# cri-tools を Homebrew, apk, dnf, Nix, zypper, pacman でインストール

cri-tools のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:cri-tools
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install cri-tools
```

  証拠: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add cri-tools
```

  証拠: Alpine Linux edge package indexes: cri-tools from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install cri-tools
```

  証拠: Fedora Rawhide package metadata: cri-tools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#cri-tools
```

  証拠: nixpkgs package indexes: pkgs/by-name/cr/cri-tools/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install cri-tools
```

  証拠: openSUSE Tumbleweed package metadata: cri-tools from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

- pacman (92%):

```sh
sudo pacman -S crictl
```

  証拠: Arch Linux sync databases: crictl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## パッケージ情報

- **パッケージキー:** brew:cri-tools
- **パッケージマネージャ:** Homebrew
- **バージョン:** 1.36.0
- **ソース概要:** CLI and validation tools for Kubelet Container Runtime Interface (CRI)
- **ホームページ:** <https://github.com/kubernetes-sigs/cri-tools>
- **リポジトリ:** <https://github.com/kubernetes-sigs/cri-tools>
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- crictl (エイリアス)
- critest (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 1.36.0
## プロジェクトの歴史と使われ方

cri-tools is the Kubernetes SIG Node companion project for Container Runtime Interface debugging and conformance tooling. It packages crictl for direct CRI interaction and critest for validation tests, making it useful to runtime implementers, cluster operators, and distribution maintainers who need a tool outside the kubelet itself.

### プロジェクトの歴史

The project grew around Kubernetes' Container Runtime Interface, the gRPC plugin interface that lets kubelet work with different container runtimes without recompiling cluster components. Its README describes the scope narrowly: debugging and validation tools for kubelet CRI, not a user-facing container runtime or a replacement orchestration layer.

The compatibility matrix ties cri-tools minor versions to Kubernetes minor versions, with v0.1 aligned to Kubernetes 1.7 and later 1.x releases tracking Kubernetes release branches. That version coupling is central to how distributions package it, because CRI features can diverge between Kubernetes and cri-tools minor versions.

### 採用の歴史

crictl and critest became general-availability tools in the v1.11 era according to their official docs. The project is maintained under kubernetes-sigs and points users to Kubernetes SIG Node community channels, which made it part of the normal Kubernetes runtime-development workflow rather than a third-party diagnostic utility.

### 使われ方

crictl is used to inspect, pull, run, stop, and debug containers and pod sandboxes through CRI-compatible runtimes such as containerd, CRI-O, and cri-dockerd. critest is used to verify that a runtime's CRI server implementation conforms to Kubernetes expectations without running full Kubernetes end-to-end tests.

### パッケージ好きにとっての重要性

For package maintainers, cri-tools matters because it is version-skew sensitive: the official README recommends matching the cri-tools and Kubernetes minor versions. It is also a canonical example of a Kubernetes-adjacent package where the CLI binary is operationally useful but its version policy follows a larger platform's release cadence.

### タイムライン

- 2017: v0.1 release published for the Kubernetes 1.7 compatibility line.
- 2018: crictl and CRI validation testing documented as GA since v1.11.0.
- 2020s: Project continues to follow Kubernetes minor release lines and ships crictl and critest archives from GitHub releases.

### Related projects

- Kubernetes kubelet and cri-api define the runtime interface that cri-tools exercises.
- containerd, CRI-O, and cri-dockerd are common CRI-compatible runtimes used with crictl.

### ソース

- <https://github.com/kubernetes-sigs/cri-tools#readme>
- <https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md>
- <https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/validation.md>
- <https://kubernetes.io/docs/concepts/containers/cri/>
- <https://github.com/kubernetes-sigs/cri-tools/releases/tag/v0.1>


## セキュリティノート

generalized runtime or code generation signal. infrastructure mutation or orchestration signal.

- **Geiger リスク:** orange / 中
- generalized runtime or code generation signal
- infrastructure mutation or orchestration signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/crictl.yaml
- Windows: %USERPROFILE%\.crictl\crictl.yaml
## 他のパッケージマネージャ記録

- Nix - cri-tools: normalized package name match | nixpkgs package indexes: pkgs/by-name/cr/cri-tools/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - cri-tools - 1.36.0-r2: normalized package name match | Alpine Linux edge package indexes: cri-tools from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | CLI tool for Kubelet Container Runtime Interface (CRI) | https://github.com/kubernetes-sigs/cri-tools
- dnf - cri-tools - 1.29.0-13.fc44: normalized package name match | Fedora Rawhide package metadata: cri-tools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | CLI and validation tools for Container Runtime Interface | https://github.com/kubernetes-sigs/cri-tools
- dnf - cri-tools1.33 - 1.33.0-11.fc45: normalized package name match | Fedora Rawhide package metadata: cri-tools1.33 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | CLI and validation tools for Kubelet Container Runtime Interface (CRI) | https://github.com/kubernetes-sigs/cri-tools
- dnf - cri-tools1.34 - 1.34.0-6.fc45: normalized package name match | Fedora Rawhide package metadata: cri-tools1.34 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | CLI and validation tools for Kubelet Container Runtime Interface (CRI) | https://github.com/kubernetes-sigs/cri-tools
- dnf - cri-tools1.35 - 1.35.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: cri-tools1.35 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | CLI and validation tools for Kubelet Container Runtime Interface (CRI) | https://github.com/kubernetes-sigs/cri-tools
- dnf - cri-tools1.36 - 1.36.0-4.fc45: normalized package name match | Fedora Rawhide package metadata: cri-tools1.36 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | CLI and validation tools for Kubelet Container Runtime Interface (CRI) | https://github.com/kubernetes-sigs/cri-tools
- zypper - cri-tools - 1.36.0-1.4: normalized package name match | openSUSE Tumbleweed package metadata: cri-tools from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | CLI and validation tools for Kubelet Container Runtime Interface | https://github.com/kubernetes-sigs/cri-tools
- pacman - crictl - 1.36.0-1: installed executable or alias match | Arch Linux sync databases: crictl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A CLI for CRI-compatible container runtimes | https://github.com/kubernetes-sigs/cri-tools
- pacman - critest - 1.36.0-1: installed executable or alias match | Arch Linux sync databases: critest from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A benchmarking CLI for CRI-compatible container runtimes | https://github.com/kubernetes-sigs/cri-tools


## Combined YAML source

View the package source record on GitHub. [combined/cri-tools.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cri-tools.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph