org/
- dnf - tomcat-docs-webapp - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-docs-webapp from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Online documentation web application | http://tomcat.apache.org/
- dnf - tomcat-el-5.0-api - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-el-5.0-api from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat Expression Language v5.0 API Implementation Classes | http://tomcat.apache.org/
- dnf - tomcat-jsp-3.1-api - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-jsp-3.1-api from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat JavaServer Pages v3.1 API Implementation Classes | http://tomcat.apache.org/
- dnf - tomcat-lib - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-lib from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Core libraries for embedding Tomcat | http://tomcat.apache.org/
- dnf - tomcat-servlet-6.0-api - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-servlet-6.0-api from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat Java Servlet v6.0 API Implementation Classes | http://tomcat.apache.org/
- dnf - tomcat-user-instance - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-user-instance from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Tools for creating user-managed instances | http://tomcat.apache.org/
- dnf - tomcat-webapps - 10.1.55-1.fc45: normalized package name match | Fedora Rawhide package metadata: tomcat-webapps from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Apache Tomcat - Default ROOT web application | http://tomcat.apache.org/
- zypper - tomcat - 9.0.118-1.1: normalized package name match | openSUSE Tumbleweed package metadata: tomcat from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Apache Servlet/JSP/EL Engine, RI for Servlet 4.0/JSP 2.3/EL 3.0 API | https://tomcat.apache.org
- zypper - tomcat-admin-webapps - 9.0.118-1.1: normalized package name match | openSUSE Tumbleweed package metadata: tomcat-admin-webapps from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | The host manager and manager web applications for Apache Tomcat | https://tomcat.apache.org
- zypper - tomcat-docs-webapp - 9.0.118-1.1: normalized package name match | openSUSE Tumbleweed package metadata: tomcat-docs-webapp from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | The "docs" web application for Apache Tomcat | https://tomcat.apache.org
- zypper - tomcat-el-3_0-api - 9.0.118-1.1: normalized package name match | openSUSE Tumbleweed package metadata: tomcat-el-3_0-api from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Expression Language v3.0 API | https://tomcat.apache.org
- zypper - tomcat-embed - 9.0.118-1.1: normalized package name match | openSUSE Tumbleweed package metadata: tomcat-embed from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Libraries for Embedding Apache Tomcat | https://tomcat.apache.org


## Related links

- [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata.
- [openjdk](https://www.automicvault.com/pkg/brew/openjdk/) - Runtime dependency declared by Homebrew.
- [tomcat@10](https://www.automicvault.com/pkg/brew/tomcat-10/) - Package name indicates the same formula family.
- [tomcat@9](https://www.automicvault.com/pkg/brew/tomcat-9/) - Package name indicates the same formula family.
- [tomee-plume](https://www.automicvault.com/pkg/brew/tomee-plume/) - Shares av.db curated category or tags: application-server, application-servers, cli, cloud-infrastructure, jakarta-ee.
- [openliberty-webprofile8](https://www.automicvault.com/pkg/brew/openliberty-webprofile8/) - Shares av.db curated category or tags: application-server, cli, cloud-infrastructure, jakarta-ee, java.
- [openliberty-webprofile9](https://www.automicvault.com/pkg/brew/openliberty-webprofile9/) - Shares av.db curated category or tags: application-server, cli, cloud-infrastructure, jakarta-ee, java.
- [openliberty-jakartaee8](https://www.automicvault.com/pkg/brew/openliberty-jakartaee8/) - Shares av.db curated category or tags: application-server, cli, cloud-infrastructure, java.
- [openliberty-jakartaee9](https://www.automicvault.com/pkg/brew/openliberty-jakartaee9/) - Shares av.db curated category or tags: application-server, cli, cloud-infrastructure, java.
- [openliberty-microprofile4](https://www.automicvault.com/pkg/brew/openliberty-microprofile4/) - Shares av.db curated category or tags: application-server, cli, cloud-infrastructure, java.
- [denominator](https://www.automicvault.com/pkg/brew/denominator/) - Shares av.db curated category or tags: cli, cloud-infrastructure, java.
- [passenger](https://www.automicvault.com/pkg/brew/passenger/) - Shares av.db curated category or tags: application-server, cli, cloud-infrastructure, web-server.

## Combined YAML source

View the package source record on GitHub. [combined/tomcat.yml](https://github.com/automic-vault/db/blob/main/combined/tomcat.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
