# Installer knock avec Homebrew, apk, dnf, MacPorts, Nix, zypper, apt, pacman

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de knock pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:knock
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install knock
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install knock
```

  Preuve: MacPorts ports tree: net/knock/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add knock
```

  Preuve: Alpine Linux edge package indexes: knock from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install knock
```

  Preuve: Fedora Rawhide package metadata: knock from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#knock
```

  Preuve: nixpkgs package indexes: pkgs/by-name/kn/knock/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install knock
```

  Preuve: openSUSE Tumbleweed package metadata: knock from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

- Debian apt (92%):

```sh
sudo apt install knockd
```

  Preuve: Debian stable package indexes: knockd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- pacman (92%):

```sh
sudo pacman -S knockd
```

  Preuve: Arch Linux sync databases: knockd from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## Faits du paquet

- **Clé du paquet:** brew:knock
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.8
- **Résumé source:** Port-knock server
- **Page d'accueil:** <https://github.com/jvinet/knock>
- **Dépôt:** <https://github.com/jvinet/knock>
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- knock (alias)
- knock_helper_ipt.sh (alias)
- knockd (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.8
## Historique du projet et usages

knock is Judd Vinet's port-knocking server and client. It watches network traffic with libpcap for a configured sequence of port hits and runs commands, commonly firewall changes, when the sequence matches.

### Historique du projet

The README carries a 2004 copyright notice and describes the core design that still defines the package: closed ports can receive a secret sequence because knockd sniffs link-layer traffic rather than listening on those ports. The bundled ChangeLog lists 0.1 as the initial release and shows later work adding TCP flag handling, reload behavior, timeouts, kernel-space BPF filtering, one-time sequences, interface selection, and IPv6 support.

Version 0.8 was published on 2021-04-24 with multiple fixes and IPv6 support. The GitHub repository retained a small C codebase, an example `knockd.conf`, and manpage documentation rather than growing into a larger access-control framework.

### Historique d'adoption

knock spread through Unix-like distributions because it solved a specific sysadmin problem with a small daemon and client. Package names vary between `knock`, `knockd`, and distribution-specific formula names, but the underlying model stayed close to the original README example: a knock sequence opens SSH, and another sequence closes it.

### Modes d'utilisation

A server runs `knockd` with a configuration file such as `/etc/knockd.conf`; a client runs `knock` to send TCP or UDP packets to the configured sequence. Commands usually add or remove firewall rules, so the tool is operationally simple but security-sensitive: the sequence should be treated like a shared secret and firewall commands must be written carefully.

### Pourquoi les passionnés de paquets s'y intéressent

knock is a memorable package because it embodies a whole security pattern in a tiny Unix daemon. It is also a reminder of the early-2000s sysadmin style: libpcap, iptables commands, config files, and a tiny client were enough to make a practical layer around SSH exposure.

### Chronologie

- 2004: README copyright identifies Judd Vinet's original project era.
- 0.1: ChangeLog records the initial release.
- 0.3: ChangeLog added PPP support, command timeout directives, SIGHUP config reloads, and per-port protocols.
- 0.5: ChangeLog added one-time sequences, interface selection, BPF filtering, and security fixes.
- 0.7: ChangeLog documented the target directive and consolidated OS-specific networking code.
- 2021-04-24: v0.8 release published with fixes and IPv6 support.

### Related projects

- knock is related to other port-knocking and single-packet-authorization tools, firewall managers such as iptables, packet crafting tools such as sendip, and SSH hardening workflows.

### Sources

- <https://github.com/jvinet/knock>
- <https://github.com/jvinet/knock/blob/master/ChangeLog>
- <https://github.com/jvinet/knock/releases/tag/v0.8>
- <https://raw.githubusercontent.com/jvinet/knock/master/knockd.conf>


## Notes de sécurité

broad file, network, media, or database tool signal.

- **Risque Geiger:** blue / moyen
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/knockd.conf
## Autres enregistrements de gestionnaires de paquets

- Nix - knock: normalized package name match | nixpkgs package indexes: pkgs/by-name/kn/knock/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - knock - 0.8.2-r2: normalized package name match | Alpine Linux edge package indexes: knock from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A simple port-knocking daemon | https://github.com/TDFKAOlli/knock
- apk - knock-doc - 0.8.2-r2: normalized package name match | Alpine Linux edge package indexes: knock-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A simple port-knocking daemon (documentation) | https://github.com/TDFKAOlli/knock
- apk - knock-openrc - 0.8.2-r2: normalized package name match | Alpine Linux edge package indexes: knock-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | A simple port-knocking daemon (OpenRC init scripts) | https://github.com/TDFKAOlli/knock
- dnf - knock - 0.8-14.fc45: normalized package name match | Fedora Rawhide package metadata: knock from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A port-knocking server/client | http://www.zeroflux.org/projects/knock
- dnf - knock-server - 0.8-14.fc45: normalized package name match | Fedora Rawhide package metadata: knock-server from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A port-knocking server/client | http://www.zeroflux.org/projects/knock
- zypper - knock - 0.8-4.6: normalized package name match | openSUSE Tumbleweed package metadata: knock from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A Port-Knocking Client | http://www.zeroflux.org/knock/
- zypper - knockd - 0.8-4.6: normalized package name match | openSUSE Tumbleweed package metadata: knockd from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A port-knocking server | http://www.zeroflux.org/knock/
- MacPorts - knock: normalized package name match | MacPorts ports tree: net/knock/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Debian apt - knockd - 0.8-2+b6: installed executable or alias match | Debian stable package indexes: knockd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | small port-knock daemon | http://www.zeroflux.org/projects/knock
- Ubuntu apt - knockd - 0.8-2build2: installed executable or alias match | Ubuntu 24.04 LTS package indexes: knockd from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | small port-knock daemon | http://www.zeroflux.org/projects/knock
- pacman - knockd - 0.8-2: installed executable or alias match | Arch Linux sync databases: knockd from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A simple port-knocking daemon | https://github.com/jvinet/knock


## Combined YAML source

View the package source record on GitHub. [combined/knock.yml](https://github.com/mxcl/pkgdb/blob/main/combined/knock.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph