Download

We recommend using the latest Knot Resolver version. Our upstream releases undergo extensive automated testing and are suitable for production.

Packages available in your distribution's may be outdated. Follow the instructions below to obtain the latest Knot Resolver version for your distribution.

Please note that we occasionally release a major version which may require manual upgrade. Please subscribe to our knot-resolver-announce mailing list to be notified of new releases, including upgrade instructions if necessary.

Debian / Ubuntu

Please use our official repos for Debian and Ubuntu. Debian unstable and testing usually contain latest Knot Resolver version.

After that apt will keep updating knot-resolver 5.x packages from our repositories.

If you used our older repo until now, you may want to also uninstall the helper package by apt purge knot-resolver-release.

Enterprise Linux 7, 8, 9

Use Fedora EPEL.

yum install -y epel-release
yum install -y knot-resolver

Package updates are delayed by about one week after release. To obtain the latest released version early, you can use the epel-testing repository.

yum install -y --enablerepo epel-testing knot-resolver

Fedora

Use the distribution's repositories where we maintain up-to-date packages.

dnf install -y knot-resolver

Package releases are delayed by about a week. To obtain the latest released version early, you can use the updates-testing repository.

dnf install -y --enablerepo updates-testing knot-resolver

openSUSE

Just add our COPR repository, based on the variant of your openSUSE:

# Leap 15.5
zypper addrepo https://copr.fedorainfracloud.org/coprs/g/cznic/knot-resolver5/repo/opensuse-leap-15.5/group_cznic-knot-resolver5-opensuse-leap-15.5.repo

# Tumbleweed
zypper addrepo https://copr.fedorainfracloud.org/coprs/g/cznic/knot-resolver5/repo/opensuse-tumbleweed/group_cznic-knot-resolver5-opensuse-tumbleweed.repo

Then you can install as usual with

zypper install knot-resolver

Arch Linux

pacman -S knot-resolver

Source code

New releases are signed with one of our developer PGP keys:

pub   rsa4096 2022-03-07 [SC] [expires: 2026-03-03]
      3057EE9A448F362D74205A779AB120DA0A76F6DE
uid           Ales Mrazek <ales.mrazek@nic.cz>

pub   rsa4096 2016-10-16 [SCA] [expires: 2027-11-11]
      B6006460B60A80E782062449E747DF1F9575A3AA
uid           Vladimír Čunát (work) <vladimir.cunat@nic.cz>

pub   ed25519 2024-01-31 [SC] [expires: 2027-01-30]
      6DC2B0CB5935EA7A39614AA732B22D20C9B4E680
uid           Oto Šťáva (work CZ.NIC) <oto.stava@nic.cz>

Older releases may be signed using the following keys:

See the Building from sources for instructions how to build from sources.

Docker image

This is simple way to experiment and does not require any dependencies or system modifications. The images are not designed for production use. See the build page hub.docker.com/r/cznic/knot-resolver for more information and options.