macOS
Homebrewverified ยท 100%
brew install dropbearprovider-native install command
brew / rank 4412
Install dropbear with Homebrew
Small SSH server/client for POSIX-based system. Version 2026.94 via Homebrew; verified 2026-07-23.
install
Additional install commands
overview
Package summary
Small SSH server/client for POSIX-based system
Project links
Commands and aliases
- dbclient
- dropbear
- dropbearconvert
- dropbearkey
history
Project history and usage
Dropbear is a compact SSH server and client suite for POSIX systems, best known in package-manager culture as the SSH implementation people reach for when OpenSSH is too large or too operationally heavy. It provides `dropbear` for the server, `dbclient` for the client, and key/conversion utilities in a deliberately small package.
Project history
Dropbear development started in October 2002, with the first public release, 0.28, appearing on April 6, 2003. The early changelog shows the project quickly adding practical SSH server features such as syslog support, X11 forwarding, agent forwarding, local TCP forwarding, OpenSSH key conversion, and Debian packaging support during 2003.
The project has remained active for decades rather than becoming a frozen embedded artifact. Its current changelog includes 2026 releases with security fixes, scp hardening, algorithm-query support, forwarding improvements, and behavior changes made in response to modern SSH and libc realities.
Adoption history
Dropbear was adopted heavily by embedded Linux distributions, rescue environments, routers, initramfs setups, and minimal systems because it can provide SSH access with a much smaller footprint than a full OpenSSH deployment. Its package availability across Homebrew, Debian, Ubuntu, Fedora, Arch, Alpine, and Nix reflects that cross-platform utility.
How it is used
Typical package usage includes running `dropbear` as a lightweight SSH daemon, using `dbclient` as a small SSH client, generating host keys with `dropbearkey`, and converting keys with `dropbearconvert`. The documented host-key paths and OpenSSH-compatible authorized_keys behavior make it especially useful where users need interoperable SSH without installing the full OpenSSH stack.
Why package nerds care
Dropbear is package-nerd significant because it embodies the classic small-tools tradeoff: enough SSH compatibility for real deployments, intentionally less bulk than OpenSSH, and build-time options for constrained systems. It is also one of the few packages whose value is obvious both to embedded firmware builders and to people maintaining recovery shells on ordinary Unix systems.
Timeline
- 2002: Development starts in October.
- 2003: Dropbear 0.28 is released as the initial public release.
- 2003: `dropbearconvert`, Debian packaging support, X11 forwarding, agent forwarding, and early TCP forwarding appear in subsequent 0.3x releases.
- 2026: Releases 2026.90 and 2026.91 include security, scp, forwarding, and compatibility fixes.
Related projects
- OpenSSH is the main compatibility reference and the larger alternative implementation.
- LibTomCrypt and LibTomMath were part of Dropbear's early cryptographic/math dependency story.
- BusyBox-style and embedded Linux systems are common deployment neighbors because they share the same small-footprint design pressure.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for dropbear. Nucleus package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.ssh/authorized_keys~/.ssh/id_dropbear/etc/dropbear/dropbear_rsa_host_key/etc/dropbear/dropbear_dss_host_key/etc/dropbear/dropbear_ecdsa_host_key/etc/dropbear/dropbear_ed25519_host_key
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
dbclient | executable | indexed executable | Discovered from the local executable index. |
dropbear | executable | indexed executable | Discovered from the local executable index. |
dropbearconvert | executable | indexed executable | Discovered from the local executable index. |
dropbearkey | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version2026.94
manager updated2026-07-23
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:dropbear |
|---|---|
| Version | 2026.94 |
| Package manager | Homebrew |
| Homepage | https://matt.ucc.asn.au/dropbear/dropbear.html |
| Repository | https://github.com/mkj/dropbear |
| Last updated | 2026-07-23T16:36:51Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation