# keyutils を Homebrew, apk, apt, dnf, Nix, pacman, zypper でインストール

keyutils のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:keyutils
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install keyutils
```

  証拠: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add keyutils
```

  証拠: Alpine Linux edge package indexes: keyutils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install keyutils
```

  証拠: Debian stable package indexes: keyutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install keyutils
```

  証拠: Fedora Rawhide package metadata: keyutils from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#keyutils
```

  証拠: nixpkgs package indexes: pkgs/by-name/ke/keyutils/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S keyutils
```

  証拠: Arch Linux sync databases: keyutils from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- zypper (92%):

```sh
sudo zypper install keyutils
```

  証拠: openSUSE Tumbleweed package metadata: keyutils from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## パッケージ情報

- **パッケージキー:** brew:keyutils
- **パッケージマネージャ:** Homebrew
- **バージョン:** 1.6.3
- **ソース概要:** Linux key management utilities
- **ホームページ:** <https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git>
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- key.dns_resolver (エイリアス)
- keyctl (エイリアス)
- request-key (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 1.6.3
## プロジェクトの歴史と使われ方

keyutils is the user-space utility and library package for the Linux kernel key retention service. It provides tools such as keyctl, request-key, and key.dns_resolver, plus libkeyutils for programs that need to call the kernel key-management interfaces.

### プロジェクトの歴史

David Howells created the keyutils package in July 2005, shortly after the Linux key-management facility became a user-visible subsystem. The package grew from command-line control utilities into a split utility, runtime-library, and development-header package with manual pages and request-key integration.

The keyutils spec changelog shows a long maintenance arc tied to kernel capabilities: version 1.0 in November 2005 renamed the library/header to keyutils and introduced library symbol versioning; version 1.3 in February 2010 exposed security-context and parent-session-keyring operations; version 1.5 in March 2011 added KEYCTL_REJECT, KEYCTL_INSTANTIATE_IOV, DNS lookup generalization, and more keyctl commands; version 1.6 in November 2018 added public-key operations that required Linux 4.20.

### 採用の歴史

keyutils is packaged broadly because it is glue for Linux authentication, filesystem, DNS, and crypto-adjacent workflows rather than an optional application. The batch metadata records packages in Alpine, Homebrew, Debian, Fedora, Nix, Arch, Ubuntu, and openSUSE/Zypper ecosystems.

The Linux kernel documentation describes keyrings as a kernel service for caching cryptographic keys, authentication tokens, cross-domain user mappings, and related data for filesystems and kernel services. keyutils is the standard user-space companion for inspecting and operating on that facility.

### 使われ方

Administrators and system services use keyctl to add, link, search, read, invalidate, and manage keys and keyrings. request-key is invoked by the kernel-side request-key callback path when a key must be instantiated in user space, and key.dns_resolver supports DNS-related upcalls.

### パッケージ好きにとっての重要性

keyutils is a classic small package with outsized system importance: it exposes kernel ABI surfaces, ships a shared library and manual pages, and changes as the Linux key subsystem adds capabilities. It is the kind of package that may be invisible on a workstation until Kerberos, encrypted filesystems, DNS resolver keys, module signing, or request-key upcalls need it.

### タイムライン

- 2005-07-12: keyutils package creation.
- 2005-11-28: version 1.0 renamed the library and header to keyutils and added symbol versioning.
- 2011-03-10: version 1.5 added newer keyctl functionality including KEYCTL_REJECT and KEYCTL_INSTANTIATE_IOV.
- 2018-11-13: version 1.6 added public-key operations requiring Linux 4.20.
- 2020-07-07: version 1.6.3 adjusted key change notifications to use pipe2(O_NOTIFICATION_PIPE).

### Related projects

- The Linux kernel key retention service is the kernel-side subsystem. Linux man-pages documents many of the system-call interfaces, while request-key and key.dns_resolver are user-space helpers shipped in keyutils.

### ソース

- <https://formulae.brew.sh/formula/keyutils>
- <https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git/plain/README>
- <https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git/plain/keyutils.spec>
- <https://www.kernel.org/doc/html/latest/security/keys/core.html>


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: /etc/request-key.conf, /etc/request-key.d/*.conf, /etc/key.dns_resolver.conf
## 他のパッケージマネージャ記録

- Debian apt - keyutils - 1.6.3-6: normalized package name match | Debian stable package indexes: keyutils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Linux Key Management Utilities | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- Debian apt - libkeyutils-dev - 1.6.3-6: normalized package name match | Debian stable package indexes: libkeyutils-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Linux Key Management Utilities (development) | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- Debian apt - libkeyutils1 - 1.6.3-6: normalized package name match | Debian stable package indexes: libkeyutils1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Linux Key Management Utilities (library) | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- Nix - keyutils: normalized package name match | nixpkgs package indexes: pkgs/by-name/ke/keyutils/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - keyutils - 1.6.3-3build1: normalized package name match | Ubuntu 24.04 LTS package indexes: keyutils from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Linux Key Management Utilities | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- Ubuntu apt - libkeyutils-dev - 1.6.3-3build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libkeyutils-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Linux Key Management Utilities (development) | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- Ubuntu apt - libkeyutils1 - 1.6.3-3build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libkeyutils1 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Linux Key Management Utilities (library) | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- apk - keyutils - 1.6.3-r4: normalized package name match | Alpine Linux edge package indexes: keyutils from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Linux Key Management Utilities | https://people.redhat.com/~dhowells/keyutils/
- apk - keyutils-dev - 1.6.3-r4: normalized package name match | Alpine Linux edge package indexes: keyutils-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Linux Key Management Utilities (development files) | https://people.redhat.com/~dhowells/keyutils/
- apk - keyutils-doc - 1.6.3-r4: normalized package name match | Alpine Linux edge package indexes: keyutils-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Linux Key Management Utilities (documentation) | https://people.redhat.com/~dhowells/keyutils/
- apk - keyutils-libs - 1.6.3-r4: normalized package name match | Alpine Linux edge package indexes: keyutils-libs from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Key utilities library | https://people.redhat.com/~dhowells/keyutils/
- dnf - keyutils - 1.6.3-8.fc45: normalized package name match | Fedora Rawhide package metadata: keyutils from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Linux Key Management Utilities | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- dnf - keyutils-libs - 1.6.3-8.fc45: normalized package name match | Fedora Rawhide package metadata: keyutils-libs from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Key utilities library | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- dnf - keyutils-libs-devel - 1.6.3-8.fc45: normalized package name match | Fedora Rawhide package metadata: keyutils-libs-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development package for building Linux key management utilities | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git
- pacman - keyutils - 1.6.3-4: normalized package name match | Arch Linux sync databases: keyutils from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz | Linux Key Management Utilities | https://www.kernel.org/
- zypper - keyutils - 1.6.3-7.9: normalized package name match | openSUSE Tumbleweed package metadata: keyutils from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Linux Key Management Utilities | https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git/


## Combined YAML source

View the package source record on GitHub. [combined/keyutils.yml](https://github.com/mxcl/pkgdb/blob/main/combined/keyutils.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
